Task: attack_reconstruction (flaws_cloudtrail)
Prompt: An IAM principal appears to confirm who they are, survey the account’s audit-trail configuration, and then take action to reduce CloudTrail visibility. Identify the responsible principal, the applicable MITRE ATT&CK technique, the supporting CloudTrail record_ids for each phase of the chain, and the impacted AWS assets. Return a JSON object matching the AttackReconstructionAnswer schema. Use principal.arn for primary_actor, the MITRE ATT&CK ID (e.g. T1530) for technique, and group the supporting CloudTrail record_ids by attack phase. List the AWS asset identifiers (bucket names, role/user names, trail names, ARNs) the attack acted on as impacted_assets.
Answer schema: attack_reconstruction_answer

CloudTrail records:
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "babc30c3-ead0-44cc-9367-a46bfc1539e3", "record_id": "flaws_cloudtrail:0000000:babc30c3-ead0-44cc-9367-a46bfc1539e3", "row_index": 0, "timestamp": "2019-07-24T02:54:15Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "222.205.8.190", "user_agent": "aws-cli/1.11.13 Python/3.5.2 Linux/4.4.0-62-generic botocore/1.4.70", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1085, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "babc30c3-ead0-44cc-9367-a46bfc1539e3", "eventTime": "2019-07-24T02:54:15Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "222.205.8.190", "userAgent": "aws-cli/1.11.13 Python/3.5.2 Linux/4.4.0-62-generic botocore/1.4.70", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"nextToken": "eyJ2IjoiMiIsImMiOiJRcmJHOHo5aVFIOU5vOEUvVjl0R2VOU1NDdGNDcmpkWldlR0J2TmhiSnh5dU41eU9SMzZxbFBLYVVxVGNJTXFuMEV0Y0Y5WHV5NzB1VVViZk1GUm0ra2JtUTdjUXFiUHh3Qm5RWlh6ZHNOZHhYeE5YS0ExRnR1Q2JmVCtadFZMalR4aVFNT1MycjlaY3FzeTZSNitMWXQwN0c0eVRuUEQvNFlUSkxVZzk2THArRHFOSU9haC9DWEc3RXNUYzFqYUNDZGtvMHJDY25ralNIQT09IiwicyI6IjEifQ==", "maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "8c692705-ee0f-49ec-a5c7-526a667f5a88", "record_id": "flaws_cloudtrail:0000001:8c692705-ee0f-49ec-a5c7-526a667f5a88", "row_index": 1, "timestamp": "2019-07-24T02:54:17Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "222.205.8.190", "user_agent": "aws-cli/1.11.13 Python/3.5.2 Linux/4.4.0-62-generic botocore/1.4.70", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1085, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "8c692705-ee0f-49ec-a5c7-526a667f5a88", "eventTime": "2019-07-24T02:54:17Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "222.205.8.190", "userAgent": "aws-cli/1.11.13 Python/3.5.2 Linux/4.4.0-62-generic botocore/1.4.70", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"nextToken": "eyJ2IjoiMiIsImMiOiJLSEdYb3BDd2hDNkNvVnMxcWJUTXcxLzhSMFNlTldJYWs5Q3NpUWYxMlMrYnRpQ0JVc0U2MlhwbDJ1TjVPbGJkWTZGRlZVUkFDVnViUEFIUHBUU3RFbDlWaEdEMDhuL0FNNUlYdzRaRXhDNUM1bnJBYU1xMnFBZmVQRVdXMGV4dnlJWUZLZzYxRGxMOG5EL3RTSTBqRUZJWEJaMWpUZkNmdU5odWJJSXkrMnp4YXRycXg2ZVBuNlhEV0ZYVWpJSThyZjlvdXJBR1FFRlRKQT09IiwicyI6IjEifQ==", "maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "8c692705-ee0f-49ec-a5c7-526a667f5a88", "record_id": "flaws_cloudtrail:0000002:8c692705-ee0f-49ec-a5c7-526a667f5a88", "row_index": 2, "timestamp": "2019-07-24T02:54:17Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "222.205.8.190", "user_agent": "aws-cli/1.11.13 Python/3.5.2 Linux/4.4.0-62-generic botocore/1.4.70", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1085, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "8c692705-ee0f-49ec-a5c7-526a667f5a88", "eventTime": "2019-07-24T02:54:17Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "222.205.8.190", "userAgent": "aws-cli/1.11.13 Python/3.5.2 Linux/4.4.0-62-generic botocore/1.4.70", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"nextToken": "eyJ2IjoiMiIsImMiOiJLSEdYb3BDd2hDNkNvVnMxcWJUTXcxLzhSMFNlTldJYWs5Q3NpUWYxMlMrYnRpQ0JVc0U2MlhwbDJ1TjVPbGJkWTZGRlZVUkFDVnViUEFIUHBUU3RFbDlWaEdEMDhuL0FNNUlYdzRaRXhDNUM1bnJBYU1xMnFBZmVQRVdXMGV4dnlJWUZLZzYxRGxMOG5EL3RTSTBqRUZJWEJaMWpUZkNmdU5odWJJSXkrMnp4YXRycXg2ZVBuNlhEV0ZYVWpJSThyZjlvdXJBR1FFRlRKQT09IiwicyI6IjEifQ==", "maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "ab9f75f4-1825-46e6-bbb4-6274e63ae872", "record_id": "flaws_cloudtrail:0000003:ab9f75f4-1825-46e6-bbb4-6274e63ae872", "row_index": 3, "timestamp": "2019-07-24T02:54:19Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "222.205.8.190", "user_agent": "aws-cli/1.11.13 Python/3.5.2 Linux/4.4.0-62-generic botocore/1.4.70", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1077, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "ab9f75f4-1825-46e6-bbb4-6274e63ae872", "eventTime": "2019-07-24T02:54:19Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "222.205.8.190", "userAgent": "aws-cli/1.11.13 Python/3.5.2 Linux/4.4.0-62-generic botocore/1.4.70", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"nextToken": "eyJ2IjoiMiIsImMiOiJxWS9vTUVIcTFiK2FIbTZrZlMzL3B1UFh2emE3aDF4UGxzWUhDQTdsMTVtcHM3RkgvNi95dFlPRkZIY1V3a0M5ck9PWllVb2RMRTcyb3k1YXlWUFJKaS9DcmNwaXRtZmNWNFJmUnoyWnFqSnlNRUFuRDNrMGNmTWxGeVdDM1BaK0JNN21raFJ1M25ic2lDa1VnSHJxWWRYRGRaRkU2M09uSENvbXo2VnN0czFZL0RaODVmRHkwNzAwWlhHK0VEaWJKd1pPRHZta1hQVT0iLCJzIjoiMSJ9", "maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "ab9f75f4-1825-46e6-bbb4-6274e63ae872", "record_id": "flaws_cloudtrail:0000004:ab9f75f4-1825-46e6-bbb4-6274e63ae872", "row_index": 4, "timestamp": "2019-07-24T02:54:19Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "222.205.8.190", "user_agent": "aws-cli/1.11.13 Python/3.5.2 Linux/4.4.0-62-generic botocore/1.4.70", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1077, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "ab9f75f4-1825-46e6-bbb4-6274e63ae872", "eventTime": "2019-07-24T02:54:19Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "222.205.8.190", "userAgent": "aws-cli/1.11.13 Python/3.5.2 Linux/4.4.0-62-generic botocore/1.4.70", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"nextToken": "eyJ2IjoiMiIsImMiOiJxWS9vTUVIcTFiK2FIbTZrZlMzL3B1UFh2emE3aDF4UGxzWUhDQTdsMTVtcHM3RkgvNi95dFlPRkZIY1V3a0M5ck9PWllVb2RMRTcyb3k1YXlWUFJKaS9DcmNwaXRtZmNWNFJmUnoyWnFqSnlNRUFuRDNrMGNmTWxGeVdDM1BaK0JNN21raFJ1M25ic2lDa1VnSHJxWWRYRGRaRkU2M09uSENvbXo2VnN0czFZL0RaODVmRHkwNzAwWlhHK0VEaWJKd1pPRHZta1hQVT0iLCJzIjoiMSJ9", "maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "fbec3c8f-c50f-4f85-b016-cf37cbedfdfe", "record_id": "flaws_cloudtrail:0000005:fbec3c8f-c50f-4f85-b016-cf37cbedfdfe", "row_index": 5, "timestamp": "2019-07-24T02:54:20Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "222.205.8.190", "user_agent": "aws-cli/1.11.13 Python/3.5.2 Linux/4.4.0-62-generic botocore/1.4.70", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1085, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "fbec3c8f-c50f-4f85-b016-cf37cbedfdfe", "eventTime": "2019-07-24T02:54:20Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "222.205.8.190", "userAgent": "aws-cli/1.11.13 Python/3.5.2 Linux/4.4.0-62-generic botocore/1.4.70", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"nextToken": "eyJ2IjoiMiIsImMiOiIvMDN0VVA0d0VBM3dwMitOTEh6a0pmd1ZZQzk5emw2UytkbWxoMzF5L1NVQm15UVV6SnhVWEpwb3oxc3dkRTdTVU9ES1hRYW1IQVdxdGdQdTJVaUIyeE1lZDRYd09lemR5QWVmTHVRbGFqUjUxTlEyZmNaelJlbFdYTmJEWlEzWUhFamdLeXZscEhveG0yWHRKcG9BSTlheHNzTTJsb3BPUWRPU2h5ZVkyK2pZYVdHOG9mVWhrVTFicXA5VjFnMlNMcHRuN2M0RXVjSkhWQT09IiwicyI6IjEifQ==", "maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "fbec3c8f-c50f-4f85-b016-cf37cbedfdfe", "record_id": "flaws_cloudtrail:0000006:fbec3c8f-c50f-4f85-b016-cf37cbedfdfe", "row_index": 