Task: attack_reconstruction (flaws_cloudtrail)
Prompt: Review the CloudTrail records for a session-credentialed principal that moves from storage discovery into object access against an S3 bucket. Identify the responsible principal, the applicable MITRE ATT&CK technique, the supporting CloudTrail record_ids for each phase of the chain you reconstruct, and the impacted AWS assets. Return a JSON object matching the AttackReconstructionAnswer schema. Use principal.arn for primary_actor, the MITRE ATT&CK ID (e.g. T1530) for technique, and group the supporting CloudTrail record_ids by attack phase. List the AWS asset identifiers (bucket names, role/user names, trail names, ARNs) the attack acted on as impacted_assets.
Answer schema: attack_reconstruction_answer

CloudTrail records:
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "84a3f627-8429-4680-a7ad-8fe044eb5196", "record_id": "flaws_cloudtrail:0000000:84a3f627-8429-4680-a7ad-8fe044eb5196", "row_index": 0, "timestamp": "2019-07-08T12:48:15Z", "event_type": "CopySnapshot", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "251.209.251.231", "user_agent": "aws-cli/1.16.193 Python/2.7.5 Linux/3.10.0-957.21.3.el7.x86_64 botocore/1.12.183", "aws_region": "us-west-1"}, "resource_arns": [], "raw_record_size_bytes": 1433, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "84a3f627-8429-4680-a7ad-8fe044eb5196", "eventTime": "2019-07-08T12:48:15Z", "eventName": "CopySnapshot", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "251.209.251.231", "userAgent": "aws-cli/1.16.193 Python/2.7.5 Linux/3.10.0-957.21.3.el7.x86_64 botocore/1.12.183", "awsRegion": "us-west-1", "errorCode": "Client.UnauthorizedOperation", "errorMessage": "You are not authorized to perform this operation.", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"sourceRegion": "us-west-2", "sourceSnapshotId": "snap-83d15d668fb2941db", "description": "This is my copied snapshot.", "destinationRegion": "us-west-1", "presignedUrl": "https://ec2.us-west-2.amazonaws.com/?Action=CopySnapshot&SourceRegion=us-west-2&Version=2016-11-15&Description=This%20is%20my%20copied%20snapshot.&SourceSnapshotId=snap-83d15d668fb2941db&DestinationRegion=us-west-1&X-Amz-Algorithm=AWS4-HMAC-SHA256&X-Amz-Expires=3600&X-Amz-Credential=AKIA01U43UX3RBRDXF4Q%2F414814%2Fus-west-2%2Fec2%2Faws4_request&X-Amz-SignedHeaders=host&X-Amz-Date=414814T47023Z&X-Amz-Signature=115f1d52da6509c85e75c7244373d52e19935155e73336e404508eef4b933720"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "324d19d5-e9b7-4b8e-91f4-a9f95d189ce1", "record_id": "flaws_cloudtrail:0000001:324d19d5-e9b7-4b8e-91f4-a9f95d189ce1", "row_index": 1, "timestamp": "2019-07-08T12:50:01Z", "event_type": "CopySnapshot", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "251.209.251.231", "user_agent": "aws-cli/1.16.193 Python/2.7.5 Linux/3.10.0-957.21.3.el7.x86_64 botocore/1.12.183", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 1435, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "324d19d5-e9b7-4b8e-91f4-a9f95d189ce1", "eventTime": "2019-07-08T12:50:01Z", "eventName": "CopySnapshot", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "251.209.251.231", "userAgent": "aws-cli/1.16.193 Python/2.7.5 Linux/3.10.0-957.21.3.el7.x86_64 botocore/1.12.183", "awsRegion": "us-east-1", "errorCode": "Client.UnauthorizedOperation", "errorMessage": "You are not authorized to perform this operation.", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"sourceRegion": "us-west-2", "sourceSnapshotId": "snap-83d15d668fb2941db", "description": "This is my copied snapshot.", "destinationRegion": "us-east-1", "presignedUrl": "https://ec2.us-west-2.amazonaws.com/?SourceRegion=us-west-2&SourceSnapshotId=snap-83d15d668fb2941db&Version=2016-11-15&Description=This%20is%20my%20copied%20snapshot.&Action=CopySnapshot&DestinationRegion=us-east-1&X-Amz-Algorithm=AWS4-HMAC-SHA256&X-Amz-Expires=3600&X-Amz-Credential=AKIA01U43UX3RBRDXF4Q%2F414814%2Fus-west-2%2Fec2%2Faws4_request&X-Amz-SignedHeaders=host&X-Amz-Date=414814T35467Z&X-Amz-Signature=c23b2a7297e9daa4f1f56316d4637fa185ac8bdd0420cf45b9fd0f6bb35f325b"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "324d19d5-e9b7-4b8e-91f4-a9f95d189ce1", "record_id": "flaws_cloudtrail:0000002:324d19d5-e9b7-4b8e-91f4-a9f95d189ce1", "row_index": 2, "timestamp": "2019-07-08T12:50:01Z", "event_type": "CopySnapshot", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "251.209.251.231", "user_agent": "aws-cli/1.16.193 Python/2.7.5 Linux/3.10.0-957.21.3.el7.x86_64 botocore/1.12.183", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 1435, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "324d19d5-e9b7-4b8e-91f4-a9f95d189ce1", "eventTime": "2019-07-08T12:50:01Z", "eventName": "CopySnapshot", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "251.209.251.231", "userAgent": "aws-cli/1.16.193 Python/2.7.5 Linux/3.10.0-957.21.3.el7.x86_64 botocore/1.12.183", "awsRegion": "us-east-1", "errorCode": "Client.UnauthorizedOperation", "errorMessage": "You are not authorized to perform this operation.", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"sourceRegion": "us-west-2", "sourceSnapshotId": "snap-83d15d668fb2941db", "description": "This is my copied snapshot.", "destinationRegion": "us-east-1", "presignedUrl": "https://ec2.us-west-2.amazonaws.com/?SourceRegion=us-west-2&SourceSnapshotId=snap-83d15d668fb2941db&Version=2016-11-15&Description=This%20is%20my%20copied%20snapshot.&Action=CopySnapshot&DestinationRegion=us-east-1&X-Amz-Algorithm=AWS4-HMAC-SHA256&X-Amz-Expires=3600&X-Amz-Credential=AKIA01U43UX3RBRDXF4Q%2F414814%2Fus-west-2%2Fec2%2Faws4_request&X-Amz-SignedHeaders=host&X-Amz-Date=414814T35467Z&X-Amz-Signature=c23b2a7297e9daa4f1f56316d4637fa185ac8bdd0420cf45b9fd0f6bb35f325b"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "f0c6fb05-9d61-4be7-9b58-3ca88782", "record_id": "flaws_cloudtrail:0000003:f0c6fb05-9d61-4be7-9b58-3ca88782", "row_index": 3, "timestamp": "2019-07-08T12:56:40Z", "event_type": "DescribeSnapshotAttribute", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "251.209.251.231", "user_agent": "aws-cli/1.16.193 Python/2.7.5 Linux/3.10.0-957.21.3.el7.x86_64 botocore/1.12.183", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 773, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "f0c6fb05-9d61-4be7-9b58-3ca88782", "eventTime": "2019-07-08T12:56:40Z", "eventName": "DescribeSnapshotAttribute", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "251.209.251.231", "userAgent": "aws-cli/1.16.193 Python/2.7.5 Linux/3.10.0-957.21.3.el7.x86_64 botocore/1.12.183", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"snapshotId": "snap-83d15d668fb2941db", "attributeType": "CREATE_VOLUME_PERMISSION"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "f0c6fb05-9d61-4be7-9b58-3ca88782", "record_id": "flaws_cloudtrail:0000004:f0c6fb05-9d61-4be7-9b58-3ca88782", "row_index": 4, "timestamp": "2019-07-08T12:56:40Z", "event_type": "DescribeSnapshotAttribute", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "251.209.251.231", "user_agent": "aws-cli/1.16.193 Python/2.7.5 Linux/3.10.0-957.21.3.el7.x86_64 botocore/1.12.183", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 773, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "f0c6fb05-9d61-4be7-9b58-3ca88782", "eventTime": "2019-07-08T12:56:40Z", "eventName": "DescribeSnapshotAttribute", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "251.209.251.231", "userAgent": "aws-cli/1.16.193 Python/2.7.5 Linux/3.10.0-957.21.3.el7.x86_64 botocore/1.12.183", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"snapshotId": "snap-83d15d668fb2941db", "attributeType": "CREATE_VOLUME_PERMISSION"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "892e86f8-3405-4021-aafe-3555daa20981", "record_id": "flaws_cloudtrail:0000005:892e86f8-3405-4021-aafe-3555daa20981", "row_index": 5, "timestamp": "2019-07-08T12:57:16Z", "event_type": "CopySnapshot", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "251.209.251.231", "user_agent": "aws-cli/1.16.193 Python/2.7.5 Linux/3.10.0-957.21.3.el7.x86_64 botocore/1.12.183", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 1435, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "892e86f8-3405-4021-aafe-3555daa20981", "eventTime": "2019-07-08T12:57:16Z", "eventName": "CopySnapshot", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "251.209.251.231", "userAgent": "aws-cli/1.16.193 Python/2.7.5 Linux/3.10.0-957.21.3.el7.x86_64 botocore/1.12.183", "awsRegion": "us-east-1", "errorCode": "Client.UnauthorizedOperation", "errorMessage": "You are not authorized to perform this operation.", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"sourceRegion": "us-west-2", "sourceSnapshotId": "snap-83d15d668fb2941db", "description": "This is my copied snapshot.", "destinationRegion": "us-east-1", "presignedUrl": "https://ec2.us-west-2.amazonaws.com/?SourceRegion=us-west-2&SourceSnapshotId=snap-83d15d668fb2941db&Version=2016-11-15&Description=This%20is%20my%20copied%20snapshot.&Action=CopySnapshot&DestinationRegion=us-east-1&X-Amz-Algorithm=AWS4-HMAC-SHA256&X-Amz-Expires=3600&X-Amz-Credential=AKIA01U43UX3RBRDXF4Q%2F414814%2Fus-west-2%2Fec2%2Faws4_request&X-Amz-SignedHeaders=host&X-Amz-Date=414814T24870Z&X-Amz-Signature=c2b1735dfd91907b930ae2c103bb0d8f3ca7fa2cb3104e451fbc603ead3d2466"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "892e86f8-3405-4021-aafe-3555daa20981", "record_id": "flaws_cloudtrail:0000006:892e86f8-3405-4021-aafe-3555daa20981", "row_index": 6, "timestamp": "2019-07-08T12:57:16Z", "event_type": "CopySnapshot", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "251.209.251.231", "user_agent": "aws-cli/1.16.193 Python/2.7.5 Linux/3.10.0-957.21.3.el7.x86_64 botocore/1.12.183", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 1435, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "892e86f8-3405-4021-aafe-3555daa20981", "eventTime": "2019-07-08T12:57:16Z", "eventName": "CopySnapshot", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "251.209.251.231", "userAgent": "aws-cli/1.16.193 Python/2.7.5 Linux/3.10.0-957.21.3.el7.x86_64 botocore/1.12.183", "awsRegion": "us-east-1", "errorCode": "Client.UnauthorizedOperation", "errorMessage": "You are not authorized to perform this operation.", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"sourceRegion": "us-west-2", "sourceSnapshotId": "snap-83d15d668fb2941db", "description": "This is my copied snapshot.", "destinationRegion": "us-east-1", "presignedUrl": "https://ec2.us-west-2.amazonaws.com/?SourceRegion=us-west-2&SourceSnapshotId=snap-83d15d668fb2941db&Version=2016-11-15&Description=This%20is%20my%20copied%20snapshot.&Action=CopySnapshot&DestinationRegion=us-east-1&X-Amz-Algorithm=AWS4-HMAC-SHA256&X-Amz-Expires=3600&X-Amz-Credential=AKIA01U43UX3RBRDXF4Q%2F414814%2Fus-west-2%2Fec2%2Faws4_request&X-Amz-SignedHeaders=host&X-Amz-Date=414814T24870Z&X-Amz-Signature=c2b1735dfd91907b930ae2c103bb0d8f3ca7fa2cb3104e451fbc603ead3d2466"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "eff530e9-fa84-4a03-91d7-877402d18839d", "record_id": "flaws_cloudtrail:0000007:eff530e9-fa84-4a03-91d7-877402d18839d", "row_index": 7, "timestamp": "2019-07-08T13:08:00Z", "event_type": "CreateLogStream", "event_source": "logs.amazonaws.com", "principal": {"type": "AssumedRole", "arn": "arn:aws:sts::811596193553:assumed-role/Level6/Level6", "account_id": "811596193553", "principal_id": "AROAI4E1FBACLY3FPC6BB:Level6", "user_name": null, "access_key_id": "ASIAT155KMYJUHPXVIQH", "session_issuer_arn": "arn:aws:iam::811596193553:role/service-role/Level6", "session_issuer_user_name": "Level6"}, "network": {"source_ip": "253.250.226.204", "user_agent": "awslambda-worker", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1029, "raw_record_depth": 4, "raw_record_top_level_keys": ["apiVersion", "awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "eff530e9-fa84-4a03-91d7-877402d18839d", "eventTime": "2019-07-08T13:08:00Z", "eventName": "CreateLogStream", "eventSource": "logs.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "253.250.226.204", "userAgent": "awslambda-worker", "awsRegion": "us-west-2", "userIdentity": {"type": "AssumedRole", "principalId": "AROAI4E1FBACLY3FPC6BB:Level6", "arn": "arn:aws:sts::811596193553:assumed-role/Level6/Level6", "accountId": "811596193553", "accessKeyId": "ASIAT155KMYJUHPXVIQH", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2019-07-08T11:19:22Z"}, "sessionIssuer": {"type": "Role", "principalId": "AROAI4E1FBACLY3FPC6BB", "arn": "arn:aws:iam::811596193553:role/service-role/Level6", "accountId": "811596193553", "userName": "Level6"}}}, "requestParameters": {"logGroupName": "/aws/lambda/Level6", "logStreamName": "2019/07/08/[$LATEST]f5d0bd01a595bac94d3100f798a56dc4"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "3976cd10-7d66-42bf-8334-2d140013ce541", "record_id": "flaws_cloudtrail:0000008:3976cd10-7d66-42bf-8334-2d140013ce541", "row_index": 8, "timestamp": "2019-07-08T13:08:00Z", "event_type": "AssumeRole", "event_source": "sts.amazonaws.com", "principal": {"type": "AWSService", "arn": null, "account_id": null, "principal_id": null, "user_name": null, "access_key_id": null, "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "lambda.amazonaws.com", "user_agent": "lambda.amazonaws.com", "aws_region": "us-west-2"}, "resource_arns": ["arn:aws:iam::811596193553:role/service-role/Level6"], "raw_record_size_bytes": 1604, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "resources", "responseElements", "sharedEventID", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "3976cd10-7d66-42bf-8334-2d140013ce541", "eventTime": "2019-07-08T13:08:00Z", "eventName": "AssumeRole", "eventSource": "sts.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "lambda.amazonaws.com", "userAgent": "lambda.amazonaws.com", "awsRegion": "us-west-2", "userIdentity": {"type": "AWSService", "invokedBy": "lambda.amazonaws.com"}, "requestParameters": {"roleSessionName": "Level6", "roleArn": "arn:aws:iam::811596193553:role/service-role/Level6"}, "responseElements": {"credentials": {"accessKeyId": "ASIAJ50F9QI1QYW7WL1T", "expiration": "Jul 9, 2019 1:08:00 AM", "sessionToken": "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"}}, "resources": [{"ARN": "arn:aws:iam::811596193553:role/service-role/Level6", "accountId": "811596193553", "type": "AWS::IAM::Role"}]}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "eff530e9-fa84-4a03-91d7-877402d18839d", "record_id": "flaws_cloudtrail:0000009:eff530e9-fa84-4a03-91d7-877402d18839d", "row_index": 9, "timestamp": "2019-07-08T13:08:00Z", "event_type": "CreateLogStream", "event_source": "logs.amazonaws.com", "principal": {"type": "AssumedRole", "arn": "arn:aws:sts::811596193553:assumed-role/Level6/Level6", "account_id": "811596193553", "principal_id": "AROAI4E1FBACLY3FPC6BB:Level6", "user_name": null, "access_key_id": "ASIAT155KMYJUHPXVIQH", "session_issuer_arn": "arn:aws:iam::811596193553:role/service-role/Level6", "session_issuer_user_name": "Level6"}, "network": {"source_ip": "253.250.226.204", "user_agent": "awslambda-worker", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1029, "raw_record_depth": 4, "raw_record_top_level_keys": ["apiVersion", "awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "eff530e9-fa84-4a03-91d7-877402d18839d", "eventTime": "2019-07-08T13:08:00Z", "eventName": "CreateLogStream", "eventSource": "logs.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "253.250.226.204", "userAgent": "awslambda-worker", "awsRegion": "us-west-2", "userIdentity": {"type": "AssumedRole", "principalId": "AROAI4E1FBACLY3FPC6BB:Level6", "arn": "arn:aws:sts::811596193553:assumed-role/Level6/Level6", "accountId": "811596193553", "accessKeyId": "ASIAT155KMYJUHPXVIQH", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2019-07-08T11:19:22Z"}, "sessionIssuer": {"type": "Role", "principalId": "AROAI4E1FBACLY3FPC6BB", "arn": "arn:aws:iam::811596193553:role/service-role/Level6", "accountId": "811596193553", "userName": "Level6"}}}, "requestParameters": {"logGroupName": "/aws/lambda/Level6", "logStreamName": "2019/07/08/[$LATEST]f5d0bd01a595bac94d3100f798a56dc4"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "3976cd10-7d66-42bf-8334-2d140013ce541", "record_id": "flaws_cloudtrail:0000010:3976cd10-7d66-42bf-8334-2d140013ce541", "row_index": 10, "timestamp": "2019-07-08T13:08:00Z", "event_type": "AssumeRole", "event_source": "sts.amazonaws.com", "principal": {"type": "AWSService", "arn": null, "account_id": null, "principal_id": null, "user_name": null, "access_key_id": null, "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "lambda.amazonaws.com", "user_agent": "lambda.amazonaws.com", "aws_region": "us-west-2"}, "resource_arns": ["arn:aws:iam::811596193553:role/service-role/Level6"], "raw_record_size_bytes": 1604, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "resources", "responseElements", "sharedEventID", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "3976cd10-7d66-42bf-8334-2d140013ce541", "eventTime": "2019-07-08T13:08:00Z", "eventName": "AssumeRole", "eventSource": "sts.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "lambda.amazonaws.com", "userAgent": "lambda.amazonaws.com", "awsRegion": "us-west-2", "userIdentity": {"type": "AWSService", "invokedBy": "lambda.amazonaws.com"}, "requestParameters": {"roleSessionName": "Level6", "roleArn": "arn:aws:iam::811596193553:role/service-role/Level6"}, "responseElements": {"credentials": {"accessKeyId": "ASIAJ50F9QI1QYW7WL1T", "expiration": "Jul 9, 2019 1:08:00 AM", "sessionToken": "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"}}, "resources": [{"ARN": "arn:aws:iam::811596193553:role/service-role/Level6", "accountId": "811596193553", "type": "AWS::IAM::Role"}]}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "d1c6fe75-379c-4832-84d8-b77200eada", "record_id": "flaws_cloudtrail:0000011:d1c6fe75-379c-4832-84d8-b77200eada", "row_index": 11, "timestamp": "2019-07-08T13:29:09Z", "event_type": "AssumeRole", "event_source": "sts.amazonaws.com", "principal": {"type": "AWSService", "arn": null, "account_id": null, "principal_id": null, "user_name": null, "access_key_id": null, "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "ec2.amazonaws.com", "user_agent": "ec2.amazonaws.com", "aws_region": "us-west-2"}, "resource_arns": ["arn:aws:iam::811596193553:role/flaws"], "raw_record_size_bytes": 1868, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "resources", "responseElements", "sharedEventID", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "d1c6fe75-379c-4832-84d8-b77200eada", "eventTime": "2019-07-08T13:29:09Z", "eventName": "AssumeRole", "eventSource": "sts.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "ec2.amazonaws.com", "userAgent": "ec2.amazonaws.com", "awsRegion": "us-west-2", "userIdentity": {"type": "AWSService", "invokedBy": "ec2.amazonaws.com"}, "requestParameters": {"roleSessionName": "i-aa2d3b42e5c6e801a", "roleArn": "arn:aws:iam::811596193553:role/flaws"}, "responseElements": {"credentials": {"accessKeyId": "ASIA4B2TGU2LJ9QK945E", "expiration": "Jul 8, 2019 7:53:24 PM", "sessionToken": "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"}}, "resources": [{"ARN": "arn:aws:iam::811596193553:role/flaws", "accountId": "811596193553", "type": "AWS::IAM::Role"}]}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "d1c6fe75-379c-4832-84d8-b77200eada", "record_id": "flaws_cloudtrail:0000012:d1c6fe75-379c-4832-84d8-b77200eada", "row_index": 12, "timestamp": "2019-07-08T13:29:09Z", "event_type": "AssumeRole", "event_source": "sts.amazonaws.com", "principal": {"type": "AWSService", "arn": null, "account_id": null, "principal_id": null, "user_name": null, "access_key_id": null, "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "ec2.amazonaws.com", "user_agent": "ec2.amazonaws.com", "aws_region": "us-west-2"}, "resource_arns": ["arn:aws:iam::811596193553:role/flaws"], "raw_record_size_bytes": 1868, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "resources", "responseElements", "sharedEventID", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "d1c6fe75-379c-4832-84d8-b77200eada", "eventTime": "2019-07-08T13:29:09Z", "eventName": "AssumeRole", "eventSource": "sts.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "ec2.amazonaws.com", "userAgent": "ec2.amazonaws.com", "awsRegion": "us-west-2", "userIdentity": {"type": "AWSService", "invokedBy": "ec2.amazonaws.com"}, "requestParameters": {"roleSessionName": "i-aa2d3b42e5c6e801a", "roleArn": "arn:aws:iam::811596193553:role/flaws"}, "responseElements": {"credentials": {"accessKeyId": "ASIA4B2TGU2LJ9QK945E", "expiration": "Jul 8, 2019 7:53:24 PM", "sessionToken": "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"}}, "resources": [{"ARN": "arn:aws:iam::811596193553:role/flaws", "accountId": "811596193553", "type": "AWS::IAM::Role"}]}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "4c27eed7-8c20-4aaf-aced-0b898021c6dd", "record_id": "flaws_cloudtrail:0000013:4c27eed7-8c20-4aaf-aced-0b898021c6dd", "row_index": 13, "timestamp": "2019-07-08T13:33:28Z", "event_type": "AssumeRole", "event_source": "sts.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIAXCFVIZLRAG39S4N1", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "117.201.171.198", "user_agent": "aws-cli/2.0.30 Python/3.7.3 Linux/4.14.181-142.260.amzn2.x86_64 botocore/2.0.0dev34", "aws_region": "us-east-1"}, "resource_arns": ["arn:aws:iam::811596193553:role/data-reader-46"], "raw_record_size_bytes": 711, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "requestParameters", "resources", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "4c27eed7-8c20-4aaf-aced-0b898021c6dd", "eventTime": "2019-07-08T13:33:28Z", "eventName": "AssumeRole", "eventSource": "sts.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "117.201.171.198", "userAgent": "aws-cli/2.0.30 Python/3.7.3 Linux/4.14.181-142.260.amzn2.x86_64 botocore/2.0.0dev34", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIAXCFVIZLRAG39S4N1", "userName": "backup"}, "requestParameters": {"roleArn": "arn:aws:iam::811596193553:role/data-reader-46", "roleSessionName": "reader-3831"}, "resources": [{"ARN": "arn:aws:iam::811596193553:role/data-reader-46"}]}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "14eb94ff-573c-4392-a9aa-ba8028a81db9", "record_id": "flaws_cloudtrail:0000014:14eb94ff-573c-4392-a9aa-ba8028a81db9", "row_index": 14, "timestamp": "2019-07-08T13:34:01Z", "event_type": "ListBuckets", "event_source": "s3.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIAXCFVIZLRAG39S4N1", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "117.201.171.198", "user_agent": "aws-cli/2.0.30 Python/3.7.3 Linux/4.14.181-142.260.amzn2.x86_64 botocore/2.0.0dev34", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 529, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "14eb94ff-573c-4392-a9aa-ba8028a81db9", "eventTime": "2019-07-08T13:34:01Z", "eventName": "ListBuckets", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "117.201.171.198", "userAgent": "aws-cli/2.0.30 Python/3.7.3 Linux/4.14.181-142.260.amzn2.x86_64 botocore/2.0.0dev34", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIAXCFVIZLRAG39S4N1", "userName": "backup"}}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "ce9a5f7c-1ace-4137-aa5b-25b6069a0056", "record_id": "flaws_cloudtrail:0000015:ce9a5f7c-1ace-4137-aa5b-25b6069a0056", "row_index": 15, "timestamp": "2019-07-08T13:35:22Z", "event_type": "GetBucketAcl", "event_source": "s3.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIAXCFVIZLRAG39S4N1", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "117.201.171.198", "user_agent": "aws-cli/2.0.30 Python/3.7.3 Linux/4.14.181-142.260.amzn2.x86_64 botocore/2.0.0dev34", "aws_region": "us-east-1"}, "resource_arns": ["arn:aws:s3:::prod-data-5306"], "raw_record_size_bytes": 634, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "requestParameters", "resources", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "ce9a5f7c-1ace-4137-aa5b-25b6069a0056", "eventTime": "2019-07-08T13:35:22Z", "eventName": "GetBucketAcl", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "117.201.171.198", "userAgent": "aws-cli/2.0.30 Python/3.7.3 Linux/4.14.181-142.260.amzn2.x86_64 botocore/2.0.0dev34", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIAXCFVIZLRAG39S4N1", "userName": "backup"}, "requestParameters": {"bucketName": "prod-data-5306"}, "resources": [{"ARN": "arn:aws:s3:::prod-data-5306"}]}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "2ba0a751-69ea-468d-9911-846abe0f6666", "record_id": "flaws_cloudtrail:0000016:2ba0a751-69ea-468d-9911-846abe0f6666", "row_index": 16, "timestamp": "2019-07-08T13:36:29Z", "event_type": "GetBucketAcl", "event_source": "s3.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIAXCFVIZLRAG39S4N1", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "117.201.171.198", "user_agent": "aws-cli/2.0.30 Python/3.7.3 Linux/4.14.181-142.260.amzn2.x86_64 botocore/2.0.0dev34", "aws_region": "us-east-1"}, "resource_arns": ["arn:aws:s3:::prod-data-5306-archive"], "raw_record_size_bytes": 650, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "requestParameters", "resources", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "2ba0a751-69ea-468d-9911-846abe0f6666", "eventTime": "2019-07-08T13:36:29Z", "eventName": "GetBucketAcl", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "117.201.171.198", "userAgent": "aws-cli/2.0.30 Python/3.7.3 Linux/4.14.181-142.260.amzn2.x86_64 botocore/2.0.0dev34", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIAXCFVIZLRAG39S4N1", "userName": "backup"}, "requestParameters": {"bucketName": "prod-data-5306-archive"}, "resources": [{"ARN": "arn:aws:s3:::prod-data-5306-archive"}]}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "1c5d6674-b273-40ff-ae6e-479409edc403", "record_id": "flaws_cloudtrail:0000017:1c5d6674-b273-40ff-ae6e-479409edc403", "row_index": 17, "timestamp": "2019-07-08T13:38:53Z", "event_type": "ListObjects", "event_source": "s3.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIAXCFVIZLRAG39S4N1", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "117.201.171.198", "user_agent": "aws-cli/2.0.30 Python/3.7.3 Linux/4.14.181-142.260.amzn2.x86_64 botocore/2.0.0dev34", "aws_region": "us-east-1"}, "resource_arns": ["arn:aws:s3:::prod-data-5306"], "raw_record_size_bytes": 654, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "requestParameters", "resources", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "1c5d6674-b273-40ff-ae6e-479409edc403", "eventTime": "2019-07-08T13:38:53Z", "eventName": "ListObjects", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "117.201.171.198", "userAgent": "aws-cli/2.0.30 Python/3.7.3 Linux/4.14.181-142.260.amzn2.x86_64 botocore/2.0.0dev34", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIAXCFVIZLRAG39S4N1", "userName": "backup"}, "requestParameters": {"bucketName": "prod-data-5306", "prefix": "customer/"}, "resources": [{"ARN": "arn:aws:s3:::prod-data-5306"}]}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "4834735a-f7bf-44c5-9e21-3064676abdda", "record_id": "flaws_cloudtrail:0000018:4834735a-f7bf-44c5-9e21-3064676abdda", "row_index": 18, "timestamp": "2019-07-08T13:40:32Z", "event_type": "GetObject", "event_source": "s3.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIAXCFVIZLRAG39S4N1", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "117.201.171.198", "user_agent": "aws-cli/2.0.30 Python/3.7.3 Linux/4.14.181-142.260.amzn2.x86_64 botocore/2.0.0dev34", "aws_region": "us-east-1"}, "resource_arns": ["arn:aws:s3:::prod-data-5306"], "raw_record_size_bytes": 659, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "requestParameters", "resources", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "4834735a-f7bf-44c5-9e21-3064676abdda", "eventTime": "2019-07-08T13:40:32Z", "eventName": "GetObject", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "117.201.171.198", "userAgent": "aws-cli/2.0.30 Python/3.7.3 Linux/4.14.181-142.260.amzn2.x86_64 botocore/2.0.0dev34", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIAXCFVIZLRAG39S4N1", "userName": "backup"}, "requestParameters": {"bucketName": "prod-data-5306", "key": "customer/04809.json"}, "resources": [{"ARN": "arn:aws:s3:::prod-data-5306"}]}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "b8cb2c30-d0b2-4bfe-9e3c-1f779e77759e", "record_id": "flaws_cloudtrail:0000019:b8cb2c30-d0b2-4bfe-9e3c-1f779e77759e", "row_index": 19, "timestamp": "2019-07-08T13:41:20Z", "event_type": "GetObject", "event_source": "s3.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIAXCFVIZLRAG39S4N1", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "117.201.171.198", "user_agent": "aws-cli/2.0.30 Python/3.7.3 Linux/4.14.181-142.260.amzn2.x86_64 botocore/2.0.0dev34", "aws_region": "us-east-1"}, "resource_arns": ["arn:aws:s3:::prod-data-5306"], "raw_record_size_bytes": 659, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "requestParameters", "resources", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "b8cb2c30-d0b2-4bfe-9e3c-1f779e77759e", "eventTime": "2019-07-08T13:41:20Z", "eventName": "GetObject", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "117.201.171.198", "userAgent": "aws-cli/2.0.30 Python/3.7.3 Linux/4.14.181-142.260.amzn2.x86_64 botocore/2.0.0dev34", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIAXCFVIZLRAG39S4N1", "userName": "backup"}, "requestParameters": {"bucketName": "prod-data-5306", "key": "customer/04277.json"}, "resources": [{"ARN": "arn:aws:s3:::prod-data-5306"}]}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "f567189a-755f-4c52-848a-24c81b2cce3d", "record_id": "flaws_cloudtrail:0000020:f567189a-755f-4c52-848a-24c81b2cce3d", "row_index": 20, "timestamp": "2019-07-08T13:42:05Z", "event_type": "GetObject", "event_source": "s3.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIAXCFVIZLRAG39S4N1", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "117.201.171.198", "user_agent": "aws-cli/2.0.30 Python/3.7.3 Linux/4.14.181-142.260.amzn2.x86_64 botocore/2.0.0dev34", "aws_region": "us-east-1"}, "resource_arns": ["arn:aws:s3:::prod-data-5306"], "raw_record_size_bytes": 659, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "requestParameters", "resources", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "f567189a-755f-4c52-848a-24c81b2cce3d", "eventTime": "2019-07-08T13:42:05Z", "eventName": "GetObject", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "117.201.171.198", "userAgent": "aws-cli/2.0.30 Python/3.7.3 Linux/4.14.181-142.260.amzn2.x86_64 botocore/2.0.0dev34", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIAXCFVIZLRAG39S4N1", "userName": "backup"}, "requestParameters": {"bucketName": "prod-data-5306", "key": "customer/08825.json"}, "resources": [{"ARN": "arn:aws:s3:::prod-data-5306"}]}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "f771ce90-a318-49c4-b26a-1600a5ead413", "record_id": "flaws_cloudtrail:0000021:f771ce90-a318-49c4-b26a-1600a5ead413", "row_index": 21, "timestamp": "2019-07-08T13:42:55Z", "event_type": "GetObject", "event_source": "s3.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIAXCFVIZLRAG39S4N1", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "117.201.171.198", "user_agent": "aws-cli/2.0.30 Python/3.7.3 Linux/4.14.181-142.260.amzn2.x86_64 botocore/2.0.0dev34", "aws_region": "us-east-1"}, "resource_arns": ["arn:aws:s3:::prod-data-5306"], "raw_record_size_bytes": 659, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "requestParameters", "resources", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "f771ce90-a318-49c4-b26a-1600a5ead413", "eventTime": "2019-07-08T13:42:55Z", "eventName": "GetObject", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "117.201.171.198", "userAgent": "aws-cli/2.0.30 Python/3.7.3 Linux/4.14.181-142.260.amzn2.x86_64 botocore/2.0.0dev34", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIAXCFVIZLRAG39S4N1", "userName": "backup"}, "requestParameters": {"bucketName": "prod-data-5306", "key": "customer/07541.json"}, "resources": [{"ARN": "arn:aws:s3:::prod-data-5306"}]}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "8c8910d6-23cb-4ffc-9f58-feedede921b7", "record_id": "flaws_cloudtrail:0000022:8c8910d6-23cb-4ffc-9f58-feedede921b7", "row_index": 22, "timestamp": "2019-07-08T13:43:52Z", "event_type": "GetObject", "event_source": "s3.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIAXCFVIZLRAG39S4N1", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "117.201.171.198", "user_agent": "aws-cli/2.0.30 Python/3.7.3 Linux/4.14.181-142.260.amzn2.x86_64 botocore/2.0.0dev34", "aws_region": "us-east-1"}, "resource_arns": ["arn:aws:s3:::prod-data-5306"], "raw_record_size_bytes": 659, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "requestParameters", "resources", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "8c8910d6-23cb-4ffc-9f58-feedede921b7", "eventTime": "2019-07-08T13:43:52Z", "eventName": "GetObject", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "117.201.171.198", "userAgent": "aws-cli/2.0.30 Python/3.7.3 Linux/4.14.181-142.260.amzn2.x86_64 botocore/2.0.0dev34", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIAXCFVIZLRAG39S4N1", "userName": "backup"}, "requestParameters": {"bucketName": "prod-data-5306", "key": "customer/05059.json"}, "resources": [{"ARN": "arn:aws:s3:::prod-data-5306"}]}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "b6d21a40-27cc-492a-a893-c07f626d5a1b", "record_id": "flaws_cloudtrail:0000023:b6d21a40-27cc-492a-a893-c07f626d5a1b", "row_index": 23, "timestamp": "2019-07-08T13:52:31Z", "event_type": "ListBuckets", "event_source": "s3.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "251.209.251.231", "user_agent": "[aws-cli/1.16.193 Python/2.7.5 Linux/3.10.0-957.21.3.el7.x86_64 botocore/1.12.183]", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 822, "raw_record_depth": 3, "raw_record_top_level_keys": ["additionalEventData", "awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "b6d21a40-27cc-492a-a893-c07f626d5a1b", "eventTime": "2019-07-08T13:52:31Z", "eventName": "ListBuckets", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "251.209.251.231", "userAgent": "[aws-cli/1.16.193 Python/2.7.5 Linux/3.10.0-957.21.3.el7.x86_64 botocore/1.12.183]", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"host": ["s3.amazonaws.com"]}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "b6d21a40-27cc-492a-a893-c07f626d5a1b", "record_id": "flaws_cloudtrail:0000024:b6d21a40-27cc-492a-a893-c07f626d5a1b", "row_index": 24, "timestamp": "2019-07-08T13:52:31Z", "event_type": "ListBuckets", "event_source": "s3.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "251.209.251.231", "user_agent": "[aws-cli/1.16.193 Python/2.7.5 Linux/3.10.0-957.21.3.el7.x86_64 botocore/1.12.183]", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 822, "raw_record_depth": 3, "raw_record_top_level_keys": ["additionalEventData", "awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "b6d21a40-27cc-492a-a893-c07f626d5a1b", "eventTime": "2019-07-08T13:52:31Z", "eventName": "ListBuckets", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "251.209.251.231", "userAgent": "[aws-cli/1.16.193 Python/2.7.5 Linux/3.10.0-957.21.3.el7.x86_64 botocore/1.12.183]", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"host": ["s3.amazonaws.com"]}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "407d734e-7bb7-44ba-a765-aa3bb6acd5d5", "record_id": "flaws_cloudtrail:0000025:407d734e-7bb7-44ba-a765-aa3bb6acd5d5", "row_index": 25, "timestamp": "2019-07-08T14:29:09Z", "event_type": "AssumeRole", "event_source": "sts.amazonaws.com", "principal": {"type": "AWSService", "arn": null, "account_id": null, "principal_id": null, "user_name": null, "access_key_id": null, "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "ec2.amazonaws.com", "user_agent": "ec2.amazonaws.com", "aws_region": "us-west-2"}, "resource_arns": ["arn:aws:iam::811596193553:role/flaws"], "raw_record_size_bytes": 1869, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "resources", "responseElements", "sharedEventID", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "407d734e-7bb7-44ba-a765-aa3bb6acd5d5", "eventTime": "2019-07-08T14:29:09Z", "eventName": "AssumeRole", "eventSource": "sts.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "ec2.amazonaws.com", "userAgent": "ec2.amazonaws.com", "awsRegion": "us-west-2", "userIdentity": {"type": "AWSService", "invokedBy": "ec2.amazonaws.com"}, "requestParameters": {"roleSessionName": "i-aa2d3b42e5c6e801a", "roleArn": "arn:aws:iam::811596193553:role/flaws"}, "responseElements": {"credentials": {"accessKeyId": "ASIA4K10PSAATIBQCXU4", "expiration": "Jul 8, 2019 8:45:56 PM", "sessionToken": "AgoJb3JpZ2luX2VjEAcaCXVzLXdlc3QtMiJIMEYCIQD7UI/MdpXEdTu5qKINnLSdgkeb8ElttRyYfX6bnSel7wIhALyZuYwt+4Ry9Bd4Eh8vS1J+rhapZX893yB7JLFpqwwwKtoDCGAQABoMOTc1NDI2MjYyMDI5Igx7zPjnwyipTAII16MqtwObc4RnZ6Mzzawjkw3jNgIgIfXWiMVMQqQR8kExLy1ymHENu1NnTz+xrjTgy9hV21caZFERMtjC044Bepq2Wi51BFQ4WgMcoZVpJ3/pw5mz0kHzeQRmzxMlfHLD3FpFrko4gnXIs2Qq5AikhytVvXib2/UkXC4oULBvgUA4aghz4gmS1aSIIKvyHbrMan9rpNw565PlGo49t+A8BwMc67Ucvk68bshW/GTZEM25l092iZJPJm/i0SEHVRO3g36ivcEWH1I6/NUhzgAVA5Y/AM45ZaPdPJsfGd8Tsq0iHAixKT8f8G/dtYhlV2aFK9HGJUdnmK59tlE9RFFlY/dbbV3Ap/jBxkqZ6YT4eJ8rJ1gwtj2RJf/Vko8Vi7ll1sfsT0u4oycd0VHwEIcxfc61aIr78Uela7YoFZXshBXHylxjpR4ZRAgvjHGfvOTUJtPRdK7QRZIQHFEiVDnTtP1bQBZ7sb6TmSk94/BkWls4JR6vvApqbugKTC7+ng99OyNi5gyMXvBMQzre/Fp08YrRkukRQCPUT4Qih6DMyFnPUoUGNU1ts7go5BtZhY3Uw1DQ3zRe3NR3uTjgMLWmjekFOrMB6fgJmNesiMLmYEpjSkvogt8p/85YvfbDmTbV2+0ifqRVEqcUE9UgHu6yzdOMyyu7J9F2kxHjP5xCtFVQXzhVI7kH7+9OXm/63CXQPMqeFx9KpAZ6wI19FGZc+wlZLMjYbVXLbS3sYzdlrum1UsQrL8YXmTjhncZyV7AV39u5Dp5psTaiHUwBtnlAcHKAj/ys37RbwjsVf2RlkDkINE4siATndGqSZJgkhH6iwAl7VWHlk3g="}}, "resources": [{"ARN": "arn:aws:iam::811596193553:role/flaws", "accountId": "811596193553", "type": "AWS::IAM::Role"}]}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "407d734e-7bb7-44ba-a765-aa3bb6acd5d5", "record_id": "flaws_cloudtrail:0000026:407d734e-7bb7-44ba-a765-aa3bb6acd5d5", "row_index": 26, "timestamp": "2019-07-08T14:29:09Z", "event_type": "AssumeRole", "event_source": "sts.amazonaws.com", "principal": {"type": "AWSService", "arn": null, "account_id": null, "principal_id": null, "user_name": null, "access_key_id": null, "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "ec2.amazonaws.com", "user_agent": "ec2.amazonaws.com", "aws_region": "us-west-2"}, "resource_arns": ["arn:aws:iam::811596193553:role/flaws"], "raw_record_size_bytes": 1869, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "resources", "responseElements", "sharedEventID", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "407d734e-7bb7-44ba-a765-aa3bb6acd5d5", "eventTime": "2019-07-08T14:29:09Z", "eventName": "AssumeRole", "eventSource": "sts.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "ec2.amazonaws.com", "userAgent": "ec2.amazonaws.com", "awsRegion": "us-west-2", "userIdentity": {"type": "AWSService", "invokedBy": "ec2.amazonaws.com"}, "requestParameters": {"roleSessionName": "i-aa2d3b42e5c6e801a", "roleArn": "arn:aws:iam::811596193553:role/flaws"}, "responseElements": {"credentials": {"accessKeyId": "ASIA4K10PSAATIBQCXU4", "expiration": "Jul 8, 2019 8:45:56 PM", "sessionToken": "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"}}, "resources": [{"ARN": "arn:aws:iam::811596193553:role/flaws", "accountId": "811596193553", "type": "AWS::IAM::Role"}]}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "f9ecbe30-d7f6-4610-94d2-804e40863db", "record_id": "flaws_cloudtrail:0000027:f9ecbe30-d7f6-4610-94d2-804e40863db", "row_index": 27, "timestamp": "2019-07-08T14:29:40Z", "event_type": "GetUser", "event_source": "iam.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "17.197.43.224", "user_agent": "aws-cli/1.15.76 Python/2.7.15 Darwin/18.0.0 botocore/1.12.4", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 657, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "f9ecbe30-d7f6-4610-94d2-804e40863db", "eventTime": "2019-07-08T14:29:40Z", "eventName": "GetUser", "eventSource": "iam.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "17.197.43.224", "userAgent": "aws-cli/1.15.76 Python/2.7.15 Darwin/18.0.0 botocore/1.12.4", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "f9ecbe30-d7f6-4610-94d2-804e40863db", "record_id": "flaws_cloudtrail:0000028:f9ecbe30-d7f6-4610-94d2-804e40863db", "row_index": 28, "timestamp": "2019-07-08T14:29:40Z", "event_type": "GetUser", "event_source": "iam.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "17.197.43.224", "user_agent": "aws-cli/1.15.76 Python/2.7.15 Darwin/18.0.0 botocore/1.12.4", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 657, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "f9ecbe30-d7f6-4610-94d2-804e40863db", "eventTime": "2019-07-08T14:29:40Z", "eventName": "GetUser", "eventSource": "iam.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "17.197.43.224", "userAgent": "aws-cli/1.15.76 Python/2.7.15 Darwin/18.0.0 botocore/1.12.4", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "a947195-8d0b-4e1c-901f-16591385642d", "record_id": "flaws_cloudtrail:0000029:a947195-8d0b-4e1c-901f-16591385642d", "row_index": 29, "timestamp": "2019-07-08T14:30:54Z", "event_type": "ListAttachedUserPolicies", "event_source": "iam.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "17.197.43.224", "user_agent": "aws-cli/1.15.76 Python/2.7.15 Darwin/18.0.0 botocore/1.12.4", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 691, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "a947195-8d0b-4e1c-901f-16591385642d", "eventTime": "2019-07-08T14:30:54Z", "eventName": "ListAttachedUserPolicies", "eventSource": "iam.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "17.197.43.224", "userAgent": "aws-cli/1.15.76 Python/2.7.15 Darwin/18.0.0 botocore/1.12.4", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"userName": "Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "a947195-8d0b-4e1c-901f-16591385642d", "record_id": "flaws_cloudtrail:0000030:a947195-8d0b-4e1c-901f-16591385642d", "row_index": 30, "timestamp": "2019-07-08T14:30:54Z", "event_type": "ListAttachedUserPolicies", "event_source": "iam.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "17.197.43.224", "user_agent": "aws-cli/1.15.76 Python/2.7.15 Darwin/18.0.0 botocore/1.12.4", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 691, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "a947195-8d0b-4e1c-901f-16591385642d", "eventTime": "2019-07-08T14:30:54Z", "eventName": "ListAttachedUserPolicies", "eventSource": "iam.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "17.197.43.224", "userAgent": "aws-cli/1.15.76 Python/2.7.15 Darwin/18.0.0 botocore/1.12.4", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"userName": "Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "29ceb7cd-b475-428d-ac7d-fa95915d7d87", "record_id": "flaws_cloudtrail:0000031:29ceb7cd-b475-428d-ac7d-fa95915d7d87", "row_index": 31, "timestamp": "2019-07-08T14:32:03Z", "event_type": "GetPolicy", "event_source": "iam.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "17.197.43.224", "user_agent": "aws-cli/1.15.76 Python/2.7.15 Darwin/18.0.0 botocore/1.12.4", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 718, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "29ceb7cd-b475-428d-ac7d-fa95915d7d87", "eventTime": "2019-07-08T14:32:03Z", "eventName": "GetPolicy", "eventSource": "iam.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "17.197.43.224", "userAgent": "aws-cli/1.15.76 Python/2.7.15 Darwin/18.0.0 botocore/1.12.4", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"policyArn": "arn:aws:iam::811596193553:policy/list_apigateways"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "29ceb7cd-b475-428d-ac7d-fa95915d7d87", "record_id": "flaws_cloudtrail:0000032:29ceb7cd-b475-428d-ac7d-fa95915d7d87", "row_index": 32, "timestamp": "2019-07-08T14:32:03Z", "event_type": "GetPolicy", "event_source": "iam.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "17.197.43.224", "user_agent": "aws-cli/1.15.76 Python/2.7.15 Darwin/18.0.0 botocore/1.12.4", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 718, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "29ceb7cd-b475-428d-ac7d-fa95915d7d87", "eventTime": "2019-07-08T14:32:03Z", "eventName": "GetPolicy", "eventSource": "iam.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "17.197.43.224", "userAgent": "aws-cli/1.15.76 Python/2.7.15 Darwin/18.0.0 botocore/1.12.4", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"policyArn": "arn:aws:iam::811596193553:policy/list_apigateways"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "94cca4c7-ce96-445b-a4a8-f047eab33350", "record_id": "flaws_cloudtrail:0000033:94cca4c7-ce96-445b-a4a8-f047eab33350", "row_index": 33, "timestamp": "2019-07-08T14:32:55Z", "event_type": "GetPolicyVersion", "event_source": "iam.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "17.197.43.224", "user_agent": "aws-cli/1.15.76 Python/2.7.15 Darwin/18.0.0 botocore/1.12.4", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 745, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "94cca4c7-ce96-445b-a4a8-f047eab33350", "eventTime": "2019-07-08T14:32:55Z", "eventName": "GetPolicyVersion", "eventSource": "iam.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "17.197.43.224", "userAgent": "aws-cli/1.15.76 Python/2.7.15 Darwin/18.0.0 botocore/1.12.4", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"policyArn": "arn:aws:iam::811596193553:policy/list_apigateways", "versionId": "v4"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "94cca4c7-ce96-445b-a4a8-f047eab33350", "record_id": "flaws_cloudtrail:0000034:94cca4c7-ce96-445b-a4a8-f047eab33350", "row_index": 34, "timestamp": "2019-07-08T14:32:55Z", "event_type": "GetPolicyVersion", "event_source": "iam.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "17.197.43.224", "user_agent": "aws-cli/1.15.76 Python/2.7.15 Darwin/18.0.0 botocore/1.12.4", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 745, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "94cca4c7-ce96-445b-a4a8-f047eab33350", "eventTime": "2019-07-08T14:32:55Z", "eventName": "GetPolicyVersion", "eventSource": "iam.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "17.197.43.224", "userAgent": "aws-cli/1.15.76 Python/2.7.15 Darwin/18.0.0 botocore/1.12.4", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"policyArn": "arn:aws:iam::811596193553:policy/list_apigateways", "versionId": "v4"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "b0eec53b-dd02-4815-aa99-2c1713c5003e", "record_id": "flaws_cloudtrail:0000035:b0eec53b-dd02-4815-aa99-2c1713c5003e", "row_index": 35, "timestamp": "2019-07-08T14:34:33Z", "event_type": "ListFunctions202224", "event_source": "lambda.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "17.197.43.224", "user_agent": "aws-cli/1.15.76 Python/2.7.15 Darwin/18.0.0 botocore/1.12.4", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 673, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "b0eec53b-dd02-4815-aa99-2c1713c5003e", "eventTime": "2019-07-08T14:34:33Z", "eventName": "ListFunctions202224", "eventSource": "lambda.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "17.197.43.224", "userAgent": "aws-cli/1.15.76 Python/2.7.15 Darwin/18.0.0 botocore/1.12.4", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "b0eec53b-dd02-4815-aa99-2c1713c5003e", "record_id": "flaws_cloudtrail:0000036:b0eec53b-dd02-4815-aa99-2c1713c5003e", "row_index": 36, "timestamp": "2019-07-08T14:34:33Z", "event_type": "ListFunctions202224", "event_source": "lambda.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "17.197.43.224", "user_agent": "aws-cli/1.15.76 Python/2.7.15 Darwin/18.0.0 botocore/1.12.4", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 673, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "b0eec53b-dd02-4815-aa99-2c1713c5003e", "eventTime": "2019-07-08T14:34:33Z", "eventName": "ListFunctions202224", "eventSource": "lambda.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "17.197.43.224", "userAgent": "aws-cli/1.15.76 Python/2.7.15 Darwin/18.0.0 botocore/1.12.4", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "6a19317f-9554-40e1-b280-a046a327105", "record_id": "flaws_cloudtrail:0000037:6a19317f-9554-40e1-b280-a046a327105", "row_index": 37, "timestamp": "2019-07-08T14:35:32Z", "event_type": "GetPolicy202224v2", "event_source": "lambda.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "17.197.43.224", "user_agent": "aws-cli/1.15.76 Python/2.7.15 Darwin/18.0.0 botocore/1.12.4", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 692, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "6a19317f-9554-40e1-b280-a046a327105", "eventTime": "2019-07-08T14:35:32Z", "eventName": "GetPolicy202224v2", "eventSource": "lambda.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "17.197.43.224", "userAgent": "aws-cli/1.15.76 Python/2.7.15 Darwin/18.0.0 botocore/1.12.4", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"functionName": "Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "6a19317f-9554-40e1-b280-a046a327105", "record_id": "flaws_cloudtrail:0000038:6a19317f-9554-40e1-b280-a046a327105", "row_index": 38, "timestamp": "2019-07-08T14:35:32Z", "event_type": "GetPolicy202224v2", "event_source": "lambda.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "17.197.43.224", "user_agent": "aws-cli/1.15.76 Python/2.7.15 Darwin/18.0.0 botocore/1.12.4", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 692, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "6a19317f-9554-40e1-b280-a046a327105", "eventTime": "2019-07-08T14:35:32Z", "eventName": "GetPolicy202224v2", "eventSource": "lambda.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "17.197.43.224", "userAgent": "aws-cli/1.15.76 Python/2.7.15 Darwin/18.0.0 botocore/1.12.4", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"functionName": "Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "59b39eb3-8da7-4648-bb7e-5295b7f8b6b8", "record_id": "flaws_cloudtrail:0000039:59b39eb3-8da7-4648-bb7e-5295b7f8b6b8", "row_index": 39, "timestamp": "2019-07-08T14:36:27Z", "event_type": "AssumeRole", "event_source": "sts.amazonaws.com", "principal": {"type": "AWSService", "arn": null, "account_id": null, "principal_id": null, "user_name": null, "access_key_id": null, "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "lambda.amazonaws.com", "user_agent": "lambda.amazonaws.com", "aws_region": "us-west-2"}, "resource_arns": ["arn:aws:iam::811596193553:role/service-role/Level6"], "raw_record_size_bytes": 1606, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "resources", "responseElements", "sharedEventID", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "59b39eb3-8da7-4648-bb7e-5295b7f8b6b8", "eventTime": "2019-07-08T14:36:27Z", "eventName": "AssumeRole", "eventSource": "sts.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "lambda.amazonaws.com", "userAgent": "lambda.amazonaws.com", "awsRegion": "us-west-2", "userIdentity": {"type": "AWSService", "invokedBy": "lambda.amazonaws.com"}, "requestParameters": {"roleSessionName": "Level6", "roleArn": "arn:aws:iam::811596193553:role/service-role/Level6"}, "responseElements": {"credentials": {"accessKeyId": "ASIAWLE6C3A7HS17YF1E", "expiration": "Jul 9, 2019 2:36:27 AM", "sessionToken": "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"}}, "resources": [{"ARN": "arn:aws:iam::811596193553:role/service-role/Level6", "accountId": "811596193553", "type": "AWS::IAM::Role"}]}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "85b1bb1a-7921-4c27-bbcc-bfb5a8a90283", "record_id": "flaws_cloudtrail:0000040:85b1bb1a-7921-4c27-bbcc-bfb5a8a90283", "row_index": 40, "timestamp": "2019-07-08T14:36:27Z", "event_type": "CreateLogStream", "event_source": "logs.amazonaws.com", "principal": {"type": "AssumedRole", "arn": "arn:aws:sts::811596193553:assumed-role/Level6/Level6", "account_id": "811596193553", "principal_id": "AROAI4E1FBACLY3FPC6BB:Level6", "user_name": null, "access_key_id": "ASIAWLE6C3A7HS17YF1E", "session_issuer_arn": "arn:aws:iam::811596193553:role/service-role/Level6", "session_issuer_user_name": "Level6"}, "network": {"source_ip": "87.211.3.5", "user_agent": "awslambda-worker", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1027, "raw_record_depth": 4, "raw_record_top_level_keys": ["apiVersion", "awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "85b1bb1a-7921-4c27-bbcc-bfb5a8a90283", "eventTime": "2019-07-08T14:36:27Z", "eventName": "CreateLogStream", "eventSource": "logs.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "87.211.3.5", "userAgent": "awslambda-worker", "awsRegion": "us-west-2", "userIdentity": {"type": "AssumedRole", "principalId": "AROAI4E1FBACLY3FPC6BB:Level6", "arn": "arn:aws:sts::811596193553:assumed-role/Level6/Level6", "accountId": "811596193553", "accessKeyId": "ASIAWLE6C3A7HS17YF1E", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2019-07-08T14:36:27Z"}, "sessionIssuer": {"type": "Role", "principalId": "AROAI4E1FBACLY3FPC6BB", "arn": "arn:aws:iam::811596193553:role/service-role/Level6", "accountId": "811596193553", "userName": "Level6"}}}, "requestParameters": {"logGroupName": "/aws/lambda/Level6", "logStreamName": "2019/07/08/[$LATEST]c34a1551f2c8a42fc96279210c85a917"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "59b39eb3-8da7-4648-bb7e-5295b7f8b6b8", "record_id": "flaws_cloudtrail:0000041:59b39eb3-8da7-4648-bb7e-5295b7f8b6b8", "row_index": 41, "timestamp": "2019-07-08T14:36:27Z", "event_type": "AssumeRole", "event_source": "sts.amazonaws.com", "principal": {"type": "AWSService", "arn": null, "account_id": null, "principal_id": null, "user_name": null, "access_key_id": null, "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "lambda.amazonaws.com", "user_agent": "lambda.amazonaws.com", "aws_region": "us-west-2"}, "resource_arns": ["arn:aws:iam::811596193553:role/service-role/Level6"], "raw_record_size_bytes": 1606, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "resources", "responseElements", "sharedEventID", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "59b39eb3-8da7-4648-bb7e-5295b7f8b6b8", "eventTime": "2019-07-08T14:36:27Z", "eventName": "AssumeRole", "eventSource": "sts.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "lambda.amazonaws.com", "userAgent": "lambda.amazonaws.com", "awsRegion": "us-west-2", "userIdentity": {"type": "AWSService", "invokedBy": "lambda.amazonaws.com"}, "requestParameters": {"roleSessionName": "Level6", "roleArn": "arn:aws:iam::811596193553:role/service-role/Level6"}, "responseElements": {"credentials": {"accessKeyId": "ASIAWLE6C3A7HS17YF1E", "expiration": "Jul 9, 2019 2:36:27 AM", "sessionToken": "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"}}, "resources": [{"ARN": "arn:aws:iam::811596193553:role/service-role/Level6", "accountId": "811596193553", "type": "AWS::IAM::Role"}]}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "85b1bb1a-7921-4c27-bbcc-bfb5a8a90283", "record_id": "flaws_cloudtrail:0000042:85b1bb1a-7921-4c27-bbcc-bfb5a8a90283", "row_index": 42, "timestamp": "2019-07-08T14:36:27Z", "event_type": "CreateLogStream", "event_source": "logs.amazonaws.com", "principal": {"type": "AssumedRole", "arn": "arn:aws:sts::811596193553:assumed-role/Level6/Level6", "account_id": "811596193553", "principal_id": "AROAI4E1FBACLY3FPC6BB:Level6", "user_name": null, "access_key_id": "ASIAWLE6C3A7HS17YF1E", "session_issuer_arn": "arn:aws:iam::811596193553:role/service-role/Level6", "session_issuer_user_name": "Level6"}, "network": {"source_ip": "87.211.3.5", "user_agent": "awslambda-worker", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1027, "raw_record_depth": 4, "raw_record_top_level_keys": ["apiVersion", "awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "85b1bb1a-7921-4c27-bbcc-bfb5a8a90283", "eventTime": "2019-07-08T14:36:27Z", "eventName": "CreateLogStream", "eventSource": "logs.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "87.211.3.5", "userAgent": "awslambda-worker", "awsRegion": "us-west-2", "userIdentity": {"type": "AssumedRole", "principalId": "AROAI4E1FBACLY3FPC6BB:Level6", "arn": "arn:aws:sts::811596193553:assumed-role/Level6/Level6", "accountId": "811596193553", "accessKeyId": "ASIAWLE6C3A7HS17YF1E", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2019-07-08T14:36:27Z"}, "sessionIssuer": {"type": "Role", "principalId": "AROAI4E1FBACLY3FPC6BB", "arn": "arn:aws:iam::811596193553:role/service-role/Level6", "accountId": "811596193553", "userName": "Level6"}}}, "requestParameters": {"logGroupName": "/aws/lambda/Level6", "logStreamName": "2019/07/08/[$LATEST]c34a1551f2c8a42fc96279210c85a917"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "051f209f-de03-4d97-8fa7-4b5c42e015d6", "record_id": "flaws_cloudtrail:0000043:051f209f-de03-4d97-8fa7-4b5c42e015d6", "row_index": 43, "timestamp": "2019-07-08T14:37:20Z", "event_type": "GetStages", "event_source": "apigateway.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "17.197.43.224", "user_agent": "aws-cli/1.15.76 Python/2.7.15 Darwin/18.0.0 botocore/1.12.4", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 722, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "readOnly", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "051f209f-de03-4d97-8fa7-4b5c42e015d6", "eventTime": "2019-07-08T14:37:20Z", "eventName": "GetStages", "eventSource": "apigateway.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "17.197.43.224", "userAgent": "aws-cli/1.15.76 Python/2.7.15 Darwin/18.0.0 botocore/1.12.4", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"restApiId": "s33ppypa75", "template": false}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "051f209f-de03-4d97-8fa7-4b5c42e015d6", "record_id": "flaws_cloudtrail:0000044:051f209f-de03-4d97-8fa7-4b5c42e015d6", "row_index": 44, "timestamp": "2019-07-08T14:37:20Z", "event_type": "GetStages", "event_source": "apigateway.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "17.197.43.224", "user_agent": "aws-cli/1.15.76 Python/2.7.15 Darwin/18.0.0 botocore/1.12.4", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 722, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "readOnly", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "051f209f-de03-4d97-8fa7-4b5c42e015d6", "eventTime": "2019-07-08T14:37:20Z", "eventName": "GetStages", "eventSource": "apigateway.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "17.197.43.224", "userAgent": "aws-cli/1.15.76 Python/2.7.15 Darwin/18.0.0 botocore/1.12.4", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"restApiId": "s33ppypa75", "template": false}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "f0fe4c6f-a8f9-44fa-927f-3b977447b2f9", "record_id": "flaws_cloudtrail:0000045:f0fe4c6f-a8f9-44fa-927f-3b977447b2f9", "row_index": 45, "timestamp": "2019-07-08T14:43:58Z", "event_type": "GetCallerIdentity", "event_source": "sts.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "251.209.251.231", "user_agent": "aws-cli/1.16.193 Python/2.7.5 Linux/3.10.0-957.21.3.el7.x86_64 botocore/1.12.183", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 792, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "f0fe4c6f-a8f9-44fa-927f-3b977447b2f9", "eventTime": "2019-07-08T14:43:58Z", "eventName": "GetCallerIdentity", "eventSource": "sts.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "251.209.251.231", "userAgent": "aws-cli/1.16.193 Python/2.7.5 Linux/3.10.0-957.21.3.el7.x86_64 botocore/1.12.183", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "responseElements": {"userId": "AIDA9BO36HFBHKGJAO9C1", "account": "811596193553", "arn": "arn:aws:iam::811596193553:user/backup"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "f0fe4c6f-a8f9-44fa-927f-3b977447b2f9", "record_id": "flaws_cloudtrail:0000046:f0fe4c6f-a8f9-44fa-927f-3b977447b2f9", "row_index": 46, "timestamp": "2019-07-08T14:43:58Z", "event_type": "GetCallerIdentity", "event_source": "sts.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "251.209.251.231", "user_agent": "aws-cli/1.16.193 Python/2.7.5 Linux/3.10.0-957.21.3.el7.x86_64 botocore/1.12.183", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 792, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "f0fe4c6f-a8f9-44fa-927f-3b977447b2f9", "eventTime": "2019-07-08T14:43:58Z", "eventName": "GetCallerIdentity", "eventSource": "sts.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "251.209.251.231", "userAgent": "aws-cli/1.16.193 Python/2.7.5 Linux/3.10.0-957.21.3.el7.x86_64 botocore/1.12.183", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "responseElements": {"userId": "AIDA9BO36HFBHKGJAO9C1", "account": "811596193553", "arn": "arn:aws:iam::811596193553:user/backup"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "3eab6a8d-bca2-4bd7-826c-9e97a8ec2d76", "record_id": "flaws_cloudtrail:0000047:3eab6a8d-bca2-4bd7-826c-9e97a8ec2d76", "row_index": 47, "timestamp": "2019-07-08T14:45:00Z", "event_type": "ListBuckets", "event_source": "s3.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "251.209.251.231", "user_agent": "[aws-cli/1.16.193 Python/2.7.5 Linux/3.10.0-957.21.3.el7.x86_64 botocore/1.12.183]", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 822, "raw_record_depth": 3, "raw_record_top_level_keys": ["additionalEventData", "awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "3eab6a8d-bca2-4bd7-826c-9e97a8ec2d76", "eventTime": "2019-07-08T14:45:00Z", "eventName": "ListBuckets", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "251.209.251.231", "userAgent": "[aws-cli/1.16.193 Python/2.7.5 Linux/3.10.0-957.21.3.el7.x86_64 botocore/1.12.183]", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"host": ["s3.amazonaws.com"]}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "3eab6a8d-bca2-4bd7-826c-9e97a8ec2d76", "record_id": "flaws_cloudtrail:0000048:3eab6a8d-bca2-4bd7-826c-9e97a8ec2d76", "row_index": 48, "timestamp": "2019-07-08T14:45:00Z", "event_type": "ListBuckets", "event_source": "s3.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "251.209.251.231", "user_agent": "[aws-cli/1.16.193 Python/2.7.5 Linux/3.10.0-957.21.3.el7.x86_64 botocore/1.12.183]", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 822, "raw_record_depth": 3, "raw_record_top_level_keys": ["additionalEventData", "awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "3eab6a8d-bca2-4bd7-826c-9e97a8ec2d76", "eventTime": "2019-07-08T14:45:00Z", "eventName": "ListBuckets", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "251.209.251.231", "userAgent": "[aws-cli/1.16.193 Python/2.7.5 Linux/3.10.0-957.21.3.el7.x86_64 botocore/1.12.183]", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"host": ["s3.amazonaws.com"]}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "0fe083d5-0a53-4d81-89f5-d9c22e842a3d", "record_id": "flaws_cloudtrail:0000049:0fe083d5-0a53-4d81-89f5-d9c22e842a3d", "row_index": 49, "timestamp": "2019-07-08T14:50:53Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "251.209.251.231", "user_agent": "aws-cli/1.16.193 Python/2.7.5 Linux/3.10.0-957.21.3.el7.x86_64 botocore/1.12.183", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 773, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "0fe083d5-0a53-4d81-89f5-d9c22e842a3d", "eventTime": "2019-07-08T14:50:53Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "251.209.251.231", "userAgent": "aws-cli/1.16.193 Python/2.7.5 Linux/3.10.0-957.21.3.el7.x86_64 botocore/1.12.183", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "0fe083d5-0a53-4d81-89f5-d9c22e842a3d", "record_id": "flaws_cloudtrail:0000050:0fe083d5-0a53-4d81-89f5-d9c22e842a3d", "row_index": 50, "timestamp": "2019-07-08T14:50:53Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "251.209.251.231", "user_agent": "aws-cli/1.16.193 Python/2.7.5 Linux/3.10.0-957.21.3.el7.x86_64 botocore/1.12.183", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 773, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "0fe083d5-0a53-4d81-89f5-d9c22e842a3d", "eventTime": "2019-07-08T14:50:53Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "251.209.251.231", "userAgent": "aws-cli/1.16.193 Python/2.7.5 Linux/3.10.0-957.21.3.el7.x86_64 botocore/1.12.183", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "9d317a09-4f11-47d8-9a2a-37ed8d68e815", "record_id": "flaws_cloudtrail:0000051:9d317a09-4f11-47d8-9a2a-37ed8d68e815", "row_index": 51, "timestamp": "2019-07-08T14:50:58Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "251.209.251.231", "user_agent": "aws-cli/1.16.193 Python/2.7.5 Linux/3.10.0-957.21.3.el7.x86_64 botocore/1.12.183", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1100, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "9d317a09-4f11-47d8-9a2a-37ed8d68e815", "eventTime": "2019-07-08T14:50:58Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "251.209.251.231", "userAgent": "aws-cli/1.16.193 Python/2.7.5 Linux/3.10.0-957.21.3.el7.x86_64 botocore/1.12.183", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"nextToken": "eyJ2IjoiMiIsImMiOiJlVUtwaktjWmRhYUtsWXFDOGhYNEY2dkZpSE5kWjB6cTZDM2xlNXZJNkI1YVNpMVo5cE5xcDl2NkpIcmJaRm93cFlXRjB4SDBmeFBKVXVVZkRiQnNOR3UvaXVZVzJTOE1Na1FMY1A1OHhPTzVzMFVWV0hZSFpQUGpJSVUvRVh3K1I2WXNUMU9KUGVNdDVDUGtKOU1YRlUwdlRMdzR4S3pqUzI3TzVlbllKU2NSNU5JRmtzSUdVaVBtSTRUR0dsQXBwK2xWSzIyakN3Z1c4Zz09IiwicyI6IjEifQ==", "maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "9d317a09-4f11-47d8-9a2a-37ed8d68e815", "record_id": "flaws_cloudtrail:0000052:9d317a09-4f11-47d8-9a2a-37ed8d68e815", "row_index": 52, "timestamp": "2019-07-08T14:50:58Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "251.209.251.231", "user_agent": "aws-cli/1.16.193 Python/2.7.5 Linux/3.10.0-957.21.3.el7.x86_64 botocore/1.12.183", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1100, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "9d317a09-4f11-47d8-9a2a-37ed8d68e815", "eventTime": "2019-07-08T14:50:58Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "251.209.251.231", "userAgent": "aws-cli/1.16.193 Python/2.7.5 Linux/3.10.0-957.21.3.el7.x86_64 botocore/1.12.183", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"nextToken": "eyJ2IjoiMiIsImMiOiJlVUtwaktjWmRhYUtsWXFDOGhYNEY2dkZpSE5kWjB6cTZDM2xlNXZJNkI1YVNpMVo5cE5xcDl2NkpIcmJaRm93cFlXRjB4SDBmeFBKVXVVZkRiQnNOR3UvaXVZVzJTOE1Na1FMY1A1OHhPTzVzMFVWV0hZSFpQUGpJSVUvRVh3K1I2WXNUMU9KUGVNdDVDUGtKOU1YRlUwdlRMdzR4S3pqUzI3TzVlbllKU2NSNU5JRmtzSUdVaVBtSTRUR0dsQXBwK2xWSzIyakN3Z1c4Zz09IiwicyI6IjEifQ==", "maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "7a583476a-cdce-44f4-800d-e5821684955b", "record_id": "flaws_cloudtrail:0000053:7a583476a-cdce-44f4-800d-e5821684955b", "row_index": 53, "timestamp": "2019-07-08T14:51:01Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "251.209.251.231", "user_agent": "aws-cli/1.16.193 Python/2.7.5 Linux/3.10.0-957.21.3.el7.x86_64 botocore/1.12.183", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1101, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "7a583476a-cdce-44f4-800d-e5821684955b", "eventTime": "2019-07-08T14:51:01Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "251.209.251.231", "userAgent": "aws-cli/1.16.193 Python/2.7.5 Linux/3.10.0-957.21.3.el7.x86_64 botocore/1.12.183", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"nextToken": "eyJ2IjoiMiIsImMiOiJVWGp0ZGRmckRWTEFZcG9hUjRwU0pvUThsRDRuUDRITk81WkVVYnpobTZsTEp5VmtVZ3NKVkVCYnh0TmxORkN3bWQvWE42ZE8yUFQ5cGxaclphdXN4a1puN1FyOWhJbE5OUmtPZWxtMGd0YSthT1docjJ1SEViUTEwVk1ldmNYVFNSUXQ1UktmVDd2U0h4M0xlTzJ0bVFtOHpsVVZVdEkwQXFhQW5CUlp3R2psRzhtOGVId0o1MXZNcVNNZWo1dXN1L3NBR3Q2aFBKU2h5Zz09IiwicyI6IjEifQ==", "maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "7a583476a-cdce-44f4-800d-e5821684955b", "record_id": "flaws_cloudtrail:0000054:7a583476a-cdce-44f4-800d-e5821684955b", "row_index": 54, "timestamp": "2019-07-08T14:51:01Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "251.209.251.231", "user_agent": "aws-cli/1.16.193 Python/2.7.5 Linux/3.10.0-957.21.3.el7.x86_64 botocore/1.12.183", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1101, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "7a583476a-cdce-44f4-800d-e5821684955b", "eventTime": "2019-07-08T14:51:01Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "251.209.251.231", "userAgent": "aws-cli/1.16.193 Python/2.7.5 Linux/3.10.0-957.21.3.el7.x86_64 botocore/1.12.183", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"nextToken": "eyJ2IjoiMiIsImMiOiJVWGp0ZGRmckRWTEFZcG9hUjRwU0pvUThsRDRuUDRITk81WkVVYnpobTZsTEp5VmtVZ3NKVkVCYnh0TmxORkN3bWQvWE42ZE8yUFQ5cGxaclphdXN4a1puN1FyOWhJbE5OUmtPZWxtMGd0YSthT1docjJ1SEViUTEwVk1ldmNYVFNSUXQ1UktmVDd2U0h4M0xlTzJ0bVFtOHpsVVZVdEkwQXFhQW5CUlp3R2psRzhtOGVId0o1MXZNcVNNZWo1dXN1L3NBR3Q2aFBKU2h5Zz09IiwicyI6IjEifQ==", "maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "c4a87da0-5f45-4734-9361-266f145aa109", "record_id": "flaws_cloudtrail:0000055:c4a87da0-5f45-4734-9361-266f145aa109", "row_index": 55, "timestamp": "2019-07-08T14:51:04Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "251.209.251.231", "user_agent": "aws-cli/1.16.193 Python/2.7.5 Linux/3.10.0-957.21.3.el7.x86_64 botocore/1.12.183", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1100, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "c4a87da0-5f45-4734-9361-266f145aa109", "eventTime": "2019-07-08T14:51:04Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "251.209.251.231", "userAgent": "aws-cli/1.16.193 Python/2.7.5 Linux/3.10.0-957.21.3.el7.x86_64 botocore/1.12.183", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"nextToken": "eyJ2IjoiMiIsImMiOiIvd3JsdWZXWU9wWmJDUHhaRUp1Q0RUSFNNbWpZdHAzdXhnYXBVam9IcWlaQVd5eHVUdU5aM01FWUdTeFhLQU1ZTWFpK2lxQmRKSkNlQWNDQXV6ZTBYdWRGN293N1R1U1RsTFp1WEgxd1ByeTZGc3lZMXViVE5kMWVjZkFRRThFbnFuZGdvbzRUSVg0MC9KQ2ZJRGgvaVZlSUpPdkxGaTZKc01CUXRCbUNPbjNmdUZCV0JIWkxBTDNUaTliS2x0bGszUFd0WVN0eWVQQzdrUT09IiwicyI6IjEifQ==", "maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "c4a87da0-5f45-4734-9361-266f145aa109", "record_id": "flaws_cloudtrail:0000056:c4a87da0-5f45-4734-9361-266f145aa109", "row_index": 56, "timestamp": "2019-07-08T14:51:04Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "251.209.251.231", "user_agent": "aws-cli/1.16.193 Python/2.7.5 Linux/3.10.0-957.21.3.el7.x86_64 botocore/1.12.183", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1100, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "c4a87da0-5f45-4734-9361-266f145aa109", "eventTime": "2019-07-08T14:51:04Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "251.209.251.231", "userAgent": "aws-cli/1.16.193 Python/2.7.5 Linux/3.10.0-957.21.3.el7.x86_64 botocore/1.12.183", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"nextToken": "eyJ2IjoiMiIsImMiOiIvd3JsdWZXWU9wWmJDUHhaRUp1Q0RUSFNNbWpZdHAzdXhnYXBVam9IcWlaQVd5eHVUdU5aM01FWUdTeFhLQU1ZTWFpK2lxQmRKSkNlQWNDQXV6ZTBYdWRGN293N1R1U1RsTFp1WEgxd1ByeTZGc3lZMXViVE5kMWVjZkFRRThFbnFuZGdvbzRUSVg0MC9KQ2ZJRGgvaVZlSUpPdkxGaTZKc01CUXRCbUNPbjNmdUZCV0JIWkxBTDNUaTliS2x0bGszUFd0WVN0eWVQQzdrUT09IiwicyI6IjEifQ==", "maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "ea41d0ce-c1e9-4833-82fb-5e1a9b22efa9", "record_id": "flaws_cloudtrail:0000057:ea41d0ce-c1e9-4833-82fb-5e1a9b22efa9", "row_index": 57, "timestamp": "2019-07-08T14:51:07Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "251.209.251.231", "user_agent": "aws-cli/1.16.193 Python/2.7.5 Linux/3.10.0-957.21.3.el7.x86_64 botocore/1.12.183", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1092, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "ea41d0ce-c1e9-4833-82fb-5e1a9b22efa9", "eventTime": "2019-07-08T14:51:07Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "251.209.251.231", "userAgent": "aws-cli/1.16.193 Python/2.7.5 Linux/3.10.0-957.21.3.el7.x86_64 botocore/1.12.183", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"nextToken": "eyJ2IjoiMiIsImMiOiJicU1CMERqZzB6a2o3elR5N21RTjRUbnFKcHJjUDVhWklZdG9HdDlJMnQ4U3h1N1dLdUhjNkIyL0RtMENHcXZhWlBycjlobVY0QmZWUzhUNGJYMGxuK2xHMmNzLzNodlNscUhsckh2bjZ3Wi9ERU5MUmxmUTVIL3JOQzlJckRlMUFsZldFNjdWbUhWUjRENjc3NkJtREJBNXZZalNEQkljaEI0VlhWaUxseXE2T2duQmVSTkpFZkk3bkxHUjVzUXFhZXVwc29uZkFRPT0iLCJzIjoiMSJ9", "maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "ea41d0ce-c1e9-4833-82fb-5e1a9b22efa9", "record_id": "flaws_cloudtrail:0000058:ea41d0ce-c1e9-4833-82fb-5e1a9b22efa9", "row_index": 58, "timestamp": "2019-07-08T14:51:07Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "251.209.251.231", "user_agent": "aws-cli/1.16.193 Python/2.7.5 Linux/3.10.0-957.21.3.el7.x86_64 botocore/1.12.183", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1092, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "ea41d0ce-c1e9-4833-82fb-5e1a9b22efa9", "eventTime": "2019-07-08T14:51:07Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "251.209.251.231", "userAgent": "aws-cli/1.16.193 Python/2.7.5 Linux/3.10.0-957.21.3.el7.x86_64 botocore/1.12.183", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"nextToken": "eyJ2IjoiMiIsImMiOiJicU1CMERqZzB6a2o3elR5N21RTjRUbnFKcHJjUDVhWklZdG9HdDlJMnQ4U3h1N1dLdUhjNkIyL0RtMENHcXZhWlBycjlobVY0QmZWUzhUNGJYMGxuK2xHMmNzLzNodlNscUhsckh2bjZ3Wi9ERU5MUmxmUTVIL3JOQzlJckRlMUFsZldFNjdWbUhWUjRENjc3NkJtREJBNXZZalNEQkljaEI0VlhWaUxseXE2T2duQmVSTkpFZkk3bkxHUjVzUXFhZXVwc29uZkFRPT0iLCJzIjoiMSJ9", "maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "c14bf60b-5c30-4742-986c-328a3f386a56", "record_id": "flaws_cloudtrail:0000059:c14bf60b-5c30-4742-986c-328a3f386a56", "row_index": 59, "timestamp": "2019-07-08T14:51:09Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "251.209.251.231", "user_agent": "aws-cli/1.16.193 Python/2.7.5 Linux/3.10.0-957.21.3.el7.x86_64 botocore/1.12.183", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1101, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "c14bf60b-5c30-4742-986c-328a3f386a56", "eventTime": "2019-07-08T14:51:09Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "251.209.251.231", "userAgent": "aws-cli/1.16.193 Python/2.7.5 Linux/3.10.0-957.21.3.el7.x86_64 botocore/1.12.183", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"nextToken": "eyJ2IjoiMiIsImMiOiJQeUVLSkRyVFVxNnZRRG02dzlhaEpyYmdxZzJDWVRvY2hTV1FnR3VERXpyMFNleWljNEdDSUNkRGV3dU93TEEzNkdzMkE5dnA1Zi83ZjBrZi9YWjVueTlnQktaTm14R1pQdmNUa3k0TC96TnB2c2s0L3hLVFRMTXZCQnFVYmxzbW9DKzVpcDhqdFlWZWpYT04wQkhmNm9zRXp0MEl2OHAwaStPR3BJQmNFOWYxQmJmZWx0WWdjUUQwK3J2RU9IeDM2SXZSZ2gwT0hFRWRodz09IiwicyI6IjEifQ==", "maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "c14bf60b-5c30-4742-986c-328a3f386a56", "record_id": "flaws_cloudtrail:0000060:c14bf60b-5c30-4742-986c-328a3f386a56", "row_index": 60, "timestamp": "2019-07-08T14:51:09Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "251.209.251.231", "user_agent": "aws-cli/1.16.193 Python/2.7.5 Linux/3.10.0-957.21.3.el7.x86_64 botocore/1.12.183", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1101, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "c14bf60b-5c30-4742-986c-328a3f386a56", "eventTime": "2019-07-08T14:51:09Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "251.209.251.231", "userAgent": "aws-cli/1.16.193 Python/2.7.5 Linux/3.10.0-957.21.3.el7.x86_64 botocore/1.12.183", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"nextToken": "eyJ2IjoiMiIsImMiOiJQeUVLSkRyVFVxNnZRRG02dzlhaEpyYmdxZzJDWVRvY2hTV1FnR3VERXpyMFNleWljNEdDSUNkRGV3dU93TEEzNkdzMkE5dnA1Zi83ZjBrZi9YWjVueTlnQktaTm14R1pQdmNUa3k0TC96TnB2c2s0L3hLVFRMTXZCQnFVYmxzbW9DKzVpcDhqdFlWZWpYT04wQkhmNm9zRXp0MEl2OHAwaStPR3BJQmNFOWYxQmJmZWx0WWdjUUQwK3J2RU9IeDM2SXZSZ2gwT0hFRWRodz09IiwicyI6IjEifQ==", "maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "223b122a-9a22-4576-b2de-b8a2d19864d5", "record_id": "flaws_cloudtrail:0000061:223b122a-9a22-4576-b2de-b8a2d19864d5", "row_index": 61, "timestamp": "2019-07-08T14:51:12Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "251.209.251.231", "user_agent": "aws-cli/1.16.193 Python/2.7.5 Linux/3.10.0-957.21.3.el7.x86_64 botocore/1.12.183", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1100, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "223b122a-9a22-4576-b2de-b8a2d19864d5", "eventTime": "2019-07-08T14:51:12Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "251.209.251.231", "userAgent": "aws-cli/1.16.193 Python/2.7.5 Linux/3.10.0-957.21.3.el7.x86_64 botocore/1.12.183", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"nextToken": "eyJ2IjoiMiIsImMiOiJ2bjBVSXlLMTlKWm9UeVpObnpwRXdVd05FMVVWQ1VVWDVvU3hUQVhtS291SkptdzRHZ1Vscks3YWpTNW81bE9FQmgxVlRUOXc1K2Z3REVEekplV2lBMzRPeDhhejl5T3pyNjdiaFkvcnpaREJ1YncrNUJYVFpKZTZpK2taSGFidFoyMmU0NmZYUzBIM2EzeTIyWUt1YXhWRmcrbC9nd2gxamVuVVhOV2xIZnlLY1NybFEzbzFxK1E5SVdKRkg2Q3VLQU96anozRUVIN25OQT09IiwicyI6IjEifQ==", "maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "223b122a-9a22-4576-b2de-b8a2d19864d5", "record_id": "flaws_cloudtrail:0000062:223b122a-9a22-4576-b2de-b8a2d19864d5", "row_index": 62, "timestamp": "2019-07-08T14:51:12Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "251.209.251.231", "user_agent": "aws-cli/1.16.193 Python/2.7.5 Linux/3.10.0-957.21.3.el7.x86_64 botocore/1.12.183", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1100, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "223b122a-9a22-4576-b2de-b8a2d19864d5", "eventTime": "2019-07-08T14:51:12Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "251.209.251.231", "userAgent": "aws-cli/1.16.193 Python/2.7.5 Linux/3.10.0-957.21.3.el7.x86_64 botocore/1.12.183", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"nextToken": "eyJ2IjoiMiIsImMiOiJ2bjBVSXlLMTlKWm9UeVpObnpwRXdVd05FMVVWQ1VVWDVvU3hUQVhtS291SkptdzRHZ1Vscks3YWpTNW81bE9FQmgxVlRUOXc1K2Z3REVEekplV2lBMzRPeDhhejl5T3pyNjdiaFkvcnpaREJ1YncrNUJYVFpKZTZpK2taSGFidFoyMmU0NmZYUzBIM2EzeTIyWUt1YXhWRmcrbC9nd2gxamVuVVhOV2xIZnlLY1NybFEzbzFxK1E5SVdKRkg2Q3VLQU96anozRUVIN25OQT09IiwicyI6IjEifQ==", "maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "5df598304-4883-4e01-99cd-2eaa8d42a660", "record_id": "flaws_cloudtrail:0000063:5df598304-4883-4e01-99cd-2eaa8d42a660", "row_index": 63, "timestamp": "2019-07-08T14:51:14Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "251.209.251.231", "user_agent": "aws-cli/1.16.193 Python/2.7.5 Linux/3.10.0-957.21.3.el7.x86_64 botocore/1.12.183", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1091, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "5df598304-4883-4e01-99cd-2eaa8d42a660", "eventTime": "2019-07-08T14:51:14Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "251.209.251.231", "userAgent": "aws-cli/1.16.193 Python/2.7.5 Linux/3.10.0-957.21.3.el7.x86_64 botocore/1.12.183", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"nextToken": "eyJ2IjoiMiIsImMiOiJPOE5FL1Q1a3JBVjV2aWdUb0lWVmQ3UTdERTl4RFltN0NSMmlvMmdKckcxMDdFOG9iQ3ZEZjhhM2Q1aGlkM1RQdDNneXkxNnQ1SkpnRkpxUG5pVnlrWDE5UUZsTWp5L2FYcWFGNDl3NnpuSUhHOU5UdlRtY3YvR2N0K3l3ZXdEK2dlLzNrSk9zRHF6T0JOM2VxZHZ6Y2tLQUVOSEp3K0RLR2RHV1BJNHVMTHVTRTh6azJiREo3U1NML00yd2Jlbi91cENFQTZFOGxvYz0iLCJzIjoiMSJ9", "maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "5df598304-4883-4e01-99cd-2eaa8d42a660", "record_id": "flaws_cloudtrail:0000064:5df598304-4883-4e01-99cd-2eaa8d42a660", "row_index": 64, "timestamp": "2019-07-08T14:51:14Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "251.209.251.231", "user_agent": "aws-cli/1.16.193 Python/2.7.5 Linux/3.10.0-957.21.3.el7.x86_64 botocore/1.12.183", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1091, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "5df598304-4883-4e01-99cd-2eaa8d42a660", "eventTime": "2019-07-08T14:51:14Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "251.209.251.231", "userAgent": "aws-cli/1.16.193 Python/2.7.5 Linux/3.10.0-957.21.3.el7.x86_64 botocore/1.12.183", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"nextToken": "eyJ2IjoiMiIsImMiOiJPOE5FL1Q1a3JBVjV2aWdUb0lWVmQ3UTdERTl4RFltN0NSMmlvMmdKckcxMDdFOG9iQ3ZEZjhhM2Q1aGlkM1RQdDNneXkxNnQ1SkpnRkpxUG5pVnlrWDE5UUZsTWp5L2FYcWFGNDl3NnpuSUhHOU5UdlRtY3YvR2N0K3l3ZXdEK2dlLzNrSk9zRHF6T0JOM2VxZHZ6Y2tLQUVOSEp3K0RLR2RHV1BJNHVMTHVTRTh6azJiREo3U1NML00yd2Jlbi91cENFQTZFOGxvYz0iLCJzIjoiMSJ9", "maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "3949fffd-fbf4-482e-9b30-a8291a2a2d06", "record_id": "flaws_cloudtrail:0000065:3949fffd-fbf4-482e-9b30-a8291a2a2d06", "row_index": 65, "timestamp": "2019-07-08T14:51:17Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "251.209.251.231", "user_agent": "aws-cli/1.16.193 Python/2.7.5 Linux/3.10.0-957.21.3.el7.x86_64 botocore/1.12.183", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1101, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "3949fffd-fbf4-482e-9b30-a8291a2a2d06", "eventTime": "2019-07-08T14:51:17Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "251.209.251.231", "userAgent": "aws-cli/1.16.193 Python/2.7.5 Linux/3.10.0-957.21.3.el7.x86_64 botocore/1.12.183", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"nextToken": "eyJ2IjoiMiIsImMiOiJldzF4Y0NobnRLZzl3VVZBZ0ZvV1JlY1c0YzZHV09rZS9QNlhMRStnSVlqek5VQk0zUWNHUGVYNmkzMjF1NVlKaEZlVWFibFdGK0dsK1BUQk9kOWI5MVZtcitwWk1jLzFnSkxHYm5DMWdIcXIydWxUWVczQjNpWHN4QmlqWC9iWXkxbmkzTVFsbi96SFNMMitUaWQ5dmpKL2xwUlIzNFVaZUNMZkNMSjlNMUdlT2VWeXNScWdWOFJialRJUDRQQmRpM24zV2xQOFV3d2tFQT09IiwicyI6IjEifQ==", "maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "3949fffd-fbf4-482e-9b30-a8291a2a2d06", "record_id": "flaws_cloudtrail:0000066:3949fffd-fbf4-482e-9b30-a8291a2a2d06", "row_index": 66, "timestamp": "2019-07-08T14:51:17Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "251.209.251.231", "user_agent": "aws-cli/1.16.193 Python/2.7.5 Linux/3.10.0-957.21.3.el7.x86_64 botocore/1.12.183", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1101, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "3949fffd-fbf4-482e-9b30-a8291a2a2d06", "eventTime": "2019-07-08T14:51:17Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "251.209.251.231", "userAgent": "aws-cli/1.16.193 Python/2.7.5 Linux/3.10.0-957.21.3.el7.x86_64 botocore/1.12.183", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"nextToken": "eyJ2IjoiMiIsImMiOiJldzF4Y0NobnRLZzl3VVZBZ0ZvV1JlY1c0YzZHV09rZS9QNlhMRStnSVlqek5VQk0zUWNHUGVYNmkzMjF1NVlKaEZlVWFibFdGK0dsK1BUQk9kOWI5MVZtcitwWk1jLzFnSkxHYm5DMWdIcXIydWxUWVczQjNpWHN4QmlqWC9iWXkxbmkzTVFsbi96SFNMMitUaWQ5dmpKL2xwUlIzNFVaZUNMZkNMSjlNMUdlT2VWeXNScWdWOFJialRJUDRQQmRpM24zV2xQOFV3d2tFQT09IiwicyI6IjEifQ==", "maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "06961f-2483-4508-a4fb-6e348d210b94", "record_id": "flaws_cloudtrail:0000067:06961f-2483-4508-a4fb-6e348d210b94", "row_index": 