6, "timestamp": "2019-07-24T02:54:20Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "222.205.8.190", "user_agent": "aws-cli/1.11.13 Python/3.5.2 Linux/4.4.0-62-generic botocore/1.4.70", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1085, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "fbec3c8f-c50f-4f85-b016-cf37cbedfdfe", "eventTime": "2019-07-24T02:54:20Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "222.205.8.190", "userAgent": "aws-cli/1.11.13 Python/3.5.2 Linux/4.4.0-62-generic botocore/1.4.70", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"nextToken": "eyJ2IjoiMiIsImMiOiIvMDN0VVA0d0VBM3dwMitOTEh6a0pmd1ZZQzk5emw2UytkbWxoMzF5L1NVQm15UVV6SnhVWEpwb3oxc3dkRTdTVU9ES1hRYW1IQVdxdGdQdTJVaUIyeE1lZDRYd09lemR5QWVmTHVRbGFqUjUxTlEyZmNaelJlbFdYTmJEWlEzWUhFamdLeXZscEhveG0yWHRKcG9BSTlheHNzTTJsb3BPUWRPU2h5ZVkyK2pZYVdHOG9mVWhrVTFicXA5VjFnMlNMcHRuN2M0RXVjSkhWQT09IiwicyI6IjEifQ==", "maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "4957f0dc-43e1-4f34-aca6-6c51b754655", "record_id": "flaws_cloudtrail:0000007:4957f0dc-43e1-4f34-aca6-6c51b754655", "row_index": 7, "timestamp": "2019-07-24T02:54:22Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "222.205.8.190", "user_agent": "aws-cli/1.11.13 Python/3.5.2 Linux/4.4.0-62-generic botocore/1.4.70", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1076, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "4957f0dc-43e1-4f34-aca6-6c51b754655", "eventTime": "2019-07-24T02:54:22Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "222.205.8.190", "userAgent": "aws-cli/1.11.13 Python/3.5.2 Linux/4.4.0-62-generic botocore/1.4.70", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"nextToken": "eyJ2IjoiMiIsImMiOiJOUGpjYitTeHJPZVk1LzF4Wk9Ja2Nzclc2VlAyL1A3TTVFZmlvK010Snk4c1h6UVJmNUdhL1VkTllnam94Uk5UcERMUUtJYjA3SVB6M2Iva0MyZkpxa2lnR0doSVlaWExqMzNkd3ZzdjEzQ1JuZUs5cnBCWVoxRDV5YndSRGFVeHJGalRwRzUzVlliT0piL2JrMnRUUzhjeUwwL2ZSVzhUN3VkOEVQM2dkT0twV21NNyttaHRsWjNxNjdFazlkeTRrU0xrNWl2ZEJnPT0iLCJzIjoiMSJ9", "maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "4957f0dc-43e1-4f34-aca6-6c51b754655", "record_id": "flaws_cloudtrail:0000008:4957f0dc-43e1-4f34-aca6-6c51b754655", "row_index": 8, "timestamp": "2019-07-24T02:54:22Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "222.205.8.190", "user_agent": "aws-cli/1.11.13 Python/3.5.2 Linux/4.4.0-62-generic botocore/1.4.70", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1076, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "4957f0dc-43e1-4f34-aca6-6c51b754655", "eventTime": "2019-07-24T02:54:22Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "222.205.8.190", "userAgent": "aws-cli/1.11.13 Python/3.5.2 Linux/4.4.0-62-generic botocore/1.4.70", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"nextToken": "eyJ2IjoiMiIsImMiOiJOUGpjYitTeHJPZVk1LzF4Wk9Ja2Nzclc2VlAyL1A3TTVFZmlvK010Snk4c1h6UVJmNUdhL1VkTllnam94Uk5UcERMUUtJYjA3SVB6M2Iva0MyZkpxa2lnR0doSVlaWExqMzNkd3ZzdjEzQ1JuZUs5cnBCWVoxRDV5YndSRGFVeHJGalRwRzUzVlliT0piL2JrMnRUUzhjeUwwL2ZSVzhUN3VkOEVQM2dkT0twV21NNyttaHRsWjNxNjdFazlkeTRrU0xrNWl2ZEJnPT0iLCJzIjoiMSJ9", "maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "11b281067-6022-447b-a4ce-4136570b99b1", "record_id": "flaws_cloudtrail:0000009:11b281067-6022-447b-a4ce-4136570b99b1", "row_index": 9, "timestamp": "2019-07-24T02:54:24Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "222.205.8.190", "user_agent": "aws-cli/1.11.13 Python/3.5.2 Linux/4.4.0-62-generic botocore/1.4.70", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1086, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "11b281067-6022-447b-a4ce-4136570b99b1", "eventTime": "2019-07-24T02:54:24Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "222.205.8.190", "userAgent": "aws-cli/1.11.13 Python/3.5.2 Linux/4.4.0-62-generic botocore/1.4.70", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"nextToken": "eyJ2IjoiMiIsImMiOiJiUFVpdGV2ZG9odVQwN0JmT0U2MHRWK1RYNU9XZUJNSVVSMlFiK2x2VURCV2JtYjRZcy9UeStwbm12WXV0UUZvRGhXZ1dab3hqb1hGMjNKYUZHZkd1ZytId0t3dUorKzl3MFRCNWFhdi9TUVN5Yk8yU0pWay9OdmprZTNKTDdYdmQvczBtUGxtbWxmYW44akRrUXpTWFlFUUZSbk9PUGlIa2trQ0NLTnp1K0lrN0FnOUpwSE90Z21CSmRJQStLNE9KZHd5dEF0eURRcmI1dz09IiwicyI6IjEifQ==", "maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "11b281067-6022-447b-a4ce-4136570b99b1", "record_id": "flaws_cloudtrail:0000010:11b281067-6022-447b-a4ce-4136570b99b1", "row_index": 10, "timestamp": "2019-07-24T02:54:24Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "222.205.8.190", "user_agent": "aws-cli/1.11.13 Python/3.5.2 Linux/4.4.0-62-generic botocore/1.4.70", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1086, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "11b281067-6022-447b-a4ce-4136570b99b1", "eventTime": "2019-07-24T02:54:24Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "222.205.8.190", "userAgent": "aws-cli/1.11.13 Python/3.5.2 Linux/4.4.0-62-generic botocore/1.4.70", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"nextToken": "eyJ2IjoiMiIsImMiOiJiUFVpdGV2ZG9odVQwN0JmT0U2MHRWK1RYNU9XZUJNSVVSMlFiK2x2VURCV2JtYjRZcy9UeStwbm12WXV0UUZvRGhXZ1dab3hqb1hGMjNKYUZHZkd1ZytId0t3dUorKzl3MFRCNWFhdi9TUVN5Yk8yU0pWay9OdmprZTNKTDdYdmQvczBtUGxtbWxmYW44akRrUXpTWFlFUUZSbk9PUGlIa2trQ0NLTnp1K0lrN0FnOUpwSE90Z21CSmRJQStLNE9KZHd5dEF0eURRcmI1dz09IiwicyI6IjEifQ==", "maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "0f9405a8-d850-41e7-be30-242145c8b6eec", "record_id": "flaws_cloudtrail:0000011:0f9405a8-d850-41e7-be30-242145c8b6eec", "row_index": 11, "timestamp": "2019-07-24T02:54:25Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "222.205.8.190", "user_agent": "aws-cli/1.11.13 Python/3.5.2 Linux/4.4.0-62-generic botocore/1.4.70", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1087, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "0f9405a8-d850-41e7-be30-242145c8b6eec", "eventTime": "2019-07-24T02:54:25Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "222.205.8.190", "userAgent": "aws-cli/1.11.13 Python/3.5.2 Linux/4.4.0-62-generic botocore/1.4.70", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"nextToken": "eyJ2IjoiMiIsImMiOiJEME40dksrQnlzTlpoSE5lNzhRbjFvUzd0eTQ1ME5hSG1jb0ppaWsvOGQ0NlR6WWp3TCtMbFJDSGVZcjZrREJaQk5wcEF4YjhZdjFhM1A0bXRLbmVrdENON0IwTW5PME5hMmdSZUZ5Nmg3NHg4MVFEWjFWWUozdy82OEFoMFMyb1oxckx2Nm9sSytDcXcrdzJzZllRTG15aXN0YTF5cGVkQVVXbEFMd2xOL01yZEtENysvYkRVMHBHWXhYeHV0N2tpTzdPelJxalBwbzNWdz09IiwicyI6IjEifQ==", "maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "0f9405a8-d850-41e7-be30-242145c8b6eec", "record_id": "flaws_cloudtrail:0000012:0f9405a8-d850-41e7-be30-242145c8b6eec", "row_index": 12, "timestamp": "2019-07-24T02:54:25Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "222.205.8.190", "user_agent": "aws-cli/1.11.13 Python/3.5.2 Linux/4.4.0-62-generic botocore/1.4.70", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1087, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "0f9405a8-d850-41e7-be30-242145c8b6eec", "eventTime": "2019-07-24T02:54:25Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "222.205.8.190", "userAgent": "aws-cli/1.11.13 Python/3.5.2 Linux/4.4.0-62-generic botocore/1.4.70", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"nextToken": "eyJ2IjoiMiIsImMiOiJEME40dksrQnlzTlpoSE5lNzhRbjFvUzd0eTQ1ME5hSG1jb0ppaWsvOGQ0NlR6WWp3TCtMbFJDSGVZcjZrREJaQk5wcEF4YjhZdjFhM1A0bXRLbmVrdENON0IwTW5PME5hMmdSZUZ5Nmg3NHg4MVFEWjFWWUozdy82OEFoMFMyb1oxckx2Nm9sSytDcXcrdzJzZllRTG15aXN0YTF5cGVkQVVXbEFMd2xOL01yZEtENysvYkRVMHBHWXhYeHV0N2tpTzdPelJxalBwbzNWdz09IiwicyI6IjEifQ==", "maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "e342cab9-352b-4b0b-8ca8-49098b7e1b", "record_id": "flaws_cloudtrail:0000013:e342cab9-352b-4b0b-8ca8-49098b7e1b", "row_index": 13, "timestamp": "2019-07-24T02:54:27Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "222.205.8.190", "user_agent": "aws-cli/1.11.13 Python/3.5.2 Linux/4.4.0-62-generic botocore/1.4.70", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1075, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "e342cab9-352b-4b0b-8ca8-49098b7e1b", "eventTime": "2019-07-24T02:54:27Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "222.205.8.190", "userAgent": "aws-cli/1.11.13 Python/3.5.2 Linux/4.4.0-62-generic botocore/1.4.70", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"nextToken": "eyJ2IjoiMiIsImMiOiJEYWlEOUZHWm55MmxsMm9hRnJ0MVlFNVJ5di9uYlovb09GdE5xa05tWEw1TEI2c3k1S3pXYWVPcnJ0SVRZL2N5bnRXZmVsL29XbFlJOHJNdGxiOGxPZGpyNjBMM1hkYmNRTFVnTHI5TVJkc2hyNWlqakd3YUJaUEQzaU5JWFl0T0dtMFo3dGh6Z2krZTNla3grdE1QUU5Pd1VHTjZDaTFLakhQeGFZaGVkY2l1QXV5a0RQaWlPVVRkNlI0K25ZSDVJYmhFcTNOL09abz0iLCJzIjoiMSJ9", "maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "e342cab9-352b-4b0b-8ca8-49098b7e1b", "record_id": "flaws_cloudtrail:0000014:e342cab9-352b-4b0b-8ca8-49098b7e1b", "row_index": 14, "timestamp": "2019-07-24T02:54:27Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "222.205.8.190", "user_agent": "aws-cli/1.11.13 Python/3.5.2 Linux/4.4.0-62-generic botocore/1.4.70", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1075, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "e342cab9-352b-4b0b-8ca8-49098b7e1b", "eventTime": "2019-07-24T02:54:27Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "222.205.8.190", "userAgent": "aws-cli/1.11.13 Python/3.5.2 Linux/4.4.0-62-generic botocore/1.4.70", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"nextToken": "eyJ2IjoiMiIsImMiOiJEYWlEOUZHWm55MmxsMm9hRnJ0MVlFNVJ5di9uYlovb09GdE5xa05tWEw1TEI2c3k1S3pXYWVPcnJ0SVRZL2N5bnRXZmVsL29XbFlJOHJNdGxiOGxPZGpyNjBMM1hkYmNRTFVnTHI5TVJkc2hyNWlqakd3YUJaUEQzaU5JWFl0T0dtMFo3dGh6Z2krZTNla3grdE1QUU5Pd1VHTjZDaTFLakhQeGFZaGVkY2l1QXV5a0RQaWlPVVRkNlI0K25ZSDVJYmhFcTNOL09abz0iLCJzIjoiMSJ9", "maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "1f511b64-96cf-4767-b011-af021d961ab3", "record_id": "flaws_cloudtrail:0000015:1f511b64-96cf-4767-b011-af021d961ab3", "row_index": 15, "timestamp": "2019-07-24T02:54:28Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "222.205.8.190", "user_agent": "aws-cli/1.11.13 Python/3.5.2 Linux/4.4.0-62-generic botocore/1.4.70", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1077, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "1f511b64-96cf-4767-b011-af021d961ab3", "eventTime": "2019-07-24T02:54:28Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "222.205.8.190", "userAgent": "aws-cli/1.11.13 Python/3.5.2 Linux/4.4.0-62-generic botocore/1.4.70", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"nextToken": "eyJ2IjoiMiIsImMiOiJ4ZDBkTXBpTGR5cEcwUjZueHE3UHI1QS9mQWd5UW1GSHAvTXBKV0hxN1NGSkdEQkk1anJjQmNlRjFaNGpwT3JwNm1qa25vTi9Lc2hzc1h6UzJOT1A2V0V4Q0EvTmdSTW1NVjBieitNbnJ5bWhEWkRsV0hnMkg0STR4WWdkUmFIV2svL0hLNDFhUFJHeHNsYU1hWW04SnhpVkl6VHliZWVTQ0NTRDJia2hYNWFPbmw5Tmk5WnU0K3A2TGpZVTRrQ3dUOTlmQkdhY2RGTT0iLCJzIjoiMSJ9", "maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "1f511b64-96cf-4767-b011-af021d961ab3", "record_id": "flaws_cloudtrail:0000016:1f511b64-96cf-4767-b011-af021d961ab3", "row_index": 16, "timestamp": "2019-07-24T02:54:28Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "222.205.8.190", "user_agent": "aws-cli/1.11.13 Python/3.5.2 Linux/4.4.0-62-generic botocore/1.4.70", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1077, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "1f511b64-96cf-4767-b011-af021d961ab3", "eventTime": "2019-07-24T02:54:28Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "222.205.8.190", "userAgent": "aws-cli/1.11.13 Python/3.5.2 Linux/4.4.0-62-generic botocore/1.4.70", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"nextToken": "eyJ2IjoiMiIsImMiOiJ4ZDBkTXBpTGR5cEcwUjZueHE3UHI1QS9mQWd5UW1GSHAvTXBKV0hxN1NGSkdEQkk1anJjQmNlRjFaNGpwT3JwNm1qa25vTi9Lc2hzc1h6UzJOT1A2V0V4Q0EvTmdSTW1NVjBieitNbnJ5bWhEWkRsV0hnMkg0STR4WWdkUmFIV2svL0hLNDFhUFJHeHNsYU1hWW04SnhpVkl6VHliZWVTQ0NTRDJia2hYNWFPbmw5Tmk5WnU0K3A2TGpZVTRrQ3dUOTlmQkdhY2RGTT0iLCJzIjoiMSJ9", "maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "0627e664-87c7-4acb-91d1-49e39ef4ba2e", "record_id": "flaws_cloudtrail:0000017:0627e664-87c7-4acb-91d1-49e39ef4ba2e", "row_index": 17, "timestamp": "2019-07-24T02:54:29Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "222.205.8.190", "user_agent": "aws-cli/1.11.13 Python/3.5.2 Linux/4.4.0-62-generic botocore/1.4.70", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1105, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "0627e664-87c7-4acb-91d1-49e39ef4ba2e", "eventTime": "2019-07-24T02:54:29Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "222.205.8.190", "userAgent": "aws-cli/1.11.13 Python/3.5.2 Linux/4.4.0-62-generic botocore/1.4.70", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"nextToken": "eyJ2IjoiMiIsImMiOiJFTHNieTM1K1dXSXJuTk91Ym14Z2poMFIzMVBjelltSFZOWFpLMk1hZ05hV2hlOGRPaGY5STlBT3ZEQTRwTFJoZ3NGL1NMWFJib2Jhd1YxNW5WN2VkeHA5ZXl5VWVmdzRwZDh3VEltdU9sNHEvWGZ6TENnVEFvV1hmNUl4N1ZhK0l1L2dCc3RDeTNtbmFGSEIzV1FJbUlVYmMwTDRHaFVPVTAxd2I5UEN1cTVNc3k0bGp4c0tRYXVLRitnVVJaMXVNb2srU2ova1Y2LzR6WGlvSWpiZnBMbWViZ0NFOU1VPSIsInMiOiIxIn0=", "maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "0627e664-87c7-4acb-91d1-49e39ef4ba2e", "record_id": "flaws_cloudtrail:0000018:0627e664-87c7-4acb-91d1-49e39ef4ba2e", "row_index": 18, "timestamp": "2019-07-24T02:54:29Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "222.205.8.190", "user_agent": "aws-cli/1.11.13 Python/3.5.2 Linux/4.4.0-62-generic botocore/1.4.70", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1105, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "0627e664-87c7-4acb-91d1-49e39ef4ba2e", "eventTime": "2019-07-24T02:54:29Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "222.205.8.190", "userAgent": "aws-cli/1.11.13 Python/3.5.2 Linux/4.4.0-62-generic botocore/1.4.70", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"nextToken": "eyJ2IjoiMiIsImMiOiJFTHNieTM1K1dXSXJuTk91Ym14Z2poMFIzMVBjelltSFZOWFpLMk1hZ05hV2hlOGRPaGY5STlBT3ZEQTRwTFJoZ3NGL1NMWFJib2Jhd1YxNW5WN2VkeHA5ZXl5VWVmdzRwZDh3VEltdU9sNHEvWGZ6TENnVEFvV1hmNUl4N1ZhK0l1L2dCc3RDeTNtbmFGSEIzV1FJbUlVYmMwTDRHaFVPVTAxd2I5UEN1cTVNc3k0bGp4c0tRYXVLRitnVVJaMXVNb2srU2ova1Y2LzR6WGlvSWpiZnBMbWViZ0NFOU1VPSIsInMiOiIxIn0=", "maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "b82a6ae5-7284-4fef-9b01-02e4c9f0720c", "record_id": "flaws_cloudtrail:0000019:b82a6ae5-7284-4fef-9b01-02e4c9f0720c", "row_index": 19, "timestamp": "2019-07-24T02:54:30Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "222.205.8.190", "user_agent": "aws-cli/1.11.13 Python/3.5.2 Linux/4.4.0-62-generic botocore/1.4.70", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1093, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "b82a6ae5-7284-4fef-9b01-02e4c9f0720c", "eventTime": "2019-07-24T02:54:30Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "222.205.8.190", "userAgent": "aws-cli/1.11.13 Python/3.5.2 Linux/4.4.0-62-generic botocore/1.4.70", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"nextToken": "eyJ2IjoiMiIsImMiOiI0UG00Wk5McXJiYkl3VzFkUDJrTW0wc08reHluRnJadzkveEkxUmhaYVBkK3RBMXJqUE9TV09sMDRFdFJpWlhKM3ZKTDR5bjhFVFQxRExDKzJTcHN5MGdIU0ZIRldIOVVoWmtQbWFwMGRtQXphNUhKUEhqWW10Y0FmalRXeFd4amdXZGtSWEc5K2VMRDBpTnJFKzRzOE1XYzVZVnFrVHNsZUlFSVJZbHk2eWdhRUdNVXJodHN6SWlmT3BCVjZNSmlCc1FJUVQxbUJWdEV2dUhuMmxPcThBPT0iLCJzIjoiMSJ9", "maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "b82a6ae5-7284-4fef-9b01-02e4c9f0720c", "record_id": "flaws_cloudtrail:0000020:b82a6ae5-7284-4fef-9b01-02e4c9f0720c", "row_index": 