67, "timestamp": "2019-07-08T14:51:19Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "251.209.251.231", "user_agent": "aws-cli/1.16.193 Python/2.7.5 Linux/3.10.0-957.21.3.el7.x86_64 botocore/1.12.183", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1090, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "06961f-2483-4508-a4fb-6e348d210b94", "eventTime": "2019-07-08T14:51:19Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "251.209.251.231", "userAgent": "aws-cli/1.16.193 Python/2.7.5 Linux/3.10.0-957.21.3.el7.x86_64 botocore/1.12.183", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"nextToken": "eyJ2IjoiMiIsImMiOiJpWmpFUHVHYVl2VTE3bWpoTktDNXJZY3lzTHJWWUlDS1ZIWHI3U1lrM0wybzlhcGZjOHVrSlFnMzJuM3BTOTI0eHZQOThVck94WjlGUFFhZXN5OVYvaDEzMVZ0OU9uTjhxUG9ncEdRNDBzQ09wcHpEYm1sdXBHSGFkdG0vYnhJWkVaYXNjMnpJTWJ3UDUyZUdoenNLYjlqcjdWOW84bEhBQ3BHcS8wOC8rNlEvcGlRL2VQLzhKSEx3Y25CSXB6SkJZcFNodW1PT0p3PT0iLCJzIjoiMSJ9", "maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "06961f-2483-4508-a4fb-6e348d210b94", "record_id": "flaws_cloudtrail:0000068:06961f-2483-4508-a4fb-6e348d210b94", "row_index": 68, "timestamp": "2019-07-08T14:51:19Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "251.209.251.231", "user_agent": "aws-cli/1.16.193 Python/2.7.5 Linux/3.10.0-957.21.3.el7.x86_64 botocore/1.12.183", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1090, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "06961f-2483-4508-a4fb-6e348d210b94", "eventTime": "2019-07-08T14:51:19Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "251.209.251.231", "userAgent": "aws-cli/1.16.193 Python/2.7.5 Linux/3.10.0-957.21.3.el7.x86_64 botocore/1.12.183", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"nextToken": "eyJ2IjoiMiIsImMiOiJpWmpFUHVHYVl2VTE3bWpoTktDNXJZY3lzTHJWWUlDS1ZIWHI3U1lrM0wybzlhcGZjOHVrSlFnMzJuM3BTOTI0eHZQOThVck94WjlGUFFhZXN5OVYvaDEzMVZ0OU9uTjhxUG9ncEdRNDBzQ09wcHpEYm1sdXBHSGFkdG0vYnhJWkVaYXNjMnpJTWJ3UDUyZUdoenNLYjlqcjdWOW84bEhBQ3BHcS8wOC8rNlEvcGlRL2VQLzhKSEx3Y25CSXB6SkJZcFNodW1PT0p3PT0iLCJzIjoiMSJ9", "maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "977037a1f-4c0d-4f98-8d1a-c7524a1eea3b", "record_id": "flaws_cloudtrail:0000069:977037a1f-4c0d-4f98-8d1a-c7524a1eea3b", "row_index": 69, "timestamp": "2019-07-08T14:51:21Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "251.209.251.231", "user_agent": "aws-cli/1.16.193 Python/2.7.5 Linux/3.10.0-957.21.3.el7.x86_64 botocore/1.12.183", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1101, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "977037a1f-4c0d-4f98-8d1a-c7524a1eea3b", "eventTime": "2019-07-08T14:51:21Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "251.209.251.231", "userAgent": "aws-cli/1.16.193 Python/2.7.5 Linux/3.10.0-957.21.3.el7.x86_64 botocore/1.12.183", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"nextToken": "eyJ2IjoiMiIsImMiOiJ1bUFRTWU0ZHlTWXNUUEI0KzRuYVRKUmJlbWlueTFscURlUmFMbWFqbWF3ZjJCYm5GVUwza1QwMndUaXF4ajhvQjBEMVRVeGZzRXZzaHNibjU1MVpRdkpTUFRYanVvbmYyTW0yWXA5bWNMSVJoS1M1TnlxdXVyeVE3dDNDc1JpWHVvV3NXRFlOU1VaM0l3NVh0UG80Z3M3RnBpYmhEb2JYd2N3TER5ZHlmYkVtTU1YajZxSE01M0pXU1hSdjVWVUVuWmpORjFYVnhWTStUQT09IiwicyI6IjEifQ==", "maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "977037a1f-4c0d-4f98-8d1a-c7524a1eea3b", "record_id": "flaws_cloudtrail:0000070:977037a1f-4c0d-4f98-8d1a-c7524a1eea3b", "row_index": 70, "timestamp": "2019-07-08T14:51:21Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "251.209.251.231", "user_agent": "aws-cli/1.16.193 Python/2.7.5 Linux/3.10.0-957.21.3.el7.x86_64 botocore/1.12.183", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1101, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "977037a1f-4c0d-4f98-8d1a-c7524a1eea3b", "eventTime": "2019-07-08T14:51:21Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "251.209.251.231", "userAgent": "aws-cli/1.16.193 Python/2.7.5 Linux/3.10.0-957.21.3.el7.x86_64 botocore/1.12.183", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"nextToken": "eyJ2IjoiMiIsImMiOiJ1bUFRTWU0ZHlTWXNUUEI0KzRuYVRKUmJlbWlueTFscURlUmFMbWFqbWF3ZjJCYm5GVUwza1QwMndUaXF4ajhvQjBEMVRVeGZzRXZzaHNibjU1MVpRdkpTUFRYanVvbmYyTW0yWXA5bWNMSVJoS1M1TnlxdXVyeVE3dDNDc1JpWHVvV3NXRFlOU1VaM0l3NVh0UG80Z3M3RnBpYmhEb2JYd2N3TER5ZHlmYkVtTU1YajZxSE01M0pXU1hSdjVWVUVuWmpORjFYVnhWTStUQT09IiwicyI6IjEifQ==", "maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "c06343b7-e804-4ecf-9e27-e4841e6c30a8", "record_id": "flaws_cloudtrail:0000071:c06343b7-e804-4ecf-9e27-e4841e6c30a8", "row_index": 71, "timestamp": "2019-07-08T14:51:24Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "251.209.251.231", "user_agent": "aws-cli/1.16.193 Python/2.7.5 Linux/3.10.0-957.21.3.el7.x86_64 botocore/1.12.183", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1092, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "c06343b7-e804-4ecf-9e27-e4841e6c30a8", "eventTime": "2019-07-08T14:51:24Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "251.209.251.231", "userAgent": "aws-cli/1.16.193 Python/2.7.5 Linux/3.10.0-957.21.3.el7.x86_64 botocore/1.12.183", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"nextToken": "eyJ2IjoiMiIsImMiOiJDUEpDTjVPSzIzeGxUVlNrNEkySG1qT09YZGVEMTFTNjdMKzA1VWZPNm1vaHI5RGlGTUpYc0RhRlRvUXVqdTgwV2lHUjQzdGhhT0pSRk1LKzFVZkFyamFadGlXQ1J4bjlPRzRFcG0wbHRBYitSQWNhNWx6UWcyVGZRSS9lWC9kL2lxOGowdjF1TE9ZVGxBSTNpbHVVUmtXNGRtWjRUdWNlZXdRWkhNMW9qbmFSRm9xKy9qOGVpWVE5SWhGb1pKcGZrckNIV2J5dUR3PT0iLCJzIjoiMSJ9", "maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "c06343b7-e804-4ecf-9e27-e4841e6c30a8", "record_id": "flaws_cloudtrail:0000072:c06343b7-e804-4ecf-9e27-e4841e6c30a8", "row_index": 72, "timestamp": "2019-07-08T14:51:24Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "251.209.251.231", "user_agent": "aws-cli/1.16.193 Python/2.7.5 Linux/3.10.0-957.21.3.el7.x86_64 botocore/1.12.183", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1092, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "c06343b7-e804-4ecf-9e27-e4841e6c30a8", "eventTime": "2019-07-08T14:51:24Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "251.209.251.231", "userAgent": "aws-cli/1.16.193 Python/2.7.5 Linux/3.10.0-957.21.3.el7.x86_64 botocore/1.12.183", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"nextToken": "eyJ2IjoiMiIsImMiOiJDUEpDTjVPSzIzeGxUVlNrNEkySG1qT09YZGVEMTFTNjdMKzA1VWZPNm1vaHI5RGlGTUpYc0RhRlRvUXVqdTgwV2lHUjQzdGhhT0pSRk1LKzFVZkFyamFadGlXQ1J4bjlPRzRFcG0wbHRBYitSQWNhNWx6UWcyVGZRSS9lWC9kL2lxOGowdjF1TE9ZVGxBSTNpbHVVUmtXNGRtWjRUdWNlZXdRWkhNMW9qbmFSRm9xKy9qOGVpWVE5SWhGb1pKcGZrckNIV2J5dUR3PT0iLCJzIjoiMSJ9", "maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "27618-bbc5-4b97-9752-045aba9d3798", "record_id": "flaws_cloudtrail:0000073:27618-bbc5-4b97-9752-045aba9d3798", "row_index": 73, "timestamp": "2019-07-08T14:51:26Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "251.209.251.231", "user_agent": "aws-cli/1.16.193 Python/2.7.5 Linux/3.10.0-957.21.3.el7.x86_64 botocore/1.12.183", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1097, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "27618-bbc5-4b97-9752-045aba9d3798", "eventTime": "2019-07-08T14:51:26Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "251.209.251.231", "userAgent": "aws-cli/1.16.193 Python/2.7.5 Linux/3.10.0-957.21.3.el7.x86_64 botocore/1.12.183", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"nextToken": "eyJ2IjoiMiIsImMiOiJIL1Z0OGluSzJDSzVxY3lZU28zaDJUeVNaSlJGeU9HL1NrUGhaWTRMOEVDb1h4OUdkL3dYQ0lNUmozL1NvRHhqWDlCeUZsdTRKSjJHUkZJNlBleHRCVVJuRFl3TjBMeVc5MkgrZVE3cWRPWGtRaVRhK1JlM0RWTStWT3NmejZFaW1JeVMvOTdpTDdReGhSUS9BWUVZK2pDZkJ0cEZQV05sWlJMS3gySlpwbC8ya0V1OTcvQzJOUms5UHk5eklFS2Y5OS9Yam9MTkJZeUZaQT09IiwicyI6IjEifQ==", "maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "27618-bbc5-4b97-9752-045aba9d3798", "record_id": "flaws_cloudtrail:0000074:27618-bbc5-4b97-9752-045aba9d3798", "row_index": 74, "timestamp": "2019-07-08T14:51:26Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "251.209.251.231", "user_agent": "aws-cli/1.16.193 Python/2.7.5 Linux/3.10.0-957.21.3.el7.x86_64 botocore/1.12.183", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1097, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "27618-bbc5-4b97-9752-045aba9d3798", "eventTime": "2019-07-08T14:51:26Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "251.209.251.231", "userAgent": "aws-cli/1.16.193 Python/2.7.5 Linux/3.10.0-957.21.3.el7.x86_64 botocore/1.12.183", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"nextToken": "eyJ2IjoiMiIsImMiOiJIL1Z0OGluSzJDSzVxY3lZU28zaDJUeVNaSlJGeU9HL1NrUGhaWTRMOEVDb1h4OUdkL3dYQ0lNUmozL1NvRHhqWDlCeUZsdTRKSjJHUkZJNlBleHRCVVJuRFl3TjBMeVc5MkgrZVE3cWRPWGtRaVRhK1JlM0RWTStWT3NmejZFaW1JeVMvOTdpTDdReGhSUS9BWUVZK2pDZkJ0cEZQV05sWlJMS3gySlpwbC8ya0V1OTcvQzJOUms5UHk5eklFS2Y5OS9Yam9MTkJZeUZaQT09IiwicyI6IjEifQ==", "maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "1aa80968-be41-41c3-a397-3bd8d8dc2922", "record_id": "flaws_cloudtrail:0000075:1aa80968-be41-41c3-a397-3bd8d8dc2922", "row_index": 75, "timestamp": "2019-07-08T14:51:27Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "251.209.251.231", "user_agent": "aws-cli/1.16.193 Python/2.7.5 Linux/3.10.0-957.21.3.el7.x86_64 botocore/1.12.183", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1100, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "1aa80968-be41-41c3-a397-3bd8d8dc2922", "eventTime": "2019-07-08T14:51:27Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "251.209.251.231", "userAgent": "aws-cli/1.16.193 Python/2.7.5 Linux/3.10.0-957.21.3.el7.x86_64 botocore/1.12.183", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"nextToken": "eyJ2IjoiMiIsImMiOiJGMUpLRnlUZlRZNUc5aFd1cUw0cVRVdmFJYlNmWkxQNi9NVzFHeU55dzdaV1hYTVAyZmR4VmluQm1GVm81TFJiZzFWR25wczJSS1ZsM0VuOThrTGVLbzZHTmc5T1ltZGNDU0FveVM0T25LK3RhTlJtZnFCOWo4MUZOTGQ4VkQwZEthdGY4NFlQUWwyNGpha0lnVmwrTU84Y01IVlBBbTZrZmxYUmFjNkxRYytGSWR2MnV5SWNad1JLcmNpaTdva1pRUEFXbjlqSDMxSnBSUT09IiwicyI6IjEifQ==", "maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "1aa80968-be41-41c3-a397-3bd8d8dc2922", "record_id": "flaws_cloudtrail:0000076:1aa80968-be41-41c3-a397-3bd8d8dc2922", "row_index": 76, "timestamp": "2019-07-08T14:51:27Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "251.209.251.231", "user_agent": "aws-cli/1.16.193 Python/2.7.5 Linux/3.10.0-957.21.3.el7.x86_64 botocore/1.12.183", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1100, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "1aa80968-be41-41c3-a397-3bd8d8dc2922", "eventTime": "2019-07-08T14:51:27Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "251.209.251.231", "userAgent": "aws-cli/1.16.193 Python/2.7.5 Linux/3.10.0-957.21.3.el7.x86_64 botocore/1.12.183", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"nextToken": "eyJ2IjoiMiIsImMiOiJGMUpLRnlUZlRZNUc5aFd1cUw0cVRVdmFJYlNmWkxQNi9NVzFHeU55dzdaV1hYTVAyZmR4VmluQm1GVm81TFJiZzFWR25wczJSS1ZsM0VuOThrTGVLbzZHTmc5T1ltZGNDU0FveVM0T25LK3RhTlJtZnFCOWo4MUZOTGQ4VkQwZEthdGY4NFlQUWwyNGpha0lnVmwrTU84Y01IVlBBbTZrZmxYUmFjNkxRYytGSWR2MnV5SWNad1JLcmNpaTdva1pRUEFXbjlqSDMxSnBSUT09IiwicyI6IjEifQ==", "maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "2e1573de-a49a-4a7e-ae0b-31219bf53ad0", "record_id": "flaws_cloudtrail:0000077:2e1573de-a49a-4a7e-ae0b-31219bf53ad0", "row_index": 77, "timestamp": "2019-07-08T14:51:29Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "251.209.251.231", "user_agent": "aws-cli/1.16.193 Python/2.7.5 Linux/3.10.0-957.21.3.el7.x86_64 botocore/1.12.183", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1120, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "2e1573de-a49a-4a7e-ae0b-31219bf53ad0", "eventTime": "2019-07-08T14:51:29Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "251.209.251.231", "userAgent": "aws-cli/1.16.193 Python/2.7.5 Linux/3.10.0-957.21.3.el7.x86_64 botocore/1.12.183", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"nextToken": "eyJ2IjoiMiIsImMiOiIwTUdveS9TM0taeWlxOEVidWVWS0FyM3hYMzVVTzNQOFNkdG5GN3JMNEYyOG9Qd0ZkbndPeFNFd3BaLzN2Q2QwYnhrNWpUZERxU0JSZ3dCTmpBTWFodWhZSU5iR1FvSlI2TnNXcjJrditSUFhsb3gwMnRZNTQ2S0Z5bXBpRkZXcFVJMHRDSTVKcjRHdG9RamlKSnRTdEVEc205dzRNWjkvdGRhVHhOVjIycjhQbm1vTVhBVWVzaFUrWUVROGV4aGJyNjFvOXNsNlNSY1h1dUtiTE9vci9VOC81MmtNZUUwPSIsInMiOiIxIn0=", "maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "2e1573de-a49a-4a7e-ae0b-31219bf53ad0", "record_id": "flaws_cloudtrail:0000078:2e1573de-a49a-4a7e-ae0b-31219bf53ad0", "row_index": 78, "timestamp": "2019-07-08T14:51:29Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "251.209.251.231", "user_agent": "aws-cli/1.16.193 Python/2.7.5 Linux/3.10.0-957.21.3.el7.x86_64 botocore/1.12.183", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1120, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "2e1573de-a49a-4a7e-ae0b-31219bf53ad0", "eventTime": "2019-07-08T14:51:29Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "251.209.251.231", "userAgent": "aws-cli/1.16.193 Python/2.7.5 Linux/3.10.0-957.21.3.el7.x86_64 botocore/1.12.183", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"nextToken": "eyJ2IjoiMiIsImMiOiIwTUdveS9TM0taeWlxOEVidWVWS0FyM3hYMzVVTzNQOFNkdG5GN3JMNEYyOG9Qd0ZkbndPeFNFd3BaLzN2Q2QwYnhrNWpUZERxU0JSZ3dCTmpBTWFodWhZSU5iR1FvSlI2TnNXcjJrditSUFhsb3gwMnRZNTQ2S0Z5bXBpRkZXcFVJMHRDSTVKcjRHdG9RamlKSnRTdEVEc205dzRNWjkvdGRhVHhOVjIycjhQbm1vTVhBVWVzaFUrWUVROGV4aGJyNjFvOXNsNlNSY1h1dUtiTE9vci9VOC81MmtNZUUwPSIsInMiOiIxIn0=", "maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "cfcbd127-4ced-4eb6-9cee-b981496de37e", "record_id": "flaws_cloudtrail:0000079:cfcbd127-4ced-4eb6-9cee-b981496de37e", "row_index": 79, "timestamp": "2019-07-08T14:51:30Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "251.209.251.231", "user_agent": "aws-cli/1.16.193 Python/2.7.5 Linux/3.10.0-957.21.3.el7.x86_64 botocore/1.12.183", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1108, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "cfcbd127-4ced-4eb6-9cee-b981496de37e", "eventTime": "2019-07-08T14:51:30Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "251.209.251.231", "userAgent": "aws-cli/1.16.193 Python/2.7.5 Linux/3.10.0-957.21.3.el7.x86_64 botocore/1.12.183", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"nextToken": "eyJ2IjoiMiIsImMiOiJqTDlYQ2gxSUFQdzczSjhRYlhuVjNacjJqczQ1eFNBWVNwVHViREMvS2dxeGVUenlHNWZGR3g0MzRWL2NRakVmbjJMK1dvMlMvWmNpWXZMYkVqMUJ5ajlCT2p0OWF5dy85blkxT3VoNFJCbitHcTVJMmxCNmYzdU9Sck9oT2RnSDdZU1dNdC9sdFUvOENST3pCNFZRclNPbU1jNWx4QUtQSEtLMnJWajJjMHd2Zm1hNG41QWEwMGxEMmZINVNmSDFEaGNTalo3Zmw4ODRpNmQ3Ym1PMEZRPT0iLCJzIjoiMSJ9", "maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "cfcbd127-4ced-4eb6-9cee-b981496de37e", "record_id": "flaws_cloudtrail:0000080:cfcbd127-4ced-4eb6-9cee-b981496de37e", "row_index": 80, "timestamp": "2019-07-08T14:51:30Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "251.209.251.231", "user_agent": "aws-cli/1.16.193 Python/2.7.5 Linux/3.10.0-957.21.3.el7.x86_64 botocore/1.12.183", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1108, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "cfcbd127-4ced-4eb6-9cee-b981496de37e", "eventTime": "2019-07-08T14:51:30Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "251.209.251.231", "userAgent": "aws-cli/1.16.193 Python/2.7.5 Linux/3.10.0-957.21.3.el7.x86_64 botocore/1.12.183", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"nextToken": "eyJ2IjoiMiIsImMiOiJqTDlYQ2gxSUFQdzczSjhRYlhuVjNacjJqczQ1eFNBWVNwVHViREMvS2dxeGVUenlHNWZGR3g0MzRWL2NRakVmbjJMK1dvMlMvWmNpWXZMYkVqMUJ5ajlCT2p0OWF5dy85blkxT3VoNFJCbitHcTVJMmxCNmYzdU9Sck9oT2RnSDdZU1dNdC9sdFUvOENST3pCNFZRclNPbU1jNWx4QUtQSEtLMnJWajJjMHd2Zm1hNG41QWEwMGxEMmZINVNmSDFEaGNTalo3Zmw4ODRpNmQ3Ym1PMEZRPT0iLCJzIjoiMSJ9", "maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "9641ac12-3009-43a9-8f4e-3b3a9d0bbff0", "record_id": "flaws_cloudtrail:0000081:9641ac12-3009-43a9-8f4e-3b3a9d0bbff0", "row_index": 81, "timestamp": "2019-07-08T14:51:31Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "251.209.251.231", "user_agent": "aws-cli/1.16.193 Python/2.7.5 Linux/3.10.0-957.21.3.el7.x86_64 botocore/1.12.183", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1120, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "9641ac12-3009-43a9-8f4e-3b3a9d0bbff0", "eventTime": "2019-07-08T14:51:31Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "251.209.251.231", "userAgent": "aws-cli/1.16.193 Python/2.7.5 Linux/3.10.0-957.21.3.el7.x86_64 botocore/1.12.183", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"nextToken": "eyJ2IjoiMiIsImMiOiJmWDRxc01SSVhJcHAxekQ1c1pPeUJjZ0xIWEtFSVQrTEJMU29SV3p2eU1ob0ZRWWtwK1l1ODJQekxrZjZIZEpHd3IxYzloZUtOODc2TlZiWE9BQVl1VkNzZzNpVDJYSXFDSjRTQzZSRzFoOGt1aHM1SG4wczhVM1Jud0E4b2dacStrc3JHK1F0RTUrNXFJd0pkaUxzVWs1Y3ljWmhXeERkc0hCSEh3OE91eVkxUVZTU1Y1V0kvandXSittS245aE13VVVCOUUvaDVPSU1EL0NVRnE4UU85N2JNWk9mWjhJPSIsInMiOiIxIn0=", "maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "9641ac12-3009-43a9-8f4e-3b3a9d0bbff0", "record_id": "flaws_cloudtrail:0000082:9641ac12-3009-43a9-8f4e-3b3a9d0bbff0", "row_index": 82, "timestamp": "2019-07-08T14:51:31Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "251.209.251.231", "user_agent": "aws-cli/1.16.193 Python/2.7.5 Linux/3.10.0-957.21.3.el7.x86_64 botocore/1.12.183", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1120, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "9641ac12-3009-43a9-8f4e-3b3a9d0bbff0", "eventTime": "2019-07-08T14:51:31Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "251.209.251.231", "userAgent": "aws-cli/1.16.193 Python/2.7.5 Linux/3.10.0-957.21.3.el7.x86_64 botocore/1.12.183", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"nextToken": "eyJ2IjoiMiIsImMiOiJmWDRxc01SSVhJcHAxekQ1c1pPeUJjZ0xIWEtFSVQrTEJMU29SV3p2eU1ob0ZRWWtwK1l1ODJQekxrZjZIZEpHd3IxYzloZUtOODc2TlZiWE9BQVl1VkNzZzNpVDJYSXFDSjRTQzZSRzFoOGt1aHM1SG4wczhVM1Jud0E4b2dacStrc3JHK1F0RTUrNXFJd0pkaUxzVWs1Y3ljWmhXeERkc0hCSEh3OE91eVkxUVZTU1Y1V0kvandXSittS245aE13VVVCOUUvaDVPSU1EL0NVRnE4UU85N2JNWk9mWjhJPSIsInMiOiIxIn0=", "maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "6944fa51-d0b8-48c3-ab77-dd25e9059b83", "record_id": "flaws_cloudtrail:0000083:6944fa51-d0b8-48c3-ab77-dd25e9059b83", "row_index": 83, "timestamp": "2019-07-08T14:51:32Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "251.209.251.231", "user_agent": "aws-cli/1.16.193 Python/2.7.5 Linux/3.10.0-957.21.3.el7.x86_64 botocore/1.12.183", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1076, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "6944fa51-d0b8-48c3-ab77-dd25e9059b83", "eventTime": "2019-07-08T14:51:32Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "251.209.251.231", "userAgent": "aws-cli/1.16.193 Python/2.7.5 Linux/3.10.0-957.21.3.el7.x86_64 botocore/1.12.183", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"nextToken": "eyJ2IjoiMiIsImMiOiJKU3NEcDgvZG4vQnFiSEVkMHM2dUxoNTlydDNnYkY1Zk1pQlZSOWRiU2lBNWxPVk5MbGxkQnRmNHdNTm5mMXl2RVkyYllLWklPMHdiaER1czc1TlVKcVpjbmFpWDNQUC9CdHdScjI0UUM5Nk9sS1d3QXNJUGhOdXFPT2ZhaVBpVDJvNllqd3JIS2Z5SXVBVnZ4Rno3K1NsbTVZbW4rRnBjS25ES3NjaW1XcHI3R0g0aGNNWmI0bHc2bmNYRHIxMD0iLCJzIjoiMSJ9", "maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "6944fa51-d0b8-48c3-ab77-dd25e9059b83", "record_id": "flaws_cloudtrail:0000084:6944fa51-d0b8-48c3-ab77-dd25e9059b83", "row_index": 84, "timestamp": "2019-07-08T14:51:32Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "251.209.251.231", "user_agent": "aws-cli/1.16.193 Python/2.7.5 Linux/3.10.0-957.21.3.el7.x86_64 botocore/1.12.183", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1076, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "6944fa51-d0b8-48c3-ab77-dd25e9059b83", "eventTime": "2019-07-08T14:51:32Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "251.209.251.231", "userAgent": "aws-cli/1.16.193 Python/2.7.5 Linux/3.10.0-957.21.3.el7.x86_64 botocore/1.12.183", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"nextToken": "eyJ2IjoiMiIsImMiOiJKU3NEcDgvZG4vQnFiSEVkMHM2dUxoNTlydDNnYkY1Zk1pQlZSOWRiU2lBNWxPVk5MbGxkQnRmNHdNTm5mMXl2RVkyYllLWklPMHdiaER1czc1TlVKcVpjbmFpWDNQUC9CdHdScjI0UUM5Nk9sS1d3QXNJUGhOdXFPT2ZhaVBpVDJvNllqd3JIS2Z5SXVBVnZ4Rno3K1NsbTVZbW4rRnBjS25ES3NjaW1XcHI3R0g0aGNNWmI0bHc2bmNYRHIxMD0iLCJzIjoiMSJ9", "maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "368a513c-98fe-4b11-a8fc-063c592ca6c7", "record_id": "flaws_cloudtrail:0000085:368a513c-98fe-4b11-a8fc-063c592ca6c7", "row_index": 85, "timestamp": "2019-07-08T14:51:33Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "251.209.251.231", "user_agent": "aws-cli/1.16.193 Python/2.7.5 Linux/3.10.0-957.21.3.el7.x86_64 botocore/1.12.183", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1120, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "368a513c-98fe-4b11-a8fc-063c592ca6c7", "eventTime": "2019-07-08T14:51:33Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "251.209.251.231", "userAgent": "aws-cli/1.16.193 Python/2.7.5 Linux/3.10.0-957.21.3.el7.x86_64 botocore/1.12.183", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"nextToken": "eyJ2IjoiMiIsImMiOiJOalFlTnhOZWw4aVpWbXRkZXhoN05qejlLM0J4SmZqWUNFOTNCYjR0SWhUOHRPc0M1K3JwNlZYY1dVb3RIV2hVbkV6TEFIUWt4R1lCRTF4aW5QWEswclRyQW1rYzFkdHN4cE5vUE0zQS9icTFocFZwd0VDK0tXN0pBYklFNDJCcldrZ01FdzhVNS84YXE5Ty93MlFFZmQyckJ6T2ErcHg3ZUk5cER2WHNyaWRLUHJidUx5aEhuTTlpWk53VUtjTWdZOWdGT3JuYmg0cHBqTEVaUXJtSzA3cWY3dXpmQUhvPSIsInMiOiIxIn0=", "maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "368a513c-98fe-4b11-a8fc-063c592ca6c7", "record_id": "flaws_cloudtrail:0000086:368a513c-98fe-4b11-a8fc-063c592ca6c7", "row_index": 86, "timestamp": "2019-07-08T14:51:33Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "251.209.251.231", "user_agent": "aws-cli/1.16.193 Python/2.7.5 Linux/3.10.0-957.21.3.el7.x86_64 botocore/1.12.183", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1120, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "368a513c-98fe-4b11-a8fc-063c592ca6c7", "eventTime": "2019-07-08T14:51:33Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "251.209.251.231", "userAgent": "aws-cli/1.16.193 Python/2.7.5 Linux/3.10.0-957.21.3.el7.x86_64 botocore/1.12.183", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"nextToken": "eyJ2IjoiMiIsImMiOiJOalFlTnhOZWw4aVpWbXRkZXhoN05qejlLM0J4SmZqWUNFOTNCYjR0SWhUOHRPc0M1K3JwNlZYY1dVb3RIV2hVbkV6TEFIUWt4R1lCRTF4aW5QWEswclRyQW1rYzFkdHN4cE5vUE0zQS9icTFocFZwd0VDK0tXN0pBYklFNDJCcldrZ01FdzhVNS84YXE5Ty93MlFFZmQyckJ6T2ErcHg3ZUk5cER2WHNyaWRLUHJidUx5aEhuTTlpWk53VUtjTWdZOWdGT3JuYmg0cHBqTEVaUXJtSzA3cWY3dXpmQUhvPSIsInMiOiIxIn0=", "maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "7d980eea-7e04-428b-9f54-16af5b47749", "record_id": "flaws_cloudtrail:0000087:7d980eea-7e04-428b-9f54-16af5b47749", "row_index": 87, "timestamp": "2019-07-08T14:51:34Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "251.209.251.231", "user_agent": "aws-cli/1.16.193 Python/2.7.5 Linux/3.10.0-957.21.3.el7.x86_64 botocore/1.12.183", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1105, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "7d980eea-7e04-428b-9f54-16af5b47749", "eventTime": "2019-07-08T14:51:34Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "251.209.251.231", "userAgent": "aws-cli/1.16.193 Python/2.7.5 Linux/3.10.0-957.21.3.el7.x86_64 botocore/1.12.183", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"nextToken": "eyJ2IjoiMiIsImMiOiJFd3J3L2ZjNkkyR05BRitUbDNGMEw0N3RTdmsvemg2QjdidDY4UnlSeE9jUkcwTGhUQWVBS1B1M3ZLNXhjTlZnbWJ4WjFsd0svZVdYcE5ROElnQzRvbnVGd1FCRDR1Z0NSRnBUbHVtY2VsdWwxU1AvellQYWUrbVVaM2FNdmM4VXNuaGVWREhON2pDSWFZY1d5U0FNZWdMWEc1OFphd0h5Rm9jb1pYcHpVbVZoWWNPZGcrQUdlMlB0NWx6NTloaWdQMlhscEFKb0N0RGFOSGhGenJJZ3p3PT0iLCJzIjoiMSJ9", "maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "7d980eea-7e04-428b-9f54-16af5b47749", "record_id": "flaws_cloudtrail:0000088:7d980eea-7e04-428b-9f54-16af5b47749", "row_index": 88, "timestamp": "2019-07-08T14:51:34Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "251.209.251.231", "user_agent": "aws-cli/1.16.193 Python/2.7.5 Linux/3.10.0-957.21.3.el7.x86_64 botocore/1.12.183", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1105, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "7d980eea-7e04-428b-9f54-16af5b47749", "eventTime": "2019-07-08T14:51:34Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "251.209.251.231", "userAgent": "aws-cli/1.16.193 Python/2.7.5 Linux/3.10.0-957.21.3.el7.x86_64 botocore/1.12.183", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"nextToken": "eyJ2IjoiMiIsImMiOiJFd3J3L2ZjNkkyR05BRitUbDNGMEw0N3RTdmsvemg2QjdidDY4UnlSeE9jUkcwTGhUQWVBS1B1M3ZLNXhjTlZnbWJ4WjFsd0svZVdYcE5ROElnQzRvbnVGd1FCRDR1Z0NSRnBUbHVtY2VsdWwxU1AvellQYWUrbVVaM2FNdmM4VXNuaGVWREhON2pDSWFZY1d5U0FNZWdMWEc1OFphd0h5Rm9jb1pYcHpVbVZoWWNPZGcrQUdlMlB0NWx6NTloaWdQMlhscEFKb0N0RGFOSGhGenJJZ3p3PT0iLCJzIjoiMSJ9", "maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "30984-85d3-4441-8417-32c9b489816", "record_id": "flaws_cloudtrail:0000089:30984-85d3-4441-8417-32c9b489816", "row_index": 89, "timestamp": "2019-07-08T14:51:35Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "251.209.251.231", "user_agent": "aws-cli/1.16.193 Python/2.7.5 Linux/3.10.0-957.21.3.el7.x86_64 botocore/1.12.183", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1116, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "30984-85d3-4441-8417-32c9b489816", "eventTime": "2019-07-08T14:51:35Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "251.209.251.231", "userAgent": "aws-cli/1.16.193 Python/2.7.5 Linux/3.10.0-957.21.3.el7.x86_64 botocore/1.12.183", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"nextToken": "eyJ2IjoiMiIsImMiOiJaalFKZjdqRFFGellsblp5SXBLcUVXN1U5RmxhWWlUT2kvb3R0dFJaTCt3Wnp1MU5hVVRpNHZMajVUUnBqbEY5eUs2Nko0bE8rUkZDOGpzbWpONUhKanVNYjBqclhZaXZRS28wUTVybG05ck9Ub3J6V29WNXRMUzZXeXVzakpMdHpLMGJNSUlxRWRlZ3lxcW04QlNIaVdSYk44ZVRsbkdrakxUaE9LZXRWUWtYVU90ZE81YlRUcGdJWWxBalhEQnh1REh6NUtucldLckxYSXJtZExhWjE2ZkZjRUY1MlYwPSIsInMiOiIxIn0=", "maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "30984-85d3-4441-8417-32c9b489816", "record_id": "flaws_cloudtrail:0000090:30984-85d3-4441-8417-32c9b489816", "row_index": 90, "timestamp": "2019-07-08T14:51:35Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "251.209.251.231", "user_agent": "aws-cli/1.16.193 Python/2.7.5 Linux/3.10.0-957.21.3.el7.x86_64 botocore/1.12.183", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1116, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "30984-85d3-4441-8417-32c9b489816", "eventTime": "2019-07-08T14:51:35Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "251.209.251.231", "userAgent": "aws-cli/1.16.193 Python/2.7.5 Linux/3.10.0-957.21.3.el7.x86_64 botocore/1.12.183", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"nextToken": "eyJ2IjoiMiIsImMiOiJaalFKZjdqRFFGellsblp5SXBLcUVXN1U5RmxhWWlUT2kvb3R0dFJaTCt3Wnp1MU5hVVRpNHZMajVUUnBqbEY5eUs2Nko0bE8rUkZDOGpzbWpONUhKanVNYjBqclhZaXZRS28wUTVybG05ck9Ub3J6V29WNXRMUzZXeXVzakpMdHpLMGJNSUlxRWRlZ3lxcW04QlNIaVdSYk44ZVRsbkdrakxUaE9LZXRWUWtYVU90ZE81YlRUcGdJWWxBalhEQnh1REh6NUtucldLckxYSXJtZExhWjE2ZkZjRUY1MlYwPSIsInMiOiIxIn0=", "maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "ddd4759c-e006-4b7d-a4ae-5922fd80c118", "record_id": "flaws_cloudtrail:0000091:ddd4759c-e006-4b7d-a4ae-5922fd80c118", "row_index": 91, "timestamp": "2019-07-08T14:51:36Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "251.209.251.231", "user_agent": "aws-cli/1.16.193 Python/2.7.5 Linux/3.10.0-957.21.3.el7.x86_64 botocore/1.12.183", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1107, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "ddd4759c-e006-4b7d-a4ae-5922fd80c118", "eventTime": "2019-07-08T14:51:36Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "251.209.251.231", "userAgent": "aws-cli/1.16.193 Python/2.7.5 Linux/3.10.0-957.21.3.el7.x86_64 botocore/1.12.183", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"nextToken": "eyJ2IjoiMiIsImMiOiJ1Zk1ldjlzajVkM3VtNDdPeVJHRElsbE9wVzdoMWx4U0pUOVJCcE0rR0hWUHVLZVJndi8yN3ZKUzBLUHhIaHBEWlg4eTB6M1pMQXUwV0RDUzVtSWtJeEVpNkJvd09FNmxFTlZGRmlQeFNKRS9VZW1uNi8xRkp4TU45Q0RMUlhtdUJpQmxYQU1wQVhEVWZTb3l1NVM1K2VWQlpaTDZBOENzdjI5a2xKVXFwMFIra3RHcTQyY1pqM0FISVAzRU54eGorMHZWQkluQlp3RGxNWGJjWEtDQ3VBPT0iLCJzIjoiMSJ9", "maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "ddd4759c-e006-4b7d-a4ae-5922fd80c118", "record_id": "flaws_cloudtrail:0000092:ddd4759c-e006-4b7d-a4ae-5922fd80c118", "row_index": 92, "timestamp": "2019-07-08T14:51:36Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "251.209.251.231", "user_agent": "aws-cli/1.16.193 Python/2.7.5 Linux/3.10.0-957.21.3.el7.x86_64 botocore/1.12.183", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1107, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "ddd4759c-e006-4b7d-a4ae-5922fd80c118", "eventTime": "2019-07-08T14:51:36Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "251.209.251.231", "userAgent": "aws-cli/1.16.193 Python/2.7.5 Linux/3.10.0-957.21.3.el7.x86_64 botocore/1.12.183", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"nextToken": "eyJ2IjoiMiIsImMiOiJ1Zk1ldjlzajVkM3VtNDdPeVJHRElsbE9wVzdoMWx4U0pUOVJCcE0rR0hWUHVLZVJndi8yN3ZKUzBLUHhIaHBEWlg4eTB6M1pMQXUwV0RDUzVtSWtJeEVpNkJvd09FNmxFTlZGRmlQeFNKRS9VZW1uNi8xRkp4TU45Q0RMUlhtdUJpQmxYQU1wQVhEVWZTb3l1NVM1K2VWQlpaTDZBOENzdjI5a2xKVXFwMFIra3RHcTQyY1pqM0FISVAzRU54eGorMHZWQkluQlp3RGxNWGJjWEtDQ3VBPT0iLCJzIjoiMSJ9", "maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "885a4b8d-f57a-45d9-8848-6146ee908ccb", "record_id": "flaws_cloudtrail:0000093:885a4b8d-f57a-45d9-8848-6146ee908ccb", "row_index": 93, "timestamp": "2019-07-08T14:51:37Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "251.209.251.231", "user_agent": "aws-cli/1.16.193 Python/2.7.5 Linux/3.10.0-957.21.3.el7.x86_64 botocore/1.12.183", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1120, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "885a4b8d-f57a-45d9-8848-6146ee908ccb", "eventTime": "2019-07-08T14:51:37Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "251.209.251.231", "userAgent": "aws-cli/1.16.193 Python/2.7.5 Linux/3.10.0-957.21.3.el7.x86_64 botocore/1.12.183", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"nextToken": "eyJ2IjoiMiIsImMiOiJ6N0thT3BlSExjY2FwZjRkaS85c2JJU2FLbnEvdHJuTGQ1ZlZvUnNkb1Zlemp6SnVhT29TTkJEMmVSMGY2WlBOekxoNXk2SWhNc2JZYUY3Q2t1NUlILzF5VU1GMWdjNlhvam9aY1FabFZCRytIbW9LdTAvRWMxM3BJdnNQRVlxdjkvekJZVFNjY2YxdktObko4c0FwQTh0YkRnTHNJdEx2eXF3Z1NIZVZiK0pIVXpFZVVaK1RBZEZRRm93VDl1NUJpZkZhckxQL0pEM3BGaEhscUY5bEFNajBwamx1c3lFPSIsInMiOiIxIn0=", "maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "885a4b8d-f57a-45d9-8848-6146ee908ccb", "record_id": "flaws_cloudtrail:0000094:885a4b8d-f57a-45d9-8848-6146ee908ccb", "row_index": 94, "timestamp": "2019-07-08T14:51:37Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "251.209.251.231", "user_agent": "aws-cli/1.16.193 Python/2.7.5 Linux/3.10.0-957.21.3.el7.x86_64 botocore/1.12.183", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1120, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "885a4b8d-f57a-45d9-8848-6146ee908ccb", "eventTime": "2019-07-08T14:51:37Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "251.209.251.231", "userAgent": "aws-cli/1.16.193 Python/2.7.5 Linux/3.10.0-957.21.3.el7.x86_64 botocore/1.12.183", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"nextToken": "eyJ2IjoiMiIsImMiOiJ6N0thT3BlSExjY2FwZjRkaS85c2JJU2FLbnEvdHJuTGQ1ZlZvUnNkb1Zlemp6SnVhT29TTkJEMmVSMGY2WlBOekxoNXk2SWhNc2JZYUY3Q2t1NUlILzF5VU1GMWdjNlhvam9aY1FabFZCRytIbW9LdTAvRWMxM3BJdnNQRVlxdjkvekJZVFNjY2YxdktObko4c0FwQTh0YkRnTHNJdEx2eXF3Z1NIZVZiK0pIVXpFZVVaK1RBZEZRRm93VDl1NUJpZkZhckxQL0pEM3BGaEhscUY5bEFNajBwamx1c3lFPSIsInMiOiIxIn0=", "maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "131da7ca-51a6-45e0-97c2-5e2d5c9f33b9", "record_id": "flaws_cloudtrail:0000095:131da7ca-51a6-45e0-97c2-5e2d5c9f33b9", "row_index": 95, "timestamp": "2019-07-08T14:51:38Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "251.209.251.231", "user_agent": "aws-cli/1.16.193 Python/2.7.5 Linux/3.10.0-957.21.3.el7.x86_64 botocore/1.12.183", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1075, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "131da7ca-51a6-45e0-97c2-5e2d5c9f33b9", "eventTime": "2019-07-08T14:51:38Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "251.209.251.231", "userAgent": "aws-cli/1.16.193 Python/2.7.5 Linux/3.10.0-957.21.3.el7.x86_64 botocore/1.12.183", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"nextToken": "eyJ2IjoiMiIsImMiOiJxWWtINlhCVElYWm1aNXlJaDk0aDNPVVVnTWYxdG5rOXlJYnEycVNxVldqYk9jTnZ6cmRJRDQ2aWx1UkxBa3pBa3R4QlZUOFpOYXcvalAwQ2FWajhLbUx0TXFhcVFHWW5CYzM4Ti94SmpHS2xYdEU4QlhGa2FreDY3aFNzL3ZMVTBXOEpMclN4bVpNNHZyMDQ4eWhCMjEvYWhIRWJUNHdmRVcrclMzUlI1RTZtWUVRMWtpaGRGb3FKb0k1amRDND0iLCJzIjoiMSJ9", "maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "131da7ca-51a6-45e0-97c2-5e2d5c9f33b9", "record_id": "flaws_cloudtrail:0000096:131da7ca-51a6-45e0-97c2-5e2d5c9f33b9", "row_index": 96, "timestamp": "2019-07-08T14:51:38Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "251.209.251.231", "user_agent": "aws-cli/1.16.193 Python/2.7.5 Linux/3.10.0-957.21.3.el7.x86_64 botocore/1.12.183", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1075, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "131da7ca-51a6-45e0-97c2-5e2d5c9f33b9", "eventTime": "2019-07-08T14:51:38Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "251.209.251.231", "userAgent": "aws-cli/1.16.193 Python/2.7.5 Linux/3.10.0-957.21.3.el7.x86_64 botocore/1.12.183", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"nextToken": "eyJ2IjoiMiIsImMiOiJxWWtINlhCVElYWm1aNXlJaDk0aDNPVVVnTWYxdG5rOXlJYnEycVNxVldqYk9jTnZ6cmRJRDQ2aWx1UkxBa3pBa3R4QlZUOFpOYXcvalAwQ2FWajhLbUx0TXFhcVFHWW5CYzM4Ti94SmpHS2xYdEU4QlhGa2FreDY3aFNzL3ZMVTBXOEpMclN4bVpNNHZyMDQ4eWhCMjEvYWhIRWJUNHdmRVcrclMzUlI1RTZtWUVRMWtpaGRGb3FKb0k1amRDND0iLCJzIjoiMSJ9", "maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "6fae629d-fb84-4f09-9b13-f03a66e8e8a6", "record_id": "flaws_cloudtrail:0000097:6fae629d-fb84-4f09-9b13-f03a66e8e8a6", "row_index": 97, "timestamp": "2019-07-08T14:55:52Z", "event_type": "GetCallerIdentity", "event_source": "sts.amazonaws.com", "principal": {"type": "AssumedRole", "arn": "arn:aws:sts::811596193553:assumed-role/flaws/i-aa2d3b42e5c6e801a", "account_id": "811596193553", "principal_id": "AROACW5CSA8C8WHOB3O7Q:i-aa2d3b42e5c6e801a", "user_name": null, "access_key_id": "ASIA4B2TGU2LJ9QK945E", "session_issuer_arn": "arn:aws:iam::811596193553:role/flaws", "session_issuer_user_name": "flaws"}, "network": {"source_ip": "251.209.251.231", "user_agent": "aws-cli/1.16.193 Python/2.7.5 Linux/3.10.0-957.21.3.el7.x86_64 botocore/1.12.183", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 1130, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "6fae629d-fb84-4f09-9b13-f03a66e8e8a6", "eventTime": "2019-07-08T14:55:52Z", "eventName": "GetCallerIdentity", "eventSource": "sts.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "251.209.251.231", "userAgent": "aws-cli/1.16.193 Python/2.7.5 Linux/3.10.0-957.21.3.el7.x86_64 botocore/1.12.183", "awsRegion": "us-east-1", "userIdentity": {"type": "AssumedRole", "principalId": "AROACW5CSA8C8WHOB3O7Q:i-aa2d3b42e5c6e801a", "arn": "arn:aws:sts::811596193553:assumed-role/flaws/i-aa2d3b42e5c6e801a", "accountId": "811596193553", "accessKeyId": "ASIA4B2TGU2LJ9QK945E", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2019-07-08T13:29:09Z"}, "sessionIssuer": {"type": "Role", "principalId": "AROACW5CSA8C8WHOB3O7Q", "arn": "arn:aws:iam::811596193553:role/flaws", "accountId": "811596193553", "userName": "flaws"}}}, "responseElements": {"userId": "AROACW5CSA8C8WHOB3O7Q:i-aa2d3b42e5c6e801a", "account": "811596193553", "arn": "arn:aws:sts::811596193553:assumed-role/flaws/i-aa2d3b42e5c6e801a"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "6fae629d-fb84-4f09-9b13-f03a66e8e8a6", "record_id": "flaws_cloudtrail:0000098:6fae629d-fb84-4f09-9b13-f03a66e8e8a6", "row_index": 98, "timestamp": "2019-07-08T14:55:52Z", "event_type": "GetCallerIdentity", "event_source": "sts.amazonaws.com", "principal": {"type": "AssumedRole", "arn": "arn:aws:sts::811596193553:assumed-role/flaws/i-aa2d3b42e5c6e801a", "account_id": "811596193553", "principal_id": "AROACW5CSA8C8WHOB3O7Q:i-aa2d3b42e5c6e801a", "user_name": null, "access_key_id": "ASIA4B2TGU2LJ9QK945E", "session_issuer_arn": "arn:aws:iam::811596193553:role/flaws", "session_issuer_user_name": "flaws"}, "network": {"source_ip": "251.209.251.231", "user_agent": "aws-cli/1.16.193 Python/2.7.5 Linux/3.10.0-957.21.3.el7.x86_64 botocore/1.12.183", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 1130, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "6fae629d-fb84-4f09-9b13-f03a66e8e8a6", "eventTime": "2019-07-08T14:55:52Z", "eventName": "GetCallerIdentity", "eventSource": "sts.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "251.209.251.231", "userAgent": "aws-cli/1.16.193 Python/2.7.5 Linux/3.10.0-957.21.3.el7.x86_64 botocore/1.12.183", "awsRegion": "us-east-1", "userIdentity": {"type": "AssumedRole", "principalId": "AROACW5CSA8C8WHOB3O7Q:i-aa2d3b42e5c6e801a", "arn": "arn:aws:sts::811596193553:assumed-role/flaws/i-aa2d3b42e5c6e801a", "accountId": "811596193553", "accessKeyId": "ASIA4B2TGU2LJ9QK945E", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2019-07-08T13:29:09Z"}, "sessionIssuer": {"type": "Role", "principalId": "AROACW5CSA8C8WHOB3O7Q", "arn": "arn:aws:iam::811596193553:role/flaws", "accountId": "811596193553", "userName": "flaws"}}}, "responseElements": {"userId": "AROACW5CSA8C8WHOB3O7Q:i-aa2d3b42e5c6e801a", "account": "811596193553", "arn": "arn:aws:sts::811596193553:assumed-role/flaws/i-aa2d3b42e5c6e801a"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "ec6fba5f-3df7-4b2f-9524-ddfa74012f", "record_id": "flaws_cloudtrail:0000099:ec6fba5f-3df7-4b2f-9524-ddfa74012f", "row_index": 99, "timestamp": "2019-07-08T14:56:31Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "251.209.251.231", "user_agent": "aws-cli/1.16.193 Python/2.7.5 Linux/3.10.0-957.21.3.el7.x86_64 botocore/1.12.183", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 805, "raw_record_depth": 5, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "ec6fba5f-3df7-4b2f-9524-ddfa74012f", "eventTime": "2019-07-08T14:56:31Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "251.209.251.231", "userAgent": "aws-cli/1.16.193 Python/2.7.5 Linux/3.10.0-957.21.3.el7.x86_64 botocore/1.12.183", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"maxResults": 1000, "snapshotSet": {}, "ownersSet": {"items": [{"owner": "811596193553"}]}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "ec6fba5f-3df7-4b2f-9524-ddfa74012f", "record_id": "flaws_cloudtrail:0000100:ec6fba5f-3df7-4b2f-9524-ddfa74012f", "row_index": 100, "timestamp": "2019-07-08T14:56:31Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "251.209.251.231", "user_agent": "aws-cli/1.16.193 Python/2.7.5 Linux/3.10.0-957.21.3.el7.x86_64 botocore/1.12.183", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 805, "raw_record_depth": 5, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "ec6fba5f-3df7-4b2f-9524-ddfa74012f", "eventTime": "2019-07-08T14:56:31Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "251.209.251.231", "userAgent": "aws-cli/1.16.193 Python/2.7.5 Linux/3.10.0-957.21.3.el7.x86_64 botocore/1.12.183", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"maxResults": 1000, "snapshotSet": {}, "ownersSet": {"items": [{"owner": "811596193553"}]}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "880523f-d31c-488f-979e-3aa227a5d5a0", "record_id": "flaws_cloudtrail:0000101:880523f-d31c-488f-979e-3aa227a5d5a0", "row_index": 101, "timestamp": "2019-07-08T14:58:13Z", "event_type": "GetUser", "event_source": "iam.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "251.209.251.231", "user_agent": "aws-cli/1.16.193 Python/2.7.5 Linux/3.10.0-957.21.3.el7.x86_64 botocore/1.12.183", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 680, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "880523f-d31c-488f-979e-3aa227a5d5a0", "eventTime": "2019-07-08T14:58:13Z", "eventName": "GetUser", "eventSource": "iam.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "251.209.251.231", "userAgent": "aws-cli/1.16.193 Python/2.7.5 Linux/3.10.0-957.21.3.el7.x86_64 botocore/1.12.183", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "880523f-d31c-488f-979e-3aa227a5d5a0", "record_id": "flaws_cloudtrail:0000102:880523f-d31c-488f-979e-3aa227a5d5a0", "row_index": 102, "timestamp": "2019-07-08T14:58:13Z", "event_type": "GetUser", "event_source": "iam.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "251.209.251.231", "user_agent": "aws-cli/1.16.193 Python/2.7.5 Linux/3.10.0-957.21.3.el7.x86_64 botocore/1.12.183", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 680, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "880523f-d31c-488f-979e-3aa227a5d5a0", "eventTime": "2019-07-08T14:58:13Z", "eventName": "GetUser", "eventSource": "iam.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "251.209.251.231", "userAgent": "aws-cli/1.16.193 Python/2.7.5 Linux/3.10.0-957.21.3.el7.x86_64 botocore/1.12.183", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "14eba835-b594-4ad3-8221-cfbc7c084777b", "record_id": "flaws_cloudtrail:0000103:14eba835-b594-4ad3-8221-cfbc7c084777b", "row_index": 103, "timestamp": "2019-07-08T14:58:26Z", "event_type": "ListAttachedUserPolicies", "event_source": "iam.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "251.209.251.231", "user_agent": "aws-cli/1.16.193 Python/2.7.5 Linux/3.10.0-957.21.3.el7.x86_64 botocore/1.12.183", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 716, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "14eba835-b594-4ad3-8221-cfbc7c084777b", "eventTime": "2019-07-08T14:58:26Z", "eventName": "ListAttachedUserPolicies", "eventSource": "iam.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "251.209.251.231", "userAgent": "aws-cli/1.16.193 Python/2.7.5 Linux/3.10.0-957.21.3.el7.x86_64 botocore/1.12.183", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"userName": "Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "14eba835-b594-4ad3-8221-cfbc7c084777b", "record_id": "flaws_cloudtrail:0000104:14eba835-b594-4ad3-8221-cfbc7c084777b", "row_index": 104, "timestamp": "2019-07-08T14:58:26Z", "event_type": "ListAttachedUserPolicies", "event_source": "iam.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "251.209.251.231", "user_agent": "aws-cli/1.16.193 Python/2.7.5 Linux/3.10.0-957.21.3.el7.x86_64 botocore/1.12.183", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 716, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "14eba835-b594-4ad3-8221-cfbc7c084777b", "eventTime": "2019-07-08T14:58:26Z", "eventName": "ListAttachedUserPolicies", "eventSource": "iam.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "251.209.251.231", "userAgent": "aws-cli/1.16.193 Python/2.7.5 Linux/3.10.0-957.21.3.el7.x86_64 botocore/1.12.183", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"userName": "Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "669a319f-6407-4fe6-b4c0-7936c0e5f5a6", "record_id": "flaws_cloudtrail:0000105:669a319f-6407-4fe6-b4c0-7936c0e5f5a6", "row_index": 105, "timestamp": "2019-07-08T14:59:35Z", "event_type": "GetPolicy", "event_source": "iam.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "251.209.251.231", "user_agent": "aws-cli/1.16.193 Python/2.7.5 Linux/3.10.0-957.21.3.el7.x86_64 botocore/1.12.183", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 744, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "669a319f-6407-4fe6-b4c0-7936c0e5f5a6", "eventTime": "2019-07-08T14:59:35Z", "eventName": "GetPolicy", "eventSource": "iam.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "251.209.251.231", "userAgent": "aws-cli/1.16.193 Python/2.7.5 Linux/3.10.0-957.21.3.el7.x86_64 botocore/1.12.183", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"policyArn": "arn:aws:iam::811596193553:policy/list_apigateways"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "669a319f-6407-4fe6-b4c0-7936c0e5f5a6", "record_id": "flaws_cloudtrail:0000106:669a319f-6407-4fe6-b4c0-7936c0e5f5a6", "row_index": 106, "timestamp": "2019-07-08T14:59:35Z", "event_type": "GetPolicy", "event_source": "iam.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "251.209.251.231", "user_agent": "aws-cli/1.16.193 Python/2.7.5 Linux/3.10.0-957.21.3.el7.x86_64 botocore/1.12.183", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 744, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "669a319f-6407-4fe6-b4c0-7936c0e5f5a6", "eventTime": "2019-07-08T14:59:35Z", "eventName": "GetPolicy", "eventSource": "iam.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "251.209.251.231", "userAgent": "aws-cli/1.16.193 Python/2.7.5 Linux/3.10.0-957.21.3.el7.x86_64 botocore/1.12.183", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"policyArn": "arn:aws:iam::811596193553:policy/list_apigateways"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "731a19cb-4217-4277-aa4c-081afa94d76d", "record_id": "flaws_cloudtrail:0000107:731a19cb-4217-4277-aa4c-081afa94d76d", "row_index": 107, "timestamp": "2019-07-08T14:59:54Z", "event_type": "GetPolicyVersion", "event_source": "iam.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "251.209.251.231", "user_agent": "aws-cli/1.16.193 Python/2.7.5 Linux/3.10.0-957.21.3.el7.x86_64 botocore/1.12.183", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 768, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "731a19cb-4217-4277-aa4c-081afa94d76d", "eventTime": "2019-07-08T14:59:54Z", "eventName": "GetPolicyVersion", "eventSource": "iam.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "251.209.251.231", "userAgent": "aws-cli/1.16.193 Python/2.7.5 Linux/3.10.0-957.21.3.el7.x86_64 botocore/1.12.183", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"policyArn": "arn:aws:iam::811596193553:policy/list_apigateways", "versionId": "v4"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "731a19cb-4217-4277-aa4c-081afa94d76d", "record_id": "flaws_cloudtrail:0000108:731a19cb-4217-4277-aa4c-081afa94d76d", "row_index": 108, "timestamp": "2019-07-08T14:59:54Z", "event_type": "GetPolicyVersion", "event_source": "iam.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "251.209.251.231", "user_agent": "aws-cli/1.16.193 Python/2.7.5 Linux/3.10.0-957.21.3.el7.x86_64 botocore/1.12.183", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 768, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "731a19cb-4217-4277-aa4c-081afa94d76d", "eventTime": "2019-07-08T14:59:54Z", "eventName": "GetPolicyVersion", "eventSource": "iam.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "251.209.251.231", "userAgent": "aws-cli/1.16.193 Python/2.7.5 Linux/3.10.0-957.21.3.el7.x86_64 botocore/1.12.183", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"policyArn": "arn:aws:iam::811596193553:policy/list_apigateways", "versionId": "v4"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "05691-6426-4277-b49a-7a998e47a445", "record_id": "flaws_cloudtrail:0000109:05691-6426-4277-b49a-7a998e47a445", "row_index": 109, "timestamp": "2019-07-08T15:04:10Z", "event_type": "GetRestApis", "event_source": "apigateway.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "251.209.251.231", "user_agent": "aws-cli/1.16.193 Python/2.7.5 Linux/3.10.0-957.21.3.el7.x86_64 botocore/1.12.183", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 875, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "05691-6426-4277-b49a-7a998e47a445", "eventTime": "2019-07-08T15:04:10Z", "eventName": "GetRestApis", "eventSource": "apigateway.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "251.209.251.231", "userAgent": "aws-cli/1.16.193 Python/2.7.5 Linux/3.10.0-957.21.3.el7.x86_64 botocore/1.12.183", "awsRegion": "us-west-2", "errorCode": "AccessDenied", "errorMessage": "User: arn:aws:iam::811596193553:user/Level6 is not authorized to perform: apigateway:GET on resource: arn:aws:apigateway:us-west-2::/restapis", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "05691-6426-4277-b49a-7a998e47a445", "record_id": "flaws_cloudtrail:0000110:05691-6426-4277-b49a-7a998e47a445", "row_index": 110, "timestamp": "2019-07-08T15:04:10Z", "event_type": "GetRestApis", "event_source": "apigateway.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "251.209.251.231", "user_agent": "aws-cli/1.16.193 Python/2.7.5 Linux/3.10.0-957.21.3.el7.x86_64 botocore/1.12.183", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 875, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "05691-6426-4277-b49a-7a998e47a445", "eventTime": "2019-07-08T15:04:10Z", "eventName": "GetRestApis", "eventSource": "apigateway.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "251.209.251.231", "userAgent": "aws-cli/1.16.193 Python/2.7.5 Linux/3.10.0-957.21.3.el7.x86_64 botocore/1.12.183", "awsRegion": "us-west-2", "errorCode": "AccessDenied", "errorMessage": "User: arn:aws:iam::811596193553:user/Level6 is not authorized to perform: apigateway:GET on resource: arn:aws:apigateway:us-west-2::/restapis", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "911d16a1-3cd7-4eed-9440-e6a57c5c2bf4", "record_id": "flaws_cloudtrail:0000111:911d16a1-3cd7-4eed-9440-e6a57c5c2bf4", "row_index": 111, "timestamp": "2019-07-08T15:07:38Z", "event_type": "GetPolicyVersion", "event_source": "iam.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "251.209.251.231", "user_agent": "aws-cli/1.16.193 Python/2.7.5 Linux/3.10.0-957.21.3.el7.x86_64 botocore/1.12.183", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 765, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "911d16a1-3cd7-4eed-9440-e6a57c5c2bf4", "eventTime": "2019-07-08T15:07:38Z", "eventName": "GetPolicyVersion", "eventSource": "iam.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "251.209.251.231", "userAgent": "aws-cli/1.16.193 Python/2.7.5 Linux/3.10.0-957.21.3.el7.x86_64 botocore/1.12.183", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"policyArn": "arn:aws:iam::811596193553:policy/list_apigateways", "versionId": "v4"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "911d16a1-3cd7-4eed-9440-e6a57c5c2bf4", "record_id": "flaws_cloudtrail:0000112:911d16a1-3cd7-4eed-9440-e6a57c5c2bf4", "row_index": 112, "timestamp": "2019-07-08T15:07:38Z", "event_type": "GetPolicyVersion", "event_source": "iam.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "251.209.251.231", "user_agent": "aws-cli/1.16.193 Python/2.7.5 Linux/3.10.0-957.21.3.el7.x86_64 botocore/1.12.183", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 765, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "911d16a1-3cd7-4eed-9440-e6a57c5c2bf4", "eventTime": "2019-07-08T15:07:38Z", "eventName": "GetPolicyVersion", "eventSource": "iam.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "251.209.251.231", "userAgent": "aws-cli/1.16.193 Python/2.7.5 Linux/3.10.0-957.21.3.el7.x86_64 botocore/1.12.183", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"policyArn": "arn:aws:iam::811596193553:policy/list_apigateways", "versionId": "v4"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "cf67d7d1-20ca-4735-b8ac-7b73d897fb6e", "record_id": "flaws_cloudtrail:0000113:cf67d7d1-20ca-4735-b8ac-7b73d897fb6e", "row_index": 113, "timestamp": "2019-07-08T15:07:45Z", "event_type": "GetRestApis", "event_source": "apigateway.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "251.209.251.231", "user_agent": "aws-cli/1.16.193 Python/2.7.5 Linux/3.10.0-957.21.3.el7.x86_64 botocore/1.12.183", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 878, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "cf67d7d1-20ca-4735-b8ac-7b73d897fb6e", "eventTime": "2019-07-08T15:07:45Z", "eventName": "GetRestApis", "eventSource": "apigateway.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "251.209.251.231", "userAgent": "aws-cli/1.16.193 Python/2.7.5 Linux/3.10.0-957.21.3.el7.x86_64 botocore/1.12.183", "awsRegion": "us-west-2", "errorCode": "AccessDenied", "errorMessage": "User: arn:aws:iam::811596193553:user/Level6 is not authorized to perform: apigateway:GET on resource: arn:aws:apigateway:us-west-2::/restapis", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "cf67d7d1-20ca-4735-b8ac-7b73d897fb6e", "record_id": "flaws_cloudtrail:0000114:cf67d7d1-20ca-4735-b8ac-7b73d897fb6e", "row_index": 114, "timestamp": "2019-07-08T15:07:45Z", "event_type": "GetRestApis", "event_source": "apigateway.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "251.209.251.231", "user_agent": "aws-cli/1.16.193 Python/2.7.5 Linux/3.10.0-957.21.3.el7.x86_64 botocore/1.12.183", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 878, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "cf67d7d1-20ca-4735-b8ac-7b73d897fb6e", "eventTime": "2019-07-08T15:07:45Z", "eventName": "GetRestApis", "eventSource": "apigateway.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "251.209.251.231", "userAgent": "aws-cli/1.16.193 Python/2.7.5 Linux/3.10.0-957.21.3.el7.x86_64 botocore/1.12.183", "awsRegion": "us-west-2", "errorCode": "AccessDenied", "errorMessage": "User: arn:aws:iam::811596193553:user/Level6 is not authorized to perform: apigateway:GET on resource: arn:aws:apigateway:us-west-2::/restapis", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "f4d9bcc8-2b8c-4422-84ce-d8d2e3bdeeef", "record_id": "flaws_cloudtrail:0000115:f4d9bcc8-2b8c-4422-84ce-d8d2e3bdeeef", "row_index": 115, "timestamp": "2019-07-08T15:10:32Z", "event_type": "ListFunctions202224", "event_source": "lambda.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "251.209.251.231", "user_agent": "aws-cli/1.16.193 Python/2.7.5 Linux/3.10.0-957.21.3.el7.x86_64 botocore/1.12.183", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 695, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "f4d9bcc8-2b8c-4422-84ce-d8d2e3bdeeef", "eventTime": "2019-07-08T15:10:32Z", "eventName": "ListFunctions202224", "eventSource": "lambda.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "251.209.251.231", "userAgent": "aws-cli/1.16.193 Python/2.7.5 Linux/3.10.0-957.21.3.el7.x86_64 botocore/1.12.183", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "f4d9bcc8-2b8c-4422-84ce-d8d2e3bdeeef", "record_id": "flaws_cloudtrail:0000116:f4d9bcc8-2b8c-4422-84ce-d8d2e3bdeeef", "row_index": 116, "timestamp": "2019-07-08T15:10:32Z", "event_type": "ListFunctions202224", "event_source": "lambda.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "251.209.251.231", "user_agent": "aws-cli/1.16.193 Python/2.7.5 Linux/3.10.0-957.21.3.el7.x86_64 botocore/1.12.183", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 695, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "f4d9bcc8-2b8c-4422-84ce-d8d2e3bdeeef", "eventTime": "2019-07-08T15:10:32Z", "eventName": "ListFunctions202224", "eventSource": "lambda.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "251.209.251.231", "userAgent": "aws-cli/1.16.193 Python/2.7.5 Linux/3.10.0-957.21.3.el7.x86_64 botocore/1.12.183", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "df220ab4-fc98-48f4-9e5b-8ad605be50e1", "record_id": "flaws_cloudtrail:0000117:df220ab4-fc98-48f4-9e5b-8ad605be50e1", "row_index": 117, "timestamp": "2019-07-08T15:11:16Z", "event_type": "GetPolicy202224v2", "event_source": "lambda.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "251.209.251.231", "user_agent": "aws-cli/1.16.193 Python/2.7.5 Linux/3.10.0-957.21.3.el7.x86_64 botocore/1.12.183", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 715, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "df220ab4-fc98-48f4-9e5b-8ad605be50e1", "eventTime": "2019-07-08T15:11:16Z", "eventName": "GetPolicy202224v2", "eventSource": "lambda.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "251.209.251.231", "userAgent": "aws-cli/1.16.193 Python/2.7.5 Linux/3.10.0-957.21.3.el7.x86_64 botocore/1.12.183", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"functionName": "Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "df220ab4-fc98-48f4-9e5b-8ad605be50e1", "record_id": "flaws_cloudtrail:0000118:df220ab4-fc98-48f4-9e5b-8ad605be50e1", "row_index": 118, "timestamp": "2019-07-08T15:11:16Z", "event_type": "GetPolicy202224v2", "event_source": "lambda.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "251.209.251.231", "user_agent": "aws-cli/1.16.193 Python/2.7.5 Linux/3.10.0-957.21.3.el7.x86_64 botocore/1.12.183", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 715, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "df220ab4-fc98-48f4-9e5b-8ad605be50e1", "eventTime": "2019-07-08T15:11:16Z", "eventName": "GetPolicy202224v2", "eventSource": "lambda.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "251.209.251.231", "userAgent": "aws-cli/1.16.193 Python/2.7.5 Linux/3.10.0-957.21.3.el7.x86_64 botocore/1.12.183", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"functionName": "Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "bd843ef6-a5da-4a7d-bce4-c84863b5979a", "record_id": "flaws_cloudtrail:0000119:bd843ef6-a5da-4a7d-bce4-c84863b5979a", "row_index": 119, "timestamp": "2019-07-08T15:11:46Z", "event_type": "GetStages", "event_source": "apigateway.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "251.209.251.231", "user_agent": "aws-cli/1.16.193 Python/2.7.5 Linux/3.10.0-957.21.3.el7.x86_64 botocore/1.12.183", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 743, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "readOnly", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "bd843ef6-a5da-4a7d-bce4-c84863b5979a", "eventTime": "2019-07-08T15:11:46Z", "eventName": "GetStages", "eventSource": "apigateway.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "251.209.251.231", "userAgent": "aws-cli/1.16.193 Python/2.7.5 Linux/3.10.0-957.21.3.el7.x86_64 botocore/1.12.183", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"restApiId": "s33ppypa75", "template": false}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "bd843ef6-a5da-4a7d-bce4-c84863b5979a", "record_id": "flaws_cloudtrail:0000120:bd843ef6-a5da-4a7d-bce4-c84863b5979a", "row_index": 120, "timestamp": "2019-07-08T15:11:46Z", "event_type": "GetStages", "event_source": "apigateway.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "251.209.251.231", "user_agent": "aws-cli/1.16.193 Python/2.7.5 Linux/3.10.0-957.21.3.el7.x86_64 botocore/1.12.183", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 743, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "readOnly", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "bd843ef6-a5da-4a7d-bce4-c84863b5979a", "eventTime": "2019-07-08T15:11:46Z", "eventName": "GetStages", "eventSource": "apigateway.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "251.209.251.231", "userAgent": "aws-cli/1.16.193 Python/2.7.5 Linux/3.10.0-957.21.3.el7.x86_64 botocore/1.12.183", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"restApiId": "s33ppypa75", "template": false}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "365f034d-1d24-48ac-8c83-67fcfb8e9021", "record_id": "flaws_cloudtrail:0000121:365f034d-1d24-48ac-8c83-67fcfb8e9021", "row_index": 121, "timestamp": "2019-07-08T15:12:06Z", "event_type": "CreateLogStream", "event_source": "logs.amazonaws.com", "principal": {"type": "AssumedRole", "arn": "arn:aws:sts::811596193553:assumed-role/Level6/Level6", "account_id": "811596193553", "principal_id": "AROAI4E1FBACLY3FPC6BB:Level6", "user_name": null, "access_key_id": "ASIAWLE6C3A7HS17YF1E", "session_issuer_arn": "arn:aws:iam::811596193553:role/service-role/Level6", "session_issuer_user_name": "Level6"}, "network": {"source_ip": "191.34.86.98", "user_agent": "awslambda-worker", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1030, "raw_record_depth": 4, "raw_record_top_level_keys": ["apiVersion", "awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "365f034d-1d24-48ac-8c83-67fcfb8e9021", "eventTime": "2019-07-08T15:12:06Z", "eventName": "CreateLogStream", "eventSource": "logs.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "191.34.86.98", "userAgent": "awslambda-worker", "awsRegion": "us-west-2", "userIdentity": {"type": "AssumedRole", "principalId": "AROAI4E1FBACLY3FPC6BB:Level6", "arn": "arn:aws:sts::811596193553:assumed-role/Level6/Level6", "accountId": "811596193553", "accessKeyId": "ASIAWLE6C3A7HS17YF1E", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2019-07-08T14:36:27Z"}, "sessionIssuer": {"type": "Role", "principalId": "AROAI4E1FBACLY3FPC6BB", "arn": "arn:aws:iam::811596193553:role/service-role/Level6", "accountId": "811596193553", "userName": "Level6"}}}, "requestParameters": {"logGroupName": "/aws/lambda/Level6", "logStreamName": "2019/07/08/[$LATEST]a9bf9491b40e805e8fee8c74068c5e81"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "9b6d4544-e901-4157-a170-690ff12a6dc7", "record_id": "flaws_cloudtrail:0000122:9b6d4544-e901-4157-a170-690ff12a6dc7", "row_index": 122, "timestamp": "2019-07-08T15:12:06Z", "event_type": "AssumeRole", "event_source": "sts.amazonaws.com", "principal": {"type": "AWSService", "arn": null, "account_id": null, "principal_id": null, "user_name": null, "access_key_id": null, "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "lambda.amazonaws.com", "user_agent": "lambda.amazonaws.com", "aws_region": "us-west-2"}, "resource_arns": ["arn:aws:iam::811596193553:role/service-role/Level6"], "raw_record_size_bytes": 1605, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "resources", "responseElements", "sharedEventID", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "9b6d4544-e901-4157-a170-690ff12a6dc7", "eventTime": "2019-07-08T15:12:06Z", "eventName": "AssumeRole", "eventSource": "sts.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "lambda.amazonaws.com", "userAgent": "lambda.amazonaws.com", "awsRegion": "us-west-2", "userIdentity": {"type": "AWSService", "invokedBy": "lambda.amazonaws.com"}, "requestParameters": {"roleSessionName": "Level6", "roleArn": "arn:aws:iam::811596193553:role/service-role/Level6"}, "responseElements": {"credentials": {"accessKeyId": "ASIAW76P4AUSTT81BSQM", "expiration": "Jul 9, 2019 3:12:06 AM", "sessionToken": "AgoJb3JpZ2luX2VjEAcaCXVzLXdlc3QtMiJHMEUCIQDBt8m/41cEzPkr3SeQ0DchuNGJls74qOLVrxJ18gOy1gIgdNRMbf30J6q6wKiO6ohUDi+CQHdqafjEfx1JQ5TkvnoqggIIYBAAGgw5NzU0MjYyNjIwMjkiDHmn5EzgAhdpTN3cKCrfAUD/d2582pEa84tdtagObT1B87zB0Vic8XRmtU109RQ6/7Mh4UJbYYqT6lW1DmL77jxp25FBqfN1rz2LliCiR76MFFJhOauKKL+EC3hYYhEMuWhzoKfE2PKqg9Ou+Mpm2WiqKeyWI9JuCnhjmOTxLLMoDEBnORJrADndsE7ETCBMopQNv69y9QmcwSZ9F4TIFJuI+KZeVcAY0yrQPMGKaEAZrrAHv5NQ+uG97I3olFp/9r5C6aCQ06zTz3EFQEW8ECvY0aLHUc327tj3A/eVC4gMw3P2g3dAa2KFYb+TwbAwxrqN6QU6tAEidnqSgtJF6hFhhb+2YCJ7rVHMZ+94ymxO3yT5wr/jpUW+Ohkai87YZ2bA05ehR+69+HZP26bRN9So861ZJ1wz/XlJoe9wvJGj52AIJh8zAUMjSx0iC4c1R4cgJZbfHMSD8GmMq8vCNvtWA9oSgulBqX7v2Rao9J5t8rWGePrde4NoGFAx6CtYz+s0O7WCLb8GJBXLGwdCdZ4whwzU+f/nr9Te5q/nLplPA47v2Rp8iKi2bnE="}}, "resources": [{"ARN": "arn:aws:iam::811596193553:role/service-role/Level6", "accountId": "811596193553", "type": "AWS::IAM::Role"}]}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "365f034d-1d24-48ac-8c83-67fcfb8e9021", "record_id": "flaws_cloudtrail:0000123:365f034d-1d24-48ac-8c83-67fcfb8e9021", "row_index": 123, "timestamp": "2019-07-08T15:12:06Z", "event_type": "CreateLogStream", "event_source": "logs.amazonaws.com", "principal": {"type": "AssumedRole", "arn": "arn:aws:sts::811596193553:assumed-role/Level6/Level6", "account_id": "811596193553", "principal_id": "AROAI4E1FBACLY3FPC6BB:Level6", "user_name": null, "access_key_id": "ASIAWLE6C3A7HS17YF1E", "session_issuer_arn": "arn:aws:iam::811596193553:role/service-role/Level6", "session_issuer_user_name": "Level6"}, "network": {"source_ip": "191.34.86.98", "user_agent": "awslambda-worker", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1030, "raw_record_depth": 4, "raw_record_top_level_keys": ["apiVersion", "awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "365f034d-1d24-48ac-8c83-67fcfb8e9021", "eventTime": "2019-07-08T15:12:06Z", "eventName": "CreateLogStream", "eventSource": "logs.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "191.34.86.98", "userAgent": "awslambda-worker", "awsRegion": "us-west-2", "userIdentity": {"type": "AssumedRole", "principalId": "AROAI4E1FBACLY3FPC6BB:Level6", "arn": "arn:aws:sts::811596193553:assumed-role/Level6/Level6", "accountId": "811596193553", "accessKeyId": "ASIAWLE6C3A7HS17YF1E", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2019-07-08T14:36:27Z"}, "sessionIssuer": {"type": "Role", "principalId": "AROAI4E1FBACLY3FPC6BB", "arn": "arn:aws:iam::811596193553:role/service-role/Level6", "accountId": "811596193553", "userName": "Level6"}}}, "requestParameters": {"logGroupName": "/aws/lambda/Level6", "logStreamName": "2019/07/08/[$LATEST]a9bf9491b40e805e8fee8c74068c5e81"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "9b6d4544-e901-4157-a170-690ff12a6dc7", "record_id": "flaws_cloudtrail:0000124:9b6d4544-e901-4157-a170-690ff12a6dc7", "row_index": 124, "timestamp": "2019-07-08T15:12:06Z", "event_type": "AssumeRole", "event_source": "sts.amazonaws.com", "principal": {"type": "AWSService", "arn": null, "account_id": null, "principal_id": null, "user_name": null, "access_key_id": null, "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "lambda.amazonaws.com", "user_agent": "lambda.amazonaws.com", "aws_region": "us-west-2"}, "resource_arns": ["arn:aws:iam::811596193553:role/service-role/Level6"], "raw_record_size_bytes": 1605, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "resources", "responseElements", "sharedEventID", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "9b6d4544-e901-4157-a170-690ff12a6dc7", "eventTime": "2019-07-08T15:12:06Z", "eventName": "AssumeRole", "eventSource": "sts.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "lambda.amazonaws.com", "userAgent": "lambda.amazonaws.com", "awsRegion": "us-west-2", "userIdentity": {"type": "AWSService", "invokedBy": "lambda.amazonaws.com"}, "requestParameters": {"roleSessionName": "Level6", "roleArn": "arn:aws:iam::811596193553:role/service-role/Level6"}, "responseElements": {"credentials": {"accessKeyId": "ASIAW76P4AUSTT81BSQM", "expiration": "Jul 9, 2019 3:12:06 AM", "sessionToken": "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"}}, "resources": [{"ARN": "arn:aws:iam::811596193553:role/service-role/Level6", "accountId": "811596193553", "type": "AWS::IAM::Role"}]}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "77657a-c238-4476-b167-a98ab04aa410", "record_id": "flaws_cloudtrail:0000125:77657a-c238-4476-b167-a98ab04aa410", "row_index": 125, "timestamp": "2019-07-08T15:21:07Z", "event_type": "GetCallerIdentity", "event_source": "sts.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "251.209.251.231", "user_agent": "Boto3/1.9.183 Python/3.6.8 Linux/3.10.0-957.21.3.el7.x86_64 Botocore/1.12.183", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 787, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "77657a-c238-4476-b167-a98ab04aa410", "eventTime": "2019-07-08T15:21:07Z", "eventName": "GetCallerIdentity", "eventSource": "sts.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "251.209.251.231", "userAgent": "Boto3/1.9.183 Python/3.6.8 Linux/3.10.0-957.21.3.el7.x86_64 Botocore/1.12.183", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "responseElements": {"userId": "AIDA9BO36HFBHKGJAO9C1", "account": "811596193553", "arn": "arn:aws:iam::811596193553:user/backup"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "77657a-c238-4476-b167-a98ab04aa410", "record_id": "flaws_cloudtrail:0000126:77657a-c238-4476-b167-a98ab04aa410", "row_index": 126, "timestamp": "2019-07-08T15:21:07Z", "event_type": "GetCallerIdentity", "event_source": "sts.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "251.209.251.231", "user_agent": "Boto3/1.9.183 Python/3.6.8 Linux/3.10.0-957.21.3.el7.x86_64 Botocore/1.12.183", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 787, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "77657a-c238-4476-b167-a98ab04aa410", "eventTime": "2019-07-08T15:21:07Z", "eventName": "GetCallerIdentity", "eventSource": "sts.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "251.209.251.231", "userAgent": "Boto3/1.9.183 Python/3.6.8 Linux/3.10.0-957.21.3.el7.x86_64 Botocore/1.12.183", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "responseElements": {"userId": "AIDA9BO36HFBHKGJAO9C1", "account": "811596193553", "arn": "arn:aws:iam::811596193553:user/backup"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "fe572c92-200c-48fd-8694-32405a3648c", "record_id": "flaws_cloudtrail:0000127:fe572c92-200c-48fd-8694-32405a3648c", "row_index": 127, "timestamp": "2019-07-08T15:21:08Z", "event_type": "GetCallerIdentity", "event_source": "sts.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "251.209.251.231", "user_agent": "Boto3/1.9.183 Python/3.6.8 Linux/3.10.0-957.21.3.el7.x86_64 Botocore/1.12.183", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 788, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "fe572c92-200c-48fd-8694-32405a3648c", "eventTime": "2019-07-08T15:21:08Z", "eventName": "GetCallerIdentity", "eventSource": "sts.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "251.209.251.231", "userAgent": "Boto3/1.9.183 Python/3.6.8 Linux/3.10.0-957.21.3.el7.x86_64 Botocore/1.12.183", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "responseElements": {"userId": "AIDA9BO36HFBHKGJAO9C1", "account": "811596193553", "arn": "arn:aws:iam::811596193553:user/backup"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "f01054-022c-4c9b-a085-349a24d4e0dd", "record_id": "flaws_cloudtrail:0000128:f01054-022c-4c9b-a085-349a24d4e0dd", "row_index": 128, "timestamp": "2019-07-08T15:21:08Z", "event_type": "GetCallerIdentity", "event_source": "sts.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "251.209.251.231", "user_agent": "Boto3/1.9.183 Python/3.6.8 Linux/3.10.0-957.21.3.el7.x86_64 Botocore/1.12.183", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 787, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "f01054-022c-4c9b-a085-349a24d4e0dd", "eventTime": "2019-07-08T15:21:08Z", "eventName": "GetCallerIdentity", "eventSource": "sts.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "251.209.251.231", "userAgent": "Boto3/1.9.183 Python/3.6.8 Linux/3.10.0-957.21.3.el7.x86_64 Botocore/1.12.183", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "responseElements": {"userId": "AIDA9BO36HFBHKGJAO9C1", "account": "811596193553", "arn": "arn:aws:iam::811596193553:user/backup"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "f01054-022c-4c9b-a085-349a24d4e0dd", "record_id": "flaws_cloudtrail:0000129:f01054-022c-4c9b-a085-349a24d4e0dd", "row_index": 129, "timestamp": "2019-07-08T15:21:08Z", "event_type": "GetCallerIdentity", "event_source": "sts.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "251.209.251.231", "user_agent": "Boto3/1.9.183 Python/3.6.8 Linux/3.10.0-957.21.3.el7.x86_64 Botocore/1.12.183", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 787, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "f01054-022c-4c9b-a085-349a24d4e0dd", "eventTime": "2019-07-08T15:21:08Z", "eventName": "GetCallerIdentity", "eventSource": "sts.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "251.209.251.231", "userAgent": "Boto3/1.9.183 Python/3.6.8 Linux/3.10.0-957.21.3.el7.x86_64 Botocore/1.12.183", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "responseElements": {"userId": "AIDA9BO36HFBHKGJAO9C1", "account": "811596193553", "arn": "arn:aws:iam::811596193553:user/backup"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "fe572c92-200c-48fd-8694-32405a3648c", "record_id": "flaws_cloudtrail:0000130:fe572c92-200c-48fd-8694-32405a3648c", "row_index": 130, "timestamp": "2019-07-08T15:21:08Z", "event_type": "GetCallerIdentity", "event_source": "sts.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "251.209.251.231", "user_agent": "Boto3/1.9.183 Python/3.6.8 Linux/3.10.0-957.21.3.el7.x86_64 Botocore/1.12.183", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 788, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "fe572c92-200c-48fd-8694-32405a3648c", "eventTime": "2019-07-08T15:21:08Z", "eventName": "GetCallerIdentity", "eventSource": "sts.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "251.209.251.231", "userAgent": "Boto3/1.9.183 Python/3.6.8 Linux/3.10.0-957.21.3.el7.x86_64 Botocore/1.12.183", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "responseElements": {"userId": "AIDA9BO36HFBHKGJAO9C1", "account": "811596193553", "arn": "arn:aws:iam::811596193553:user/backup"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "3d19af7d-5beb-42d5-a01b-8587b753f545", "record_id": "flaws_cloudtrail:0000131:3d19af7d-5beb-42d5-a01b-8587b753f545", "row_index": 131, "timestamp": "2019-07-08T15:21:09Z", "event_type": "GetCallerIdentity", "event_source": "sts.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "251.209.251.231", "user_agent": "Boto3/1.9.183 Python/3.6.8 Linux/3.10.0-957.21.3.el7.x86_64 Botocore/1.12.183", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 790, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "3d19af7d-5beb-42d5-a01b-8587b753f545", "eventTime": "2019-07-08T15:21:09Z", "eventName": "GetCallerIdentity", "eventSource": "sts.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "251.209.251.231", "userAgent": "Boto3/1.9.183 Python/3.6.8 Linux/3.10.0-957.21.3.el7.x86_64 Botocore/1.12.183", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "responseElements": {"userId": "AIDA9BO36HFBHKGJAO9C1", "account": "811596193553", "arn": "arn:aws:iam::811596193553:user/backup"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "9f424ac2-daed-4710-a281-2fe41b7a944c", "record_id": "flaws_cloudtrail:0000132:9f424ac2-daed-4710-a281-2fe41b7a944c", "row_index": 132, "timestamp": "2019-07-08T15:21:09Z", "event_type": "GetCallerIdentity", "event_source": "sts.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "251.209.251.231", "user_agent": "Boto3/1.9.183 Python/3.6.8 Linux/3.10.0-957.21.3.el7.x86_64 Botocore/1.12.183", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 787, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "9f424ac2-daed-4710-a281-2fe41b7a944c", "eventTime": "2019-07-08T15:21:09Z", "eventName": "GetCallerIdentity", "eventSource": "sts.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "251.209.251.231", "userAgent": "Boto3/1.9.183 Python/3.6.8 Linux/3.10.0-957.21.3.el7.x86_64 Botocore/1.12.183", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "responseElements": {"userId": "AIDA9BO36HFBHKGJAO9C1", "account": "811596193553", "arn": "arn:aws:iam::811596193553:user/backup"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "3d19af7d-5beb-42d5-a01b-8587b753f545", "record_id": "flaws_cloudtrail:0000133:3d19af7d-5beb-42d5-a01b-8587b753f545", "row_index": 133, "timestamp": "2019-07-08T15:21:09Z", "event_type": "GetCallerIdentity", "event_source": "sts.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "251.209.251.231", "user_agent": "Boto3/1.9.183 Python/3.6.8 Linux/3.10.0-957.21.3.el7.x86_64 Botocore/1.12.183", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 790, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "3d19af7d-5beb-42d5-a01b-8587b753f545", "eventTime": "2019-07-08T15:21:09Z", "eventName": "GetCallerIdentity", "eventSource": "sts.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "251.209.251.231", "userAgent": "Boto3/1.9.183 Python/3.6.8 Linux/3.10.0-957.21.3.el7.x86_64 Botocore/1.12.183", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "responseElements": {"userId": "AIDA9BO36HFBHKGJAO9C1", "account": "811596193553", "arn": "arn:aws:iam::811596193553:user/backup"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "9f424ac2-daed-4710-a281-2fe41b7a944c", "record_id": "flaws_cloudtrail:0000134:9f424ac2-daed-4710-a281-2fe41b7a944c", "row_index": 134, "timestamp": "2019-07-08T15:21:09Z", "event_type": "GetCallerIdentity", "event_source": "sts.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "251.209.251.231", "user_agent": "Boto3/1.9.183 Python/3.6.8 Linux/3.10.0-957.21.3.el7.x86_64 Botocore/1.12.183", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 787, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "9f424ac2-daed-4710-a281-2fe41b7a944c", "eventTime": "2019-07-08T15:21:09Z", "eventName": "GetCallerIdentity", "eventSource": "sts.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "251.209.251.231", "userAgent": "Boto3/1.9.183 Python/3.6.8 Linux/3.10.0-957.21.3.el7.x86_64 Botocore/1.12.183", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "responseElements": {"userId": "AIDA9BO36HFBHKGJAO9C1", "account": "811596193553", "arn": "arn:aws:iam::811596193553:user/backup"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "e0aaddb3-ea55-4b58-8bd7-4236e332399a", "record_id": "flaws_cloudtrail:0000135:e0aaddb3-ea55-4b58-8bd7-4236e332399a", "row_index": 135, "timestamp": "2019-07-08T15:21:10Z", "event_type": "GetCallerIdentity", "event_source": "sts.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "251.209.251.231", "user_agent": "Boto3/1.9.183 Python/3.6.8 Linux/3.10.0-957.21.3.el7.x86_64 Botocore/1.12.183", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 789, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "e0aaddb3-ea55-4b58-8bd7-4236e332399a", "eventTime": "2019-07-08T15:21:10Z", "eventName": "GetCallerIdentity", "eventSource": "sts.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "251.209.251.231", "userAgent": "Boto3/1.9.183 Python/3.6.8 Linux/3.10.0-957.21.3.el7.x86_64 Botocore/1.12.183", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "responseElements": {"userId": "AIDA9BO36HFBHKGJAO9C1", "account": "811596193553", "arn": "arn:aws:iam::811596193553:user/backup"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "581def3e-e247-4f04-85f0-5da97d494c98", "record_id": "flaws_cloudtrail:0000136:581def3e-e247-4f04-85f0-5da97d494c98", "row_index": 136, "timestamp": "2019-07-08T15:21:10Z", "event_type": "GetCallerIdentity", "event_source": "sts.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "251.209.251.231", "user_agent": "Boto3/1.9.183 Python/3.6.8 Linux/3.10.0-957.21.3.el7.x86_64 Botocore/1.12.183", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 789, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "581def3e-e247-4f04-85f0-5da97d494c98", "eventTime": "2019-07-08T15:21:10Z", "eventName": "GetCallerIdentity", "eventSource": "sts.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "251.209.251.231", "userAgent": "Boto3/1.9.183 Python/3.6.8 Linux/3.10.0-957.21.3.el7.x86_64 Botocore/1.12.183", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "responseElements": {"userId": "AIDA9BO36HFBHKGJAO9C1", "account": "811596193553", "arn": "arn:aws:iam::811596193553:user/backup"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "581def3e-e247-4f04-85f0-5da97d494c98", "record_id": "flaws_cloudtrail:0000137:581def3e-e247-4f04-85f0-5da97d494c98", "row_index": 137, "timestamp": "2019-07-08T15:21:10Z", "event_type": "GetCallerIdentity", "event_source": "sts.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "251.209.251.231", "user_agent": "Boto3/1.9.183 Python/3.6.8 Linux/3.10.0-957.21.3.el7.x86_64 Botocore/1.12.183", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 789, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "581def3e-e247-4f04-85f0-5da97d494c98", "eventTime": "2019-07-08T15:21:10Z", "eventName": "GetCallerIdentity", "eventSource": "sts.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "251.209.251.231", "userAgent": "Boto3/1.9.183 Python/3.6.8 Linux/3.10.0-957.21.3.el7.x86_64 Botocore/1.12.183", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "responseElements": {"userId": "AIDA9BO36HFBHKGJAO9C1", "account": "811596193553", "arn": "arn:aws:iam::811596193553:user/backup"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "e0aaddb3-ea55-4b58-8bd7-4236e332399a", "record_id": "flaws_cloudtrail:0000138:e0aaddb3-ea55-4b58-8bd7-4236e332399a", "row_index": 138, "timestamp": "2019-07-08T15:21:10Z", "event_type": "GetCallerIdentity", "event_source": "sts.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "251.209.251.231", "user_agent": "Boto3/1.9.183 Python/3.6.8 Linux/3.10.0-957.21.3.el7.x86_64 Botocore/1.12.183", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 789, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "e0aaddb3-ea55-4b58-8bd7-4236e332399a", "eventTime": "2019-07-08T15:21:10Z", "eventName": "GetCallerIdentity", "eventSource": "sts.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "251.209.251.231", "userAgent": "Boto3/1.9.183 Python/3.6.8 Linux/3.10.0-957.21.3.el7.x86_64 Botocore/1.12.183", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "responseElements": {"userId": "AIDA9BO36HFBHKGJAO9C1", "account": "811596193553", "arn": "arn:aws:iam::811596193553:user/backup"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "9c24fc88-5332-47cb-b828-acf00b95e857", "record_id": "flaws_cloudtrail:0000139:9c24fc88-5332-47cb-b828-acf00b95e857", "row_index": 139, "timestamp": "2019-07-08T15:21:11Z", "event_type": "GetCallerIdentity", "event_source": "sts.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "251.209.251.231", "user_agent": "Boto3/1.9.183 Python/3.6.8 Linux/3.10.0-957.21.3.el7.x86_64 Botocore/1.12.183", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 788, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "9c24fc88-5332-47cb-b828-acf00b95e857", "eventTime": "2019-07-08T15:21:11Z", "eventName": "GetCallerIdentity", "eventSource": "sts.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "251.209.251.231", "userAgent": "Boto3/1.9.183 Python/3.6.8 Linux/3.10.0-957.21.3.el7.x86_64 Botocore/1.12.183", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "responseElements": {"userId": "AIDA9BO36HFBHKGJAO9C1", "account": "811596193553", "arn": "arn:aws:iam::811596193553:user/backup"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "b35497-74f9-4240-8b88-b537b9584c7b", "record_id": "flaws_cloudtrail:0000140:b35497-74f9-4240-8b88-b537b9584c7b", "row_index": 140, "timestamp": "2019-07-08T15:21:11Z", "event_type": "GetCallerIdentity", "event_source": "sts.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "251.209.251.231", "user_agent": "Boto3/1.9.183 Python/3.6.8 Linux/3.10.0-957.21.3.el7.x86_64 Botocore/1.12.183", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 787, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "b35497-74f9-4240-8b88-b537b9584c7b", "eventTime": "2019-07-08T15:21:11Z", "eventName": "GetCallerIdentity", "eventSource": "sts.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "251.209.251.231", "userAgent": "Boto3/1.9.183 Python/3.6.8 Linux/3.10.0-957.21.3.el7.x86_64 Botocore/1.12.183", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "responseElements": {"userId": "AIDA9BO36HFBHKGJAO9C1", "account": "811596193553", "arn": "arn:aws:iam::811596193553:user/backup"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "9c24fc88-5332-47cb-b828-acf00b95e857", "record_id": "flaws_cloudtrail:0000141:9c24fc88-5332-47cb-b828-acf00b95e857", "row_index": 141, "timestamp": "2019-07-08T15:21:11Z", "event_type": "GetCallerIdentity", "event_source": "sts.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "251.209.251.231", "user_agent": "Boto3/1.9.183 Python/3.6.8 Linux/3.10.0-957.21.3.el7.x86_64 Botocore/1.12.183", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 788, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "9c24fc88-5332-47cb-b828-acf00b95e857", "eventTime": "2019-07-08T15:21:11Z", "eventName": "GetCallerIdentity", "eventSource": "sts.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "251.209.251.231", "userAgent": "Boto3/1.9.183 Python/3.6.8 Linux/3.10.0-957.21.3.el7.x86_64 Botocore/1.12.183", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "responseElements": {"userId": "AIDA9BO36HFBHKGJAO9C1", "account": "811596193553", "arn": "arn:aws:iam::811596193553:user/backup"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "b35497-74f9-4240-8b88-b537b9584c7b", "record_id": "flaws_cloudtrail:0000142:b35497-74f9-4240-8b88-b537b9584c7b", "row_index": 142, "timestamp": "2019-07-08T15:21:11Z", "event_type": "GetCallerIdentity", "event_source": "sts.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "251.209.251.231", "user_agent": "Boto3/1.9.183 Python/3.6.8 Linux/3.10.0-957.21.3.el7.x86_64 Botocore/1.12.183", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 787, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "b35497-74f9-4240-8b88-b537b9584c7b", "eventTime": "2019-07-08T15:21:11Z", "eventName": "GetCallerIdentity", "eventSource": "sts.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "251.209.251.231", "userAgent": "Boto3/1.9.183 Python/3.6.8 Linux/3.10.0-957.21.3.el7.x86_64 Botocore/1.12.183", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "responseElements": {"userId": "AIDA9BO36HFBHKGJAO9C1", "account": "811596193553", "arn": "arn:aws:iam::811596193553:user/backup"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "c7c5be5c-6f2f-4186-a74e-b0161e4925d7", "record_id": "flaws_cloudtrail:0000143:c7c5be5c-6f2f-4186-a74e-b0161e4925d7", "row_index": 143, "timestamp": "2019-07-08T15:21:12Z", "event_type": "GetCallerIdentity", "event_source": "sts.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "251.209.251.231", "user_agent": "Boto3/1.9.183 Python/3.6.8 Linux/3.10.0-957.21.3.el7.x86_64 Botocore/1.12.183", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 789, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "c7c5be5c-6f2f-4186-a74e-b0161e4925d7", "eventTime": "2019-07-08T15:21:12Z", "eventName": "GetCallerIdentity", "eventSource": "sts.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "251.209.251.231", "userAgent": "Boto3/1.9.183 Python/3.6.8 Linux/3.10.0-957.21.3.el7.x86_64 Botocore/1.12.183", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "responseElements": {"userId": "AIDA9BO36HFBHKGJAO9C1", "account": "811596193553", "arn": "arn:aws:iam::811596193553:user/backup"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "c499683cb-df72-41c4-aa90-b5f0efc70f42", "record_id": "flaws_cloudtrail:0000144:c499683cb-df72-41c4-aa90-b5f0efc70f42", "row_index": 144, "timestamp": "2019-07-08T15:21:12Z", "event_type": "GetCallerIdentity", "event_source": "sts.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "251.209.251.231", "user_agent": "Boto3/1.9.183 Python/3.6.8 Linux/3.10.0-957.21.3.el7.x86_64 Botocore/1.12.183", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 789, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "c499683cb-df72-41c4-aa90-b5f0efc70f42", "eventTime": "2019-07-08T15:21:12Z", "eventName": "GetCallerIdentity", "eventSource": "sts.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "251.209.251.231", "userAgent": "Boto3/1.9.183 Python/3.6.8 Linux/3.10.0-957.21.3.el7.x86_64 Botocore/1.12.183", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "responseElements": {"userId": "AIDA9BO36HFBHKGJAO9C1", "account": "811596193553", "arn": "arn:aws:iam::811596193553:user/backup"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "c7c5be5c-6f2f-4186-a74e-b0161e4925d7", "record_id": "flaws_cloudtrail:0000145:c7c5be5c-6f2f-4186-a74e-b0161e4925d7", "row_index": 145, "timestamp": "2019-07-08T15:21:12Z", "event_type": "GetCallerIdentity", "event_source": "sts.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "251.209.251.231", "user_agent": "Boto3/1.9.183 Python/3.6.8 Linux/3.10.0-957.21.3.el7.x86_64 Botocore/1.12.183", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 789, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "c7c5be5c-6f2f-4186-a74e-b0161e4925d7", "eventTime": "2019-07-08T15:21:12Z", "eventName": "GetCallerIdentity", "eventSource": "sts.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "251.209.251.231", "userAgent": "Boto3/1.9.183 Python/3.6.8 Linux/3.10.0-957.21.3.el7.x86_64 Botocore/1.12.183", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "responseElements": {"userId": "AIDA9BO36HFBHKGJAO9C1", "account": "811596193553", "arn": "arn:aws:iam::811596193553:user/backup"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "c499683cb-df72-41c4-aa90-b5f0efc70f42", "record_id": "flaws_cloudtrail:0000146:c499683cb-df72-41c4-aa90-b5f0efc70f42", "row_index": 146, "timestamp": "2019-07-08T15:21:12Z", "event_type": "GetCallerIdentity", "event_source": "sts.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "251.209.251.231", "user_agent": "Boto3/1.9.183 Python/3.6.8 Linux/3.10.0-957.21.3.el7.x86_64 Botocore/1.12.183", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 789, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "c499683cb-df72-41c4-aa90-b5f0efc70f42", "eventTime": "2019-07-08T15:21:12Z", "eventName": "GetCallerIdentity", "eventSource": "sts.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "251.209.251.231", "userAgent": "Boto3/1.9.183 Python/3.6.8 Linux/3.10.0-957.21.3.el7.x86_64 Botocore/1.12.183", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "responseElements": {"userId": "AIDA9BO36HFBHKGJAO9C1", "account": "811596193553", "arn": "arn:aws:iam::811596193553:user/backup"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "e5e13aa4-c790-44f8-b60b-5d95ce5abad4", "record_id": "flaws_cloudtrail:0000147:e5e13aa4-c790-44f8-b60b-5d95ce5abad4", "row_index": 147, "timestamp": "2019-07-08T15:21:13Z", "event_type": "GetCallerIdentity", "event_source": "sts.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "251.209.251.231", "user_agent": "Boto3/1.9.183 Python/3.6.8 Linux/3.10.0-957.21.3.el7.x86_64 Botocore/1.12.183", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 789, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "e5e13aa4-c790-44f8-b60b-5d95ce5abad4", "eventTime": "2019-07-08T15:21:13Z", "eventName": "GetCallerIdentity", "eventSource": "sts.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "251.209.251.231", "userAgent": "Boto3/1.9.183 Python/3.6.8 Linux/3.10.0-957.21.3.el7.x86_64 Botocore/1.12.183", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "responseElements": {"userId": "AIDA9BO36HFBHKGJAO9C1", "account": "811596193553", "arn": "arn:aws:iam::811596193553:user/backup"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "e5e13aa4-c790-44f8-b60b-5d95ce5abad4", "record_id": "flaws_cloudtrail:0000148:e5e13aa4-c790-44f8-b60b-5d95ce5abad4", "row_index": 148, "timestamp": "2019-07-08T15:21:13Z", "event_type": "GetCallerIdentity", "event_source": "sts.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "251.209.251.231", "user_agent": "Boto3/1.9.183 Python/3.6.8 Linux/3.10.0-957.21.3.el7.x86_64 Botocore/1.12.183", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 789, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "e5e13aa4-c790-44f8-b60b-5d95ce5abad4", "eventTime": "2019-07-08T15:21:13Z", "eventName": "GetCallerIdentity", "eventSource": "sts.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "251.209.251.231", "userAgent": "Boto3/1.9.183 Python/3.6.8 Linux/3.10.0-957.21.3.el7.x86_64 Botocore/1.12.183", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "responseElements": {"userId": "AIDA9BO36HFBHKGJAO9C1", "account": "811596193553", "arn": "arn:aws:iam::811596193553:user/backup"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "5820a461-daf6-4023-8547-58352aa85071", "record_id": "flaws_cloudtrail:0000149:5820a461-daf6-4023-8547-58352aa85071", "row_index": 149, "timestamp": "2019-07-08T15:21:14Z", "event_type": "GetCallerIdentity", "event_source": "sts.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "251.209.251.231", "user_agent": "Boto3/1.9.183 Python/3.6.8 Linux/3.10.0-957.21.3.el7.x86_64 Botocore/1.12.183", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 786, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "5820a461-daf6-4023-8547-58352aa85071", "eventTime": "2019-07-08T15:21:14Z", "eventName": "GetCallerIdentity", "eventSource": "sts.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "251.209.251.231", "userAgent": "Boto3/1.9.183 Python/3.6.8 Linux/3.10.0-957.21.3.el7.x86_64 Botocore/1.12.183", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "responseElements": {"userId": "AIDA9BO36HFBHKGJAO9C1", "account": "811596193553", "arn": "arn:aws:iam::811596193553:user/backup"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "aa830959-69e0-4a2d-8794-9ee8d1c358d5", "record_id": "flaws_cloudtrail:0000150:aa830959-69e0-4a2d-8794-9ee8d1c358d5", "row_index": 150, "timestamp": "2019-07-08T15:21:14Z", "event_type": "GetCallerIdentity", "event_source": "sts.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "251.209.251.231", "user_agent": "Boto3/1.9.183 Python/3.6.8 Linux/3.10.0-957.21.3.el7.x86_64 Botocore/1.12.183", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 788, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "aa830959-69e0-4a2d-8794-9ee8d1c358d5", "eventTime": "2019-07-08T15:21:14Z", "eventName": "GetCallerIdentity", "eventSource": "sts.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "251.209.251.231", "userAgent": "Boto3/1.9.183 Python/3.6.8 Linux/3.10.0-957.21.3.el7.x86_64 Botocore/1.12.183", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "responseElements": {"userId": "AIDA9BO36HFBHKGJAO9C1", "account": "811596193553", "arn": "arn:aws:iam::811596193553:user/backup"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "aa830959-69e0-4a2d-8794-9ee8d1c358d5", "record_id": "flaws_cloudtrail:0000151:aa830959-69e0-4a2d-8794-9ee8d1c358d5", "row_index": 151, "timestamp": "2019-07-08T15:21:14Z", "event_type": "GetCallerIdentity", "event_source": "sts.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "251.209.251.231", "user_agent": "Boto3/1.9.183 Python/3.6.8 Linux/3.10.0-957.21.3.el7.x86_64 Botocore/1.12.183", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 788, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "aa830959-69e0-4a2d-8794-9ee8d1c358d5", "eventTime": "2019-07-08T15:21:14Z", "eventName": "GetCallerIdentity", "eventSource": "sts.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "251.209.251.231", "userAgent": "Boto3/1.9.183 Python/3.6.8 Linux/3.10.0-957.21.3.el7.x86_64 Botocore/1.12.183", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "responseElements": {"userId": "AIDA9BO36HFBHKGJAO9C1", "account": "811596193553", "arn": "arn:aws:iam::811596193553:user/backup"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "5820a461-daf6-4023-8547-58352aa85071", "record_id": "flaws_cloudtrail:0000152:5820a461-daf6-4023-8547-58352aa85071", "row_index": 152, "timestamp": "2019-07-08T15:21:14Z", "event_type": "GetCallerIdentity", "event_source": "sts.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "251.209.251.231", "user_agent": "Boto3/1.9.183 Python/3.6.8 Linux/3.10.0-957.21.3.el7.x86_64 Botocore/1.12.183", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 786, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "5820a461-daf6-4023-8547-58352aa85071", "eventTime": "2019-07-08T15:21:14Z", "eventName": "GetCallerIdentity", "eventSource": "sts.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "251.209.251.231", "userAgent": "Boto3/1.9.183 Python/3.6.8 Linux/3.10.0-957.21.3.el7.x86_64 Botocore/1.12.183", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "responseElements": {"userId": "AIDA9BO36HFBHKGJAO9C1", "account": "811596193553", "arn": "arn:aws:iam::811596193553:user/backup"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "0712e868-2d18-4ff8-8a39-9761b9edec8e", "record_id": "flaws_cloudtrail:0000153:0712e868-2d18-4ff8-8a39-9761b9edec8e", "row_index": 153, "timestamp": "2019-07-08T15:21:15Z", "event_type": "GetCallerIdentity", "event_source": "sts.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "251.209.251.231", "user_agent": "Boto3/1.9.183 Python/3.6.8 Linux/3.10.0-957.21.3.el7.x86_64 Botocore/1.12.183", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 788, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "0712e868-2d18-4ff8-8a39-9761b9edec8e", "eventTime": "2019-07-08T15:21:15Z", "eventName": "GetCallerIdentity", "eventSource": "sts.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "251.209.251.231", "userAgent": "Boto3/1.9.183 Python/3.6.8 Linux/3.10.0-957.21.3.el7.x86_64 Botocore/1.12.183", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "responseElements": {"userId": "AIDA9BO36HFBHKGJAO9C1", "account": "811596193553", "arn": "arn:aws:iam::811596193553:user/backup"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "beed4277-711c-4810-b252-cbf49b9a5c39", "record_id": "flaws_cloudtrail:0000154:beed4277-711c-4810-b252-cbf49b9a5c39", "row_index": 154, "timestamp": "2019-07-08T15:21:15Z", "event_type": "GetCallerIdentity", "event_source": "sts.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "251.209.251.231", "user_agent": "Boto3/1.9.183 Python/3.6.8 Linux/3.10.0-957.21.3.el7.x86_64 Botocore/1.12.183", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 785, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "beed4277-711c-4810-b252-cbf49b9a5c39", "eventTime": "2019-07-08T15:21:15Z", "eventName": "GetCallerIdentity", "eventSource": "sts.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "251.209.251.231", "userAgent": "Boto3/1.9.183 Python/3.6.8 Linux/3.10.0-957.21.3.el7.x86_64 Botocore/1.12.183", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "responseElements": {"userId": "AIDA9BO36HFBHKGJAO9C1", "account": "811596193553", "arn": "arn:aws:iam::811596193553:user/backup"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "0712e868-2d18-4ff8-8a39-9761b9edec8e", "record_id": "flaws_cloudtrail:0000155:0712e868-2d18-4ff8-8a39-9761b9edec8e", "row_index": 155, "timestamp": "2019-07-08T15:21:15Z", "event_type": "GetCallerIdentity", "event_source": "sts.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "251.209.251.231", "user_agent": "Boto3/1.9.183 Python/3.6.8 Linux/3.10.0-957.21.3.el7.x86_64 Botocore/1.12.183", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 788, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "0712e868-2d18-4ff8-8a39-9761b9edec8e", "eventTime": "2019-07-08T15:21:15Z", "eventName": "GetCallerIdentity", "eventSource": "sts.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "251.209.251.231", "userAgent": "Boto3/1.9.183 Python/3.6.8 Linux/3.10.0-957.21.3.el7.x86_64 Botocore/1.12.183", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "responseElements": {"userId": "AIDA9BO36HFBHKGJAO9C1", "account": "811596193553", "arn": "arn:aws:iam::811596193553:user/backup"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "beed4277-711c-4810-b252-cbf49b9a5c39", "record_id": "flaws_cloudtrail:0000156:beed4277-711c-4810-b252-cbf49b9a5c39", "row_index": 156, "timestamp": "2019-07-08T15:21:15Z", "event_type": "GetCallerIdentity", "event_source": "sts.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "251.209.251.231", "user_agent": "Boto3/1.9.183 Python/3.6.8 Linux/3.10.0-957.21.3.el7.x86_64 Botocore/1.12.183", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 785, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "beed4277-711c-4810-b252-cbf49b9a5c39", "eventTime": "2019-07-08T15:21:15Z", "eventName": "GetCallerIdentity", "eventSource": "sts.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "251.209.251.231", "userAgent": "Boto3/1.9.183 Python/3.6.8 Linux/3.10.0-957.21.3.el7.x86_64 Botocore/1.12.183", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "responseElements": {"userId": "AIDA9BO36HFBHKGJAO9C1", "account": "811596193553", "arn": "arn:aws:iam::811596193553:user/backup"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "5786a05a-d52b-4b31-8acc-85eba6079690", "record_id": "flaws_cloudtrail:0000157:5786a05a-d52b-4b31-8acc-85eba6079690", "row_index": 157, "timestamp": "2019-07-08T15:21:16Z", "event_type": "GetCallerIdentity", "event_source": "sts.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "251.209.251.231", "user_agent": "Boto3/1.9.183 Python/3.6.8 Linux/3.10.0-957.21.3.el7.x86_64 Botocore/1.12.183", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 790, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "5786a05a-d52b-4b31-8acc-85eba6079690", "eventTime": "2019-07-08T15:21:16Z", "eventName": "GetCallerIdentity", "eventSource": "sts.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "251.209.251.231", "userAgent": "Boto3/1.9.183 Python/3.6.8 Linux/3.10.0-957.21.3.el7.x86_64 Botocore/1.12.183", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "responseElements": {"userId": "AIDA9BO36HFBHKGJAO9C1", "account": "811596193553", "arn": "arn:aws:iam::811596193553:user/backup"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "329e9583-a5e7-4e12-bb9f-aaf8981aef8b", "record_id": "flaws_cloudtrail:0000158:329e9583-a5e7-4e12-bb9f-aaf8981aef8b", "row_index": 158, "timestamp": "2019-07-08T15:21:16Z", "event_type": "GetCallerIdentity", "event_source": "sts.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "251.209.251.231", "user_agent": "Boto3/1.9.183 Python/3.6.8 Linux/3.10.0-957.21.3.el7.x86_64 Botocore/1.12.183", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 789, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "329e9583-a5e7-4e12-bb9f-aaf8981aef8b", "eventTime": "2019-07-08T15:21:16Z", "eventName": "GetCallerIdentity", "eventSource": "sts.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "251.209.251.231", "userAgent": "Boto3/1.9.183 Python/3.6.8 Linux/3.10.0-957.21.3.el7.x86_64 Botocore/1.12.183", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "responseElements": {"userId": "AIDA9BO36HFBHKGJAO9C1", "account": "811596193553", "arn": "arn:aws:iam::811596193553:user/backup"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "5786a05a-d52b-4b31-8acc-85eba6079690", "record_id": "flaws_cloudtrail:0000159:5786a05a-d52b-4b31-8acc-85eba6079690", "row_index": 159, "timestamp": "2019-07-08T15:21:16Z", "event_type": "GetCallerIdentity", "event_source": "sts.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "251.209.251.231", "user_agent": "Boto3/1.9.183 Python/3.6.8 Linux/3.10.0-957.21.3.el7.x86_64 Botocore/1.12.183", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 790, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "5786a05a-d52b-4b31-8acc-85eba6079690", "eventTime": "2019-07-08T15:21:16Z", "eventName": "GetCallerIdentity", "eventSource": "sts.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "251.209.251.231", "userAgent": "Boto3/1.9.183 Python/3.6.8 Linux/3.10.0-957.21.3.el7.x86_64 Botocore/1.12.183", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "responseElements": {"userId": "AIDA9BO36HFBHKGJAO9C1", "account": "811596193553", "arn": "arn:aws:iam::811596193553:user/backup"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "329e9583-a5e7-4e12-bb9f-aaf8981aef8b", "record_id": "flaws_cloudtrail:0000160:329e9583-a5e7-4e12-bb9f-aaf8981aef8b", "row_index": 160, "timestamp": "2019-07-08T15:21:16Z", "event_type": "GetCallerIdentity", "event_source": "sts.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "251.209.251.231", "user_agent": "Boto3/1.9.183 Python/3.6.8 Linux/3.10.0-957.21.3.el7.x86_64 Botocore/1.12.183", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 789, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "329e9583-a5e7-4e12-bb9f-aaf8981aef8b", "eventTime": "2019-07-08T15:21:16Z", "eventName": "GetCallerIdentity", "eventSource": "sts.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "251.209.251.231", "userAgent": "Boto3/1.9.183 Python/3.6.8 Linux/3.10.0-957.21.3.el7.x86_64 Botocore/1.12.183", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "responseElements": {"userId": "AIDA9BO36HFBHKGJAO9C1", "account": "811596193553", "arn": "arn:aws:iam::811596193553:user/backup"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "0526ba20-11e2-433c-af0d-a014239a71c4", "record_id": "flaws_cloudtrail:0000161:0526ba20-11e2-433c-af0d-a014239a71c4", "row_index": 161, "timestamp": "2019-07-08T15:21:17Z", "event_type": "GetCallerIdentity", "event_source": "sts.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "251.209.251.231", "user_agent": "Boto3/1.9.183 Python/3.6.8 Linux/3.10.0-957.21.3.el7.x86_64 Botocore/1.12.183", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 789, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "0526ba20-11e2-433c-af0d-a014239a71c4", "eventTime": "2019-07-08T15:21:17Z", "eventName": "GetCallerIdentity", "eventSource": "sts.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "251.209.251.231", "userAgent": "Boto3/1.9.183 Python/3.6.8 Linux/3.10.0-957.21.3.el7.x86_64 Botocore/1.12.183", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "responseElements": {"userId": "AIDA9BO36HFBHKGJAO9C1", "account": "811596193553", "arn": "arn:aws:iam::811596193553:user/backup"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "f2af8fa1-fb7f-4440-8e4d-93cd50157f97", "record_id": "flaws_cloudtrail:0000162:f2af8fa1-fb7f-4440-8e4d-93cd50157f97", "row_index": 162, "timestamp": "2019-07-08T15:21:17Z", "event_type": "GetCallerIdentity", "event_source": "sts.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "251.209.251.231", "user_agent": "Boto3/1.9.183 Python/3.6.8 Linux/3.10.0-957.21.3.el7.x86_64 Botocore/1.12.183", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 789, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "f2af8fa1-fb7f-4440-8e4d-93cd50157f97", "eventTime": "2019-07-08T15:21:17Z", "eventName": "GetCallerIdentity", "eventSource": "sts.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "251.209.251.231", "userAgent": "Boto3/1.9.183 Python/3.6.8 Linux/3.10.0-957.21.3.el7.x86_64 Botocore/1.12.183", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "responseElements": {"userId": "AIDA9BO36HFBHKGJAO9C1", "account": "811596193553", "arn": "arn:aws:iam::811596193553:user/backup"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "f2af8fa1-fb7f-4440-8e4d-93cd50157f97", "record_id": "flaws_cloudtrail:0000163:f2af8fa1-fb7f-4440-8e4d-93cd50157f97", "row_index": 163, "timestamp": "2019-07-08T15:21:17Z", "event_type": "GetCallerIdentity", "event_source": "sts.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "251.209.251.231", "user_agent": "Boto3/1.9.183 Python/3.6.8 Linux/3.10.0-957.21.3.el7.x86_64 Botocore/1.12.183", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 789, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "f2af8fa1-fb7f-4440-8e4d-93cd50157f97", "eventTime": "2019-07-08T15:21:17Z", "eventName": "GetCallerIdentity", "eventSource": "sts.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "251.209.251.231", "userAgent": "Boto3/1.9.183 Python/3.6.8 Linux/3.10.0-957.21.3.el7.x86_64 Botocore/1.12.183", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "responseElements": {"userId": "AIDA9BO36HFBHKGJAO9C1", "account": "811596193553", "arn": "arn:aws:iam::811596193553:user/backup"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "0526ba20-11e2-433c-af0d-a014239a71c4", "record_id": "flaws_cloudtrail:0000164:0526ba20-11e2-433c-af0d-a014239a71c4", "row_index": 164, "timestamp": "2019-07-08T15:21:17Z", "event_type": "GetCallerIdentity", "event_source": "sts.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "251.209.251.231", "user_agent": "Boto3/1.9.183 Python/3.6.8 Linux/3.10.0-957.21.3.el7.x86_64 Botocore/1.12.183", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 789, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "0526ba20-11e2-433c-af0d-a014239a71c4", "eventTime": "2019-07-08T15:21:17Z", "eventName": "GetCallerIdentity", "eventSource": "sts.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "251.209.251.231", "userAgent": "Boto3/1.9.183 Python/3.6.8 Linux/3.10.0-957.21.3.el7.x86_64 Botocore/1.12.183", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "responseElements": {"userId": "AIDA9BO36HFBHKGJAO9C1", "account": "811596193553", "arn": "arn:aws:iam::811596193553:user/backup"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "32d182561-71e9-4e7c-b13f-8078772aa7dd", "record_id": "flaws_cloudtrail:0000165:32d182561-71e9-4e7c-b13f-8078772aa7dd", "row_index": 165, "timestamp": "2019-07-08T15:21:18Z", "event_type": "GetCallerIdentity", "event_source": "sts.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "251.209.251.231", "user_agent": "Boto3/1.9.183 Python/3.6.8 Linux/3.10.0-957.21.3.el7.x86_64 Botocore/1.12.183", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 790, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "32d182561-71e9-4e7c-b13f-8078772aa7dd", "eventTime": "2019-07-08T15:21:18Z", "eventName": "GetCallerIdentity", "eventSource": "sts.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "251.209.251.231", "userAgent": "Boto3/1.9.183 Python/3.6.8 Linux/3.10.0-957.21.3.el7.x86_64 Botocore/1.12.183", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "responseElements": {"userId": "AIDA9BO36HFBHKGJAO9C1", "account": "811596193553", "arn": "arn:aws:iam::811596193553:user/backup"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "887def76-4d47-4788-a89c-831316750bf2", "record_id": "flaws_cloudtrail:0000166:887def76-4d47-4788-a89c-831316750bf2", "row_index": 166, "timestamp": "2019-07-08T15:21:18Z", "event_type": "GetCallerIdentity", "event_source": "sts.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "251.209.251.231", "user_agent": "Boto3/1.9.183 Python/3.6.8 Linux/3.10.0-957.21.3.el7.x86_64 Botocore/1.12.183", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 787, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "887def76-4d47-4788-a89c-831316750bf2", "eventTime": "2019-07-08T15:21:18Z", "eventName": "GetCallerIdentity", "eventSource": "sts.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "251.209.251.231", "userAgent": "Boto3/1.9.183 Python/3.6.8 Linux/3.10.0-957.21.3.el7.x86_64 Botocore/1.12.183", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "responseElements": {"userId": "AIDA9BO36HFBHKGJAO9C1", "account": "811596193553", "arn": "arn:aws:iam::811596193553:user/backup"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "887def76-4d47-4788-a89c-831316750bf2", "record_id": "flaws_cloudtrail:0000167:887def76-4d47-4788-a89c-831316750bf2", "row_index": 167, "timestamp": "2019-07-08T15:21:18Z", "event_type": "GetCallerIdentity", "event_source": "sts.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "251.209.251.231", "user_agent": "Boto3/1.9.183 Python/3.6.8 Linux/3.10.0-957.21.3.el7.x86_64 Botocore/1.12.183", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 787, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "887def76-4d47-4788-a89c-831316750bf2", "eventTime": "2019-07-08T15:21:18Z", "eventName": "GetCallerIdentity", "eventSource": "sts.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "251.209.251.231", "userAgent": "Boto3/1.9.183 Python/3.6.8 Linux/3.10.0-957.21.3.el7.x86_64 Botocore/1.12.183", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "responseElements": {"userId": "AIDA9BO36HFBHKGJAO9C1", "account": "811596193553", "arn": "arn:aws:iam::811596193553:user/backup"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "32d182561-71e9-4e7c-b13f-8078772aa7dd", "record_id": "flaws_cloudtrail:0000168:32d182561-71e9-4e7c-b13f-8078772aa7dd", "row_index": 168, "timestamp": "2019-07-08T15:21:18Z", "event_type": "GetCallerIdentity", "event_source": "sts.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "251.209.251.231", "user_agent": "Boto3/1.9.183 Python/3.6.8 Linux/3.10.0-957.21.3.el7.x86_64 Botocore/1.12.183", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 790, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "32d182561-71e9-4e7c-b13f-8078772aa7dd", "eventTime": "2019-07-08T15:21:18Z", "eventName": "GetCallerIdentity", "eventSource": "sts.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "251.209.251.231", "userAgent": "Boto3/1.9.183 Python/3.6.8 Linux/3.10.0-957.21.3.el7.x86_64 Botocore/1.12.183", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "responseElements": {"userId": "AIDA9BO36HFBHKGJAO9C1", "account": "811596193553", "arn": "arn:aws:iam::811596193553:user/backup"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "cfe2ecab-bef1-4dd1-92a5-765f442770f99", "record_id": "flaws_cloudtrail:0000169:cfe2ecab-bef1-4dd1-92a5-765f442770f99", "row_index": 169, "timestamp": "2019-07-08T15:21:19Z", "event_type": "GetCallerIdentity", "event_source": "sts.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "251.209.251.231", "user_agent": "Boto3/1.9.183 Python/3.6.8 Linux/3.10.0-957.21.3.el7.x86_64 Botocore/1.12.183", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 789, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "cfe2ecab-bef1-4dd1-92a5-765f442770f99", "eventTime": "2019-07-08T15:21:19Z", "eventName": "GetCallerIdentity", "eventSource": "sts.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "251.209.251.231", "userAgent": "Boto3/1.9.183 Python/3.6.8 Linux/3.10.0-957.21.3.el7.x86_64 Botocore/1.12.183", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "responseElements": {"userId": "AIDA9BO36HFBHKGJAO9C1", "account": "811596193553", "arn": "arn:aws:iam::811596193553:user/backup"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "cfe2ecab-bef1-4dd1-92a5-765f442770f99", "record_id": "flaws_cloudtrail:0000170:cfe2ecab-bef1-4dd1-92a5-765f442770f99", "row_index": 170, "timestamp": "2019-07-08T15:21:19Z", "event_type": "GetCallerIdentity", "event_source": "sts.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "251.209.251.231", "user_agent": "Boto3/1.9.183 Python/3.6.8 Linux/3.10.0-957.21.3.el7.x86_64 Botocore/1.12.183", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 789, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "cfe2ecab-bef1-4dd1-92a5-765f442770f99", "eventTime": "2019-07-08T15:21:19Z", "eventName": "GetCallerIdentity", "eventSource": "sts.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "251.209.251.231", "userAgent": "Boto3/1.9.183 Python/3.6.8 Linux/3.10.0-957.21.3.el7.x86_64 Botocore/1.12.183", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "responseElements": {"userId": "AIDA9BO36HFBHKGJAO9C1", "account": "811596193553", "arn": "arn:aws:iam::811596193553:user/backup"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "f74a1b3d-9efa-4cd3-90d0-e62be88007cd", "record_id": "flaws_cloudtrail:0000171:f74a1b3d-9efa-4cd3-90d0-e62be88007cd", "row_index": 171, "timestamp": "2019-07-08T15:21:20Z", "event_type": "GenerateCredentialReport", "event_source": "iam.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "251.209.251.231", "user_agent": "Boto3/1.9.183 Python/3.6.8 Linux/3.10.0-957.21.3.el7.x86_64 Botocore/1.12.183", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 857, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "f74a1b3d-9efa-4cd3-90d0-e62be88007cd", "eventTime": "2019-07-08T15:21:20Z", "eventName": "GenerateCredentialReport", "eventSource": "iam.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "251.209.251.231", "userAgent": "Boto3/1.9.183 Python/3.6.8 Linux/3.10.0-957.21.3.el7.x86_64 Botocore/1.12.183", "awsRegion": "us-east-1", "errorCode": "AccessDenied", "errorMessage": "User: arn:aws:iam::811596193553:user/backup is not authorized to perform: iam:GenerateCredentialReport on resource: *", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "7895f88d-eea8-4600-8ced-39ae08bee26d", "record_id": "flaws_cloudtrail:0000172:7895f88d-eea8-4600-8ced-39ae08bee26d", "row_index": 172, "timestamp": "2019-07-08T15:21:20Z", "event_type": "ListUsers", "event_source": "iam.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "251.209.251.231", "user_agent": "Boto3/1.9.183 Python/3.6.8 Linux/3.10.0-957.21.3.el7.x86_64 Botocore/1.12.183", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 857, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "7895f88d-eea8-4600-8ced-39ae08bee26d", "eventTime": "2019-07-08T15:21:20Z", "eventName": "ListUsers", "eventSource": "iam.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "251.209.251.231", "userAgent": "Boto3/1.9.183 Python/3.6.8 Linux/3.10.0-957.21.3.el7.x86_64 Botocore/1.12.183", "awsRegion": "us-east-1", "errorCode": "AccessDenied", "errorMessage": "User: arn:aws:iam::811596193553:user/backup is not authorized to perform: iam:ListUsers on resource: arn:aws:iam::811596193553:user/", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "83eba75d-3ce9-4d6c-a8f7-d3c861179d6", "record_id": "flaws_cloudtrail:0000173:83eba75d-3ce9-4d6c-a8f7-d3c861179d6", "row_index": 173, "timestamp": "2019-07-08T15:21:20Z", "event_type": "ListPolicies", "event_source": "iam.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "251.209.251.231", "user_agent": "Boto3/1.9.183 Python/3.6.8 Linux/3.10.0-957.21.3.el7.x86_64 Botocore/1.12.183", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 845, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "83eba75d-3ce9-4d6c-a8f7-d3c861179d6", "eventTime": "2019-07-08T15:21:20Z", "eventName": "ListPolicies", "eventSource": "iam.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "251.209.251.231", "userAgent": "Boto3/1.9.183 Python/3.6.8 Linux/3.10.0-957.21.3.el7.x86_64 Botocore/1.12.183", "awsRegion": "us-east-1", "errorCode": "AccessDenied", "errorMessage": "User: arn:aws:iam::811596193553:user/backup is not authorized to perform: iam:ListPolicies on resource: policy path /", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "d598429de-a044-49ed-9b1e-411648f9f8b5", "record_id": "flaws_cloudtrail:0000174:d598429de-a044-49ed-9b1e-411648f9f8b5", "row_index": 174, "timestamp": "2019-07-08T15:21:20Z", "event_type": "GetAccountPasswordPolicy", "event_source": "iam.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "251.209.251.231", "user_agent": "Boto3/1.9.183 Python/3.6.8 Linux/3.10.0-957.21.3.el7.x86_64 Botocore/1.12.183", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 859, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "d598429de-a044-49ed-9b1e-411648f9f8b5", "eventTime": "2019-07-08T15:21:20Z", "eventName": "GetAccountPasswordPolicy", "eventSource": "iam.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "251.209.251.231", "userAgent": "Boto3/1.9.183 Python/3.6.8 Linux/3.10.0-957.21.3.el7.x86_64 Botocore/1.12.183", "awsRegion": "us-east-1", "errorCode": "AccessDenied", "errorMessage": "User: arn:aws:iam::811596193553:user/backup is not authorized to perform: iam:GetAccountPasswordPolicy on resource: *", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "c1a6f06c-1e81-44f0-aaa0-bb4f31cb2966", "record_id": "flaws_cloudtrail:0000175:c1a6f06c-1e81-44f0-aaa0-bb4f31cb2966", "row_index": 175, "timestamp": "2019-07-08T15:21:20Z", "event_type": "ListRoles", "event_source": "iam.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "251.209.251.231", "user_agent": "Boto3/1.9.183 Python/3.6.8 Linux/3.10.0-957.21.3.el7.x86_64 Botocore/1.12.183", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 858, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "c1a6f06c-1e81-44f0-aaa0-bb4f31cb2966", "eventTime": "2019-07-08T15:21:20Z", "eventName": "ListRoles", "eventSource": "iam.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "251.209.251.231", "userAgent": "Boto3/1.9.183 Python/3.6.8 Linux/3.10.0-957.21.3.el7.x86_64 Botocore/1.12.183", "awsRegion": "us-east-1", "errorCode": "AccessDenied", "errorMessage": "User: arn:aws:iam::811596193553:user/backup is not authorized to perform: iam:ListRoles on resource: arn:aws:iam::811596193553:role/", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "afa845c6-258a-48ba-a49d-5697d2cc2d7c", "record_id": "flaws_cloudtrail:0000176:afa845c6-258a-48ba-a49d-5697d2cc2d7c", "row_index": 176, "timestamp": "2019-07-08T15:21:20Z", "event_type": "ListGroups", "event_source": "iam.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "251.209.251.231", "user_agent": "Boto3/1.9.183 Python/3.6.8 Linux/3.10.0-957.21.3.el7.x86_64 Botocore/1.12.183", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 860, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "afa845c6-258a-48ba-a49d-5697d2cc2d7c", "eventTime": "2019-07-08T15:21:20Z", "eventName": "ListGroups", "eventSource": "iam.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "251.209.251.231", "userAgent": "Boto3/1.9.183 Python/3.6.8 Linux/3.10.0-957.21.3.el7.x86_64 Botocore/1.12.183", "awsRegion": "us-east-1", "errorCode": "AccessDenied", "errorMessage": "User: arn:aws:iam::811596193553:user/backup is not authorized to perform: iam:ListGroups on resource: arn:aws:iam::811596193553:group/", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "98b6f454-0685-4aca-8fd7-3da233be833d", "record_id": "flaws_cloudtrail:0000177:98b6f454-0685-4aca-8fd7-3da233be833d", "row_index": 177, "timestamp": "2019-07-08T15:21:20Z", "event_type": "ListBuckets", "event_source": "s3.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "251.209.251.231", "user_agent": "[Boto3/1.9.183 Python/3.6.8 Linux/3.10.0-957.21.3.el7.x86_64 Botocore/1.12.183]", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 819, "raw_record_depth": 3, "raw_record_top_level_keys": ["additionalEventData", "awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "98b6f454-0685-4aca-8fd7-3da233be833d", "eventTime": "2019-07-08T15:21:20Z", "eventName": "ListBuckets", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "251.209.251.231", "userAgent": "[Boto3/1.9.183 Python/3.6.8 Linux/3.10.0-957.21.3.el7.x86_64 Botocore/1.12.183]", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"host": ["s3.amazonaws.com"]}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "f74a1b3d-9efa-4cd3-90d0-e62be88007cd", "record_id": "flaws_cloudtrail:0000178:f74a1b3d-9efa-4cd3-90d0-e62be88007cd", "row_index": 178, "timestamp": "2019-07-08T15:21:20Z", "event_type": "GenerateCredentialReport", "event_source": "iam.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "251.209.251.231", "user_agent": "Boto3/1.9.183 Python/3.6.8 Linux/3.10.0-957.21.3.el7.x86_64 Botocore/1.12.183", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 857, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "f74a1b3d-9efa-4cd3-90d0-e62be88007cd", "eventTime": "2019-07-08T15:21:20Z", "eventName": "GenerateCredentialReport", "eventSource": "iam.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "251.209.251.231", "userAgent": "Boto3/1.9.183 Python/3.6.8 Linux/3.10.0-957.21.3.el7.x86_64 Botocore/1.12.183", "awsRegion": "us-east-1", "errorCode": "AccessDenied", "errorMessage": "User: arn:aws:iam::811596193553:user/backup is not authorized to perform: iam:GenerateCredentialReport on resource: *", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "7895f88d-eea8-4600-8ced-39ae08bee26d", "record_id": "flaws_cloudtrail:0000179:7895f88d-eea8-4600-8ced-39ae08bee26d", "row_index": 179, "timestamp": "2019-07-08T15:21:20Z", "event_type": "ListUsers", "event_source": "iam.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "251.209.251.231", "user_agent": "Boto3/1.9.183 Python/3.6.8 Linux/3.10.0-957.21.3.el7.x86_64 Botocore/1.12.183", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 857, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "7895f88d-eea8-4600-8ced-39ae08bee26d", "eventTime": "2019-07-08T15:21:20Z", "eventName": "ListUsers", "eventSource": "iam.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "251.209.251.231", "userAgent": "Boto3/1.9.183 Python/3.6.8 Linux/3.10.0-957.21.3.el7.x86_64 Botocore/1.12.183", "awsRegion": "us-east-1", "errorCode": "AccessDenied", "errorMessage": "User: arn:aws:iam::811596193553:user/backup is not authorized to perform: iam:ListUsers on resource: arn:aws:iam::811596193553:user/", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "83eba75d-3ce9-4d6c-a8f7-d3c861179d6", "record_id": "flaws_cloudtrail:0000180:83eba75d-3ce9-4d6c-a8f7-d3c861179d6", "row_index": 180, "timestamp": "2019-07-08T15:21:20Z", "event_type": "ListPolicies", "event_source": "iam.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "251.209.251.231", "user_agent": "Boto3/1.9.183 Python/3.6.8 Linux/3.10.0-957.21.3.el7.x86_64 Botocore/1.12.183", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 845, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "83eba75d-3ce9-4d6c-a8f7-d3c861179d6", "eventTime": "2019-07-08T15:21:20Z", "eventName": "ListPolicies", "eventSource": "iam.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "251.209.251.231", "userAgent": "Boto3/1.9.183 Python/3.6.8 Linux/3.10.0-957.21.3.el7.x86_64 Botocore/1.12.183", "awsRegion": "us-east-1", "errorCode": "AccessDenied", "errorMessage": "User: arn:aws:iam::811596193553:user/backup is not authorized to perform: iam:ListPolicies on resource: policy path /", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "d598429de-a044-49ed-9b1e-411648f9f8b5", "record_id": "flaws_cloudtrail:0000181:d598429de-a044-49ed-9b1e-411648f9f8b5", "row_index": 181, "timestamp": "2019-07-08T15:21:20Z", "event_type": "GetAccountPasswordPolicy", "event_source": "iam.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "251.209.251.231", "user_agent": "Boto3/1.9.183 Python/3.6.8 Linux/3.10.0-957.21.3.el7.x86_64 Botocore/1.12.183", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 859, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "d598429de-a044-49ed-9b1e-411648f9f8b5", "eventTime": "2019-07-08T15:21:20Z", "eventName": "GetAccountPasswordPolicy", "eventSource": "iam.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "251.209.251.231", "userAgent": "Boto3/1.9.183 Python/3.6.8 Linux/3.10.0-957.21.3.el7.x86_64 Botocore/1.12.183", "awsRegion": "us-east-1", "errorCode": "AccessDenied", "errorMessage": "User: arn:aws:iam::811596193553:user/backup is not authorized to perform: iam:GetAccountPasswordPolicy on resource: *", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "c1a6f06c-1e81-44f0-aaa0-bb4f31cb2966", "record_id": "flaws_cloudtrail:0000182:c1a6f06c-1e81-44f0-aaa0-bb4f31cb2966", "row_index": 182, "timestamp": "2019-07-08T15:21:20Z", "event_type": "ListRoles", "event_source": "iam.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "251.209.251.231", "user_agent": "Boto3/1.9.183 Python/3.6.8 Linux/3.10.0-957.21.3.el7.x86_64 Botocore/1.12.183", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 858, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "c1a6f06c-1e81-44f0-aaa0-bb4f31cb2966", "eventTime": "2019-07-08T15:21:20Z", "eventName": "ListRoles", "eventSource": "iam.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "251.209.251.231", "userAgent": "Boto3/1.9.183 Python/3.6.8 Linux/3.10.0-957.21.3.el7.x86_64 Botocore/1.12.183", "awsRegion": "us-east-1", "errorCode": "AccessDenied", "errorMessage": "User: arn:aws:iam::811596193553:user/backup is not authorized to perform: iam:ListRoles on resource: arn:aws:iam::811596193553:role/", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "afa845c6-258a-48ba-a49d-5697d2cc2d7c", "record_id": "flaws_cloudtrail:0000183:afa845c6-258a-48ba-a49d-5697d2cc2d7c", "row_index": 183, "timestamp": "2019-07-08T15:21:20Z", "event_type": "ListGroups", "event_source": "iam.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "251.209.251.231", "user_agent": "Boto3/1.9.183 Python/3.6.8 Linux/3.10.0-957.21.3.el7.x86_64 Botocore/1.12.183", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 860, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "afa845c6-258a-48ba-a49d-5697d2cc2d7c", "eventTime": "2019-07-08T15:21:20Z", "eventName": "ListGroups", "eventSource": "iam.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "251.209.251.231", "userAgent": "Boto3/1.9.183 Python/3.6.8 Linux/3.10.0-957.21.3.el7.x86_64 Botocore/1.12.183", "awsRegion": "us-east-1", "errorCode": "AccessDenied", "errorMessage": "User: arn:aws:iam::811596193553:user/backup is not authorized to perform: iam:ListGroups on resource: arn:aws:iam::811596193553:group/", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "98b6f454-0685-4aca-8fd7-3da233be833d", "record_id": "flaws_cloudtrail:0000184:98b6f454-0685-4aca-8fd7-3da233be833d", "row_index": 184, "timestamp": "2019-07-08T15:21:20Z", "event_type": "ListBuckets", "event_source": "s3.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "251.209.251.231", "user_agent": "[Boto3/1.9.183 Python/3.6.8 Linux/3.10.0-957.21.3.el7.x86_64 Botocore/1.12.183]", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 819, "raw_record_depth": 3, "raw_record_top_level_keys": ["additionalEventData", "awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "98b6f454-0685-4aca-8fd7-3da233be833d", "eventTime": "2019-07-08T15:21:20Z", "eventName": "ListBuckets", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "251.209.251.231", "userAgent": "[Boto3/1.9.183 Python/3.6.8 Linux/3.10.0-957.21.3.el7.x86_64 Botocore/1.12.183]", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"host": ["s3.amazonaws.com"]}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "ed243119f-236e-40df-a341-705253ec962", "record_id": "flaws_cloudtrail:0000185:ed243119f-236e-40df-a341-705253ec962", "row_index": 185, "timestamp": "2019-07-08T15:21:22Z", "event_type": "ListStacks", "event_source": "cloudformation.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "251.209.251.231", "user_agent": "Boto3/1.9.183 Python/3.6.8 Linux/3.10.0-957.21.3.el7.x86_64 Botocore/1.12.183", "aws_region": "ap-northeast-1"}, "resource_arns": [], "raw_record_size_bytes": 841, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "ed243119f-236e-40df-a341-705253ec962", "eventTime": "2019-07-08T15:21:22Z", "eventName": "ListStacks", "eventSource": "cloudformation.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "251.209.251.231", "userAgent": "Boto3/1.9.183 Python/3.6.8 Linux/3.10.0-957.21.3.el7.x86_64 Botocore/1.12.183", "awsRegion": "ap-northeast-1", "errorCode": "AccessDenied", "errorMessage": "User: arn:aws:iam::811596193553:user/backup is not authorized to perform: cloudformation:ListStacks", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "ae8f17e8-fa92-4b90-8e69-99c5f41574f1", "record_id": "flaws_cloudtrail:0000186:ae8f17e8-fa92-4b90-8e69-99c5f41574f1", "row_index": 186, "timestamp": "2019-07-08T15:21:22Z", "event_type": "ListStacks", "event_source": "cloudformation.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "251.209.251.231", "user_agent": "Boto3/1.9.183 Python/3.6.8 Linux/3.10.0-957.21.3.el7.x86_64 Botocore/1.12.183", "aws_region": "ap-northeast-2"}, "resource_arns": [], "raw_record_size_bytes": 841, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "ae8f17e8-fa92-4b90-8e69-99c5f41574f1", "eventTime": "2019-07-08T15:21:22Z", "eventName": "ListStacks", "eventSource": "cloudformation.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "251.209.251.231", "userAgent": "Boto3/1.9.183 Python/3.6.8 Linux/3.10.0-957.21.3.el7.x86_64 Botocore/1.12.183", "awsRegion": "ap-northeast-2", "errorCode": "AccessDenied", "errorMessage": "User: arn:aws:iam::811596193553:user/backup is not authorized to perform: cloudformation:ListStacks", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "9982b7fd-84d6-4e3e-ad90-2dbe190cdb41", "record_id": "flaws_cloudtrail:0000187:9982b7fd-84d6-4e3e-ad90-2dbe190cdb41", "row_index": 187, "timestamp": "2019-07-08T15:21:22Z", "event_type": "ListStacks", "event_source": "cloudformation.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "251.209.251.231", "user_agent": "Boto3/1.9.183 Python/3.6.8 Linux/3.10.0-957.21.3.el7.x86_64 Botocore/1.12.183", "aws_region": "ap-south-1"}, "resource_arns": [], "raw_record_size_bytes": 837, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "9982b7fd-84d6-4e3e-ad90-2dbe190cdb41", "eventTime": "2019-07-08T15:21:22Z", "eventName": "ListStacks", "eventSource": "cloudformation.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "251.209.251.231", "userAgent": "Boto3/1.9.183 Python/3.6.8 Linux/3.10.0-957.21.3.el7.x86_64 Botocore/1.12.183", "awsRegion": "ap-south-1", "errorCode": "AccessDenied", "errorMessage": "User: arn:aws:iam::811596193553:user/backup is not authorized to perform: cloudformation:ListStacks", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "22f2e65b-db45-4db4-830c-156e4724a6c6", "record_id": "flaws_cloudtrail:0000188:22f2e65b-db45-4db4-830c-156e4724a6c6", "row_index": 188, "timestamp": "2019-07-08T15:21:22Z", "event_type": "ListStacks", "event_source": "cloudformation.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "251.209.251.231", "user_agent": "Boto3/1.9.183 Python/3.6.8 Linux/3.10.0-957.21.3.el7.x86_64 Botocore/1.12.183", "aws_region": "ca-central-1"}, "resource_arns": [], "raw_record_size_bytes": 839, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "22f2e65b-db45-4db4-830c-156e4724a6c6", "eventTime": "2019-07-08T15:21:22Z", "eventName": "ListStacks", "eventSource": "cloudformation.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "251.209.251.231", "userAgent": "Boto3/1.9.183 Python/3.6.8 Linux/3.10.0-957.21.3.el7.x86_64 Botocore/1.12.183", "awsRegion": "ca-central-1", "errorCode": "AccessDenied", "errorMessage": "User: arn:aws:iam::811596193553:user/backup is not authorized to perform: cloudformation:ListStacks", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "3792dd17-4f8c-4d7a-b2bf-d2efa9f30e7d", "record_id": "flaws_cloudtrail:0000189:3792dd17-4f8c-4d7a-b2bf-d2efa9f30e7d", "row_index": 189, "timestamp": "2019-07-08T15:21:22Z", "event_type": "ListStacks", "event_source": "cloudformation.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "251.209.251.231", "user_agent": "Boto3/1.9.183 Python/3.6.8 Linux/3.10.0-957.21.3.el7.x86_64 Botocore/1.12.183", "aws_region": "eu-central-1"}, "resource_arns": [], "raw_record_size_bytes": 839, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "3792dd17-4f8c-4d7a-b2bf-d2efa9f30e7d", "eventTime": "2019-07-08T15:21:22Z", "eventName": "ListStacks", "eventSource": "cloudformation.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "251.209.251.231", "userAgent": "Boto3/1.9.183 Python/3.6.8 Linux/3.10.0-957.21.3.el7.x86_64 Botocore/1.12.183", "awsRegion": "eu-central-1", "errorCode": "AccessDenied", "errorMessage": "User: arn:aws:iam::811596193553:user/backup is not authorized to perform: cloudformation:ListStacks", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "77873e9-67ad-47f1-b3c3-e640def560be", "record_id": "flaws_cloudtrail:0000190:77873e9-67ad-47f1-b3c3-e640def560be", "row_index": 190, "timestamp": "2019-07-08T15:21:22Z", "event_type": "ListStacks", "event_source": "cloudformation.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "251.209.251.231", "user_agent": "Boto3/1.9.183 Python/3.6.8 Linux/3.10.0-957.21.3.el7.x86_64 Botocore/1.12.183", "aws_region": "eu-north-1"}, "resource_arns": [], "raw_record_size_bytes": 835, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "77873e9-67ad-47f1-b3c3-e640def560be", "eventTime": "2019-07-08T15:21:22Z", "eventName": "ListStacks", "eventSource": "cloudformation.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "251.209.251.231", "userAgent": "Boto3/1.9.183 Python/3.6.8 Linux/3.10.0-957.21.3.el7.x86_64 Botocore/1.12.183", "awsRegion": "eu-north-1", "errorCode": "AccessDenied", "errorMessage": "User: arn:aws:iam::811596193553:user/backup is not authorized to perform: cloudformation:ListStacks", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "2ff677a4-74cd-4fb2-a9ab-d8b40f6163b7", "record_id": "flaws_cloudtrail:0000191:2ff677a4-74cd-4fb2-a9ab-d8b40f6163b7", "row_index": 191, "timestamp": "2019-07-08T15:21:22Z", "event_type": "ListStacks", "event_source": "cloudformation.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "251.209.251.231", "user_agent": "Boto3/1.9.183 Python/3.6.8 Linux/3.10.0-957.21.3.el7.x86_64 Botocore/1.12.183", "aws_region": "eu-west-1"}, "resource_arns": [], "raw_record_size_bytes": 835, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "2ff677a4-74cd-4fb2-a9ab-d8b40f6163b7", "eventTime": "2019-07-08T15:21:22Z", "eventName": "ListStacks", "eventSource": "cloudformation.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "251.209.251.231", "userAgent": "Boto3/1.9.183 Python/3.6.8 Linux/3.10.0-957.21.3.el7.x86_64 Botocore/1.12.183", "awsRegion": "eu-west-1", "errorCode": "AccessDenied", "errorMessage": "User: arn:aws:iam::811596193553:user/backup is not authorized to perform: cloudformation:ListStacks", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "0e175c5f-ec3b-4da7-8053-cbce9c16091f", "record_id": "flaws_cloudtrail:0000192:0e175c5f-ec3b-4da7-8053-cbce9c16091f", "row_index": 192, "timestamp": "2019-07-08T15:21:22Z", "event_type": "ListStacks", "event_source": "cloudformation.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "251.209.251.231", "user_agent": "Boto3/1.9.183 Python/3.6.8 Linux/3.10.0-957.21.3.el7.x86_64 Botocore/1.12.183", "aws_region": "eu-west-2"}, "resource_arns": [], "raw_record_size_bytes": 836, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "0e175c5f-ec3b-4da7-8053-cbce9c16091f", "eventTime": "2019-07-08T15:21:22Z", "eventName": "ListStacks", "eventSource": "cloudformation.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "251.209.251.231", "userAgent": "Boto3/1.9.183 Python/3.6.8 Linux/3.10.0-957.21.3.el7.x86_64 Botocore/1.12.183", "awsRegion": "eu-west-2", "errorCode": "AccessDenied", "errorMessage": "User: arn:aws:iam::811596193553:user/backup is not authorized to perform: cloudformation:ListStacks", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "ed243119f-236e-40df-a341-705253ec962", "record_id": "flaws_cloudtrail:0000193:ed243119f-236e-40df-a341-705253ec962", "row_index": 193, "timestamp": "2019-07-08T15:21:22Z", "event_type": "ListStacks", "event_source": "cloudformation.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "251.209.251.231", "user_agent": "Boto3/1.9.183 Python/3.6.8 Linux/3.10.0-957.21.3.el7.x86_64 Botocore/1.12.183", "aws_region": "ap-northeast-1"}, "resource_arns": [], "raw_record_size_bytes": 841, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "ed243119f-236e-40df-a341-705253ec962", "eventTime": "2019-07-08T15:21:22Z", "eventName": "ListStacks", "eventSource": "cloudformation.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "251.209.251.231", "userAgent": "Boto3/1.9.183 Python/3.6.8 Linux/3.10.0-957.21.3.el7.x86_64 Botocore/1.12.183", "awsRegion": "ap-northeast-1", "errorCode": "AccessDenied", "errorMessage": "User: arn:aws:iam::811596193553:user/backup is not authorized to perform: cloudformation:ListStacks", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "ae8f17e8-fa92-4b90-8e69-99c5f41574f1", "record_id": "flaws_cloudtrail:0000194:ae8f17e8-fa92-4b90-8e69-99c5f41574f1", "row_index": 194, "timestamp": "2019-07-08T15:21:22Z", "event_type": "ListStacks", "event_source": "cloudformation.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "251.209.251.231", "user_agent": "Boto3/1.9.183 Python/3.6.8 Linux/3.10.0-957.21.3.el7.x86_64 Botocore/1.12.183", "aws_region": "ap-northeast-2"}, "resource_arns": [], "raw_record_size_bytes": 841, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "ae8f17e8-fa92-4b90-8e69-99c5f41574f1", "eventTime": "2019-07-08T15:21:22Z", "eventName": "ListStacks", "eventSource": "cloudformation.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "251.209.251.231", "userAgent": "Boto3/1.9.183 Python/3.6.8 Linux/3.10.0-957.21.3.el7.x86_64 Botocore/1.12.183", "awsRegion": "ap-northeast-2", "errorCode": "AccessDenied", "errorMessage": "User: arn:aws:iam::811596193553:user/backup is not authorized to perform: cloudformation:ListStacks", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "9982b7fd-84d6-4e3e-ad90-2dbe190cdb41", "record_id": "flaws_cloudtrail:0000195:9982b7fd-84d6-4e3e-ad90-2dbe190cdb41", "row_index": 195, "timestamp": "2019-07-08T15:21:22Z", "event_type": "ListStacks", "event_source": "cloudformation.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "251.209.251.231", "user_agent": "Boto3/1.9.183 Python/3.6.8 Linux/3.10.0-957.21.3.el7.x86_64 Botocore/1.12.183", "aws_region": "ap-south-1"}, "resource_arns": [], "raw_record_size_bytes": 837, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "9982b7fd-84d6-4e3e-ad90-2dbe190cdb41", "eventTime": "2019-07-08T15:21:22Z", "eventName": "ListStacks", "eventSource": "cloudformation.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "251.209.251.231", "userAgent": "Boto3/1.9.183 Python/3.6.8 Linux/3.10.0-957.21.3.el7.x86_64 Botocore/1.12.183", "awsRegion": "ap-south-1", "errorCode": "AccessDenied", "errorMessage": "User: arn:aws:iam::811596193553:user/backup is not authorized to perform: cloudformation:ListStacks", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "22f2e65b-db45-4db4-830c-156e4724a6c6", "record_id": "flaws_cloudtrail:0000196:22f2e65b-db45-4db4-830c-156e4724a6c6", "row_index": 196, "timestamp": "2019-07-08T15:21:22Z", "event_type": "ListStacks", "event_source": "cloudformation.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "251.209.251.231", "user_agent": "Boto3/1.9.183 Python/3.6.8 Linux/3.10.0-957.21.3.el7.x86_64 Botocore/1.12.183", "aws_region": "ca-central-1"}, "resource_arns": [], "raw_record_size_bytes": 839, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "22f2e65b-db45-4db4-830c-156e4724a6c6", "eventTime": "2019-07-08T15:21:22Z", "eventName": "ListStacks", "eventSource": "cloudformation.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "251.209.251.231", "userAgent": "Boto3/1.9.183 Python/3.6.8 Linux/3.10.0-957.21.3.el7.x86_64 Botocore/1.12.183", "awsRegion": "ca-central-1", "errorCode": "AccessDenied", "errorMessage": "User: arn:aws:iam::811596193553:user/backup is not authorized to perform: cloudformation:ListStacks", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "3792dd17-4f8c-4d7a-b2bf-d2efa9f30e7d", "record_id": "flaws_cloudtrail:0000197:3792dd17-4f8c-4d7a-b2bf-d2efa9f30e7d", "row_index": 197, "timestamp": "2019-07-08T15:21:22Z", "event_type": "ListStacks", "event_source": "cloudformation.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "251.209.251.231", "user_agent": "Boto3/1.9.183 Python/3.6.8 Linux/3.10.0-957.21.3.el7.x86_64 Botocore/1.12.183", "aws_region": "eu-central-1"}, "resource_arns": [], "raw_record_size_bytes": 839, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "3792dd17-4f8c-4d7a-b2bf-d2efa9f30e7d", "eventTime": "2019-07-08T15:21:22Z", "eventName": "ListStacks", "eventSource": "cloudformation.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "251.209.251.231", "userAgent": "Boto3/1.9.183 Python/3.6.8 Linux/3.10.0-957.21.3.el7.x86_64 Botocore/1.12.183", "awsRegion": "eu-central-1", "errorCode": "AccessDenied", "errorMessage": "User: arn:aws:iam::811596193553:user/backup is not authorized to perform: cloudformation:ListStacks", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "77873e9-67ad-47f1-b3c3-e640def560be", "record_id": "flaws_cloudtrail:0000198:77873e9-67ad-47f1-b3c3-e640def560be", "row_index": 198, "timestamp": "2019-07-08T15:21:22Z", "event_type": "ListStacks", "event_source": "cloudformation.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "251.209.251.231", "user_agent": "Boto3/1.9.183 Python/3.6.8 Linux/3.10.0-957.21.3.el7.x86_64 Botocore/1.12.183", "aws_region": "eu-north-1"}, "resource_arns": [], "raw_record_size_bytes": 835, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "77873e9-67ad-47f1-b3c3-e640def560be", "eventTime": "2019-07-08T15:21:22Z", "eventName": "ListStacks", "eventSource": "cloudformation.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "251.209.251.231", "userAgent": "Boto3/1.9.183 Python/3.6.8 Linux/3.10.0-957.21.3.el7.x86_64 Botocore/1.12.183", "awsRegion": "eu-north-1", "errorCode": "AccessDenied", "errorMessage": "User: arn:aws:iam::811596193553:user/backup is not authorized to perform: cloudformation:ListStacks", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "2ff677a4-74cd-4fb2-a9ab-d8b40f6163b7", "record_id": "flaws_cloudtrail:0000199:2ff677a4-74cd-4fb2-a9ab-d8b40f6163b7", "row_index": 199, "timestamp": "2019-07-08T15:21:22Z", "event_type": "ListStacks", "event_source": "cloudformation.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "251.209.251.231", "user_agent": "Boto3/1.9.183 Python/3.6.8 Linux/3.10.0-957.21.3.el7.x86_64 Botocore/1.12.183", "aws_region": "eu-west-1"}, "resource_arns": [], "raw_record_size_bytes": 835, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "2ff677a4-74cd-4fb2-a9ab-d8b40f6163b7", "eventTime": "2019-07-08T15:21:22Z", "eventName": "ListStacks", "eventSource": "cloudformation.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "251.209.251.231", "userAgent": "Boto3/1.9.183 Python/3.6.8 Linux/3.10.0-957.21.3.el7.x86_64 Botocore/1.12.183", "awsRegion": "eu-west-1", "errorCode": "AccessDenied", "errorMessage": "User: arn:aws:iam::811596193553:user/backup is not authorized to perform: cloudformation:ListStacks", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "0e175c5f-ec3b-4da7-8053-cbce9c16091f", "record_id": "flaws_cloudtrail:0000200:0e175c5f-ec3b-4da7-8053-cbce9c16091f", "row_index": 200, "timestamp": "2019-07-08T15:21:22Z", "event_type": "ListStacks", "event_source": "cloudformation.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "251.209.251.231", "user_agent": "Boto3/1.9.183 Python/3.6.8 Linux/3.10.0-957.21.3.el7.x86_64 Botocore/1.12.183", "aws_region": "eu-west-2"}, "resource_arns": [], "raw_record_size_bytes": 836, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "0e175c5f-ec3b-4da7-8053-cbce9c16091f", "eventTime": "2019-07-08T15:21:22Z", "eventName": "ListStacks", "eventSource": "cloudformation.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "251.209.251.231", "userAgent": "Boto3/1.9.183 Python/3.6.8 Linux/3.10.0-957.21.3.el7.x86_64 Botocore/1.12.183", "awsRegion": "eu-west-2", "errorCode": "AccessDenied", "errorMessage": "User: arn:aws:iam::811596193553:user/backup is not authorized to perform: cloudformation:ListStacks", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "51acf96a-7515-4cc9-8451-2525dc172178b", "record_id": "flaws_cloudtrail:0000201:51acf96a-7515-4cc9-8451-2525dc172178b", "row_index": 201, "timestamp": "2019-07-08T15:21:23Z", "event_type": "ListStacks", "event_source": "cloudformation.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "251.209.251.231", "user_agent": "Boto3/1.9.183 Python/3.6.8 Linux/3.10.0-957.21.3.el7.x86_64 Botocore/1.12.183", "aws_region": "ap-southeast-1"}, "resource_arns": [], "raw_record_size_bytes": 841, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "51acf96a-7515-4cc9-8451-2525dc172178b", "eventTime": "2019-07-08T15:21:23Z", "eventName": "ListStacks", "eventSource": "cloudformation.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "251.209.251.231", "userAgent": "Boto3/1.9.183 Python/3.6.8 Linux/3.10.0-957.21.3.el7.x86_64 Botocore/1.12.183", "awsRegion": "ap-southeast-1", "errorCode": "AccessDenied", "errorMessage": "User: arn:aws:iam::811596193553:user/backup is not authorized to perform: cloudformation:ListStacks", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "bc7eb992-d9f4-4711-b4ba-818f460c3615", "record_id": "flaws_cloudtrail:0000202:bc7eb992-d9f4-4711-b4ba-818f460c3615", "row_index": 202, "timestamp": "2019-07-08T15:21:23Z", "event_type": "ListStacks", "event_source": "cloudformation.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "251.209.251.231", "user_agent": "Boto3/1.9.183 Python/3.6.8 Linux/3.10.0-957.21.3.el7.x86_64 Botocore/1.12.183", "aws_region": "ap-southeast-2"}, "resource_arns": [], "raw_record_size_bytes": 841, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "bc7eb992-d9f4-4711-b4ba-818f460c3615", "eventTime": "2019-07-08T15:21:23Z", "eventName": "ListStacks", "eventSource": "cloudformation.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "251.209.251.231", "userAgent": "Boto3/1.9.183 Python/3.6.8 Linux/3.10.0-957.21.3.el7.x86_64 Botocore/1.12.183", "awsRegion": "ap-southeast-2", "errorCode": "AccessDenied", "errorMessage": "User: arn:aws:iam::811596193553:user/backup is not authorized to perform: cloudformation:ListStacks", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "207252-8453-435e-96a7-f995896ad7bbb", "record_id": "flaws_cloudtrail:0000203:207252-8453-435e-96a7-f995896ad7bbb", "row_index": 203, "timestamp": "2019-07-08T15:21:23Z", "event_type": "ListStacks", "event_source": "cloudformation.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "251.209.251.231", "user_agent": "Boto3/1.9.183 Python/3.6.8 Linux/3.10.0-957.21.3.el7.x86_64 Botocore/1.12.183", "aws_region": "eu-west-3"}, "resource_arns": [], "raw_record_size_bytes": 835, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "207252-8453-435e-96a7-f995896ad7bbb", "eventTime": "2019-07-08T15:21:23Z", "eventName": "ListStacks", "eventSource": "cloudformation.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "251.209.251.231", "userAgent": "Boto3/1.9.183 Python/3.6.8 Linux/3.10.0-957.21.3.el7.x86_64 Botocore/1.12.183", "awsRegion": "eu-west-3", "errorCode": "AccessDenied", "errorMessage": "User: arn:aws:iam::811596193553:user/backup is not authorized to perform: cloudformation:ListStacks", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "db3eefdd-04b1-4e36-b6b4-b31539d128171", "record_id": "flaws_cloudtrail:0000204:db3eefdd-04b1-4e36-b6b4-b31539d128171", "row_index": 204, "timestamp": "2019-07-08T15:21:23Z", "event_type": "ListStacks", "event_source": "cloudformation.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "251.209.251.231", "user_agent": "Boto3/1.9.183 Python/3.6.8 Linux/3.10.0-957.21.3.el7.x86_64 Botocore/1.12.183", "aws_region": "sa-east-1"}, "resource_arns": [], "raw_record_size_bytes": 837, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "db3eefdd-04b1-4e36-b6b4-b31539d128171", "eventTime": "2019-07-08T15:21:23Z", "eventName": "ListStacks", "eventSource": "cloudformation.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "251.209.251.231", "userAgent": "Boto3/1.9.183 Python/3.6.8 Linux/3.10.0-957.21.3.el7.x86_64 Botocore/1.12.183", "awsRegion": "sa-east-1", "errorCode": "AccessDenied", "errorMessage": "User: arn:aws:iam::811596193553:user/backup is not authorized to perform: cloudformation:ListStacks", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "5f962000d-2890-4f66-92ba-0f95a3605427", "record_id": "flaws_cloudtrail:0000205:5f962000d-2890-4f66-92ba-0f95a3605427", "row_index": 205, "timestamp": "2019-07-08T15:21:23Z", "event_type": "ListStacks", "event_source": "cloudformation.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "251.209.251.231", "user_agent": "Boto3/1.9.183 Python/3.6.8 Linux/3.10.0-957.21.3.el7.x86_64 Botocore/1.12.183", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 837, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "5f962000d-2890-4f66-92ba-0f95a3605427", "eventTime": "2019-07-08T15:21:23Z", "eventName": "ListStacks", "eventSource": "cloudformation.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "251.209.251.231", "userAgent": "Boto3/1.9.183 Python/3.6.8 Linux/3.10.0-957.21.3.el7.x86_64 Botocore/1.12.183", "awsRegion": "us-east-1", "errorCode": "AccessDenied", "errorMessage": "User: arn:aws:iam::811596193553:user/backup is not authorized to perform: cloudformation:ListStacks", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "59cbc8b1-906f-4117-b9dc-58a6bfc58700", "record_id": "flaws_cloudtrail:0000206:59cbc8b1-906f-4117-b9dc-58a6bfc58700", "row_index": 206, "timestamp": "2019-07-08T15:21:23Z", "event_type": "GetBucketLocation", "event_source": "s3.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "251.209.251.231", "user_agent": "[Boto3/1.9.183 Python/3.6.8 Linux/3.10.0-957.21.3.el7.x86_64 Botocore/1.12.183]", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 908, "raw_record_depth": 3, "raw_record_top_level_keys": ["additionalEventData", "awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "59cbc8b1-906f-4117-b9dc-58a6bfc58700", "eventTime": "2019-07-08T15:21:23Z", "eventName": "GetBucketLocation", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "251.209.251.231", "userAgent": "[Boto3/1.9.183 Python/3.6.8 Linux/3.10.0-957.21.3.el7.x86_64 Botocore/1.12.183]", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"host": ["s3.amazonaws.com"], "bucketName": "level2-295510a051f3fcd006ae345973478972.flaws.cloud", "location": [""]}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "560bef6b-6ea7-4541-b342-189cf6ad8c62", "record_id": "flaws_cloudtrail:0000207:560bef6b-6ea7-4541-b342-189cf6ad8c62", "row_index": 207, "timestamp": "2019-07-08T15:21:23Z", "event_type": "GetBucketLocation", "event_source": "s3.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "251.209.251.231", "user_agent": "[Boto3/1.9.183 Python/3.6.8 Linux/3.10.0-957.21.3.el7.x86_64 Botocore/1.12.183]", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 909, "raw_record_depth": 3, "raw_record_top_level_keys": ["additionalEventData", "awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "560bef6b-6ea7-4541-b342-189cf6ad8c62", "eventTime": "2019-07-08T15:21:23Z", "eventName": "GetBucketLocation", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "251.209.251.231", "userAgent": "[Boto3/1.9.183 Python/3.6.8 Linux/3.10.0-957.21.3.el7.x86_64 Botocore/1.12.183]", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"host": ["s3.amazonaws.com"], "bucketName": "b5677c799b465420d8e7b0a6689a0bb0c4afbc9e.flaws.cloud", "location": [""]}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "d1fa5878-aecf-4d36-a5d4-d2c520f56e5c", "record_id": "flaws_cloudtrail:0000208:d1fa5878-aecf-4d36-a5d4-d2c520f56e5c", "row_index": 208, "timestamp": "2019-07-08T15:21:23Z", "event_type": "GetBucketLocation", "event_source": "s3.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "251.209.251.231", "user_agent": "[Boto3/1.9.183 Python/3.6.8 Linux/3.10.0-957.21.3.el7.x86_64 Botocore/1.12.183]", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 883, "raw_record_depth": 3, "raw_record_top_level_keys": ["additionalEventData", "awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "d1fa5878-aecf-4d36-a5d4-d2c520f56e5c", "eventTime": "2019-07-08T15:21:23Z", "eventName": "GetBucketLocation", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "251.209.251.231", "userAgent": "[Boto3/1.9.183 Python/3.6.8 Linux/3.10.0-957.21.3.el7.x86_64 Botocore/1.12.183]", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"host": ["s3.amazonaws.com"], "bucketName": "config-bucket-e11723be76de", "location": [""]}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "c99cc638-f275-4409-8750-6e39c5ad15ac", "record_id": "flaws_cloudtrail:0000209:c99cc638-f275-4409-8750-6e39c5ad15ac", "row_index": 209, "timestamp": "2019-07-08T15:21:23Z", "event_type": "GetBucketLocation", "event_source": "s3.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "251.209.251.231", "user_agent": "[Boto3/1.9.183 Python/3.6.8 Linux/3.10.0-957.21.3.el7.x86_64 Botocore/1.12.183]", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 867, "raw_record_depth": 3, "raw_record_top_level_keys": ["additionalEventData", "awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "c99cc638-f275-4409-8750-6e39c5ad15ac", "eventTime": "2019-07-08T15:21:23Z", "eventName": "GetBucketLocation", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "251.209.251.231", "userAgent": "[Boto3/1.9.183 Python/3.6.8 Linux/3.10.0-957.21.3.el7.x86_64 Botocore/1.12.183]", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"host": ["s3.amazonaws.com"], "bucketName": "flaws-logs", "location": [""]}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "5d68636-375e-4121-9565-e782d139bc95", "record_id": "flaws_cloudtrail:0000210:5d68636-375e-4121-9565-e782d139bc95", "row_index": 210, "timestamp": "2019-07-08T15:21:23Z", "event_type": "GetBucketLocation", "event_source": "s3.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "251.209.251.231", "user_agent": "[Boto3/1.9.183 Python/3.6.8 Linux/3.10.0-957.21.3.el7.x86_64 Botocore/1.12.183]", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 907, "raw_record_depth": 3, "raw_record_top_level_keys": ["additionalEventData", "awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "5d68636-375e-4121-9565-e782d139bc95", "eventTime": "2019-07-08T15:21:23Z", "eventName": "GetBucketLocation", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "251.209.251.231", "userAgent": "[Boto3/1.9.183 Python/3.6.8 Linux/3.10.0-957.21.3.el7.x86_64 Botocore/1.12.183]", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"host": ["s3.amazonaws.com"], "bucketName": "level3-2644b9e749c3d14e400f847199800c14.flaws.cloud", "location": [""]}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "241c800f-a776-4359-9ae4-872f7c1367b1", "record_id": "flaws_cloudtrail:0000211:241c800f-a776-4359-9ae4-872f7c1367b1", "row_index": 211, "timestamp": "2019-07-08T15:21:23Z", "event_type": "GetBucketLocation", "event_source": "s3.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "251.209.251.231", "user_agent": "[Boto3/1.9.183 Python/3.6.8 Linux/3.10.0-957.21.3.el7.x86_64 Botocore/1.12.183]", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 908, "raw_record_depth": 3, "raw_record_top_level_keys": ["additionalEventData", "awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "241c800f-a776-4359-9ae4-872f7c1367b1", "eventTime": "2019-07-08T15:21:23Z", "eventName": "GetBucketLocation", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "251.209.251.231", "userAgent": "[Boto3/1.9.183 Python/3.6.8 Linux/3.10.0-957.21.3.el7.x86_64 Botocore/1.12.183]", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"host": ["s3.amazonaws.com"], "bucketName": "level5-8dbc21dbbd6129208d054061ef063f04.flaws.cloud", "location": [""]}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "9bf7617b-cc37-4f90-b408-6480adc752f7", "record_id": "flaws_cloudtrail:0000212:9bf7617b-cc37-4f90-b408-6480adc752f7", "row_index": 212, "timestamp": "2019-07-08T15:21:23Z", "event_type": "GetBucketLocation", "event_source": "s3.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "251.209.251.231", "user_agent": "[Boto3/1.9.183 Python/3.6.8 Linux/3.10.0-957.21.3.el7.x86_64 Botocore/1.12.183]", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 868, "raw_record_depth": 3, "raw_record_top_level_keys": ["additionalEventData", "awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "9bf7617b-cc37-4f90-b408-6480adc752f7", "eventTime": "2019-07-08T15:21:23Z", "eventName": "GetBucketLocation", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "251.209.251.231", "userAgent": "[Boto3/1.9.183 Python/3.6.8 Linux/3.10.0-957.21.3.el7.x86_64 Botocore/1.12.183]", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"host": ["s3.amazonaws.com"], "bucketName": "flaws.cloud", "location": [""]}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "80d267515-d095-4d82-9ec4-4a8cdbe4efd8", "record_id": "flaws_cloudtrail:0000213:80d267515-d095-4d82-9ec4-4a8cdbe4efd8", "row_index": 213, "timestamp": "2019-07-08T15:21:23Z", "event_type": "GetBucketLocation", "event_source": "s3.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "251.209.251.231", "user_agent": "[Boto3/1.9.183 Python/3.6.8 Linux/3.10.0-957.21.3.el7.x86_64 Botocore/1.12.183]", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 909, "raw_record_depth": 3, "raw_record_top_level_keys": ["additionalEventData", "awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "80d267515-d095-4d82-9ec4-4a8cdbe4efd8", "eventTime": "2019-07-08T15:21:23Z", "eventName": "GetBucketLocation", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "251.209.251.231", "userAgent": "[Boto3/1.9.183 Python/3.6.8 Linux/3.10.0-957.21.3.el7.x86_64 Botocore/1.12.183]", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"host": ["s3.amazonaws.com"], "bucketName": "level6-588e81908c84e62a6dd8202d535469dd.flaws.cloud", "location": [""]}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "6ab38e7b-0d7e-433b-8972-386383d59a5", "record_id": "flaws_cloudtrail:0000214:6ab38e7b-0d7e-433b-8972-386383d59a5", "row_index": 214, "timestamp": "2019-07-08T15:21:23Z", "event_type": "GetBucketLocation", "event_source": "s3.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "251.209.251.231", "user_agent": "[Boto3/1.9.183 Python/3.6.8 Linux/3.10.0-957.21.3.el7.x86_64 Botocore/1.12.183]", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 907, "raw_record_depth": 3, "raw_record_top_level_keys": ["additionalEventData", "awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "6ab38e7b-0d7e-433b-8972-386383d59a5", "eventTime": "2019-07-08T15:21:23Z", "eventName": "GetBucketLocation", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "251.209.251.231", "userAgent": "[Boto3/1.9.183 Python/3.6.8 Linux/3.10.0-957.21.3.el7.x86_64 Botocore/1.12.183]", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"host": ["s3.amazonaws.com"], "bucketName": "level4-974134b52e7c35aebcc4b45f19113936.flaws.cloud", "location": [""]}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "397f41e0-52b7-4fe0-a794-2311aaa266b4", "record_id": "flaws_cloudtrail:0000215:397f41e0-52b7-4fe0-a794-2311aaa266b4", "row_index": 215, "timestamp": "2019-07-08T15:21:23Z", "event_type": "ListStacks", "event_source": "cloudformation.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "251.209.251.231", "user_agent": "Boto3/1.9.183 Python/3.6.8 Linux/3.10.0-957.21.3.el7.x86_64 Botocore/1.12.183", "aws_region": "us-east-2"}, "resource_arns": [], "raw_record_size_bytes": 836, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "397f41e0-52b7-4fe0-a794-2311aaa266b4", "eventTime": "2019-07-08T15:21:23Z", "eventName": "ListStacks", "eventSource": "cloudformation.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "251.209.251.231", "userAgent": "Boto3/1.9.183 Python/3.6.8 Linux/3.10.0-957.21.3.el7.x86_64 Botocore/1.12.183", "awsRegion": "us-east-2", "errorCode": "AccessDenied", "errorMessage": "User: arn:aws:iam::811596193553:user/backup is not authorized to perform: cloudformation:ListStacks", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "5d5080e6-99f3-4381-8792-9d917810e8d5c", "record_id": "flaws_cloudtrail:0000216:5d5080e6-99f3-4381-8792-9d917810e8d5c", "row_index": 216, "timestamp": "2019-07-08T15:21:23Z", "event_type": "ListStacks", "event_source": "cloudformation.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "251.209.251.231", "user_agent": "Boto3/1.9.183 Python/3.6.8 Linux/3.10.0-957.21.3.el7.x86_64 Botocore/1.12.183", "aws_region": "us-west-1"}, "resource_arns": [], "raw_record_size_bytes": 837, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "5d5080e6-99f3-4381-8792-9d917810e8d5c", "eventTime": "2019-07-08T15:21:23Z", "eventName": "ListStacks", "eventSource": "cloudformation.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "251.209.251.231", "userAgent": "Boto3/1.9.183 Python/3.6.8 Linux/3.10.0-957.21.3.el7.x86_64 Botocore/1.12.183", "awsRegion": "us-west-1", "errorCode": "AccessDenied", "errorMessage": "User: arn:aws:iam::811596193553:user/backup is not authorized to perform: cloudformation:ListStacks", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "9508bf73-ac32-4708-b747-740b5c870985", "record_id": "flaws_cloudtrail:0000217:9508bf73-ac32-4708-b747-740b5c870985", "row_index": 217, "timestamp": "2019-07-08T15:21:23Z", "event_type": "ListStacks", "event_source": "cloudformation.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "251.209.251.231", "user_agent": "Boto3/1.9.183 Python/3.6.8 Linux/3.10.0-957.21.3.el7.x86_64 Botocore/1.12.183", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 836, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "9508bf73-ac32-4708-b747-740b5c870985", "eventTime": "2019-07-08T15:21:23Z", "eventName": "ListStacks", "eventSource": "cloudformation.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "251.209.251.231", "userAgent": "Boto3/1.9.183 Python/3.6.8 Linux/3.10.0-957.21.3.el7.x86_64 Botocore/1.12.183", "awsRegion": "us-west-2", "errorCode": "AccessDenied", "errorMessage": "User: arn:aws:iam::811596193553:user/backup is not authorized to perform: cloudformation:ListStacks", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "51acf96a-7515-4cc9-8451-2525dc172178b", "record_id": "flaws_cloudtrail:0000218:51acf96a-7515-4cc9-8451-2525dc172178b", "row_index": 218, "timestamp": "2019-07-08T15:21:23Z", "event_type": "ListStacks", "event_source": "cloudformation.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "251.209.251.231", "user_agent": "Boto3/1.9.183 Python/3.6.8 Linux/3.10.0-957.21.3.el7.x86_64 Botocore/1.12.183", "aws_region": "ap-southeast-1"}, "resource_arns": [], "raw_record_size_bytes": 841, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "51acf96a-7515-4cc9-8451-2525dc172178b", "eventTime": "2019-07-08T15:21:23Z", "eventName": "ListStacks", "eventSource": "cloudformation.