20, "timestamp": "2019-07-24T02:54:30Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "222.205.8.190", "user_agent": "aws-cli/1.11.13 Python/3.5.2 Linux/4.4.0-62-generic botocore/1.4.70", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1093, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "b82a6ae5-7284-4fef-9b01-02e4c9f0720c", "eventTime": "2019-07-24T02:54:30Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "222.205.8.190", "userAgent": "aws-cli/1.11.13 Python/3.5.2 Linux/4.4.0-62-generic botocore/1.4.70", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"nextToken": "eyJ2IjoiMiIsImMiOiI0UG00Wk5McXJiYkl3VzFkUDJrTW0wc08reHluRnJadzkveEkxUmhaYVBkK3RBMXJqUE9TV09sMDRFdFJpWlhKM3ZKTDR5bjhFVFQxRExDKzJTcHN5MGdIU0ZIRldIOVVoWmtQbWFwMGRtQXphNUhKUEhqWW10Y0FmalRXeFd4amdXZGtSWEc5K2VMRDBpTnJFKzRzOE1XYzVZVnFrVHNsZUlFSVJZbHk2eWdhRUdNVXJodHN6SWlmT3BCVjZNSmlCc1FJUVQxbUJWdEV2dUhuMmxPcThBPT0iLCJzIjoiMSJ9", "maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "91db04f8-6fb1-4cfd-a7f0-7d461067fada8", "record_id": "flaws_cloudtrail:0000021:91db04f8-6fb1-4cfd-a7f0-7d461067fada8", "row_index": 21, "timestamp": "2019-07-24T02:54:31Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "222.205.8.190", "user_agent": "aws-cli/1.11.13 Python/3.5.2 Linux/4.4.0-62-generic botocore/1.4.70", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1106, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "91db04f8-6fb1-4cfd-a7f0-7d461067fada8", "eventTime": "2019-07-24T02:54:31Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "222.205.8.190", "userAgent": "aws-cli/1.11.13 Python/3.5.2 Linux/4.4.0-62-generic botocore/1.4.70", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"nextToken": "eyJ2IjoiMiIsImMiOiJuVnJFNkZMUTdHSlpOMlFrK0pmb0h6VjFvZGEzYlQrOFFBT2NKYk1BT3YyK3haRnZxWGprOVBpN0lDN1RHd0E4KzVHbFl2MUZ3VlZycmlmSVFwNlhaYzA1ZlR2dk41cDc5YnVxN012VjJrT1FySW00NGRjYk8xNnorTkFRcGtGem9Md2FiTWpCV1NKZkxEbGlnaWNBNDU1NW1uZTdmT3g1OTU5MU9Xa2tkcW5qM051STVvemdvek1ySWFLZENhd2xON3oxYW9mU1JOUzhOS2Y3N0lYZ2ZNUWhQZGZibjhzPSIsInMiOiIxIn0=", "maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "91db04f8-6fb1-4cfd-a7f0-7d461067fada8", "record_id": "flaws_cloudtrail:0000022:91db04f8-6fb1-4cfd-a7f0-7d461067fada8", "row_index": 22, "timestamp": "2019-07-24T02:54:31Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "222.205.8.190", "user_agent": "aws-cli/1.11.13 Python/3.5.2 Linux/4.4.0-62-generic botocore/1.4.70", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1106, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "91db04f8-6fb1-4cfd-a7f0-7d461067fada8", "eventTime": "2019-07-24T02:54:31Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "222.205.8.190", "userAgent": "aws-cli/1.11.13 Python/3.5.2 Linux/4.4.0-62-generic botocore/1.4.70", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"nextToken": "eyJ2IjoiMiIsImMiOiJuVnJFNkZMUTdHSlpOMlFrK0pmb0h6VjFvZGEzYlQrOFFBT2NKYk1BT3YyK3haRnZxWGprOVBpN0lDN1RHd0E4KzVHbFl2MUZ3VlZycmlmSVFwNlhaYzA1ZlR2dk41cDc5YnVxN012VjJrT1FySW00NGRjYk8xNnorTkFRcGtGem9Md2FiTWpCV1NKZkxEbGlnaWNBNDU1NW1uZTdmT3g1OTU5MU9Xa2tkcW5qM051STVvemdvek1ySWFLZENhd2xON3oxYW9mU1JOUzhOS2Y3N0lYZ2ZNUWhQZGZibjhzPSIsInMiOiIxIn0=", "maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "3332a943-015c-4b9c-a975-e0af25200", "record_id": "flaws_cloudtrail:0000023:3332a943-015c-4b9c-a975-e0af25200", "row_index": 23, "timestamp": "2019-07-24T02:54:32Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "222.205.8.190", "user_agent": "aws-cli/1.11.13 Python/3.5.2 Linux/4.4.0-62-generic botocore/1.4.70", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1057, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "3332a943-015c-4b9c-a975-e0af25200", "eventTime": "2019-07-24T02:54:32Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "222.205.8.190", "userAgent": "aws-cli/1.11.13 Python/3.5.2 Linux/4.4.0-62-generic botocore/1.4.70", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"nextToken": "eyJ2IjoiMiIsImMiOiJZazN4RFhNem5vV0Z2cU1GWTdWclQ5bEU2VnFQSVpLVDJkcUxDd2Q2czVQS005SmEyOU13Y0NmdFpmblBWbTJRYVFBVS9YV2lCaW9yOEwyWkp5MjFabTdsYmtUeWE5TWE3S1lLajNINkEwd01jK2tQMGRVWGo0aC96aHFmSUViekZnV3NadFV0Z3VIcTc3dEkxZVpESi9IWndBTU5nSWhWRHQrTTZaRVpDaGhCMXpIWElGdXppa2F5a0l4YysrND0iLCJzIjoiMSJ9", "maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "3332a943-015c-4b9c-a975-e0af25200", "record_id": "flaws_cloudtrail:0000024:3332a943-015c-4b9c-a975-e0af25200", "row_index": 24, "timestamp": "2019-07-24T02:54:32Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "222.205.8.190", "user_agent": "aws-cli/1.11.13 Python/3.5.2 Linux/4.4.0-62-generic botocore/1.4.70", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1057, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "3332a943-015c-4b9c-a975-e0af25200", "eventTime": "2019-07-24T02:54:32Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "222.205.8.190", "userAgent": "aws-cli/1.11.13 Python/3.5.2 Linux/4.4.0-62-generic botocore/1.4.70", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"nextToken": "eyJ2IjoiMiIsImMiOiJZazN4RFhNem5vV0Z2cU1GWTdWclQ5bEU2VnFQSVpLVDJkcUxDd2Q2czVQS005SmEyOU13Y0NmdFpmblBWbTJRYVFBVS9YV2lCaW9yOEwyWkp5MjFabTdsYmtUeWE5TWE3S1lLajNINkEwd01jK2tQMGRVWGo0aC96aHFmSUViekZnV3NadFV0Z3VIcTc3dEkxZVpESi9IWndBTU5nSWhWRHQrTTZaRVpDaGhCMXpIWElGdXppa2F5a0l4YysrND0iLCJzIjoiMSJ9", "maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "2daddcd3-57c0-48bc-97ba-faca3a1ae8d6", "record_id": "flaws_cloudtrail:0000025:2daddcd3-57c0-48bc-97ba-faca3a1ae8d6", "row_index": 25, "timestamp": "2019-07-24T02:54:33Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "222.205.8.190", "user_agent": "aws-cli/1.11.13 Python/3.5.2 Linux/4.4.0-62-generic botocore/1.4.70", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1105, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "2daddcd3-57c0-48bc-97ba-faca3a1ae8d6", "eventTime": "2019-07-24T02:54:33Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "222.205.8.190", "userAgent": "aws-cli/1.11.13 Python/3.5.2 Linux/4.4.0-62-generic botocore/1.4.70", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"nextToken": "eyJ2IjoiMiIsImMiOiJ4M21lcCs3TWxEdnlyZFlIa00vKzE5L0ZxYmlNYW4wVGNoMUptR2tCMktLbzFEaUUyZFNXb2t0QWhjUGRxMi9oeGRpblIvamFuZkRyWkZDKzRBamhpWGhGS0tqOU5WcVcvM1l6NzVnRHFEellhZVdxQUcwWWpGSWdaOGhiR3o2L0pwa2RCT1pZMzBKNnJ5TmZLWGg2aHNqb1hTK1JKclNLRTRqclVGbTBLOEpscWpyVWQ4VVkrcVN3cTBVdU10U3l6Z2llY096SElXN2hncThFN0xDbStzNEhlY3hBRHo0PSIsInMiOiIxIn0=", "maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "2daddcd3-57c0-48bc-97ba-faca3a1ae8d6", "record_id": "flaws_cloudtrail:0000026:2daddcd3-57c0-48bc-97ba-faca3a1ae8d6", "row_index": 26, "timestamp": "2019-07-24T02:54:33Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "222.205.8.190", "user_agent": "aws-cli/1.11.13 Python/3.5.2 Linux/4.4.0-62-generic botocore/1.4.70", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1105, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "2daddcd3-57c0-48bc-97ba-faca3a1ae8d6", "eventTime": "2019-07-24T02:54:33Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "222.205.8.190", "userAgent": "aws-cli/1.11.13 Python/3.5.2 Linux/4.4.0-62-generic