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "251.209.251.231", "userAgent": "Boto3/1.9.183 Python/3.6.8 Linux/3.10.0-957.21.3.el7.x86_64 Botocore/1.12.183", "awsRegion": "ap-southeast-1", "errorCode": "AccessDenied", "errorMessage": "User: arn:aws:iam::811596193553:user/backup is not authorized to perform: cloudformation:ListStacks", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "bc7eb992-d9f4-4711-b4ba-818f460c3615", "record_id": "flaws_cloudtrail:0000219:bc7eb992-d9f4-4711-b4ba-818f460c3615", "row_index": 219, "timestamp": "2019-07-08T15:21:23Z", "event_type": "ListStacks", "event_source": "cloudformation.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "251.209.251.231", "user_agent": "Boto3/1.9.183 Python/3.6.8 Linux/3.10.0-957.21.3.el7.x86_64 Botocore/1.12.183", "aws_region": "ap-southeast-2"}, "resource_arns": [], "raw_record_size_bytes": 841, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "bc7eb992-d9f4-4711-b4ba-818f460c3615", "eventTime": "2019-07-08T15:21:23Z", "eventName": "ListStacks", "eventSource": "cloudformation.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "251.209.251.231", "userAgent": "Boto3/1.9.183 Python/3.6.8 Linux/3.10.0-957.21.3.el7.x86_64 Botocore/1.12.183", "awsRegion": "ap-southeast-2", "errorCode": "AccessDenied", "errorMessage": "User: arn:aws:iam::811596193553:user/backup is not authorized to perform: cloudformation:ListStacks", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "207252-8453-435e-96a7-f995896ad7bbb", "record_id": "flaws_cloudtrail:0000220:207252-8453-435e-96a7-f995896ad7bbb", "row_index": 220, "timestamp": "2019-07-08T15:21:23Z", "event_type": "ListStacks", "event_source": "cloudformation.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "251.209.251.231", "user_agent": "Boto3/1.9.183 Python/3.6.8 Linux/3.10.0-957.21.3.el7.x86_64 Botocore/1.12.183", "aws_region": "eu-west-3"}, "resource_arns": [], "raw_record_size_bytes": 835, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "207252-8453-435e-96a7-f995896ad7bbb", "eventTime": "2019-07-08T15:21:23Z", "eventName": "ListStacks", "eventSource": "cloudformation.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "251.209.251.231", "userAgent": "Boto3/1.9.183 Python/3.6.8 Linux/3.10.0-957.21.3.el7.x86_64 Botocore/1.12.183", "awsRegion": "eu-west-3", "errorCode": "AccessDenied", "errorMessage": "User: arn:aws:iam::811596193553:user/backup is not authorized to perform: cloudformation:ListStacks", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "db3eefdd-04b1-4e36-b6b4-b31539d128171", "record_id": "flaws_cloudtrail:0000221:db3eefdd-04b1-4e36-b6b4-b31539d128171", "row_index": 221, "timestamp": "2019-07-08T15:21:23Z", "event_type": "ListStacks", "event_source": "cloudformation.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "251.209.251.231", "user_agent": "Boto3/1.9.183 Python/3.6.8 Linux/3.10.0-957.21.3.el7.x86_64 Botocore/1.12.183", "aws_region": "sa-east-1"}, "resource_arns": [], "raw_record_size_bytes": 837, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "db3eefdd-04b1-4e36-b6b4-b31539d128171", "eventTime": "2019-07-08T15:21:23Z", "eventName": "ListStacks", "eventSource": "cloudformation.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "251.209.251.231", "userAgent": "Boto3/1.9.183 Python/3.6.8 Linux/3.10.0-957.21.3.el7.x86_64 Botocore/1.12.183", "awsRegion": "sa-east-1", "errorCode": "AccessDenied", "errorMessage": "User: arn:aws:iam::811596193553:user/backup is not authorized to perform: cloudformation:ListStacks", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "59cbc8b1-906f-4117-b9dc-58a6bfc58700", "record_id": "flaws_cloudtrail:0000222:59cbc8b1-906f-4117-b9dc-58a6bfc58700", "row_index": 222, "timestamp": "2019-07-08T15:21:23Z", "event_type": "GetBucketLocation", "event_source": "s3.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "251.209.251.231", "user_agent": "[Boto3/1.9.183 Python/3.6.8 Linux/3.10.0-957.21.3.el7.x86_64 Botocore/1.12.183]", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 908, "raw_record_depth": 3, "raw_record_top_level_keys": ["additionalEventData", "awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "59cbc8b1-906f-4117-b9dc-58a6bfc58700", "eventTime": "2019-07-08T15:21:23Z", "eventName": "GetBucketLocation", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "251.209.251.231", "userAgent": "[Boto3/1.9.183 Python/3.6.8 Linux/3.10.0-957.21.3.el7.x86_64 Botocore/1.12.183]", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"host": ["s3.amazonaws.com"], "bucketName": "level2-295510a051f3fcd006ae345973478972.flaws.cloud", "location": [""]}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "560bef6b-6ea7-4541-b342-189cf6ad8c62", "record_id": "flaws_cloudtrail:0000223:560bef6b-6ea7-4541-b342-189cf6ad8c62", "row_index": 223, "timestamp": "2019-07-08T15:21:23Z", "event_type": "GetBucketLocation", "event_source": "s3.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "251.209.251.231", "user_agent": "[Boto3/1.9.183 Python/3.6.8 Linux/3.10.0-957.21.3.el7.x86_64 Botocore/1.12.183]", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 909, "raw_record_depth": 3, "raw_record_top_level_keys": ["additionalEventData", "awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "560bef6b-6ea7-4541-b342-189cf6ad8c62", "eventTime": "2019-07-08T15:21:23Z", "eventName": "GetBucketLocation", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "251.209.251.231", "userAgent": "[Boto3/1.9.183 Python/3.6.8 Linux/3.10.0-957.21.3.el7.x86_64 Botocore/1.12.183]", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"host": ["s3.amazonaws.com"], "bucketName": "b5677c799b465420d8e7b0a6689a0bb0c4afbc9e.flaws.cloud", "location": [""]}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "d1fa5878-aecf-4d36-a5d4-d2c520f56e5c", "record_id": "flaws_cloudtrail:0000224:d1fa5878-aecf-4d36-a5d4-d2c520f56e5c", "row_index": 224, "timestamp": "2019-07-08T15:21:23Z", "event_type": "GetBucketLocation", "event_source": "s3.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "251.209.251.231", "user_agent": "[Boto3/1.9.183 Python/3.6.8 Linux/3.10.0-957.21.3.el7.x86_64 Botocore/1.12.183]", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 883, "raw_record_depth": 3, "raw_record_top_level_keys": ["additionalEventData", "awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "d1fa5878-aecf-4d36-a5d4-d2c520f56e5c", "eventTime": "2019-07-08T15:21:23Z", "eventName": "GetBucketLocation", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "251.209.251.231", "userAgent": "[Boto3/1.9.183 Python/3.6.8 Linux/3.10.0-957.21.3.el7.x86_64 Botocore/1.12.183]", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"host": ["s3.amazonaws.com"], "bucketName": "config-bucket-e11723be76de", "location": [""]}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "c99cc638-f275-4409-8750-6e39c5ad15ac", "record_id": "flaws_cloudtrail:0000225:c99cc638-f275-4409-8750-6e39c5ad15ac", "row_index": 225, "timestamp": "2019-07-08T15:21:23Z", "event_type": "GetBucketLocation", "event_source": "s3.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "251.209.251.231", "user_agent": "[Boto3/1.9.183 Python/3.6.8 Linux/3.10.0-957.21.3.el7.x86_64 Botocore/1.12.183]", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 867, "raw_record_depth": 3, "raw_record_top_level_keys": ["additionalEventData", "awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "c99cc638-f275-4409-8750-6e39c5ad15ac", "eventTime": "2019-07-08T15:21:23Z", "eventName": "GetBucketLocation", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "251.209.251.231", "userAgent": "[Boto3/1.9.183 Python/3.6.8 Linux/3.10.0-957.21.3.el7.x86_64 Botocore/1.12.183]", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"host": ["s3.amazonaws.com"], "bucketName": "flaws-logs", "location": [""]}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "5d68636-375e-4121-9565-e782d139bc95", "record_id": "flaws_cloudtrail:0000226:5d68636-375e-4121-9565-e782d139bc95", "row_index": 226, "timestamp": "2019-07-08T15:21:23Z", "event_type": "GetBucketLocation", "event_source": "s3.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "251.209.251.231", "user_agent": "[Boto3/1.9.183 Python/3.6.8 Linux/3.10.0-957.21.3.el7.x86_64 Botocore/1.12.183]", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 907, "raw_record_depth": 3, "raw_record_top_level_keys": ["additionalEventData", "awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "5d68636-375e-4121-9565-e782d139bc95", "eventTime": "2019-07-08T15:21:23Z", "eventName": "GetBucketLocation", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "251.209.251.231", "userAgent": "[Boto3/1.9.183 Python/3.6.8 Linux/3.10.0-957.21.3.el7.x86_64 Botocore/1.12.183]", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"host": ["s3.amazonaws.com"], "bucketName": "level3-2644b9e749c3d14e400f847199800c14.flaws.cloud", "location": [""]}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "241c800f-a776-4359-9ae4-872f7c1367b1", "record_id": "flaws_cloudtrail:0000227:241c800f-a776-4359-9ae4-872f7c1367b1", "row_index": 227, "timestamp": "2019-07-08T15:21:23Z", "event_type": "GetBucketLocation", "event_source": "s3.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "251.209.251.231", "user_agent": "[Boto3/1.9.183 Python/3.6.8 Linux/3.10.0-957.21.3.el7.x86_64 Botocore/1.12.183]", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 908, "raw_record_depth": 3, "raw_record_top_level_keys": ["additionalEventData", "awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "241c800f-a776-4359-9ae4-872f7c1367b1", "eventTime": "2019-07-08T15:21:23Z", "eventName": "GetBucketLocation", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "251.209.251.231", "userAgent": "[Boto3/1.9.183 Python/3.6.8 Linux/3.10.0-957.21.3.el7.x86_64 Botocore/1.12.183]", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"host": ["s3.amazonaws.com"], "bucketName": "level5-8dbc21dbbd6129208d054061ef063f04.flaws.cloud", "location": [""]}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "9bf7617b-cc37-4f90-b408-6480adc752f7", "record_id": "flaws_cloudtrail:0000228:9bf7617b-cc37-4f90-b408-6480adc752f7", "row_index": 228, "timestamp": "2019-07-08T15:21:23Z", "event_type": "GetBucketLocation", "event_source": "s3.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "251.209.251.231", "user_agent": "[Boto3/1.9.183 Python/3.6.8 Linux/3.10.0-957.21.3.el7.x86_64 Botocore/1.12.183]", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 868, "raw_record_depth": 3, "raw_record_top_level_keys": ["additionalEventData", "awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "9bf7617b-cc37-4f90-b408-6480adc752f7", "eventTime": "2019-07-08T15:21:23Z", "eventName": "GetBucketLocation", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "251.209.251.231", "userAgent": "[Boto3/1.9.183 Python/3.6.8 Linux/3.10.0-957.21.3.el7.x86_64 Botocore/1.12.183]", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"host": ["s3.amazonaws.com"], "bucketName": "flaws.cloud", "location": [""]}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "80d267515-d095-4d82-9ec4-4a8cdbe4efd8", "record_id": "flaws_cloudtrail:0000229:80d267515-d095-4d82-9ec4-4a8cdbe4efd8", "row_index": 229, "timestamp": "2019-07-08T15:21:23Z", "event_type": "GetBucketLocation", "event_source": "s3.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "251.209.251.231", "user_agent": "[Boto3/1.9.183 Python/3.6.8 Linux/3.10.0-957.21.3.el7.x86_64 Botocore/1.12.183]", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 909, "raw_record_depth": 3, "raw_record_top_level_keys": ["additionalEventData", "awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "80d267515-d095-4d82-9ec4-4a8cdbe4efd8", "eventTime": "2019-07-08T15:21:23Z", "eventName": "GetBucketLocation", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "251.209.251.231", "userAgent": "[Boto3/1.9.183 Python/3.6.8 Linux/3.10.0-957.21.3.el7.x86_64 Botocore/1.12.183]", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"host": ["s3.amazonaws.com"], "bucketName": "level6-588e81908c84e62a6dd8202d535469dd.flaws.cloud", "location": [""]}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "6ab38e7b-0d7e-433b-8972-386383d59a5", "record_id": "flaws_cloudtrail:0000230:6ab38e7b-0d7e-433b-8972-386383d59a5", "row_index": 230, "timestamp": "2019-07-08T15:21:23Z", "event_type": "GetBucketLocation", "event_source": "s3.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "251.209.251.231", "user_agent": "[Boto3/1.9.183 Python/3.6.8 Linux/3.10.0-957.21.3.el7.x86_64 Botocore/1.12.183]", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 907, "raw_record_depth": 3, "raw_record_top_level_keys": ["additionalEventData", "awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "6ab38e7b-0d7e-433b-8972-386383d59a5", "eventTime": "2019-07-08T15:21:23Z", "eventName": "GetBucketLocation", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "251.209.251.231", "userAgent": "[Boto3/1.9.183 Python/3.6.8 Linux/3.10.0-957.21.3.el7.x86_64 Botocore/1.12.183]", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"host": ["s3.amazonaws.com"], "bucketName": "level4-974134b52e7c35aebcc4b45f19113936.flaws.cloud", "location": [""]}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "5f962000d-2890-4f66-92ba-0f95a3605427", "record_id": "flaws_cloudtrail:0000231:5f962000d-2890-4f66-92ba-0f95a3605427", "row_index": 231, "timestamp": "2019-07-08T15:21:23Z", "event_type": "ListStacks", "event_source": "cloudformation.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "251.209.251.231", "user_agent": "Boto3/1.9.183 Python/3.6.8 Linux/3.10.0-957.21.3.el7.x86_64 Botocore/1.12.183", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 837, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "5f962000d-2890-4f66-92ba-0f95a3605427", "eventTime": "2019-07-08T15:21:23Z", "eventName": "ListStacks", "eventSource": "cloudformation.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "251.209.251.231", "userAgent": "Boto3/1.9.183 Python/3.6.8 Linux/3.10.0-957.21.3.el7.x86_64 Botocore/1.12.183", "awsRegion": "us-east-1", "errorCode": "AccessDenied", "errorMessage": "User: arn:aws:iam::811596193553:user/backup is not authorized to perform: cloudformation:ListStacks", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "397f41e0-52b7-4fe0-a794-2311aaa266b4", "record_id": "flaws_cloudtrail:0000232:397f41e0-52b7-4fe0-a794-2311aaa266b4", "row_index": 232, "timestamp": "2019-07-08T15:21:23Z", "event_type": "ListStacks", "event_source": "cloudformation.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "251.209.251.231", "user_agent": "Boto3/1.9.183 Python/3.6.8 Linux/3.10.0-957.21.3.el7.x86_64 Botocore/1.12.183", "aws_region": "us-east-2"}, "resource_arns": [], "raw_record_size_bytes": 836, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "397f41e0-52b7-4fe0-a794-2311aaa266b4", "eventTime": "2019-07-08T15:21:23Z", "eventName": "ListStacks", "eventSource": "cloudformation.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "251.209.251.231", "userAgent": "Boto3/1.9.183 Python/3.6.8 Linux/3.10.0-957.21.3.el7.x86_64 Botocore/1.12.183", "awsRegion": "us-east-2", "errorCode": "AccessDenied", "errorMessage": "User: arn:aws:iam::811596193553:user/backup is not authorized to perform: cloudformation:ListStacks", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "5d5080e6-99f3-4381-8792-9d917810e8d5c", "record_id": "flaws_cloudtrail:0000233:5d5080e6-99f3-4381-8792-9d917810e8d5c", "row_index": 233, "timestamp": "2019-07-08T15:21:23Z", "event_type": "ListStacks", "event_source": "cloudformation.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "251.209.251.231", "user_agent": "Boto3/1.9.183 Python/3.6.8 Linux/3.10.0-957.21.3.el7.x86_64 Botocore/1.12.183", "aws_region": "us-west-1"}, "resource_arns": [], "raw_record_size_bytes": 837, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "5d5080e6-99f3-4381-8792-9d917810e8d5c", "eventTime": "2019-07-08T15:21:23Z", "eventName": "ListStacks", "eventSource": "cloudformation.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "251.209.251.231", "userAgent": "Boto3/1.9.183 Python/3.6.8 Linux/3.10.0-957.21.3.el7.x86_64 Botocore/1.12.183", "awsRegion": "us-west-1", "errorCode": "AccessDenied", "errorMessage": "User: arn:aws:iam::811596193553:user/backup is not authorized to perform: cloudformation:ListStacks", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "9508bf73-ac32-4708-b747-740b5c870985", "record_id": "flaws_cloudtrail:0000234:9508bf73-ac32-4708-b747-740b5c870985", "row_index": 234, "timestamp": "2019-07-08T15:21:23Z", "event_type": "ListStacks", "event_source": "cloudformation.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "251.209.251.231", "user_agent": "Boto3/1.9.183 Python/3.6.8 Linux/3.10.0-957.21.3.el7.x86_64 Botocore/1.12.183", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 836, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "9508bf73-ac32-4708-b747-740b5c870985", "eventTime": "2019-07-08T15:21:23Z", "eventName": "ListStacks", "eventSource": "cloudformation.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "251.209.251.231", "userAgent": "Boto3/1.9.183 Python/3.6.8 Linux/3.10.0-957.21.3.el7.x86_64 Botocore/1.12.183", "awsRegion": "us-west-2", "errorCode": "AccessDenied", "errorMessage": "User: arn:aws:iam::811596193553:user/backup is not authorized to perform: cloudformation:ListStacks", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "c037898d-4252-4232-88c7-6a537778", "record_id": "flaws_cloudtrail:0000235:c037898d-4252-4232-88c7-6a537778", "row_index": 235, "timestamp": "2019-07-08T15:21:24Z", "event_type": "DescribeTrails", "event_source": "cloudtrail.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "251.209.251.231", "user_agent": "Boto3/1.9.183 Python/3.6.8 Linux/3.10.0-957.21.3.el7.x86_64 Botocore/1.12.183", "aws_region": "ap-northeast-1"}, "resource_arns": [], "raw_record_size_bytes": 853, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "readOnly", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "c037898d-4252-4232-88c7-6a537778", "eventTime": "2019-07-08T15:21:24Z", "eventName": "DescribeTrails", "eventSource": "cloudtrail.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "251.209.251.231", "userAgent": "Boto3/1.9.183 Python/3.6.8 Linux/3.10.0-957.21.3.el7.x86_64 Botocore/1.12.183", "awsRegion": "ap-northeast-1", "errorCode": "AccessDenied", "errorMessage": "User: arn:aws:iam::811596193553:user/backup is not authorized to perform: cloudtrail:DescribeTrails", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "26e08d4a-d888-46e3-b92c-e4aced716025", "record_id": "flaws_cloudtrail:0000236:26e08d4a-d888-46e3-b92c-e4aced716025", "row_index": 236, "timestamp": "2019-07-08T15:21:24Z", "event_type": "DescribeTrails", "event_source": "cloudtrail.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "251.209.251.231", "user_agent": "Boto3/1.9.183 Python/3.6.8 Linux/3.10.0-957.21.3.el7.x86_64 Botocore/1.12.183", "aws_region": "ap-northeast-2"}, "resource_arns": [], "raw_record_size_bytes": 857, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "readOnly", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "26e08d4a-d888-46e3-b92c-e4aced716025", "eventTime": "2019-07-08T15:21:24Z", "eventName": "DescribeTrails", "eventSource": "cloudtrail.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "251.209.251.231", "userAgent": "Boto3/1.9.183 Python/3.6.8 Linux/3.10.0-957.21.3.el7.x86_64 Botocore/1.12.183", "awsRegion": "ap-northeast-2", "errorCode": "AccessDenied", "errorMessage": "User: arn:aws:iam::811596193553:user/backup is not authorized to perform: cloudtrail:DescribeTrails", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "991aeef5-bb25-494b-9009-449b42c16a52", "record_id": "flaws_cloudtrail:0000237:991aeef5-bb25-494b-9009-449b42c16a52", "row_index": 237, "timestamp": "2019-07-08T15:21:24Z", "event_type": "DescribeTrails", "event_source": "cloudtrail.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "251.209.251.231", "user_agent": "Boto3/1.9.183 Python/3.6.8 Linux/3.10.0-957.21.3.el7.x86_64 Botocore/1.12.183", "aws_region": "ap-south-1"}, "resource_arns": [], "raw_record_size_bytes": 852, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "readOnly", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "991aeef5-bb25-494b-9009-449b42c16a52", "eventTime": "2019-07-08T15:21:24Z", "eventName": "DescribeTrails", "eventSource": "cloudtrail.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "251.209.251.231", "userAgent": "Boto3/1.9.183 Python/3.6.8 Linux/3.10.0-957.21.3.el7.x86_64 Botocore/1.12.183", "awsRegion": "ap-south-1", "errorCode": "AccessDenied", "errorMessage": "User: arn:aws:iam::811596193553:user/backup is not authorized to perform: cloudtrail:DescribeTrails", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "4c32076-c308-47db-abd8-c32fc5a69da0", "record_id": "flaws_cloudtrail:0000238:4c32076-c308-47db-abd8-c32fc5a69da0", "row_index": 238, "timestamp": "2019-07-08T15:21:24Z", "event_type": "DescribeTrails", "event_source": "cloudtrail.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "251.209.251.231", "user_agent": "Boto3/1.9.183 Python/3.6.8 Linux/3.10.0-957.21.3.el7.x86_64 Botocore/1.12.183", "aws_region": "ca-central-1"}, "resource_arns": [], "raw_record_size_bytes": 854, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "readOnly", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "4c32076-c308-47db-abd8-c32fc5a69da0", "eventTime": "2019-07-08T15:21:24Z", "eventName": "DescribeTrails", "eventSource": "cloudtrail.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "251.209.251.231", "userAgent": "Boto3/1.9.183 Python/3.6.8 Linux/3.10.0-957.21.3.el7.x86_64 Botocore/1.12.183", "awsRegion": "ca-central-1", "errorCode": "AccessDenied", "errorMessage": "User: arn:aws:iam::811596193553:user/backup is not authorized to perform: cloudtrail:DescribeTrails", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "17d452b1-cc8c-42d5-88f6-ad7e68bb8779", "record_id": "flaws_cloudtrail:0000239:17d452b1-cc8c-42d5-88f6-ad7e68bb8779", "row_index": 239, "timestamp": "2019-07-08T15:21:24Z", "event_type": "DescribeTrails", "event_source": "cloudtrail.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "251.209.251.231", "user_agent": "Boto3/1.9.183 Python/3.6.8 Linux/3.10.0-957.21.3.el7.x86_64 Botocore/1.12.183", "aws_region": "eu-central-1"}, "resource_arns": [], "raw_record_size_bytes": 855, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "readOnly", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "17d452b1-cc8c-42d5-88f6-ad7e68bb8779", "eventTime": "2019-07-08T15:21:24Z", "eventName": "DescribeTrails", "eventSource": "cloudtrail.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "251.209.251.231", "userAgent": "Boto3/1.9.183 Python/3.6.8 Linux/3.10.0-957.21.3.el7.x86_64 Botocore/1.12.183", "awsRegion": "eu-central-1", "errorCode": "AccessDenied", "errorMessage": "User: arn:aws:iam::811596193553:user/backup is not authorized to perform: cloudtrail:DescribeTrails", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "07e566767-5f8c-466b-aea9-35dadb6a459c", "record_id": "flaws_cloudtrail:0000240:07e566767-5f8c-466b-aea9-35dadb6a459c", "row_index": 240, "timestamp": "2019-07-08T15:21:24Z", "event_type": "DescribeTrails", "event_source": "cloudtrail.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "251.209.251.231", "user_agent": "Boto3/1.9.183 Python/3.6.8 Linux/3.10.0-957.21.3.el7.x86_64 Botocore/1.12.183", "aws_region": "eu-north-1"}, "resource_arns": [], "raw_record_size_bytes": 854, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "readOnly", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "07e566767-5f8c-466b-aea9-35dadb6a459c", "eventTime": "2019-07-08T15:21:24Z", "eventName": "DescribeTrails", "eventSource": "cloudtrail.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "251.209.251.231", "userAgent": "Boto3/1.9.183 Python/3.6.8 Linux/3.10.0-957.21.3.el7.x86_64 Botocore/1.12.183", "awsRegion": "eu-north-1", "errorCode": "AccessDenied", "errorMessage": "User: arn:aws:iam::811596193553:user/backup is not authorized to perform: cloudtrail:DescribeTrails", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "c0ab7595-7f0b-43f5-a348-66ed8ea568e5", "record_id": "flaws_cloudtrail:0000241:c0ab7595-7f0b-43f5-a348-66ed8ea568e5", "row_index": 241, "timestamp": "2019-07-08T15:21:24Z", "event_type": "DescribeTrails", "event_source": "cloudtrail.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "251.209.251.231", "user_agent": "Boto3/1.9.183 Python/3.6.8 Linux/3.10.0-957.21.3.el7.x86_64 Botocore/1.12.183", "aws_region": "eu-west-1"}, "resource_arns": [], "raw_record_size_bytes": 852, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "readOnly", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "c0ab7595-7f0b-43f5-a348-66ed8ea568e5", "eventTime": "2019-07-08T15:21:24Z", "eventName": "DescribeTrails", "eventSource": "cloudtrail.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "251.209.251.231", "userAgent": "Boto3/1.9.183 Python/3.6.8 Linux/3.10.0-957.21.3.el7.x86_64 Botocore/1.12.183", "awsRegion": "eu-west-1", "errorCode": "AccessDenied", "errorMessage": "User: arn:aws:iam::811596193553:user/backup is not authorized to perform: cloudtrail:DescribeTrails", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "c2d99a8e-0bb2-42b8-8b05-aebcdd86255", "record_id": "flaws_cloudtrail:0000242:c2d99a8e-0bb2-42b8-8b05-aebcdd86255", "row_index": 242, "timestamp": "2019-07-08T15:21:24Z", "event_type": "DescribeTrails", "event_source": "cloudtrail.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "251.209.251.231", "user_agent": "Boto3/1.9.183 Python/3.6.8 Linux/3.10.0-957.21.3.el7.x86_64 Botocore/1.12.183", "aws_region": "eu-west-2"}, "resource_arns": [], "raw_record_size_bytes": 851, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "readOnly", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "c2d99a8e-0bb2-42b8-8b05-aebcdd86255", "eventTime": "2019-07-08T15:21:24Z", "eventName": "DescribeTrails", "eventSource": "cloudtrail.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "251.209.251.231", "userAgent": "Boto3/1.9.183 Python/3.6.8 Linux/3.10.0-957.21.3.el7.x86_64 Botocore/1.12.183", "awsRegion": "eu-west-2", "errorCode": "AccessDenied", "errorMessage": "User: arn:aws:iam::811596193553:user/backup is not authorized to perform: cloudtrail:DescribeTrails", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "dd279c6a-d1af-4e47-84ff-3600113b9dfa", "record_id": "flaws_cloudtrail:0000243:dd279c6a-d1af-4e47-84ff-3600113b9dfa", "row_index": 243, "timestamp": "2019-07-08T15:21:24Z", "event_type": "DescribeTrails", "event_source": "cloudtrail.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "251.209.251.231", "user_agent": "Boto3/1.9.183 Python/3.6.8 Linux/3.10.0-957.21.3.el7.x86_64 Botocore/1.12.183", "aws_region": "eu-west-3"}, "resource_arns": [], "raw_record_size_bytes": 852, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "readOnly", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "dd279c6a-d1af-4e47-84ff-3600113b9dfa", "eventTime": "2019-07-08T15:21:24Z", "eventName": "DescribeTrails", "eventSource": "cloudtrail.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "251.209.251.231", "userAgent": "Boto3/1.9.183 Python/3.6.8 Linux/3.10.0-957.21.3.el7.x86_64 Botocore/1.12.183", "awsRegion": "eu-west-3", "errorCode": "AccessDenied", "errorMessage": "User: arn:aws:iam::811596193553:user/backup is not authorized to perform: cloudtrail:DescribeTrails", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "fe8e978d-0f03-4649-be21-de70ed42882f", "record_id": "flaws_cloudtrail:0000244:fe8e978d-0f03-4649-be21-de70ed42882f", "row_index": 244, "timestamp": "2019-07-08T15:21:24Z", "event_type": "GetBucketLocation", "event_source": "s3.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "251.209.251.231", "user_agent": "[Boto3/1.9.183 Python/3.6.8 Linux/3.10.0-957.21.3.el7.x86_64 Botocore/1.12.183]", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 908, "raw_record_depth": 3, "raw_record_top_level_keys": ["additionalEventData", "awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "fe8e978d-0f03-4649-be21-de70ed42882f", "eventTime": "2019-07-08T15:21:24Z", "eventName": "GetBucketLocation", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "251.209.251.231", "userAgent": "[Boto3/1.9.183 Python/3.6.8 Linux/3.10.0-957.21.3.el7.x86_64 Botocore/1.12.183]", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"host": ["s3.amazonaws.com"], "bucketName": "theend-c1aad500c62e2a57cf12cebf93b282cf.flaws.cloud", "location": [""]}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "c037898d-4252-4232-88c7-6a537778", "record_id": "flaws_cloudtrail:0000245:c037898d-4252-4232-88c7-6a537778", "row_index": 245, "timestamp": "2019-07-08T15:21:24Z", "event_type": "DescribeTrails", "event_source": "cloudtrail.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "251.209.251.231", "user_agent": "Boto3/1.9.183 Python/3.6.8 Linux/3.10.0-957.21.3.el7.x86_64 Botocore/1.12.183", "aws_region": "ap-northeast-1"}, "resource_arns": [], "raw_record_size_bytes": 853, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "readOnly", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "c037898d-4252-4232-88c7-6a537778", "eventTime": "2019-07-08T15:21:24Z", "eventName": "DescribeTrails", "eventSource": "cloudtrail.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "251.209.251.231", "userAgent": "Boto3/1.9.183 Python/3.6.8 Linux/3.10.0-957.21.3.el7.x86_64 Botocore/1.12.183", "awsRegion": "ap-northeast-1", "errorCode": "AccessDenied", "errorMessage": "User: arn:aws:iam::811596193553:user/backup is not authorized to perform: cloudtrail:DescribeTrails", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "26e08d4a-d888-46e3-b92c-e4aced716025", "record_id": "flaws_cloudtrail:0000246:26e08d4a-d888-46e3-b92c-e4aced716025", "row_index": 246, "timestamp": "2019-07-08T15:21:24Z", "event_type": "DescribeTrails", "event_source": "cloudtrail.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "251.209.251.231", "user_agent": "Boto3/1.9.183 Python/3.6.8 Linux/3.10.0-957.21.3.el7.x86_64 Botocore/1.12.183", "aws_region": "ap-northeast-2"}, "resource_arns": [], "raw_record_size_bytes": 857, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "readOnly", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "26e08d4a-d888-46e3-b92c-e4aced716025", "eventTime": "2019-07-08T15:21:24Z", "eventName": "DescribeTrails", "eventSource": "cloudtrail.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "251.209.251.231", "userAgent": "Boto3/1.9.183 Python/3.6.8 Linux/3.10.0-957.21.3.el7.x86_64 Botocore/1.12.183", "awsRegion": "ap-northeast-2", "errorCode": "AccessDenied", "errorMessage": "User: arn:aws:iam::811596193553:user/backup is not authorized to perform: cloudtrail:DescribeTrails", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "991aeef5-bb25-494b-9009-449b42c16a52", "record_id": "flaws_cloudtrail:0000247:991aeef5-bb25-494b-9009-449b42c16a52", "row_index": 247, "timestamp": "2019-07-08T15:21:24Z", "event_type": "DescribeTrails", "event_source": "cloudtrail.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "251.209.251.231", "user_agent": "Boto3/1.9.183 Python/3.6.8 Linux/3.10.0-957.21.3.el7.x86_64 Botocore/1.12.183", "aws_region": "ap-south-1"}, "resource_arns": [], "raw_record_size_bytes": 852, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "readOnly", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "991aeef5-bb25-494b-9009-449b42c16a52", "eventTime": "2019-07-08T15:21:24Z", "eventName": "DescribeTrails", "eventSource": "cloudtrail.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "251.209.251.231", "userAgent": "Boto3/1.9.183 Python/3.6.8 Linux/3.10.0-957.21.3.el7.x86_64 Botocore/1.12.183", "awsRegion": "ap-south-1", "errorCode": "AccessDenied", "errorMessage": "User: arn:aws:iam::811596193553:user/backup is not authorized to perform: cloudtrail:DescribeTrails", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "4c32076-c308-47db-abd8-c32fc5a69da0", "record_id": "flaws_cloudtrail:0000248:4c32076-c308-47db-abd8-c32fc5a69da0", "row_index": 248, "timestamp": "2019-07-08T15:21:24Z", "event_type": "DescribeTrails", "event_source": "cloudtrail.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "251.209.251.231", "user_agent": "Boto3/1.9.183 Python/3.6.8 Linux/3.10.0-957.21.3.el7.x86_64 Botocore/1.12.183", "aws_region": "ca-central-1"}, "resource_arns": [], "raw_record_size_bytes": 854, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "readOnly", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "4c32076-c308-47db-abd8-c32fc5a69da0", "eventTime": "2019-07-08T15:21:24Z", "eventName": "DescribeTrails", "eventSource": "cloudtrail.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "251.209.251.231", "userAgent": "Boto3/1.9.183 Python/3.6.8 Linux/3.10.0-957.21.3.el7.x86_64 Botocore/1.12.183", "awsRegion": "ca-central-1", "errorCode": "AccessDenied", "errorMessage": "User: arn:aws:iam::811596193553:user/backup is not authorized to perform: cloudtrail:DescribeTrails", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "17d452b1-cc8c-42d5-88f6-ad7e68bb8779", "record_id": "flaws_cloudtrail:0000249:17d452b1-cc8c-42d5-88f6-ad7e68bb8779", "row_index": 249, "timestamp": "2019-07-08T15:21:24Z", "event_type": "DescribeTrails", "event_source": "cloudtrail.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "251.209.251.231", "user_agent": "Boto3/1.9.183 Python/3.6.8 Linux/3.10.0-957.21.3.el7.x86_64 Botocore/1.12.183", "aws_region": "eu-central-1"}, "resource_arns": [], "raw_record_size_bytes": 855, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "readOnly", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "17d452b1-cc8c-42d5-88f6-ad7e68bb8779", "eventTime": "2019-07-08T15:21:24Z", "eventName": "DescribeTrails", "eventSource": "cloudtrail.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "251.209.251.231", "userAgent": "Boto3/1.9.183 Python/3.6.8 Linux/3.10.0-957.21.3.el7.x86_64 Botocore/1.12.183", "awsRegion": "eu-central-1", "errorCode": "AccessDenied", "errorMessage": "User: arn:aws:iam::811596193553:user/backup is not authorized to perform: cloudtrail:DescribeTrails", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "07e566767-5f8c-466b-aea9-35dadb6a459c", "record_id": "flaws_cloudtrail:0000250:07e566767-5f8c-466b-aea9-35dadb6a459c", "row_index": 250, "timestamp": "2019-07-08T15:21:24Z", "event_type": "DescribeTrails", "event_source": "cloudtrail.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "251.209.251.231", "user_agent": "Boto3/1.9.183 Python/3.6.8 Linux/3.10.0-957.21.3.el7.x86_64 Botocore/1.12.183", "aws_region": "eu-north-1"}, "resource_arns": [], "raw_record_size_bytes": 854, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "readOnly", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "07e566767-5f8c-466b-aea9-35dadb6a459c", "eventTime": "2019-07-08T15:21:24Z", "eventName": "DescribeTrails", "eventSource": "cloudtrail.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "251.209.251.231", "userAgent": "Boto3/1.9.183 Python/3.6.8 Linux/3.10.0-957.21.3.el7.x86_64 Botocore/1.12.183", "awsRegion": "eu-north-1", "errorCode": "AccessDenied", "errorMessage": "User: arn:aws:iam::811596193553:user/backup is not authorized to perform: cloudtrail:DescribeTrails", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "c0ab7595-7f0b-43f5-a348-66ed8ea568e5", "record_id": "flaws_cloudtrail:0000251:c0ab7595-7f0b-43f5-a348-66ed8ea568e5", "row_index": 251, "timestamp": "2019-07-08T15:21:24Z", "event_type": "DescribeTrails", "event_source": "cloudtrail.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "251.209.251.231", "user_agent": "Boto3/1.9.183 Python/3.6.8 Linux/3.10.0-957.21.3.el7.x86_64 Botocore/1.12.183", "aws_region": "eu-west-1"}, "resource_arns": [], "raw_record_size_bytes": 852, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "readOnly", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "c0ab7595-7f0b-43f5-a348-66ed8ea568e5", "eventTime": "2019-07-08T15:21:24Z", "eventName": "DescribeTrails", "eventSource": "cloudtrail.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "251.209.251.231", "userAgent": "Boto3/1.9.183 Python/3.6.8 Linux/3.10.0-957.21.3.el7.x86_64 Botocore/1.12.183", "awsRegion": "eu-west-1", "errorCode": "AccessDenied", "errorMessage": "User: arn:aws:iam::811596193553:user/backup is not authorized to perform: cloudtrail:DescribeTrails", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "c2d99a8e-0bb2-42b8-8b05-aebcdd86255", "record_id": "flaws_cloudtrail:0000252:c2d99a8e-0bb2-42b8-8b05-aebcdd86255", "row_index": 252, "timestamp": "2019-07-08T15:21:24Z", "event_type": "DescribeTrails", "event_source": "cloudtrail.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "251.209.251.231", "user_agent": "Boto3/1.9.183 Python/3.6.8 Linux/3.10.0-957.21.3.el7.x86_64 Botocore/1.12.183", "aws_region": "eu-west-2"}, "resource_arns": [], "raw_record_size_bytes": 851, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "readOnly", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "c2d99a8e-0bb2-42b8-8b05-aebcdd86255", "eventTime": "2019-07-08T15:21:24Z", "eventName": "DescribeTrails", "eventSource": "cloudtrail.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "251.209.251.231", "userAgent": "Boto3/1.9.183 Python/3.6.8 Linux/3.10.0-957.21.3.el7.x86_64 Botocore/1.12.183", "awsRegion": "eu-west-2", "errorCode": "AccessDenied", "errorMessage": "User: arn:aws:iam::811596193553:user/backup is not authorized to perform: cloudtrail:DescribeTrails", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "dd279c6a-d1af-4e47-84ff-3600113b9dfa", "record_id": "flaws_cloudtrail:0000253:dd279c6a-d1af-4e47-84ff-3600113b9dfa", "row_index": 253, "timestamp": "2019-07-08T15:21:24Z", "event_type": "DescribeTrails", "event_source": "cloudtrail.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "251.209.251.231", "user_agent": "Boto3/1.9.183 Python/3.6.8 Linux/3.10.0-957.21.3.el7.x86_64 Botocore/1.12.183", "aws_region": "eu-west-3"}, "resource_arns": [], "raw_record_size_bytes": 852, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "readOnly", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "dd279c6a-d1af-4e47-84ff-3600113b9dfa", "eventTime": "2019-07-08T15:21:24Z", "eventName": "DescribeTrails", "eventSource": "cloudtrail.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "251.209.251.231", "userAgent": "Boto3/1.9.183 Python/3.6.8 Linux/3.10.0-957.21.3.el7.x86_64 Botocore/1.12.183", "awsRegion": "eu-west-3", "errorCode": "AccessDenied", "errorMessage": "User: arn:aws:iam::811596193553:user/backup is not authorized to perform: cloudtrail:DescribeTrails", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "fe8e978d-0f03-4649-be21-de70ed42882f", "record_id": "flaws_cloudtrail:0000254:fe8e978d-0f03-4649-be21-de70ed42882f", "row_index": 254, "timestamp": "2019-07-08T15:21:24Z", "event_type": "GetBucketLocation", "event_source": "s3.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "251.209.251.231", "user_agent": "[Boto3/1.9.183 Python/3.6.8 Linux/3.10.0-957.21.3.el7.x86_64 Botocore/1.12.183]", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 908, "raw_record_depth": 3, "raw_record_top_level_keys": ["additionalEventData", "awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "fe8e978d-0f03-4649-be21-de70ed42882f", "eventTime": "2019-07-08T15:21:24Z", "eventName": "GetBucketLocation", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "251.209.251.231", "userAgent": "[Boto3/1.9.183 Python/3.6.8 Linux/3.10.0-957.21.3.el7.x86_64 Botocore/1.12.183]", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"host": ["s3.amazonaws.com"], "bucketName": "theend-c1aad500c62e2a57cf12cebf93b282cf.flaws.cloud", "location": [""]}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "519612d-35cb-44da-a56a-d265d9b4e03e", "record_id": "flaws_cloudtrail:0000255:519612d-35cb-44da-a56a-d265d9b4e03e", "row_index": 255, "timestamp": "2019-07-08T15:21:25Z", "event_type": "DescribeAlarms", "event_source": "monitoring.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "251.209.251.231", "user_agent": "Boto3/1.9.183 Python/3.6.8 Linux/3.10.0-957.21.3.el7.x86_64 Botocore/1.12.183", "aws_region": "ap-northeast-1"}, "resource_arns": [], "raw_record_size_bytes": 908, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "519612d-35cb-44da-a56a-d265d9b4e03e", "eventTime": "2019-07-08T15:21:25Z", "eventName": "DescribeAlarms", "eventSource": "monitoring.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "251.209.251.231", "userAgent": "Boto3/1.9.183 Python/3.6.8 Linux/3.10.0-957.21.3.el7.x86_64 Botocore/1.12.183", "awsRegion": "ap-northeast-1", "errorCode": "AccessDenied", "errorMessage": "User: arn:aws:iam::811596193553:user/backup is not authorized to perform: cloudwatch:DescribeAlarms on resource: arn:aws:cloudwatch:ap-northeast-1:811596193553:alarm:*", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "59d33308-3e7b-459f-a341-0eb935963e7c", "record_id": "flaws_cloudtrail:0000256:59d33308-3e7b-459f-a341-0eb935963e7c", "row_index": 256, "timestamp": "2019-07-08T15:21:25Z", "event_type": "DescribeAlarms", "event_source": "monitoring.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "251.209.251.231", "user_agent": "Boto3/1.9.183 Python/3.6.8 Linux/3.10.0-957.21.3.el7.x86_64 Botocore/1.12.183", "aws_region": "ap-south-1"}, "resource_arns": [], "raw_record_size_bytes": 901, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "59d33308-3e7b-459f-a341-0eb935963e7c", "eventTime": "2019-07-08T15:21:25Z", "eventName": "DescribeAlarms", "eventSource": "monitoring.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "251.209.251.231", "userAgent": "Boto3/1.9.183 Python/3.6.8 Linux/3.10.0-957.21.3.el7.x86_64 Botocore/1.12.183", "awsRegion": "ap-south-1", "errorCode": "AccessDenied", "errorMessage": "User: arn:aws:iam::811596193553:user/backup is not authorized to perform: cloudwatch:DescribeAlarms on resource: arn:aws:cloudwatch:ap-south-1:811596193553:alarm:*", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "ded17e90-e5a5-41c7-a311-c9f5e641501b", "record_id": "flaws_cloudtrail:0000257:ded17e90-e5a5-41c7-a311-c9f5e641501b", "row_index": 257, "timestamp": "2019-07-08T15:21:25Z", "event_type": "DescribeTrails", "event_source": "cloudtrail.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "251.209.251.231", "user_agent": "Boto3/1.9.183 Python/3.6.8 Linux/3.10.0-957.21.3.el7.x86_64 Botocore/1.12.183", "aws_region": "ap-southeast-1"}, "resource_arns": [], "raw_record_size_bytes": 858, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "readOnly", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "ded17e90-e5a5-41c7-a311-c9f5e641501b", "eventTime": "2019-07-08T15:21:25Z", "eventName": "DescribeTrails", "eventSource": "cloudtrail.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "251.209.251.231", "userAgent": "Boto3/1.9.183 Python/3.6.8 Linux/3.10.0-957.21.3.el7.x86_64 Botocore/1.12.183", "awsRegion": "ap-southeast-1", "errorCode": "AccessDenied", "errorMessage": "User: arn:aws:iam::811596193553:user/backup is not authorized to perform: cloudtrail:DescribeTrails", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "02f95b8d-38b4-4913-90fb-5e99e7df28b2", "record_id": "flaws_cloudtrail:0000258:02f95b8d-38b4-4913-90fb-5e99e7df28b2", "row_index": 258, "timestamp": "2019-07-08T15:21:25Z", "event_type": "DescribeTrails", "event_source": "cloudtrail.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "251.209.251.231", "user_agent": "Boto3/1.9.183 Python/3.6.8 Linux/3.10.0-957.21.3.el7.x86_64 Botocore/1.12.183", "aws_region": "ap-southeast-2"}, "resource_arns": [], "raw_record_size_bytes": 857, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "readOnly", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "02f95b8d-38b4-4913-90fb-5e99e7df28b2", "eventTime": "2019-07-08T15:21:25Z", "eventName": "DescribeTrails", "eventSource": "cloudtrail.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "251.209.251.231", "userAgent": "Boto3/1.9.183 Python/3.6.8 Linux/3.10.0-957.21.3.el7.x86_64 Botocore/1.12.183", "awsRegion": "ap-southeast-2", "errorCode": "AccessDenied", "errorMessage": "User: arn:aws:iam::811596193553:user/backup is not authorized to perform: cloudtrail:DescribeTrails", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "882114fc4-6527-41cd-a40c-764d0f52b36e", "record_id": "flaws_cloudtrail:0000259:882114fc4-6527-41cd-a40c-764d0f52b36e", "row_index": 259, "timestamp": "2019-07-08T15:21:25Z", "event_type": "DescribeAlarms", "event_source": "monitoring.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "251.209.251.231", "user_agent": "Boto3/1.9.183 Python/3.6.8 Linux/3.10.0-957.21.3.el7.x86_64 Botocore/1.12.183", "aws_region": "ca-central-1"}, "resource_arns": [], "raw_record_size_bytes": 906, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "882114fc4-6527-41cd-a40c-764d0f52b36e", "eventTime": "2019-07-08T15:21:25Z", "eventName": "DescribeAlarms", "eventSource": "monitoring.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "251.209.251.231", "userAgent": "Boto3/1.9.183 Python/3.6.8 Linux/3.10.0-957.21.3.el7.x86_64 Botocore/1.12.183", "awsRegion": "ca-central-1", "errorCode": "AccessDenied", "errorMessage": "User: arn:aws:iam::811596193553:user/backup is not authorized to perform: cloudwatch:DescribeAlarms on resource: arn:aws:cloudwatch:ca-central-1:811596193553:alarm:*", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "9a2f252c-5b71-4058-a155-2901b26dbc97", "record_id": "flaws_cloudtrail:0000260:9a2f252c-5b71-4058-a155-2901b26dbc97", "row_index": 260, "timestamp": "2019-07-08T15:21:25Z", "event_type": "DescribeAlarms", "event_source": "monitoring.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "251.209.251.231", "user_agent": "Boto3/1.9.183 Python/3.6.8 Linux/3.10.0-957.21.3.el7.x86_64 Botocore/1.12.183", "aws_region": "eu-central-1"}, "resource_arns": [], "raw_record_size_bytes": 905, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "9a2f252c-5b71-4058-a155-2901b26dbc97", "eventTime": "2019-07-08T15:21:25Z", "eventName": "DescribeAlarms", "eventSource": "monitoring.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "251.209.251.231", "userAgent": "Boto3/1.9.183 Python/3.6.8 Linux/3.10.0-957.21.3.el7.x86_64 Botocore/1.12.183", "awsRegion": "eu-central-1", "errorCode": "AccessDenied", "errorMessage": "User: arn:aws:iam::811596193553:user/backup is not authorized to perform: cloudwatch:DescribeAlarms on resource: arn:aws:cloudwatch:eu-central-1:811596193553:alarm:*", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "766b239c-b47b-4fb6-a28e-98902767441c", "record_id": "flaws_cloudtrail:0000261:766b239c-b47b-4fb6-a28e-98902767441c", "row_index": 261, "timestamp": "2019-07-08T15:21:25Z", "event_type": "DescribeAlarms", "event_source": "monitoring.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "251.209.251.231", "user_agent": "Boto3/1.9.183 Python/3.6.8 Linux/3.10.0-957.21.3.el7.x86_64 Botocore/1.12.183", "aws_region": "eu-north-1"}, "resource_arns": [], "raw_record_size_bytes": 901, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "766b239c-b47b-4fb6-a28e-98902767441c", "eventTime": "2019-07-08T15:21:25Z", "eventName": "DescribeAlarms", "eventSource": "monitoring.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "251.209.251.231", "userAgent": "Boto3/1.9.183 Python/3.6.8 Linux/3.10.0-957.21.3.el7.x86_64 Botocore/1.12.183", "awsRegion": "eu-north-1", "errorCode": "AccessDenied", "errorMessage": "User: arn:aws:iam::811596193553:user/backup is not authorized to perform: cloudwatch:DescribeAlarms on resource: arn:aws:cloudwatch:eu-north-1:811596193553:alarm:*", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "4f84b175-da0b-4d1d-8dbc-c98718792bd0", "record_id": "flaws_cloudtrail:0000262:4f84b175-da0b-4d1d-8dbc-c98718792bd0", "row_index": 262, "timestamp": "2019-07-08T15:21:25Z", "event_type": "DescribeAlarms", "event_source": "monitoring.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "251.209.251.231", "user_agent": "Boto3/1.9.183 Python/3.6.8 Linux/3.10.0-957.21.3.el7.x86_64 Botocore/1.12.183", "aws_region": "eu-west-2"}, "resource_arns": [], "raw_record_size_bytes": 899, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "4f84b175-da0b-4d1d-8dbc-c98718792bd0", "eventTime": "2019-07-08T15:21:25Z", "eventName": "DescribeAlarms", "eventSource": "monitoring.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "251.209.251.231", "userAgent": "Boto3/1.9.183 Python/3.6.8 Linux/3.10.0-957.21.3.el7.x86_64 Botocore/1.12.183", "awsRegion": "eu-west-2", "errorCode": "AccessDenied", "errorMessage": "User: arn:aws:iam::811596193553:user/backup is not authorized to perform: cloudwatch:DescribeAlarms on resource: arn:aws:cloudwatch:eu-west-2:811596193553:alarm:*", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "f3a3618f-be6c-4c4c-b21a-34274e07f0b3", "record_id": "flaws_cloudtrail:0000263:f3a3618f-be6c-4c4c-b21a-34274e07f0b3", "row_index": 263, "timestamp": "2019-07-08T15:21:25Z", "event_type": "DescribeAlarms", "event_source": "monitoring.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "251.209.251.231", "user_agent": "Boto3/1.9.183 Python/3.6.8 Linux/3.10.0-957.21.3.el7.x86_64 Botocore/1.12.183", "aws_region": "eu-west-3"}, "resource_arns": [], "raw_record_size_bytes": 899, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "f3a3618f-be6c-4c4c-b21a-34274e07f0b3", "eventTime": "2019-07-08T15:21:25Z", "eventName": "DescribeAlarms", "eventSource": "monitoring.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "251.209.251.231", "userAgent": "Boto3/1.9.183 Python/3.6.8 Linux/3.10.0-957.21.3.el7.x86_64 Botocore/1.12.183", "awsRegion": "eu-west-3", "errorCode": "AccessDenied", "errorMessage": "User: arn:aws:iam::811596193553:user/backup is not authorized to perform: cloudwatch:DescribeAlarms on resource: arn:aws:cloudwatch:eu-west-3:811596193553:alarm:*", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "18755f-31af-46fd-a339-bc2f9dfb66e1", "record_id": "flaws_cloudtrail:0000264:18755f-31af-46fd-a339-bc2f9dfb66e1", "row_index": 264, "timestamp": "2019-07-08T15:21:25Z", "event_type": "DescribeTrails", "event_source": "cloudtrail.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "251.209.251.231", "user_agent": "Boto3/1.9.183 Python/3.6.8 Linux/3.10.0-957.21.3.el7.x86_64 Botocore/1.12.183", "aws_region": "sa-east-1"}, "resource_arns": [], "raw_record_size_bytes": 850, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "readOnly", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "18755f-31af-46fd-a339-bc2f9dfb66e1", "eventTime": "2019-07-08T15:21:25Z", "eventName": "DescribeTrails", "eventSource": "cloudtrail.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "251.209.251.231", "userAgent": "Boto3/1.9.183 Python/3.6.8 Linux/3.10.0-957.21.3.el7.x86_64 Botocore/1.12.183", "awsRegion": "sa-east-1", "errorCode": "AccessDenied", "errorMessage": "User: arn:aws:iam::811596193553:user/backup is not authorized to perform: cloudtrail:DescribeTrails", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "04df9eb7-677b-40e7-a0b8-280c675f56e3", "record_id": "flaws_cloudtrail:0000265:04df9eb7-677b-40e7-a0b8-280c675f56e3", "row_index": 265, "timestamp": "2019-07-08T15:21:25Z", "event_type": "DescribeTrails", "event_source": "cloudtrail.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "251.209.251.231", "user_agent": "Boto3/1.9.183 Python/3.6.8 Linux/3.10.0-957.21.3.el7.x86_64 Botocore/1.12.183", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 852, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "readOnly", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "04df9eb7-677b-40e7-a0b8-280c675f56e3", "eventTime": "2019-07-08T15:21:25Z", "eventName": "DescribeTrails", "eventSource": "cloudtrail.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "251.209.251.231", "userAgent": "Boto3/1.9.183 Python/3.6.8 Linux/3.10.0-957.21.3.el7.x86_64 Botocore/1.12.183", "awsRegion": "us-east-1", "errorCode": "AccessDenied", "errorMessage": "User: arn:aws:iam::811596193553:user/backup is not authorized to perform: cloudtrail:DescribeTrails", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "1bd137cb-7a1a-4fdc-b148-52396b590920", "record_id": "flaws_cloudtrail:0000266:1bd137cb-7a1a-4fdc-b148-52396b590920", "row_index": 266, "timestamp": "2019-07-08T15:21:25Z", "event_type": "DescribeTrails", "event_source": "cloudtrail.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "251.209.251.231", "user_agent": "Boto3/1.9.183 Python/3.6.8 Linux/3.10.0-957.21.3.el7.x86_64 Botocore/1.12.183", "aws_region": "us-east-2"}, "resource_arns": [], "raw_record_size_bytes": 852, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "readOnly", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "1bd137cb-7a1a-4fdc-b148-52396b590920", "eventTime": "2019-07-08T15:21:25Z", "eventName": "DescribeTrails", "eventSource": "cloudtrail.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "251.209.251.231", "userAgent": "Boto3/1.9.183 Python/3.6.8 Linux/3.10.0-957.21.3.el7.x86_64 Botocore/1.12.183", "awsRegion": "us-east-2", "errorCode": "AccessDenied", "errorMessage": "User: arn:aws:iam::811596193553:user/backup is not authorized to perform: cloudtrail:DescribeTrails", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "74fd1df1-69e9-4048-9f78-6b2e879aa525", "record_id": "flaws_cloudtrail:0000267:74fd1df1-69e9-4048-9f78-6b2e879aa525", "row_index": 267, "timestamp": "2019-07-08T15:21:25Z", "event_type": "DescribeTrails", "event_source": "cloudtrail.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "251.209.251.231", "user_agent": "Boto3/1.9.183 Python/3.6.8 Linux/3.10.0-957.21.3.el7.x86_64 Botocore/1.12.183", "aws_region": "us-west-1"}, "resource_arns": [], "raw_record_size_bytes": 849, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "readOnly", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "74fd1df1-69e9-4048-9f78-6b2e879aa525", "eventTime": "2019-07-08T15:21:25Z", "eventName": "DescribeTrails", "eventSource": "cloudtrail.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "251.209.251.231", "userAgent": "Boto3/1.9.183 Python/3.6.8 Linux/3.10.0-957.21.3.el7.x86_64 Botocore/1.12.183", "awsRegion": "us-west-1", "errorCode": "AccessDenied", "errorMessage": "User: arn:aws:iam::811596193553:user/backup is not authorized to perform: cloudtrail:DescribeTrails", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "b0226bc8-e12f-4285-a3a8-5c1878c815c0", "record_id": "flaws_cloudtrail:0000268:b0226bc8-e12f-4285-a3a8-5c1878c815c0", "row_index": 268, "timestamp": "2019-07-08T15:21:25Z", "event_type": "DescribeTrails", "event_source": "cloudtrail.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "251.209.251.231", "user_agent": "Boto3/1.9.183 Python/3.6.8 Linux/3.10.0-957.21.3.el7.x86_64 Botocore/1.12.183", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 851, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "readOnly", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "b0226bc8-e12f-4285-a3a8-5c1878c815c0", "eventTime": "2019-07-08T15:21:25Z", "eventName": "DescribeTrails", "eventSource": "cloudtrail.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "251.209.251.231", "userAgent": "Boto3/1.9.183 Python/3.6.8 Linux/3.10.0-957.21.3.el7.x86_64 Botocore/1.12.183", "awsRegion": "us-west-2", "errorCode": "AccessDenied", "errorMessage": "User: arn:aws:iam::811596193553:user/backup is not authorized to perform: cloudtrail:DescribeTrails", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "519612d-35cb-44da-a56a-d265d9b4e03e", "record_id": "flaws_cloudtrail:0000269:519612d-35cb-44da-a56a-d265d9b4e03e", "row_index": 269, "timestamp": "2019-07-08T15:21:25Z", "event_type": "DescribeAlarms", "event_source": "monitoring.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "251.209.251.231", "user_agent": "Boto3/1.9.183 Python/3.6.8 Linux/3.10.0-957.21.3.el7.x86_64 Botocore/1.12.183", "aws_region": "ap-northeast-1"}, "resource_arns": [], "raw_record_size_bytes": 908, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "519612d-35cb-44da-a56a-d265d9b4e03e", "eventTime": "2019-07-08T15:21:25Z", "eventName": "DescribeAlarms", "eventSource": "monitoring.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "251.209.251.231", "userAgent": "Boto3/1.9.183 Python/3.6.8 Linux/3.10.0-957.21.3.el7.x86_64 Botocore/1.12.183", "awsRegion": "ap-northeast-1", "errorCode": "AccessDenied", "errorMessage": "User: arn:aws:iam::811596193553:user/backup is not authorized to perform: cloudwatch:DescribeAlarms on resource: arn:aws:cloudwatch:ap-northeast-1:811596193553:alarm:*", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "59d33308-3e7b-459f-a341-0eb935963e7c", "record_id": "flaws_cloudtrail:0000270:59d33308-3e7b-459f-a341-0eb935963e7c", "row_index": 270, "timestamp": "2019-07-08T15:21:25Z", "event_type": "DescribeAlarms", "event_source": "monitoring.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "251.209.251.231", "user_agent": "Boto3/1.9.183 Python/3.6.8 Linux/3.10.0-957.21.3.el7.x86_64 Botocore/1.12.183", "aws_region": "ap-south-1"}, "resource_arns": [], "raw_record_size_bytes": 901, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "59d33308-3e7b-459f-a341-0eb935963e7c", "eventTime": "2019-07-08T15:21:25Z", "eventName": "DescribeAlarms", "eventSource": "monitoring.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "251.209.251.231", "userAgent": "Boto3/1.9.183 Python/3.6.8 Linux/3.10.0-957.21.3.el7.x86_64 Botocore/1.12.183", "awsRegion": "ap-south-1", "errorCode": "AccessDenied", "errorMessage": "User: arn:aws:iam::811596193553:user/backup is not authorized to perform: cloudwatch:DescribeAlarms on resource: arn:aws:cloudwatch:ap-south-1:811596193553:alarm:*", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "ded17e90-e5a5-41c7-a311-c9f5e641501b", "record_id": "flaws_cloudtrail:0000271:ded17e90-e5a5-41c7-a311-c9f5e641501b", "row_index": 271, "timestamp": "2019-07-08T15:21:25Z", "event_type": "DescribeTrails", "event_source": "cloudtrail.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "251.209.251.231", "user_agent": "Boto3/1.9.183 Python/3.6.8 Linux/3.10.0-957.21.3.el7.x86_64 Botocore/1.12.183", "aws_region": "ap-southeast-1"}, "resource_arns": [], "raw_record_size_bytes": 858, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "readOnly", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "ded17e90-e5a5-41c7-a311-c9f5e641501b", "eventTime": "2019-07-08T15:21:25Z", "eventName": "DescribeTrails", "eventSource": "cloudtrail.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "251.209.251.231", "userAgent": "Boto3/1.9.183 Python/3.6.8 Linux/3.10.0-957.21.3.el7.x86_64 Botocore/1.12.183", "awsRegion": "ap-southeast-1", "errorCode": "AccessDenied", "errorMessage": "User: arn:aws:iam::811596193553:user/backup is not authorized to perform: cloudtrail:DescribeTrails", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "02f95b8d-38b4-4913-90fb-5e99e7df28b2", "record_id": "flaws_cloudtrail:0000272:02f95b8d-38b4-4913-90fb-5e99e7df28b2", "row_index": 272, "timestamp": "2019-07-08T15:21:25Z", "event_type": "DescribeTrails", "event_source": "cloudtrail.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "251.209.251.231", "user_agent": "Boto3/1.9.183 Python/3.6.8 Linux/3.10.0-957.21.3.el7.x86_64 Botocore/1.12.183", "aws_region": "ap-southeast-2"}, "resource_arns": [], "raw_record_size_bytes": 857, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "readOnly", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "02f95b8d-38b4-4913-90fb-5e99e7df28b2", "eventTime": "2019-07-08T15:21:25Z", "eventName": "DescribeTrails", "eventSource": "cloudtrail.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "251.209.251.231", "userAgent": "Boto3/1.9.183 Python/3.6.8 Linux/3.10.0-957.21.3.el7.x86_64 Botocore/1.12.183", "awsRegion": "ap-southeast-2", "errorCode": "AccessDenied", "errorMessage": "User: arn:aws:iam::811596193553:user/backup is not authorized to perform: cloudtrail:DescribeTrails", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "882114fc4-6527-41cd-a40c-764d0f52b36e", "record_id": "flaws_cloudtrail:0000273:882114fc4-6527-41cd-a40c-764d0f52b36e", "row_index": 273, "timestamp": "2019-07-08T15:21:25Z", "event_type": "DescribeAlarms", "event_source": "monitoring.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "251.209.251.231", "user_agent": "Boto3/1.9.183 Python/3.6.8 Linux/3.10.0-957.21.3.el7.x86_64 Botocore/1.12.183", "aws_region": "ca-central-1"}, "resource_arns": [], "raw_record_size_bytes": 906, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "882114fc4-6527-41cd-a40c-764d0f52b36e", "eventTime": "2019-07-08T15:21:25Z", "eventName": "DescribeAlarms", "eventSource": "monitoring.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "251.209.251.231", "userAgent": "Boto3/1.9.183 Python/3.6.8 Linux/3.10.0-957.21.3.el7.x86_64 Botocore/1.12.183", "awsRegion": "ca-central-1", "errorCode": "AccessDenied", "errorMessage": "User: arn:aws:iam::811596193553:user/backup is not authorized to perform: cloudwatch:DescribeAlarms on resource: arn:aws:cloudwatch:ca-central-1:811596193553:alarm:*", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "9a2f252c-5b71-4058-a155-2901b26dbc97", "record_id": "flaws_cloudtrail:0000274:9a2f252c-5b71-4058-a155-2901b26dbc97", "row_index": 274, "timestamp": "2019-07-08T15:21:25Z", "event_type": "DescribeAlarms", "event_source": "monitoring.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "251.209.251.231", "user_agent": "Boto3/1.9.183 Python/3.6.8 Linux/3.10.0-957.21.3.el7.x86_64 Botocore/1.12.183", "aws_region": "eu-central-1"}, "resource_arns": [], "raw_record_size_bytes": 905, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "9a2f252c-5b71-4058-a155-2901b26dbc97", "eventTime": "2019-07-08T15:21:25Z", "eventName": "DescribeAlarms", "eventSource": "monitoring.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "251.209.251.231", "userAgent": "Boto3/1.9.183 Python/3.6.8 Linux/3.10.0-957.21.3.el7.x86_64 Botocore/1.12.183", "awsRegion": "eu-central-1", "errorCode": "AccessDenied", "errorMessage": "User: arn:aws:iam::811596193553:user/backup is not authorized to perform: cloudwatch:DescribeAlarms on resource: arn:aws:cloudwatch:eu-central-1:811596193553:alarm:*", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "766b239c-b47b-4fb6-a28e-98902767441c", "record_id": "flaws_cloudtrail:0000275:766b239c-b47b-4fb6-a28e-98902767441c", "row_index": 275, "timestamp": "2019-07-08T15:21:25Z", "event_type": "DescribeAlarms", "event_source": "monitoring.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "251.209.251.231", "user_agent": "Boto3/1.9.183 Python/3.6.8 Linux/3.10.0-957.21.3.el7.x86_64 Botocore/1.12.183", "aws_region": "eu-north-1"}, "resource_arns": [], "raw_record_size_bytes": 901, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "766b239c-b47b-4fb6-a28e-98902767441c", "eventTime": "2019-07-08T15:21:25Z", "eventName": "DescribeAlarms", "eventSource": "monitoring.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "251.209.251.231", "userAgent": "Boto3/1.9.183 Python/3.6.8 Linux/3.10.0-957.21.3.el7.x86_64 Botocore/1.12.183", "awsRegion": "eu-north-1", "errorCode": "AccessDenied", "errorMessage": "User: arn:aws:iam::811596193553:user/backup is not authorized to perform: cloudwatch:DescribeAlarms on resource: arn:aws:cloudwatch:eu-north-1:811596193553:alarm:*", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "4f84b175-da0b-4d1d-8dbc-c98718792bd0", "record_id": "flaws_cloudtrail:0000276:4f84b175-da0b-4d1d-8dbc-c98718792bd0", "row_index": 276, "timestamp": "2019-07-08T15:21:25Z", "event_type": "DescribeAlarms", "event_source": "monitoring.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "251.209.251.231", "user_agent": "Boto3/1.9.183 Python/3.6.8 Linux/3.10.0-957.21.3.el7.x86_64 Botocore/1.12.183", "aws_region": "eu-west-2"}, "resource_arns": [], "raw_record_size_bytes": 899, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "4f84b175-da0b-4d1d-8dbc-c98718792bd0", "eventTime": "2019-07-08T15:21:25Z", "eventName": "DescribeAlarms", "eventSource": "monitoring.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "251.209.251.231", "userAgent": "Boto3/1.9.183 Python/3.6.8 Linux/3.10.0-957.21.3.el7.x86_64 Botocore/1.12.183", "awsRegion": "eu-west-2", "errorCode": "AccessDenied", "errorMessage": "User: arn:aws:iam::811596193553:user/backup is not authorized to perform: cloudwatch:DescribeAlarms on resource: arn:aws:cloudwatch:eu-west-2:811596193553:alarm:*", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "f3a3618f-be6c-4c4c-b21a-34274e07f0b3", "record_id": "flaws_cloudtrail:0000277:f3a3618f-be6c-4c4c-b21a-34274e07f0b3", "row_index": 277, "timestamp": "2019-07-08T15:21:25Z", "event_type": "DescribeAlarms", "event_source": "monitoring.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "251.209.251.231", "user_agent": "Boto3/1.9.183 Python/3.6.8 Linux/3.10.0-957.21.3.el7.x86_64 Botocore/1.12.183", "aws_region": "eu-west-3"}, "resource_arns": [], "raw_record_size_bytes": 899, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "f3a3618f-be6c-4c4c-b21a-34274e07f0b3", "eventTime": "2019-07-08T15:21:25Z", "eventName": "DescribeAlarms", "eventSource": "monitoring.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "251.209.251.231", "userAgent": "Boto3/1.9.183 Python/3.6.8 Linux/3.10.0-957.21.3.el7.x86_64 Botocore/1.12.183", "awsRegion": "eu-west-3", "errorCode": "AccessDenied", "errorMessage": "User: arn:aws:iam::811596193553:user/backup is not authorized to perform: cloudwatch:DescribeAlarms on resource: arn:aws:cloudwatch:eu-west-3:811596193553:alarm:*", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "18755f-31af-46fd-a339-bc2f9dfb66e1", "record_id": "flaws_cloudtrail:0000278:18755f-31af-46fd-a339-bc2f9dfb66e1", "row_index": 278, "timestamp": "2019-07-08T15:21:25Z", "event_type": "DescribeTrails", "event_source": "cloudtrail.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "251.209.251.231", "user_agent": "Boto3/1.9.183 Python/3.6.8 Linux/3.10.0-957.21.3.el7.x86_64 Botocore/1.12.183", "aws_region": "sa-east-1"}, "resource_arns": [], "raw_record_size_bytes": 850, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "readOnly", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "18755f-31af-46fd-a339-bc2f9dfb66e1", "eventTime": "2019-07-08T15:21:25Z", "eventName": "DescribeTrails", "eventSource": "cloudtrail.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "251.209.251.231", "userAgent": "Boto3/1.9.183 Python/3.6.8 Linux/3.10.0-957.21.3.el7.x86_64 Botocore/1.12.183", "awsRegion": "sa-east-1", "errorCode": "AccessDenied", "errorMessage": "User: arn:aws:iam::811596193553:user/backup is not authorized to perform: cloudtrail:DescribeTrails", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "04df9eb7-677b-40e7-a0b8-280c675f56e3", "record_id": "flaws_cloudtrail:0000279:04df9eb7-677b-40e7-a0b8-280c675f56e3", "row_index": 279, "timestamp": "2019-07-08T15:21:25Z", "event_type": "DescribeTrails", "event_source": "cloudtrail.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "251.209.251.231", "user_agent": "Boto3/1.9.183 Python/3.6.8 Linux/3.10.0-957.21.3.el7.x86_64 Botocore/1.12.183", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 852, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "readOnly", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "04df9eb7-677b-40e7-a0b8-280c675f56e3", "eventTime": "2019-07-08T15:21:25Z", "eventName": "DescribeTrails", "eventSource": "cloudtrail.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "251.209.251.231", "userAgent": "Boto3/1.9.183 Python/3.6.8 Linux/3.10.0-957.21.3.el7.x86_64 Botocore/1.12.183", "awsRegion": "us-east-1", "errorCode": "AccessDenied", "errorMessage": "User: arn:aws:iam::811596193553:user/backup is not authorized to perform: cloudtrail:DescribeTrails", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "1bd137cb-7a1a-4fdc-b148-52396b590920", "record_id": "flaws_cloudtrail:0000280:1bd137cb-7a1a-4fdc-b148-52396b590920", "row_index": 280, "timestamp": "2019-07-08T15:21:25Z", "event_type": "DescribeTrails", "event_source": "cloudtrail.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "251.209.251.231", "user_agent": "Boto3/1.9.183 Python/3.6.8 Linux/3.10.0-957.21.3.el7.x86_64 Botocore/1.12.183", "aws_region": "us-east-2"}, "resource_arns": [], "raw_record_size_bytes": 852, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "readOnly", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "1bd137cb-7a1a-4fdc-b148-52396b590920", "eventTime": "2019-07-08T15:21:25Z", "eventName": "DescribeTrails", "eventSource": "cloudtrail.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "251.209.251.231", "userAgent": "Boto3/1.9.183 Python/3.6.8 Linux/3.10.0-957.21.3.el7.x86_64 Botocore/1.12.183", "awsRegion": "us-east-2", "errorCode": "AccessDenied", "errorMessage": "User: arn:aws:iam::811596193553:user/backup is not authorized to perform: cloudtrail:DescribeTrails", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "74fd1df1-69e9-4048-9f78-6b2e879aa525", "record_id": "flaws_cloudtrail:0000281:74fd1df1-69e9-4048-9f78-6b2e879aa525", "row_index": 281, "timestamp": "2019-07-08T15:21:25Z", "event_type": "DescribeTrails", "event_source": "cloudtrail.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "251.209.251.231", "user_agent": "Boto3/1.9.183 Python/3.6.8 Linux/3.10.0-957.21.3.el7.x86_64 Botocore/1.12.183", "aws_region": "us-west-1"}, "resource_arns": [], "raw_record_size_bytes": 849, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "readOnly", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "74fd1df1-69e9-4048-9f78-6b2e879aa525", "eventTime": "2019-07-08T15:21:25Z", "eventName": "DescribeTrails", "eventSource": "cloudtrail.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "251.209.251.231", "userAgent": "Boto3/1.9.183 Python/3.6.8 Linux/3.10.0-957.21.3.el7.x86_64 Botocore/1.12.183", "awsRegion": "us-west-1", "errorCode": "AccessDenied", "errorMessage": "User: arn:aws:iam::811596193553:user/backup is not authorized to perform: cloudtrail:DescribeTrails", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "b0226bc8-e12f-4285-a3a8-5c1878c815c0", "record_id": "flaws_cloudtrail:0000282:b0226bc8-e12f-4285-a3a8-5c1878c815c0", "row_index": 282, "timestamp": "2019-07-08T15:21:25Z", "event_type": "DescribeTrails", "event_source": "cloudtrail.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "251.209.251.231", "user_agent": "Boto3/1.9.183 Python/3.6.8 Linux/3.10.0-957.21.3.el7.x86_64 Botocore/1.12.183", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 851, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "readOnly", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "b0226bc8-e12f-4285-a3a8-5c1878c815c0", "eventTime": "2019-07-08T15:21:25Z", "eventName": "DescribeTrails", "eventSource": "cloudtrail.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "251.209.251.231", "userAgent": "Boto3/1.9.183 Python/3.6.8 Linux/3.10.0-957.21.3.el7.x86_64 Botocore/1.12.183", "awsRegion": "us-west-2", "errorCode": "AccessDenied", "errorMessage": "User: arn:aws:iam::811596193553:user/backup is not authorized to perform: cloudtrail:DescribeTrails", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "8bc325ec-d221-4489-9cb9-9c01fb79d50b", "record_id": "flaws_cloudtrail:0000283:8bc325ec-d221-4489-9cb9-9c01fb79d50b", "row_index": 283, "timestamp": "2019-07-08T15:21:26Z", "event_type": "DescribeAlarms", "event_source": "monitoring.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "251.209.251.231", "user_agent": "Boto3/1.9.183 Python/3.6.8 Linux/3.10.0-957.21.3.el7.x86_64 Botocore/1.12.183", "aws_region": "ap-northeast-2"}, "resource_arns": [], "raw_record_size_bytes": 909, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "8bc325ec-d221-4489-9cb9-9c01fb79d50b", "eventTime": "2019-07-08T15:21:26Z", "eventName": "DescribeAlarms", "eventSource": "monitoring.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "251.209.251.231", "userAgent": "Boto3/1.9.183 Python/3.6.8 Linux/3.10.0-957.21.3.el7.x86_64 Botocore/1.12.183", "awsRegion": "ap-northeast-2", "errorCode": "AccessDenied", "errorMessage": "User: arn:aws:iam::811596193553:user/backup is not authorized to perform: cloudwatch:DescribeAlarms on resource: arn:aws:cloudwatch:ap-northeast-2:811596193553:alarm:*", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "c0df0a12-2269-4b20-b4fd-61330717484e", "record_id": "flaws_cloudtrail:0000284:c0df0a12-2269-4b20-b4fd-61330717484e", "row_index": 284, "timestamp": "2019-07-08T15:21:26Z", "event_type": "ListFunctions202224", "event_source": "lambda.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "251.209.251.231", "user_agent": "Boto3/1.9.183 Python/3.6.8 Linux/3.10.0-957.21.3.el7.x86_64 Botocore/1.12.183", "aws_region": "ap-south-1"}, "resource_arns": [], "raw_record_size_bytes": 848, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "c0df0a12-2269-4b20-b4fd-61330717484e", "eventTime": "2019-07-08T15:21:26Z", "eventName": "ListFunctions202224", "eventSource": "lambda.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "251.209.251.231", "userAgent": "Boto3/1.9.183 Python/3.6.8 Linux/3.10.0-957.21.3.el7.x86_64 Botocore/1.12.183", "awsRegion": "ap-south-1", "errorCode": "AccessDenied", "errorMessage": "User: arn:aws:iam::811596193553:user/backup is not authorized to perform: lambda:ListFunctions on resource: *", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "9f51816a-90d2-4f0d-8493-cabc5f547308", "record_id": "flaws_cloudtrail:0000285:9f51816a-90d2-4f0d-8493-cabc5f547308", "row_index": 285, "timestamp": "2019-07-08T15:21:26Z", "event_type": "DescribeAlarms", "event_source": "monitoring.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "251.209.251.231", "user_agent": "Boto3/1.9.183 Python/3.6.8 Linux/3.10.0-957.21.3.el7.x86_64 Botocore/1.12.183", "aws_region": "ap-southeast-1"}, "resource_arns": [], "raw_record_size_bytes": 909, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "9f51816a-90d2-4f0d-8493-cabc5f547308", "eventTime": "2019-07-08T15:21:26Z", "eventName": "DescribeAlarms", "eventSource": "monitoring.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "251.209.251.231", "userAgent": "Boto3/1.9.183 Python/3.6.8 Linux/3.10.0-957.21.3.el7.x86_64 Botocore/1.12.183", "awsRegion": "ap-southeast-1", "errorCode": "AccessDenied", "errorMessage": "User: arn:aws:iam::811596193553:user/backup is not authorized to perform: cloudwatch:DescribeAlarms on resource: arn:aws:cloudwatch:ap-southeast-1:811596193553:alarm:*", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "d5a3b5d6-c32b-445e-b2f6-81492ab818f", "record_id": "flaws_cloudtrail:0000286:d5a3b5d6-c32b-445e-b2f6-81492ab818f", "row_index": 286, "timestamp": "2019-07-08T15:21:26Z", "event_type": "DescribeAlarms", "event_source": "monitoring.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "251.209.251.231", "user_agent": "Boto3/1.9.183 Python/3.6.8 Linux/3.10.0-957.21.3.el7.x86_64 Botocore/1.12.183", "aws_region": "ap-southeast-2"}, "resource_arns": [], "raw_record_size_bytes": 909, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "d5a3b5d6-c32b-445e-b2f6-81492ab818f", "eventTime": "2019-07-08T15:21:26Z", "eventName": "DescribeAlarms", "eventSource": "monitoring.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "251.209.251.231", "userAgent": "Boto3/1.9.183 Python/3.6.8 Linux/3.10.0-957.21.3.el7.x86_64 Botocore/1.12.183", "awsRegion": "ap-southeast-2", "errorCode": "AccessDenied", "errorMessage": "User: arn:aws:iam::811596193553:user/backup is not authorized to perform: cloudwatch:DescribeAlarms on resource: arn:aws:cloudwatch:ap-southeast-2:811596193553:alarm:*", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "1ed672cb-e705-454a-9001-aa7aa6d1c384", "record_id": "flaws_cloudtrail:0000287:1ed672cb-e705-454a-9001-aa7aa6d1c384", "row_index": 287, "timestamp": "2019-07-08T15:21:26Z", "event_type": "ListFunctions202224", "event_source": "lambda.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "251.209.251.231", "user_agent": "Boto3/1.9.183 Python/3.6.8 Linux/3.10.0-957.21.3.el7.x86_64 Botocore/1.12.183", "aws_region": "eu-central-1"}, "resource_arns": [], "raw_record_size_bytes": 850, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "1ed672cb-e705-454a-9001-aa7aa6d1c384", "eventTime": "2019-07-08T15:21:26Z", "eventName": "ListFunctions202224", "eventSource": "lambda.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "251.209.251.231", "userAgent": "Boto3/1.9.183 Python/3.6.8 Linux/3.10.0-957.21.3.el7.x86_64 Botocore/1.12.183", "awsRegion": "eu-central-1", "errorCode": "AccessDenied", "errorMessage": "User: arn:aws:iam::811596193553:user/backup is not authorized to perform: lambda:ListFunctions on resource: *", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "9bd1e5fe-4326-4a2a-a544-222985ff5aebf", "record_id": "flaws_cloudtrail:0000288:9bd1e5fe-4326-4a2a-a544-222985ff5aebf", "row_index": 288, "timestamp": "2019-07-08T15:21:26Z", "event_type": "DescribeAlarms", "event_source": "monitoring.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "251.209.251.231", "user_agent": "Boto3/1.9.183 Python/3.6.8 Linux/3.10.0-957.21.3.el7.x86_64 Botocore/1.12.183", "aws_region": "eu-west-1"}, "resource_arns": [], "raw_record_size_bytes": 900, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "9bd1e5fe-4326-4a2a-a544-222985ff5aebf", "eventTime": "2019-07-08T15:21:26Z", "eventName": "DescribeAlarms", "eventSource": "monitoring.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "251.209.251.231", "userAgent": "Boto3/1.9.183 Python/3.6.8 Linux/3.10.0-957.21.3.el7.x86_64 Botocore/1.12.183", "awsRegion": "eu-west-1", "errorCode": "AccessDenied", "errorMessage": "User: arn:aws:iam::811596193553:user/backup is not authorized to perform: cloudwatch:DescribeAlarms on resource: arn:aws:cloudwatch:eu-west-1:811596193553:alarm:*", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "049479a47-1f1a-474b-99ab-1d3f44892c44", "record_id": "flaws_cloudtrail:0000289:049479a47-1f1a-474b-99ab-1d3f44892c44", "row_index": 289, "timestamp": "2019-07-08T15:21:26Z", "event_type": "DescribeAlarms", "event_source": "monitoring.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "251.209.251.231", "user_agent": "Boto3/1.9.183 Python/3.6.8 Linux/3.10.0-957.21.3.el7.x86_64 Botocore/1.12.183", "aws_region": "sa-east-1"}, "resource_arns": [], "raw_record_size_bytes": 900, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "049479a47-1f1a-474b-99ab-1d3f44892c44", "eventTime": "2019-07-08T15:21:26Z", "eventName": "DescribeAlarms", "eventSource": "monitoring.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "251.209.251.231", "userAgent": "Boto3/1.9.183 Python/3.6.8 Linux/3.10.0-957.21.3.el7.x86_64 Botocore/1.12.183", "awsRegion": "sa-east-1", "errorCode": "AccessDenied", "errorMessage": "User: arn:aws:iam::811596193553:user/backup is not authorized to perform: cloudwatch:DescribeAlarms on resource: arn:aws:cloudwatch:sa-east-1:811596193553:alarm:*", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "e142864-f295-4ebc-9858-ec0b890876", "record_id": "flaws_cloudtrail:0000290:e142864-f295-4ebc-9858-ec0b890876", "row_index": 290, "timestamp": "2019-07-08T15:21:26Z", "event_type": "DescribeAlarms", "event_source": "monitoring.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "251.209.251.231", "user_agent": "Boto3/1.9.183 Python/3.6.8 Linux/3.10.0-957.21.3.el7.x86_64 Botocore/1.12.183", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 896, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "e142864-f295-4ebc-9858-ec0b890876", "eventTime": "2019-07-08T15:21:26Z", "eventName": "DescribeAlarms", "eventSource": "monitoring.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "251.209.251.231", "userAgent": "Boto3/1.9.183 Python/3.6.8 Linux/3.10.0-957.21.3.el7.x86_64 Botocore/1.12.183", "awsRegion": "us-east-1", "errorCode": "AccessDenied", "errorMessage": "User: arn:aws:iam::811596193553:user/backup is not authorized to perform: cloudwatch:DescribeAlarms on resource: arn:aws:cloudwatch:us-east-1:811596193553:alarm:*", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "1080cf50-cc97-4645-ab15-017941b5ac", "record_id": "flaws_cloudtrail:0000291:1080cf50-cc97-4645-ab15-017941b5ac", "row_index": 291, "timestamp": "2019-07-08T15:21:26Z", "event_type": "DescribeAlarms", "event_source": "monitoring.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "251.209.251.231", "user_agent": "Boto3/1.9.183 Python/3.6.8 Linux/3.10.0-957.21.3.el7.x86_64 Botocore/1.12.183", "aws_region": "us-east-2"}, "resource_arns": [], "raw_record_size_bytes": 897, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "1080cf50-cc97-4645-ab15-017941b5ac", "eventTime": "2019-07-08T15:21:26Z", "eventName": "DescribeAlarms", "eventSource": "monitoring.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "251.209.251.231", "userAgent": "Boto3/1.9.183 Python/3.6.8 Linux/3.10.0-957.21.3.el7.x86_64 Botocore/1.12.183", "awsRegion": "us-east-2", "errorCode": "AccessDenied", "errorMessage": "User: arn:aws:iam::811596193553:user/backup is not authorized to perform: cloudwatch:DescribeAlarms on resource: arn:aws:cloudwatch:us-east-2:811596193553:alarm:*", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "e9c673926-54a1-4e34-9d0a-4c3bb34dba27", "record_id": "flaws_cloudtrail:0000292:e9c673926-54a1-4e34-9d0a-4c3bb34dba27", "row_index": 292, "timestamp": "2019-07-08T15:21:26Z", "event_type": "DescribeAlarms", "event_source": "monitoring.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "251.209.251.231", "user_agent": "Boto3/1.9.183 Python/3.6.8 Linux/3.10.0-957.21.3.el7.x86_64 Botocore/1.12.183", "aws_region": "us-west-1"}, "resource_arns": [], "raw_record_size_bytes": 900, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "e9c673926-54a1-4e34-9d0a-4c3bb34dba27", "eventTime": "2019-07-08T15:21:26Z", "eventName": "DescribeAlarms", "eventSource": "monitoring.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "251.209.251.231", "userAgent": "Boto3/1.9.183 Python/3.6.8 Linux/3.10.0-957.21.3.el7.x86_64 Botocore/1.12.183", "awsRegion": "us-west-1", "errorCode": "AccessDenied", "errorMessage": "User: arn:aws:iam::811596193553:user/backup is not authorized to perform: cloudwatch:DescribeAlarms on resource: arn:aws:cloudwatch:us-west-1:811596193553:alarm:*", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "bffd908c-0bc4-4197-b91f-6f3920bab444", "record_id": "flaws_cloudtrail:0000293:bffd908c-0bc4-4197-b91f-6f3920bab444", "row_index": 293, "timestamp": "2019-07-08T15:21:26Z", "event_type": "DescribeAlarms", "event_source": "monitoring.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "251.209.251.231", "user_agent": "Boto3/1.9.183 Python/3.6.8 Linux/3.10.0-957.21.3.el7.x86_64 Botocore/1.12.183", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 898, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "bffd908c-0bc4-4197-b91f-6f3920bab444", "eventTime": "2019-07-08T15:21:26Z", "eventName": "DescribeAlarms", "eventSource": "monitoring.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "251.209.251.231", "userAgent": "Boto3/1.9.183 Python/3.6.8 Linux/3.10.0-957.21.3.el7.x86_64 Botocore/1.12.183", "awsRegion": "us-west-2", "errorCode": "AccessDenied", "errorMessage": "User: arn:aws:iam::811596193553:user/backup is not authorized to perform: cloudwatch:DescribeAlarms on resource: arn:aws:cloudwatch:us-west-2:811596193553:alarm:*", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "8bc325ec-d221-4489-9cb9-9c01fb79d50b", "record_id": "flaws_cloudtrail:0000294:8bc325ec-d221-4489-9cb9-9c01fb79d50b", "row_index": 294, "timestamp": "2019-07-08T15:21:26Z", "event_type": "DescribeAlarms", "event_source": "monitoring.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "251.209.251.231", "user_agent": "Boto3/1.9.183 Python/3.6.8 Linux/3.10.0-957.21.3.el7.x86_64 Botocore/1.12.183", "aws_region": "ap-northeast-2"}, "resource_arns": [], "raw_record_size_bytes": 909, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "8bc325ec-d221-4489-9cb9-9c01fb79d50b", "eventTime": "2019-07-08T15:21:26Z", "eventName": "DescribeAlarms", "eventSource": "monitoring.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "251.209.251.231", "userAgent": "Boto3/1.9.183 Python/3.6.8 Linux/3.10.0-957.21.3.el7.x86_64 Botocore/1.12.183", "awsRegion": "ap-northeast-2", "errorCode": "AccessDenied", "errorMessage": "User: arn:aws:iam::811596193553:user/backup is not authorized to perform: cloudwatch:DescribeAlarms on resource: arn:aws:cloudwatch:ap-northeast-2:811596193553:alarm:*", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "c0df0a12-2269-4b20-b4fd-61330717484e", "record_id": "flaws_cloudtrail:0000295:c0df0a12-2269-4b20-b4fd-61330717484e", "row_index": 295, "timestamp": "2019-07-08T15:21:26Z", "event_type": "ListFunctions202224", "event_source": "lambda.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "251.209.251.231", "user_agent": "Boto3/1.9.183 Python/3.6.8 Linux/3.10.0-957.21.3.el7.x86_64 Botocore/1.12.183", "aws_region": "ap-south-1"}, "resource_arns": [], "raw_record_size_bytes": 848, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "c0df0a12-2269-4b20-b4fd-61330717484e", "eventTime": "2019-07-08T15:21:26Z", "eventName": "ListFunctions202224", "eventSource": "lambda.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "251.209.251.231", "userAgent": "Boto3/1.9.183 Python/3.6.8 Linux/3.10.0-957.21.3.el7.x86_64 Botocore/1.12.183", "awsRegion": "ap-south-1", "errorCode": "AccessDenied", "errorMessage": "User: arn:aws:iam::811596193553:user/backup is not authorized to perform: lambda:ListFunctions on resource: *", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "9f51816a-90d2-4f0d-8493-cabc5f547308", "record_id": "flaws_cloudtrail:0000296:9f51816a-90d2-4f0d-8493-cabc5f547308", "row_index": 296, "timestamp": "2019-07-08T15:21:26Z", "event_type": "DescribeAlarms", "event_source": "monitoring.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "251.209.251.231", "user_agent": "Boto3/1.9.183 Python/3.6.8 Linux/3.10.0-957.21.3.el7.x86_64 Botocore/1.12.183", "aws_region": "ap-southeast-1"}, "resource_arns": [], "raw_record_size_bytes": 909, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "9f51816a-90d2-4f0d-8493-cabc5f547308", "eventTime": "2019-07-08T15:21:26Z", "eventName": "DescribeAlarms", "eventSource": "monitoring.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "251.209.251.231", "userAgent": "Boto3/1.9.183 Python/3.6.8 Linux/3.10.0-957.21.3.el7.x86_64 Botocore/1.12.183", "awsRegion": "ap-southeast-1", "errorCode": "AccessDenied", "errorMessage": "User: arn:aws:iam::811596193553:user/backup is not authorized to perform: cloudwatch:DescribeAlarms on resource: arn:aws:cloudwatch:ap-southeast-1:811596193553:alarm:*", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "d5a3b5d6-c32b-445e-b2f6-81492ab818f", "record_id": "flaws_cloudtrail:0000297:d5a3b5d6-c32b-445e-b2f6-81492ab818f", "row_index": 297, "timestamp": "2019-07-08T15:21:26Z", "event_type": "DescribeAlarms", "event_source": "monitoring.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "251.209.251.231", "user_agent": "Boto3/1.9.183 Python/3.6.8 Linux/3.10.0-957.21.3.el7.x86_64 Botocore/1.12.183", "aws_region": "ap-southeast-2"}, "resource_arns": [], "raw_record_size_bytes": 909, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "d5a3b5d6-c32b-445e-b2f6-81492ab818f", "eventTime": "2019-07-08T15:21:26Z", "eventName": "DescribeAlarms", "eventSource": "monitoring.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "251.209.251.231", "userAgent": "Boto3/1.9.183 Python/3.6.8 Linux/3.10.0-957.21.3.el7.x86_64 Botocore/1.12.183", "awsRegion": "ap-southeast-2", "errorCode": "AccessDenied", "errorMessage": "User: arn:aws:iam::811596193553:user/backup is not authorized to perform: cloudwatch:DescribeAlarms on resource: arn:aws:cloudwatch:ap-southeast-2:811596193553:alarm:*", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "1ed672cb-e705-454a-9001-aa7aa6d1c384", "record_id": "flaws_cloudtrail:0000298:1ed672cb-e705-454a-9001-aa7aa6d1c384", "row_index": 298, "timestamp": "2019-07-08T15:21:26Z", "event_type": "ListFunctions202224", "event_source": "lambda.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "251.209.251.231", "user_agent": "Boto3/1.9.183 Python/3.6.8 Linux/3.10.0-957.21.3.el7.x86_64 Botocore/1.12.183", "aws_region": "eu-central-1"}, "resource_arns": [], "raw_record_size_bytes": 850, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "1ed672cb-e705-454a-9001-aa7aa6d1c384", "eventTime": "2019-07-08T15:21:26Z", "eventName": "ListFunctions202224", "eventSource": "lambda.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "251.209.251.231", "userAgent": "Boto3/1.9.183 Python/3.6.8 Linux/3.10.0-957.21.3.el7.x86_64 Botocore/1.12.183", "awsRegion": "eu-central-1", "errorCode": "AccessDenied", "errorMessage": "User: arn:aws:iam::811596193553:user/backup is not authorized to perform: lambda:ListFunctions on resource: *", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "9bd1e5fe-4326-4a2a-a544-222985ff5aebf", "record_id": "flaws_cloudtrail:0000299:9bd1e5fe-4326-4a2a-a544-222985ff5aebf", "row_index": 299, "timestamp": "2019-07-08T15:21:26Z", "event_type": "DescribeAlarms", "event_source": "monitoring.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "251.209.251.231", "user_agent": "Boto3/1.9.183 Python/3.6.8 Linux/3.10.0-957.21.3.el7.x86_64 Botocore/1.12.183", "aws_region": "eu-west-1"}, "resource_arns": [], "raw_record_size_bytes": 900, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "9bd1e5fe-4326-4a2a-a544-222985ff5aebf", "eventTime": "2019-07-08T15:21:26Z", "eventName": "DescribeAlarms", "eventSource": "monitoring.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "251.209.251.231", "userAgent": "Boto3/1.9.183 Python/3.6.8 Linux/3.10.0-957.21.3.el7.x86_64 Botocore/1.12.183", "awsRegion": "eu-west-1", "errorCode": "AccessDenied", "errorMessage": "User: arn:aws:iam::811596193553:user/backup is not authorized to perform: cloudwatch:DescribeAlarms on resource: arn:aws:cloudwatch:eu-west-1:811596193553:alarm:*", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "049479a47-1f1a-474b-99ab-1d3f44892c44", "record_id": "flaws_cloudtrail:0000300:049479a47-1f1a-474b-99ab-1d3f44892c44", "row_index": 300, "timestamp": "2019-07-08T15:21:26Z", "event_type": "DescribeAlarms", "event_source": "monitoring.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "251.209.251.231", "user_agent": "Boto3/1.9.183 Python/3.6.8 Linux/3.10.0-957.21.3.el7.x86_64 Botocore/1.12.183", "aws_region": "sa-east-1"}, "resource_arns": [], "raw_record_size_bytes": 900, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "049479a47-1f1a-474b-99ab-1d3f44892c44", "eventTime": "2019-07-08T15:21:26Z", "eventName": "DescribeAlarms", "eventSource": "monitoring.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "251.209.251.231", "userAgent": "Boto3/1.9.183 Python/3.6.8 Linux/3.10.0-957.21.3.el7.x86_64 Botocore/1.12.183", "awsRegion": "sa-east-1", "errorCode": "AccessDenied", "errorMessage": "User: arn:aws:iam::811596193553:user/backup is not authorized to perform: cloudwatch:DescribeAlarms on resource: arn:aws:cloudwatch:sa-east-1:811596193553:alarm:*", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "e142864-f295-4ebc-9858-ec0b890876", "record_id": "flaws_cloudtrail:0000301:e142864-f295-4ebc-9858-ec0b890876", "row_index": 301, "timestamp": "2019-07-08T15:21:26Z", "event_type": "DescribeAlarms", "event_source": "monitoring.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "251.209.251.231", "user_agent": "Boto3/1.9.183 Python/3.6.8 Linux/3.10.0-957.21.3.el7.x86_64 Botocore/1.12.183", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 896, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "e142864-f295-4ebc-9858-ec0b890876", "eventTime": "2019-07-08T15:21:26Z", "eventName": "DescribeAlarms", "eventSource": "monitoring.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "251.209.251.231", "userAgent": "Boto3/1.9.183 Python/3.6.8 Linux/3.10.0-957.21.3.el7.x86_64 Botocore/1.12.183", "awsRegion": "us-east-1", "errorCode": "AccessDenied", "errorMessage": "User: arn:aws:iam::811596193553:user/backup is not authorized to perform: cloudwatch:DescribeAlarms on resource: arn:aws:cloudwatch:us-east-1:811596193553:alarm:*", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "1080cf50-cc97-4645-ab15-017941b5ac", "record_id": "flaws_cloudtrail:0000302:1080cf50-cc97-4645-ab15-017941b5ac", "row_index": 302, "timestamp": "2019-07-08T15:21:26Z", "event_type": "DescribeAlarms", "event_source": "monitoring.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "251.209.251.231", "user_agent": "Boto3/1.9.183 Python/3.6.8 Linux/3.10.0-957.21.3.el7.x86_64 Botocore/1.12.183", "aws_region": "us-east-2"}, "resource_arns": [], "raw_record_size_bytes": 897, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "1080cf50-cc97-4645-ab15-017941b5ac", "eventTime": "2019-07-08T15:21:26Z", "eventName": "DescribeAlarms", "eventSource": "monitoring.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "251.209.251.231", "userAgent": "Boto3/1.9.183 Python/3.6.8 Linux/3.10.0-957.21.3.el7.x86_64 Botocore/1.12.183", "awsRegion": "us-east-2", "errorCode": "AccessDenied", "errorMessage": "User: arn:aws:iam::811596193553:user/backup is not authorized to perform: cloudwatch:DescribeAlarms on resource: arn:aws:cloudwatch:us-east-2:811596193553:alarm:*", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "e9c673926-54a1-4e34-9d0a-4c3bb34dba27", "record_id": "flaws_cloudtrail:0000303:e9c673926-54a1-4e34-9d0a-4c3bb34dba27", "row_index": 303, "timestamp": "2019-07-08T15:21:26Z", "event_type": "DescribeAlarms", "event_source": "monitoring.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "251.209.251.231", "user_agent": "Boto3/1.9.183 Python/3.6.8 Linux/3.10.0-957.21.3.el7.x86_64 Botocore/1.12.183", "aws_region": "us-west-1"}, "resource_arns": [], "raw_record_size_bytes": 900, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "e9c673926-54a1-4e34-9d0a-4c3bb34dba27", "eventTime": "2019-07-08T15:21:26Z", "eventName": "DescribeAlarms", "eventSource": "monitoring.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "251.209.251.231", "userAgent": "Boto3/1.9.183 Python/3.6.8 Linux/3.10.0-957.21.3.el7.x86_64 Botocore/1.12.183", "awsRegion": "us-west-1", "errorCode": "AccessDenied", "errorMessage": "User: arn:aws:iam::811596193553:user/backup is not authorized to perform: cloudwatch:DescribeAlarms on resource: arn:aws:cloudwatch:us-west-1:811596193553:alarm:*", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "bffd908c-0bc4-4197-b91f-6f3920bab444", "record_id": "flaws_cloudtrail:0000304:bffd908c-0bc4-4197-b91f-6f3920bab444", "row_index": 304, "timestamp": "2019-07-08T15:21:26Z", "event_type": "DescribeAlarms", "event_source": "monitoring.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "251.209.251.231", "user_agent": "Boto3/1.9.183 Python/3.6.8 Linux/3.10.0-957.21.3.el7.x86_64 Botocore/1.12.183", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 898, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "bffd908c-0bc4-4197-b91f-6f3920bab444", "eventTime": "2019-07-08T15:21:26Z", "eventName": "DescribeAlarms", "eventSource": "monitoring.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "251.209.251.231", "userAgent": "Boto3/1.9.183 Python/3.6.8 Linux/3.10.0-957.21.3.el7.x86_64 Botocore/1.12.183", "awsRegion": "us-west-2", "errorCode": "AccessDenied", "errorMessage": "User: arn:aws:iam::811596193553:user/backup is not authorized to perform: cloudwatch:DescribeAlarms on resource: arn:aws:cloudwatch:us-west-2:811596193553:alarm:*", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "ec08e532-5196-41bd-9c50-a8985e71ab01", "record_id": "flaws_cloudtrail:0000305:ec08e532-5196-41bd-9c50-a8985e71ab01", "row_index": 305, "timestamp": "2019-07-08T15:21:27Z", "event_type": "ListFunctions202224", "event_source": "lambda.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "251.209.251.231", "user_agent": "Boto3/1.9.183 Python/3.6.8 Linux/3.10.0-957.21.3.el7.x86_64 Botocore/1.12.183", "aws_region": "ap-northeast-1"}, "resource_arns": [], "raw_record_size_bytes": 852, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "ec08e532-5196-41bd-9c50-a8985e71ab01", "eventTime": "2019-07-08T15:21:27Z", "eventName": "ListFunctions202224", "eventSource": "lambda.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "251.209.251.231", "userAgent": "Boto3/1.9.183 Python/3.6.8 Linux/3.10.0-957.21.3.el7.x86_64 Botocore/1.12.183", "awsRegion": "ap-northeast-1", "errorCode": "AccessDenied", "errorMessage": "User: arn:aws:iam::811596193553:user/backup is not authorized to perform: lambda:ListFunctions on resource: *", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "609149a7-8f76-428e-beb6-0f437cbeb2b3", "record_id": "flaws_cloudtrail:0000306:609149a7-8f76-428e-beb6-0f437cbeb2b3", "row_index": 306, "timestamp": "2019-07-08T15:21:27Z", "event_type": "ListFunctions202224", "event_source": "lambda.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "251.209.251.231", "user_agent": "Boto3/1.9.183 Python/3.6.8 Linux/3.10.0-957.21.3.el7.x86_64 Botocore/1.12.183", "aws_region": "ap-northeast-2"}, "resource_arns": [], "raw_record_size_bytes": 852, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "609149a7-8f76-428e-beb6-0f437cbeb2b3", "eventTime": "2019-07-08T15:21:27Z", "eventName": "ListFunctions202224", "eventSource": "lambda.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "251.209.251.231", "userAgent": "Boto3/1.9.183 Python/3.6.8 Linux/3.10.0-957.21.3.el7.x86_64 Botocore/1.12.183", "awsRegion": "ap-northeast-2", "errorCode": "AccessDenied", "errorMessage": "User: arn:aws:iam::811596193553:user/backup is not authorized to perform: lambda:ListFunctions on resource: *", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "0569fdd1-511c-4283-b216-bdfbd5be63fa", "record_id": "flaws_cloudtrail:0000307:0569fdd1-511c-4283-b216-bdfbd5be63fa", "row_index": 307, "timestamp": "2019-07-08T15:21:27Z", "event_type": "ListFunctions202224", "event_source": "lambda.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "251.209.251.231", "user_agent": "Boto3/1.9.183 Python/3.6.8 Linux/3.10.0-957.21.3.el7.x86_64 Botocore/1.12.183", "aws_region": "ap-southeast-1"}, "resource_arns": [], "raw_record_size_bytes": 851, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "0569fdd1-511c-4283-b216-bdfbd5be63fa", "eventTime": "2019-07-08T15:21:27Z", "eventName": "ListFunctions202224", "eventSource": "lambda.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "251.209.251.231", "userAgent": "Boto3/1.9.183 Python/3.6.8 Linux/3.10.0-957.21.3.el7.x86_64 Botocore/1.12.183", "awsRegion": "ap-southeast-1", "errorCode": "AccessDenied", "errorMessage": "User: arn:aws:iam::811596193553:user/backup is not authorized to perform: lambda:ListFunctions on resource: *", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "578703e3f-e87f-4129-bd78-21ffd0c8d9be", "record_id": "flaws_cloudtrail:0000308:578703e3f-e87f-4129-bd78-21ffd0c8d9be", "row_index": 308, "timestamp": "2019-07-08T15:21:27Z", "event_type": "ListFunctions202224", "event_source": "lambda.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "251.209.251.231", "user_agent": "Boto3/1.9.183 Python/3.6.8 Linux/3.10.0-957.21.3.el7.x86_64 Botocore/1.12.183", "aws_region": "ap-southeast-2"}, "resource_arns": [], "raw_record_size_bytes": 853, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "578703e3f-e87f-4129-bd78-21ffd0c8d9be", "eventTime": "2019-07-08T15:21:27Z", "eventName": "ListFunctions202224", "eventSource": "lambda.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "251.209.251.231", "userAgent": "Boto3/1.9.183 Python/3.6.8 Linux/3.10.0-957.21.3.el7.x86_64 Botocore/1.12.183", "awsRegion": "ap-southeast-2", "errorCode": "AccessDenied", "errorMessage": "User: arn:aws:iam::811596193553:user/backup is not authorized to perform: lambda:ListFunctions on resource: *", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "31e38eef-2d22-4bd9-9dbf-3ff2f34fd86c", "record_id": "flaws_cloudtrail:0000309:31e38eef-2d22-4bd9-9dbf-3ff2f34fd86c", "row_index": 309, "timestamp": "2019-07-08T15:21:27Z", "event_type": "ListFunctions202224", "event_source": "lambda.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "251.209.251.231", "user_agent": "Boto3/1.9.183 Python/3.6.8 Linux/3.10.0-957.21.3.el7.x86_64 Botocore/1.12.183", "aws_region": "ca-central-1"}, "resource_arns": [], "raw_record_size_bytes": 851, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "31e38eef-2d22-4bd9-9dbf-3ff2f34fd86c", "eventTime": "2019-07-08T15:21:27Z", "eventName": "ListFunctions202224", "eventSource": "lambda.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "251.209.251.231", "userAgent": "Boto3/1.9.183 Python/3.6.8 Linux/3.10.0-957.21.3.el7.x86_64 Botocore/1.12.183", "awsRegion": "ca-central-1", "errorCode": "AccessDenied", "errorMessage": "User: arn:aws:iam::811596193553:user/backup is not authorized to perform: lambda:ListFunctions on resource: *", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "74adcb84-d694-4db0-b132-6bfc96f11b28", "record_id": "flaws_cloudtrail:0000310:74adcb84-d694-4db0-b132-6bfc96f11b28", "row_index": 310, "timestamp": "2019-07-08T15:21:27Z", "event_type": "ListFunctions202224", "event_source": "lambda.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "251.209.251.231", "user_agent": "Boto3/1.9.183 Python/3.6.8 Linux/3.10.0-957.21.3.el7.x86_64 Botocore/1.12.183", "aws_region": "eu-north-1"}, "resource_arns": [], "raw_record_size_bytes": 848, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "74adcb84-d694-4db0-b132-6bfc96f11b28", "eventTime": "2019-07-08T15:21:27Z", "eventName": "ListFunctions202224", "eventSource": "lambda.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "251.209.251.231", "userAgent": "Boto3/1.9.183 Python/3.6.8 Linux/3.10.0-957.21.3.el7.x86_64 Botocore/1.12.183", "awsRegion": "eu-north-1", "errorCode": "AccessDenied", "errorMessage": "User: arn:aws:iam::811596193553:user/backup is not authorized to perform: lambda:ListFunctions on resource: *", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "6f8372dd-aee3-46c3-b736-7282e9aab152", "record_id": "flaws_cloudtrail:0000311:6f8372dd-aee3-46c3-b736-7282e9aab152", "row_index": 311, "timestamp": "2019-07-08T15:21:27Z", "event_type": "ListFunctions202224", "event_source": "lambda.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "251.209.251.231", "user_agent": "Boto3/1.9.183 Python/3.6.8 Linux/3.10.0-957.21.3.el7.x86_64 Botocore/1.12.183", "aws_region": "eu-west-1"}, "resource_arns": [], "raw_record_size_bytes": 845, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "6f8372dd-aee3-46c3-b736-7282e9aab152", "eventTime": "2019-07-08T15:21:27Z", "eventName": "ListFunctions202224", "eventSource": "lambda.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "251.209.251.231", "userAgent": "Boto3/1.9.183 Python/3.6.8 Linux/3.10.0-957.21.3.el7.x86_64 Botocore/1.12.183", "awsRegion": "eu-west-1", "errorCode": "AccessDenied", "errorMessage": "User: arn:aws:iam::811596193553:user/backup is not authorized to perform: lambda:ListFunctions on resource: *", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "36e87c0a-b95a-4a07-a0c9-45ad26c1132b", "record_id": "flaws_cloudtrail:0000312:36e87c0a-b95a-4a07-a0c9-45ad26c1132b", "row_index": 312, "timestamp": "2019-07-08T15:21:27Z", "event_type": "ListFunctions202224", "event_source": "lambda.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "251.209.251.231", "user_agent": "Boto3/1.9.183 Python/3.6.8 Linux/3.10.0-957.21.3.el7.x86_64 Botocore/1.12.183", "aws_region": "eu-west-2"}, "resource_arns": [], "raw_record_size_bytes": 847, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "36e87c0a-b95a-4a07-a0c9-45ad26c1132b", "eventTime": "2019-07-08T15:21:27Z", "eventName": "ListFunctions202224", "eventSource": "lambda.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "251.209.251.231", "userAgent": "Boto3/1.9.183 Python/3.6.8 Linux/3.10.0-957.21.3.el7.x86_64 Botocore/1.12.183", "awsRegion": "eu-west-2", "errorCode": "AccessDenied", "errorMessage": "User: arn:aws:iam::811596193553:user/backup is not authorized to perform: lambda:ListFunctions on resource: *", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "9734e95f-976c-4455-abb6-1f6edfe0913c", "record_id": "flaws_cloudtrail:0000313:9734e95f-976c-4455-abb6-1f6edfe0913c", "row_index": 313, "timestamp": "2019-07-08T15:21:27Z", "event_type": "ListFunctions202224", "event_source": "lambda.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "251.209.251.231", "user_agent": "Boto3/1.9.183 Python/3.6.8 Linux/3.10.0-957.21.3.el7.x86_64 Botocore/1.12.183", "aws_region": "eu-west-3"}, "resource_arns": [], "raw_record_size_bytes": 848, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "9734e95f-976c-4455-abb6-1f6edfe0913c", "eventTime": "2019-07-08T15:21:27Z", "eventName": "ListFunctions202224", "eventSource": "lambda.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "251.209.251.231", "userAgent": "Boto3/1.9.183 Python/3.6.8 Linux/3.10.0-957.21.3.el7.x86_64 Botocore/1.12.183", "awsRegion": "eu-west-3", "errorCode": "AccessDenied", "errorMessage": "User: arn:aws:iam::811596193553:user/backup is not authorized to perform: lambda:ListFunctions on resource: *", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "4e9c0b91-ba79-44db-904a-15634b42c815", "record_id": "flaws_cloudtrail:0000314:4e9c0b91-ba79-44db-904a-15634b42c815", "row_index": 314, "timestamp": "2019-07-08T15:21:27Z", "event_type": "ListFunctions202224", "event_source": "lambda.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "251.209.251.231", "user_agent": "Boto3/1.9.183 Python/3.6.8 Linux/3.10.0-957.21.3.el7.x86_64 Botocore/1.12.183", "aws_region": "sa-east-1"}, "resource_arns": [], "raw_record_size_bytes": 846, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "4e9c0b91-ba79-44db-904a-15634b42c815", "eventTime": "2019-07-08T15:21:27Z", "eventName": "ListFunctions202224", "eventSource": "lambda.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "251.209.251.231", "userAgent": "Boto3/1.9.183 Python/3.6.8 Linux/3.10.0-957.21.3.el7.x86_64 Botocore/1.12.183", "awsRegion": "sa-east-1", "errorCode": "AccessDenied", "errorMessage": "User: arn:aws:iam::811596193553:user/backup is not authorized to perform: lambda:ListFunctions on resource: *", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "7776d47b-6acf-4ef0-b3ce-0ef43abf327f", "record_id": "flaws_cloudtrail:0000315:7776d47b-6acf-4ef0-b3ce-0ef43abf327f", "row_index": 315, "timestamp": "2019-07-08T15:21:27Z", "event_type": "ListFunctions202224", "event_source": "lambda.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "251.209.251.231", "user_agent": "Boto3/1.9.183 Python/3.6.8 Linux/3.10.0-957.21.3.el7.x86_64 Botocore/1.12.183", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 848, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "7776d47b-6acf-4ef0-b3ce-0ef43abf327f", "eventTime": "2019-07-08T15:21:27Z", "eventName": "ListFunctions202224", "eventSource": "lambda.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "251.209.251.231", "userAgent": "Boto3/1.9.183 Python/3.6.8 Linux/3.10.0-957.21.3.el7.x86_64 Botocore/1.12.183", "awsRegion": "us-east-1", "errorCode": "AccessDenied", "errorMessage": "User: arn:aws:iam::811596193553:user/backup is not authorized to perform: lambda:ListFunctions on resource: *", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "c384f87d-231a-471a-98c0-5ead43d7447d", "record_id": "flaws_cloudtrail:0000316:c384f87d-231a-471a-98c0-5ead43d7447d", "row_index": 316, "timestamp": "2019-07-08T15:21:27Z", "event_type": "ListFunctions202224", "event_source": "lambda.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "251.209.251.231", "user_agent": "Boto3/1.9.183 Python/3.6.8 Linux/3.10.0-957.21.3.el7.x86_64 Botocore/1.12.183", "aws_region": "us-east-2"}, "resource_arns": [], "raw_record_size_bytes": 847, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "c384f87d-231a-471a-98c0-5ead43d7447d", "eventTime": "2019-07-08T15:21:27Z", "eventName": "ListFunctions202224", "eventSource": "lambda.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "251.209.251.231", "userAgent": "Boto3/1.9.183 Python/3.6.8 Linux/3.10.0-957.21.3.el7.x86_64 Botocore/1.12.183", "awsRegion": "us-east-2", "errorCode": "AccessDenied", "errorMessage": "User: arn:aws:iam::811596193553:user/backup is not authorized to perform: lambda:ListFunctions on resource: *", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "02c644bf-b0b1-418d-9085-1fa47f60e178", "record_id": "flaws_cloudtrail:0000317:02c644bf-b0b1-418d-9085-1fa47f60e178", "row_index": 317, "timestamp": "2019-07-08T15:21:27Z", "event_type": "ListFunctions202224", "event_source": "lambda.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "251.209.251.231", "user_agent": "Boto3/1.9.183 Python/3.6.8 Linux/3.10.0-957.21.3.el7.x86_64 Botocore/1.12.183", "aws_region": "us-west-1"}, "resource_arns": [], "raw_record_size_bytes": 845, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "02c644bf-b0b1-418d-9085-1fa47f60e178", "eventTime": "2019-07-08T15:21:27Z", "eventName": "ListFunctions202224", "eventSource": "lambda.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "251.209.251.231", "userAgent": "Boto3/1.9.183 Python/3.6.8 Linux/3.10.0-957.21.3.el7.x86_64 Botocore/1.12.183", "awsRegion": "us-west-1", "errorCode": "AccessDenied", "errorMessage": "User: arn:aws:iam::811596193553:user/backup is not authorized to perform: lambda:ListFunctions on resource: *", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "ec08e532-5196-41bd-9c50-a8985e71ab01", "record_id": "flaws_cloudtrail:0000318:ec08e532-5196-41bd-9c50-a8985e71ab01", "row_index": 318, "timestamp": "2019-07-08T15:21:27Z", "event_type": "ListFunctions202224", "event_source": "lambda.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "251.209.251.231", "user_agent": "Boto3/1.9.183 Python/3.6.8 Linux/3.10.0-957.21.3.el7.x86_64 Botocore/1.12.183", "aws_region": "ap-northeast-1"}, "resource_arns": [], "raw_record_size_bytes": 852, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "ec08e532-5196-41bd-9c50-a8985e71ab01", "eventTime": "2019-07-08T15:21:27Z", "eventName": "ListFunctions202224", "eventSource": "lambda.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "251.209.251.231", "userAgent": "Boto3/1.9.183 Python/3.6.8 Linux/3.10.0-957.21.3.el7.x86_64 Botocore/1.12.183", "awsRegion": "ap-northeast-1", "errorCode": "AccessDenied", "errorMessage": "User: arn:aws:iam::811596193553:user/backup is not authorized to perform: lambda:ListFunctions on resource: *", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "609149a7-8f76-428e-beb6-0f437cbeb2b3", "record_id": "flaws_cloudtrail:0000319:609149a7-8f76-428e-beb6-0f437cbeb2b3", "row_index": 319, "timestamp": "2019-07-08T15:21:27Z", "event_type": "ListFunctions202224", "event_source": "lambda.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "251.209.251.231", "user_agent": "Boto3/1.9.183 Python/3.6.8 Linux/3.10.0-957.21.3.el7.x86_64 Botocore/1.12.183", "aws_region": "ap-northeast-2"}, "resource_arns": [], "raw_record_size_bytes": 852, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "609149a7-8f76-428e-beb6-0f437cbeb2b3", "eventTime": "2019-07-08T15:21:27Z", "eventName": "ListFunctions202224", "eventSource": "lambda.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "251.209.251.231", "userAgent": "Boto3/1.9.183 Python/3.6.8 Linux/3.10.0-957.21.3.el7.x86_64 Botocore/1.12.183", "awsRegion": "ap-northeast-2", "errorCode": "AccessDenied", "errorMessage": "User: arn:aws:iam::811596193553:user/backup is not authorized to perform: lambda:ListFunctions on resource: *", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "0569fdd1-511c-4283-b216-bdfbd5be63fa", "record_id": "flaws_cloudtrail:0000320:0569fdd1-511c-4283-b216-bdfbd5be63fa", "row_index": 320, "timestamp": "2019-07-08T15:21:27Z", "event_type": "ListFunctions202224", "event_source": "lambda.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "251.209.251.231", "user_agent": "Boto3/1.9.183 Python/3.6.8 Linux/3.10.0-957.21.3.el7.x86_64 Botocore/1.12.183", "aws_region": "ap-southeast-1"}, "resource_arns": [], "raw_record_size_bytes": 851, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "0569fdd1-511c-4283-b216-bdfbd5be63fa", "eventTime": "2019-07-08T15:21:27Z", "eventName": "ListFunctions202224", "eventSource": "lambda.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "251.209.251.231", "userAgent": "Boto3/1.9.183 Python/3.6.8 Linux/3.10.0-957.21.3.el7.x86_64 Botocore/1.12.183", "awsRegion": "ap-southeast-1", "errorCode": "AccessDenied", "errorMessage": "User: arn:aws:iam::811596193553:user/backup is not authorized to perform: lambda:ListFunctions on resource: *", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "578703e3f-e87f-4129-bd78-21ffd0c8d9be", "record_id": "flaws_cloudtrail:0000321:578703e3f-e87f-4129-bd78-21ffd0c8d9be", "row_index": 321, "timestamp": "2019-07-08T15:21:27Z", "event_type": "ListFunctions202224", "event_source": "lambda.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "251.209.251.231", "user_agent": "Boto3/1.9.183 Python/3.6.8 Linux/3.10.0-957.21.3.el7.x86_64 Botocore/1.12.183", "aws_region": "ap-southeast-2"}, "resource_arns": [], "raw_record_size_bytes": 853, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "578703e3f-e87f-4129-bd78-21ffd0c8d9be", "eventTime": "2019-07-08T15:21:27Z", "eventName": "ListFunctions202224", "eventSource": "lambda.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "251.209.251.231", "userAgent": "Boto3/1.9.183 Python/3.6.8 Linux/3.10.0-957.21.3.el7.x86_64 Botocore/1.12.183", "awsRegion": "ap-southeast-2", "errorCode": "AccessDenied", "errorMessage": "User: arn:aws:iam::811596193553:user/backup is not authorized to perform: lambda:ListFunctions on resource: *", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "31e38eef-2d22-4bd9-9dbf-3ff2f34fd86c", "record_id": "flaws_cloudtrail:0000322:31e38eef-2d22-4bd9-9dbf-3ff2f34fd86c", "row_index": 322, "timestamp": "2019-07-08T15:21:27Z", "event_type": "ListFunctions202224", "event_source": "lambda.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "251.209.251.231", "user_agent": "Boto3/1.9.183 Python/3.6.8 Linux/3.10.0-957.21.3.el7.x86_64 Botocore/1.12.183", "aws_region": "ca-central-1"}, "resource_arns": [], "raw_record_size_bytes": 851, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "31e38eef-2d22-4bd9-9dbf-3ff2f34fd86c", "eventTime": "2019-07-08T15:21:27Z", "eventName": "ListFunctions202224", "eventSource": "lambda.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "251.209.251.231", "userAgent": "Boto3/1.9.183 Python/3.6.8 Linux/3.10.0-957.21.3.el7.x86_64 Botocore/1.12.183", "awsRegion": "ca-central-1", "errorCode": "AccessDenied", "errorMessage": "User: arn:aws:iam::811596193553:user/backup is not authorized to perform: lambda:ListFunctions on resource: *", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "74adcb84-d694-4db0-b132-6bfc96f11b28", "record_id": "flaws_cloudtrail:0000323:74adcb84-d694-4db0-b132-6bfc96f11b28", "row_index": 323, "timestamp": "2019-07-08T15:21:27Z", "event_type": "ListFunctions202224", "event_source": "lambda.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "251.209.251.231", "user_agent": "Boto3/1.9.183 Python/3.6.8 Linux/3.10.0-957.21.3.el7.x86_64 Botocore/1.12.183", "aws_region": "eu-north-1"}, "resource_arns": [], "raw_record_size_bytes": 848, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "74adcb84-d694-4db0-b132-6bfc96f11b28", "eventTime": "2019-07-08T15:21:27Z", "eventName": "ListFunctions202224", "eventSource": "lambda.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "251.209.251.231", "userAgent": "Boto3/1.9.183 Python/3.6.8 Linux/3.10.0-957.21.3.el7.x86_64 Botocore/1.12.183", "awsRegion": "eu-north-1", "errorCode": "AccessDenied", "errorMessage": "User: arn:aws:iam::811596193553:user/backup is not authorized to perform: lambda:ListFunctions on resource: *", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "6f8372dd-aee3-46c3-b736-7282e9aab152", "record_id": "flaws_cloudtrail:0000324:6f8372dd-aee3-46c3-b736-7282e9aab152", "row_index": 324, "timestamp": "2019-07-08T15:21:27Z", "event_type": "ListFunctions202224", "event_source": "lambda.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "251.209.251.231", "user_agent": "Boto3/1.9.183 Python/3.6.8 Linux/3.10.0-957.21.3.el7.x86_64 Botocore/1.12.183", "aws_region": "eu-west-1"}, "resource_arns": [], "raw_record_size_bytes": 845, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "6f8372dd-aee3-46c3-b736-7282e9aab152", "eventTime": "2019-07-08T15:21:27Z", "eventName": "ListFunctions202224", "eventSource": "lambda.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "251.209.251.231", "userAgent": "Boto3/1.9.183 Python/3.6.8 Linux/3.10.0-957.21.3.el7.x86_64 Botocore/1.12.183", "awsRegion": "eu-west-1", "errorCode": "AccessDenied", "errorMessage": "User: arn:aws:iam::811596193553:user/backup is not authorized to perform: lambda:ListFunctions on resource: *", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "36e87c0a-b95a-4a07-a0c9-45ad26c1132b", "record_id": "flaws_cloudtrail:0000325:36e87c0a-b95a-4a07-a0c9-45ad26c1132b", "row_index": 325, "timestamp": "2019-07-08T15:21:27Z", "event_type": "ListFunctions202224", "event_source": "lambda.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "251.209.251.231", "user_agent": "Boto3/1.9.183 Python/3.6.8 Linux/3.10.0-957.21.3.el7.x86_64 Botocore/1.12.183", "aws_region": "eu-west-2"}, "resource_arns": [], "raw_record_size_bytes": 847, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "36e87c0a-b95a-4a07-a0c9-45ad26c1132b", "eventTime": "2019-07-08T15:21:27Z", "eventName": "ListFunctions202224", "eventSource": "lambda.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "251.209.251.231", "userAgent": "Boto3/1.9.183 Python/3.6.8 Linux/3.10.0-957.21.3.el7.x86_64 Botocore/1.12.183", "awsRegion": "eu-west-2", "errorCode": "AccessDenied", "errorMessage": "User: arn:aws:iam::811596193553:user/backup is not authorized to perform: lambda:ListFunctions on resource: *", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "9734e95f-976c-4455-abb6-1f6edfe0913c", "record_id": "flaws_cloudtrail:0000326:9734e95f-976c-4455-abb6-1f6edfe0913c", "row_index": 326, "timestamp": "2019-07-08T15:21:27Z", "event_type": "ListFunctions202224", "event_source": "lambda.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "251.209.251.231", "user_agent": "Boto3/1.9.183 Python/3.6.8 Linux/3.10.0-957.21.3.el7.x86_64 Botocore/1.12.183", "aws_region": "eu-west-3"}, "resource_arns": [], "raw_record_size_bytes": 848, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "9734e95f-976c-4455-abb6-1f6edfe0913c", "eventTime": "2019-07-08T15:21:27Z", "eventName": "ListFunctions202224", "eventSource": "lambda.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "251.209.251.231", "userAgent": "Boto3/1.9.183 Python/3.6.8 Linux/3.10.0-957.21.3.el7.x86_64 Botocore/1.12.183", "awsRegion": "eu-west-3", "errorCode": "AccessDenied", "errorMessage": "User: arn:aws:iam::811596193553:user/backup is not authorized to perform: lambda:ListFunctions on resource: *", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "4e9c0b91-ba79-44db-904a-15634b42c815", "record_id": "flaws_cloudtrail:0000327:4e9c0b91-ba79-44db-904a-15634b42c815", "row_index": 327, "timestamp": "2019-07-08T15:21:27Z", "event_type": "ListFunctions202224", "event_source": "lambda.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "251.209.251.231", "user_agent": "Boto3/1.9.183 Python/3.6.8 Linux/3.10.0-957.21.3.el7.x86_64 Botocore/1.12.183", "aws_region": "sa-east-1"}, "resource_arns": [], "raw_record_size_bytes": 846, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "4e9c0b91-ba79-44db-904a-15634b42c815", "eventTime": "2019-07-08T15:21:27Z", "eventName": "ListFunctions202224", "eventSource": "lambda.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "251.209.251.231", "userAgent": "Boto3/1.9.183 Python/3.6.8 Linux/3.10.0-957.21.3.el7.x86_64 Botocore/1.12.183", "awsRegion": "sa-east-1", "errorCode": "AccessDenied", "errorMessage": "User: arn:aws:iam::811596193553:user/backup is not authorized to perform: lambda:ListFunctions on resource: *", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "7776d47b-6acf-4ef0-b3ce-0ef43abf327f", "record_id": "flaws_cloudtrail:0000328:7776d47b-6acf-4ef0-b3ce-0ef43abf327f", "row_index": 328, "timestamp": "2019-07-08T15:21:27Z", "event_type": "ListFunctions202224", "event_source": "lambda.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "251.209.251.231", "user_agent": "Boto3/1.9.183 Python/3.6.8 Linux/3.10.0-957.21.3.el7.x86_64 Botocore/1.12.183", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 848, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "7776d47b-6acf-4ef0-b3ce-0ef43abf327f", "eventTime": "2019-07-08T15:21:27Z", "eventName": "ListFunctions202224", "eventSource": "lambda.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "251.209.251.231", "userAgent": "Boto3/1.9.183 Python/3.6.8 Linux/3.10.0-957.21.3.el7.x86_64 Botocore/1.12.183", "awsRegion": "us-east-1", "errorCode": "AccessDenied", "errorMessage": "User: arn:aws:iam::811596193553:user/backup is not authorized to perform: lambda:ListFunctions on resource: *", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "c384f87d-231a-471a-98c0-5ead43d7447d", "record_id": "flaws_cloudtrail:0000329:c384f87d-231a-471a-98c0-5ead43d7447d", "row_index": 329, "timestamp": "2019-07-08T15:21:27Z", "event_type": "ListFunctions202224", "event_source": "lambda.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "251.209.251.231", "user_agent": "Boto3/1.9.183 Python/3.6.8 Linux/3.10.0-957.21.3.el7.x86_64 Botocore/1.12.183", "aws_region": "us-east-2"}, "resource_arns": [], "raw_record_size_bytes": 847, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "c384f87d-231a-471a-98c0-5ead43d7447d", "eventTime": "2019-07-08T15:21:27Z", "eventName": "ListFunctions202224", "eventSource": "lambda.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "251.209.251.231", "userAgent": "Boto3/1.9.183 Python/3.6.8 Linux/3.10.0-957.21.3.el7.x86_64 Botocore/1.12.183", "awsRegion": "us-east-2", "errorCode": "AccessDenied", "errorMessage": "User: arn:aws:iam::811596193553:user/backup is not authorized to perform: lambda:ListFunctions on resource: *", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "02c644bf-b0b1-418d-9085-1fa47f60e178", "record_id": "flaws_cloudtrail:0000330:02c644bf-b0b1-418d-9085-1fa47f60e178", "row_index": 330, "timestamp": "2019-07-08T15:21:27Z", "event_type": "ListFunctions202224", "event_source": "lambda.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "251.209.251.231", "user_agent": "Boto3/1.9.183 Python/3.6.8 Linux/3.10.0-957.21.3.el7.x86_64 Botocore/1.12.183", "aws_region": "us-west-1"}, "resource_arns": [], "raw_record_size_bytes": 845, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "02c644bf-b0b1-418d-9085-1fa47f60e178", "eventTime": "2019-07-08T15:21:27Z", "eventName": "ListFunctions202224", "eventSource": "lambda.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "251.209.251.231", "userAgent": "Boto3/1.9.183 Python/3.6.8 Linux/3.10.0-957.21.3.el7.x86_64 Botocore/1.12.183", "awsRegion": "us-west-1", "errorCode": "AccessDenied", "errorMessage": "User: arn:aws:iam::811596193553:user/backup is not authorized to perform: lambda:ListFunctions on resource: *", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "02885e3-fbfe-42a7-a491-0da95c4b7a5a", "record_id": "flaws_cloudtrail:0000331:02885e3-fbfe-42a7-a491-0da95c4b7a5a", "row_index": 331, "timestamp": "2019-07-08T15:21:28Z", "event_type": "DescribeVpcs", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "251.209.251.231", "user_agent": "Boto3/1.9.183 Python/3.6.8 Linux/3.10.0-957.21.3.el7.x86_64 Botocore/1.12.183", "aws_region": "ap-northeast-1"}, "resource_arns": [], "raw_record_size_bytes": 711, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "02885e3-fbfe-42a7-a491-0da95c4b7a5a", "eventTime": "2019-07-08T15:21:28Z", "eventName": "DescribeVpcs", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "251.209.251.231", "userAgent": "Boto3/1.9.183 Python/3.6.8 Linux/3.10.0-957.21.3.el7.x86_64 Botocore/1.12.183", "awsRegion": "ap-northeast-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"vpcSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "3b55e7f0-e934-4e63-b501-94f5dfcdc3f3", "record_id": "flaws_cloudtrail:0000332:3b55e7f0-e934-4e63-b501-94f5dfcdc3f3", "row_index": 332, "timestamp": "2019-07-08T15:21:28Z", "event_type": "DescribeDBSecurityGroups", "event_source": "rds.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "251.209.251.231", "user_agent": "Boto3/1.9.183 Python/3.6.8 Linux/3.10.0-957.21.3.el7.x86_64 Botocore/1.12.183", "aws_region": "ap-northeast-1"}, "resource_arns": [], "raw_record_size_bytes": 847, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "3b55e7f0-e934-4e63-b501-94f5dfcdc3f3", "eventTime": "2019-07-08T15:21:28Z", "eventName": "DescribeDBSecurityGroups", "eventSource": "rds.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "251.209.251.231", "userAgent": "Boto3/1.9.183 Python/3.6.8 Linux/3.10.0-957.21.3.el7.x86_64 Botocore/1.12.183", "awsRegion": "ap-northeast-1", "errorCode": "AccessDenied", "errorMessage": "User: arn:aws:iam::811596193553:user/backup is not authorized to perform: rds:DescribeDBSecurityGroups", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "3908f92e-3984-4ca3-adf8-7d3a8755b3b3", "record_id": "flaws_cloudtrail:0000333:3908f92e-3984-4ca3-adf8-7d3a8755b3b3", "row_index": 333, "timestamp": "2019-07-08T15:21:28Z", "event_type": "DescribeDBParameterGroups", "event_source": "rds.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "251.209.251.231", "user_agent": "Boto3/1.9.183 Python/3.6.8 Linux/3.10.0-957.21.3.el7.x86_64 Botocore/1.12.183", "aws_region": "ap-northeast-1"}, "resource_arns": [], "raw_record_size_bytes": 849, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "3908f92e-3984-4ca3-adf8-7d3a8755b3b3", "eventTime": "2019-07-08T15:21:28Z", "eventName": "DescribeDBParameterGroups", "eventSource": "rds.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "251.209.251.231", "userAgent": "Boto3/1.9.183 Python/3.6.8 Linux/3.10.0-957.21.3.el7.x86_64 Botocore/1.12.183", "awsRegion": "ap-northeast-1", "errorCode": "AccessDenied", "errorMessage": "User: arn:aws:iam::811596193553:user/backup is not authorized to perform: rds:DescribeDBParameterGroups", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "1cc352578-582b-4194-b40c-b68b23c16ac1", "record_id": "flaws_cloudtrail:0000334:1cc352578-582b-4194-b40c-b68b23c16ac1", "row_index": 334, "timestamp": "2019-07-08T15:21:28Z", "event_type": "ListFunctions202224", "event_source": "lambda.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "251.209.251.231", "user_agent": "Boto3/1.9.183 Python/3.6.8 Linux/3.10.0-957.21.3.el7.x86_64 Botocore/1.12.183", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 848, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "1cc352578-582b-4194-b40c-b68b23c16ac1", "eventTime": "2019-07-08T15:21:28Z", "eventName": "ListFunctions202224", "eventSource": "lambda.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "251.209.251.231", "userAgent": "Boto3/1.9.183 Python/3.6.8 Linux/3.10.0-957.21.3.el7.x86_64 Botocore/1.12.183", "awsRegion": "us-west-2", "errorCode": "AccessDenied", "errorMessage": "User: arn:aws:iam::811596193553:user/backup is not authorized to perform: lambda:ListFunctions on resource: *", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "02885e3-fbfe-42a7-a491-0da95c4b7a5a", "record_id": "flaws_cloudtrail:0000335:02885e3-fbfe-42a7-a491-0da95c4b7a5a", "row_index": 335, "timestamp": "2019-07-08T15:21:28Z", "event_type": "DescribeVpcs", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "251.209.251.231", "user_agent": "Boto3/1.9.183 Python/3.6.8 Linux/3.10.0-957.21.3.el7.x86_64 Botocore/1.12.183", "aws_region": "ap-northeast-1"}, "resource_arns": [], "raw_record_size_bytes": 711, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "02885e3-fbfe-42a7-a491-0da95c4b7a5a", "eventTime": "2019-07-08T15:21:28Z", "eventName": "DescribeVpcs", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "251.209.251.231", "userAgent": "Boto3/1.9.183 Python/3.6.8 Linux/3.10.0-957.21.3.el7.x86_64 Botocore/1.12.183", "awsRegion": "ap-northeast-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"vpcSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "3b55e7f0-e934-4e63-b501-94f5dfcdc3f3", "record_id": "flaws_cloudtrail:0000336:3b55e7f0-e934-4e63-b501-94f5dfcdc3f3", "row_index": 336, "timestamp": "2019-07-08T15:21:28Z", "event_type": "DescribeDBSecurityGroups", "event_source": "rds.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "251.209.251.231", "user_agent": "Boto3/1.9.183 Python/3.6.8 Linux/3.10.0-957.21.3.el7.x86_64 Botocore/1.12.183", "aws_region": "ap-northeast-1"}, "resource_arns": [], "raw_record_size_bytes": 847, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "3b55e7f0-e934-4e63-b501-94f5dfcdc3f3", "eventTime": "2019-07-08T15:21:28Z", "eventName": "DescribeDBSecurityGroups", "eventSource": "rds.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "251.209.251.231", "userAgent": "Boto3/1.9.183 Python/3.6.8 Linux/3.10.0-957.21.3.el7.x86_64 Botocore/1.12.183", "awsRegion": "ap-northeast-1", "errorCode": "AccessDenied", "errorMessage": "User: arn:aws:iam::811596193553:user/backup is not authorized to perform: rds:DescribeDBSecurityGroups", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "3908f92e-3984-4ca3-adf8-7d3a8755b3b3", "record_id": "flaws_cloudtrail:0000337:3908f92e-3984-4ca3-adf8-7d3a8755b3b3", "row_index": 337, "timestamp": "2019-07-08T15:21:28Z", "event_type": "DescribeDBParameterGroups", "event_source": "rds.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "251.209.251.231", "user_agent": "Boto3/1.9.183 Python/3.6.8 Linux/3.10.0-957.21.3.el7.x86_64 Botocore/1.12.183", "aws_region": "ap-northeast-1"}, "resource_arns": [], "raw_record_size_bytes": 849, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "3908f92e-3984-4ca3-adf8-7d3a8755b3b3", "eventTime": "2019-07-08T15:21:28Z", "eventName": "DescribeDBParameterGroups", "eventSource": "rds.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "251.209.251.231", "userAgent": "Boto3/1.9.183 Python/3.6.8 Linux/3.10.0-957.21.3.el7.x86_64 Botocore/1.12.183", "awsRegion": "ap-northeast-1", "errorCode": "AccessDenied", "errorMessage": "User: arn:aws:iam::811596193553:user/backup is not authorized to perform: rds:DescribeDBParameterGroups", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "1cc352578-582b-4194-b40c-b68b23c16ac1", "record_id": "flaws_cloudtrail:0000338:1cc352578-582b-4194-b40c-b68b23c16ac1", "row_index": 338, "timestamp": "2019-07-08T15:21:28Z", "event_type": "ListFunctions202224", "event_source": "lambda.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "251.209.251.231", "user_agent": "Boto3/1.9.183 Python/3.6.8 Linux/3.10.0-957.21.3.el7.x86_64 Botocore/1.12.183", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 848, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "1cc352578-582b-4194-b40c-b68b23c16ac1", "eventTime": "2019-07-08T15:21:28Z", "eventName": "ListFunctions202224", "eventSource": "lambda.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "251.209.251.231", "userAgent": "Boto3/1.9.183 Python/3.6.8 Linux/3.10.0-957.21.3.el7.x86_64 Botocore/1.12.183", "awsRegion": "us-west-2", "errorCode": "AccessDenied", "errorMessage": "User: arn:aws:iam::811596193553:user/backup is not authorized to perform: lambda:ListFunctions on resource: *", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "9e697fdb-0fdf-478b-a0db-a7c5e7ec0a33", "record_id": "flaws_cloudtrail:0000339:9e697fdb-0fdf-478b-a0db-a7c5e7ec0a33", "row_index": 339, "timestamp": "2019-07-08T15:21:29Z", "event_type": "DescribeDBParameterGroups", "event_source": "rds.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "251.209.251.231", "user_agent": "Boto3/1.9.183 Python/3.6.8 Linux/3.10.0-957.21.3.el7.x86_64 Botocore/1.12.183", "aws_region": "ap-northeast-2"}, "resource_arns": [], "raw_record_size_bytes": 849, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "9e697fdb-0fdf-478b-a0db-a7c5e7ec0a33", "eventTime": "2019-07-08T15:21:29Z", "eventName": "DescribeDBParameterGroups", "eventSource": "rds.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "251.209.251.231", "userAgent": "Boto3/1.9.183 Python/3.6.8 Linux/3.10.0-957.21.3.el7.x86_64 Botocore/1.12.183", "awsRegion": "ap-northeast-2", "errorCode": "AccessDenied", "errorMessage": "User: arn:aws:iam::811596193553:user/backup is not authorized to perform: rds:DescribeDBParameterGroups", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "200b8752-8f32-4e4b-82e3-c9b2e7c127b7", "record_id": "flaws_cloudtrail:0000340:200b8752-8f32-4e4b-82e3-c9b2e7c127b7", "row_index": 340, "timestamp": "2019-07-08T15:21:29Z", "event_type": "DescribeDBSecurityGroups", "event_source": "rds.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "251.209.251.231", "user_agent": "Boto3/1.9.183 Python/3.6.8 Linux/3.10.0-957.21.3.el7.x86_64 Botocore/1.12.183", "aws_region": "ap-northeast-2"}, "resource_arns": [], "raw_record_size_bytes": 847, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "200b8752-8f32-4e4b-82e3-c9b2e7c127b7", "eventTime": "2019-07-08T15:21:29Z", "eventName": "DescribeDBSecurityGroups", "eventSource": "rds.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "251.209.251.231", "userAgent": "Boto3/1.9.183 Python/3.6.8 Linux/3.10.0-957.21.3.el7.x86_64 Botocore/1.12.183", "awsRegion": "ap-northeast-2", "errorCode": "AccessDenied", "errorMessage": "User: arn:aws:iam::811596193553:user/backup is not authorized to perform: rds:DescribeDBSecurityGroups", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "efea21b7-3a93-4ee9-8baf-90a53e30c441", "record_id": "flaws_cloudtrail:0000341:efea21b7-3a93-4ee9-8baf-90a53e30c441", "row_index": 341, "timestamp": "2019-07-08T15:21:29Z", "event_type": "DescribeVpcs", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "251.209.251.231", "user_agent": "Boto3/1.9.183 Python/3.6.8 Linux/3.10.0-957.21.3.el7.x86_64 Botocore/1.12.183", "aws_region": "ap-northeast-2"}, "resource_arns": [], "raw_record_size_bytes": 712, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "efea21b7-3a93-4ee9-8baf-90a53e30c441", "eventTime": "2019-07-08T15:21:29Z", "eventName": "DescribeVpcs", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "251.209.251.231", "userAgent": "Boto3/1.9.183 Python/3.6.8 Linux/3.10.0-957.21.3.el7.x86_64 Botocore/1.12.183", "awsRegion": "ap-northeast-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"vpcSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "52bd1e47-f87e-4348-a380-e077c4ebd7d3", "record_id": "flaws_cloudtrail:0000342:52bd1e47-f87e-4348-a380-e077c4ebd7d3", "row_index": 342, "timestamp": "2019-07-08T15:21:29Z", "event_type": "DescribeDBSecurityGroups", "event_source": "rds.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "251.209.251.231", "user_agent": "Boto3/1.9.183 Python/3.6.8 Linux/3.10.0-957.21.3.el7.x86_64 Botocore/1.12.183", "aws_region": "ap-south-1"}, "resource_arns": [], "raw_record_size_bytes": 843, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "52bd1e47-f87e-4348-a380-e077c4ebd7d3", "eventTime": "2019-07-08T15:21:29Z", "eventName": "DescribeDBSecurityGroups", "eventSource": "rds.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "251.209.251.231", "userAgent": "Boto3/1.9.183 Python/3.6.8 Linux/3.10.0-957.21.3.el7.x86_64 Botocore/1.12.183", "awsRegion": "ap-south-1", "errorCode": "AccessDenied", "errorMessage": "User: arn:aws:iam::811596193553:user/backup is not authorized to perform: rds:DescribeDBSecurityGroups", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "c3354e39-e565-4850-8a82-a6f122274ef", "record_id": "flaws_cloudtrail:0000343:c3354e39-e565-4850-8a82-a6f122274ef", "row_index": 343, "timestamp": "2019-07-08T15:21:29Z", "event_type": "DescribeVpcs", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "251.209.251.231", "user_agent": "Boto3/1.9.183 Python/3.6.8 Linux/3.10.0-957.21.3.el7.x86_64 Botocore/1.12.183", "aws_region": "ap-south-1"}, "resource_arns": [], "raw_record_size_bytes": 707, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "c3354e39-e565-4850-8a82-a6f122274ef", "eventTime": "2019-07-08T15:21:29Z", "eventName": "DescribeVpcs", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "251.209.251.231", "userAgent": "Boto3/1.9.183 Python/3.6.8 Linux/3.10.0-957.21.3.el7.x86_64 Botocore/1.12.183", "awsRegion": "ap-south-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"vpcSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "c62dc69e-6f6f-4bb4-9a0d-807923413881", "record_id": "flaws_cloudtrail:0000344:c62dc69e-6f6f-4bb4-9a0d-807923413881", "row_index": 344, "timestamp": "2019-07-08T15:21:29Z", "event_type": "DescribeDBParameterGroups", "event_source": "rds.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "251.209.251.231", "user_agent": "Boto3/1.9.183 Python/3.6.8 Linux/3.10.0-957.21.3.el7.x86_64 Botocore/1.12.183", "aws_region": "ap-south-1"}, "resource_arns": [], "raw_record_size_bytes": 845, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "c62dc69e-6f6f-4bb4-9a0d-807923413881", "eventTime": "2019-07-08T15:21:29Z", "eventName": "DescribeDBParameterGroups", "eventSource": "rds.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "251.209.251.231", "userAgent": "Boto3/1.9.183 Python/3.6.8 Linux/3.10.0-957.21.3.el7.x86_64 Botocore/1.12.183", "awsRegion": "ap-south-1", "errorCode": "AccessDenied", "errorMessage": "User: arn:aws:iam::811596193553:user/backup is not authorized to perform: rds:DescribeDBParameterGroups", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "d6a6c584-0e6a-461a-8989-1c63f62ae332", "record_id": "flaws_cloudtrail:0000345:d6a6c584-0e6a-461a-8989-1c63f62ae332", "row_index": 345, "timestamp": "2019-07-08T15:21:29Z", "event_type": "DescribeVpcs", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "251.209.251.231", "user_agent": "Boto3/1.9.183 Python/3.6.8 Linux/3.10.0-957.21.3.el7.x86_64 Botocore/1.12.183", "aws_region": "ap-southeast-1"}, "resource_arns": [], "raw_record_size_bytes": 712, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "d6a6c584-0e6a-461a-8989-1c63f62ae332", "eventTime": "2019-07-08T15:21:29Z", "eventName": "DescribeVpcs", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "251.209.251.231", "userAgent": "Boto3/1.9.183 Python/3.6.8 Linux/3.10.0-957.21.3.el7.x86_64 Botocore/1.12.183", "awsRegion": "ap-southeast-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"vpcSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "83f4f013-bb16-46c5-9060-ddcc4f4ae72d", "record_id": "flaws_cloudtrail:0000346:83f4f013-bb16-46c5-9060-ddcc4f4ae72d", "row_index": 346, "timestamp": "2019-07-08T15:21:29Z", "event_type": "DescribeDBParameterGroups", "event_source": "rds.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "251.209.251.231", "user_agent": "Boto3/1.9.183 Python/3.6.8 Linux/3.10.0-957.21.3.el7.x86_64 Botocore/1.12.183", "aws_region": "ap-southeast-1"}, "resource_arns": [], "raw_record_size_bytes": 849, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "83f4f013-bb16-46c5-9060-ddcc4f4ae72d", "eventTime": "2019-07-08T15:21:29Z", "eventName": "DescribeDBParameterGroups", "eventSource": "rds.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "251.209.251.231", "userAgent": "Boto3/1.9.183 Python/3.6.8 Linux/3.10.0-957.21.3.el7.x86_64 Botocore/1.12.183", "awsRegion": "ap-southeast-1", "errorCode": "AccessDenied", "errorMessage": "User: arn:aws:iam::811596193553:user/backup is not authorized to perform: rds:DescribeDBParameterGroups", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "0c1d9037-6d6d-4172-b41d-6fec78653421", "record_id": "flaws_cloudtrail:0000347:0c1d9037-6d6d-4172-b41d-6fec78653421", "row_index": 347, "timestamp": "2019-07-08T15:21:29Z", "event_type": "DescribeDBParameterGroups", "event_source": "rds.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "251.209.251.231", "user_agent": "Boto3/1.9.183 Python/3.6.8 Linux/3.10.0-957.21.3.el7.x86_64 Botocore/1.12.183", "aws_region": "ca-central-1"}, "resource_arns": [], "raw_record_size_bytes": 845, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "0c1d9037-6d6d-4172-b41d-6fec78653421", "eventTime": "2019-07-08T15:21:29Z", "eventName": "DescribeDBParameterGroups", "eventSource": "rds.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "251.209.251.231", "userAgent": "Boto3/1.9.183 Python/3.6.8 Linux/3.10.0-957.21.3.el7.x86_64 Botocore/1.12.183", "awsRegion": "ca-central-1", "errorCode": "AccessDenied", "errorMessage": "User: arn:aws:iam::811596193553:user/backup is not authorized to perform: rds:DescribeDBParameterGroups", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "dc4a10ed-345e-4590-abf9-86155ebd4d3", "record_id": "flaws_cloudtrail:0000348:dc4a10ed-345e-4590-abf9-86155ebd4d3", "row_index": 348, "timestamp": "2019-07-08T15:21:29Z", "event_type": "DescribeVpcs", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "251.209.251.231", "user_agent": "Boto3/1.9.183 Python/3.6.8 Linux/3.10.0-957.21.3.el7.x86_64 Botocore/1.12.183", "aws_region": "ca-central-1"}, "resource_arns": [], "raw_record_size_bytes": 709, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "dc4a10ed-345e-4590-abf9-86155ebd4d3", "eventTime": "2019-07-08T15:21:29Z", "eventName": "DescribeVpcs", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "251.209.251.231", "userAgent": "Boto3/1.9.183 Python/3.6.8 Linux/3.10.0-957.21.3.el7.x86_64 Botocore/1.12.183", "awsRegion": "ca-central-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"vpcSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "b8bde546-c307-4d71-a565-3ddbd1d4ac6e", "record_id": "flaws_cloudtrail:0000349:b8bde546-c307-4d71-a565-3ddbd1d4ac6e", "row_index": 349, "timestamp": "2019-07-08T15:21:29Z", "event_type": "DescribeVpcs", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "251.209.251.231", "user_agent": "Boto3/1.9.183 Python/3.6.8 Linux/3.10.0-957.21.3.el7.x86_64 Botocore/1.12.183", "aws_region": "eu-central-1"}, "resource_arns": [], "raw_record_size_bytes": 708, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "b8bde546-c307-4d71-a565-3ddbd1d4ac6e", "eventTime": "2019-07-08T15:21:29Z", "eventName": "DescribeVpcs", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "251.209.251.231", "userAgent": "Boto3/1.9.183 Python/3.6.8 Linux/3.10.0-957.21.3.el7.x86_64 Botocore/1.12.183", "awsRegion": "eu-central-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"vpcSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "9e697fdb-0fdf-478b-a0db-a7c5e7ec0a33", "record_id": "flaws_cloudtrail:0000350:9e697fdb-0fdf-478b-a0db-a7c5e7ec0a33", "row_index": 350, "timestamp": "2019-07-08T15:21:29Z", "event_type": "DescribeDBParameterGroups", "event_source": "rds.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "251.209.251.231", "user_agent": "Boto3/1.9.183 Python/3.6.8 Linux/3.10.0-957.21.3.el7.x86_64 Botocore/1.12.183", "aws_region": "ap-northeast-2"}, "resource_arns": [], "raw_record_size_bytes": 849, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "9e697fdb-0fdf-478b-a0db-a7c5e7ec0a33", "eventTime": "2019-07-08T15:21:29Z", "eventName": "DescribeDBParameterGroups", "eventSource": "rds.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "251.209.251.231", "userAgent": "Boto3/1.9.183 Python/3.6.8 Linux/3.10.0-957.21.3.el7.x86_64 Botocore/1.12.183", "awsRegion": "ap-northeast-2", "errorCode": "AccessDenied", "errorMessage": "User: arn:aws:iam::811596193553:user/backup is not authorized to perform: rds:DescribeDBParameterGroups", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "200b8752-8f32-4e4b-82e3-c9b2e7c127b7", "record_id": "flaws_cloudtrail:0000351:200b8752-8f32-4e4b-82e3-c9b2e7c127b7", "row_index": 351, "timestamp": "2019-07-08T15:21:29Z", "event_type": "DescribeDBSecurityGroups", "event_source": "rds.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "251.209.251.231", "user_agent": "Boto3/1.9.183 Python/3.6.8 Linux/3.10.0-957.21.3.el7.x86_64 Botocore/1.12.183", "aws_region": "ap-northeast-2"}, "resource_arns": [], "raw_record_size_bytes": 847, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "200b8752-8f32-4e4b-82e3-c9b2e7c127b7", "eventTime": "2019-07-08T15:21:29Z", "eventName": "DescribeDBSecurityGroups", "eventSource": "rds.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "251.209.251.231", "userAgent": "Boto3/1.9.183 Python/3.6.8 Linux/3.10.0-957.21.3.el7.x86_64 Botocore/1.12.183", "awsRegion": "ap-northeast-2", "errorCode": "AccessDenied", "errorMessage": "User: arn:aws:iam::811596193553:user/backup is not authorized to perform: rds:DescribeDBSecurityGroups", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "efea21b7-3a93-4ee9-8baf-90a53e30c441", "record_id": "flaws_cloudtrail:0000352:efea21b7-3a93-4ee9-8baf-90a53e30c441", "row_index": 352, "timestamp": "2019-07-08T15:21:29Z", "event_type": "DescribeVpcs", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "251.209.251.231", "user_agent": "Boto3/1.9.183 Python/3.6.8 Linux/3.10.0-957.21.3.el7.x86_64 Botocore/1.12.183", "aws_region": "ap-northeast-2"}, "resource_arns": [], "raw_record_size_bytes": 712, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "efea21b7-3a93-4ee9-8baf-90a53e30c441", "eventTime": "2019-07-08T15:21:29Z", "eventName": "DescribeVpcs", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "251.209.251.231", "userAgent": "Boto3/1.9.183 Python/3.6.8 Linux/3.10.0-957.21.3.el7.x86_64 Botocore/1.12.183", "awsRegion": "ap-northeast-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"vpcSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "52bd1e47-f87e-4348-a380-e077c4ebd7d3", "record_id": "flaws_cloudtrail:0000353:52bd1e47-f87e-4348-a380-e077c4ebd7d3", "row_index": 353, "timestamp": "2019-07-08T15:21:29Z", "event_type": "DescribeDBSecurityGroups", "event_source": "rds.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "251.209.251.231", "user_agent": "Boto3/1.9.183 Python/3.6.8 Linux/3.10.0-957.21.3.el7.x86_64 Botocore/1.12.183", "aws_region": "ap-south-1"}, "resource_arns": [], "raw_record_size_bytes": 843, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "52bd1e47-f87e-4348-a380-e077c4ebd7d3", "eventTime": "2019-07-08T15:21:29Z", "eventName": "DescribeDBSecurityGroups", "eventSource": "rds.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "251.209.251.231", "userAgent": "Boto3/1.9.183 Python/3.6.8 Linux/3.10.0-957.21.3.el7.x86_64 Botocore/1.12.183", "awsRegion": "ap-south-1", "errorCode": "AccessDenied", "errorMessage": "User: arn:aws:iam::811596193553:user/backup is not authorized to perform: rds:DescribeDBSecurityGroups", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "c3354e39-e565-4850-8a82-a6f122274ef", "record_id": "flaws_cloudtrail:0000354:c3354e39-e565-4850-8a82-a6f122274ef", "row_index": 354, "timestamp": "2019-07-08T15:21:29Z", "event_type": "DescribeVpcs", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "251.209.251.231", "user_agent": "Boto3/1.9.183 Python/3.6.8 Linux/3.10.0-957.21.3.el7.x86_64 Botocore/1.12.183", "aws_region": "ap-south-1"}, "resource_arns": [], "raw_record_size_bytes": 707, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "c3354e39-e565-4850-8a82-a6f122274ef", "eventTime": "2019-07-08T15:21:29Z", "eventName": "DescribeVpcs", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "251.209.251.231", "userAgent": "Boto3/1.9.183 Python/3.6.8 Linux/3.10.0-957.21.3.el7.x86_64 Botocore/1.12.183", "awsRegion": "ap-south-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"vpcSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "c62dc69e-6f6f-4bb4-9a0d-807923413881", "record_id": "flaws_cloudtrail:0000355:c62dc69e-6f6f-4bb4-9a0d-807923413881", "row_index": 355, "timestamp": "2019-07-08T15:21:29Z", "event_type": "DescribeDBParameterGroups", "event_source": "rds.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "251.209.251.231", "user_agent": "Boto3/1.9.183 Python/3.6.8 Linux/3.10.0-957.21.3.el7.x86_64 Botocore/1.12.183", "aws_region": "ap-south-1"}, "resource_arns": [], "raw_record_size_bytes": 845, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "c62dc69e-6f6f-4bb4-9a0d-807923413881", "eventTime": "2019-07-08T15:21:29Z", "eventName": "DescribeDBParameterGroups", "eventSource": "rds.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "251.209.251.231", "userAgent": "Boto3/1.9.183 Python/3.6.8 Linux/3.10.0-957.21.3.el7.x86_64 Botocore/1.12.183", "awsRegion": "ap-south-1", "errorCode": "AccessDenied", "errorMessage": "User: arn:aws:iam::811596193553:user/backup is not authorized to perform: rds:DescribeDBParameterGroups", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "d6a6c584-0e6a-461a-8989-1c63f62ae332", "record_id": "flaws_cloudtrail:0000356:d6a6c584-0e6a-461a-8989-1c63f62ae332", "row_index": 356, "timestamp": "2019-07-08T15:21:29Z", "event_type": "DescribeVpcs", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "251.209.251.231", "user_agent": "Boto3/1.9.183 Python/3.6.8 Linux/3.10.0-957.21.3.el7.x86_64 Botocore/1.12.183", "aws_region": "ap-southeast-1"}, "resource_arns": [], "raw_record_size_bytes": 712, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "d6a6c584-0e6a-461a-8989-1c63f62ae332", "eventTime": "2019-07-08T15:21:29Z", "eventName": "DescribeVpcs", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "251.209.251.231", "userAgent": "Boto3/1.9.183 Python/3.6.8 Linux/3.10.0-957.21.3.el7.x86_64 Botocore/1.12.183", "awsRegion": "ap-southeast-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"vpcSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "83f4f013-bb16-46c5-9060-ddcc4f4ae72d", "record_id": "flaws_cloudtrail:0000357:83f4f013-bb16-46c5-9060-ddcc4f4ae72d", "row_index": 357, "timestamp": "2019-07-08T15:21:29Z", "event_type": "DescribeDBParameterGroups", "event_source": "rds.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "251.209.251.231", "user_agent": "Boto3/1.9.183 Python/3.6.8 Linux/3.10.0-957.21.3.el7.x86_64 Botocore/1.12.183", "aws_region": "ap-southeast-1"}, "resource_arns": [], "raw_record_size_bytes": 849, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "83f4f013-bb16-46c5-9060-ddcc4f4ae72d", "eventTime": "2019-07-08T15:21:29Z", "eventName": "DescribeDBParameterGroups", "eventSource": "rds.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "251.209.251.231", "userAgent": "Boto3/1.9.183 Python/3.6.8 Linux/3.10.0-957.21.3.el7.x86_64 Botocore/1.12.183", "awsRegion": "ap-southeast-1", "errorCode": "AccessDenied", "errorMessage": "User: arn:aws:iam::811596193553:user/backup is not authorized to perform: rds:DescribeDBParameterGroups", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "0c1d9037-6d6d-4172-b41d-6fec78653421", "record_id": "flaws_cloudtrail:0000358:0c1d9037-6d6d-4172-b41d-6fec78653421", "row_index": 358, "timestamp": "2019-07-08T15:21:29Z", "event_type": "DescribeDBParameterGroups", "event_source": "rds.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "251.209.251.231", "user_agent": "Boto3/1.9.183 Python/3.6.8 Linux/3.10.0-957.21.3.el7.x86_64 Botocore/1.12.183", "aws_region": "ca-central-1"}, "resource_arns": [], "raw_record_size_bytes": 845, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "0c1d9037-6d6d-4172-b41d-6fec78653421", "eventTime": "2019-07-08T15:21:29Z", "eventName": "DescribeDBParameterGroups", "eventSource": "rds.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "251.209.251.231", "userAgent": "Boto3/1.9.183 Python/3.6.8 Linux/3.10.0-957.21.3.el7.x86_64 Botocore/1.12.183", "awsRegion": "ca-central-1", "errorCode": "AccessDenied", "errorMessage": "User: arn:aws:iam::811596193553:user/backup is not authorized to perform: rds:DescribeDBParameterGroups", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "dc4a10ed-345e-4590-abf9-86155ebd4d3", "record_id": "flaws_cloudtrail:0000359:dc4a10ed-345e-4590-abf9-86155ebd4d3", "row_index": 359, "timestamp": "2019-07-08T15:21:29Z", "event_type": "DescribeVpcs", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "251.209.251.231", "user_agent": "Boto3/1.9.183 Python/3.6.8 Linux/3.10.0-957.21.3.el7.x86_64 Botocore/1.12.183", "aws_region": "ca-central-1"}, "resource_arns": [], "raw_record_size_bytes": 709, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "dc4a10ed-345e-4590-abf9-86155ebd4d3", "eventTime": "2019-07-08T15:21:29Z", "eventName": "DescribeVpcs", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "251.209.251.231", "userAgent": "Boto3/1.9.183 Python/3.6.8 Linux/3.10.0-957.21.3.el7.x86_64 Botocore/1.12.183", "awsRegion": "ca-central-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"vpcSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "b8bde546-c307-4d71-a565-3ddbd1d4ac6e", "record_id": "flaws_cloudtrail:0000360:b8bde546-c307-4d71-a565-3ddbd1d4ac6e", "row_index": 360, "timestamp": "2019-07-08T15:21:29Z", "event_type": "DescribeVpcs", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "251.209.251.231", "user_agent": "Boto3/1.9.183 Python/3.6.8 Linux/3.10.0-957.21.3.el7.x86_64 Botocore/1.12.183", "aws_region": "eu-central-1"}, "resource_arns": [], "raw_record_size_bytes": 708, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "b8bde546-c307-4d71-a565-3ddbd1d4ac6e", "eventTime": "2019-07-08T15:21:29Z", "eventName": "DescribeVpcs", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "251.209.251.231", "userAgent": "Boto3/1.9.183 Python/3.6.8 Linux/3.10.0-957.21.3.el7.x86_64 Botocore/1.12.183", "awsRegion": "eu-central-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"vpcSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "2aeee042-7ff6-417c-9539-86476e05d", "record_id": "flaws_cloudtrail:0000361:2aeee042-7ff6-417c-9539-86476e05d", "row_index": 361, "timestamp": "2019-07-08T15:21:30Z", "event_type": "DescribeDBSecurityGroups", "event_source": "rds.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "251.209.251.231", "user_agent": "Boto3/1.9.183 Python/3.6.8 Linux/3.10.0-957.21.3.el7.x86_64 Botocore/1.12.183", "aws_region": "ap-southeast-1"}, "resource_arns": [], "raw_record_size_bytes": 844, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "2aeee042-7ff6-417c-9539-86476e05d", "eventTime": "2019-07-08T15:21:30Z", "eventName": "DescribeDBSecurityGroups", "eventSource": "rds.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "251.209.251.231", "userAgent": "Boto3/1.9.183 Python/3.6.8 Linux/3.10.0-957.21.3.el7.x86_64 Botocore/1.12.183", "awsRegion": "ap-southeast-1", "errorCode": "AccessDenied", "errorMessage": "User: arn:aws:iam::811596193553:user/backup is not authorized to perform: rds:DescribeDBSecurityGroups", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "e96ff5be-4790-4399-b5dd-a9380b4ce677", "record_id": "flaws_cloudtrail:0000362:e96ff5be-4790-4399-b5dd-a9380b4ce677", "row_index": 362, "timestamp": "2019-07-08T15:21:30Z", "event_type": "DescribeDBSecurityGroups", "event_source": "rds.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "251.209.251.231", "user_agent": "Boto3/1.9.183 Python/3.6.8 Linux/3.10.0-957.21.3.el7.x86_64 Botocore/1.12.183", "aws_region": "ap-southeast-2"}, "resource_arns": [], "raw_record_size_bytes": 847, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "e96ff5be-4790-4399-b5dd-a9380b4ce677", "eventTime": "2019-07-08T15:21:30Z", "eventName": "DescribeDBSecurityGroups", "eventSource": "rds.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "251.209.251.231", "userAgent": "Boto3/1.9.183 Python/3.6.8 Linux/3.10.0-957.21.3.el7.x86_64 Botocore/1.12.183", "awsRegion": "ap-southeast-2", "errorCode": "AccessDenied", "errorMessage": "User: arn:aws:iam::811596193553:user/backup is not authorized to perform: rds:DescribeDBSecurityGroups", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "9e9748a2-9289-4aa4-8a89-5018cd1a03be", "record_id": "flaws_cloudtrail:0000363:9e9748a2-9289-4aa4-8a89-5018cd1a03be", "row_index": 363, "timestamp": "2019-07-08T15:21:30Z", "event_type": "DescribeDBParameterGroups", "event_source": "rds.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "251.209.251.231", "user_agent": "Boto3/1.9.183 Python/3.6.8 Linux/3.10.0-957.21.3.el7.x86_64 Botocore/1.12.183", "aws_region": "ap-southeast-2"}, "resource_arns": [], "raw_record_size_bytes": 849, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "9e9748a2-9289-4aa4-8a89-5018cd1a03be", "eventTime": "2019-07-08T15:21:30Z", "eventName": "DescribeDBParameterGroups", "eventSource": "rds.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "251.209.251.231", "userAgent": "Boto3/1.9.183 Python/3.6.8 Linux/3.10.0-957.21.3.el7.x86_64 Botocore/1.12.183", "awsRegion": "ap-southeast-2", "errorCode": "AccessDenied", "errorMessage": "User: arn:aws:iam::811596193553:user/backup is not authorized to perform: rds:DescribeDBParameterGroups", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "c38aecac-bbb3-4b32-be54-3c7e0fe79bf7", "record_id": "flaws_cloudtrail:0000364:c38aecac-bbb3-4b32-be54-3c7e0fe79bf7", "row_index": 364, "timestamp": "2019-07-08T15:21:30Z", "event_type": "DescribeVpcs", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "251.209.251.231", "user_agent": "Boto3/1.9.183 Python/3.6.8 Linux/3.10.0-957.21.3.el7.x86_64 Botocore/1.12.183", "aws_region": "ap-southeast-2"}, "resource_arns": [], "raw_record_size_bytes": 712, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "c38aecac-bbb3-4b32-be54-3c7e0fe79bf7", "eventTime": "2019-07-08T15:21:30Z", "eventName": "DescribeVpcs", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "251.209.251.231", "userAgent": "Boto3/1.9.183 Python/3.6.8 Linux/3.10.0-957.21.3.el7.x86_64 Botocore/1.12.183", "awsRegion": "ap-southeast-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"vpcSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "a467efde-086a-4bae-9591-f601588c0a1f", "record_id": "flaws_cloudtrail:0000365:a467efde-086a-4bae-9591-f601588c0a1f", "row_index": 365, "timestamp": "2019-07-08T15:21:30Z", "event_type": "DescribeDBSecurityGroups", "event_source": "rds.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "251.209.251.231", "user_agent": "Boto3/1.9.183 Python/3.6.8 Linux/3.10.0-957.21.3.el7.x86_64 Botocore/1.12.183", "aws_region": "ca-central-1"}, "resource_arns": [], "raw_record_size_bytes": 844, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "a467efde-086a-4bae-9591-f601588c0a1f", "eventTime": "2019-07-08T15:21:30Z", "eventName": "DescribeDBSecurityGroups", "eventSource": "rds.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "251.209.251.231", "userAgent": "Boto3/1.9.183 Python/3.6.8 Linux/3.10.0-957.21.3.el7.x86_64 Botocore/1.12.183", "awsRegion": "ca-central-1", "errorCode": "AccessDenied", "errorMessage": "User: arn:aws:iam::811596193553:user/backup is not authorized to perform: rds:DescribeDBSecurityGroups", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "5a2799aa-9683-449a-b8e3-b04320d40c2", "record_id": "flaws_cloudtrail:0000366:5a2799aa-9683-449a-b8e3-b04320d40c2", "row_index": 366, "timestamp": "2019-07-08T15:21:30Z", "event_type": "DescribeDBSecurityGroups", "event_source": "rds.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "251.209.251.231", "user_agent": "Boto3/1.9.183 Python/3.6.8 Linux/3.10.0-957.21.3.el7.x86_64 Botocore/1.12.183", "aws_region": "eu-central-1"}, "resource_arns": [], "raw_record_size_bytes": 844, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "5a2799aa-9683-449a-b8e3-b04320d40c2", "eventTime": "2019-07-08T15:21:30Z", "eventName": "DescribeDBSecurityGroups", "eventSource": "rds.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "251.209.251.231", "userAgent": "Boto3/1.9.183 Python/3.6.8 Linux/3.10.0-957.21.3.el7.x86_64 Botocore/1.12.183", "awsRegion": "eu-central-1", "errorCode": "AccessDenied", "errorMessage": "User: arn:aws:iam::811596193553:user/backup is not authorized to perform: rds:DescribeDBSecurityGroups", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "7985fe5f-2d16-442e-927e-45530d9e7b6a", "record_id": "flaws_cloudtrail:0000367:7985fe5f-2d16-442e-927e-45530d9e7b6a", "row_index": 367, "timestamp": "2019-07-08T15:21:30Z", "event_type": "DescribeDBParameterGroups", "event_source": "rds.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "251.209.251.231", "user_agent": "Boto3/1.9.183 Python/3.6.8 Linux/3.10.0-957.21.3.el7.x86_64 Botocore/1.12.183", "aws_region": "eu-central-1"}, "resource_arns": [], "raw_record_size_bytes": 847, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "7985fe5f-2d16-442e-927e-45530d9e7b6a", "eventTime": "2019-07-08T15:21:30Z", "eventName": "DescribeDBParameterGroups", "eventSource": "rds.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "251.209.251.231", "userAgent": "Boto3/1.9.183 Python/3.6.8 Linux/3.10.0-957.21.3.el7.x86_64 Botocore/1.12.183", "awsRegion": "eu-central-1", "errorCode": "AccessDenied", "errorMessage": "User: arn:aws:iam::811596193553:user/backup is not authorized to perform: rds:DescribeDBParameterGroups", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "fe0dba34-c67f-4bf3-993c-3e22a9a07f00", "record_id": "flaws_cloudtrail:0000368:fe0dba34-c67f-4bf3-993c-3e22a9a07f00", "row_index": 368, "timestamp": "2019-07-08T15:21:30Z", "event_type": "DescribeDBSecurityGroups", "event_source": "rds.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "251.209.251.231", "user_agent": "Boto3/1.9.183 Python/3.6.8 Linux/3.10.0-957.21.3.el7.x86_64 Botocore/1.12.183", "aws_region": "eu-north-1"}, "resource_arns": [], "raw_record_size_bytes": 843, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "fe0dba34-c67f-4bf3-993c-3e22a9a07f00", "eventTime": "2019-07-08T15:21:30Z", "eventName": "DescribeDBSecurityGroups", "eventSource": "rds.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "251.209.251.231", "userAgent": "Boto3/1.9.183 Python/3.6.8 Linux/3.10.0-957.21.3.el7.x86_64 Botocore/1.12.183", "awsRegion": "eu-north-1", "errorCode": "AccessDenied", "errorMessage": "User: arn:aws:iam::811596193553:user/backup is not authorized to perform: rds:DescribeDBSecurityGroups", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "f516cb3f-8ef8-40ba-a233-789a24350eab", "record_id": "flaws_cloudtrail:0000369:f516cb3f-8ef8-40ba-a233-789a24350eab", "row_index": 369, "timestamp": "2019-07-08T15:21:30Z", "event_type": "DescribeDBParameterGroups", "event_source": "rds.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "251.209.251.231", "user_agent": "Boto3/1.9.183 Python/3.6.8 Linux/3.10.0-957.21.3.el7.x86_64 Botocore/1.12.183", "aws_region": "eu-north-1"}, "resource_arns": [], "raw_record_size_bytes": 845, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "f516cb3f-8ef8-40ba-a233-789a24350eab", "eventTime": "2019-07-08T15:21:30Z", "eventName": "DescribeDBParameterGroups", "eventSource": "rds.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "251.209.251.231", "userAgent": "Boto3/1.9.183 Python/3.6.8 Linux/3.10.0-957.21.3.el7.x86_64 Botocore/1.12.183", "awsRegion": "eu-north-1", "errorCode": "AccessDenied", "errorMessage": "User: arn:aws:iam::811596193553:user/backup is not authorized to perform: rds:DescribeDBParameterGroups", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "9a56e5fd-28fc-44a6-b0ca-f9da01ed7709", "record_id": "flaws_cloudtrail:0000370:9a56e5fd-28fc-44a6-b0ca-f9da01ed7709", "row_index": 370, "timestamp": "2019-07-08T15:21:30Z", "event_type": "DescribeVpcs", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "251.209.251.231", "user_agent": "Boto3/1.9.183 Python/3.6.8 Linux/3.10.0-957.21.3.el7.x86_64 Botocore/1.12.183", "aws_region": "eu-north-1"}, "resource_arns": [], "raw_record_size_bytes": 709, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "9a56e5fd-28fc-44a6-b0ca-f9da01ed7709", "eventTime": "2019-07-08T15:21:30Z", "eventName": "DescribeVpcs", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "251.209.251.231", "userAgent": "Boto3/1.9.183 Python/3.6.8 Linux/3.10.0-957.21.3.el7.x86_64 Botocore/1.12.183", "awsRegion": "eu-north-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"vpcSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "bc9f26c5-8eac-4478-b970-961e9d87f40c", "record_id": "flaws_cloudtrail:0000371:bc9f26c5-8eac-4478-b970-961e9d87f40c", "row_index": 371, "timestamp": "2019-07-08T15:21:30Z", "event_type": "DescribeDBSecurityGroups", "event_source": "rds.