botocore/1.4.70", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"nextToken": "eyJ2IjoiMiIsImMiOiJ4M21lcCs3TWxEdnlyZFlIa00vKzE5L0ZxYmlNYW4wVGNoMUptR2tCMktLbzFEaUUyZFNXb2t0QWhjUGRxMi9oeGRpblIvamFuZkRyWkZDKzRBamhpWGhGS0tqOU5WcVcvM1l6NzVnRHFEellhZVdxQUcwWWpGSWdaOGhiR3o2L0pwa2RCT1pZMzBKNnJ5TmZLWGg2aHNqb1hTK1JKclNLRTRqclVGbTBLOEpscWpyVWQ4VVkrcVN3cTBVdU10U3l6Z2llY096SElXN2hncThFN0xDbStzNEhlY3hBRHo0PSIsInMiOiIxIn0=", "maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "346db65d-f5ec-42c3-978b-57ea7f948386", "record_id": "flaws_cloudtrail:0000027:346db65d-f5ec-42c3-978b-57ea7f948386", "row_index": 27, "timestamp": "2019-07-24T02:54:34Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "222.205.8.190", "user_agent": "aws-cli/1.11.13 Python/3.5.2 Linux/4.4.0-62-generic botocore/1.4.70", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1093, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "346db65d-f5ec-42c3-978b-57ea7f948386", "eventTime": "2019-07-24T02:54:34Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "222.205.8.190", "userAgent": "aws-cli/1.11.13 Python/3.5.2 Linux/4.4.0-62-generic botocore/1.4.70", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"nextToken": "eyJ2IjoiMiIsImMiOiI5VnFZMmF3a05PMDhxbVhTMGtCcmYydFFkNHgxK2daUUF4S0dCUVlXU3dYY3hOZ0Y2SUQyYW1jdGNPVER0a01xNy9ZTUs2OEk2ZFh4OVJMQVFSVjZ3Z0RiblJDTHpER25Hdk9SZkcwM3NtUmhHKzFhcklCOHFTYWFUS01wbGdPUVI1K1Y3dnRLUUlldDY3SlNRckhQQkFUeXE4TzF3WXpsbWFQUnJwYTBzaC8zTDZRK0pqOG41V0gwY1Z1dEYyNXpKRnpDMWZEZ1NrcmNDNCs0ZlNSTWN3PT0iLCJzIjoiMSJ9", "maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "346db65d-f5ec-42c3-978b-57ea7f948386", "record_id": "flaws_cloudtrail:0000028:346db65d-f5ec-42c3-978b-57ea7f948386", "row_index": 28, "timestamp": "2019-07-24T02:54:34Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "222.205.8.190", "user_agent": "aws-cli/1.11.13 Python/3.5.2 Linux/4.4.0-62-generic botocore/1.4.70", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1093, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "346db65d-f5ec-42c3-978b-57ea7f948386", "eventTime": "2019-07-24T02:54:34Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "222.205.8.190", "userAgent": "aws-cli/1.11.13 Python/3.5.2 Linux/4.4.0-62-generic botocore/1.4.70", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"nextToken": "eyJ2IjoiMiIsImMiOiI5VnFZMmF3a05PMDhxbVhTMGtCcmYydFFkNHgxK2daUUF4S0dCUVlXU3dYY3hOZ0Y2SUQyYW1jdGNPVER0a01xNy9ZTUs2OEk2ZFh4OVJMQVFSVjZ3Z0RiblJDTHpER25Hdk9SZkcwM3NtUmhHKzFhcklCOHFTYWFUS01wbGdPUVI1K1Y3dnRLUUlldDY3SlNRckhQQkFUeXE4TzF3WXpsbWFQUnJwYTBzaC8zTDZRK0pqOG41V0gwY1Z1dEYyNXpKRnpDMWZEZ1NrcmNDNCs0ZlNSTWN3PT0iLCJzIjoiMSJ9", "maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "09b8be23-7d85-4ba5-8dd8-3342d7373dbf", "record_id": "flaws_cloudtrail:0000029:09b8be23-7d85-4ba5-8dd8-3342d7373dbf", "row_index": 29, "timestamp": "2019-07-24T02:54:35Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "222.205.8.190", "user_agent": "aws-cli/1.11.13 Python/3.5.2 Linux/4.4.0-62-generic botocore/1.4.70", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1105, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "09b8be23-7d85-4ba5-8dd8-3342d7373dbf", "eventTime": "2019-07-24T02:54:35Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "222.205.8.190", "userAgent": "aws-cli/1.11.13 Python/3.5.2 Linux/4.4.0-62-generic botocore/1.4.70", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"nextToken": "eyJ2IjoiMiIsImMiOiIwa0UvZUVkeFdCTEk1UGZNZVZZV2VMcnBDdVRQejlnYXdxTFhaZi9rWDBEanBlNUQ3UmZYMW1OeTJuUTdydGN0VTFYaGR4UHdmSmk1YU4xb2sxaCtmM1R3NnY5cHE2WDVTb1ZrUW0vbGdRNUY1V2NJUXZGeTA2ajdaKy8rRXk0aURTVG55UWttV2o3WTY4ZmZKMkhISW12dFNoamJiRVVIdm5JcVJCaVU5RmJnOE9FS0tia0VPWEc0YjQ0ZEZGTk1tLzliQ0Q2cU1JOGc5ZkpxTlBGWUtzcTVCQzRGbzNVPSIsInMiOiIxIn0=", "maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "09b8be23-7d85-4ba5-8dd8-3342d7373dbf", "record_id": "flaws_cloudtrail:0000030:09b8be23-7d85-4ba5-8dd8-3342d7373dbf", "row_index": 30, "timestamp": "2019-07-24T02:54:35Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "222.205.8.190", "user_agent": "aws-cli/1.11.13 Python/3.5.2 Linux/4.4.0-62-generic botocore/1.4.70", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1105, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "09b8be23-7d85-4ba5-8dd8-3342d7373dbf", "eventTime": "2019-07-24T02:54:35Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "222.205.8.190", "userAgent": "aws-cli/1.11.13 Python/3.5.2 Linux/4.4.0-62-generic botocore/1.4.70", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"nextToken": "eyJ2IjoiMiIsImMiOiIwa0UvZUVkeFdCTEk1UGZNZVZZV2VMcnBDdVRQejlnYXdxTFhaZi9rWDBEanBlNUQ3UmZYMW1OeTJuUTdydGN0VTFYaGR4UHdmSmk1YU4xb2sxaCtmM1R3NnY5cHE2WDVTb1ZrUW0vbGdRNUY1V2NJUXZGeTA2ajdaKy8rRXk0aURTVG55UWttV2o3WTY4ZmZKMkhISW12dFNoamJiRVVIdm5JcVJCaVU5RmJnOE9FS0tia0VPWEc0YjQ0ZEZGTk1tLzliQ0Q2cU1JOGc5ZkpxTlBGWUtzcTVCQzRGbzNVPSIsInMiOiIxIn0=", "maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "c2fe5ee3-db57-4da0-a851-44924e142e8", "record_id": "flaws_cloudtrail:0000031:c2fe5ee3-db57-4da0-a851-44924e142e8", "row_index": 31, "timestamp": "2019-07-24T02:54:36Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "222.205.8.190", "user_agent": "aws-cli/1.11.13 Python/3.5.2 Linux/4.4.0-62-generic botocore/1.4.70", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1092, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "c2fe5ee3-db57-4da0-a851-44924e142e8", "eventTime": "2019-07-24T02:54:36Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "222.205.8.190", "userAgent": "aws-cli/1.11.13 Python/3.5.2 Linux/4.4.0-62-generic botocore/1.4.70", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"nextToken": "eyJ2IjoiMiIsImMiOiJISFFqbGVYVWFncmo0am44Tkw0ZnE4cEQzYjZrWXZ3V3Q2bmZDNHRzckNiWkRqMGtPZHNEa2lSTUlTdVRDdGcrSWxWYzg0QmNMb1V1THFYOGw2elg3SytHL0c5eFJSaGl2Y3o1ZkRpUnVyRFoyNnVWR0JpZTFxcjdwemRqOWxTMXNWd2dHU3A1SnduelRzeC9KVE5jM2pKUHhWT25jU3BMbGtidS93eG1SdTAyL3liNFdHTmhpSVh5STM0c1g1NjQyRWdWVnRQTFFDME5UdVRLNFdSTTZ3PT0iLCJzIjoiMSJ9", "maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "c2fe5ee3-db57-4da0-a851-44924e142e8", "record_id": "flaws_cloudtrail:0000032:c2fe5ee3-db57-4da0-a851-44924e142e8", "row_index": 32, "timestamp": "2019-07-24T02:54:36Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "222.205.8.190", "user_agent": "aws-cli/1.11.13 Python/3.5.2 Linux/4.4.0-62-generic botocore/1.4.70", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1092, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "c2fe5ee3-db57-4da0-a851-44924e142e8", "eventTime": "2019-07-24T02:54:36Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "222.205.8.190", "userAgent": "aws-cli/1.11.13 Python/3.5.2 Linux/4.4.0-62-generic botocore/1.4.70", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"nextToken": "eyJ2IjoiMiIsImMiOiJISFFqbGVYVWFncmo0am44Tkw0ZnE4cEQzYjZrWXZ3V3Q2bmZDNHRzckNiWkRqMGtPZHNEa2lSTUlTdVRDdGcrSWxWYzg0QmNMb1V1THFYOGw2elg3SytHL0c5eFJSaGl2Y3o1ZkRpUnVyRFoyNnVWR0JpZTFxcjdwemRqOWxTMXNWd2dHU3A1SnduelRzeC9KVE5jM2pKUHhWT25jU3BMbGtidS93eG1SdTAyL3liNFdHTmhpSVh5STM0c1g1NjQyRWdWVnRQTFFDME5UdVRLNFdSTTZ3PT0iLCJzIjoiMSJ9", "maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "d086327ad-9199-40a8-983e-9a27aef0370b", "record_id": "flaws_cloudtrail:0000033:d086327ad-9199-40a8-983e-9a27aef0370b", "row_index": 33, "timestamp": "2019-07-24T02:54:37Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "222.205.8.190", "user_agent": "aws-cli/1.11.13 Python/3.5.2 Linux/4.4.0-62-generic botocore/1.4.70", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1107, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "d086327ad-9199-40a8-983e-9a27aef0370b", "eventTime": "2019-07-24T02:54:37Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "222.205.8.190", "userAgent": "aws-cli/1.11.13 Python/3.5.2 Linux/4.4.0-62-generic botocore/1.4.70", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"nextToken": "eyJ2IjoiMiIsImMiOiJ5d0pPd3l0dDRkaXJldlN0WmhRTDUrRUQ0STd4VGZ6WmYyNk5zRTlISTRoU0pUdW5IWG9lY3lmTlorL2p6YzBoVWdsRzV5NTZKZDZudXF2M2o3Vk5VbUJTR25sR2s3OEFYLzFIRTdkd3ppQjRsV1BTQUdKRXh2Ym0vdjlaR3FwYmI0VTNVdHNvYnN3TXRFVEQxM3YyMjNHR2x0MEZNay85cHBiZnd1bVBmVFdjSmpmenduTWdQZWJCZmRudEcvZ3dsbUUyRCthNDRMQW5JNVRMMVR1dlVQR25xOHF1cE0wPSIsInMiOiIxIn0=", "maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "d086327ad-9199-40a8-983e-9a27aef0370b", "record_id": "flaws_cloudtrail:0000034:d086327ad-9199-40a8-983e-9a27aef0370b", "row_index": 34, "timestamp": "2019-07-24T02:54:37Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "222.205.8.190", "user_agent": "aws-cli/1.11.13 Python/3.5.2 Linux/4.4.0-62-generic botocore/1.4.70", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1107, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "d086327ad-9199-40a8-983e-9a27aef0370b", "eventTime": "2019-07-24T02:54:37Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "222.205.8.190", "userAgent": "aws-cli/1.11.13 Python/3.5.2 Linux/4.4.0-62-generic botocore/1.4.70", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"nextToken": "eyJ2IjoiMiIsImMiOiJ5d0pPd3l0dDRkaXJldlN0WmhRTDUrRUQ0STd4VGZ6WmYyNk5zRTlISTRoU0pUdW5IWG9lY3lmTlorL2p6YzBoVWdsRzV5NTZKZDZudXF2M2o3Vk5VbUJTR25sR2s3OEFYLzFIRTdkd3ppQjRsV1BTQUdKRXh2Ym0vdjlaR3FwYmI0VTNVdHNvYnN3TXRFVEQxM3YyMjNHR2x0MEZNay85cHBiZnd1bVBmVFdjSmpmenduTWdQZWJCZmRudEcvZ3dsbUUyRCthNDRMQW5JNVRMMVR1dlVQR25xOHF1cE0wPSIsInMiOiIxIn0=", "maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "57815f-ec80-4ba0-8a32-7bfca2b0628f", "record_id": "flaws_cloudtrail:0000035:57815f-ec80-4ba0-8a32-7bfca2b0628f", "row_index": 35, "timestamp": "2019-07-24T02:54:38Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "222.205.8.190", "user_agent": "aws-cli/1.11.13 Python/3.5.2 Linux/4.4.0-62-generic botocore/1.4.70", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1059, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "57815f-ec80-4ba0-8a32-7bfca2b0628f", "eventTime": "2019-07-24T02:54:38Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "222.205.8.190", "userAgent": "aws-cli/1.11.13 Python/3.5.2 Linux/4.4.0-62-generic botocore/1.4.70", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"nextToken": "eyJ2IjoiMiIsImMiOiI1d2sxNW5Wa1dHZEVGTDRHd2RjWVl5WDR4QnRHT3hGRi9qRzJZVFUrSjlXMEZ2TXB4cEpOQlhUOTJGTzc5cHVGeG40UVNlUVB3bjRaWDY5MnRUbXF0SU9QSkl3Qm5xNHU2QkI1dklNSlhiREdRNnova1RDei8yMlNJU2szZmJxc2FYUmFHZzZJbVRjbG5ET3BOcDR4MjI1ZFYrWnZuREh6bmxUQ3ZjZDlCbHF1aU1sS0lvOTdiVmlNSmVPODIrcz0iLCJzIjoiMSJ9", "maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "57815f-ec80-4ba0-8a32-7bfca2b0628f", "record_id": "flaws_cloudtrail:0000036:57815f-ec80-4ba0-8a32-7bfca2b0628f", "row_index": 36, "timestamp": "2019-07-24T02:54:38Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "222.205.8.190", "user_agent": "aws-cli/1.11.13 Python/3.5.2 Linux/4.4.0-62-generic botocore/1.4.70", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1059, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "57815f-ec80-4ba0-8a32-7bfca2b0628f", "eventTime": "2019-07-24T02:54:38Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "222.205.8.190", "userAgent": "aws-cli/1.11.13 Python/3.5.2 Linux/4.4.0-62-generic botocore/1.4.70", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"nextToken": "eyJ2IjoiMiIsImMiOiI1d2sxNW5Wa1dHZEVGTDRHd2RjWVl5WDR4QnRHT3hGRi9qRzJZVFUrSjlXMEZ2TXB4cEpOQlhUOTJGTzc5cHVGeG40UVNlUVB3bjRaWDY5MnRUbXF0SU9QSkl3Qm5xNHU2QkI1dklNSlhiREdRNnova1RDei8yMlNJU2szZmJxc2FYUmFHZzZJbVRjbG5ET3BOcDR4MjI1ZFYrWnZuREh6bmxUQ3ZjZDlCbHF1aU1sS0lvOTdiVmlNSmVPODIrcz0iLCJzIjoiMSJ9", "maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "7ece8f45-6703-4d57-910e-bc5f74497c32", "record_id": "flaws_cloudtrail:0000037:7ece8f45-6703-4d57-910e-bc5f74497c32", "row_index": 37, "timestamp": "2019-07-24T02:54:57Z", "event_type": "DescribeImages", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "7.254.250.215", "user_agent": "aws-cli/1.16.113 Python/3.7.4 Linux/4.9.125-linuxkit botocore/1.12.103", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 765, "raw_record_depth": 5, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "7ece8f45-6703-4d57-910e-bc5f74497c32", "eventTime": "2019-07-24T02:54:57Z", "eventName": "DescribeImages", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "7.254.250.215", "userAgent": "aws-cli/1.16.113 Python/3.7.4 Linux/4.9.125-linuxkit botocore/1.12.103", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"executableBySet": {}, "imagesSet": {}, "ownersSet": {"items": [{"owner": "self"}]}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "7ece8f45-6703-4d57-910e-bc5f74497c32", "record_id": "flaws_cloudtrail:0000038:7ece8f45-6703-4d57-910e-bc5f74497c32", "row_index": 38, "timestamp": "2019-07-24T02:54:57Z", "event_type": "DescribeImages", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "7.254.250.215", "user_agent": "aws-cli/1.16.113 Python/3.7.4 Linux/4.9.125-linuxkit botocore/1.12.103", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 765, "raw_record_depth": 5, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "7ece8f45-6703-4d57-910e-bc5f74497c32", "eventTime": "2019-07-24T02:54:57Z", "eventName": "DescribeImages", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "7.254.250.215", "userAgent": "aws-cli/1.16.113 Python/3.7.4 Linux/4.9.125-linuxkit botocore/1.12.103", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"executableBySet": {}, "imagesSet": {}, "ownersSet": {"items": [{"owner": "self"}]}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "d805e415-a73c-4502-91d9-4b520e6c0751", "record_id": "flaws_cloudtrail:0000039:d805e415-a73c-4502-91d9-4b520e6c0751", "row_index": 39, "timestamp": "2019-07-24T03:03:27Z", "event_type": "GetCallerIdentity", "event_source": "sts.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "7.254.250.215", "user_agent": "aws-cli/1.16.113 Python/3.7.4 Linux/4.9.125-linuxkit botocore/1.12.103", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 780, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "d805e415-a73c-4502-91d9-4b520e6c0751", "eventTime": "2019-07-24T03:03:27Z", "eventName": "GetCallerIdentity", "eventSource": "sts.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "7.254.250.215", "userAgent": "aws-cli/1.16.113 Python/3.7.4 Linux/4.9.125-linuxkit botocore/1.12.103", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "responseElements": {"userId": "AIDA9BO36HFBHKGJAO9C1", "account": "811596193553", "arn": "arn:aws:iam::811596193553:user/backup"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "d805e415-a73c-4502-91d9-4b520e6c0751", "record_id": "flaws_cloudtrail:0000040:d805e415-a73c-4502-91d9-4b520e6c0751", "row_index": 40, "timestamp": "2019-07-24T03:03:27Z", "event_type": "GetCallerIdentity", "event_source": "sts.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "7.254.250.215", "user_agent": "aws-cli/1.16.113 Python/3.7.4 Linux/4.9.125-linuxkit botocore/1.12.103", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 780, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "d805e415-a73c-4502-91d9-4b520e6c0751", "eventTime": "2019-07-24T03:03:27Z", "eventName": "GetCallerIdentity", "eventSource": "sts.