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "251.209.251.231", "user_agent": "Boto3/1.9.183 Python/3.6.8 Linux/3.10.0-957.21.3.el7.x86_64 Botocore/1.12.183", "aws_region": "eu-west-1"}, "resource_arns": [], "raw_record_size_bytes": 838, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "bc9f26c5-8eac-4478-b970-961e9d87f40c", "eventTime": "2019-07-08T15:21:30Z", "eventName": "DescribeDBSecurityGroups", "eventSource": "rds.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "251.209.251.231", "userAgent": "Boto3/1.9.183 Python/3.6.8 Linux/3.10.0-957.21.3.el7.x86_64 Botocore/1.12.183", "awsRegion": "eu-west-1", "errorCode": "AccessDenied", "errorMessage": "User: arn:aws:iam::811596193553:user/backup is not authorized to perform: rds:DescribeDBSecurityGroups", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "57b536a4-cd8d-4cae-8f35-4cdb283707a05", "record_id": "flaws_cloudtrail:0000372:57b536a4-cd8d-4cae-8f35-4cdb283707a05", "row_index": 372, "timestamp": "2019-07-08T15:21:30Z", "event_type": "DescribeDBParameterGroups", "event_source": "rds.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "251.209.251.231", "user_agent": "Boto3/1.9.183 Python/3.6.8 Linux/3.10.0-957.21.3.el7.x86_64 Botocore/1.12.183", "aws_region": "eu-west-1"}, "resource_arns": [], "raw_record_size_bytes": 844, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "57b536a4-cd8d-4cae-8f35-4cdb283707a05", "eventTime": "2019-07-08T15:21:30Z", "eventName": "DescribeDBParameterGroups", "eventSource": "rds.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "251.209.251.231", "userAgent": "Boto3/1.9.183 Python/3.6.8 Linux/3.10.0-957.21.3.el7.x86_64 Botocore/1.12.183", "awsRegion": "eu-west-1", "errorCode": "AccessDenied", "errorMessage": "User: arn:aws:iam::811596193553:user/backup is not authorized to perform: rds:DescribeDBParameterGroups", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "13d30924-e827-4b97-82e9-d0b01f0488c8", "record_id": "flaws_cloudtrail:0000373:13d30924-e827-4b97-82e9-d0b01f0488c8", "row_index": 373, "timestamp": "2019-07-08T15:21:30Z", "event_type": "DescribeVpcs", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "251.209.251.231", "user_agent": "Boto3/1.9.183 Python/3.6.8 Linux/3.10.0-957.21.3.el7.x86_64 Botocore/1.12.183", "aws_region": "eu-west-1"}, "resource_arns": [], "raw_record_size_bytes": 707, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "13d30924-e827-4b97-82e9-d0b01f0488c8", "eventTime": "2019-07-08T15:21:30Z", "eventName": "DescribeVpcs", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "251.209.251.231", "userAgent": "Boto3/1.9.183 Python/3.6.8 Linux/3.10.0-957.21.3.el7.x86_64 Botocore/1.12.183", "awsRegion": "eu-west-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"vpcSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "72aa65e1-006e-4ad3-8782-e31a1912b550", "record_id": "flaws_cloudtrail:0000374:72aa65e1-006e-4ad3-8782-e31a1912b550", "row_index": 374, "timestamp": "2019-07-08T15:21:30Z", "event_type": "DescribeVpcs", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "251.209.251.231", "user_agent": "Boto3/1.9.183 Python/3.6.8 Linux/3.10.0-957.21.3.el7.x86_64 Botocore/1.12.183", "aws_region": "eu-west-2"}, "resource_arns": [], "raw_record_size_bytes": 707, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "72aa65e1-006e-4ad3-8782-e31a1912b550", "eventTime": "2019-07-08T15:21:30Z", "eventName": "DescribeVpcs", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "251.209.251.231", "userAgent": "Boto3/1.9.183 Python/3.6.8 Linux/3.10.0-957.21.3.el7.x86_64 Botocore/1.12.183", "awsRegion": "eu-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"vpcSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "f8d7cd5d-55e6-4b50-b9e8-81b67c78865f", "record_id": "flaws_cloudtrail:0000375:f8d7cd5d-55e6-4b50-b9e8-81b67c78865f", "row_index": 375, "timestamp": "2019-07-08T15:21:30Z", "event_type": "DescribeDBSecurityGroups", "event_source": "rds.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "251.209.251.231", "user_agent": "Boto3/1.9.183 Python/3.6.8 Linux/3.10.0-957.21.3.el7.x86_64 Botocore/1.12.183", "aws_region": "eu-west-2"}, "resource_arns": [], "raw_record_size_bytes": 842, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "f8d7cd5d-55e6-4b50-b9e8-81b67c78865f", "eventTime": "2019-07-08T15:21:30Z", "eventName": "DescribeDBSecurityGroups", "eventSource": "rds.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "251.209.251.231", "userAgent": "Boto3/1.9.183 Python/3.6.8 Linux/3.10.0-957.21.3.el7.x86_64 Botocore/1.12.183", "awsRegion": "eu-west-2", "errorCode": "AccessDenied", "errorMessage": "User: arn:aws:iam::811596193553:user/backup is not authorized to perform: rds:DescribeDBSecurityGroups", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "45ed51e4-140b-4be6-9c4f-fe3c382c604e", "record_id": "flaws_cloudtrail:0000376:45ed51e4-140b-4be6-9c4f-fe3c382c604e", "row_index": 376, "timestamp": "2019-07-08T15:21:30Z", "event_type": "DescribeDBParameterGroups", "event_source": "rds.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "251.209.251.231", "user_agent": "Boto3/1.9.183 Python/3.6.8 Linux/3.10.0-957.21.3.el7.x86_64 Botocore/1.12.183", "aws_region": "eu-west-2"}, "resource_arns": [], "raw_record_size_bytes": 845, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "45ed51e4-140b-4be6-9c4f-fe3c382c604e", "eventTime": "2019-07-08T15:21:30Z", "eventName": "DescribeDBParameterGroups", "eventSource": "rds.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "251.209.251.231", "userAgent": "Boto3/1.9.183 Python/3.6.8 Linux/3.10.0-957.21.3.el7.x86_64 Botocore/1.12.183", "awsRegion": "eu-west-2", "errorCode": "AccessDenied", "errorMessage": "User: arn:aws:iam::811596193553:user/backup is not authorized to perform: rds:DescribeDBParameterGroups", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "974bf1a2-f620-4858-8609-d4ccf853731cd", "record_id": "flaws_cloudtrail:0000377:974bf1a2-f620-4858-8609-d4ccf853731cd", "row_index": 377, "timestamp": "2019-07-08T15:21:30Z", "event_type": "DescribeDBParameterGroups", "event_source": "rds.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "251.209.251.231", "user_agent": "Boto3/1.9.183 Python/3.6.8 Linux/3.10.0-957.21.3.el7.x86_64 Botocore/1.12.183", "aws_region": "eu-west-3"}, "resource_arns": [], "raw_record_size_bytes": 845, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "974bf1a2-f620-4858-8609-d4ccf853731cd", "eventTime": "2019-07-08T15:21:30Z", "eventName": "DescribeDBParameterGroups", "eventSource": "rds.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "251.209.251.231", "userAgent": "Boto3/1.9.183 Python/3.6.8 Linux/3.10.0-957.21.3.el7.x86_64 Botocore/1.12.183", "awsRegion": "eu-west-3", "errorCode": "AccessDenied", "errorMessage": "User: arn:aws:iam::811596193553:user/backup is not authorized to perform: rds:DescribeDBParameterGroups", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "cfe0b46b-7ba1-46be-81e4-039a16bd32b4", "record_id": "flaws_cloudtrail:0000378:cfe0b46b-7ba1-46be-81e4-039a16bd32b4", "row_index": 378, "timestamp": "2019-07-08T15:21:30Z", "event_type": "DescribeVpcs", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "251.209.251.231", "user_agent": "Boto3/1.9.183 Python/3.6.8 Linux/3.10.0-957.21.3.el7.x86_64 Botocore/1.12.183", "aws_region": "eu-west-3"}, "resource_arns": [], "raw_record_size_bytes": 707, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "cfe0b46b-7ba1-46be-81e4-039a16bd32b4", "eventTime": "2019-07-08T15:21:30Z", "eventName": "DescribeVpcs", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "251.209.251.231", "userAgent": "Boto3/1.9.183 Python/3.6.8 Linux/3.10.0-957.21.3.el7.x86_64 Botocore/1.12.183", "awsRegion": "eu-west-3", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"vpcSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "17061ab-1c5c-4d80-adea-35236449c31a", "record_id": "flaws_cloudtrail:0000379:17061ab-1c5c-4d80-adea-35236449c31a", "row_index": 379, "timestamp": "2019-07-08T15:21:30Z", "event_type": "DescribeDBSecurityGroups", "event_source": "rds.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "251.209.251.231", "user_agent": "Boto3/1.9.183 Python/3.6.8 Linux/3.10.0-957.21.3.el7.x86_64 Botocore/1.12.183", "aws_region": "eu-west-3"}, "resource_arns": [], "raw_record_size_bytes": 841, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "17061ab-1c5c-4d80-adea-35236449c31a", "eventTime": "2019-07-08T15:21:30Z", "eventName": "DescribeDBSecurityGroups", "eventSource": "rds.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "251.209.251.231", "userAgent": "Boto3/1.9.183 Python/3.6.8 Linux/3.10.0-957.21.3.el7.x86_64 Botocore/1.12.183", "awsRegion": "eu-west-3", "errorCode": "AccessDenied", "errorMessage": "User: arn:aws:iam::811596193553:user/backup is not authorized to perform: rds:DescribeDBSecurityGroups", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "2aeee042-7ff6-417c-9539-86476e05d", "record_id": "flaws_cloudtrail:0000380:2aeee042-7ff6-417c-9539-86476e05d", "row_index": 380, "timestamp": "2019-07-08T15:21:30Z", "event_type": "DescribeDBSecurityGroups", "event_source": "rds.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "251.209.251.231", "user_agent": "Boto3/1.9.183 Python/3.6.8 Linux/3.10.0-957.21.3.el7.x86_64 Botocore/1.12.183", "aws_region": "ap-southeast-1"}, "resource_arns": [], "raw_record_size_bytes": 844, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "2aeee042-7ff6-417c-9539-86476e05d", "eventTime": "2019-07-08T15:21:30Z", "eventName": "DescribeDBSecurityGroups", "eventSource": "rds.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "251.209.251.231", "userAgent": "Boto3/1.9.183 Python/3.6.8 Linux/3.10.0-957.21.3.el7.x86_64 Botocore/1.12.183", "awsRegion": "ap-southeast-1", "errorCode": "AccessDenied", "errorMessage": "User: arn:aws:iam::811596193553:user/backup is not authorized to perform: rds:DescribeDBSecurityGroups", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "e96ff5be-4790-4399-b5dd-a9380b4ce677", "record_id": "flaws_cloudtrail:0000381:e96ff5be-4790-4399-b5dd-a9380b4ce677", "row_index": 381, "timestamp": "2019-07-08T15:21:30Z", "event_type": "DescribeDBSecurityGroups", "event_source": "rds.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "251.209.251.231", "user_agent": "Boto3/1.9.183 Python/3.6.8 Linux/3.10.0-957.21.3.el7.x86_64 Botocore/1.12.183", "aws_region": "ap-southeast-2"}, "resource_arns": [], "raw_record_size_bytes": 847, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "e96ff5be-4790-4399-b5dd-a9380b4ce677", "eventTime": "2019-07-08T15:21:30Z", "eventName": "DescribeDBSecurityGroups", "eventSource": "rds.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "251.209.251.231", "userAgent": "Boto3/1.9.183 Python/3.6.8 Linux/3.10.0-957.21.3.el7.x86_64 Botocore/1.12.183", "awsRegion": "ap-southeast-2", "errorCode": "AccessDenied", "errorMessage": "User: arn:aws:iam::811596193553:user/backup is not authorized to perform: rds:DescribeDBSecurityGroups", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "9e9748a2-9289-4aa4-8a89-5018cd1a03be", "record_id": "flaws_cloudtrail:0000382:9e9748a2-9289-4aa4-8a89-5018cd1a03be", "row_index": 382, "timestamp": "2019-07-08T15:21:30Z", "event_type": "DescribeDBParameterGroups", "event_source": "rds.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "251.209.251.231", "user_agent": "Boto3/1.9.183 Python/3.6.8 Linux/3.10.0-957.21.3.el7.x86_64 Botocore/1.12.183", "aws_region": "ap-southeast-2"}, "resource_arns": [], "raw_record_size_bytes": 849, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "9e9748a2-9289-4aa4-8a89-5018cd1a03be", "eventTime": "2019-07-08T15:21:30Z", "eventName": "DescribeDBParameterGroups", "eventSource": "rds.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "251.209.251.231", "userAgent": "Boto3/1.9.183 Python/3.6.8 Linux/3.10.0-957.21.3.el7.x86_64 Botocore/1.12.183", "awsRegion": "ap-southeast-2", "errorCode": "AccessDenied", "errorMessage": "User: arn:aws:iam::811596193553:user/backup is not authorized to perform: rds:DescribeDBParameterGroups", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "c38aecac-bbb3-4b32-be54-3c7e0fe79bf7", "record_id": "flaws_cloudtrail:0000383:c38aecac-bbb3-4b32-be54-3c7e0fe79bf7", "row_index": 383, "timestamp": "2019-07-08T15:21:30Z", "event_type": "DescribeVpcs", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "251.209.251.231", "user_agent": "Boto3/1.9.183 Python/3.6.8 Linux/3.10.0-957.21.3.el7.x86_64 Botocore/1.12.183", "aws_region": "ap-southeast-2"}, "resource_arns": [], "raw_record_size_bytes": 712, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "c38aecac-bbb3-4b32-be54-3c7e0fe79bf7", "eventTime": "2019-07-08T15:21:30Z", "eventName": "DescribeVpcs", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "251.209.251.231", "userAgent": "Boto3/1.9.183 Python/3.6.8 Linux/3.10.0-957.21.3.el7.x86_64 Botocore/1.12.183", "awsRegion": "ap-southeast-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"vpcSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "a467efde-086a-4bae-9591-f601588c0a1f", "record_id": "flaws_cloudtrail:0000384:a467efde-086a-4bae-9591-f601588c0a1f", "row_index": 384, "timestamp": "2019-07-08T15:21:30Z", "event_type": "DescribeDBSecurityGroups", "event_source": "rds.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "251.209.251.231", "user_agent": "Boto3/1.9.183 Python/3.6.8 Linux/3.10.0-957.21.3.el7.x86_64 Botocore/1.12.183", "aws_region": "ca-central-1"}, "resource_arns": [], "raw_record_size_bytes": 844, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "a467efde-086a-4bae-9591-f601588c0a1f", "eventTime": "2019-07-08T15:21:30Z", "eventName": "DescribeDBSecurityGroups", "eventSource": "rds.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "251.209.251.231", "userAgent": "Boto3/1.9.183 Python/3.6.8 Linux/3.10.0-957.21.3.el7.x86_64 Botocore/1.12.183", "awsRegion": "ca-central-1", "errorCode": "AccessDenied", "errorMessage": "User: arn:aws:iam::811596193553:user/backup is not authorized to perform: rds:DescribeDBSecurityGroups", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "5a2799aa-9683-449a-b8e3-b04320d40c2", "record_id": "flaws_cloudtrail:0000385:5a2799aa-9683-449a-b8e3-b04320d40c2", "row_index": 385, "timestamp": "2019-07-08T15:21:30Z", "event_type": "DescribeDBSecurityGroups", "event_source": "rds.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "251.209.251.231", "user_agent": "Boto3/1.9.183 Python/3.6.8 Linux/3.10.0-957.21.3.el7.x86_64 Botocore/1.12.183", "aws_region": "eu-central-1"}, "resource_arns": [], "raw_record_size_bytes": 844, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "5a2799aa-9683-449a-b8e3-b04320d40c2", "eventTime": "2019-07-08T15:21:30Z", "eventName": "DescribeDBSecurityGroups", "eventSource": "rds.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "251.209.251.231", "userAgent": "Boto3/1.9.183 Python/3.6.8 Linux/3.10.0-957.21.3.el7.x86_64 Botocore/1.12.183", "awsRegion": "eu-central-1", "errorCode": "AccessDenied", "errorMessage": "User: arn:aws:iam::811596193553:user/backup is not authorized to perform: rds:DescribeDBSecurityGroups", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "7985fe5f-2d16-442e-927e-45530d9e7b6a", "record_id": "flaws_cloudtrail:0000386:7985fe5f-2d16-442e-927e-45530d9e7b6a", "row_index": 386, "timestamp": "2019-07-08T15:21:30Z", "event_type": "DescribeDBParameterGroups", "event_source": "rds.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "251.209.251.231", "user_agent": "Boto3/1.9.183 Python/3.6.8 Linux/3.10.0-957.21.3.el7.x86_64 Botocore/1.12.183", "aws_region": "eu-central-1"}, "resource_arns": [], "raw_record_size_bytes": 847, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "7985fe5f-2d16-442e-927e-45530d9e7b6a", "eventTime": "2019-07-08T15:21:30Z", "eventName": "DescribeDBParameterGroups", "eventSource": "rds.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "251.209.251.231", "userAgent": "Boto3/1.9.183 Python/3.6.8 Linux/3.10.0-957.21.3.el7.x86_64 Botocore/1.12.183", "awsRegion": "eu-central-1", "errorCode": "AccessDenied", "errorMessage": "User: arn:aws:iam::811596193553:user/backup is not authorized to perform: rds:DescribeDBParameterGroups", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "fe0dba34-c67f-4bf3-993c-3e22a9a07f00", "record_id": "flaws_cloudtrail:0000387:fe0dba34-c67f-4bf3-993c-3e22a9a07f00", "row_index": 387, "timestamp": "2019-07-08T15:21:30Z", "event_type": "DescribeDBSecurityGroups", "event_source": "rds.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "251.209.251.231", "user_agent": "Boto3/1.9.183 Python/3.6.8 Linux/3.10.0-957.21.3.el7.x86_64 Botocore/1.12.183", "aws_region": "eu-north-1"}, "resource_arns": [], "raw_record_size_bytes": 843, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "fe0dba34-c67f-4bf3-993c-3e22a9a07f00", "eventTime": "2019-07-08T15:21:30Z", "eventName": "DescribeDBSecurityGroups", "eventSource": "rds.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "251.209.251.231", "userAgent": "Boto3/1.9.183 Python/3.6.8 Linux/3.10.0-957.21.3.el7.x86_64 Botocore/1.12.183", "awsRegion": "eu-north-1", "errorCode": "AccessDenied", "errorMessage": "User: arn:aws:iam::811596193553:user/backup is not authorized to perform: rds:DescribeDBSecurityGroups", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "f516cb3f-8ef8-40ba-a233-789a24350eab", "record_id": "flaws_cloudtrail:0000388:f516cb3f-8ef8-40ba-a233-789a24350eab", "row_index": 388, "timestamp": "2019-07-08T15:21:30Z", "event_type": "DescribeDBParameterGroups", "event_source": "rds.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "251.209.251.231", "user_agent": "Boto3/1.9.183 Python/3.6.8 Linux/3.10.0-957.21.3.el7.x86_64 Botocore/1.12.183", "aws_region": "eu-north-1"}, "resource_arns": [], "raw_record_size_bytes": 845, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "f516cb3f-8ef8-40ba-a233-789a24350eab", "eventTime": "2019-07-08T15:21:30Z", "eventName": "DescribeDBParameterGroups", "eventSource": "rds.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "251.209.251.231", "userAgent": "Boto3/1.9.183 Python/3.6.8 Linux/3.10.0-957.21.3.el7.x86_64 Botocore/1.12.183", "awsRegion": "eu-north-1", "errorCode": "AccessDenied", "errorMessage": "User: arn:aws:iam::811596193553:user/backup is not authorized to perform: rds:DescribeDBParameterGroups", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "9a56e5fd-28fc-44a6-b0ca-f9da01ed7709", "record_id": "flaws_cloudtrail:0000389:9a56e5fd-28fc-44a6-b0ca-f9da01ed7709", "row_index": 389, "timestamp": "2019-07-08T15:21:30Z", "event_type": "DescribeVpcs", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "251.209.251.231", "user_agent": "Boto3/1.9.183 Python/3.6.8 Linux/3.10.0-957.21.3.el7.x86_64 Botocore/1.12.183", "aws_region": "eu-north-1"}, "resource_arns": [], "raw_record_size_bytes": 709, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "9a56e5fd-28fc-44a6-b0ca-f9da01ed7709", "eventTime": "2019-07-08T15:21:30Z", "eventName": "DescribeVpcs", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "251.209.251.231", "userAgent": "Boto3/1.9.183 Python/3.6.8 Linux/3.10.0-957.21.3.el7.x86_64 Botocore/1.12.183", "awsRegion": "eu-north-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"vpcSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "bc9f26c5-8eac-4478-b970-961e9d87f40c", "record_id": "flaws_cloudtrail:0000390:bc9f26c5-8eac-4478-b970-961e9d87f40c", "row_index": 390, "timestamp": "2019-07-08T15:21:30Z", "event_type": "DescribeDBSecurityGroups", "event_source": "rds.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "251.209.251.231", "user_agent": "Boto3/1.9.183 Python/3.6.8 Linux/3.10.0-957.21.3.el7.x86_64 Botocore/1.12.183", "aws_region": "eu-west-1"}, "resource_arns": [], "raw_record_size_bytes": 838, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "bc9f26c5-8eac-4478-b970-961e9d87f40c", "eventTime": "2019-07-08T15:21:30Z", "eventName": "DescribeDBSecurityGroups", "eventSource": "rds.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "251.209.251.231", "userAgent": "Boto3/1.9.183 Python/3.6.8 Linux/3.10.0-957.21.3.el7.x86_64 Botocore/1.12.183", "awsRegion": "eu-west-1", "errorCode": "AccessDenied", "errorMessage": "User: arn:aws:iam::811596193553:user/backup is not authorized to perform: rds:DescribeDBSecurityGroups", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "57b536a4-cd8d-4cae-8f35-4cdb283707a05", "record_id": "flaws_cloudtrail:0000391:57b536a4-cd8d-4cae-8f35-4cdb283707a05", "row_index": 391, "timestamp": "2019-07-08T15:21:30Z", "event_type": "DescribeDBParameterGroups", "event_source": "rds.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "251.209.251.231", "user_agent": "Boto3/1.9.183 Python/3.6.8 Linux/3.10.0-957.21.3.el7.x86_64 Botocore/1.12.183", "aws_region": "eu-west-1"}, "resource_arns": [], "raw_record_size_bytes": 844, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "57b536a4-cd8d-4cae-8f35-4cdb283707a05", "eventTime": "2019-07-08T15:21:30Z", "eventName": "DescribeDBParameterGroups", "eventSource": "rds.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "251.209.251.231", "userAgent": "Boto3/1.9.183 Python/3.6.8 Linux/3.10.0-957.21.3.el7.x86_64 Botocore/1.12.183", "awsRegion": "eu-west-1", "errorCode": "AccessDenied", "errorMessage": "User: arn:aws:iam::811596193553:user/backup is not authorized to perform: rds:DescribeDBParameterGroups", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "13d30924-e827-4b97-82e9-d0b01f0488c8", "record_id": "flaws_cloudtrail:0000392:13d30924-e827-4b97-82e9-d0b01f0488c8", "row_index": 392, "timestamp": "2019-07-08T15:21:30Z", "event_type": "DescribeVpcs", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "251.209.251.231", "user_agent": "Boto3/1.9.183 Python/3.6.8 Linux/3.10.0-957.21.3.el7.x86_64 Botocore/1.12.183", "aws_region": "eu-west-1"}, "resource_arns": [], "raw_record_size_bytes": 707, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "13d30924-e827-4b97-82e9-d0b01f0488c8", "eventTime": "2019-07-08T15:21:30Z", "eventName": "DescribeVpcs", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "251.209.251.231", "userAgent": "Boto3/1.9.183 Python/3.6.8 Linux/3.10.0-957.21.3.el7.x86_64 Botocore/1.12.183", "awsRegion": "eu-west-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"vpcSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "72aa65e1-006e-4ad3-8782-e31a1912b550", "record_id": "flaws_cloudtrail:0000393:72aa65e1-006e-4ad3-8782-e31a1912b550", "row_index": 393, "timestamp": "2019-07-08T15:21:30Z", "event_type": "DescribeVpcs", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "251.209.251.231", "user_agent": "Boto3/1.9.183 Python/3.6.8 Linux/3.10.0-957.21.3.el7.x86_64 Botocore/1.12.183", "aws_region": "eu-west-2"}, "resource_arns": [], "raw_record_size_bytes": 707, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "72aa65e1-006e-4ad3-8782-e31a1912b550", "eventTime": "2019-07-08T15:21:30Z", "eventName": "DescribeVpcs", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "251.209.251.231", "userAgent": "Boto3/1.9.183 Python/3.6.8 Linux/3.10.0-957.21.3.el7.x86_64 Botocore/1.12.183", "awsRegion": "eu-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"vpcSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "f8d7cd5d-55e6-4b50-b9e8-81b67c78865f", "record_id": "flaws_cloudtrail:0000394:f8d7cd5d-55e6-4b50-b9e8-81b67c78865f", "row_index": 394, "timestamp": "2019-07-08T15:21:30Z", "event_type": "DescribeDBSecurityGroups", "event_source": "rds.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "251.209.251.231", "user_agent": "Boto3/1.9.183 Python/3.6.8 Linux/3.10.0-957.21.3.el7.x86_64 Botocore/1.12.183", "aws_region": "eu-west-2"}, "resource_arns": [], "raw_record_size_bytes": 842, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "f8d7cd5d-55e6-4b50-b9e8-81b67c78865f", "eventTime": "2019-07-08T15:21:30Z", "eventName": "DescribeDBSecurityGroups", "eventSource": "rds.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "251.209.251.231", "userAgent": "Boto3/1.9.183 Python/3.6.8 Linux/3.10.0-957.21.3.el7.x86_64 Botocore/1.12.183", "awsRegion": "eu-west-2", "errorCode": "AccessDenied", "errorMessage": "User: arn:aws:iam::811596193553:user/backup is not authorized to perform: rds:DescribeDBSecurityGroups", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "45ed51e4-140b-4be6-9c4f-fe3c382c604e", "record_id": "flaws_cloudtrail:0000395:45ed51e4-140b-4be6-9c4f-fe3c382c604e", "row_index": 395, "timestamp": "2019-07-08T15:21:30Z", "event_type": "DescribeDBParameterGroups", "event_source": "rds.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "251.209.251.231", "user_agent": "Boto3/1.9.183 Python/3.6.8 Linux/3.10.0-957.21.3.el7.x86_64 Botocore/1.12.183", "aws_region": "eu-west-2"}, "resource_arns": [], "raw_record_size_bytes": 845, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "45ed51e4-140b-4be6-9c4f-fe3c382c604e", "eventTime": "2019-07-08T15:21:30Z", "eventName": "DescribeDBParameterGroups", "eventSource": "rds.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "251.209.251.231", "userAgent": "Boto3/1.9.183 Python/3.6.8 Linux/3.10.0-957.21.3.el7.x86_64 Botocore/1.12.183", "awsRegion": "eu-west-2", "errorCode": "AccessDenied", "errorMessage": "User: arn:aws:iam::811596193553:user/backup is not authorized to perform: rds:DescribeDBParameterGroups", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "974bf1a2-f620-4858-8609-d4ccf853731cd", "record_id": "flaws_cloudtrail:0000396:974bf1a2-f620-4858-8609-d4ccf853731cd", "row_index": 396, "timestamp": "2019-07-08T15:21:30Z", "event_type": "DescribeDBParameterGroups", "event_source": "rds.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "251.209.251.231", "user_agent": "Boto3/1.9.183 Python/3.6.8 Linux/3.10.0-957.21.3.el7.x86_64 Botocore/1.12.183", "aws_region": "eu-west-3"}, "resource_arns": [], "raw_record_size_bytes": 845, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "974bf1a2-f620-4858-8609-d4ccf853731cd", "eventTime": "2019-07-08T15:21:30Z", "eventName": "DescribeDBParameterGroups", "eventSource": "rds.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "251.209.251.231", "userAgent": "Boto3/1.9.183 Python/3.6.8 Linux/3.10.0-957.21.3.el7.x86_64 Botocore/1.12.183", "awsRegion": "eu-west-3", "errorCode": "AccessDenied", "errorMessage": "User: arn:aws:iam::811596193553:user/backup is not authorized to perform: rds:DescribeDBParameterGroups", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "cfe0b46b-7ba1-46be-81e4-039a16bd32b4", "record_id": "flaws_cloudtrail:0000397:cfe0b46b-7ba1-46be-81e4-039a16bd32b4", "row_index": 397, "timestamp": "2019-07-08T15:21:30Z", "event_type": "DescribeVpcs", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "251.209.251.231", "user_agent": "Boto3/1.9.183 Python/3.6.8 Linux/3.10.0-957.21.3.el7.x86_64 Botocore/1.12.183", "aws_region": "eu-west-3"}, "resource_arns": [], "raw_record_size_bytes": 707, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "cfe0b46b-7ba1-46be-81e4-039a16bd32b4", "eventTime": "2019-07-08T15:21:30Z", "eventName": "DescribeVpcs", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "251.209.251.231", "userAgent": "Boto3/1.9.183 Python/3.6.8 Linux/3.10.0-957.21.3.el7.x86_64 Botocore/1.12.183", "awsRegion": "eu-west-3", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"vpcSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "17061ab-1c5c-4d80-adea-35236449c31a", "record_id": "flaws_cloudtrail:0000398:17061ab-1c5c-4d80-adea-35236449c31a", "row_index": 398, "timestamp": "2019-07-08T15:21:30Z", "event_type": "DescribeDBSecurityGroups", "event_source": "rds.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "251.209.251.231", "user_agent": "Boto3/1.9.183 Python/3.6.8 Linux/3.10.0-957.21.3.el7.x86_64 Botocore/1.12.183", "aws_region": "eu-west-3"}, "resource_arns": [], "raw_record_size_bytes": 841, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "17061ab-1c5c-4d80-adea-35236449c31a", "eventTime": "2019-07-08T15:21:30Z", "eventName": "DescribeDBSecurityGroups", "eventSource": "rds.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "251.209.251.231", "userAgent": "Boto3/1.9.183 Python/3.6.8 Linux/3.10.0-957.21.3.el7.x86_64 Botocore/1.12.183", "awsRegion": "eu-west-3", "errorCode": "AccessDenied", "errorMessage": "User: arn:aws:iam::811596193553:user/backup is not authorized to perform: rds:DescribeDBSecurityGroups", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "030df53a-da51-4868-8272-4cb364e6081a", "record_id": "flaws_cloudtrail:0000399:030df53a-da51-4868-8272-4cb364e6081a", "row_index": 399, "timestamp": "2019-07-08T15:21:31Z", "event_type": "DescribeVpcs", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "251.209.251.231", "user_agent": "Boto3/1.9.183 Python/3.6.8 Linux/3.10.0-957.21.3.el7.x86_64 Botocore/1.12.183", "aws_region": "ap-northeast-1"}, "resource_arns": [], "raw_record_size_bytes": 712, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "030df53a-da51-4868-8272-4cb364e6081a", "eventTime": "2019-07-08T15:21:31Z", "eventName": "DescribeVpcs", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "251.209.251.231", "userAgent": "Boto3/1.9.183 Python/3.6.8 Linux/3.10.0-957.21.3.el7.x86_64 Botocore/1.12.183", "awsRegion": "ap-northeast-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"vpcSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "863a9ea2-b7d5-4c5d-ac16-59ca30f2020d", "record_id": "flaws_cloudtrail:0000400:863a9ea2-b7d5-4c5d-ac16-59ca30f2020d", "row_index": 400, "timestamp": "2019-07-08T15:21:31Z", "event_type": "DescribeDBSecurityGroups", "event_source": "rds.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "251.209.251.231", "user_agent": "Boto3/1.9.183 Python/3.6.8 Linux/3.10.0-957.21.3.el7.x86_64 Botocore/1.12.183", "aws_region": "sa-east-1"}, "resource_arns": [], "raw_record_size_bytes": 842, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "863a9ea2-b7d5-4c5d-ac16-59ca30f2020d", "eventTime": "2019-07-08T15:21:31Z", "eventName": "DescribeDBSecurityGroups", "eventSource": "rds.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "251.209.251.231", "userAgent": "Boto3/1.9.183 Python/3.6.8 Linux/3.10.0-957.21.3.el7.x86_64 Botocore/1.12.183", "awsRegion": "sa-east-1", "errorCode": "AccessDenied", "errorMessage": "User: arn:aws:iam::811596193553:user/backup is not authorized to perform: rds:DescribeDBSecurityGroups", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "f37c48f6-e54e-4d82-8a24-642ea31d6a81", "record_id": "flaws_cloudtrail:0000401:f37c48f6-e54e-4d82-8a24-642ea31d6a81", "row_index": 401, "timestamp": "2019-07-08T15:21:31Z", "event_type": "DescribeVpcs", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "251.209.251.231", "user_agent": "Boto3/1.9.183 Python/3.6.8 Linux/3.10.0-957.21.3.el7.x86_64 Botocore/1.12.183", "aws_region": "sa-east-1"}, "resource_arns": [], "raw_record_size_bytes": 707, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "f37c48f6-e54e-4d82-8a24-642ea31d6a81", "eventTime": "2019-07-08T15:21:31Z", "eventName": "DescribeVpcs", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "251.209.251.231", "userAgent": "Boto3/1.9.183 Python/3.6.8 Linux/3.10.0-957.21.3.el7.x86_64 Botocore/1.12.183", "awsRegion": "sa-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"vpcSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "10c29e13-ef65-4798-ba5d-094c36a45539", "record_id": "flaws_cloudtrail:0000402:10c29e13-ef65-4798-ba5d-094c36a45539", "row_index": 402, "timestamp": "2019-07-08T15:21:31Z", "event_type": "DescribeDBParameterGroups", "event_source": "rds.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "251.209.251.231", "user_agent": "Boto3/1.9.183 Python/3.6.8 Linux/3.10.0-957.21.3.el7.x86_64 Botocore/1.12.183", "aws_region": "sa-east-1"}, "resource_arns": [], "raw_record_size_bytes": 844, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "10c29e13-ef65-4798-ba5d-094c36a45539", "eventTime": "2019-07-08T15:21:31Z", "eventName": "DescribeDBParameterGroups", "eventSource": "rds.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "251.209.251.231", "userAgent": "Boto3/1.9.183 Python/3.6.8 Linux/3.10.0-957.21.3.el7.x86_64 Botocore/1.12.183", "awsRegion": "sa-east-1", "errorCode": "AccessDenied", "errorMessage": "User: arn:aws:iam::811596193553:user/backup is not authorized to perform: rds:DescribeDBParameterGroups", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "b7820f56-c496-48af-999b-83585e858fcf", "record_id": "flaws_cloudtrail:0000403:b7820f56-c496-48af-999b-83585e858fcf", "row_index": 403, "timestamp": "2019-07-08T15:21:31Z", "event_type": "DescribeDBSecurityGroups", "event_source": "rds.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "251.209.251.231", "user_agent": "Boto3/1.9.183 Python/3.6.8 Linux/3.10.0-957.21.3.el7.x86_64 Botocore/1.12.183", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 842, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "b7820f56-c496-48af-999b-83585e858fcf", "eventTime": "2019-07-08T15:21:31Z", "eventName": "DescribeDBSecurityGroups", "eventSource": "rds.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "251.209.251.231", "userAgent": "Boto3/1.9.183 Python/3.6.8 Linux/3.10.0-957.21.3.el7.x86_64 Botocore/1.12.183", "awsRegion": "us-east-1", "errorCode": "AccessDenied", "errorMessage": "User: arn:aws:iam::811596193553:user/backup is not authorized to perform: rds:DescribeDBSecurityGroups", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "6f0e7885-aea4-40cf-bd74-2c47ccec49e9", "record_id": "flaws_cloudtrail:0000404:6f0e7885-aea4-40cf-bd74-2c47ccec49e9", "row_index": 404, "timestamp": "2019-07-08T15:21:31Z", "event_type": "DescribeDBParameterGroups", "event_source": "rds.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "251.209.251.231", "user_agent": "Boto3/1.9.183 Python/3.6.8 Linux/3.10.0-957.21.3.el7.x86_64 Botocore/1.12.183", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 844, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "6f0e7885-aea4-40cf-bd74-2c47ccec49e9", "eventTime": "2019-07-08T15:21:31Z", "eventName": "DescribeDBParameterGroups", "eventSource": "rds.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "251.209.251.231", "userAgent": "Boto3/1.9.183 Python/3.6.8 Linux/3.10.0-957.21.3.el7.x86_64 Botocore/1.12.183", "awsRegion": "us-east-1", "errorCode": "AccessDenied", "errorMessage": "User: arn:aws:iam::811596193553:user/backup is not authorized to perform: rds:DescribeDBParameterGroups", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "7a5e8d9f-a6c4-416b-8f30-f33d9fceead4", "record_id": "flaws_cloudtrail:0000405:7a5e8d9f-a6c4-416b-8f30-f33d9fceead4", "row_index": 405, "timestamp": "2019-07-08T15:21:31Z", "event_type": "DescribeVpcs", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "251.209.251.231", "user_agent": "Boto3/1.9.183 Python/3.6.8 Linux/3.10.0-957.21.3.el7.x86_64 Botocore/1.12.183", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 707, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "7a5e8d9f-a6c4-416b-8f30-f33d9fceead4", "eventTime": "2019-07-08T15:21:31Z", "eventName": "DescribeVpcs", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "251.209.251.231", "userAgent": "Boto3/1.9.183 Python/3.6.8 Linux/3.10.0-957.21.3.el7.x86_64 Botocore/1.12.183", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"vpcSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "c069944c-53cc-4a4c-ba24-ca11e37f7440", "record_id": "flaws_cloudtrail:0000406:c069944c-53cc-4a4c-ba24-ca11e37f7440", "row_index": 406, "timestamp": "2019-07-08T15:21:31Z", "event_type": "DescribeDBSecurityGroups", "event_source": "rds.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "251.209.251.231", "user_agent": "Boto3/1.9.183 Python/3.6.8 Linux/3.10.0-957.21.3.el7.x86_64 Botocore/1.12.183", "aws_region": "us-east-2"}, "resource_arns": [], "raw_record_size_bytes": 842, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "c069944c-53cc-4a4c-ba24-ca11e37f7440", "eventTime": "2019-07-08T15:21:31Z", "eventName": "DescribeDBSecurityGroups", "eventSource": "rds.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "251.209.251.231", "userAgent": "Boto3/1.9.183 Python/3.6.8 Linux/3.10.0-957.21.3.el7.x86_64 Botocore/1.12.183", "awsRegion": "us-east-2", "errorCode": "AccessDenied", "errorMessage": "User: arn:aws:iam::811596193553:user/backup is not authorized to perform: rds:DescribeDBSecurityGroups", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "0a2a7bf0-d625-4f8e-b3a4-93f3c12288", "record_id": "flaws_cloudtrail:0000407:0a2a7bf0-d625-4f8e-b3a4-93f3c12288", "row_index": 407, "timestamp": "2019-07-08T15:21:31Z", "event_type": "DescribeVpcs", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "251.209.251.231", "user_agent": "Boto3/1.9.183 Python/3.6.8 Linux/3.10.0-957.21.3.el7.x86_64 Botocore/1.12.183", "aws_region": "us-east-2"}, "resource_arns": [], "raw_record_size_bytes": 705, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "0a2a7bf0-d625-4f8e-b3a4-93f3c12288", "eventTime": "2019-07-08T15:21:31Z", "eventName": "DescribeVpcs", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "251.209.251.231", "userAgent": "Boto3/1.9.183 Python/3.6.8 Linux/3.10.0-957.21.3.el7.x86_64 Botocore/1.12.183", "awsRegion": "us-east-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"vpcSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "98a8a142-aa62-42bf-8b91-17b6ed487759", "record_id": "flaws_cloudtrail:0000408:98a8a142-aa62-42bf-8b91-17b6ed487759", "row_index": 408, "timestamp": "2019-07-08T15:21:31Z", "event_type": "DescribeDBParameterGroups", "event_source": "rds.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "251.209.251.231", "user_agent": "Boto3/1.9.183 Python/3.6.8 Linux/3.10.0-957.21.3.el7.x86_64 Botocore/1.12.183", "aws_region": "us-east-2"}, "resource_arns": [], "raw_record_size_bytes": 844, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "98a8a142-aa62-42bf-8b91-17b6ed487759", "eventTime": "2019-07-08T15:21:31Z", "eventName": "DescribeDBParameterGroups", "eventSource": "rds.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "251.209.251.231", "userAgent": "Boto3/1.9.183 Python/3.6.8 Linux/3.10.0-957.21.3.el7.x86_64 Botocore/1.12.183", "awsRegion": "us-east-2", "errorCode": "AccessDenied", "errorMessage": "User: arn:aws:iam::811596193553:user/backup is not authorized to perform: rds:DescribeDBParameterGroups", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "1514f1a0-d136-403d-b9dc-46945c429ab4", "record_id": "flaws_cloudtrail:0000409:1514f1a0-d136-403d-b9dc-46945c429ab4", "row_index": 409, "timestamp": "2019-07-08T15:21:31Z", "event_type": "DescribeVpcs", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "251.209.251.231", "user_agent": "Boto3/1.9.183 Python/3.6.8 Linux/3.10.0-957.21.3.el7.x86_64 Botocore/1.12.183", "aws_region": "us-west-1"}, "resource_arns": [], "raw_record_size_bytes": 707, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "1514f1a0-d136-403d-b9dc-46945c429ab4", "eventTime": "2019-07-08T15:21:31Z", "eventName": "DescribeVpcs", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "251.209.251.231", "userAgent": "Boto3/1.9.183 Python/3.6.8 Linux/3.10.0-957.21.3.el7.x86_64 Botocore/1.12.183", "awsRegion": "us-west-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"vpcSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "bf3cb064-5be1-4a87-9a0b-25e7641e5520", "record_id": "flaws_cloudtrail:0000410:bf3cb064-5be1-4a87-9a0b-25e7641e5520", "row_index": 410, "timestamp": "2019-07-08T15:21:31Z", "event_type": "DescribeDBSecurityGroups", "event_source": "rds.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "251.209.251.231", "user_agent": "Boto3/1.9.183 Python/3.6.8 Linux/3.10.0-957.21.3.el7.x86_64 Botocore/1.12.183", "aws_region": "us-west-1"}, "resource_arns": [], "raw_record_size_bytes": 842, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "bf3cb064-5be1-4a87-9a0b-25e7641e5520", "eventTime": "2019-07-08T15:21:31Z", "eventName": "DescribeDBSecurityGroups", "eventSource": "rds.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "251.209.251.231", "userAgent": "Boto3/1.9.183 Python/3.6.8 Linux/3.10.0-957.21.3.el7.x86_64 Botocore/1.12.183", "awsRegion": "us-west-1", "errorCode": "AccessDenied", "errorMessage": "User: arn:aws:iam::811596193553:user/backup is not authorized to perform: rds:DescribeDBSecurityGroups", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "0744f68e-ddf1-456c-bd03-6ae7b310724", "record_id": "flaws_cloudtrail:0000411:0744f68e-ddf1-456c-bd03-6ae7b310724", "row_index": 411, "timestamp": "2019-07-08T15:21:31Z", "event_type": "DescribeDBParameterGroups", "event_source": "rds.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "251.209.251.231", "user_agent": "Boto3/1.9.183 Python/3.6.8 Linux/3.10.0-957.21.3.el7.x86_64 Botocore/1.12.183", "aws_region": "us-west-1"}, "resource_arns": [], "raw_record_size_bytes": 843, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "0744f68e-ddf1-456c-bd03-6ae7b310724", "eventTime": "2019-07-08T15:21:31Z", "eventName": "DescribeDBParameterGroups", "eventSource": "rds.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "251.209.251.231", "userAgent": "Boto3/1.9.183 Python/3.6.8 Linux/3.10.0-957.21.3.el7.x86_64 Botocore/1.12.183", "awsRegion": "us-west-1", "errorCode": "AccessDenied", "errorMessage": "User: arn:aws:iam::811596193553:user/backup is not authorized to perform: rds:DescribeDBParameterGroups", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "742353-8866-494f-a5f3-88b95316e8c7", "record_id": "flaws_cloudtrail:0000412:742353-8866-494f-a5f3-88b95316e8c7", "row_index": 412, "timestamp": "2019-07-08T15:21:31Z", "event_type": "DescribeDBSecurityGroups", "event_source": "rds.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "251.209.251.231", "user_agent": "Boto3/1.9.183 Python/3.6.8 Linux/3.10.0-957.21.3.el7.x86_64 Botocore/1.12.183", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 840, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "742353-8866-494f-a5f3-88b95316e8c7", "eventTime": "2019-07-08T15:21:31Z", "eventName": "DescribeDBSecurityGroups", "eventSource": "rds.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "251.209.251.231", "userAgent": "Boto3/1.9.183 Python/3.6.8 Linux/3.10.0-957.21.3.el7.x86_64 Botocore/1.12.183", "awsRegion": "us-west-2", "errorCode": "AccessDenied", "errorMessage": "User: arn:aws:iam::811596193553:user/backup is not authorized to perform: rds:DescribeDBSecurityGroups", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "030df53a-da51-4868-8272-4cb364e6081a", "record_id": "flaws_cloudtrail:0000413:030df53a-da51-4868-8272-4cb364e6081a", "row_index": 413, "timestamp": "2019-07-08T15:21:31Z", "event_type": "DescribeVpcs", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "251.209.251.231", "user_agent": "Boto3/1.9.183 Python/3.6.8 Linux/3.10.0-957.21.3.el7.x86_64 Botocore/1.12.183", "aws_region": "ap-northeast-1"}, "resource_arns": [], "raw_record_size_bytes": 712, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "030df53a-da51-4868-8272-4cb364e6081a", "eventTime": "2019-07-08T15:21:31Z", "eventName": "DescribeVpcs", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "251.209.251.231", "userAgent": "Boto3/1.9.183 Python/3.6.8 Linux/3.10.0-957.21.3.el7.x86_64 Botocore/1.12.183", "awsRegion": "ap-northeast-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"vpcSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "863a9ea2-b7d5-4c5d-ac16-59ca30f2020d", "record_id": "flaws_cloudtrail:0000414:863a9ea2-b7d5-4c5d-ac16-59ca30f2020d", "row_index": 414, "timestamp": "2019-07-08T15:21:31Z", "event_type": "DescribeDBSecurityGroups", "event_source": "rds.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "251.209.251.231", "user_agent": "Boto3/1.9.183 Python/3.6.8 Linux/3.10.0-957.21.3.el7.x86_64 Botocore/1.12.183", "aws_region": "sa-east-1"}, "resource_arns": [], "raw_record_size_bytes": 842, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "863a9ea2-b7d5-4c5d-ac16-59ca30f2020d", "eventTime": "2019-07-08T15:21:31Z", "eventName": "DescribeDBSecurityGroups", "eventSource": "rds.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "251.209.251.231", "userAgent": "Boto3/1.9.183 Python/3.6.8 Linux/3.10.0-957.21.3.el7.x86_64 Botocore/1.12.183", "awsRegion": "sa-east-1", "errorCode": "AccessDenied", "errorMessage": "User: arn:aws:iam::811596193553:user/backup is not authorized to perform: rds:DescribeDBSecurityGroups", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "f37c48f6-e54e-4d82-8a24-642ea31d6a81", "record_id": "flaws_cloudtrail:0000415:f37c48f6-e54e-4d82-8a24-642ea31d6a81", "row_index": 415, "timestamp": "2019-07-08T15:21:31Z", "event_type": "DescribeVpcs", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "251.209.251.231", "user_agent": "Boto3/1.9.183 Python/3.6.8 Linux/3.10.0-957.21.3.el7.x86_64 Botocore/1.12.183", "aws_region": "sa-east-1"}, "resource_arns": [], "raw_record_size_bytes": 707, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "f37c48f6-e54e-4d82-8a24-642ea31d6a81", "eventTime": "2019-07-08T15:21:31Z", "eventName": "DescribeVpcs", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "251.209.251.231", "userAgent": "Boto3/1.9.183 Python/3.6.8 Linux/3.10.0-957.21.3.el7.x86_64 Botocore/1.12.183", "awsRegion": "sa-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"vpcSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "10c29e13-ef65-4798-ba5d-094c36a45539", "record_id": "flaws_cloudtrail:0000416:10c29e13-ef65-4798-ba5d-094c36a45539", "row_index": 416, "timestamp": "2019-07-08T15:21:31Z", "event_type": "DescribeDBParameterGroups", "event_source": "rds.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "251.209.251.231", "user_agent": "Boto3/1.9.183 Python/3.6.8 Linux/3.10.0-957.21.3.el7.x86_64 Botocore/1.12.183", "aws_region": "sa-east-1"}, "resource_arns": [], "raw_record_size_bytes": 844, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "10c29e13-ef65-4798-ba5d-094c36a45539", "eventTime": "2019-07-08T15:21:31Z", "eventName": "DescribeDBParameterGroups", "eventSource": "rds.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "251.209.251.231", "userAgent": "Boto3/1.9.183 Python/3.6.8 Linux/3.10.0-957.21.3.el7.x86_64 Botocore/1.12.183", "awsRegion": "sa-east-1", "errorCode": "AccessDenied", "errorMessage": "User: arn:aws:iam::811596193553:user/backup is not authorized to perform: rds:DescribeDBParameterGroups", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "b7820f56-c496-48af-999b-83585e858fcf", "record_id": "flaws_cloudtrail:0000417:b7820f56-c496-48af-999b-83585e858fcf", "row_index": 417, "timestamp": "2019-07-08T15:21:31Z", "event_type": "DescribeDBSecurityGroups", "event_source": "rds.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "251.209.251.231", "user_agent": "Boto3/1.9.183 Python/3.6.8 Linux/3.10.0-957.21.3.el7.x86_64 Botocore/1.12.183", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 842, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "b7820f56-c496-48af-999b-83585e858fcf", "eventTime": "2019-07-08T15:21:31Z", "eventName": "DescribeDBSecurityGroups", "eventSource": "rds.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "251.209.251.231", "userAgent": "Boto3/1.9.183 Python/3.6.8 Linux/3.10.0-957.21.3.el7.x86_64 Botocore/1.12.183", "awsRegion": "us-east-1", "errorCode": "AccessDenied", "errorMessage": "User: arn:aws:iam::811596193553:user/backup is not authorized to perform: rds:DescribeDBSecurityGroups", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "6f0e7885-aea4-40cf-bd74-2c47ccec49e9", "record_id": "flaws_cloudtrail:0000418:6f0e7885-aea4-40cf-bd74-2c47ccec49e9", "row_index": 418, "timestamp": "2019-07-08T15:21:31Z", "event_type": "DescribeDBParameterGroups", "event_source": "rds.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "251.209.251.231", "user_agent": "Boto3/1.9.183 Python/3.6.8 Linux/3.10.0-957.21.3.el7.x86_64 Botocore/1.12.183", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 844, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "6f0e7885-aea4-40cf-bd74-2c47ccec49e9", "eventTime": "2019-07-08T15:21:31Z", "eventName": "DescribeDBParameterGroups", "eventSource": "rds.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "251.209.251.231", "userAgent": "Boto3/1.9.183 Python/3.6.8 Linux/3.10.0-957.21.3.el7.x86_64 Botocore/1.12.183", "awsRegion": "us-east-1", "errorCode": "AccessDenied", "errorMessage": "User: arn:aws:iam::811596193553:user/backup is not authorized to perform: rds:DescribeDBParameterGroups", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "7a5e8d9f-a6c4-416b-8f30-f33d9fceead4", "record_id": "flaws_cloudtrail:0000419:7a5e8d9f-a6c4-416b-8f30-f33d9fceead4", "row_index": 419, "timestamp": "2019-07-08T15:21:31Z", "event_type": "DescribeVpcs", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "251.209.251.231", "user_agent": "Boto3/1.9.183 Python/3.6.8 Linux/3.10.0-957.21.3.el7.x86_64 Botocore/1.12.183", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 707, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "7a5e8d9f-a6c4-416b-8f30-f33d9fceead4", "eventTime": "2019-07-08T15:21:31Z", "eventName": "DescribeVpcs", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "251.209.251.231", "userAgent": "Boto3/1.9.183 Python/3.6.8 Linux/3.10.0-957.21.3.el7.x86_64 Botocore/1.12.183", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"vpcSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "c069944c-53cc-4a4c-ba24-ca11e37f7440", "record_id": "flaws_cloudtrail:0000420:c069944c-53cc-4a4c-ba24-ca11e37f7440", "row_index": 420, "timestamp": "2019-07-08T15:21:31Z", "event_type": "DescribeDBSecurityGroups", "event_source": "rds.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "251.209.251.231", "user_agent": "Boto3/1.9.183 Python/3.6.8 Linux/3.10.0-957.21.3.el7.x86_64 Botocore/1.12.183", "aws_region": "us-east-2"}, "resource_arns": [], "raw_record_size_bytes": 842, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "c069944c-53cc-4a4c-ba24-ca11e37f7440", "eventTime": "2019-07-08T15:21:31Z", "eventName": "DescribeDBSecurityGroups", "eventSource": "rds.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "251.209.251.231", "userAgent": "Boto3/1.9.183 Python/3.6.8 Linux/3.10.0-957.21.3.el7.x86_64 Botocore/1.12.183", "awsRegion": "us-east-2", "errorCode": "AccessDenied", "errorMessage": "User: arn:aws:iam::811596193553:user/backup is not authorized to perform: rds:DescribeDBSecurityGroups", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "0a2a7bf0-d625-4f8e-b3a4-93f3c12288", "record_id": "flaws_cloudtrail:0000421:0a2a7bf0-d625-4f8e-b3a4-93f3c12288", "row_index": 421, "timestamp": "2019-07-08T15:21:31Z", "event_type": "DescribeVpcs", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "251.209.251.231", "user_agent": "Boto3/1.9.183 Python/3.6.8 Linux/3.10.0-957.21.3.el7.x86_64 Botocore/1.12.183", "aws_region": "us-east-2"}, "resource_arns": [], "raw_record_size_bytes": 705, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "0a2a7bf0-d625-4f8e-b3a4-93f3c12288", "eventTime": "2019-07-08T15:21:31Z", "eventName": "DescribeVpcs", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "251.209.251.231", "userAgent": "Boto3/1.9.183 Python/3.6.8 Linux/3.10.0-957.21.3.el7.x86_64 Botocore/1.12.183", "awsRegion": "us-east-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"vpcSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "98a8a142-aa62-42bf-8b91-17b6ed487759", "record_id": "flaws_cloudtrail:0000422:98a8a142-aa62-42bf-8b91-17b6ed487759", "row_index": 422, "timestamp": "2019-07-08T15:21:31Z", "event_type": "DescribeDBParameterGroups", "event_source": "rds.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "251.209.251.231", "user_agent": "Boto3/1.9.183 Python/3.6.8 Linux/3.10.0-957.21.3.el7.x86_64 Botocore/1.12.183", "aws_region": "us-east-2"}, "resource_arns": [], "raw_record_size_bytes": 844, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "98a8a142-aa62-42bf-8b91-17b6ed487759", "eventTime": "2019-07-08T15:21:31Z", "eventName": "DescribeDBParameterGroups", "eventSource": "rds.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "251.209.251.231", "userAgent": "Boto3/1.9.183 Python/3.6.8 Linux/3.10.0-957.21.3.el7.x86_64 Botocore/1.12.183", "awsRegion": "us-east-2", "errorCode": "AccessDenied", "errorMessage": "User: arn:aws:iam::811596193553:user/backup is not authorized to perform: rds:DescribeDBParameterGroups", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "1514f1a0-d136-403d-b9dc-46945c429ab4", "record_id": "flaws_cloudtrail:0000423:1514f1a0-d136-403d-b9dc-46945c429ab4", "row_index": 423, "timestamp": "2019-07-08T15:21:31Z", "event_type": "DescribeVpcs", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "251.209.251.231", "user_agent": "Boto3/1.9.183 Python/3.6.8 Linux/3.10.0-957.21.3.el7.x86_64 Botocore/1.12.183", "aws_region": "us-west-1"}, "resource_arns": [], "raw_record_size_bytes": 707, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "1514f1a0-d136-403d-b9dc-46945c429ab4", "eventTime": "2019-07-08T15:21:31Z", "eventName": "DescribeVpcs", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "251.209.251.231", "userAgent": "Boto3/1.9.183 Python/3.6.8 Linux/3.10.0-957.21.3.el7.x86_64 Botocore/1.12.183", "awsRegion": "us-west-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"vpcSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "bf3cb064-5be1-4a87-9a0b-25e7641e5520", "record_id": "flaws_cloudtrail:0000424:bf3cb064-5be1-4a87-9a0b-25e7641e5520", "row_index": 424, "timestamp": "2019-07-08T15:21:31Z", "event_type": "DescribeDBSecurityGroups", "event_source": "rds.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "251.209.251.231", "user_agent": "Boto3/1.9.183 Python/3.6.8 Linux/3.10.0-957.21.3.el7.x86_64 Botocore/1.12.183", "aws_region": "us-west-1"}, "resource_arns": [], "raw_record_size_bytes": 842, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "bf3cb064-5be1-4a87-9a0b-25e7641e5520", "eventTime": "2019-07-08T15:21:31Z", "eventName": "DescribeDBSecurityGroups", "eventSource": "rds.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "251.209.251.231", "userAgent": "Boto3/1.9.183 Python/3.6.8 Linux/3.10.0-957.21.3.el7.x86_64 Botocore/1.12.183", "awsRegion": "us-west-1", "errorCode": "AccessDenied", "errorMessage": "User: arn:aws:iam::811596193553:user/backup is not authorized to perform: rds:DescribeDBSecurityGroups", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "0744f68e-ddf1-456c-bd03-6ae7b310724", "record_id": "flaws_cloudtrail:0000425:0744f68e-ddf1-456c-bd03-6ae7b310724", "row_index": 425, "timestamp": "2019-07-08T15:21:31Z", "event_type": "DescribeDBParameterGroups", "event_source": "rds.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "251.209.251.231", "user_agent": "Boto3/1.9.183 Python/3.6.8 Linux/3.10.0-957.21.3.el7.x86_64 Botocore/1.12.183", "aws_region": "us-west-1"}, "resource_arns": [], "raw_record_size_bytes": 843, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "0744f68e-ddf1-456c-bd03-6ae7b310724", "eventTime": "2019-07-08T15:21:31Z", "eventName": "DescribeDBParameterGroups", "eventSource": "rds.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "251.209.251.231", "userAgent": "Boto3/1.9.183 Python/3.6.8 Linux/3.10.0-957.21.3.el7.x86_64 Botocore/1.12.183", "awsRegion": "us-west-1", "errorCode": "AccessDenied", "errorMessage": "User: arn:aws:iam::811596193553:user/backup is not authorized to perform: rds:DescribeDBParameterGroups", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "742353-8866-494f-a5f3-88b95316e8c7", "record_id": "flaws_cloudtrail:0000426:742353-8866-494f-a5f3-88b95316e8c7", "row_index": 426, "timestamp": "2019-07-08T15:21:31Z", "event_type": "DescribeDBSecurityGroups", "event_source": "rds.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "251.209.251.231", "user_agent": "Boto3/1.9.183 Python/3.6.8 Linux/3.10.0-957.21.3.el7.x86_64 Botocore/1.12.183", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 840, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "742353-8866-494f-a5f3-88b95316e8c7", "eventTime": "2019-07-08T15:21:31Z", "eventName": "DescribeDBSecurityGroups", "eventSource": "rds.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "251.209.251.231", "userAgent": "Boto3/1.9.183 Python/3.6.8 Linux/3.10.0-957.21.3.el7.x86_64 Botocore/1.12.183", "awsRegion": "us-west-2", "errorCode": "AccessDenied", "errorMessage": "User: arn:aws:iam::811596193553:user/backup is not authorized to perform: rds:DescribeDBSecurityGroups", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "71c1d2f9-2d89-4261-9ef8-d7d09220e03", "record_id": "flaws_cloudtrail:0000427:71c1d2f9-2d89-4261-9ef8-d7d09220e03", "row_index": 427, "timestamp": "2019-07-08T15:21:32Z", "event_type": "DescribeCacheSecurityGroups", "event_source": "elasticache.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "251.209.251.231", "user_agent": "Boto3/1.9.183 Python/3.6.8 Linux/3.10.0-957.21.3.el7.x86_64 Botocore/1.12.183", "aws_region": "ap-northeast-1"}, "resource_arns": [], "raw_record_size_bytes": 868, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "71c1d2f9-2d89-4261-9ef8-d7d09220e03", "eventTime": "2019-07-08T15:21:32Z", "eventName": "DescribeCacheSecurityGroups", "eventSource": "elasticache.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "251.209.251.231", "userAgent": "Boto3/1.9.183 Python/3.6.8 Linux/3.10.0-957.21.3.el7.x86_64 Botocore/1.12.183", "awsRegion": "ap-northeast-1", "errorCode": "AccessDenied", "errorMessage": "User: arn:aws:iam::811596193553:user/backup is not authorized to perform: elasticache:DescribeCacheSecurityGroups", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "a777d38f-ee6b-4db9-8221-7fb0842bd233", "record_id": "flaws_cloudtrail:0000428:a777d38f-ee6b-4db9-8221-7fb0842bd233", "row_index": 428, "timestamp": "2019-07-08T15:21:32Z", "event_type": "DescribeCacheParameterGroups", "event_source": "elasticache.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "251.209.251.231", "user_agent": "Boto3/1.9.183 Python/3.6.8 Linux/3.10.0-957.21.3.el7.x86_64 Botocore/1.12.183", "aws_region": "ap-northeast-1"}, "resource_arns": [], "raw_record_size_bytes": 871, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "a777d38f-ee6b-4db9-8221-7fb0842bd233", "eventTime": "2019-07-08T15:21:32Z", "eventName": "DescribeCacheParameterGroups", "eventSource": "elasticache.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "251.209.251.231", "userAgent": "Boto3/1.9.183 Python/3.6.8 Linux/3.10.0-957.21.3.el7.x86_64 Botocore/1.12.183", "awsRegion": "ap-northeast-1", "errorCode": "AccessDenied", "errorMessage": "User: arn:aws:iam::811596193553:user/backup is not authorized to perform: elasticache:DescribeCacheParameterGroups", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "0c6ceca1-6efe-4de6-8d2d-1d92319e99b1", "record_id": "flaws_cloudtrail:0000429:0c6ceca1-6efe-4de6-8d2d-1d92319e99b1", "row_index": 429, "timestamp": "2019-07-08T15:21:32Z", "event_type": "DescribeVpcs", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "251.209.251.231", "user_agent": "Boto3/1.9.183 Python/3.6.8 Linux/3.10.0-957.21.3.el7.x86_64 Botocore/1.12.183", "aws_region": "ap-northeast-2"}, "resource_arns": [], "raw_record_size_bytes": 712, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "0c6ceca1-6efe-4de6-8d2d-1d92319e99b1", "eventTime": "2019-07-08T15:21:32Z", "eventName": "DescribeVpcs", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "251.209.251.231", "userAgent": "Boto3/1.9.183 Python/3.6.8 Linux/3.10.0-957.21.3.el7.x86_64 Botocore/1.12.183", "awsRegion": "ap-northeast-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"vpcSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "bfdcb57f-3de0-4f0b-8dc6-b490980ae2b5", "record_id": "flaws_cloudtrail:0000430:bfdcb57f-3de0-4f0b-8dc6-b490980ae2b5", "row_index": 430, "timestamp": "2019-07-08T15:21:32Z", "event_type": "DescribeCacheParameterGroups", "event_source": "elasticache.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "251.209.251.231", "user_agent": "Boto3/1.9.183 Python/3.6.8 Linux/3.10.0-957.21.3.el7.x86_64 Botocore/1.12.183", "aws_region": "ap-south-1"}, "resource_arns": [], "raw_record_size_bytes": 867, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "bfdcb57f-3de0-4f0b-8dc6-b490980ae2b5", "eventTime": "2019-07-08T15:21:32Z", "eventName": "DescribeCacheParameterGroups", "eventSource": "elasticache.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "251.209.251.231", "userAgent": "Boto3/1.9.183 Python/3.6.8 Linux/3.10.0-957.21.3.el7.x86_64 Botocore/1.12.183", "awsRegion": "ap-south-1", "errorCode": "AccessDenied", "errorMessage": "User: arn:aws:iam::811596193553:user/backup is not authorized to perform: elasticache:DescribeCacheParameterGroups", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "f18fd507-c1fb-43c4-83dd-a18894807dc9", "record_id": "flaws_cloudtrail:0000431:f18fd507-c1fb-43c4-83dd-a18894807dc9", "row_index": 431, "timestamp": "2019-07-08T15:21:32Z", "event_type": "DescribeVpcs", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "251.209.251.231", "user_agent": "Boto3/1.9.183 Python/3.6.8 Linux/3.10.0-957.21.3.el7.x86_64 Botocore/1.12.183", "aws_region": "ap-south-1"}, "resource_arns": [], "raw_record_size_bytes": 705, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "f18fd507-c1fb-43c4-83dd-a18894807dc9", "eventTime": "2019-07-08T15:21:32Z", "eventName": "DescribeVpcs", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "251.209.251.231", "userAgent": "Boto3/1.9.183 Python/3.6.8 Linux/3.10.0-957.21.3.el7.x86_64 Botocore/1.12.183", "awsRegion": "ap-south-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"vpcSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "04ad6398-00f2-4294-a1c0-a2af28d0908e", "record_id": "flaws_cloudtrail:0000432:04ad6398-00f2-4294-a1c0-a2af28d0908e", "row_index": 432, "timestamp": "2019-07-08T15:21:32Z", "event_type": "DescribeCacheSecurityGroups", "event_source": "elasticache.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "251.209.251.231", "user_agent": "Boto3/1.9.183 Python/3.6.8 Linux/3.10.0-957.21.3.el7.x86_64 Botocore/1.12.183", "aws_region": "ap-south-1"}, "resource_arns": [], "raw_record_size_bytes": 865, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "04ad6398-00f2-4294-a1c0-a2af28d0908e", "eventTime": "2019-07-08T15:21:32Z", "eventName": "DescribeCacheSecurityGroups", "eventSource": "elasticache.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "251.209.251.231", "userAgent": "Boto3/1.9.183 Python/3.6.8 Linux/3.10.0-957.21.3.el7.x86_64 Botocore/1.12.183", "awsRegion": "ap-south-1", "errorCode": "AccessDenied", "errorMessage": "User: arn:aws:iam::811596193553:user/backup is not authorized to perform: elasticache:DescribeCacheSecurityGroups", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "9ac5d5e3-456e-4024-92ad-051ca308d2bf", "record_id": "flaws_cloudtrail:0000433:9ac5d5e3-456e-4024-92ad-051ca308d2bf", "row_index": 433, "timestamp": "2019-07-08T15:21:32Z", "event_type": "DescribeVpcs", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "251.209.251.231", "user_agent": "Boto3/1.9.183 Python/3.6.8 Linux/3.10.0-957.21.3.el7.x86_64 Botocore/1.12.183", "aws_region": "ap-southeast-1"}, "resource_arns": [], "raw_record_size_bytes": 712, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "9ac5d5e3-456e-4024-92ad-051ca308d2bf", "eventTime": "2019-07-08T15:21:32Z", "eventName": "DescribeVpcs", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "251.209.251.231", "userAgent": "Boto3/1.9.183 Python/3.6.8 Linux/3.10.0-957.21.3.el7.x86_64 Botocore/1.12.183", "awsRegion": "ap-southeast-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"vpcSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "5dcfd610-09df-456f-ab64-7ade0070a838", "record_id": "flaws_cloudtrail:0000434:5dcfd610-09df-456f-ab64-7ade0070a838", "row_index": 434, "timestamp": "2019-07-08T15:21:32Z", "event_type": "DescribeVpcs", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "251.209.251.231", "user_agent": "Boto3/1.9.183 Python/3.6.8 Linux/3.10.0-957.21.3.el7.x86_64 Botocore/1.12.183", "aws_region": "ap-southeast-2"}, "resource_arns": [], "raw_record_size_bytes": 711, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "5dcfd610-09df-456f-ab64-7ade0070a838", "eventTime": "2019-07-08T15:21:32Z", "eventName": "DescribeVpcs", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "251.209.251.231", "userAgent": "Boto3/1.9.183 Python/3.6.8 Linux/3.10.0-957.21.3.el7.x86_64 Botocore/1.12.183", "awsRegion": "ap-southeast-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"vpcSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "bcda1128-1638-4ff5-9f4a-04c2259a1a09", "record_id": "flaws_cloudtrail:0000435:bcda1128-1638-4ff5-9f4a-04c2259a1a09", "row_index": 435, "timestamp": "2019-07-08T15:21:32Z", "event_type": "DescribeVpcs", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "251.209.251.231", "user_agent": "Boto3/1.9.183 Python/3.6.8 Linux/3.10.0-957.21.3.el7.x86_64 Botocore/1.12.183", "aws_region": "ca-central-1"}, "resource_arns": [], "raw_record_size_bytes": 710, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "bcda1128-1638-4ff5-9f4a-04c2259a1a09", "eventTime": "2019-07-08T15:21:32Z", "eventName": "DescribeVpcs", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "251.209.251.231", "userAgent": "Boto3/1.9.183 Python/3.6.8 Linux/3.10.0-957.21.3.el7.x86_64 Botocore/1.12.183", "awsRegion": "ca-central-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"vpcSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "969a739e-3fae-4659-99be-f0f17840aed5", "record_id": "flaws_cloudtrail:0000436:969a739e-3fae-4659-99be-f0f17840aed5", "row_index": 436, "timestamp": "2019-07-08T15:21:32Z", "event_type": "DescribeVpcs", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "251.209.251.231", "user_agent": "Boto3/1.9.183 Python/3.6.8 Linux/3.10.0-957.21.3.el7.x86_64 Botocore/1.12.183", "aws_region": "eu-central-1"}, "resource_arns": [], "raw_record_size_bytes": 711, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "969a739e-3fae-4659-99be-f0f17840aed5", "eventTime": "2019-07-08T15:21:32Z", "eventName": "DescribeVpcs", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "251.209.251.231", "userAgent": "Boto3/1.9.183 Python/3.6.8 Linux/3.10.0-957.21.3.el7.x86_64 Botocore/1.12.183", "awsRegion": "eu-central-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"vpcSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "82b5cd6c-4ddf-4779-b8a1-df0a00b3c088", "record_id": "flaws_cloudtrail:0000437:82b5cd6c-4ddf-4779-b8a1-df0a00b3c088", "row_index": 437, "timestamp": "2019-07-08T15:21:32Z", "event_type": "DescribeDBParameterGroups", "event_source": "rds.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "251.209.251.231", "user_agent": "Boto3/1.9.183 Python/3.6.8 Linux/3.10.0-957.21.3.el7.x86_64 Botocore/1.12.183", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 844, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "82b5cd6c-4ddf-4779-b8a1-df0a00b3c088", "eventTime": "2019-07-08T15:21:32Z", "eventName": "DescribeDBParameterGroups", "eventSource": "rds.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "251.209.251.231", "userAgent": "Boto3/1.9.183 Python/3.6.8 Linux/3.10.0-957.21.3.el7.x86_64 Botocore/1.12.183", "awsRegion": "us-west-2", "errorCode": "AccessDenied", "errorMessage": "User: arn:aws:iam::811596193553:user/backup is not authorized to perform: rds:DescribeDBParameterGroups", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "712af00e-df04-4e50-97b7-03b94fdf2681", "record_id": "flaws_cloudtrail:0000438:712af00e-df04-4e50-97b7-03b94fdf2681", "row_index": 438, "timestamp": "2019-07-08T15:21:32Z", "event_type": "DescribeVpcs", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "251.209.251.231", "user_agent": "Boto3/1.9.183 Python/3.6.8 Linux/3.10.0-957.21.3.el7.x86_64 Botocore/1.12.183", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 707, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "712af00e-df04-4e50-97b7-03b94fdf2681", "eventTime": "2019-07-08T15:21:32Z", "eventName": "DescribeVpcs", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "251.209.251.231", "userAgent": "Boto3/1.9.183 Python/3.6.8 Linux/3.10.0-957.21.3.el7.x86_64 Botocore/1.12.183", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"vpcSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "71c1d2f9-2d89-4261-9ef8-d7d09220e03", "record_id": "flaws_cloudtrail:0000439:71c1d2f9-2d89-4261-9ef8-d7d09220e03", "row_index": 439, "timestamp": "2019-07-08T15:21:32Z", "event_type": "DescribeCacheSecurityGroups", "event_source": "elasticache.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "251.209.251.231", "user_agent": "Boto3/1.9.183 Python/3.6.8 Linux/3.10.0-957.21.3.el7.x86_64 Botocore/1.12.183", "aws_region": "ap-northeast-1"}, "resource_arns": [], "raw_record_size_bytes": 868, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "71c1d2f9-2d89-4261-9ef8-d7d09220e03", "eventTime": "2019-07-08T15:21:32Z", "eventName": "DescribeCacheSecurityGroups", "eventSource": "elasticache.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "251.209.251.231", "userAgent": "Boto3/1.9.183 Python/3.6.8 Linux/3.10.0-957.21.3.el7.x86_64 Botocore/1.12.183", "awsRegion": "ap-northeast-1", "errorCode": "AccessDenied", "errorMessage": "User: arn:aws:iam::811596193553:user/backup is not authorized to perform: elasticache:DescribeCacheSecurityGroups", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "a777d38f-ee6b-4db9-8221-7fb0842bd233", "record_id": "flaws_cloudtrail:0000440:a777d38f-ee6b-4db9-8221-7fb0842bd233", "row_index": 440, "timestamp": "2019-07-08T15:21:32Z", "event_type": "DescribeCacheParameterGroups", "event_source": "elasticache.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "251.209.251.231", "user_agent": "Boto3/1.9.183 Python/3.6.8 Linux/3.10.0-957.21.3.el7.x86_64 Botocore/1.12.183", "aws_region": "ap-northeast-1"}, "resource_arns": [], "raw_record_size_bytes": 871, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "a777d38f-ee6b-4db9-8221-7fb0842bd233", "eventTime": "2019-07-08T15:21:32Z", "eventName": "DescribeCacheParameterGroups", "eventSource": "elasticache.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "251.209.251.231", "userAgent": "Boto3/1.9.183 Python/3.6.8 Linux/3.10.0-957.21.3.el7.x86_64 Botocore/1.12.183", "awsRegion": "ap-northeast-1", "errorCode": "AccessDenied", "errorMessage": "User: arn:aws:iam::811596193553:user/backup is not authorized to perform: elasticache:DescribeCacheParameterGroups", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "0c6ceca1-6efe-4de6-8d2d-1d92319e99b1", "record_id": "flaws_cloudtrail:0000441:0c6ceca1-6efe-4de6-8d2d-1d92319e99b1", "row_index": 441, "timestamp": "2019-07-08T15:21:32Z", "event_type": "DescribeVpcs", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "251.209.251.231", "user_agent": "Boto3/1.9.183 Python/3.6.8 Linux/3.10.0-957.21.3.el7.x86_64 Botocore/1.12.183", "aws_region": "ap-northeast-2"}, "resource_arns": [], "raw_record_size_bytes": 712, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "0c6ceca1-6efe-4de6-8d2d-1d92319e99b1", "eventTime": "2019-07-08T15:21:32Z", "eventName": "DescribeVpcs", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "251.209.251.231", "userAgent": "Boto3/1.9.183 Python/3.6.8 Linux/3.10.0-957.21.3.el7.x86_64 Botocore/1.12.183", "awsRegion": "ap-northeast-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"vpcSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "bfdcb57f-3de0-4f0b-8dc6-b490980ae2b5", "record_id": "flaws_cloudtrail:0000442:bfdcb57f-3de0-4f0b-8dc6-b490980ae2b5", "row_index": 442, "timestamp": "2019-07-08T15:21:32Z", "event_type": "DescribeCacheParameterGroups", "event_source": "elasticache.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "251.209.251.231", "user_agent": "Boto3/1.9.183 Python/3.6.8 Linux/3.10.0-957.21.3.el7.x86_64 Botocore/1.12.183", "aws_region": "ap-south-1"}, "resource_arns": [], "raw_record_size_bytes": 867, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "bfdcb57f-3de0-4f0b-8dc6-b490980ae2b5", "eventTime": "2019-07-08T15:21:32Z", "eventName": "DescribeCacheParameterGroups", "eventSource": "elasticache.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "251.209.251.231", "userAgent": "Boto3/1.9.183 Python/3.6.8 Linux/3.10.0-957.21.3.el7.x86_64 Botocore/1.12.183", "awsRegion": "ap-south-1", "errorCode": "AccessDenied", "errorMessage": "User: arn:aws:iam::811596193553:user/backup is not authorized to perform: elasticache:DescribeCacheParameterGroups", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "f18fd507-c1fb-43c4-83dd-a18894807dc9", "record_id": "flaws_cloudtrail:0000443:f18fd507-c1fb-43c4-83dd-a18894807dc9", "row_index": 443, "timestamp": "2019-07-08T15:21:32Z", "event_type": "DescribeVpcs", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "251.209.251.231", "user_agent": "Boto3/1.9.183 Python/3.6.8 Linux/3.10.0-957.21.3.el7.x86_64 Botocore/1.12.183", "aws_region": "ap-south-1"}, "resource_arns": [], "raw_record_size_bytes": 705, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "f18fd507-c1fb-43c4-83dd-a18894807dc9", "eventTime": "2019-07-08T15:21:32Z", "eventName": "DescribeVpcs", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "251.209.251.231", "userAgent": "Boto3/1.9.183 Python/3.6.8 Linux/3.10.0-957.21.3.el7.x86_64 Botocore/1.12.183", "awsRegion": "ap-south-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"vpcSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "04ad6398-00f2-4294-a1c0-a2af28d0908e", "record_id": "flaws_cloudtrail:0000444:04ad6398-00f2-4294-a1c0-a2af28d0908e", "row_index": 444, "timestamp": "2019-07-08T15:21:32Z", "event_type": "DescribeCacheSecurityGroups", "event_source": "elasticache.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "251.209.251.231", "user_agent": "Boto3/1.9.183 Python/3.6.8 Linux/3.10.0-957.21.3.el7.x86_64 Botocore/1.12.183", "aws_region": "ap-south-1"}, "resource_arns": [], "raw_record_size_bytes": 865, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "04ad6398-00f2-4294-a1c0-a2af28d0908e", "eventTime": "2019-07-08T15:21:32Z", "eventName": "DescribeCacheSecurityGroups", "eventSource": "elasticache.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "251.209.251.231", "userAgent": "Boto3/1.9.183 Python/3.6.8 Linux/3.10.0-957.21.3.el7.x86_64 Botocore/1.12.183", "awsRegion": "ap-south-1", "errorCode": "AccessDenied", "errorMessage": "User: arn:aws:iam::811596193553:user/backup is not authorized to perform: elasticache:DescribeCacheSecurityGroups", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "9ac5d5e3-456e-4024-92ad-051ca308d2bf", "record_id": "flaws_cloudtrail:0000445:9ac5d5e3-456e-4024-92ad-051ca308d2bf", "row_index": 445, "timestamp": "2019-07-08T15:21:32Z", "event_type": "DescribeVpcs", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "251.209.251.231", "user_agent": "Boto3/1.9.183 Python/3.6.8 Linux/3.10.0-957.21.3.el7.x86_64 Botocore/1.12.183", "aws_region": "ap-southeast-1"}, "resource_arns": [], "raw_record_size_bytes": 712, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "9ac5d5e3-456e-4024-92ad-051ca308d2bf", "eventTime": "2019-07-08T15:21:32Z", "eventName": "DescribeVpcs", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "251.209.251.231", "userAgent": "Boto3/1.9.183 Python/3.6.8 Linux/3.10.0-957.21.3.el7.x86_64 Botocore/1.12.183", "awsRegion": "ap-southeast-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"vpcSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "5dcfd610-09df-456f-ab64-7ade0070a838", "record_id": "flaws_cloudtrail:0000446:5dcfd610-09df-456f-ab64-7ade0070a838", "row_index": 446, "timestamp": "2019-07-08T15:21:32Z", "event_type": "DescribeVpcs", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "251.209.251.231", "user_agent": "Boto3/1.9.183 Python/3.6.8 Linux/3.10.0-957.21.3.el7.x86_64 Botocore/1.12.183", "aws_region": "ap-southeast-2"}, "resource_arns": [], "raw_record_size_bytes": 711, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "5dcfd610-09df-456f-ab64-7ade0070a838", "eventTime": "2019-07-08T15:21:32Z", "eventName": "DescribeVpcs", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "251.209.251.231", "userAgent": "Boto3/1.9.183 Python/3.6.8 Linux/3.10.0-957.21.3.el7.x86_64 Botocore/1.12.183", "awsRegion": "ap-southeast-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"vpcSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "bcda1128-1638-4ff5-9f4a-04c2259a1a09", "record_id": "flaws_cloudtrail:0000447:bcda1128-1638-4ff5-9f4a-04c2259a1a09", "row_index": 447, "timestamp": "2019-07-08T15:21:32Z", "event_type": "DescribeVpcs", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "251.209.251.231", "user_agent": "Boto3/1.9.183 Python/3.6.8 Linux/3.10.0-957.21.3.el7.x86_64 Botocore/1.12.183", "aws_region": "ca-central-1"}, "resource_arns": [], "raw_record_size_bytes": 710, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "bcda1128-1638-4ff5-9f4a-04c2259a1a09", "eventTime": "2019-07-08T15:21:32Z", "eventName": "DescribeVpcs", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "251.209.251.231", "userAgent": "Boto3/1.9.183 Python/3.6.8 Linux/3.10.0-957.21.3.el7.x86_64 Botocore/1.12.183", "awsRegion": "ca-central-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"vpcSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "969a739e-3fae-4659-99be-f0f17840aed5", "record_id": "flaws_cloudtrail:0000448:969a739e-3fae-4659-99be-f0f17840aed5", "row_index": 448, "timestamp": "2019-07-08T15:21:32Z", "event_type": "DescribeVpcs", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "251.209.251.231", "user_agent": "Boto3/1.9.183 Python/3.6.8 Linux/3.10.0-957.21.3.el7.x86_64 Botocore/1.12.183", "aws_region": "eu-central-1"}, "resource_arns": [], "raw_record_size_bytes": 711, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "969a739e-3fae-4659-99be-f0f17840aed5", "eventTime": "2019-07-08T15:21:32Z", "eventName": "DescribeVpcs", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "251.209.251.231", "userAgent": "Boto3/1.9.183 Python/3.6.8 Linux/3.10.0-957.21.3.el7.x86_64 Botocore/1.12.183", "awsRegion": "eu-central-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"vpcSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "82b5cd6c-4ddf-4779-b8a1-df0a00b3c088", "record_id": "flaws_cloudtrail:0000449:82b5cd6c-4ddf-4779-b8a1-df0a00b3c088", "row_index": 449, "timestamp": "2019-07-08T15:21:32Z", "event_type": "DescribeDBParameterGroups", "event_source": "rds.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "251.209.251.231", "user_agent": "Boto3/1.9.183 Python/3.6.8 Linux/3.10.0-957.21.3.el7.x86_64 Botocore/1.12.183", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 844, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "82b5cd6c-4ddf-4779-b8a1-df0a00b3c088", "eventTime": "2019-07-08T15:21:32Z", "eventName": "DescribeDBParameterGroups", "eventSource": "rds.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "251.209.251.231", "userAgent": "Boto3/1.9.183 Python/3.6.8 Linux/3.10.0-957.21.3.el7.x86_64 Botocore/1.12.183", "awsRegion": "us-west-2", "errorCode": "AccessDenied", "errorMessage": "User: arn:aws:iam::811596193553:user/backup is not authorized to perform: rds:DescribeDBParameterGroups", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "712af00e-df04-4e50-97b7-03b94fdf2681", "record_id": "flaws_cloudtrail:0000450:712af00e-df04-4e50-97b7-03b94fdf2681", "row_index": 450, "timestamp": "2019-07-08T15:21:32Z", "event_type": "DescribeVpcs", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "251.209.251.231", "user_agent": "Boto3/1.9.183 Python/3.6.8 Linux/3.10.0-957.21.3.el7.x86_64 Botocore/1.12.183", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 707, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "712af00e-df04-4e50-97b7-03b94fdf2681", "eventTime": "2019-07-08T15:21:32Z", "eventName": "DescribeVpcs", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "251.209.251.231", "userAgent": "Boto3/1.9.183 Python/3.6.8 Linux/3.10.0-957.21.3.el7.x86_64 Botocore/1.12.183", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"vpcSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "48d7150a-ffe1-4af0-8981-48a6e3fba89e", "record_id": "flaws_cloudtrail:0000451:48d7150a-ffe1-4af0-8981-48a6e3fba89e", "row_index": 451, "timestamp": "2019-07-08T15:21:33Z", "event_type": "DescribeCacheParameterGroups", "event_source": "elasticache.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "251.209.251.231", "user_agent": "Boto3/1.9.183 Python/3.6.8 Linux/3.10.0-957.21.3.el7.x86_64 Botocore/1.12.183", "aws_region": "ap-northeast-2"}, "resource_arns": [], "raw_record_size_bytes": 871, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "48d7150a-ffe1-4af0-8981-48a6e3fba89e", "eventTime": "2019-07-08T15:21:33Z", "eventName": "DescribeCacheParameterGroups", "eventSource": "elasticache.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "251.209.251.231", "userAgent": "Boto3/1.9.183 Python/3.6.8 Linux/3.10.0-957.21.3.el7.x86_64 Botocore/1.12.183", "awsRegion": "ap-northeast-2", "errorCode": "AccessDenied", "errorMessage": "User: arn:aws:iam::811596193553:user/backup is not authorized to perform: elasticache:DescribeCacheParameterGroups", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "79f027b4-be30-43d2-8e78-ede8e369cfbb", "record_id": "flaws_cloudtrail:0000452:79f027b4-be30-43d2-8e78-ede8e369cfbb", "row_index": 452, "timestamp": "2019-07-08T15:21:33Z", "event_type": "DescribeCacheSecurityGroups", "event_source": "elasticache.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "251.209.251.231", "user_agent": "Boto3/1.9.183 Python/3.6.8 Linux/3.10.0-957.21.3.el7.x86_64 Botocore/1.12.183", "aws_region": "ap-northeast-2"}, "resource_arns": [], "raw_record_size_bytes": 866, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "79f027b4-be30-43d2-8e78-ede8e369cfbb", "eventTime": "2019-07-08T15:21:33Z", "eventName": "DescribeCacheSecurityGroups", "eventSource": "elasticache.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "251.209.251.231", "userAgent": "Boto3/1.9.183 Python/3.6.8 Linux/3.10.0-957.21.3.el7.x86_64 Botocore/1.12.183", "awsRegion": "ap-northeast-2", "errorCode": "AccessDenied", "errorMessage": "User: arn:aws:iam::811596193553:user/backup is not authorized to perform: elasticache:DescribeCacheSecurityGroups", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "c5baae6a-ada3-4f30-be60-6d5ea45aadc8", "record_id": "flaws_cloudtrail:0000453:c5baae6a-ada3-4f30-be60-6d5ea45aadc8", "row_index": 453, "timestamp": "2019-07-08T15:21:33Z", "event_type": "DescribeCacheParameterGroups", "event_source": "elasticache.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "251.209.251.231", "user_agent": "Boto3/1.9.183 Python/3.6.8 Linux/3.10.0-957.21.3.el7.x86_64 Botocore/1.12.183", "aws_region": "ap-southeast-1"}, "resource_arns": [], "raw_record_size_bytes": 871, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "c5baae6a-ada3-4f30-be60-6d5ea45aadc8", "eventTime": "2019-07-08T15:21:33Z", "eventName": "DescribeCacheParameterGroups", "eventSource": "elasticache.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "251.209.251.231", "userAgent": "Boto3/1.9.183 Python/3.6.8 Linux/3.10.0-957.21.3.el7.x86_64 Botocore/1.12.183", "awsRegion": "ap-southeast-1", "errorCode": "AccessDenied", "errorMessage": "User: arn:aws:iam::811596193553:user/backup is not authorized to perform: elasticache:DescribeCacheParameterGroups", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "7be40361-cdbd-42cc-a963-76f2fdd1e795", "record_id": "flaws_cloudtrail:0000454:7be40361-cdbd-42cc-a963-76f2fdd1e795", "row_index": 454, "timestamp": "2019-07-08T15:21:33Z", "event_type": "DescribeCacheSecurityGroups", "event_source": "elasticache.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "251.209.251.231", "user_agent": "Boto3/1.9.183 Python/3.6.8 Linux/3.10.0-957.21.3.el7.x86_64 Botocore/1.12.183", "aws_region": "ap-southeast-1"}, "resource_arns": [], "raw_record_size_bytes": 869, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "7be40361-cdbd-42cc-a963-76f2fdd1e795", "eventTime": "2019-07-08T15:21:33Z", "eventName": "DescribeCacheSecurityGroups", "eventSource": "elasticache.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "251.209.251.231", "userAgent": "Boto3/1.9.183 Python/3.6.8 Linux/3.10.0-957.21.3.el7.x86_64 Botocore/1.12.183", "awsRegion": "ap-southeast-1", "errorCode": "AccessDenied", "errorMessage": "User: arn:aws:iam::811596193553:user/backup is not authorized to perform: elasticache:DescribeCacheSecurityGroups", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "08ac4f73-0672-466b-8eb1-3a712511", "record_id": "flaws_cloudtrail:0000455:08ac4f73-0672-466b-8eb1-3a712511", "row_index": 455, "timestamp": "2019-07-08T15:21:33Z", "event_type": "DescribeCacheSecurityGroups", "event_source": "elasticache.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "251.209.251.231", "user_agent": "Boto3/1.9.183 Python/3.6.8 Linux/3.10.0-957.21.3.el7.x86_64 Botocore/1.12.183", "aws_region": "ap-southeast-2"}, "resource_arns": [], "raw_record_size_bytes": 865, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "08ac4f73-0672-466b-8eb1-3a712511", "eventTime": "2019-07-08T15:21:33Z", "eventName": "DescribeCacheSecurityGroups", "eventSource": "elasticache.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "251.209.251.231", "userAgent": "Boto3/1.9.183 Python/3.6.8 Linux/3.10.0-957.21.3.el7.x86_64 Botocore/1.12.183", "awsRegion": "ap-southeast-2", "errorCode": "AccessDenied", "errorMessage": "User: arn:aws:iam::811596193553:user/backup is not authorized to perform: elasticache:DescribeCacheSecurityGroups", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "f8694e53-ca48-4319-b16a-aa24a8dedc1f", "record_id": "flaws_cloudtrail:0000456:f8694e53-ca48-4319-b16a-aa24a8dedc1f", "row_index": 456, "timestamp": "2019-07-08T15:21:33Z", "event_type": "DescribeCacheSecurityGroups", "event_source": "elasticache.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "251.209.251.231", "user_agent": "Boto3/1.9.183 Python/3.6.8 Linux/3.10.0-957.21.3.el7.x86_64 Botocore/1.12.183", "aws_region": "ca-central-1"}, "resource_arns": [], "raw_record_size_bytes": 867, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "f8694e53-ca48-4319-b16a-aa24a8dedc1f", "eventTime": "2019-07-08T15:21:33Z", "eventName": "DescribeCacheSecurityGroups", "eventSource": "elasticache.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "251.209.251.231", "userAgent": "Boto3/1.9.183 Python/3.6.8 Linux/3.10.0-957.21.3.el7.x86_64 Botocore/1.12.183", "awsRegion": "ca-central-1", "errorCode": "AccessDenied", "errorMessage": "User: arn:aws:iam::811596193553:user/backup is not authorized to perform: elasticache:DescribeCacheSecurityGroups", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "90a03056-1340-4061-b46c-f562a17a3b92", "record_id": "flaws_cloudtrail:0000457:90a03056-1340-4061-b46c-f562a17a3b92", "row_index": 457, "timestamp": "2019-07-08T15:21:33Z", "event_type": "DescribeCacheParameterGroups", "event_source": "elasticache.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "251.209.251.231", "user_agent": "Boto3/1.9.183 Python/3.6.8 Linux/3.10.0-957.21.3.el7.x86_64 Botocore/1.12.183", "aws_region": "ca-central-1"}, "resource_arns": [], "raw_record_size_bytes": 869, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "90a03056-1340-4061-b46c-f562a17a3b92", "eventTime": "2019-07-08T15:21:33Z", "eventName": "DescribeCacheParameterGroups", "eventSource": "elasticache.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "251.209.251.231", "userAgent": "Boto3/1.9.183 Python/3.6.8 Linux/3.10.0-957.21.3.el7.x86_64 Botocore/1.12.183", "awsRegion": "ca-central-1", "errorCode": "AccessDenied", "errorMessage": "User: arn:aws:iam::811596193553:user/backup is not authorized to perform: elasticache:DescribeCacheParameterGroups", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "2b9b4d07-1059-427e-85a7-95e259ce4541", "record_id": "flaws_cloudtrail:0000458:2b9b4d07-1059-427e-85a7-95e259ce4541", "row_index": 458, "timestamp": "2019-07-08T15:21:33Z", "event_type": "DescribeCacheParameterGroups", "event_source": "elasticache.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "251.209.251.231", "user_agent": "Boto3/1.9.183 Python/3.6.8 Linux/3.10.0-957.21.3.el7.x86_64 Botocore/1.12.183", "aws_region": "eu-central-1"}, "resource_arns": [], "raw_record_size_bytes": 865, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "2b9b4d07-1059-427e-85a7-95e259ce4541", "eventTime": "2019-07-08T15:21:33Z", "eventName": "DescribeCacheParameterGroups", "eventSource": "elasticache.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "251.209.251.231", "userAgent": "Boto3/1.9.183 Python/3.6.8 Linux/3.10.0-957.21.3.el7.x86_64 Botocore/1.12.183", "awsRegion": "eu-central-1", "errorCode": "AccessDenied", "errorMessage": "User: arn:aws:iam::811596193553:user/backup is not authorized to perform: elasticache:DescribeCacheParameterGroups", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "23e9f44d-7f36-41bc-b7ca-aee4a0cbf4b2", "record_id": "flaws_cloudtrail:0000459:23e9f44d-7f36-41bc-b7ca-aee4a0cbf4b2", "row_index": 459, "timestamp": "2019-07-08T15:21:33Z", "event_type": "DescribeCacheSecurityGroups", "event_source": "elasticache.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "251.209.251.231", "user_agent": "Boto3/1.9.183 Python/3.6.8 Linux/3.10.0-957.21.3.el7.x86_64 Botocore/1.12.183", "aws_region": "eu-central-1"}, "resource_arns": [], "raw_record_size_bytes": 867, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "23e9f44d-7f36-41bc-b7ca-aee4a0cbf4b2", "eventTime": "2019-07-08T15:21:33Z", "eventName": "DescribeCacheSecurityGroups", "eventSource": "elasticache.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "251.209.251.231", "userAgent": "Boto3/1.9.183 Python/3.6.8 Linux/3.10.0-957.21.3.el7.x86_64 Botocore/1.12.183", "awsRegion": "eu-central-1", "errorCode": "AccessDenied", "errorMessage": "User: arn:aws:iam::811596193553:user/backup is not authorized to perform: elasticache:DescribeCacheSecurityGroups", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "0db205376-a984-4950-809c-93dc79ec5d1d", "record_id": "flaws_cloudtrail:0000460:0db205376-a984-4950-809c-93dc79ec5d1d", "row_index": 460, "timestamp": "2019-07-08T15:21:33Z", "event_type": "DescribeCacheParameterGroups", "event_source": "elasticache.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "251.209.251.231", "user_agent": "Boto3/1.9.183 Python/3.6.8 Linux/3.10.0-957.21.3.el7.x86_64 Botocore/1.12.183", "aws_region": "eu-north-1"}, "resource_arns": [], "raw_record_size_bytes": 868, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "0db205376-a984-4950-809c-93dc79ec5d1d", "eventTime": "2019-07-08T15:21:33Z", "eventName": "DescribeCacheParameterGroups", "eventSource": "elasticache.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "251.209.251.231", "userAgent": "Boto3/1.9.183 Python/3.6.8 Linux/3.10.0-957.21.3.el7.x86_64 Botocore/1.12.183", "awsRegion": "eu-north-1", "errorCode": "AccessDenied", "errorMessage": "User: arn:aws:iam::811596193553:user/backup is not authorized to perform: elasticache:DescribeCacheParameterGroups", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "be9d6ab1-b932-4947-ae07-8c88dc9e1640", "record_id": "flaws_cloudtrail:0000461:be9d6ab1-b932-4947-ae07-8c88dc9e1640", "row_index": 461, "timestamp": "2019-07-08T15:21:33Z", "event_type": "DescribeCacheSecurityGroups", "event_source": "elasticache.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "251.209.251.231", "user_agent": "Boto3/1.9.183 Python/3.6.8 Linux/3.10.0-957.21.3.el7.x86_64 Botocore/1.12.183", "aws_region": "eu-north-1"}, "resource_arns": [], "raw_record_size_bytes": 865, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "be9d6ab1-b932-4947-ae07-8c88dc9e1640", "eventTime": "2019-07-08T15:21:33Z", "eventName": "DescribeCacheSecurityGroups", "eventSource": "elasticache.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "251.209.251.231", "userAgent": "Boto3/1.9.183 Python/3.6.8 Linux/3.10.0-957.21.3.el7.x86_64 Botocore/1.12.183", "awsRegion": "eu-north-1", "errorCode": "AccessDenied", "errorMessage": "User: arn:aws:iam::811596193553:user/backup is not authorized to perform: elasticache:DescribeCacheSecurityGroups", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "35337f7e-287c-470b-bdbe-43d3c69b9bbc", "record_id": "flaws_cloudtrail:0000462:35337f7e-287c-470b-bdbe-43d3c69b9bbc", "row_index": 462, "timestamp": "2019-07-08T15:21:33Z", "event_type": "DescribeVpcs", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "251.209.251.231", "user_agent": "Boto3/1.9.183 Python/3.6.8 Linux/3.10.0-957.21.3.el7.x86_64 Botocore/1.12.183", "aws_region": "eu-north-1"}, "resource_arns": [], "raw_record_size_bytes": 708, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "35337f7e-287c-470b-bdbe-43d3c69b9bbc", "eventTime": "2019-07-08T15:21:33Z", "eventName": "DescribeVpcs", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "251.209.251.231", "userAgent": "Boto3/1.9.183 Python/3.6.8 Linux/3.10.0-957.21.3.el7.x86_64 Botocore/1.12.183", "awsRegion": "eu-north-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"vpcSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "a26e23c5-9683-410c-b9d4-502e9e00dfdb", "record_id": "flaws_cloudtrail:0000463:a26e23c5-9683-410c-b9d4-502e9e00dfdb", "row_index": 463, "timestamp": "2019-07-08T15:21:33Z", "event_type": "DescribeVpcs", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "251.209.251.231", "user_agent": "Boto3/1.9.183 Python/3.6.8 Linux/3.10.0-957.21.3.el7.x86_64 Botocore/1.12.183", "aws_region": "eu-west-1"}, "resource_arns": [], "raw_record_size_bytes": 707, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "a26e23c5-9683-410c-b9d4-502e9e00dfdb", "eventTime": "2019-07-08T15:21:33Z", "eventName": "DescribeVpcs", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "251.209.251.231", "userAgent": "Boto3/1.9.183 Python/3.6.8 Linux/3.10.0-957.21.3.el7.x86_64 Botocore/1.12.183", "awsRegion": "eu-west-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"vpcSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "ced6ecdb-735d-4c24-ae2d-693695f8488a", "record_id": "flaws_cloudtrail:0000464:ced6ecdb-735d-4c24-ae2d-693695f8488a", "row_index": 464, "timestamp": "2019-07-08T15:21:33Z", "event_type": "DescribeCacheParameterGroups", "event_source": "elasticache.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "251.209.251.231", "user_agent": "Boto3/1.9.183 Python/3.6.8 Linux/3.10.0-957.21.3.el7.x86_64 Botocore/1.12.183", "aws_region": "eu-west-1"}, "resource_arns": [], "raw_record_size_bytes": 866, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "ced6ecdb-735d-4c24-ae2d-693695f8488a", "eventTime": "2019-07-08T15:21:33Z", "eventName": "DescribeCacheParameterGroups", "eventSource": "elasticache.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "251.209.251.231", "userAgent": "Boto3/1.9.183 Python/3.6.8 Linux/3.10.0-957.21.3.el7.x86_64 Botocore/1.12.183", "awsRegion": "eu-west-1", "errorCode": "AccessDenied", "errorMessage": "User: arn:aws:iam::811596193553:user/backup is not authorized to perform: elasticache:DescribeCacheParameterGroups", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "303b29d4-6475-46e6-97ec-efe41dc344ce", "record_id": "flaws_cloudtrail:0000465:303b29d4-6475-46e6-97ec-efe41dc344ce", "row_index": 465, "timestamp": "2019-07-08T15:21:33Z", "event_type": "DescribeCacheSecurityGroups", "event_source": "elasticache.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "251.209.251.231", "user_agent": "Boto3/1.9.183 Python/3.6.8 Linux/3.10.0-957.21.3.el7.x86_64 Botocore/1.12.183", "aws_region": "eu-west-1"}, "resource_arns": [], "raw_record_size_bytes": 863, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "303b29d4-6475-46e6-97ec-efe41dc344ce", "eventTime": "2019-07-08T15:21:33Z", "eventName": "DescribeCacheSecurityGroups", "eventSource": "elasticache.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "251.209.251.231", "userAgent": "Boto3/1.9.183 Python/3.6.8 Linux/3.10.0-957.21.3.el7.x86_64 Botocore/1.12.183", "awsRegion": "eu-west-1", "errorCode": "AccessDenied", "errorMessage": "User: arn:aws:iam::811596193553:user/backup is not authorized to perform: elasticache:DescribeCacheSecurityGroups", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "e8c82a0f-b7d7-4982-b995-6ea9ded0360f", "record_id": "flaws_cloudtrail:0000466:e8c82a0f-b7d7-4982-b995-6ea9ded0360f", "row_index": 466, "timestamp": "2019-07-08T15:21:33Z", "event_type": "DescribeVpcs", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "251.209.251.231", "user_agent": "Boto3/1.9.183 Python/3.6.8 Linux/3.10.0-957.21.3.el7.x86_64 Botocore/1.12.183", "aws_region": "eu-west-2"}, "resource_arns": [], "raw_record_size_bytes": 705, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "e8c82a0f-b7d7-4982-b995-6ea9ded0360f", "eventTime": "2019-07-08T15:21:33Z", "eventName": "DescribeVpcs", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "251.209.251.231", "userAgent": "Boto3/1.9.183 Python/3.6.8 Linux/3.10.0-957.21.3.el7.x86_64 Botocore/1.12.183", "awsRegion": "eu-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"vpcSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "b4501e95-5274-4872-a257-64f26dea687b", "record_id": "flaws_cloudtrail:0000467:b4501e95-5274-4872-a257-64f26dea687b", "row_index": 467, "timestamp": "2019-07-08T15:21:33Z", "event_type": "DescribeCacheParameterGroups", "event_source": "elasticache.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "251.209.251.231", "user_agent": "Boto3/1.9.183 Python/3.6.8 Linux/3.10.0-957.21.3.el7.x86_64 Botocore/1.12.183", "aws_region": "eu-west-2"}, "resource_arns": [], "raw_record_size_bytes": 867, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "b4501e95-5274-4872-a257-64f26dea687b", "eventTime": "2019-07-08T15:21:33Z", "eventName": "DescribeCacheParameterGroups", "eventSource": "elasticache.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "251.209.251.231", "userAgent": "Boto3/1.9.183 Python/3.6.8 Linux/3.10.0-957.21.3.el7.x86_64 Botocore/1.12.183", "awsRegion": "eu-west-2", "errorCode": "AccessDenied", "errorMessage": "User: arn:aws:iam::811596193553:user/backup is not authorized to perform: elasticache:DescribeCacheParameterGroups", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "9cdaf96f-4932-4d27-9952-6fe338df5171", "record_id": "flaws_cloudtrail:0000468:9cdaf96f-4932-4d27-9952-6fe338df5171", "row_index": 468, "timestamp": "2019-07-08T15:21:33Z", "event_type": "DescribeCacheSecurityGroups", "event_source": "elasticache.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "251.209.251.231", "user_agent": "Boto3/1.9.183 Python/3.6.8 Linux/3.10.0-957.21.3.el7.x86_64 Botocore/1.12.183", "aws_region": "eu-west-2"}, "resource_arns": [], "raw_record_size_bytes": 864, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "9cdaf96f-4932-4d27-9952-6fe338df5171", "eventTime": "2019-07-08T15:21:33Z", "eventName": "DescribeCacheSecurityGroups", "eventSource": "elasticache.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "251.209.251.231", "userAgent": "Boto3/1.9.183 Python/3.6.8 Linux/3.10.0-957.21.3.el7.x86_64 Botocore/1.12.183", "awsRegion": "eu-west-2", "errorCode": "AccessDenied", "errorMessage": "User: arn:aws:iam::811596193553:user/backup is not authorized to perform: elasticache:DescribeCacheSecurityGroups", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "3279ea1a-2560-4f5d-9cfd-6cb801fbb6da", "record_id": "flaws_cloudtrail:0000469:3279ea1a-2560-4f5d-9cfd-6cb801fbb6da", "row_index": 469, "timestamp": "2019-07-08T15:21:33Z", "event_type": "DescribeCacheParameterGroups", "event_source": "elasticache.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "251.209.251.231", "user_agent": "Boto3/1.9.183 Python/3.6.8 Linux/3.10.0-957.21.3.el7.x86_64 Botocore/1.12.183", "aws_region": "eu-west-3"}, "resource_arns": [], "raw_record_size_bytes": 861, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "3279ea1a-2560-4f5d-9cfd-6cb801fbb6da", "eventTime": "2019-07-08T15:21:33Z", "eventName": "DescribeCacheParameterGroups", "eventSource": "elasticache.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "251.209.251.231", "userAgent": "Boto3/1.9.183 Python/3.6.8 Linux/3.10.0-957.21.3.el7.x86_64 Botocore/1.12.183", "awsRegion": "eu-west-3", "errorCode": "AccessDenied", "errorMessage": "User: arn:aws:iam::811596193553:user/backup is not authorized to perform: elasticache:DescribeCacheParameterGroups", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "d6bd9166-9252-4b98-9c04-281ca339836e", "record_id": "flaws_cloudtrail:0000470:d6bd9166-9252-4b98-9c04-281ca339836e", "row_index": 470, "timestamp": "2019-07-08T15:21:33Z", "event_type": "DescribeCacheSecurityGroups", "event_source": "elasticache.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "251.209.251.231", "user_agent": "Boto3/1.9.183 Python/3.6.8 Linux/3.10.0-957.21.3.el7.x86_64 Botocore/1.12.183", "aws_region": "eu-west-3"}, "resource_arns": [], "raw_record_size_bytes": 863, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "d6bd9166-9252-4b98-9c04-281ca339836e", "eventTime": "2019-07-08T15:21:33Z", "eventName": "DescribeCacheSecurityGroups", "eventSource": "elasticache.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "251.209.251.231", "userAgent": "Boto3/1.9.183 Python/3.6.8 Linux/3.10.0-957.21.3.el7.x86_64 Botocore/1.12.183", "awsRegion": "eu-west-3", "errorCode": "AccessDenied", "errorMessage": "User: arn:aws:iam::811596193553:user/backup is not authorized to perform: elasticache:DescribeCacheSecurityGroups", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "5f9bc760-78c3-46f3-a76a-36923224cf16", "record_id": "flaws_cloudtrail:0000471:5f9bc760-78c3-46f3-a76a-36923224cf16", "row_index": 471, "timestamp": "2019-07-08T15:21:33Z", "event_type": "DescribeVpcs", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "251.209.251.231", "user_agent": "Boto3/1.9.183 Python/3.6.8 Linux/3.10.0-957.21.3.el7.x86_64 Botocore/1.12.183", "aws_region": "eu-west-3"}, "resource_arns": [], "raw_record_size_bytes": 707, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "5f9bc760-78c3-46f3-a76a-36923224cf16", "eventTime": "2019-07-08T15:21:33Z", "eventName": "DescribeVpcs", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "251.209.251.231", "userAgent": "Boto3/1.9.183 Python/3.6.8 Linux/3.10.0-957.21.3.el7.x86_64 Botocore/1.12.183", "awsRegion": "eu-west-3", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"vpcSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "ca68683-55ff-430a-8c17-9ddef841119e7", "record_id": "flaws_cloudtrail:0000472:ca68683-55ff-430a-8c17-9ddef841119e7", "row_index": 472, "timestamp": "2019-07-08T15:21:33Z", "event_type": "DescribeVpcs", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "251.209.251.231", "user_agent": "Boto3/1.9.183 Python/3.6.8 Linux/3.10.0-957.21.3.el7.x86_64 Botocore/1.12.183", "aws_region": "sa-east-1"}, "resource_arns": [], "raw_record_size_bytes": 707, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "ca68683-55ff-430a-8c17-9ddef841119e7", "eventTime": "2019-07-08T15:21:33Z", "eventName": "DescribeVpcs", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "251.209.251.231", "userAgent": "Boto3/1.9.183 Python/3.6.8 Linux/3.10.0-957.21.3.el7.x86_64 Botocore/1.12.183", "awsRegion": "sa-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"vpcSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "326bc8b8-b42d-4569-ad03-5b50d8f2eb45", "record_id": "flaws_cloudtrail:0000473:326bc8b8-b42d-4569-ad03-5b50d8f2eb45", "row_index": 473, "timestamp": "2019-07-08T15:21:33Z", "event_type": "DescribeVpcs", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "251.209.251.231", "user_agent": "Boto3/1.9.183 Python/3.6.8 Linux/3.10.0-957.21.3.el7.x86_64 Botocore/1.12.183", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 707, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "326bc8b8-b42d-4569-ad03-5b50d8f2eb45", "eventTime": "2019-07-08T15:21:33Z", "eventName": "DescribeVpcs", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "251.209.251.231", "userAgent": "Boto3/1.9.183 Python/3.6.8 Linux/3.10.0-957.21.3.el7.x86_64 Botocore/1.12.183", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"vpcSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "8fff43f3-d2af-45e3-acce-671a4f874d0c", "record_id": "flaws_cloudtrail:0000474:8fff43f3-d2af-45e3-acce-671a4f874d0c", "row_index": 474, "timestamp": "2019-07-08T15:21:33Z", "event_type": "DescribeVpcs", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "251.209.251.231", "user_agent": "Boto3/1.9.183 Python/3.6.8 Linux/3.10.0-957.21.3.el7.x86_64 Botocore/1.12.183", "aws_region": "us-east-2"}, "resource_arns": [], "raw_record_size_bytes": 708, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "8fff43f3-d2af-45e3-acce-671a4f874d0c", "eventTime": "2019-07-08T15:21:33Z", "eventName": "DescribeVpcs", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "251.209.251.231", "userAgent": "Boto3/1.9.183 Python/3.6.8 Linux/3.10.0-957.21.3.el7.x86_64 Botocore/1.12.183", "awsRegion": "us-east-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"vpcSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "c5a51c2d-b3bb-4486-8f1c-a0cf216fd819", "record_id": "flaws_cloudtrail:0000475:c5a51c2d-b3bb-4486-8f1c-a0cf216fd819", "row_index": 475, "timestamp": "2019-07-08T15:21:33Z", "event_type": "DescribeVpcs", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "251.209.251.231", "user_agent": "Boto3/1.9.183 Python/3.6.8 Linux/3.10.0-957.21.3.el7.x86_64 Botocore/1.12.183", "aws_region": "us-west-1"}, "resource_arns": [], "raw_record_size_bytes": 705, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "c5a51c2d-b3bb-4486-8f1c-a0cf216fd819", "eventTime": "2019-07-08T15:21:33Z", "eventName": "DescribeVpcs", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "251.209.251.231", "userAgent": "Boto3/1.9.183 Python/3.6.8 Linux/3.10.0-957.21.3.el7.x86_64 Botocore/1.12.183", "awsRegion": "us-west-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"vpcSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "48d7150a-ffe1-4af0-8981-48a6e3fba89e", "record_id": "flaws_cloudtrail:0000476:48d7150a-ffe1-4af0-8981-48a6e3fba89e", "row_index": 476, "timestamp": "2019-07-08T15:21:33Z", "event_type": "DescribeCacheParameterGroups", "event_source": "elasticache.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "251.209.251.231", "user_agent": "Boto3/1.9.183 Python/3.6.8 Linux/3.10.0-957.21.3.el7.x86_64 Botocore/1.12.183", "aws_region": "ap-northeast-2"}, "resource_arns": [], "raw_record_size_bytes": 871, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "48d7150a-ffe1-4af0-8981-48a6e3fba89e", "eventTime": "2019-07-08T15:21:33Z", "eventName": "DescribeCacheParameterGroups", "eventSource": "elasticache.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "251.209.251.231", "userAgent": "Boto3/1.9.183 Python/3.6.8 Linux/3.10.0-957.21.3.el7.x86_64 Botocore/1.12.183", "awsRegion": "ap-northeast-2", "errorCode": "AccessDenied", "errorMessage": "User: arn:aws:iam::811596193553:user/backup is not authorized to perform: elasticache:DescribeCacheParameterGroups", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "79f027b4-be30-43d2-8e78-ede8e369cfbb", "record_id": "flaws_cloudtrail:0000477:79f027b4-be30-43d2-8e78-ede8e369cfbb", "row_index": 477, "timestamp": "2019-07-08T15:21:33Z", "event_type": "DescribeCacheSecurityGroups", "event_source": "elasticache.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "251.209.251.231", "user_agent": "Boto3/1.9.183 Python/3.6.8 Linux/3.10.0-957.21.3.el7.x86_64 Botocore/1.12.183", "aws_region": "ap-northeast-2"}, "resource_arns": [], "raw_record_size_bytes": 866, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "79f027b4-be30-43d2-8e78-ede8e369cfbb", "eventTime": "2019-07-08T15:21:33Z", "eventName": "DescribeCacheSecurityGroups", "eventSource": "elasticache.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "251.209.251.231", "userAgent": "Boto3/1.9.183 Python/3.6.8 Linux/3.10.0-957.21.3.el7.x86_64 Botocore/1.12.183", "awsRegion": "ap-northeast-2", "errorCode": "AccessDenied", "errorMessage": "User: arn:aws:iam::811596193553:user/backup is not authorized to perform: elasticache:DescribeCacheSecurityGroups", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "c5baae6a-ada3-4f30-be60-6d5ea45aadc8", "record_id": "flaws_cloudtrail:0000478:c5baae6a-ada3-4f30-be60-6d5ea45aadc8", "row_index": 478, "timestamp": "2019-07-08T15:21:33Z", "event_type": "DescribeCacheParameterGroups", "event_source": "elasticache.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "251.209.251.231", "user_agent": "Boto3/1.9.183 Python/3.6.8 Linux/3.10.0-957.21.3.el7.x86_64 Botocore/1.12.183", "aws_region": "ap-southeast-1"}, "resource_arns": [], "raw_record_size_bytes": 871, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "c5baae6a-ada3-4f30-be60-6d5ea45aadc8", "eventTime": "2019-07-08T15:21:33Z", "eventName": "DescribeCacheParameterGroups", "eventSource": "elasticache.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "251.209.251.231", "userAgent": "Boto3/1.9.183 Python/3.6.8 Linux/3.10.0-957.21.3.el7.x86_64 Botocore/1.12.183", "awsRegion": "ap-southeast-1", "errorCode": "AccessDenied", "errorMessage": "User: arn:aws:iam::811596193553:user/backup is not authorized to perform: elasticache:DescribeCacheParameterGroups", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "7be40361-cdbd-42cc-a963-76f2fdd1e795", "record_id": "flaws_cloudtrail:0000479:7be40361-cdbd-42cc-a963-76f2fdd1e795", "row_index": 479, "timestamp": "2019-07-08T15:21:33Z", "event_type": "DescribeCacheSecurityGroups", "event_source": "elasticache.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "251.209.251.231", "user_agent": "Boto3/1.9.183 Python/3.6.8 Linux/3.10.0-957.21.3.el7.x86_64 Botocore/1.12.183", "aws_region": "ap-southeast-1"}, "resource_arns": [], "raw_record_size_bytes": 869, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "7be40361-cdbd-42cc-a963-76f2fdd1e795", "eventTime": "2019-07-08T15:21:33Z", "eventName": "DescribeCacheSecurityGroups", "eventSource": "elasticache.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "251.209.251.231", "userAgent": "Boto3/1.9.183 Python/3.6.8 Linux/3.10.0-957.21.3.el7.x86_64 Botocore/1.12.183", "awsRegion": "ap-southeast-1", "errorCode": "AccessDenied", "errorMessage": "User: arn:aws:iam::811596193553:user/backup is not authorized to perform: elasticache:DescribeCacheSecurityGroups", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "08ac4f73-0672-466b-8eb1-3a712511", "record_id": "flaws_cloudtrail:0000480:08ac4f73-0672-466b-8eb1-3a712511", "row_index": 480, "timestamp": "2019-07-08T15:21:33Z", "event_type": "DescribeCacheSecurityGroups", "event_source": "elasticache.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "251.209.251.231", "user_agent": "Boto3/1.9.183 Python/3.6.8 Linux/3.10.0-957.21.3.el7.x86_64 Botocore/1.12.183", "aws_region": "ap-southeast-2"}, "resource_arns": [], "raw_record_size_bytes": 865, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "08ac4f73-0672-466b-8eb1-3a712511", "eventTime": "2019-07-08T15:21:33Z", "eventName": "DescribeCacheSecurityGroups", "eventSource": "elasticache.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "251.209.251.231", "userAgent": "Boto3/1.9.183 Python/3.6.8 Linux/3.10.0-957.21.3.el7.x86_64 Botocore/1.12.183", "awsRegion": "ap-southeast-2", "errorCode": "AccessDenied", "errorMessage": "User: arn:aws:iam::811596193553:user/backup is not authorized to perform: elasticache:DescribeCacheSecurityGroups", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "f8694e53-ca48-4319-b16a-aa24a8dedc1f", "record_id": "flaws_cloudtrail:0000481:f8694e53-ca48-4319-b16a-aa24a8dedc1f", "row_index": 481, "timestamp": "2019-07-08T15:21:33Z", "event_type": "DescribeCacheSecurityGroups", "event_source": "elasticache.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "251.209.251.231", "user_agent": "Boto3/1.9.183 Python/3.6.8 Linux/3.10.0-957.21.3.el7.x86_64 Botocore/1.12.183", "aws_region": "ca-central-1"}, "resource_arns": [], "raw_record_size_bytes": 867, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "f8694e53-ca48-4319-b16a-aa24a8dedc1f", "eventTime": "2019-07-08T15:21:33Z", "eventName": "DescribeCacheSecurityGroups", "eventSource": "elasticache.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "251.209.251.231", "userAgent": "Boto3/1.9.183 Python/3.6.8 Linux/3.10.0-957.21.3.el7.x86_64 Botocore/1.12.183", "awsRegion": "ca-central-1", "errorCode": "AccessDenied", "errorMessage": "User: arn:aws:iam::811596193553:user/backup is not authorized to perform: elasticache:DescribeCacheSecurityGroups", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "90a03056-1340-4061-b46c-f562a17a3b92", "record_id": "flaws_cloudtrail:0000482:90a03056-1340-4061-b46c-f562a17a3b92", "row_index": 482, "timestamp": "2019-07-08T15:21:33Z", "event_type": "DescribeCacheParameterGroups", "event_source": "elasticache.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "251.209.251.231", "user_agent": "Boto3/1.9.183 Python/3.6.8 Linux/3.10.0-957.21.3.el7.x86_64 Botocore/1.12.183", "aws_region": "ca-central-1"}, "resource_arns": [], "raw_record_size_bytes": 869, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "90a03056-1340-4061-b46c-f562a17a3b92", "eventTime": "2019-07-08T15:21:33Z", "eventName": "DescribeCacheParameterGroups", "eventSource": "elasticache.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "251.209.251.231", "userAgent": "Boto3/1.9.183 Python/3.6.8 Linux/3.10.0-957.21.3.el7.x86_64 Botocore/1.12.183", "awsRegion": "ca-central-1", "errorCode": "AccessDenied", "errorMessage": "User: arn:aws:iam::811596193553:user/backup is not authorized to perform: elasticache:DescribeCacheParameterGroups", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "2b9b4d07-1059-427e-85a7-95e259ce4541", "record_id": "flaws_cloudtrail:0000483:2b9b4d07-1059-427e-85a7-95e259ce4541", "row_index": 483, "timestamp": "2019-07-08T15:21:33Z", "event_type": "DescribeCacheParameterGroups", "event_source": "elasticache.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "251.209.251.231", "user_agent": "Boto3/1.9.183 Python/3.6.8 Linux/3.10.0-957.21.3.el7.x86_64 Botocore/1.12.183", "aws_region": "eu-central-1"}, "resource_arns": [], "raw_record_size_bytes": 865, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "2b9b4d07-1059-427e-85a7-95e259ce4541", "eventTime": "2019-07-08T15:21:33Z", "eventName": "DescribeCacheParameterGroups", "eventSource": "elasticache.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "251.209.251.231", "userAgent": "Boto3/1.9.183 Python/3.6.8 Linux/3.10.0-957.21.3.el7.x86_64 Botocore/1.12.183", "awsRegion": "eu-central-1", "errorCode": "AccessDenied", "errorMessage": "User: arn:aws:iam::811596193553:user/backup is not authorized to perform: elasticache:DescribeCacheParameterGroups", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "23e9f44d-7f36-41bc-b7ca-aee4a0cbf4b2", "record_id": "flaws_cloudtrail:0000484:23e9f44d-7f36-41bc-b7ca-aee4a0cbf4b2", "row_index": 484, "timestamp": "2019-07-08T15:21:33Z", "event_type": "DescribeCacheSecurityGroups", "event_source": "elasticache.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "251.209.251.231", "user_agent": "Boto3/1.9.183 Python/3.6.8 Linux/3.10.0-957.21.3.el7.x86_64 Botocore/1.12.183", "aws_region": "eu-central-1"}, "resource_arns": [], "raw_record_size_bytes": 867, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "23e9f44d-7f36-41bc-b7ca-aee4a0cbf4b2", "eventTime": "2019-07-08T15:21:33Z", "eventName": "DescribeCacheSecurityGroups", "eventSource": "elasticache.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "251.209.251.231", "userAgent": "Boto3/1.9.183 Python/3.6.8 Linux/3.10.0-957.21.3.el7.x86_64 Botocore/1.12.183", "awsRegion": "eu-central-1", "errorCode": "AccessDenied", "errorMessage": "User: arn:aws:iam::811596193553:user/backup is not authorized to perform: elasticache:DescribeCacheSecurityGroups", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "0db205376-a984-4950-809c-93dc79ec5d1d", "record_id": "flaws_cloudtrail:0000485:0db205376-a984-4950-809c-93dc79ec5d1d", "row_index": 485, "timestamp": "2019-07-08T15:21:33Z", "event_type": "DescribeCacheParameterGroups", "event_source": "elasticache.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "251.209.251.231", "user_agent": "Boto3/1.9.183 Python/3.6.8 Linux/3.10.0-957.21.3.el7.x86_64 Botocore/1.12.183", "aws_region": "eu-north-1"}, "resource_arns": [], "raw_record_size_bytes": 868, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "0db205376-a984-4950-809c-93dc79ec5d1d", "eventTime": "2019-07-08T15:21:33Z", "eventName": "DescribeCacheParameterGroups", "eventSource": "elasticache.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "251.209.251.231", "userAgent": "Boto3/1.9.183 Python/3.6.8 Linux/3.10.0-957.21.3.el7.x86_64 Botocore/1.12.183", "awsRegion": "eu-north-1", "errorCode": "AccessDenied", "errorMessage": "User: arn:aws:iam::811596193553:user/backup is not authorized to perform: elasticache:DescribeCacheParameterGroups", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "be9d6ab1-b932-4947-ae07-8c88dc9e1640", "record_id": "flaws_cloudtrail:0000486:be9d6ab1-b932-4947-ae07-8c88dc9e1640", "row_index": 486, "timestamp": "2019-07-08T15:21:33Z", "event_type": "DescribeCacheSecurityGroups", "event_source": "elasticache.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "251.209.251.231", "user_agent": "Boto3/1.9.183 Python/3.6.8 Linux/3.10.0-957.21.3.el7.x86_64 Botocore/1.12.183", "aws_region": "eu-north-1"}, "resource_arns": [], "raw_record_size_bytes": 865, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "be9d6ab1-b932-4947-ae07-8c88dc9e1640", "eventTime": "2019-07-08T15:21:33Z", "eventName": "DescribeCacheSecurityGroups", "eventSource": "elasticache.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "251.209.251.231", "userAgent": "Boto3/1.9.183 Python/3.6.8 Linux/3.10.0-957.21.3.el7.x86_64 Botocore/1.12.183", "awsRegion": "eu-north-1", "errorCode": "AccessDenied", "errorMessage": "User: arn:aws:iam::811596193553:user/backup is not authorized to perform: elasticache:DescribeCacheSecurityGroups", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "35337f7e-287c-470b-bdbe-43d3c69b9bbc", "record_id": "flaws_cloudtrail:0000487:35337f7e-287c-470b-bdbe-43d3c69b9bbc", "row_index": 487, "timestamp": "2019-07-08T15:21:33Z", "event_type": "DescribeVpcs", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "251.209.251.231", "user_agent": "Boto3/1.9.183 Python/3.6.8 Linux/3.10.0-957.21.3.el7.x86_64 Botocore/1.12.183", "aws_region": "eu-north-1"}, "resource_arns": [], "raw_record_size_bytes": 708, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "35337f7e-287c-470b-bdbe-43d3c69b9bbc", "eventTime": "2019-07-08T15:21:33Z", "eventName": "DescribeVpcs", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "251.209.251.231", "userAgent": "Boto3/1.9.183 Python/3.6.8 Linux/3.10.0-957.21.3.el7.x86_64 Botocore/1.12.183", "awsRegion": "eu-north-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"vpcSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "a26e23c5-9683-410c-b9d4-502e9e00dfdb", "record_id": "flaws_cloudtrail:0000488:a26e23c5-9683-410c-b9d4-502e9e00dfdb", "row_index": 488, "timestamp": "2019-07-08T15:21:33Z", "event_type": "DescribeVpcs", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "251.209.251.231", "user_agent": "Boto3/1.9.183 Python/3.6.8 Linux/3.10.0-957.21.3.el7.x86_64 Botocore/1.12.183", "aws_region": "eu-west-1"}, "resource_arns": [], "raw_record_size_bytes": 707, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "a26e23c5-9683-410c-b9d4-502e9e00dfdb", "eventTime": "2019-07-08T15:21:33Z", "eventName": "DescribeVpcs", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "251.209.251.231", "userAgent": "Boto3/1.9.183 Python/3.6.8 Linux/3.10.0-957.21.3.el7.x86_64 Botocore/1.12.183", "awsRegion": "eu-west-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"vpcSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "ced6ecdb-735d-4c24-ae2d-693695f8488a", "record_id": "flaws_cloudtrail:0000489:ced6ecdb-735d-4c24-ae2d-693695f8488a", "row_index": 489, "timestamp": "2019-07-08T15:21:33Z", "event_type": "DescribeCacheParameterGroups", "event_source": "elasticache.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "251.209.251.231", "user_agent": "Boto3/1.9.183 Python/3.6.8 Linux/3.10.0-957.21.3.el7.x86_64 Botocore/1.12.183", "aws_region": "eu-west-1"}, "resource_arns": [], "raw_record_size_bytes": 866, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "ced6ecdb-735d-4c24-ae2d-693695f8488a", "eventTime": "2019-07-08T15:21:33Z", "eventName": "DescribeCacheParameterGroups", "eventSource": "elasticache.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "251.209.251.231", "userAgent": "Boto3/1.9.183 Python/3.6.8 Linux/3.10.0-957.21.3.el7.x86_64 Botocore/1.12.183", "awsRegion": "eu-west-1", "errorCode": "AccessDenied", "errorMessage": "User: arn:aws:iam::811596193553:user/backup is not authorized to perform: elasticache:DescribeCacheParameterGroups", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "303b29d4-6475-46e6-97ec-efe41dc344ce", "record_id": "flaws_cloudtrail:0000490:303b29d4-6475-46e6-97ec-efe41dc344ce", "row_index": 490, "timestamp": "2019-07-08T15:21:33Z", "event_type": "DescribeCacheSecurityGroups", "event_source": "elasticache.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "251.209.251.231", "user_agent": "Boto3/1.9.183 Python/3.6.8 Linux/3.10.0-957.21.3.el7.x86_64 Botocore/1.12.183", "aws_region": "eu-west-1"}, "resource_arns": [], "raw_record_size_bytes": 863, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "303b29d4-6475-46e6-97ec-efe41dc344ce", "eventTime": "2019-07-08T15:21:33Z", "eventName": "DescribeCacheSecurityGroups", "eventSource": "elasticache.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "251.209.251.231", "userAgent": "Boto3/1.9.183 Python/3.6.8 Linux/3.10.0-957.21.3.el7.x86_64 Botocore/1.12.183", "awsRegion": "eu-west-1", "errorCode": "AccessDenied", "errorMessage": "User: arn:aws:iam::811596193553:user/backup is not authorized to perform: elasticache:DescribeCacheSecurityGroups", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "e8c82a0f-b7d7-4982-b995-6ea9ded0360f", "record_id": "flaws_cloudtrail:0000491:e8c82a0f-b7d7-4982-b995-6ea9ded0360f", "row_index": 491, "timestamp": "2019-07-08T15:21:33Z", "event_type": "DescribeVpcs", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "251.209.251.231", "user_agent": "Boto3/1.9.183 Python/3.6.8 Linux/3.10.0-957.21.3.el7.x86_64 Botocore/1.12.183", "aws_region": "eu-west-2"}, "resource_arns": [], "raw_record_size_bytes": 705, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "e8c82a0f-b7d7-4982-b995-6ea9ded0360f", "eventTime": "2019-07-08T15:21:33Z", "eventName": "DescribeVpcs", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "251.209.251.231", "userAgent": "Boto3/1.9.183 Python/3.6.8 Linux/3.10.0-957.21.3.el7.x86_64 Botocore/1.12.183", "awsRegion": "eu-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"vpcSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "b4501e95-5274-4872-a257-64f26dea687b", "record_id": "flaws_cloudtrail:0000492:b4501e95-5274-4872-a257-64f26dea687b", "row_index": 492, "timestamp": "2019-07-08T15:21:33Z", "event_type": "DescribeCacheParameterGroups", "event_source": "elasticache.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "251.209.251.231", "user_agent": "Boto3/1.9.183 Python/3.6.8 Linux/3.10.0-957.21.3.el7.x86_64 Botocore/1.12.183", "aws_region": "eu-west-2"}, "resource_arns": [], "raw_record_size_bytes": 867, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "b4501e95-5274-4872-a257-64f26dea687b", "eventTime": "2019-07-08T15:21:33Z", "eventName": "DescribeCacheParameterGroups", "eventSource": "elasticache.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "251.209.251.231", "userAgent": "Boto3/1.9.183 Python/3.6.8 Linux/3.10.0-957.21.3.el7.x86_64 Botocore/1.12.183", "awsRegion": "eu-west-2", "errorCode": "AccessDenied", "errorMessage": "User: arn:aws:iam::811596193553:user/backup is not authorized to perform: elasticache:DescribeCacheParameterGroups", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "9cdaf96f-4932-4d27-9952-6fe338df5171", "record_id": "flaws_cloudtrail:0000493:9cdaf96f-4932-4d27-9952-6fe338df5171", "row_index": 493, "timestamp": "2019-07-08T15:21:33Z", "event_type": "DescribeCacheSecurityGroups", "event_source": "elasticache.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "251.209.251.231", "user_agent": "Boto3/1.9.183 Python/3.6.8 Linux/3.10.0-957.21.3.el7.x86_64 Botocore/1.12.183", "aws_region": "eu-west-2"}, "resource_arns": [], "raw_record_size_bytes": 864, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "9cdaf96f-4932-4d27-9952-6fe338df5171", "eventTime": "2019-07-08T15:21:33Z", "eventName": "DescribeCacheSecurityGroups", "eventSource": "elasticache.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "251.209.251.231", "userAgent": "Boto3/1.9.183 Python/3.6.8 Linux/3.10.0-957.21.3.el7.x86_64 Botocore/1.12.183", "awsRegion": "eu-west-2", "errorCode": "AccessDenied", "errorMessage": "User: arn:aws:iam::811596193553:user/backup is not authorized to perform: elasticache:DescribeCacheSecurityGroups", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "3279ea1a-2560-4f5d-9cfd-6cb801fbb6da", "record_id": "flaws_cloudtrail:0000494:3279ea1a-2560-4f5d-9cfd-6cb801fbb6da", "row_index": 494, "timestamp": "2019-07-08T15:21:33Z", "event_type": "DescribeCacheParameterGroups", "event_source": "elasticache.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "251.209.251.231", "user_agent": "Boto3/1.9.183 Python/3.6.8 Linux/3.10.0-957.21.3.el7.x86_64 Botocore/1.12.183", "aws_region": "eu-west-3"}, "resource_arns": [], "raw_record_size_bytes": 861, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "3279ea1a-2560-4f5d-9cfd-6cb801fbb6da", "eventTime": "2019-07-08T15:21:33Z", "eventName": "DescribeCacheParameterGroups", "eventSource": "elasticache.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "251.209.251.231", "userAgent": "Boto3/1.9.183 Python/3.6.8 Linux/3.10.0-957.21.3.el7.x86_64 Botocore/1.12.183", "awsRegion": "eu-west-3", "errorCode": "AccessDenied", "errorMessage": "User: arn:aws:iam::811596193553:user/backup is not authorized to perform: elasticache:DescribeCacheParameterGroups", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "d6bd9166-9252-4b98-9c04-281ca339836e", "record_id": "flaws_cloudtrail:0000495:d6bd9166-9252-4b98-9c04-281ca339836e", "row_index": 495, "timestamp": "2019-07-08T15:21:33Z", "event_type": "DescribeCacheSecurityGroups", "event_source": "elasticache.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "251.209.251.231", "user_agent": "Boto3/1.9.183 Python/3.6.8 Linux/3.10.0-957.21.3.el7.x86_64 Botocore/1.12.183", "aws_region": "eu-west-3"}, "resource_arns": [], "raw_record_size_bytes": 863, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "d6bd9166-9252-4b98-9c04-281ca339836e", "eventTime": "2019-07-08T15:21:33Z", "eventName": "DescribeCacheSecurityGroups", "eventSource": "elasticache.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "251.209.251.231", "userAgent": "Boto3/1.9.183 Python/3.6.8 Linux/3.10.0-957.21.3.el7.x86_64 Botocore/1.12.183", "awsRegion": "eu-west-3", "errorCode": "AccessDenied", "errorMessage": "User: arn:aws:iam::811596193553:user/backup is not authorized to perform: elasticache:DescribeCacheSecurityGroups", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "5f9bc760-78c3-46f3-a76a-36923224cf16", "record_id": "flaws_cloudtrail:0000496:5f9bc760-78c3-46f3-a76a-36923224cf16", "row_index": 496, "timestamp": "2019-07-08T15:21:33Z", "event_type": "DescribeVpcs", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "251.209.251.231", "user_agent": "Boto3/1.9.183 Python/3.6.8 Linux/3.10.0-957.21.3.el7.x86_64 Botocore/1.12.183", "aws_region": "eu-west-3"}, "resource_arns": [], "raw_record_size_bytes": 707, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "5f9bc760-78c3-46f3-a76a-36923224cf16", "eventTime": "2019-07-08T15:21:33Z", "eventName": "DescribeVpcs", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "251.209.251.231", "userAgent": "Boto3/1.9.183 Python/3.6.8 Linux/3.10.0-957.21.3.el7.x86_64 Botocore/1.12.183", "awsRegion": "eu-west-3", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"vpcSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "ca68683-55ff-430a-8c17-9ddef841119e7", "record_id": "flaws_cloudtrail:0000497:ca68683-55ff-430a-8c17-9ddef841119e7", "row_index": 497, "timestamp": "2019-07-08T15:21:33Z", "event_type": "DescribeVpcs", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "251.209.251.231", "user_agent": "Boto3/1.9.183 Python/3.6.8 Linux/3.10.0-957.21.3.el7.x86_64 Botocore/1.12.183", "aws_region": "sa-east-1"}, "resource_arns": [], "raw_record_size_bytes": 707, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "ca68683-55ff-430a-8c17-9ddef841119e7", "eventTime": "2019-07-08T15:21:33Z", "eventName": "DescribeVpcs", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "251.209.251.231", "userAgent": "Boto3/1.9.183 Python/3.6.8 Linux/3.10.0-957.21.3.el7.x86_64 Botocore/1.12.183", "awsRegion": "sa-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"vpcSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "326bc8b8-b42d-4569-ad03-5b50d8f2eb45", "record_id": "flaws_cloudtrail:0000498:326bc8b8-b42d-4569-ad03-5b50d8f2eb45", "row_index": 498, "timestamp": "2019-07-08T15:21:33Z", "event_type": "DescribeVpcs", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "251.209.251.231", "user_agent": "Boto3/1.9.183 Python/3.6.8 Linux/3.10.0-957.21.3.el7.x86_64 Botocore/1.12.183", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 707, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "326bc8b8-b42d-4569-ad03-5b50d8f2eb45", "eventTime": "2019-07-08T15:21:33Z", "eventName": "DescribeVpcs", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "251.209.251.231", "userAgent": "Boto3/1.9.183 Python/3.6.8 Linux/3.10.0-957.21.3.el7.x86_64 Botocore/1.12.183", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"vpcSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "8fff43f3-d2af-45e3-acce-671a4f874d0c", "record_id": "flaws_cloudtrail:0000499:8fff43f3-d2af-45e3-acce-671a4f874d0c", "row_index": 499, "timestamp": "2019-07-08T15:21:33Z", "event_type": "DescribeVpcs", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "251.209.251.231", "user_agent": "Boto3/1.9.183 Python/3.6.8 Linux/3.10.0-957.21.3.el7.x86_64 Botocore/1.12.183", "aws_region": "us-east-2"}, "resource_arns": [], "raw_record_size_bytes": 708, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "8fff43f3-d2af-45e3-acce-671a4f874d0c", "eventTime": "2019-07-08T15:21:33Z", "eventName": "DescribeVpcs", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "251.209.251.231", "userAgent": "Boto3/1.9.183 Python/3.6.8 Linux/3.10.0-957.21.3.el7.x86_64 Botocore/1.12.183", "awsRegion": "us-east-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"vpcSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "c5a51c2d-b3bb-4486-8f1c-a0cf216fd819", "record_id": "flaws_cloudtrail:0000500:c5a51c2d-b3bb-4486-8f1c-a0cf216fd819", "row_index": 500, "timestamp": "2019-07-08T15:21:33Z", "event_type": "DescribeVpcs", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "251.209.251.231", "user_agent": "Boto3/1.9.183 Python/3.6.8 Linux/3.10.0-957.21.3.el7.x86_64 Botocore/1.12.183", "aws_region": "us-west-1"}, "resource_arns": [], "raw_record_size_bytes": 705, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "c5a51c2d-b3bb-4486-8f1c-a0cf216fd819", "eventTime": "2019-07-08T15:21:33Z", "eventName": "DescribeVpcs", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "251.209.251.231", "userAgent": "Boto3/1.9.183 Python/3.6.8 Linux/3.10.0-957.21.3.el7.x86_64 Botocore/1.12.183", "awsRegion": "us-west-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"vpcSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "82e117342-9c92-42fb-9565-4c8e725317ece", "record_id": "flaws_cloudtrail:0000501:82e117342-9c92-42fb-9565-4c8e725317ece", "row_index": 501, "timestamp": "2019-07-08T15:21:34Z", "event_type": "DescribeCacheParameterGroups", "event_source": "elasticache.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "251.209.251.231", "user_agent": "Boto3/1.9.183 Python/3.6.8 Linux/3.10.0-957.21.3.el7.x86_64 Botocore/1.12.183", "aws_region": "ap-southeast-2"}, "resource_arns": [], "raw_record_size_bytes": 873, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "82e117342-9c92-42fb-9565-4c8e725317ece", "eventTime": "2019-07-08T15:21:34Z", "eventName": "DescribeCacheParameterGroups", "eventSource": "elasticache.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "251.209.251.231", "userAgent": "Boto3/1.9.183 Python/3.6.8 Linux/3.10.0-957.21.3.el7.x86_64 Botocore/1.12.183", "awsRegion": "ap-southeast-2", "errorCode": "AccessDenied", "errorMessage": "User: arn:aws:iam::811596193553:user/backup is not authorized to perform: elasticache:DescribeCacheParameterGroups", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "d11dfea1-7f21-4848-b46d-48303b110c80", "record_id": "flaws_cloudtrail:0000502:d11dfea1-7f21-4848-b46d-48303b110c80", "row_index": 502, "timestamp": "2019-07-08T15:21:34Z", "event_type": "DescribeCacheParameterGroups", "event_source": "elasticache.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "251.209.251.231", "user_agent": "Boto3/1.9.183 Python/3.6.8 Linux/3.10.0-957.21.3.el7.x86_64 Botocore/1.12.183", "aws_region": "sa-east-1"}, "resource_arns": [], "raw_record_size_bytes": 866, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "d11dfea1-7f21-4848-b46d-48303b110c80", "eventTime": "2019-07-08T15:21:34Z", "eventName": "DescribeCacheParameterGroups", "eventSource": "elasticache.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "251.209.251.231", "userAgent": "Boto3/1.9.183 Python/3.6.8 Linux/3.10.0-957.21.3.el7.x86_64 Botocore/1.12.183", "awsRegion": "sa-east-1", "errorCode": "AccessDenied", "errorMessage": "User: arn:aws:iam::811596193553:user/backup is not authorized to perform: elasticache:DescribeCacheParameterGroups", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "769a0d40-4148-4692-8ae2-b3ac58acfee0", "record_id": "flaws_cloudtrail:0000503:769a0d40-4148-4692-8ae2-b3ac58acfee0", "row_index": 503, "timestamp": "2019-07-08T15:21:34Z", "event_type": "DescribeCacheSecurityGroups", "event_source": "elasticache.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "251.209.251.231", "user_agent": "Boto3/1.9.183 Python/3.6.8 Linux/3.10.0-957.21.3.el7.x86_64 Botocore/1.12.183", "aws_region": "sa-east-1"}, "resource_arns": [], "raw_record_size_bytes": 864, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "769a0d40-4148-4692-8ae2-b3ac58acfee0", "eventTime": "2019-07-08T15:21:34Z", "eventName": "DescribeCacheSecurityGroups", "eventSource": "elasticache.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "251.209.251.231", "userAgent": "Boto3/1.9.183 Python/3.6.8 Linux/3.10.0-957.21.3.el7.x86_64 Botocore/1.12.183", "awsRegion": "sa-east-1", "errorCode": "AccessDenied", "errorMessage": "User: arn:aws:iam::811596193553:user/backup is not authorized to perform: elasticache:DescribeCacheSecurityGroups", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "de07afe2-c5d0-410d-9dd5-664681a321bb", "record_id": "flaws_cloudtrail:0000504:de07afe2-c5d0-410d-9dd5-664681a321bb", "row_index": 504, "timestamp": "2019-07-08T15:21:34Z", "event_type": "DescribeCacheSecurityGroups", "event_source": "elasticache.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "251.209.251.231", "user_agent": "Boto3/1.9.183 Python/3.6.8 Linux/3.10.0-957.21.3.el7.x86_64 Botocore/1.12.183", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 864, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "de07afe2-c5d0-410d-9dd5-664681a321bb", "eventTime": "2019-07-08T15:21:34Z", "eventName": "DescribeCacheSecurityGroups", "eventSource": "elasticache.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "251.209.251.231", "userAgent": "Boto3/1.9.183 Python/3.6.8 Linux/3.10.0-957.21.3.el7.x86_64 Botocore/1.12.183", "awsRegion": "us-east-1", "errorCode": "AccessDenied", "errorMessage": "User: arn:aws:iam::811596193553:user/backup is not authorized to perform: elasticache:DescribeCacheSecurityGroups", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "2aa8823b-a7aa-4762-8e9e-eca63a9596fe", "record_id": "flaws_cloudtrail:0000505:2aa8823b-a7aa-4762-8e9e-eca63a9596fe", "row_index": 505, "timestamp": "2019-07-08T15:21:34Z", "event_type": "DescribeCacheParameterGroups", "event_source": "elasticache.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "251.209.251.231", "user_agent": "Boto3/1.9.183 Python/3.6.8 Linux/3.10.0-957.21.3.el7.x86_64 Botocore/1.12.183", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 864, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "2aa8823b-a7aa-4762-8e9e-eca63a9596fe", "eventTime": "2019-07-08T15:21:34Z", "eventName": "DescribeCacheParameterGroups", "eventSource": "elasticache.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "251.209.251.231", "userAgent": "Boto3/1.9.183 Python/3.6.8 Linux/3.10.0-957.21.3.el7.x86_64 Botocore/1.12.183", "awsRegion": "us-east-1", "errorCode": "AccessDenied", "errorMessage": "User: arn:aws:iam::811596193553:user/backup is not authorized to perform: elasticache:DescribeCacheParameterGroups", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "49361a4e-0cce-4a0b-a1a8-0573d50de98a", "record_id": "flaws_cloudtrail:0000506:49361a4e-0cce-4a0b-a1a8-0573d50de98a", "row_index": 506, "timestamp": "2019-07-08T15:21:34Z", "event_type": "DescribeCacheParameterGroups", "event_source": "elasticache.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "251.209.251.231", "user_agent": "Boto3/1.9.183 Python/3.6.8 Linux/3.10.0-957.21.3.el7.x86_64 Botocore/1.12.183", "aws_region": "us-east-2"}, "resource_arns": [], "raw_record_size_bytes": 866, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "49361a4e-0cce-4a0b-a1a8-0573d50de98a", "eventTime": "2019-07-08T15:21:34Z", "eventName": "DescribeCacheParameterGroups", "eventSource": "elasticache.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "251.209.251.231", "userAgent": "Boto3/1.9.183 Python/3.6.8 Linux/3.10.0-957.21.3.el7.x86_64 Botocore/1.12.183", "awsRegion": "us-east-2", "errorCode": "AccessDenied", "errorMessage": "User: arn:aws:iam::811596193553:user/backup is not authorized to perform: elasticache:DescribeCacheParameterGroups", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "d8a93da0-a638-4d2e-900f-479251a6c2df", "record_id": "flaws_cloudtrail:0000507:d8a93da0-a638-4d2e-900f-479251a6c2df", "row_index": 507, "timestamp": "2019-07-08T15:21:34Z", "event_type": "DescribeCacheSecurityGroups", "event_source": "elasticache.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "251.209.251.231", "user_agent": "Boto3/1.9.183 Python/3.6.8 Linux/3.10.0-957.21.3.el7.x86_64 Botocore/1.12.183", "aws_region": "us-east-2"}, "resource_arns": [], "raw_record_size_bytes": 864, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "d8a93da0-a638-4d2e-900f-479251a6c2df", "eventTime": "2019-07-08T15:21:34Z", "eventName": "DescribeCacheSecurityGroups", "eventSource": "elasticache.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "251.209.251.231", "userAgent": "Boto3/1.9.183 Python/3.6.8 Linux/3.10.0-957.21.3.el7.x86_64 Botocore/1.12.183", "awsRegion": "us-east-2", "errorCode": "AccessDenied", "errorMessage": "User: arn:aws:iam::811596193553:user/backup is not authorized to perform: elasticache:DescribeCacheSecurityGroups", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "bb2ef86d-8c21-45f0-9c6d-c1f65e59c14e", "record_id": "flaws_cloudtrail:0000508:bb2ef86d-8c21-45f0-9c6d-c1f65e59c14e", "row_index": 508, "timestamp": "2019-07-08T15:21:34Z", "event_type": "DescribeCacheSecurityGroups", "event_source": "elasticache.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "251.209.251.231", "user_agent": "Boto3/1.9.183 Python/3.6.8 Linux/3.10.0-957.21.3.el7.x86_64 Botocore/1.12.183", "aws_region": "us-west-1"}, "resource_arns": [], "raw_record_size_bytes": 865, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "bb2ef86d-8c21-45f0-9c6d-c1f65e59c14e", "eventTime": "2019-07-08T15:21:34Z", "eventName": "DescribeCacheSecurityGroups", "eventSource": "elasticache.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "251.209.251.231", "userAgent": "Boto3/1.9.183 Python/3.6.8 Linux/3.10.0-957.21.3.el7.x86_64 Botocore/1.12.183", "awsRegion": "us-west-1", "errorCode": "AccessDenied", "errorMessage": "User: arn:aws:iam::811596193553:user/backup is not authorized to perform: elasticache:DescribeCacheSecurityGroups", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "6248db90-4c0f-4952-9def-3a8210e6344a", "record_id": "flaws_cloudtrail:0000509:6248db90-4c0f-4952-9def-3a8210e6344a", "row_index": 509, "timestamp": "2019-07-08T15:21:34Z", "event_type": "DescribeCacheParameterGroups", "event_source": "elasticache.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "251.209.251.231", "user_agent": "Boto3/1.9.183 Python/3.6.8 Linux/3.10.0-957.21.3.el7.x86_64 Botocore/1.12.183", "aws_region": "us-west-1"}, "resource_arns": [], "raw_record_size_bytes": 866, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "6248db90-4c0f-4952-9def-3a8210e6344a", "eventTime": "2019-07-08T15:21:34Z", "eventName": "DescribeCacheParameterGroups", "eventSource": "elasticache.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "251.209.251.231", "userAgent": "Boto3/1.9.183 Python/3.6.8 Linux/3.10.0-957.21.3.el7.x86_64 Botocore/1.12.183", "awsRegion": "us-west-1", "errorCode": "AccessDenied", "errorMessage": "User: arn:aws:iam::811596193553:user/backup is not authorized to perform: elasticache:DescribeCacheParameterGroups", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "d5b1ba79-147c-4a13-b65a-e672d41603c0", "record_id": "flaws_cloudtrail:0000510:d5b1ba79-147c-4a13-b65a-e672d41603c0", "row_index": 510, "timestamp": "2019-07-08T15:21:34Z", "event_type": "DescribeVpcs", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "251.209.251.231", "user_agent": "Boto3/1.9.183 Python/3.6.8 Linux/3.10.0-957.21.3.el7.x86_64 Botocore/1.12.183", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 705, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "d5b1ba79-147c-4a13-b65a-e672d41603c0", "eventTime": "2019-07-08T15:21:34Z", "eventName": "DescribeVpcs", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "251.209.251.231", "userAgent": "Boto3/1.9.183 Python/3.6.8 Linux/3.10.0-957.21.3.el7.x86_64 Botocore/1.12.183", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"vpcSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "e7f4a350-9b9f-4a1d-9f42-021caea8a2ee", "record_id": "flaws_cloudtrail:0000511:e7f4a350-9b9f-4a1d-9f42-021caea8a2ee", "row_index": 511, "timestamp": "2019-07-08T15:21:34Z", "event_type": "DescribeCacheParameterGroups", "event_source": "elasticache.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "251.209.251.231", "user_agent": "Boto3/1.9.183 Python/3.6.8 Linux/3.10.0-957.21.3.el7.x86_64 Botocore/1.12.183", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 864, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "e7f4a350-9b9f-4a1d-9f42-021caea8a2ee", "eventTime": "2019-07-08T15:21:34Z", "eventName": "DescribeCacheParameterGroups", "eventSource": "elasticache.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "251.209.251.231", "userAgent": "Boto3/1.9.183 Python/3.6.8 Linux/3.10.0-957.21.3.el7.x86_64 Botocore/1.12.183", "awsRegion": "us-west-2", "errorCode": "AccessDenied", "errorMessage": "User: arn:aws:iam::811596193553:user/backup is not authorized to perform: elasticache:DescribeCacheParameterGroups", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "c06c3e1a-b08d-45c2-a3b9-779326da277e", "record_id": "flaws_cloudtrail:0000512:c06c3e1a-b08d-45c2-a3b9-779326da277e", "row_index": 512, "timestamp": "2019-07-08T15:21:34Z", "event_type": "DescribeCacheSecurityGroups", "event_source": "elasticache.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "251.209.251.231", "user_agent": "Boto3/1.9.183 Python/3.6.8 Linux/3.10.0-957.21.3.el7.x86_64 Botocore/1.12.183", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 863, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "c06c3e1a-b08d-45c2-a3b9-779326da277e", "eventTime": "2019-07-08T15:21:34Z", "eventName": "DescribeCacheSecurityGroups", "eventSource": "elasticache.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "251.209.251.231", "userAgent": "Boto3/1.9.183 Python/3.6.8 Linux/3.10.0-957.21.3.el7.x86_64 Botocore/1.12.183", "awsRegion": "us-west-2", "errorCode": "AccessDenied", "errorMessage": "User: arn:aws:iam::811596193553:user/backup is not authorized to perform: elasticache:DescribeCacheSecurityGroups", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "82e117342-9c92-42fb-9565-4c8e725317ece", "record_id": "flaws_cloudtrail:0000513:82e117342-9c92-42fb-9565-4c8e725317ece", "row_index": 513, "timestamp": "2019-07-08T15:21:34Z", "event_type": "DescribeCacheParameterGroups", "event_source": "elasticache.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "251.209.251.231", "user_agent": "Boto3/1.9.183 Python/3.6.8 Linux/3.10.0-957.21.3.el7.x86_64 Botocore/1.12.183", "aws_region": "ap-southeast-2"}, "resource_arns": [], "raw_record_size_bytes": 873, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "82e117342-9c92-42fb-9565-4c8e725317ece", "eventTime": "2019-07-08T15:21:34Z", "eventName": "DescribeCacheParameterGroups", "eventSource": "elasticache.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "251.209.251.231", "userAgent": "Boto3/1.9.183 Python/3.6.8 Linux/3.10.0-957.21.3.el7.x86_64 Botocore/1.12.183", "awsRegion": "ap-southeast-2", "errorCode": "AccessDenied", "errorMessage": "User: arn:aws:iam::811596193553:user/backup is not authorized to perform: elasticache:DescribeCacheParameterGroups", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "d11dfea1-7f21-4848-b46d-48303b110c80", "record_id": "flaws_cloudtrail:0000514:d11dfea1-7f21-4848-b46d-48303b110c80", "row_index": 514, "timestamp": "2019-07-08T15:21:34Z", "event_type": "DescribeCacheParameterGroups", "event_source": "elasticache.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "251.209.251.231", "user_agent": "Boto3/1.9.183 Python/3.6.8 Linux/3.10.0-957.21.3.el7.x86_64 Botocore/1.12.183", "aws_region": "sa-east-1"}, "resource_arns": [], "raw_record_size_bytes": 866, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "d11dfea1-7f21-4848-b46d-48303b110c80", "eventTime": "2019-07-08T15:21:34Z", "eventName": "DescribeCacheParameterGroups", "eventSource": "elasticache.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "251.209.251.231", "userAgent": "Boto3/1.9.183 Python/3.6.8 Linux/3.10.0-957.21.3.el7.x86_64 Botocore/1.12.183", "awsRegion": "sa-east-1", "errorCode": "AccessDenied", "errorMessage": "User: arn:aws:iam::811596193553:user/backup is not authorized to perform: elasticache:DescribeCacheParameterGroups", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "769a0d40-4148-4692-8ae2-b3ac58acfee0", "record_id": "flaws_cloudtrail:0000515:769a0d40-4148-4692-8ae2-b3ac58acfee0", "row_index": 515, "timestamp": "2019-07-08T15:21:34Z", "event_type": "DescribeCacheSecurityGroups", "event_source": "elasticache.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "251.209.251.231", "user_agent": "Boto3/1.9.183 Python/3.6.8 Linux/3.10.0-957.21.3.el7.x86_64 Botocore/1.12.183", "aws_region": "sa-east-1"}, "resource_arns": [], "raw_record_size_bytes": 864, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "769a0d40-4148-4692-8ae2-b3ac58acfee0", "eventTime": "2019-07-08T15:21:34Z", "eventName": "DescribeCacheSecurityGroups", "eventSource": "elasticache.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "251.209.251.231", "userAgent": "Boto3/1.9.183 Python/3.6.8 Linux/3.10.0-957.21.3.el7.x86_64 Botocore/1.12.183", "awsRegion": "sa-east-1", "errorCode": "AccessDenied", "errorMessage": "User: arn:aws:iam::811596193553:user/backup is not authorized to perform: elasticache:DescribeCacheSecurityGroups", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "2aa8823b-a7aa-4762-8e9e-eca63a9596fe", "record_id": "flaws_cloudtrail:0000516:2aa8823b-a7aa-4762-8e9e-eca63a9596fe", "row_index": 516, "timestamp": "2019-07-08T15:21:34Z", "event_type": "DescribeCacheParameterGroups", "event_source": "elasticache.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "251.209.251.231", "user_agent": "Boto3/1.9.183 Python/3.6.8 Linux/3.10.0-957.21.3.el7.x86_64 Botocore/1.12.183", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 864, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "2aa8823b-a7aa-4762-8e9e-eca63a9596fe", "eventTime": "2019-07-08T15:21:34Z", "eventName": "DescribeCacheParameterGroups", "eventSource": "elasticache.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "251.209.251.231", "userAgent": "Boto3/1.9.183 Python/3.6.8 Linux/3.10.0-957.21.3.el7.x86_64 Botocore/1.12.183", "awsRegion": "us-east-1", "errorCode": "AccessDenied", "errorMessage": "User: arn:aws:iam::811596193553:user/backup is not authorized to perform: elasticache:DescribeCacheParameterGroups", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "de07afe2-c5d0-410d-9dd5-664681a321bb", "record_id": "flaws_cloudtrail:0000517:de07afe2-c5d0-410d-9dd5-664681a321bb", "row_index": 517, "timestamp": "2019-07-08T15:21:34Z", "event_type": "DescribeCacheSecurityGroups", "event_source": "elasticache.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "251.209.251.231", "user_agent": "Boto3/1.9.183 Python/3.6.8 Linux/3.10.0-957.21.3.el7.x86_64 Botocore/1.12.183", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 864, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "de07afe2-c5d0-410d-9dd5-664681a321bb", "eventTime": "2019-07-08T15:21:34Z", "eventName": "DescribeCacheSecurityGroups", "eventSource": "elasticache.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "251.209.251.231", "userAgent": "Boto3/1.9.183 Python/3.6.8 Linux/3.10.0-957.21.3.el7.x86_64 Botocore/1.12.183", "awsRegion": "us-east-1", "errorCode": "AccessDenied", "errorMessage": "User: arn:aws:iam::811596193553:user/backup is not authorized to perform: elasticache:DescribeCacheSecurityGroups", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "49361a4e-0cce-4a0b-a1a8-0573d50de98a", "record_id": "flaws_cloudtrail:0000518:49361a4e-0cce-4a0b-a1a8-0573d50de98a", "row_index": 518, "timestamp": "2019-07-08T15:21:34Z", "event_type": "DescribeCacheParameterGroups", "event_source": "elasticache.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "251.209.251.231", "user_agent": "Boto3/1.9.183 Python/3.6.8 Linux/3.10.0-957.21.3.el7.x86_64 Botocore/1.12.183", "aws_region": "us-east-2"}, "resource_arns": [], "raw_record_size_bytes": 866, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "49361a4e-0cce-4a0b-a1a8-0573d50de98a", "eventTime": "2019-07-08T15:21:34Z", "eventName": "DescribeCacheParameterGroups", "eventSource": "elasticache.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "251.209.251.231", "userAgent": "Boto3/1.9.183 Python/3.6.8 Linux/3.10.0-957.21.3.el7.x86_64 Botocore/1.12.183", "awsRegion": "us-east-2", "errorCode": "AccessDenied", "errorMessage": "User: arn:aws:iam::811596193553:user/backup is not authorized to perform: elasticache:DescribeCacheParameterGroups", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "d8a93da0-a638-4d2e-900f-479251a6c2df", "record_id": "flaws_cloudtrail:0000519:d8a93da0-a638-4d2e-900f-479251a6c2df", "row_index": 519, "timestamp": "2019-07-08T15:21:34Z", "event_type": "DescribeCacheSecurityGroups", "event_source": "elasticache.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "251.209.251.231", "user_agent": "Boto3/1.9.183 Python/3.6.8 Linux/3.10.0-957.21.3.el7.x86_64 Botocore/1.12.183", "aws_region": "us-east-2"}, "resource_arns": [], "raw_record_size_bytes": 864, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "d8a93da0-a638-4d2e-900f-479251a6c2df", "eventTime": "2019-07-08T15:21:34Z", "eventName": "DescribeCacheSecurityGroups", "eventSource": "elasticache.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "251.209.251.231", "userAgent": "Boto3/1.9.183 Python/3.6.8 Linux/3.10.0-957.21.3.el7.x86_64 Botocore/1.12.183", "awsRegion": "us-east-2", "errorCode": "AccessDenied", "errorMessage": "User: arn:aws:iam::811596193553:user/backup is not authorized to perform: elasticache:DescribeCacheSecurityGroups", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "bb2ef86d-8c21-45f0-9c6d-c1f65e59c14e", "record_id": "flaws_cloudtrail:0000520:bb2ef86d-8c21-45f0-9c6d-c1f65e59c14e", "row_index": 520, "timestamp": "2019-07-08T15:21:34Z", "event_type": "DescribeCacheSecurityGroups", "event_source": "elasticache.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "251.209.251.231", "user_agent": "Boto3/1.9.183 Python/3.6.8 Linux/3.10.0-957.21.3.el7.x86_64 Botocore/1.12.183", "aws_region": "us-west-1"}, "resource_arns": [], "raw_record_size_bytes": 865, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "bb2ef86d-8c21-45f0-9c6d-c1f65e59c14e", "eventTime": "2019-07-08T15:21:34Z", "eventName": "DescribeCacheSecurityGroups", "eventSource": "elasticache.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "251.209.251.231", "userAgent": "Boto3/1.9.183 Python/3.6.8 Linux/3.10.0-957.21.3.el7.x86_64 Botocore/1.12.183", "awsRegion": "us-west-1", "errorCode": "AccessDenied", "errorMessage": "User: arn:aws:iam::811596193553:user/backup is not authorized to perform: elasticache:DescribeCacheSecurityGroups", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "6248db90-4c0f-4952-9def-3a8210e6344a", "record_id": "flaws_cloudtrail:0000521:6248db90-4c0f-4952-9def-3a8210e6344a", "row_index": 521, "timestamp": "2019-07-08T15:21:34Z", "event_type": "DescribeCacheParameterGroups", "event_source": "elasticache.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "251.209.251.231", "user_agent": "Boto3/1.9.183 Python/3.6.8 Linux/3.10.0-957.21.3.el7.x86_64 Botocore/1.12.183", "aws_region": "us-west-1"}, "resource_arns": [], "raw_record_size_bytes": 866, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "6248db90-4c0f-4952-9def-3a8210e6344a", "eventTime": "2019-07-08T15:21:34Z", "eventName": "DescribeCacheParameterGroups", "eventSource": "elasticache.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "251.209.251.231", "userAgent": "Boto3/1.9.183 Python/3.6.8 Linux/3.10.0-957.21.3.el7.x86_64 Botocore/1.12.183", "awsRegion": "us-west-1", "errorCode": "AccessDenied", "errorMessage": "User: arn:aws:iam::811596193553:user/backup is not authorized to perform: elasticache:DescribeCacheParameterGroups", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "d5b1ba79-147c-4a13-b65a-e672d41603c0", "record_id": "flaws_cloudtrail:0000522:d5b1ba79-147c-4a13-b65a-e672d41603c0", "row_index": 522, "timestamp": "2019-07-08T15:21:34Z", "event_type": "DescribeVpcs", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "251.209.251.231", "user_agent": "Boto3/1.9.183 Python/3.6.8 Linux/3.10.0-957.21.3.el7.x86_64 Botocore/1.12.183", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 705, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "d5b1ba79-147c-4a13-b65a-e672d41603c0", "eventTime": "2019-07-08T15:21:34Z", "eventName": "DescribeVpcs", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "251.209.251.231", "userAgent": "Boto3/1.9.183 Python/3.6.8 Linux/3.10.0-957.21.3.el7.x86_64 Botocore/1.12.183", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"vpcSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "e7f4a350-9b9f-4a1d-9f42-021caea8a2ee", "record_id": "flaws_cloudtrail:0000523:e7f4a350-9b9f-4a1d-9f42-021caea8a2ee", "row_index": 523, "timestamp": "2019-07-08T15:21:34Z", "event_type": "DescribeCacheParameterGroups", "event_source": "elasticache.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "251.209.251.231", "user_agent": "Boto3/1.9.183 Python/3.6.8 Linux/3.10.0-957.21.3.el7.x86_64 Botocore/1.12.183", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 864, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "e7f4a350-9b9f-4a1d-9f42-021caea8a2ee", "eventTime": "2019-07-08T15:21:34Z", "eventName": "DescribeCacheParameterGroups", "eventSource": "elasticache.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "251.209.251.231", "userAgent": "Boto3/1.9.183 Python/3.6.8 Linux/3.10.0-957.21.3.el7.x86_64 Botocore/1.12.183", "awsRegion": "us-west-2", "errorCode": "AccessDenied", "errorMessage": "User: arn:aws:iam::811596193553:user/backup is not authorized to perform: elasticache:DescribeCacheParameterGroups", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "c06c3e1a-b08d-45c2-a3b9-779326da277e", "record_id": "flaws_cloudtrail:0000524:c06c3e1a-b08d-45c2-a3b9-779326da277e", "row_index": 524, "timestamp": "2019-07-08T15:21:34Z", "event_type": "DescribeCacheSecurityGroups", "event_source": "elasticache.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "251.209.251.231", "user_agent": "Boto3/1.9.183 Python/3.6.8 Linux/3.10.0-957.21.3.el7.x86_64 Botocore/1.12.183", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 863, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "c06c3e1a-b08d-45c2-a3b9-779326da277e", "eventTime": "2019-07-08T15:21:34Z", "eventName": "DescribeCacheSecurityGroups", "eventSource": "elasticache.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "251.209.251.231", "userAgent": "Boto3/1.9.183 Python/3.6.8 Linux/3.10.0-957.21.3.el7.x86_64 Botocore/1.12.183", "awsRegion": "us-west-2", "errorCode": "AccessDenied", "errorMessage": "User: arn:aws:iam::811596193553:user/backup is not authorized to perform: elasticache:DescribeCacheSecurityGroups", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "ae76405-47b2-45bf-a201-a147f582280f", "record_id": "flaws_cloudtrail:0000525:ae76405-47b2-45bf-a201-a147f582280f", "row_index": 525, "timestamp": "2019-07-08T15:21:36Z", "event_type": "DescribeConfigurationRecorders", "event_source": "config.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "251.209.251.231", "user_agent": "Boto3/1.9.183 Python/3.6.8 Linux/3.10.0-957.21.3.el7.x86_64 Botocore/1.12.183", "aws_region": "ap-northeast-1"}, "resource_arns": [], "raw_record_size_bytes": 864, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "ae76405-47b2-45bf-a201-a147f582280f", "eventTime": "2019-07-08T15:21:36Z", "eventName": "DescribeConfigurationRecorders", "eventSource": "config.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "251.209.251.231", "userAgent": "Boto3/1.9.183 Python/3.6.8 Linux/3.10.0-957.21.3.el7.x86_64 Botocore/1.12.183", "awsRegion": "ap-northeast-1", "errorCode": "AccessDenied", "errorMessage": "User: arn:aws:iam::811596193553:user/backup is not authorized to perform: config:DescribeConfigurationRecorders", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "45dbf4e2-6087-4f0f-8823-389799d66b11", "record_id": "flaws_cloudtrail:0000526:45dbf4e2-6087-4f0f-8823-389799d66b11", "row_index": 526, "timestamp": "2019-07-08T15:21:36Z", "event_type": "DescribeConfigRules", "event_source": "config.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "251.209.251.231", "user_agent": "Boto3/1.9.183 Python/3.6.8 Linux/3.10.0-957.21.3.el7.x86_64 Botocore/1.12.183", "aws_region": "ap-northeast-1"}, "resource_arns": [], "raw_record_size_bytes": 843, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "45dbf4e2-6087-4f0f-8823-389799d66b11", "eventTime": "2019-07-08T15:21:36Z", "eventName": "DescribeConfigRules", "eventSource": "config.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "251.209.251.231", "userAgent": "Boto3/1.9.183 Python/3.6.8 Linux/3.10.0-957.21.3.el7.x86_64 Botocore/1.12.183", "awsRegion": "ap-northeast-1", "errorCode": "AccessDenied", "errorMessage": "User: arn:aws:iam::811596193553:user/backup is not authorized to perform: config:DescribeConfigRules", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "c78d80cf-de02-43a6-8bf2-1258ce9e0857", "record_id": "flaws_cloudtrail:0000527:c78d80cf-de02-43a6-8bf2-1258ce9e0857", "row_index": 527, "timestamp": "2019-07-08T15:21:36Z", "event_type": "DescribeConfigRules", "event_source": "config.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "251.209.251.231", "user_agent": "Boto3/1.9.183 Python/3.6.8 Linux/3.10.0-957.21.3.el7.x86_64 Botocore/1.12.183", "aws_region": "ap-northeast-2"}, "resource_arns": [], "raw_record_size_bytes": 844, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "c78d80cf-de02-43a6-8bf2-1258ce9e0857", "eventTime": "2019-07-08T15:21:36Z", "eventName": "DescribeConfigRules", "eventSource": "config.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "251.209.251.231", "userAgent": "Boto3/1.9.183 Python/3.6.8 Linux/3.10.0-957.21.3.el7.x86_64 Botocore/1.12.183", "awsRegion": "ap-northeast-2", "errorCode": "AccessDenied", "errorMessage": "User: arn:aws:iam::811596193553:user/backup is not authorized to perform: config:DescribeConfigRules", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "bbe2923d-1647-46e8-af1f-045134f78a78", "record_id": "flaws_cloudtrail:0000528:bbe2923d-1647-46e8-af1f-045134f78a78", "row_index": 528, "timestamp": "2019-07-08T15:21:36Z", "event_type": "DescribeConfigurationRecorders", "event_source": "config.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "251.209.251.231", "user_agent": "Boto3/1.9.183 Python/3.6.8 Linux/3.10.0-957.21.3.el7.x86_64 Botocore/1.12.183", "aws_region": "ap-northeast-2"}, "resource_arns": [], "raw_record_size_bytes": 866, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "bbe2923d-1647-46e8-af1f-045134f78a78", "eventTime": "2019-07-08T15:21:36Z", "eventName": "DescribeConfigurationRecorders", "eventSource": "config.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "251.209.251.231", "userAgent": "Boto3/1.9.183 Python/3.6.8 Linux/3.10.0-957.21.3.el7.x86_64 Botocore/1.12.183", "awsRegion": "ap-northeast-2", "errorCode": "AccessDenied", "errorMessage": "User: arn:aws:iam::811596193553:user/backup is not authorized to perform: config:DescribeConfigurationRecorders", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "6f708d6c-3ae9-4664-80d5-57c923dd69a9", "record_id": "flaws_cloudtrail:0000529:6f708d6c-3ae9-4664-80d5-57c923dd69a9", "row_index": 529, "timestamp": "2019-07-08T15:21:36Z", "event_type": "DescribeConfigurationRecorders", "event_source": "config.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "251.209.251.231", "user_agent": "Boto3/1.9.183 Python/3.6.8 Linux/3.10.0-957.21.3.el7.x86_64 Botocore/1.12.183", "aws_region": "ap-south-1"}, "resource_arns": [], "raw_record_size_bytes": 861, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "6f708d6c-3ae9-4664-80d5-57c923dd69a9", "eventTime": "2019-07-08T15:21:36Z", "eventName": "DescribeConfigurationRecorders", "eventSource": "config.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "251.209.251.231", "userAgent": "Boto3/1.9.183 Python/3.6.8 Linux/3.10.0-957.21.3.el7.x86_64 Botocore/1.12.183", "awsRegion": "ap-south-1", "errorCode": "AccessDenied", "errorMessage": "User: arn:aws:iam::811596193553:user/backup is not authorized to perform: config:DescribeConfigurationRecorders", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "6bce672b-6808-4cde-9065-2d67be486e6b", "record_id": "flaws_cloudtrail:0000530:6bce672b-6808-4cde-9065-2d67be486e6b", "row_index": 530, "timestamp": "2019-07-08T15:21:36Z", "event_type": "DescribeConfigRules", "event_source": "config.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "251.209.251.231", "user_agent": "Boto3/1.9.183 Python/3.6.8 Linux/3.10.0-957.21.3.el7.x86_64 Botocore/1.12.183", "aws_region": "ap-south-1"}, "resource_arns": [], "raw_record_size_bytes": 839, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "6bce672b-6808-4cde-9065-2d67be486e6b", "eventTime": "2019-07-08T15:21:36Z", "eventName": "DescribeConfigRules", "eventSource": "config.