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "7.254.250.215", "userAgent": "aws-cli/1.16.113 Python/3.7.4 Linux/4.9.125-linuxkit botocore/1.12.103", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "responseElements": {"userId": "AIDA9BO36HFBHKGJAO9C1", "account": "811596193553", "arn": "arn:aws:iam::811596193553:user/backup"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "36708c57-d0af-4095-a44b-bec9ef903f6b", "record_id": "flaws_cloudtrail:0000041:36708c57-d0af-4095-a44b-bec9ef903f6b", "row_index": 41, "timestamp": "2019-07-24T03:05:20Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "7.254.250.215", "user_agent": "aws-cli/1.16.113 Python/3.7.4 Linux/4.9.125-linuxkit botocore/1.12.103", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 761, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "36708c57-d0af-4095-a44b-bec9ef903f6b", "eventTime": "2019-07-24T03:05:20Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "7.254.250.215", "userAgent": "aws-cli/1.16.113 Python/3.7.4 Linux/4.9.125-linuxkit botocore/1.12.103", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "36708c57-d0af-4095-a44b-bec9ef903f6b", "record_id": "flaws_cloudtrail:0000042:36708c57-d0af-4095-a44b-bec9ef903f6b", "row_index": 42, "timestamp": "2019-07-24T03:05:20Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "7.254.250.215", "user_agent": "aws-cli/1.16.113 Python/3.7.4 Linux/4.9.125-linuxkit botocore/1.12.103", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 761, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "36708c57-d0af-4095-a44b-bec9ef903f6b", "eventTime": "2019-07-24T03:05:20Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "7.254.250.215", "userAgent": "aws-cli/1.16.113 Python/3.7.4 Linux/4.9.125-linuxkit botocore/1.12.103", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "fad904d7-82ce-4208-9394-31327e37b", "record_id": "flaws_cloudtrail:0000043:fad904d7-82ce-4208-9394-31327e37b", "row_index": 43, "timestamp": "2019-07-24T03:05:22Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "7.254.250.215", "user_agent": "aws-cli/1.16.113 Python/3.7.4 Linux/4.9.125-linuxkit botocore/1.12.103", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1077, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "fad904d7-82ce-4208-9394-31327e37b", "eventTime": "2019-07-24T03:05:22Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "7.254.250.215", "userAgent": "aws-cli/1.16.113 Python/3.7.4 Linux/4.9.125-linuxkit botocore/1.12.103", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"nextToken": "eyJ2IjoiMiIsImMiOiJvMHc2M1JyL1ZXRjhXbjg4bDlxWHJIU2FVVGlWT3BOOUl4cWdYRFR4VDg1OGFVbTc2b2RlNW56eVJleFJjTFZRd01kYWdvdS9idkdKM2JaQjN5dTBlWUJQVEEvb0pUa1lyc0F4ZWpBc0ZCOExucHhHd1JHc1o1bWl1S3FVTG1Jb0dtVzdEdzh5Q2xoZ0dCSkhrQWprWVpiNkthVEVka1RSdkRxdzRDY0ExZWduOC9WS29ab2c2UmY2L3JSa3dTNkdKWjNzTXM0ZTJuQT0iLCJzIjoiMSJ9", "maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "fad904d7-82ce-4208-9394-31327e37b", "record_id": "flaws_cloudtrail:0000044:fad904d7-82ce-4208-9394-31327e37b", "row_index": 44, "timestamp": "2019-07-24T03:05:22Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "7.254.250.215", "user_agent": "aws-cli/1.16.113 Python/3.7.4 Linux/4.9.125-linuxkit botocore/1.12.103", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1077, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "fad904d7-82ce-4208-9394-31327e37b", "eventTime": "2019-07-24T03:05:22Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "7.254.250.215", "userAgent": "aws-cli/1.16.113 Python/3.7.4 Linux/4.9.125-linuxkit botocore/1.12.103", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"nextToken": "eyJ2IjoiMiIsImMiOiJvMHc2M1JyL1ZXRjhXbjg4bDlxWHJIU2FVVGlWT3BOOUl4cWdYRFR4VDg1OGFVbTc2b2RlNW56eVJleFJjTFZRd01kYWdvdS9idkdKM2JaQjN5dTBlWUJQVEEvb0pUa1lyc0F4ZWpBc0ZCOExucHhHd1JHc1o1bWl1S3FVTG1Jb0dtVzdEdzh5Q2xoZ0dCSkhrQWprWVpiNkthVEVka1RSdkRxdzRDY0ExZWduOC9WS29ab2c2UmY2L3JSa3dTNkdKWjNzTXM0ZTJuQT0iLCJzIjoiMSJ9", "maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "2b250b71-1407-4ba9-9db4-a0284be93c30", "record_id": "flaws_cloudtrail:0000045:2b250b71-1407-4ba9-9db4-a0284be93c30", "row_index": 45, "timestamp": "2019-07-24T03:05:24Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "7.254.250.215", "user_agent": "aws-cli/1.16.113 Python/3.7.4 Linux/4.9.125-linuxkit botocore/1.12.103", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1088, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "2b250b71-1407-4ba9-9db4-a0284be93c30", "eventTime": "2019-07-24T03:05:24Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "7.254.250.215", "userAgent": "aws-cli/1.16.113 Python/3.7.4 Linux/4.9.125-linuxkit botocore/1.12.103", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"nextToken": "eyJ2IjoiMiIsImMiOiJKK0ZHR2FaNDByaFpVY2YwclZRRFQvQlY4djNRc1pHZE5TZ1hEVlBxeTVnUER0NUplTFV4YU5uM2h2US8yYjdvOWxBUHdiUHd2NmN3Qm1heEZ2NHlQTmg2TklESStyZmY4cWtMYmJoN21yOVlFME54YlhqQXh6dzRWT1REZTJOeDVCaFlkVnFVTUJMWjcrWnlkVWxweWE0elp1WjF5MlBKSHB3U2N1SWp0MFFMdCtUN0lLK0pWOTB2Wm1KY1h4Qm9LclVkcHMzTTROSG1kZz09IiwicyI6IjEifQ==", "maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "2b250b71-1407-4ba9-9db4-a0284be93c30", "record_id": "flaws_cloudtrail:0000046:2b250b71-1407-4ba9-9db4-a0284be93c30", "row_index": 46, "timestamp": "2019-07-24T03:05:24Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "7.254.250.215", "user_agent": "aws-cli/1.16.113 Python/3.7.4 Linux/4.9.125-linuxkit botocore/1.12.103", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1088, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "2b250b71-1407-4ba9-9db4-a0284be93c30", "eventTime": "2019-07-24T03:05:24Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "7.254.250.215", "userAgent": "aws-cli/1.16.113 Python/3.7.4 Linux/4.9.125-linuxkit botocore/1.12.103", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"nextToken": "eyJ2IjoiMiIsImMiOiJKK0ZHR2FaNDByaFpVY2YwclZRRFQvQlY4djNRc1pHZE5TZ1hEVlBxeTVnUER0NUplTFV4YU5uM2h2US8yYjdvOWxBUHdiUHd2NmN3Qm1heEZ2NHlQTmg2TklESStyZmY4cWtMYmJoN21yOVlFME54YlhqQXh6dzRWT1REZTJOeDVCaFlkVnFVTUJMWjcrWnlkVWxweWE0elp1WjF5MlBKSHB3U2N1SWp0MFFMdCtUN0lLK0pWOTB2Wm1KY1h4Qm9LclVkcHMzTTROSG1kZz09IiwicyI6IjEifQ==", "maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "8b0e9f33-7500-4639-bf94-ab4dd2134c3d", "record_id": "flaws_cloudtrail:0000047:8b0e9f33-7500-4639-bf94-ab4dd2134c3d", "row_index": 47, "timestamp": "2019-07-24T03:05:26Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "7.254.250.215", "user_agent": "aws-cli/1.16.113 Python/3.7.4 Linux/4.9.125-linuxkit botocore/1.12.103", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1088, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "8b0e9f33-7500-4639-bf94-ab4dd2134c3d", "eventTime": "2019-07-24T03:05:26Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "7.254.250.215", "userAgent": "aws-cli/1.16.113 Python/3.7.4 Linux/4.9.125-linuxkit botocore/1.12.103", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"nextToken": "eyJ2IjoiMiIsImMiOiJ3SVZtZ0VRVjdLM0tFQUpjNHRuc1FVSmIrV0hFR1c1ZDlzeFliK1dqNHFCZnRUOU1pT1pzdGNhT2VLczczc2E3RmFoei83OGMvejA1UHVBQXNtZkFuZnI4VHNYaW1ESE4rTkpEc0NZVXpvdnhPQWw3NmVzb21OUTBRQk9BQkF3TEl2TGREQ082UCszc2NCcjh5dzdZNEZBeGFObGZibHJTbngrclBnVGYzRG93OVhFNS9XZFYvL1FkQWFQbEVldUVZeHNCVlJRWXRDMzdqZz09IiwicyI6IjEifQ==", "maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "8b0e9f33-7500-4639-bf94-ab4dd2134c3d", "record_id": "flaws_cloudtrail:0000048:8b0e9f33-7500-4639-bf94-ab4dd2134c3d", "row_index": 48, "timestamp": "2019-07-24T03:05:26Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "7.254.250.215", "user_agent": "aws-cli/1.16.113 Python/3.7.4 Linux/4.9.125-linuxkit