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "251.209.251.231", "userAgent": "Boto3/1.9.183 Python/3.6.8 Linux/3.10.0-957.21.3.el7.x86_64 Botocore/1.12.183", "awsRegion": "ap-south-1", "errorCode": "AccessDenied", "errorMessage": "User: arn:aws:iam::811596193553:user/backup is not authorized to perform: config:DescribeConfigRules", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "e23c5a00-91a4-42c8-8e54-7a05dd38fca5", "record_id": "flaws_cloudtrail:0000531:e23c5a00-91a4-42c8-8e54-7a05dd38fca5", "row_index": 531, "timestamp": "2019-07-08T15:21:36Z", "event_type": "DescribeConfigRules", "event_source": "config.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "251.209.251.231", "user_agent": "Boto3/1.9.183 Python/3.6.8 Linux/3.10.0-957.21.3.el7.x86_64 Botocore/1.12.183", "aws_region": "ca-central-1"}, "resource_arns": [], "raw_record_size_bytes": 841, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "e23c5a00-91a4-42c8-8e54-7a05dd38fca5", "eventTime": "2019-07-08T15:21:36Z", "eventName": "DescribeConfigRules", "eventSource": "config.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "251.209.251.231", "userAgent": "Boto3/1.9.183 Python/3.6.8 Linux/3.10.0-957.21.3.el7.x86_64 Botocore/1.12.183", "awsRegion": "ca-central-1", "errorCode": "AccessDenied", "errorMessage": "User: arn:aws:iam::811596193553:user/backup is not authorized to perform: config:DescribeConfigRules", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "a19d3e98-dfbe-4252-93d0-cade6c1a1b06", "record_id": "flaws_cloudtrail:0000532:a19d3e98-dfbe-4252-93d0-cade6c1a1b06", "row_index": 532, "timestamp": "2019-07-08T15:21:36Z", "event_type": "DescribeConfigurationRecorders", "event_source": "config.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "251.209.251.231", "user_agent": "Boto3/1.9.183 Python/3.6.8 Linux/3.10.0-957.21.3.el7.x86_64 Botocore/1.12.183", "aws_region": "ca-central-1"}, "resource_arns": [], "raw_record_size_bytes": 863, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "a19d3e98-dfbe-4252-93d0-cade6c1a1b06", "eventTime": "2019-07-08T15:21:36Z", "eventName": "DescribeConfigurationRecorders", "eventSource": "config.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "251.209.251.231", "userAgent": "Boto3/1.9.183 Python/3.6.8 Linux/3.10.0-957.21.3.el7.x86_64 Botocore/1.12.183", "awsRegion": "ca-central-1", "errorCode": "AccessDenied", "errorMessage": "User: arn:aws:iam::811596193553:user/backup is not authorized to perform: config:DescribeConfigurationRecorders", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "1a0ec042-2762-4935-9196-56f9d2d3d6e2", "record_id": "flaws_cloudtrail:0000533:1a0ec042-2762-4935-9196-56f9d2d3d6e2", "row_index": 533, "timestamp": "2019-07-08T15:21:36Z", "event_type": "DescribeConfigurationRecorders", "event_source": "config.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "251.209.251.231", "user_agent": "Boto3/1.9.183 Python/3.6.8 Linux/3.10.0-957.21.3.el7.x86_64 Botocore/1.12.183", "aws_region": "eu-central-1"}, "resource_arns": [], "raw_record_size_bytes": 863, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "1a0ec042-2762-4935-9196-56f9d2d3d6e2", "eventTime": "2019-07-08T15:21:36Z", "eventName": "DescribeConfigurationRecorders", "eventSource": "config.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "251.209.251.231", "userAgent": "Boto3/1.9.183 Python/3.6.8 Linux/3.10.0-957.21.3.el7.x86_64 Botocore/1.12.183", "awsRegion": "eu-central-1", "errorCode": "AccessDenied", "errorMessage": "User: arn:aws:iam::811596193553:user/backup is not authorized to perform: config:DescribeConfigurationRecorders", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "553289fef-7a24-4376-93b0-cffbffd286252", "record_id": "flaws_cloudtrail:0000534:553289fef-7a24-4376-93b0-cffbffd286252", "row_index": 534, "timestamp": "2019-07-08T15:21:36Z", "event_type": "DescribeConfigRules", "event_source": "config.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "251.209.251.231", "user_agent": "Boto3/1.9.183 Python/3.6.8 Linux/3.10.0-957.21.3.el7.x86_64 Botocore/1.12.183", "aws_region": "eu-central-1"}, "resource_arns": [], "raw_record_size_bytes": 843, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "553289fef-7a24-4376-93b0-cffbffd286252", "eventTime": "2019-07-08T15:21:36Z", "eventName": "DescribeConfigRules", "eventSource": "config.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "251.209.251.231", "userAgent": "Boto3/1.9.183 Python/3.6.8 Linux/3.10.0-957.21.3.el7.x86_64 Botocore/1.12.183", "awsRegion": "eu-central-1", "errorCode": "AccessDenied", "errorMessage": "User: arn:aws:iam::811596193553:user/backup is not authorized to perform: config:DescribeConfigRules", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "d837524-8d1c-45ea-9b29-ce715806e", "record_id": "flaws_cloudtrail:0000535:d837524-8d1c-45ea-9b29-ce715806e", "row_index": 535, "timestamp": "2019-07-08T15:21:36Z", "event_type": "DescribeConfigurationRecorders", "event_source": "config.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "251.209.251.231", "user_agent": "Boto3/1.9.183 Python/3.6.8 Linux/3.10.0-957.21.3.el7.x86_64 Botocore/1.12.183", "aws_region": "eu-west-1"}, "resource_arns": [], "raw_record_size_bytes": 856, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "d837524-8d1c-45ea-9b29-ce715806e", "eventTime": "2019-07-08T15:21:36Z", "eventName": "DescribeConfigurationRecorders", "eventSource": "config.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "251.209.251.231", "userAgent": "Boto3/1.9.183 Python/3.6.8 Linux/3.10.0-957.21.3.el7.x86_64 Botocore/1.12.183", "awsRegion": "eu-west-1", "errorCode": "AccessDenied", "errorMessage": "User: arn:aws:iam::811596193553:user/backup is not authorized to perform: config:DescribeConfigurationRecorders", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "2f101228-01b2-41f6-8d64-e6b913a562a6", "record_id": "flaws_cloudtrail:0000536:2f101228-01b2-41f6-8d64-e6b913a562a6", "row_index": 536, "timestamp": "2019-07-08T15:21:36Z", "event_type": "DescribeConfigRules", "event_source": "config.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "251.209.251.231", "user_agent": "Boto3/1.9.183 Python/3.6.8 Linux/3.10.0-957.21.3.el7.x86_64 Botocore/1.12.183", "aws_region": "eu-west-1"}, "resource_arns": [], "raw_record_size_bytes": 838, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "2f101228-01b2-41f6-8d64-e6b913a562a6", "eventTime": "2019-07-08T15:21:36Z", "eventName": "DescribeConfigRules", "eventSource": "config.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "251.209.251.231", "userAgent": "Boto3/1.9.183 Python/3.6.8 Linux/3.10.0-957.21.3.el7.x86_64 Botocore/1.12.183", "awsRegion": "eu-west-1", "errorCode": "AccessDenied", "errorMessage": "User: arn:aws:iam::811596193553:user/backup is not authorized to perform: config:DescribeConfigRules", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "ae76405-47b2-45bf-a201-a147f582280f", "record_id": "flaws_cloudtrail:0000537:ae76405-47b2-45bf-a201-a147f582280f", "row_index": 537, "timestamp": "2019-07-08T15:21:36Z", "event_type": "DescribeConfigurationRecorders", "event_source": "config.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "251.209.251.231", "user_agent": "Boto3/1.9.183 Python/3.6.8 Linux/3.10.0-957.21.3.el7.x86_64 Botocore/1.12.183", "aws_region": "ap-northeast-1"}, "resource_arns": [], "raw_record_size_bytes": 864, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "ae76405-47b2-45bf-a201-a147f582280f", "eventTime": "2019-07-08T15:21:36Z", "eventName": "DescribeConfigurationRecorders", "eventSource": "config.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "251.209.251.231", "userAgent": "Boto3/1.9.183 Python/3.6.8 Linux/3.10.0-957.21.3.el7.x86_64 Botocore/1.12.183", "awsRegion": "ap-northeast-1", "errorCode": "AccessDenied", "errorMessage": "User: arn:aws:iam::811596193553:user/backup is not authorized to perform: config:DescribeConfigurationRecorders", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "45dbf4e2-6087-4f0f-8823-389799d66b11", "record_id": "flaws_cloudtrail:0000538:45dbf4e2-6087-4f0f-8823-389799d66b11", "row_index": 538, "timestamp": "2019-07-08T15:21:36Z", "event_type": "DescribeConfigRules", "event_source": "config.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "251.209.251.231", "user_agent": "Boto3/1.9.183 Python/3.6.8 Linux/3.10.0-957.21.3.el7.x86_64 Botocore/1.12.183", "aws_region": "ap-northeast-1"}, "resource_arns": [], "raw_record_size_bytes": 843, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "45dbf4e2-6087-4f0f-8823-389799d66b11", "eventTime": "2019-07-08T15:21:36Z", "eventName": "DescribeConfigRules", "eventSource": "config.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "251.209.251.231", "userAgent": "Boto3/1.9.183 Python/3.6.8 Linux/3.10.0-957.21.3.el7.x86_64 Botocore/1.12.183", "awsRegion": "ap-northeast-1", "errorCode": "AccessDenied", "errorMessage": "User: arn:aws:iam::811596193553:user/backup is not authorized to perform: config:DescribeConfigRules", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "c78d80cf-de02-43a6-8bf2-1258ce9e0857", "record_id": "flaws_cloudtrail:0000539:c78d80cf-de02-43a6-8bf2-1258ce9e0857", "row_index": 539, "timestamp": "2019-07-08T15:21:36Z", "event_type": "DescribeConfigRules", "event_source": "config.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "251.209.251.231", "user_agent": "Boto3/1.9.183 Python/3.6.8 Linux/3.10.0-957.21.3.el7.x86_64 Botocore/1.12.183", "aws_region": "ap-northeast-2"}, "resource_arns": [], "raw_record_size_bytes": 844, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "c78d80cf-de02-43a6-8bf2-1258ce9e0857", "eventTime": "2019-07-08T15:21:36Z", "eventName": "DescribeConfigRules", "eventSource": "config.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "251.209.251.231", "userAgent": "Boto3/1.9.183 Python/3.6.8 Linux/3.10.0-957.21.3.el7.x86_64 Botocore/1.12.183", "awsRegion": "ap-northeast-2", "errorCode": "AccessDenied", "errorMessage": "User: arn:aws:iam::811596193553:user/backup is not authorized to perform: config:DescribeConfigRules", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "bbe2923d-1647-46e8-af1f-045134f78a78", "record_id": "flaws_cloudtrail:0000540:bbe2923d-1647-46e8-af1f-045134f78a78", "row_index": 540, "timestamp": "2019-07-08T15:21:36Z", "event_type": "DescribeConfigurationRecorders", "event_source": "config.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "251.209.251.231", "user_agent": "Boto3/1.9.183 Python/3.6.8 Linux/3.10.0-957.21.3.el7.x86_64 Botocore/1.12.183", "aws_region": "ap-northeast-2"}, "resource_arns": [], "raw_record_size_bytes": 866, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "bbe2923d-1647-46e8-af1f-045134f78a78", "eventTime": "2019-07-08T15:21:36Z", "eventName": "DescribeConfigurationRecorders", "eventSource": "config.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "251.209.251.231", "userAgent": "Boto3/1.9.183 Python/3.6.8 Linux/3.10.0-957.21.3.el7.x86_64 Botocore/1.12.183", "awsRegion": "ap-northeast-2", "errorCode": "AccessDenied", "errorMessage": "User: arn:aws:iam::811596193553:user/backup is not authorized to perform: config:DescribeConfigurationRecorders", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "6f708d6c-3ae9-4664-80d5-57c923dd69a9", "record_id": "flaws_cloudtrail:0000541:6f708d6c-3ae9-4664-80d5-57c923dd69a9", "row_index": 541, "timestamp": "2019-07-08T15:21:36Z", "event_type": "DescribeConfigurationRecorders", "event_source": "config.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "251.209.251.231", "user_agent": "Boto3/1.9.183 Python/3.6.8 Linux/3.10.0-957.21.3.el7.x86_64 Botocore/1.12.183", "aws_region": "ap-south-1"}, "resource_arns": [], "raw_record_size_bytes": 861, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "6f708d6c-3ae9-4664-80d5-57c923dd69a9", "eventTime": "2019-07-08T15:21:36Z", "eventName": "DescribeConfigurationRecorders", "eventSource": "config.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "251.209.251.231", "userAgent": "Boto3/1.9.183 Python/3.6.8 Linux/3.10.0-957.21.3.el7.x86_64 Botocore/1.12.183", "awsRegion": "ap-south-1", "errorCode": "AccessDenied", "errorMessage": "User: arn:aws:iam::811596193553:user/backup is not authorized to perform: config:DescribeConfigurationRecorders", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "6bce672b-6808-4cde-9065-2d67be486e6b", "record_id": "flaws_cloudtrail:0000542:6bce672b-6808-4cde-9065-2d67be486e6b", "row_index": 542, "timestamp": "2019-07-08T15:21:36Z", "event_type": "DescribeConfigRules", "event_source": "config.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "251.209.251.231", "user_agent": "Boto3/1.9.183 Python/3.6.8 Linux/3.10.0-957.21.3.el7.x86_64 Botocore/1.12.183", "aws_region": "ap-south-1"}, "resource_arns": [], "raw_record_size_bytes": 839, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "6bce672b-6808-4cde-9065-2d67be486e6b", "eventTime": "2019-07-08T15:21:36Z", "eventName": "DescribeConfigRules", "eventSource": "config.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "251.209.251.231", "userAgent": "Boto3/1.9.183 Python/3.6.8 Linux/3.10.0-957.21.3.el7.x86_64 Botocore/1.12.183", "awsRegion": "ap-south-1", "errorCode": "AccessDenied", "errorMessage": "User: arn:aws:iam::811596193553:user/backup is not authorized to perform: config:DescribeConfigRules", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "e23c5a00-91a4-42c8-8e54-7a05dd38fca5", "record_id": "flaws_cloudtrail:0000543:e23c5a00-91a4-42c8-8e54-7a05dd38fca5", "row_index": 543, "timestamp": "2019-07-08T15:21:36Z", "event_type": "DescribeConfigRules", "event_source": "config.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "251.209.251.231", "user_agent": "Boto3/1.9.183 Python/3.6.8 Linux/3.10.0-957.21.3.el7.x86_64 Botocore/1.12.183", "aws_region": "ca-central-1"}, "resource_arns": [], "raw_record_size_bytes": 841, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "e23c5a00-91a4-42c8-8e54-7a05dd38fca5", "eventTime": "2019-07-08T15:21:36Z", "eventName": "DescribeConfigRules", "eventSource": "config.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "251.209.251.231", "userAgent": "Boto3/1.9.183 Python/3.6.8 Linux/3.10.0-957.21.3.el7.x86_64 Botocore/1.12.183", "awsRegion": "ca-central-1", "errorCode": "AccessDenied", "errorMessage": "User: arn:aws:iam::811596193553:user/backup is not authorized to perform: config:DescribeConfigRules", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "a19d3e98-dfbe-4252-93d0-cade6c1a1b06", "record_id": "flaws_cloudtrail:0000544:a19d3e98-dfbe-4252-93d0-cade6c1a1b06", "row_index": 544, "timestamp": "2019-07-08T15:21:36Z", "event_type": "DescribeConfigurationRecorders", "event_source": "config.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "251.209.251.231", "user_agent": "Boto3/1.9.183 Python/3.6.8 Linux/3.10.0-957.21.3.el7.x86_64 Botocore/1.12.183", "aws_region": "ca-central-1"}, "resource_arns": [], "raw_record_size_bytes": 863, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "a19d3e98-dfbe-4252-93d0-cade6c1a1b06", "eventTime": "2019-07-08T15:21:36Z", "eventName": "DescribeConfigurationRecorders", "eventSource": "config.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "251.209.251.231", "userAgent": "Boto3/1.9.183 Python/3.6.8 Linux/3.10.0-957.21.3.el7.x86_64 Botocore/1.12.183", "awsRegion": "ca-central-1", "errorCode": "AccessDenied", "errorMessage": "User: arn:aws:iam::811596193553:user/backup is not authorized to perform: config:DescribeConfigurationRecorders", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "1a0ec042-2762-4935-9196-56f9d2d3d6e2", "record_id": "flaws_cloudtrail:0000545:1a0ec042-2762-4935-9196-56f9d2d3d6e2", "row_index": 545, "timestamp": "2019-07-08T15:21:36Z", "event_type": "DescribeConfigurationRecorders", "event_source": "config.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "251.209.251.231", "user_agent": "Boto3/1.9.183 Python/3.6.8 Linux/3.10.0-957.21.3.el7.x86_64 Botocore/1.12.183", "aws_region": "eu-central-1"}, "resource_arns": [], "raw_record_size_bytes": 863, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "1a0ec042-2762-4935-9196-56f9d2d3d6e2", "eventTime": "2019-07-08T15:21:36Z", "eventName": "DescribeConfigurationRecorders", "eventSource": "config.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "251.209.251.231", "userAgent": "Boto3/1.9.183 Python/3.6.8 Linux/3.10.0-957.21.3.el7.x86_64 Botocore/1.12.183", "awsRegion": "eu-central-1", "errorCode": "AccessDenied", "errorMessage": "User: arn:aws:iam::811596193553:user/backup is not authorized to perform: config:DescribeConfigurationRecorders", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "553289fef-7a24-4376-93b0-cffbffd286252", "record_id": "flaws_cloudtrail:0000546:553289fef-7a24-4376-93b0-cffbffd286252", "row_index": 546, "timestamp": "2019-07-08T15:21:36Z", "event_type": "DescribeConfigRules", "event_source": "config.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "251.209.251.231", "user_agent": "Boto3/1.9.183 Python/3.6.8 Linux/3.10.0-957.21.3.el7.x86_64 Botocore/1.12.183", "aws_region": "eu-central-1"}, "resource_arns": [], "raw_record_size_bytes": 843, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "553289fef-7a24-4376-93b0-cffbffd286252", "eventTime": "2019-07-08T15:21:36Z", "eventName": "DescribeConfigRules", "eventSource": "config.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "251.209.251.231", "userAgent": "Boto3/1.9.183 Python/3.6.8 Linux/3.10.0-957.21.3.el7.x86_64 Botocore/1.12.183", "awsRegion": "eu-central-1", "errorCode": "AccessDenied", "errorMessage": "User: arn:aws:iam::811596193553:user/backup is not authorized to perform: config:DescribeConfigRules", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "d837524-8d1c-45ea-9b29-ce715806e", "record_id": "flaws_cloudtrail:0000547:d837524-8d1c-45ea-9b29-ce715806e", "row_index": 547, "timestamp": "2019-07-08T15:21:36Z", "event_type": "DescribeConfigurationRecorders", "event_source": "config.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "251.209.251.231", "user_agent": "Boto3/1.9.183 Python/3.6.8 Linux/3.10.0-957.21.3.el7.x86_64 Botocore/1.12.183", "aws_region": "eu-west-1"}, "resource_arns": [], "raw_record_size_bytes": 856, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "d837524-8d1c-45ea-9b29-ce715806e", "eventTime": "2019-07-08T15:21:36Z", "eventName": "DescribeConfigurationRecorders", "eventSource": "config.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "251.209.251.231", "userAgent": "Boto3/1.9.183 Python/3.6.8 Linux/3.10.0-957.21.3.el7.x86_64 Botocore/1.12.183", "awsRegion": "eu-west-1", "errorCode": "AccessDenied", "errorMessage": "User: arn:aws:iam::811596193553:user/backup is not authorized to perform: config:DescribeConfigurationRecorders", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "2f101228-01b2-41f6-8d64-e6b913a562a6", "record_id": "flaws_cloudtrail:0000548:2f101228-01b2-41f6-8d64-e6b913a562a6", "row_index": 548, "timestamp": "2019-07-08T15:21:36Z", "event_type": "DescribeConfigRules", "event_source": "config.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "251.209.251.231", "user_agent": "Boto3/1.9.183 Python/3.6.8 Linux/3.10.0-957.21.3.el7.x86_64 Botocore/1.12.183", "aws_region": "eu-west-1"}, "resource_arns": [], "raw_record_size_bytes": 838, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "2f101228-01b2-41f6-8d64-e6b913a562a6", "eventTime": "2019-07-08T15:21:36Z", "eventName": "DescribeConfigRules", "eventSource": "config.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "251.209.251.231", "userAgent": "Boto3/1.9.183 Python/3.6.8 Linux/3.10.0-957.21.3.el7.x86_64 Botocore/1.12.183", "awsRegion": "eu-west-1", "errorCode": "AccessDenied", "errorMessage": "User: arn:aws:iam::811596193553:user/backup is not authorized to perform: config:DescribeConfigRules", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "8f1497cb-7b89-4895-a0e6-373af2411a9c", "record_id": "flaws_cloudtrail:0000549:8f1497cb-7b89-4895-a0e6-373af2411a9c", "row_index": 549, "timestamp": "2019-07-08T15:21:37Z", "event_type": "DescribeVpcs", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "251.209.251.231", "user_agent": "Boto3/1.9.183 Python/3.6.8 Linux/3.10.0-957.21.3.el7.x86_64 Botocore/1.12.183", "aws_region": "ap-northeast-1"}, "resource_arns": [], "raw_record_size_bytes": 710, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "8f1497cb-7b89-4895-a0e6-373af2411a9c", "eventTime": "2019-07-08T15:21:37Z", "eventName": "DescribeVpcs", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "251.209.251.231", "userAgent": "Boto3/1.9.183 Python/3.6.8 Linux/3.10.0-957.21.3.el7.x86_64 Botocore/1.12.183", "awsRegion": "ap-northeast-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"vpcSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "4c745ea5-d859-4ad0-b3f0-c96d503685b94", "record_id": "flaws_cloudtrail:0000550:4c745ea5-d859-4ad0-b3f0-c96d503685b94", "row_index": 550, "timestamp": "2019-07-08T15:21:37Z", "event_type": "DescribeVpcs", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "251.209.251.231", "user_agent": "Boto3/1.9.183 Python/3.6.8 Linux/3.10.0-957.21.3.el7.x86_64 Botocore/1.12.183", "aws_region": "ap-northeast-2"}, "resource_arns": [], "raw_record_size_bytes": 713, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "4c745ea5-d859-4ad0-b3f0-c96d503685b94", "eventTime": "2019-07-08T15:21:37Z", "eventName": "DescribeVpcs", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "251.209.251.231", "userAgent": "Boto3/1.9.183 Python/3.6.8 Linux/3.10.0-957.21.3.el7.x86_64 Botocore/1.12.183", "awsRegion": "ap-northeast-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"vpcSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "9b2dcb19-6629-479f-abd9-3d32cfe7090e", "record_id": "flaws_cloudtrail:0000551:9b2dcb19-6629-479f-abd9-3d32cfe7090e", "row_index": 551, "timestamp": "2019-07-08T15:21:37Z", "event_type": "DescribeVpcs", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "251.209.251.231", "user_agent": "Boto3/1.9.183 Python/3.6.8 Linux/3.10.0-957.21.3.el7.x86_64 Botocore/1.12.183", "aws_region": "ap-south-1"}, "resource_arns": [], "raw_record_size_bytes": 707, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "9b2dcb19-6629-479f-abd9-3d32cfe7090e", "eventTime": "2019-07-08T15:21:37Z", "eventName": "DescribeVpcs", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "251.209.251.231", "userAgent": "Boto3/1.9.183 Python/3.6.8 Linux/3.10.0-957.21.3.el7.x86_64 Botocore/1.12.183", "awsRegion": "ap-south-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"vpcSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "6b6d0575-add0-47ba-8fd9-8e034528da185", "record_id": "flaws_cloudtrail:0000552:6b6d0575-add0-47ba-8fd9-8e034528da185", "row_index": 552, "timestamp": "2019-07-08T15:21:37Z", "event_type": "DescribeConfigurationRecorders", "event_source": "config.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "251.209.251.231", "user_agent": "Boto3/1.9.183 Python/3.6.8 Linux/3.10.0-957.21.3.el7.x86_64 Botocore/1.12.183", "aws_region": "ap-southeast-1"}, "resource_arns": [], "raw_record_size_bytes": 866, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "6b6d0575-add0-47ba-8fd9-8e034528da185", "eventTime": "2019-07-08T15:21:37Z", "eventName": "DescribeConfigurationRecorders", "eventSource": "config.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "251.209.251.231", "userAgent": "Boto3/1.9.183 Python/3.6.8 Linux/3.10.0-957.21.3.el7.x86_64 Botocore/1.12.183", "awsRegion": "ap-southeast-1", "errorCode": "AccessDenied", "errorMessage": "User: arn:aws:iam::811596193553:user/backup is not authorized to perform: config:DescribeConfigurationRecorders", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "a6c283bf-d002-418e-81dc-00a6d6b4c1df", "record_id": "flaws_cloudtrail:0000553:a6c283bf-d002-418e-81dc-00a6d6b4c1df", "row_index": 553, "timestamp": "2019-07-08T15:21:37Z", "event_type": "DescribeConfigRules", "event_source": "config.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "251.209.251.231", "user_agent": "Boto3/1.9.183 Python/3.6.8 Linux/3.10.0-957.21.3.el7.x86_64 Botocore/1.12.183", "aws_region": "ap-southeast-1"}, "resource_arns": [], "raw_record_size_bytes": 841, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "a6c283bf-d002-418e-81dc-00a6d6b4c1df", "eventTime": "2019-07-08T15:21:37Z", "eventName": "DescribeConfigRules", "eventSource": "config.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "251.209.251.231", "userAgent": "Boto3/1.9.183 Python/3.6.8 Linux/3.10.0-957.21.3.el7.x86_64 Botocore/1.12.183", "awsRegion": "ap-southeast-1", "errorCode": "AccessDenied", "errorMessage": "User: arn:aws:iam::811596193553:user/backup is not authorized to perform: config:DescribeConfigRules", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "f598331a3-5448-4b35-8bd5-c492fec42d11", "record_id": "flaws_cloudtrail:0000554:f598331a3-5448-4b35-8bd5-c492fec42d11", "row_index": 554, "timestamp": "2019-07-08T15:21:37Z", "event_type": "DescribeConfigRules", "event_source": "config.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "251.209.251.231", "user_agent": "Boto3/1.9.183 Python/3.6.8 Linux/3.10.0-957.21.3.el7.x86_64 Botocore/1.12.183", "aws_region": "ap-southeast-2"}, "resource_arns": [], "raw_record_size_bytes": 844, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "f598331a3-5448-4b35-8bd5-c492fec42d11", "eventTime": "2019-07-08T15:21:37Z", "eventName": "DescribeConfigRules", "eventSource": "config.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "251.209.251.231", "userAgent": "Boto3/1.9.183 Python/3.6.8 Linux/3.10.0-957.21.3.el7.x86_64 Botocore/1.12.183", "awsRegion": "ap-southeast-2", "errorCode": "AccessDenied", "errorMessage": "User: arn:aws:iam::811596193553:user/backup is not authorized to perform: config:DescribeConfigRules", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "43d8c760-3e96-4be1-ba0a-e0c664848e9a", "record_id": "flaws_cloudtrail:0000555:43d8c760-3e96-4be1-ba0a-e0c664848e9a", "row_index": 555, "timestamp": "2019-07-08T15:21:37Z", "event_type": "DescribeConfigurationRecorders", "event_source": "config.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "251.209.251.231", "user_agent": "Boto3/1.9.183 Python/3.6.8 Linux/3.10.0-957.21.3.el7.x86_64 Botocore/1.12.183", "aws_region": "ap-southeast-2"}, "resource_arns": [], "raw_record_size_bytes": 865, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "43d8c760-3e96-4be1-ba0a-e0c664848e9a", "eventTime": "2019-07-08T15:21:37Z", "eventName": "DescribeConfigurationRecorders", "eventSource": "config.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "251.209.251.231", "userAgent": "Boto3/1.9.183 Python/3.6.8 Linux/3.10.0-957.21.3.el7.x86_64 Botocore/1.12.183", "awsRegion": "ap-southeast-2", "errorCode": "AccessDenied", "errorMessage": "User: arn:aws:iam::811596193553:user/backup is not authorized to perform: config:DescribeConfigurationRecorders", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "5d0a7240-0934-4bf9-b98a-fe42fc91b367", "record_id": "flaws_cloudtrail:0000556:5d0a7240-0934-4bf9-b98a-fe42fc91b367", "row_index": 556, "timestamp": "2019-07-08T15:21:37Z", "event_type": "DescribeConfigRules", "event_source": "config.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "251.209.251.231", "user_agent": "Boto3/1.9.183 Python/3.6.8 Linux/3.10.0-957.21.3.el7.x86_64 Botocore/1.12.183", "aws_region": "eu-north-1"}, "resource_arns": [], "raw_record_size_bytes": 839, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "5d0a7240-0934-4bf9-b98a-fe42fc91b367", "eventTime": "2019-07-08T15:21:37Z", "eventName": "DescribeConfigRules", "eventSource": "config.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "251.209.251.231", "userAgent": "Boto3/1.9.183 Python/3.6.8 Linux/3.10.0-957.21.3.el7.x86_64 Botocore/1.12.183", "awsRegion": "eu-north-1", "errorCode": "AccessDenied", "errorMessage": "User: arn:aws:iam::811596193553:user/backup is not authorized to perform: config:DescribeConfigRules", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "d1225c30-0a28-4696-8c76-cc9d98a9df59", "record_id": "flaws_cloudtrail:0000557:d1225c30-0a28-4696-8c76-cc9d98a9df59", "row_index": 557, "timestamp": "2019-07-08T15:21:37Z", "event_type": "DescribeConfigurationRecorders", "event_source": "config.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "251.209.251.231", "user_agent": "Boto3/1.9.183 Python/3.6.8 Linux/3.10.0-957.21.3.el7.x86_64 Botocore/1.12.183", "aws_region": "eu-north-1"}, "resource_arns": [], "raw_record_size_bytes": 861, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "d1225c30-0a28-4696-8c76-cc9d98a9df59", "eventTime": "2019-07-08T15:21:37Z", "eventName": "DescribeConfigurationRecorders", "eventSource": "config.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "251.209.251.231", "userAgent": "Boto3/1.9.183 Python/3.6.8 Linux/3.10.0-957.21.3.el7.x86_64 Botocore/1.12.183", "awsRegion": "eu-north-1", "errorCode": "AccessDenied", "errorMessage": "User: arn:aws:iam::811596193553:user/backup is not authorized to perform: config:DescribeConfigurationRecorders", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "b51022db-e92e-442b-acc5-928f9a9763a8", "record_id": "flaws_cloudtrail:0000558:b51022db-e92e-442b-acc5-928f9a9763a8", "row_index": 558, "timestamp": "2019-07-08T15:21:37Z", "event_type": "DescribeConfigurationRecorders", "event_source": "config.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "251.209.251.231", "user_agent": "Boto3/1.9.183 Python/3.6.8 Linux/3.10.0-957.21.3.el7.x86_64 Botocore/1.12.183", "aws_region": "eu-west-2"}, "resource_arns": [], "raw_record_size_bytes": 860, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "b51022db-e92e-442b-acc5-928f9a9763a8", "eventTime": "2019-07-08T15:21:37Z", "eventName": "DescribeConfigurationRecorders", "eventSource": "config.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "251.209.251.231", "userAgent": "Boto3/1.9.183 Python/3.6.8 Linux/3.10.0-957.21.3.el7.x86_64 Botocore/1.12.183", "awsRegion": "eu-west-2", "errorCode": "AccessDenied", "errorMessage": "User: arn:aws:iam::811596193553:user/backup is not authorized to perform: config:DescribeConfigurationRecorders", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "0a5ee8d3-fe9f-494e-9d8c-8f12627d1d6e", "record_id": "flaws_cloudtrail:0000559:0a5ee8d3-fe9f-494e-9d8c-8f12627d1d6e", "row_index": 559, "timestamp": "2019-07-08T15:21:37Z", "event_type": "DescribeConfigRules", "event_source": "config.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "251.209.251.231", "user_agent": "Boto3/1.9.183 Python/3.6.8 Linux/3.10.0-957.21.3.el7.x86_64 Botocore/1.12.183", "aws_region": "eu-west-2"}, "resource_arns": [], "raw_record_size_bytes": 838, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "0a5ee8d3-fe9f-494e-9d8c-8f12627d1d6e", "eventTime": "2019-07-08T15:21:37Z", "eventName": "DescribeConfigRules", "eventSource": "config.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "251.209.251.231", "userAgent": "Boto3/1.9.183 Python/3.6.8 Linux/3.10.0-957.21.3.el7.x86_64 Botocore/1.12.183", "awsRegion": "eu-west-2", "errorCode": "AccessDenied", "errorMessage": "User: arn:aws:iam::811596193553:user/backup is not authorized to perform: config:DescribeConfigRules", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "66fa71a6-7f73-4aa4-87b4-32911ece4f1a", "record_id": "flaws_cloudtrail:0000560:66fa71a6-7f73-4aa4-87b4-32911ece4f1a", "row_index": 560, "timestamp": "2019-07-08T15:21:37Z", "event_type": "DescribeConfigurationRecorders", "event_source": "config.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "251.209.251.231", "user_agent": "Boto3/1.9.183 Python/3.6.8 Linux/3.10.0-957.21.3.el7.x86_64 Botocore/1.12.183", "aws_region": "eu-west-3"}, "resource_arns": [], "raw_record_size_bytes": 860, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "66fa71a6-7f73-4aa4-87b4-32911ece4f1a", "eventTime": "2019-07-08T15:21:37Z", "eventName": "DescribeConfigurationRecorders", "eventSource": "config.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "251.209.251.231", "userAgent": "Boto3/1.9.183 Python/3.6.8 Linux/3.10.0-957.21.3.el7.x86_64 Botocore/1.12.183", "awsRegion": "eu-west-3", "errorCode": "AccessDenied", "errorMessage": "User: arn:aws:iam::811596193553:user/backup is not authorized to perform: config:DescribeConfigurationRecorders", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "be0a5957-3246-42e8-995a-d0118f1124b7", "record_id": "flaws_cloudtrail:0000561:be0a5957-3246-42e8-995a-d0118f1124b7", "row_index": 561, "timestamp": "2019-07-08T15:21:37Z", "event_type": "DescribeConfigRules", "event_source": "config.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "251.209.251.231", "user_agent": "Boto3/1.9.183 Python/3.6.8 Linux/3.10.0-957.21.3.el7.x86_64 Botocore/1.12.183", "aws_region": "eu-west-3"}, "resource_arns": [], "raw_record_size_bytes": 838, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "be0a5957-3246-42e8-995a-d0118f1124b7", "eventTime": "2019-07-08T15:21:37Z", "eventName": "DescribeConfigRules", "eventSource": "config.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "251.209.251.231", "userAgent": "Boto3/1.9.183 Python/3.6.8 Linux/3.10.0-957.21.3.el7.x86_64 Botocore/1.12.183", "awsRegion": "eu-west-3", "errorCode": "AccessDenied", "errorMessage": "User: arn:aws:iam::811596193553:user/backup is not authorized to perform: config:DescribeConfigRules", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "003182a1-809f-47bf-a90c-31d63bdca8de", "record_id": "flaws_cloudtrail:0000562:003182a1-809f-47bf-a90c-31d63bdca8de", "row_index": 562, "timestamp": "2019-07-08T15:21:37Z", "event_type": "DescribeConfigurationRecorders", "event_source": "config.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "251.209.251.231", "user_agent": "Boto3/1.9.183 Python/3.6.8 Linux/3.10.0-957.21.3.el7.x86_64 Botocore/1.12.183", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 860, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "003182a1-809f-47bf-a90c-31d63bdca8de", "eventTime": "2019-07-08T15:21:37Z", "eventName": "DescribeConfigurationRecorders", "eventSource": "config.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "251.209.251.231", "userAgent": "Boto3/1.9.183 Python/3.6.8 Linux/3.10.0-957.21.3.el7.x86_64 Botocore/1.12.183", "awsRegion": "us-east-1", "errorCode": "AccessDenied", "errorMessage": "User: arn:aws:iam::811596193553:user/backup is not authorized to perform: config:DescribeConfigurationRecorders", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "6f607ca4-67f4-490e-901b-5a0c014a6a1f", "record_id": "flaws_cloudtrail:0000563:6f607ca4-67f4-490e-901b-5a0c014a6a1f", "row_index": 563, "timestamp": "2019-07-08T15:21:37Z", "event_type": "DescribeConfigRules", "event_source": "config.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "251.209.251.231", "user_agent": "Boto3/1.9.183 Python/3.6.8 Linux/3.10.0-957.21.3.el7.x86_64 Botocore/1.12.183", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 838, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "6f607ca4-67f4-490e-901b-5a0c014a6a1f", "eventTime": "2019-07-08T15:21:37Z", "eventName": "DescribeConfigRules", "eventSource": "config.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "251.209.251.231", "userAgent": "Boto3/1.9.183 Python/3.6.8 Linux/3.10.0-957.21.3.el7.x86_64 Botocore/1.12.183", "awsRegion": "us-east-1", "errorCode": "AccessDenied", "errorMessage": "User: arn:aws:iam::811596193553:user/backup is not authorized to perform: config:DescribeConfigRules", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "b6ef7b53-211e-473e-bf9d-b4167211d2f9", "record_id": "flaws_cloudtrail:0000564:b6ef7b53-211e-473e-bf9d-b4167211d2f9", "row_index": 564, "timestamp": "2019-07-08T15:21:37Z", "event_type": "DescribeConfigurationRecorders", "event_source": "config.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "251.209.251.231", "user_agent": "Boto3/1.9.183 Python/3.6.8 Linux/3.10.0-957.21.3.el7.x86_64 Botocore/1.12.183", "aws_region": "us-east-2"}, "resource_arns": [], "raw_record_size_bytes": 860, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "b6ef7b53-211e-473e-bf9d-b4167211d2f9", "eventTime": "2019-07-08T15:21:37Z", "eventName": "DescribeConfigurationRecorders", "eventSource": "config.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "251.209.251.231", "userAgent": "Boto3/1.9.183 Python/3.6.8 Linux/3.10.0-957.21.3.el7.x86_64 Botocore/1.12.183", "awsRegion": "us-east-2", "errorCode": "AccessDenied", "errorMessage": "User: arn:aws:iam::811596193553:user/backup is not authorized to perform: config:DescribeConfigurationRecorders", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "b0fcdb23-f752-4c75-965e-b177543c85ed", "record_id": "flaws_cloudtrail:0000565:b0fcdb23-f752-4c75-965e-b177543c85ed", "row_index": 565, "timestamp": "2019-07-08T15:21:37Z", "event_type": "DescribeConfigRules", "event_source": "config.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "251.209.251.231", "user_agent": "Boto3/1.9.183 Python/3.6.8 Linux/3.10.0-957.21.3.el7.x86_64 Botocore/1.12.183", "aws_region": "us-east-2"}, "resource_arns": [], "raw_record_size_bytes": 838, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "b0fcdb23-f752-4c75-965e-b177543c85ed", "eventTime": "2019-07-08T15:21:37Z", "eventName": "DescribeConfigRules", "eventSource": "config.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "251.209.251.231", "userAgent": "Boto3/1.9.183 Python/3.6.8 Linux/3.10.0-957.21.3.el7.x86_64 Botocore/1.12.183", "awsRegion": "us-east-2", "errorCode": "AccessDenied", "errorMessage": "User: arn:aws:iam::811596193553:user/backup is not authorized to perform: config:DescribeConfigRules", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "d96bb1e7-deeb-493a-93ed-77e13a67dc48", "record_id": "flaws_cloudtrail:0000566:d96bb1e7-deeb-493a-93ed-77e13a67dc48", "row_index": 566, "timestamp": "2019-07-08T15:21:37Z", "event_type": "DescribeConfigurationRecorders", "event_source": "config.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "251.209.251.231", "user_agent": "Boto3/1.9.183 Python/3.6.8 Linux/3.10.0-957.21.3.el7.x86_64 Botocore/1.12.183", "aws_region": "us-west-1"}, "resource_arns": [], "raw_record_size_bytes": 860, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "d96bb1e7-deeb-493a-93ed-77e13a67dc48", "eventTime": "2019-07-08T15:21:37Z", "eventName": "DescribeConfigurationRecorders", "eventSource": "config.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "251.209.251.231", "userAgent": "Boto3/1.9.183 Python/3.6.8 Linux/3.10.0-957.21.3.el7.x86_64 Botocore/1.12.183", "awsRegion": "us-west-1", "errorCode": "AccessDenied", "errorMessage": "User: arn:aws:iam::811596193553:user/backup is not authorized to perform: config:DescribeConfigurationRecorders", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "2edbb620-8537-4c4b-bf33-88235d", "record_id": "flaws_cloudtrail:0000567:2edbb620-8537-4c4b-bf33-88235d", "row_index": 567, "timestamp": "2019-07-08T15:21:37Z", "event_type": "DescribeConfigRules", "event_source": "config.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "251.209.251.231", "user_agent": "Boto3/1.9.183 Python/3.6.8 Linux/3.10.0-957.21.3.el7.x86_64 Botocore/1.12.183", "aws_region": "us-west-1"}, "resource_arns": [], "raw_record_size_bytes": 833, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "2edbb620-8537-4c4b-bf33-88235d", "eventTime": "2019-07-08T15:21:37Z", "eventName": "DescribeConfigRules", "eventSource": "config.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "251.209.251.231", "userAgent": "Boto3/1.9.183 Python/3.6.8 Linux/3.10.0-957.21.3.el7.x86_64 Botocore/1.12.183", "awsRegion": "us-west-1", "errorCode": "AccessDenied", "errorMessage": "User: arn:aws:iam::811596193553:user/backup is not authorized to perform: config:DescribeConfigRules", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "8f1497cb-7b89-4895-a0e6-373af2411a9c", "record_id": "flaws_cloudtrail:0000568:8f1497cb-7b89-4895-a0e6-373af2411a9c", "row_index": 568, "timestamp": "2019-07-08T15:21:37Z", "event_type": "DescribeVpcs", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "251.209.251.231", "user_agent": "Boto3/1.9.183 Python/3.6.8 Linux/3.10.0-957.21.3.el7.x86_64 Botocore/1.12.183", "aws_region": "ap-northeast-1"}, "resource_arns": [], "raw_record_size_bytes": 710, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "8f1497cb-7b89-4895-a0e6-373af2411a9c", "eventTime": "2019-07-08T15:21:37Z", "eventName": "DescribeVpcs", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "251.209.251.231", "userAgent": "Boto3/1.9.183 Python/3.6.8 Linux/3.10.0-957.21.3.el7.x86_64 Botocore/1.12.183", "awsRegion": "ap-northeast-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"vpcSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "4c745ea5-d859-4ad0-b3f0-c96d503685b94", "record_id": "flaws_cloudtrail:0000569:4c745ea5-d859-4ad0-b3f0-c96d503685b94", "row_index": 569, "timestamp": "2019-07-08T15:21:37Z", "event_type": "DescribeVpcs", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "251.209.251.231", "user_agent": "Boto3/1.9.183 Python/3.6.8 Linux/3.10.0-957.21.3.el7.x86_64 Botocore/1.12.183", "aws_region": "ap-northeast-2"}, "resource_arns": [], "raw_record_size_bytes": 713, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "4c745ea5-d859-4ad0-b3f0-c96d503685b94", "eventTime": "2019-07-08T15:21:37Z", "eventName": "DescribeVpcs", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "251.209.251.231", "userAgent": "Boto3/1.9.183 Python/3.6.8 Linux/3.10.0-957.21.3.el7.x86_64 Botocore/1.12.183", "awsRegion": "ap-northeast-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"vpcSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "9b2dcb19-6629-479f-abd9-3d32cfe7090e", "record_id": "flaws_cloudtrail:0000570:9b2dcb19-6629-479f-abd9-3d32cfe7090e", "row_index": 570, "timestamp": "2019-07-08T15:21:37Z", "event_type": "DescribeVpcs", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "251.209.251.231", "user_agent": "Boto3/1.9.183 Python/3.6.8 Linux/3.10.0-957.21.3.el7.x86_64 Botocore/1.12.183", "aws_region": "ap-south-1"}, "resource_arns": [], "raw_record_size_bytes": 707, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "9b2dcb19-6629-479f-abd9-3d32cfe7090e", "eventTime": "2019-07-08T15:21:37Z", "eventName": "DescribeVpcs", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "251.209.251.231", "userAgent": "Boto3/1.9.183 Python/3.6.8 Linux/3.10.0-957.21.3.el7.x86_64 Botocore/1.12.183", "awsRegion": "ap-south-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"vpcSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "6b6d0575-add0-47ba-8fd9-8e034528da185", "record_id": "flaws_cloudtrail:0000571:6b6d0575-add0-47ba-8fd9-8e034528da185", "row_index": 571, "timestamp": "2019-07-08T15:21:37Z", "event_type": "DescribeConfigurationRecorders", "event_source": "config.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "251.209.251.231", "user_agent": "Boto3/1.9.183 Python/3.6.8 Linux/3.10.0-957.21.3.el7.x86_64 Botocore/1.12.183", "aws_region": "ap-southeast-1"}, "resource_arns": [], "raw_record_size_bytes": 866, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "6b6d0575-add0-47ba-8fd9-8e034528da185", "eventTime": "2019-07-08T15:21:37Z", "eventName": "DescribeConfigurationRecorders", "eventSource": "config.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "251.209.251.231", "userAgent": "Boto3/1.9.183 Python/3.6.8 Linux/3.10.0-957.21.3.el7.x86_64 Botocore/1.12.183", "awsRegion": "ap-southeast-1", "errorCode": "AccessDenied", "errorMessage": "User: arn:aws:iam::811596193553:user/backup is not authorized to perform: config:DescribeConfigurationRecorders", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "a6c283bf-d002-418e-81dc-00a6d6b4c1df", "record_id": "flaws_cloudtrail:0000572:a6c283bf-d002-418e-81dc-00a6d6b4c1df", "row_index": 572, "timestamp": "2019-07-08T15:21:37Z", "event_type": "DescribeConfigRules", "event_source": "config.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "251.209.251.231", "user_agent": "Boto3/1.9.183 Python/3.6.8 Linux/3.10.0-957.21.3.el7.x86_64 Botocore/1.12.183", "aws_region": "ap-southeast-1"}, "resource_arns": [], "raw_record_size_bytes": 841, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "a6c283bf-d002-418e-81dc-00a6d6b4c1df", "eventTime": "2019-07-08T15:21:37Z", "eventName": "DescribeConfigRules", "eventSource": "config.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "251.209.251.231", "userAgent": "Boto3/1.9.183 Python/3.6.8 Linux/3.10.0-957.21.3.el7.x86_64 Botocore/1.12.183", "awsRegion": "ap-southeast-1", "errorCode": "AccessDenied", "errorMessage": "User: arn:aws:iam::811596193553:user/backup is not authorized to perform: config:DescribeConfigRules", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "f598331a3-5448-4b35-8bd5-c492fec42d11", "record_id": "flaws_cloudtrail:0000573:f598331a3-5448-4b35-8bd5-c492fec42d11", "row_index": 573, "timestamp": "2019-07-08T15:21:37Z", "event_type": "DescribeConfigRules", "event_source": "config.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "251.209.251.231", "user_agent": "Boto3/1.9.183 Python/3.6.8 Linux/3.10.0-957.21.3.el7.x86_64 Botocore/1.12.183", "aws_region": "ap-southeast-2"}, "resource_arns": [], "raw_record_size_bytes": 844, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "f598331a3-5448-4b35-8bd5-c492fec42d11", "eventTime": "2019-07-08T15:21:37Z", "eventName": "DescribeConfigRules", "eventSource": "config.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "251.209.251.231", "userAgent": "Boto3/1.9.183 Python/3.6.8 Linux/3.10.0-957.21.3.el7.x86_64 Botocore/1.12.183", "awsRegion": "ap-southeast-2", "errorCode": "AccessDenied", "errorMessage": "User: arn:aws:iam::811596193553:user/backup is not authorized to perform: config:DescribeConfigRules", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "43d8c760-3e96-4be1-ba0a-e0c664848e9a", "record_id": "flaws_cloudtrail:0000574:43d8c760-3e96-4be1-ba0a-e0c664848e9a", "row_index": 574, "timestamp": "2019-07-08T15:21:37Z", "event_type": "DescribeConfigurationRecorders", "event_source": "config.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "251.209.251.231", "user_agent": "Boto3/1.9.183 Python/3.6.8 Linux/3.10.0-957.21.3.el7.x86_64 Botocore/1.12.183", "aws_region": "ap-southeast-2"}, "resource_arns": [], "raw_record_size_bytes": 865, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "43d8c760-3e96-4be1-ba0a-e0c664848e9a", "eventTime": "2019-07-08T15:21:37Z", "eventName": "DescribeConfigurationRecorders", "eventSource": "config.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "251.209.251.231", "userAgent": "Boto3/1.9.183 Python/3.6.8 Linux/3.10.0-957.21.3.el7.x86_64 Botocore/1.12.183", "awsRegion": "ap-southeast-2", "errorCode": "AccessDenied", "errorMessage": "User: arn:aws:iam::811596193553:user/backup is not authorized to perform: config:DescribeConfigurationRecorders", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "5d0a7240-0934-4bf9-b98a-fe42fc91b367", "record_id": "flaws_cloudtrail:0000575:5d0a7240-0934-4bf9-b98a-fe42fc91b367", "row_index": 575, "timestamp": "2019-07-08T15:21:37Z", "event_type": "DescribeConfigRules", "event_source": "config.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "251.209.251.231", "user_agent": "Boto3/1.9.183 Python/3.6.8 Linux/3.10.0-957.21.3.el7.x86_64 Botocore/1.12.183", "aws_region": "eu-north-1"}, "resource_arns": [], "raw_record_size_bytes": 839, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "5d0a7240-0934-4bf9-b98a-fe42fc91b367", "eventTime": "2019-07-08T15:21:37Z", "eventName": "DescribeConfigRules", "eventSource": "config.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "251.209.251.231", "userAgent": "Boto3/1.9.183 Python/3.6.8 Linux/3.10.0-957.21.3.el7.x86_64 Botocore/1.12.183", "awsRegion": "eu-north-1", "errorCode": "AccessDenied", "errorMessage": "User: arn:aws:iam::811596193553:user/backup is not authorized to perform: config:DescribeConfigRules", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "d1225c30-0a28-4696-8c76-cc9d98a9df59", "record_id": "flaws_cloudtrail:0000576:d1225c30-0a28-4696-8c76-cc9d98a9df59", "row_index": 576, "timestamp": "2019-07-08T15:21:37Z", "event_type": "DescribeConfigurationRecorders", "event_source": "config.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "251.209.251.231", "user_agent": "Boto3/1.9.183 Python/3.6.8 Linux/3.10.0-957.21.3.el7.x86_64 Botocore/1.12.183", "aws_region": "eu-north-1"}, "resource_arns": [], "raw_record_size_bytes": 861, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "d1225c30-0a28-4696-8c76-cc9d98a9df59", "eventTime": "2019-07-08T15:21:37Z", "eventName": "DescribeConfigurationRecorders", "eventSource": "config.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "251.209.251.231", "userAgent": "Boto3/1.9.183 Python/3.6.8 Linux/3.10.0-957.21.3.el7.x86_64 Botocore/1.12.183", "awsRegion": "eu-north-1", "errorCode": "AccessDenied", "errorMessage": "User: arn:aws:iam::811596193553:user/backup is not authorized to perform: config:DescribeConfigurationRecorders", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "b51022db-e92e-442b-acc5-928f9a9763a8", "record_id": "flaws_cloudtrail:0000577:b51022db-e92e-442b-acc5-928f9a9763a8", "row_index": 577, "timestamp": "2019-07-08T15:21:37Z", "event_type": "DescribeConfigurationRecorders", "event_source": "config.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "251.209.251.231", "user_agent": "Boto3/1.9.183 Python/3.6.8 Linux/3.10.0-957.21.3.el7.x86_64 Botocore/1.12.183", "aws_region": "eu-west-2"}, "resource_arns": [], "raw_record_size_bytes": 860, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "b51022db-e92e-442b-acc5-928f9a9763a8", "eventTime": "2019-07-08T15:21:37Z", "eventName": "DescribeConfigurationRecorders", "eventSource": "config.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "251.209.251.231", "userAgent": "Boto3/1.9.183 Python/3.6.8 Linux/3.10.0-957.21.3.el7.x86_64 Botocore/1.12.183", "awsRegion": "eu-west-2", "errorCode": "AccessDenied", "errorMessage": "User: arn:aws:iam::811596193553:user/backup is not authorized to perform: config:DescribeConfigurationRecorders", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "0a5ee8d3-fe9f-494e-9d8c-8f12627d1d6e", "record_id": "flaws_cloudtrail:0000578:0a5ee8d3-fe9f-494e-9d8c-8f12627d1d6e", "row_index": 578, "timestamp": "2019-07-08T15:21:37Z", "event_type": "DescribeConfigRules", "event_source": "config.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "251.209.251.231", "user_agent": "Boto3/1.9.183 Python/3.6.8 Linux/3.10.0-957.21.3.el7.x86_64 Botocore/1.12.183", "aws_region": "eu-west-2"}, "resource_arns": [], "raw_record_size_bytes": 838, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "0a5ee8d3-fe9f-494e-9d8c-8f12627d1d6e", "eventTime": "2019-07-08T15:21:37Z", "eventName": "DescribeConfigRules", "eventSource": "config.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "251.209.251.231", "userAgent": "Boto3/1.9.183 Python/3.6.8 Linux/3.10.0-957.21.3.el7.x86_64 Botocore/1.12.183", "awsRegion": "eu-west-2", "errorCode": "AccessDenied", "errorMessage": "User: arn:aws:iam::811596193553:user/backup is not authorized to perform: config:DescribeConfigRules", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "66fa71a6-7f73-4aa4-87b4-32911ece4f1a", "record_id": "flaws_cloudtrail:0000579:66fa71a6-7f73-4aa4-87b4-32911ece4f1a", "row_index": 579, "timestamp": "2019-07-08T15:21:37Z", "event_type": "DescribeConfigurationRecorders", "event_source": "config.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "251.209.251.231", "user_agent": "Boto3/1.9.183 Python/3.6.8 Linux/3.10.0-957.21.3.el7.x86_64 Botocore/1.12.183", "aws_region": "eu-west-3"}, "resource_arns": [], "raw_record_size_bytes": 860, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "66fa71a6-7f73-4aa4-87b4-32911ece4f1a", "eventTime": "2019-07-08T15:21:37Z", "eventName": "DescribeConfigurationRecorders", "eventSource": "config.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "251.209.251.231", "userAgent": "Boto3/1.9.183 Python/3.6.8 Linux/3.10.0-957.21.3.el7.x86_64 Botocore/1.12.183", "awsRegion": "eu-west-3", "errorCode": "AccessDenied", "errorMessage": "User: arn:aws:iam::811596193553:user/backup is not authorized to perform: config:DescribeConfigurationRecorders", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "be0a5957-3246-42e8-995a-d0118f1124b7", "record_id": "flaws_cloudtrail:0000580:be0a5957-3246-42e8-995a-d0118f1124b7", "row_index": 580, "timestamp": "2019-07-08T15:21:37Z", "event_type": "DescribeConfigRules", "event_source": "config.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "251.209.251.231", "user_agent": "Boto3/1.9.183 Python/3.6.8 Linux/3.10.0-957.21.3.el7.x86_64 Botocore/1.12.183", "aws_region": "eu-west-3"}, "resource_arns": [], "raw_record_size_bytes": 838, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "be0a5957-3246-42e8-995a-d0118f1124b7", "eventTime": "2019-07-08T15:21:37Z", "eventName": "DescribeConfigRules", "eventSource": "config.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "251.209.251.231", "userAgent": "Boto3/1.9.183 Python/3.6.8 Linux/3.10.0-957.21.3.el7.x86_64 Botocore/1.12.183", "awsRegion": "eu-west-3", "errorCode": "AccessDenied", "errorMessage": "User: arn:aws:iam::811596193553:user/backup is not authorized to perform: config:DescribeConfigRules", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "003182a1-809f-47bf-a90c-31d63bdca8de", "record_id": "flaws_cloudtrail:0000581:003182a1-809f-47bf-a90c-31d63bdca8de", "row_index": 581, "timestamp": "2019-07-08T15:21:37Z", "event_type": "DescribeConfigurationRecorders", "event_source": "config.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "251.209.251.231", "user_agent": "Boto3/1.9.183 Python/3.6.8 Linux/3.10.0-957.21.3.el7.x86_64 Botocore/1.12.183", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 860, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "003182a1-809f-47bf-a90c-31d63bdca8de", "eventTime": "2019-07-08T15:21:37Z", "eventName": "DescribeConfigurationRecorders", "eventSource": "config.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "251.209.251.231", "userAgent": "Boto3/1.9.183 Python/3.6.8 Linux/3.10.0-957.21.3.el7.x86_64 Botocore/1.12.183", "awsRegion": "us-east-1", "errorCode": "AccessDenied", "errorMessage": "User: arn:aws:iam::811596193553:user/backup is not authorized to perform: config:DescribeConfigurationRecorders", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "6f607ca4-67f4-490e-901b-5a0c014a6a1f", "record_id": "flaws_cloudtrail:0000582:6f607ca4-67f4-490e-901b-5a0c014a6a1f", "row_index": 582, "timestamp": "2019-07-08T15:21:37Z", "event_type": "DescribeConfigRules", "event_source": "config.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "251.209.251.231", "user_agent": "Boto3/1.9.183 Python/3.6.8 Linux/3.10.0-957.21.3.el7.x86_64 Botocore/1.12.183", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 838, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "6f607ca4-67f4-490e-901b-5a0c014a6a1f", "eventTime": "2019-07-08T15:21:37Z", "eventName": "DescribeConfigRules", "eventSource": "config.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "251.209.251.231", "userAgent": "Boto3/1.9.183 Python/3.6.8 Linux/3.10.0-957.21.3.el7.x86_64 Botocore/1.12.183", "awsRegion": "us-east-1", "errorCode": "AccessDenied", "errorMessage": "User: arn:aws:iam::811596193553:user/backup is not authorized to perform: config:DescribeConfigRules", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "b6ef7b53-211e-473e-bf9d-b4167211d2f9", "record_id": "flaws_cloudtrail:0000583:b6ef7b53-211e-473e-bf9d-b4167211d2f9", "row_index": 583, "timestamp": "2019-07-08T15:21:37Z", "event_type": "DescribeConfigurationRecorders", "event_source": "config.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "251.209.251.231", "user_agent": "Boto3/1.9.183 Python/3.6.8 Linux/3.10.0-957.21.3.el7.x86_64 Botocore/1.12.183", "aws_region": "us-east-2"}, "resource_arns": [], "raw_record_size_bytes": 860, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "b6ef7b53-211e-473e-bf9d-b4167211d2f9", "eventTime": "2019-07-08T15:21:37Z", "eventName": "DescribeConfigurationRecorders", "eventSource": "config.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "251.209.251.231", "userAgent": "Boto3/1.9.183 Python/3.6.8 Linux/3.10.0-957.21.3.el7.x86_64 Botocore/1.12.183", "awsRegion": "us-east-2", "errorCode": "AccessDenied", "errorMessage": "User: arn:aws:iam::811596193553:user/backup is not authorized to perform: config:DescribeConfigurationRecorders", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "b0fcdb23-f752-4c75-965e-b177543c85ed", "record_id": "flaws_cloudtrail:0000584:b0fcdb23-f752-4c75-965e-b177543c85ed", "row_index": 584, "timestamp": "2019-07-08T15:21:37Z", "event_type": "DescribeConfigRules", "event_source": "config.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "251.209.251.231", "user_agent": "Boto3/1.9.183 Python/3.6.8 Linux/3.10.0-957.21.3.el7.x86_64 Botocore/1.12.183", "aws_region": "us-east-2"}, "resource_arns": [], "raw_record_size_bytes": 838, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "b0fcdb23-f752-4c75-965e-b177543c85ed", "eventTime": "2019-07-08T15:21:37Z", "eventName": "DescribeConfigRules", "eventSource": "config.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "251.209.251.231", "userAgent": "Boto3/1.9.183 Python/3.6.8 Linux/3.10.0-957.21.3.el7.x86_64 Botocore/1.12.183", "awsRegion": "us-east-2", "errorCode": "AccessDenied", "errorMessage": "User: arn:aws:iam::811596193553:user/backup is not authorized to perform: config:DescribeConfigRules", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "d96bb1e7-deeb-493a-93ed-77e13a67dc48", "record_id": "flaws_cloudtrail:0000585:d96bb1e7-deeb-493a-93ed-77e13a67dc48", "row_index": 585, "timestamp": "2019-07-08T15:21:37Z", "event_type": "DescribeConfigurationRecorders", "event_source": "config.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "251.209.251.231", "user_agent": "Boto3/1.9.183 Python/3.6.8 Linux/3.10.0-957.21.3.el7.x86_64 Botocore/1.12.183", "aws_region": "us-west-1"}, "resource_arns": [], "raw_record_size_bytes": 860, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "d96bb1e7-deeb-493a-93ed-77e13a67dc48", "eventTime": "2019-07-08T15:21:37Z", "eventName": "DescribeConfigurationRecorders", "eventSource": "config.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "251.209.251.231", "userAgent": "Boto3/1.9.183 Python/3.6.8 Linux/3.10.0-957.21.3.el7.x86_64 Botocore/1.12.183", "awsRegion": "us-west-1", "errorCode": "AccessDenied", "errorMessage": "User: arn:aws:iam::811596193553:user/backup is not authorized to perform: config:DescribeConfigurationRecorders", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "2edbb620-8537-4c4b-bf33-88235d", "record_id": "flaws_cloudtrail:0000586:2edbb620-8537-4c4b-bf33-88235d", "row_index": 586, "timestamp": "2019-07-08T15:21:37Z", "event_type": "DescribeConfigRules", "event_source": "config.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "251.209.251.231", "user_agent": "Boto3/1.9.183 Python/3.6.8 Linux/3.10.0-957.21.3.el7.x86_64 Botocore/1.12.183", "aws_region": "us-west-1"}, "resource_arns": [], "raw_record_size_bytes": 833, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "2edbb620-8537-4c4b-bf33-88235d", "eventTime": "2019-07-08T15:21:37Z", "eventName": "DescribeConfigRules", "eventSource": "config.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "251.209.251.231", "userAgent": "Boto3/1.9.183 Python/3.6.8 Linux/3.10.0-957.21.3.el7.x86_64 Botocore/1.12.183", "awsRegion": "us-west-1", "errorCode": "AccessDenied", "errorMessage": "User: arn:aws:iam::811596193553:user/backup is not authorized to perform: config:DescribeConfigRules", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "7216f92c-9374-48db-8503-905a3059d028", "record_id": "flaws_cloudtrail:0000587:7216f92c-9374-48db-8503-905a3059d028", "row_index": 587, "timestamp": "2019-07-08T15:21:38Z", "event_type": "DescribeVpcs", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "251.209.251.231", "user_agent": "Boto3/1.9.183 Python/3.6.8 Linux/3.10.0-957.21.3.el7.x86_64 Botocore/1.12.183", "aws_region": "ap-southeast-1"}, "resource_arns": [], "raw_record_size_bytes": 712, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "7216f92c-9374-48db-8503-905a3059d028", "eventTime": "2019-07-08T15:21:38Z", "eventName": "DescribeVpcs", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "251.209.251.231", "userAgent": "Boto3/1.9.183 Python/3.6.8 Linux/3.10.0-957.21.3.el7.x86_64 Botocore/1.12.183", "awsRegion": "ap-southeast-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"vpcSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "2ef848ae-663c-4b2e-a24a-5d43eb8c022e", "record_id": "flaws_cloudtrail:0000588:2ef848ae-663c-4b2e-a24a-5d43eb8c022e", "row_index": 588, "timestamp": "2019-07-08T15:21:38Z", "event_type": "DescribeVpcs", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "251.209.251.231", "user_agent": "Boto3/1.9.183 Python/3.6.8 Linux/3.10.0-957.21.3.el7.x86_64 Botocore/1.12.183", "aws_region": "ap-southeast-2"}, "resource_arns": [], "raw_record_size_bytes": 712, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "2ef848ae-663c-4b2e-a24a-5d43eb8c022e", "eventTime": "2019-07-08T15:21:38Z", "eventName": "DescribeVpcs", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "251.209.251.231", "userAgent": "Boto3/1.9.183 Python/3.6.8 Linux/3.10.0-957.21.3.el7.x86_64 Botocore/1.12.183", "awsRegion": "ap-southeast-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"vpcSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "545307f92-c9e5-4ac5-8c9b-7b6f283c1213", "record_id": "flaws_cloudtrail:0000589:545307f92-c9e5-4ac5-8c9b-7b6f283c1213", "row_index": 589, "timestamp": "2019-07-08T15:21:38Z", "event_type": "DescribeVpcs", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "251.209.251.231", "user_agent": "Boto3/1.9.183 Python/3.6.8 Linux/3.10.0-957.21.3.el7.x86_64 Botocore/1.12.183", "aws_region": "ca-central-1"}, "resource_arns": [], "raw_record_size_bytes": 712, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "545307f92-c9e5-4ac5-8c9b-7b6f283c1213", "eventTime": "2019-07-08T15:21:38Z", "eventName": "DescribeVpcs", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "251.209.251.231", "userAgent": "Boto3/1.9.183 Python/3.6.8 Linux/3.10.0-957.21.3.el7.x86_64 Botocore/1.12.183", "awsRegion": "ca-central-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"vpcSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "8dad4499-91e1-4b84-8aad-9de03227a295", "record_id": "flaws_cloudtrail:0000590:8dad4499-91e1-4b84-8aad-9de03227a295", "row_index": 590, "timestamp": "2019-07-08T15:21:38Z", "event_type": "DescribeFileSystems", "event_source": "elasticfilesystem.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "251.209.251.231", "user_agent": "Boto3/1.9.183 Python/3.6.8 Linux/3.10.0-957.21.3.el7.x86_64 Botocore/1.12.183", "aws_region": "eu-central-1"}, "resource_arns": [], "raw_record_size_bytes": 939, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "8dad4499-91e1-4b84-8aad-9de03227a295", "eventTime": "2019-07-08T15:21:38Z", "eventName": "DescribeFileSystems", "eventSource": "elasticfilesystem.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "251.209.251.231", "userAgent": "Boto3/1.9.183 Python/3.6.8 Linux/3.10.0-957.21.3.el7.x86_64 Botocore/1.12.183", "awsRegion": "eu-central-1", "errorCode": "AccessDenied", "errorMessage": "User: arn:aws:iam::811596193553:user/backup is not authorized to perform: elasticfilesystem:DescribeFileSystems on resource: arn:aws:elasticfilesystem:eu-central-1:811596193553:file-system/*", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "e0c332b9-2aab-4b58-bee7-3a41a13e3400", "record_id": "flaws_cloudtrail:0000591:e0c332b9-2aab-4b58-bee7-3a41a13e3400", "row_index": 591, "timestamp": "2019-07-08T15:21:38Z", "event_type": "DescribeVpcs", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "251.209.251.231", "user_agent": "Boto3/1.9.183 Python/3.6.8 Linux/3.10.0-957.21.3.el7.x86_64 Botocore/1.12.183", "aws_region": "eu-central-1"}, "resource_arns": [], "raw_record_size_bytes": 708, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "e0c332b9-2aab-4b58-bee7-3a41a13e3400", "eventTime": "2019-07-08T15:21:38Z", "eventName": "DescribeVpcs", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "251.209.251.231", "userAgent": "Boto3/1.9.183 Python/3.6.8 Linux/3.10.0-957.21.3.el7.x86_64 Botocore/1.12.183", "awsRegion": "eu-central-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"vpcSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "11120f3d-2fa2-493f-9d20-a2e17e566c58", "record_id": "flaws_cloudtrail:0000592:11120f3d-2fa2-493f-9d20-a2e17e566c58", "row_index": 592, "timestamp": "2019-07-08T15:21:38Z", "event_type": "DescribeVpcs", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "251.209.251.231", "user_agent": "Boto3/1.9.183 Python/3.6.8 Linux/3.10.0-957.21.3.el7.x86_64 Botocore/1.12.183", "aws_region": "eu-north-1"}, "resource_arns": [], "raw_record_size_bytes": 708, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "11120f3d-2fa2-493f-9d20-a2e17e566c58", "eventTime": "2019-07-08T15:21:38Z", "eventName": "DescribeVpcs", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "251.209.251.231", "userAgent": "Boto3/1.9.183 Python/3.6.8 Linux/3.10.0-957.21.3.el7.x86_64 Botocore/1.12.183", "awsRegion": "eu-north-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"vpcSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "0f332b6d-68da-446b-bf8f-42469b15f06f", "record_id": "flaws_cloudtrail:0000593:0f332b6d-68da-446b-bf8f-42469b15f06f", "row_index": 593, "timestamp": "2019-07-08T15:21:38Z", "event_type": "DescribeVpcs", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "251.209.251.231", "user_agent": "Boto3/1.9.183 Python/3.6.8 Linux/3.10.0-957.21.3.el7.x86_64 Botocore/1.12.183", "aws_region": "eu-west-1"}, "resource_arns": [], "raw_record_size_bytes": 704, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "0f332b6d-68da-446b-bf8f-42469b15f06f", "eventTime": "2019-07-08T15:21:38Z", "eventName": "DescribeVpcs", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "251.209.251.231", "userAgent": "Boto3/1.9.183 Python/3.6.8 Linux/3.10.0-957.21.3.el7.x86_64 Botocore/1.12.183", "awsRegion": "eu-west-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"vpcSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "492bfc35-2738-4d14-8ffb-ead744edb9fe", "record_id": "flaws_cloudtrail:0000594:492bfc35-2738-4d14-8ffb-ead744edb9fe", "row_index": 594, "timestamp": "2019-07-08T15:21:38Z", "event_type": "DescribeFileSystems", "event_source": "elasticfilesystem.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "251.209.251.231", "user_agent": "Boto3/1.9.183 Python/3.6.8 Linux/3.10.0-957.21.3.el7.x86_64 Botocore/1.12.183", "aws_region": "eu-west-1"}, "resource_arns": [], "raw_record_size_bytes": 936, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "492bfc35-2738-4d14-8ffb-ead744edb9fe", "eventTime": "2019-07-08T15:21:38Z", "eventName": "DescribeFileSystems", "eventSource": "elasticfilesystem.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "251.209.251.231", "userAgent": "Boto3/1.9.183 Python/3.6.8 Linux/3.10.0-957.21.3.el7.x86_64 Botocore/1.12.183", "awsRegion": "eu-west-1", "errorCode": "AccessDenied", "errorMessage": "User: arn:aws:iam::811596193553:user/backup is not authorized to perform: elasticfilesystem:DescribeFileSystems on resource: arn:aws:elasticfilesystem:eu-west-1:811596193553:file-system/*", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "e9eff3b1-ae62-4246-a326-480edaaef6c8", "record_id": "flaws_cloudtrail:0000595:e9eff3b1-ae62-4246-a326-480edaaef6c8", "row_index": 595, "timestamp": "2019-07-08T15:21:38Z", "event_type": "DescribeFileSystems", "event_source": "elasticfilesystem.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "251.209.251.231", "user_agent": "Boto3/1.9.183 Python/3.6.8 Linux/3.10.0-957.21.3.el7.x86_64 Botocore/1.12.183", "aws_region": "eu-west-2"}, "resource_arns": [], "raw_record_size_bytes": 936, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "e9eff3b1-ae62-4246-a326-480edaaef6c8", "eventTime": "2019-07-08T15:21:38Z", "eventName": "DescribeFileSystems", "eventSource": "elasticfilesystem.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "251.209.251.231", "userAgent": "Boto3/1.9.183 Python/3.6.8 Linux/3.10.0-957.21.3.el7.x86_64 Botocore/1.12.183", "awsRegion": "eu-west-2", "errorCode": "AccessDenied", "errorMessage": "User: arn:aws:iam::811596193553:user/backup is not authorized to perform: elasticfilesystem:DescribeFileSystems on resource: arn:aws:elasticfilesystem:eu-west-2:811596193553:file-system/*", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "27595b24-6119-4a14-90c4-0b96270f5acf", "record_id": "flaws_cloudtrail:0000596:27595b24-6119-4a14-90c4-0b96270f5acf", "row_index": 596, "timestamp": "2019-07-08T15:21:38Z", "event_type": "DescribeVpcs", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "251.209.251.231", "user_agent": "Boto3/1.9.183 Python/3.6.8 Linux/3.10.0-957.21.3.el7.x86_64 Botocore/1.12.183", "aws_region": "eu-west-2"}, "resource_arns": [], "raw_record_size_bytes": 707, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "27595b24-6119-4a14-90c4-0b96270f5acf", "eventTime": "2019-07-08T15:21:38Z", "eventName": "DescribeVpcs", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "251.209.251.231", "userAgent": "Boto3/1.9.183 Python/3.6.8 Linux/3.10.0-957.21.3.el7.x86_64 Botocore/1.12.183", "awsRegion": "eu-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"vpcSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "c34564-ccd1-483f-900a-5a6808a51fdf", "record_id": "flaws_cloudtrail:0000597:c34564-ccd1-483f-900a-5a6808a51fdf", "row_index": 597, "timestamp": "2019-07-08T15:21:38Z", "event_type": "DescribeFileSystems", "event_source": "elasticfilesystem.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "251.209.251.231", "user_agent": "Boto3/1.9.183 Python/3.6.8 Linux/3.10.0-957.21.3.el7.x86_64 Botocore/1.12.183", "aws_region": "eu-west-3"}, "resource_arns": [], "raw_record_size_bytes": 934, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "c34564-ccd1-483f-900a-5a6808a51fdf", "eventTime": "2019-07-08T15:21:38Z", "eventName": "DescribeFileSystems", "eventSource": "elasticfilesystem.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "251.209.251.231", "userAgent": "Boto3/1.9.183 Python/3.6.8 Linux/3.10.0-957.21.3.el7.x86_64 Botocore/1.12.183", "awsRegion": "eu-west-3", "errorCode": "AccessDenied", "errorMessage": "User: arn:aws:iam::811596193553:user/backup is not authorized to perform: elasticfilesystem:DescribeFileSystems on resource: arn:aws:elasticfilesystem:eu-west-3:811596193553:file-system/*", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "3e1ad448-18cd-44eb-a3dd-8dece224c4dd", "record_id": "flaws_cloudtrail:0000598:3e1ad448-18cd-44eb-a3dd-8dece224c4dd", "row_index": 598, "timestamp": "2019-07-08T15:21:38Z", "event_type": "DescribeVpcs", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "251.209.251.231", "user_agent": "Boto3/1.9.183 Python/3.6.8 Linux/3.10.0-957.21.3.el7.x86_64 Botocore/1.12.183", "aws_region": "eu-west-3"}, "resource_arns": [], "raw_record_size_bytes": 707, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "3e1ad448-18cd-44eb-a3dd-8dece224c4dd", "eventTime": "2019-07-08T15:21:38Z", "eventName": "DescribeVpcs", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "251.209.251.231", "userAgent": "Boto3/1.9.183 Python/3.6.8 Linux/3.10.0-957.21.3.el7.x86_64 Botocore/1.12.183", "awsRegion": "eu-west-3", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"vpcSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "246bbeee-9cd6-439c-8bfc-a8d0390c160a", "record_id": "flaws_cloudtrail:0000599:246bbeee-9cd6-439c-8bfc-a8d0390c160a", "row_index": 599, "timestamp": "2019-07-08T15:21:38Z", "event_type": "DescribeConfigRules", "event_source": "config.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "251.209.251.231", "user_agent": "Boto3/1.9.183 Python/3.6.8 Linux/3.10.0-957.21.3.el7.x86_64 Botocore/1.12.183", "aws_region": "sa-east-1"}, "resource_arns": [], "raw_record_size_bytes": 838, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "246bbeee-9cd6-439c-8bfc-a8d0390c160a", "eventTime": "2019-07-08T15:21:38Z", "eventName": "DescribeConfigRules", "eventSource": "config.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "251.209.251.231", "userAgent": "Boto3/1.9.183 Python/3.6.8 Linux/3.10.0-957.21.3.el7.x86_64 Botocore/1.12.183", "awsRegion": "sa-east-1", "errorCode": "AccessDenied", "errorMessage": "User: arn:aws:iam::811596193553:user/backup is not authorized to perform: config:DescribeConfigRules", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "07989a-4aff-45fb-ba54-0a46ee3812c2", "record_id": "flaws_cloudtrail:0000600:07989a-4aff-45fb-ba54-0a46ee3812c2", "row_index": 600, "timestamp": "2019-07-08T15:21:38Z", "event_type": "DescribeConfigurationRecorders", "event_source": "config.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "251.209.251.231", "user_agent": "Boto3/1.9.183 Python/3.6.8 Linux/3.10.0-957.21.3.el7.x86_64 Botocore/1.12.183", "aws_region": "sa-east-1"}, "resource_arns": [], "raw_record_size_bytes": 858, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "07989a-4aff-45fb-ba54-0a46ee3812c2", "eventTime": "2019-07-08T15:21:38Z", "eventName": "DescribeConfigurationRecorders", "eventSource": "config.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "251.209.251.231", "userAgent": "Boto3/1.9.183 Python/3.6.8 Linux/3.10.0-957.21.3.el7.x86_64 Botocore/1.12.183", "awsRegion": "sa-east-1", "errorCode": "AccessDenied", "errorMessage": "User: arn:aws:iam::811596193553:user/backup is not authorized to perform: config:DescribeConfigurationRecorders", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "d940d5cb-6814-47c1-b97e-95301bb4ee0a", "record_id": "flaws_cloudtrail:0000601:d940d5cb-6814-47c1-b97e-95301bb4ee0a", "row_index": 601, "timestamp": "2019-07-08T15:21:38Z", "event_type": "DescribeVpcs", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "251.209.251.231", "user_agent": "Boto3/1.9.183 Python/3.6.8 Linux/3.10.0-957.21.3.el7.x86_64 Botocore/1.12.183", "aws_region": "sa-east-1"}, "resource_arns": [], "raw_record_size_bytes": 707, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "d940d5cb-6814-47c1-b97e-95301bb4ee0a", "eventTime": "2019-07-08T15:21:38Z", "eventName": "DescribeVpcs", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "251.209.251.231", "userAgent": "Boto3/1.9.183 Python/3.6.8 Linux/3.10.0-957.21.3.el7.x86_64 Botocore/1.12.183", "awsRegion": "sa-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"vpcSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "b0e0dc2a-5cb2-4900-b6ca-b8c710014c06", "record_id": "flaws_cloudtrail:0000602:b0e0dc2a-5cb2-4900-b6ca-b8c710014c06", "row_index": 602, "timestamp": "2019-07-08T15:21:38Z", "event_type": "DescribeVpcs", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "251.209.251.231", "user_agent": "Boto3/1.9.183 Python/3.6.8 Linux/3.10.0-957.21.3.el7.x86_64 Botocore/1.12.183", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 707, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "b0e0dc2a-5cb2-4900-b6ca-b8c710014c06", "eventTime": "2019-07-08T15:21:38Z", "eventName": "DescribeVpcs", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "251.209.251.231", "userAgent": "Boto3/1.9.183 Python/3.6.8 Linux/3.10.0-957.21.3.el7.x86_64 Botocore/1.12.183", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"vpcSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "3ce7763d-63fe-4e58-82c5-f91687deacb9", "record_id": "flaws_cloudtrail:0000603:3ce7763d-63fe-4e58-82c5-f91687deacb9", "row_index": 603, "timestamp": "2019-07-08T15:21:38Z", "event_type": "DescribeVpcs", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "251.209.251.231", "user_agent": "Boto3/1.9.183 Python/3.6.8 Linux/3.10.0-957.21.3.el7.x86_64 Botocore/1.12.183", "aws_region": "us-east-2"}, "resource_arns": [], "raw_record_size_bytes": 707, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "3ce7763d-63fe-4e58-82c5-f91687deacb9", "eventTime": "2019-07-08T15:21:38Z", "eventName": "DescribeVpcs", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "251.209.251.231", "userAgent": "Boto3/1.9.183 Python/3.6.8 Linux/3.10.0-957.21.3.el7.x86_64 Botocore/1.12.183", "awsRegion": "us-east-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"vpcSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "bad74f7a-8e27-48a8-b2e7-14f194caf15a", "record_id": "flaws_cloudtrail:0000604:bad74f7a-8e27-48a8-b2e7-14f194caf15a", "row_index": 604, "timestamp": "2019-07-08T15:21:38Z", "event_type": "DescribeVpcs", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "251.209.251.231", "user_agent": "Boto3/1.9.183 Python/3.6.8 Linux/3.10.0-957.21.3.el7.x86_64 Botocore/1.12.183", "aws_region": "us-west-1"}, "resource_arns": [], "raw_record_size_bytes": 707, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "bad74f7a-8e27-48a8-b2e7-14f194caf15a", "eventTime": "2019-07-08T15:21:38Z", "eventName": "DescribeVpcs", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "251.209.251.231", "userAgent": "Boto3/1.9.183 Python/3.6.8 Linux/3.10.0-957.21.3.el7.x86_64 Botocore/1.12.183", "awsRegion": "us-west-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"vpcSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "9c4bed02-1ac6-4f5a-ba04-71065c5fbc1a", "record_id": "flaws_cloudtrail:0000605:9c4bed02-1ac6-4f5a-ba04-71065c5fbc1a", "row_index": 605, "timestamp": "2019-07-08T15:21:38Z", "event_type": "DescribeConfigurationRecorders", "event_source": "config.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "251.209.251.231", "user_agent": "Boto3/1.9.183 Python/3.6.8 Linux/3.10.0-957.21.3.el7.x86_64 Botocore/1.12.183", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 860, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "9c4bed02-1ac6-4f5a-ba04-71065c5fbc1a", "eventTime": "2019-07-08T15:21:38Z", "eventName": "DescribeConfigurationRecorders", "eventSource": "config.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "251.209.251.231", "userAgent": "Boto3/1.9.183 Python/3.6.8 Linux/3.10.0-957.21.3.el7.x86_64 Botocore/1.12.183", "awsRegion": "us-west-2", "errorCode": "AccessDenied", "errorMessage": "User: arn:aws:iam::811596193553:user/backup is not authorized to perform: config:DescribeConfigurationRecorders", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "ff4509b1-9409-481e-beca-cfc1adc21749", "record_id": "flaws_cloudtrail:0000606:ff4509b1-9409-481e-beca-cfc1adc21749", "row_index": 606, "timestamp": "2019-07-08T15:21:38Z", "event_type": "DescribeVpcs", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "251.209.251.231", "user_agent": "Boto3/1.9.183 Python/3.6.8 Linux/3.10.0-957.21.3.el7.x86_64 Botocore/1.12.183", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 707, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "ff4509b1-9409-481e-beca-cfc1adc21749", "eventTime": "2019-07-08T15:21:38Z", "eventName": "DescribeVpcs", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "251.209.251.231", "userAgent": "Boto3/1.9.183 Python/3.6.8 Linux/3.10.0-957.21.3.el7.x86_64 Botocore/1.12.183", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"vpcSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "60cff044-a3b6-4c99-b1e5-3d3d3ddf185e", "record_id": "flaws_cloudtrail:0000607:60cff044-a3b6-4c99-b1e5-3d3d3ddf185e", "row_index": 607, "timestamp": "2019-07-08T15:21:38Z", "event_type": "DescribeConfigRules", "event_source": "config.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "251.209.251.231", "user_agent": "Boto3/1.9.183 Python/3.6.8 Linux/3.10.0-957.21.3.el7.x86_64 Botocore/1.12.183", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 838, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "60cff044-a3b6-4c99-b1e5-3d3d3ddf185e", "eventTime": "2019-07-08T15:21:38Z", "eventName": "DescribeConfigRules", "eventSource": "config.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "251.209.251.231", "userAgent": "Boto3/1.9.183 Python/3.6.8 Linux/3.10.0-957.21.3.el7.x86_64 Botocore/1.12.183", "awsRegion": "us-west-2", "errorCode": "AccessDenied", "errorMessage": "User: arn:aws:iam::811596193553:user/backup is not authorized to perform: config:DescribeConfigRules", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "7216f92c-9374-48db-8503-905a3059d028", "record_id": "flaws_cloudtrail:0000608:7216f92c-9374-48db-8503-905a3059d028", "row_index": 608, "timestamp": "2019-07-08T15:21:38Z", "event_type": "DescribeVpcs", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "251.209.251.231", "user_agent": "Boto3/1.9.183 Python/3.6.8 Linux/3.10.0-957.21.3.el7.x86_64 Botocore/1.12.183", "aws_region": "ap-southeast-1"}, "resource_arns": [], "raw_record_size_bytes": 712, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "7216f92c-9374-48db-8503-905a3059d028", "eventTime": "2019-07-08T15:21:38Z", "eventName": "DescribeVpcs", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "251.209.251.231", "userAgent": "Boto3/1.9.183 Python/3.6.8 Linux/3.10.0-957.21.3.el7.x86_64 Botocore/1.12.183", "awsRegion": "ap-southeast-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"vpcSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "2ef848ae-663c-4b2e-a24a-5d43eb8c022e", "record_id": "flaws_cloudtrail:0000609:2ef848ae-663c-4b2e-a24a-5d43eb8c022e", "row_index": 609, "timestamp": "2019-07-08T15:21:38Z", "event_type": "DescribeVpcs", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "251.209.251.231", "user_agent": "Boto3/1.9.183 Python/3.6.8 Linux/3.10.0-957.21.3.el7.x86_64 Botocore/1.12.183", "aws_region": "ap-southeast-2"}, "resource_arns": [], "raw_record_size_bytes": 712, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "2ef848ae-663c-4b2e-a24a-5d43eb8c022e", "eventTime": "2019-07-08T15:21:38Z", "eventName": "DescribeVpcs", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "251.209.251.231", "userAgent": "Boto3/1.9.183 Python/3.6.8 Linux/3.10.0-957.21.3.el7.x86_64 Botocore/1.12.183", "awsRegion": "ap-southeast-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"vpcSet": {}, "filterSet": {}}, "resources": []}}