botocore/1.12.103", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1088, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "8b0e9f33-7500-4639-bf94-ab4dd2134c3d", "eventTime": "2019-07-24T03:05:26Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "7.254.250.215", "userAgent": "aws-cli/1.16.113 Python/3.7.4 Linux/4.9.125-linuxkit botocore/1.12.103", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"nextToken": "eyJ2IjoiMiIsImMiOiJ3SVZtZ0VRVjdLM0tFQUpjNHRuc1FVSmIrV0hFR1c1ZDlzeFliK1dqNHFCZnRUOU1pT1pzdGNhT2VLczczc2E3RmFoei83OGMvejA1UHVBQXNtZkFuZnI4VHNYaW1ESE4rTkpEc0NZVXpvdnhPQWw3NmVzb21OUTBRQk9BQkF3TEl2TGREQ082UCszc2NCcjh5dzdZNEZBeGFObGZibHJTbngrclBnVGYzRG93OVhFNS9XZFYvL1FkQWFQbEVldUVZeHNCVlJRWXRDMzdqZz09IiwicyI6IjEifQ==", "maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "44fde827-045e-4e0c-b81e-059eb3453103", "record_id": "flaws_cloudtrail:0000049:44fde827-045e-4e0c-b81e-059eb3453103", "row_index": 49, "timestamp": "2019-07-24T03:05:28Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "7.254.250.215", "user_agent": "aws-cli/1.16.113 Python/3.7.4 Linux/4.9.125-linuxkit botocore/1.12.103", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1080, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "44fde827-045e-4e0c-b81e-059eb3453103", "eventTime": "2019-07-24T03:05:28Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "7.254.250.215", "userAgent": "aws-cli/1.16.113 Python/3.7.4 Linux/4.9.125-linuxkit botocore/1.12.103", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"nextToken": "eyJ2IjoiMiIsImMiOiJpTm9DWUFFbjlnckNqNS9EUkJpWEtFSGdkdHhNQTJod1dybjJOSjd1WllYVHlGS0pHRGFZRWhrbStZRDVjMWxIVVpxeDB2bFVLYUMvbFNsVGpWcW9lSGp6VGRNckx2MTVqbjJqb3FFUmRCWE5WaWRFQmpTTUp2VXR3eHNsZ3ROWWRGYjdSdFBMcUFiMVZPM1JCVm0vRE81Z3JXbmJIeG1GR2NUaFpHeE9qRWs2dVlHeFNHelF0SmJ4SU9KV0lsUndic3U2N1Boc29nPT0iLCJzIjoiMSJ9", "maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "44fde827-045e-4e0c-b81e-059eb3453103", "record_id": "flaws_cloudtrail:0000050:44fde827-045e-4e0c-b81e-059eb3453103", "row_index": 50, "timestamp": "2019-07-24T03:05:28Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "7.254.250.215", "user_agent": "aws-cli/1.16.113 Python/3.7.4 Linux/4.9.125-linuxkit botocore/1.12.103", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1080, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "44fde827-045e-4e0c-b81e-059eb3453103", "eventTime": "2019-07-24T03:05:28Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "7.254.250.215", "userAgent": "aws-cli/1.16.113 Python/3.7.4 Linux/4.9.125-linuxkit botocore/1.12.103", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"nextToken": "eyJ2IjoiMiIsImMiOiJpTm9DWUFFbjlnckNqNS9EUkJpWEtFSGdkdHhNQTJod1dybjJOSjd1WllYVHlGS0pHRGFZRWhrbStZRDVjMWxIVVpxeDB2bFVLYUMvbFNsVGpWcW9lSGp6VGRNckx2MTVqbjJqb3FFUmRCWE5WaWRFQmpTTUp2VXR3eHNsZ3ROWWRGYjdSdFBMcUFiMVZPM1JCVm0vRE81Z3JXbmJIeG1GR2NUaFpHeE9qRWs2dVlHeFNHelF0SmJ4SU9KV0lsUndic3U2N1Boc29nPT0iLCJzIjoiMSJ9", "maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "54b9f17d-0cad-42e0-b439-d280731bae72", "record_id": "flaws_cloudtrail:0000051:54b9f17d-0cad-42e0-b439-d280731bae72", "row_index": 51, "timestamp": "2019-07-24T03:05:30Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "7.254.250.215", "user_agent": "aws-cli/1.16.113 Python/3.7.4 Linux/4.9.125-linuxkit botocore/1.12.103", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1088, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "54b9f17d-0cad-42e0-b439-d280731bae72", "eventTime": "2019-07-24T03:05:30Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "7.254.250.215", "userAgent": "aws-cli/1.16.113 Python/3.7.4 Linux/4.9.125-linuxkit botocore/1.12.103", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"nextToken": "eyJ2IjoiMiIsImMiOiJSb0ZIcFFnanRTLzJwY09QSDRRZ1VZM1FqYjJIY0ZIT2tCeDk5dVJQaWlPSzZjVU5tdjQ4YXhoV0ZRQnRoS2lPYktyZmFUK0dva3lCaEQwSzQrUW4xMm8yQkRueVVsZkhFMnhmWU5OUnhlMUZrMmtBYkM5VGd6cGhJSVhmUVE2cTUrLzZ5cHJ2THpZdTNwMWtXamNjZFpJZEtUYnhFRzFpZ0wwU1oxR0FOTmFNdHZSQ2s1KzU3NERDWktpUXFXcU9NbXZrL2NzNUZLUDlJUT09IiwicyI6IjEifQ==", "maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "54b9f17d-0cad-42e0-b439-d280731bae72", "record_id": "flaws_cloudtrail:0000052:54b9f17d-0cad-42e0-b439-d280731bae72", "row_index": 52, "timestamp": "2019-07-24T03:05:30Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "7.254.250.215", "user_agent": "aws-cli/1.16.113 Python/3.7.4 Linux/4.9.125-linuxkit botocore/1.12.103", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1088, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "54b9f17d-0cad-42e0-b439-d280731bae72", "eventTime": "2019-07-24T03:05:30Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "7.254.250.215", "userAgent": "aws-cli/1.16.113 Python/3.7.4 Linux/4.9.125-linuxkit botocore/1.12.103", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"nextToken": "eyJ2IjoiMiIsImMiOiJSb0ZIcFFnanRTLzJwY09QSDRRZ1VZM1FqYjJIY0ZIT2tCeDk5dVJQaWlPSzZjVU5tdjQ4YXhoV0ZRQnRoS2lPYktyZmFUK0dva3lCaEQwSzQrUW4xMm8yQkRueVVsZkhFMnhmWU5OUnhlMUZrMmtBYkM5VGd6cGhJSVhmUVE2cTUrLzZ5cHJ2THpZdTNwMWtXamNjZFpJZEtUYnhFRzFpZ0wwU1oxR0FOTmFNdHZSQ2s1KzU3NERDWktpUXFXcU9NbXZrL2NzNUZLUDlJUT09IiwicyI6IjEifQ==", "maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "b35bea3a-048a-4c6e-b1be-c1500cb3d44a", "record_id": "flaws_cloudtrail:0000053:b35bea3a-048a-4c6e-b1be-c1500cb3d44a", "row_index": 53, "timestamp": "2019-07-24T03:05:32Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "7.254.250.215", "user_agent": "aws-cli/1.16.113 Python/3.7.4 Linux/4.9.125-linuxkit botocore/1.12.103", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1088, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "b35bea3a-048a-4c6e-b1be-c1500cb3d44a", "eventTime": "2019-07-24T03:05:32Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "7.254.250.215", "userAgent": "aws-cli/1.16.113 Python/3.7.4 Linux/4.9.125-linuxkit botocore/1.12.103", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"nextToken": "eyJ2IjoiMiIsImMiOiIzRkJwc2x0Mk5BRTZ2cnRJSGNvL1cvTURGSjlIQThndkNkUEgwcmZCblpRYWVKbFpHeW1adGZyREhuV1E5M1ZaSzJCYXdPekpPbEphRWQ3cHc4cmlsdVZHS0hvaW1NNmlqZnBhdUhRazVSRTd2cVdEUElnZmhULzlPS2pkWk1hRmxlMjhMckZ3WlJSNUZLT21UZWNWak9HNmNNUVJLNzM5TFZxWitXeU8wanIzckVBYTl2bm9jOXIyNm8wLzFxbHpOUG5EWnRWVmY4a1lYZz09IiwicyI6IjEifQ==", "maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "b35bea3a-048a-4c6e-b1be-c1500cb3d44a", "record_id": "flaws_cloudtrail:0000054:b35bea3a-048a-4c6e-b1be-c1500cb3d44a", "row_index": 54, "timestamp": "2019-07-24T03:05:32Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "7.254.250.215", "user_agent": "aws-cli/1.16.113 Python/3.7.4 Linux/4.9.125-linuxkit botocore/1.12.103", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1088, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "b35bea3a-048a-4c6e-b1be-c1500cb3d44a", "eventTime": "2019-07-24T03:05:32Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "7.254.250.215", "userAgent": "aws-cli/1.16.113 Python/3.7.4 Linux/4.9.125-linuxkit botocore/1.12.103", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"nextToken": "eyJ2IjoiMiIsImMiOiIzRkJwc2x0Mk5BRTZ2cnRJSGNvL1cvTURGSjlIQThndkNkUEgwcmZCblpRYWVKbFpHeW1adGZyREhuV1E5M1ZaSzJCYXdPekpPbEphRWQ3cHc4cmlsdVZHS0hvaW1NNmlqZnBhdUhRazVSRTd2cVdEUElnZmhULzlPS2pkWk1hRmxlMjhMckZ3WlJSNUZLT21UZWNWak9HNmNNUVJLNzM5TFZxWitXeU8wanIzckVBYTl2bm9jOXIyNm8wLzFxbHpOUG5EWnRWVmY4a1lYZz09IiwicyI6IjEifQ==", "maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "fed4f65b-4e82-491d-b559-52cb82fe3740", "record_id": "flaws_cloudtrail:0000055:fed4f65b-4e82-491d-b559-52cb82fe3740", "row_index": 55, "timestamp": "2019-07-24T03:07:18Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "7.254.250.215", "user_agent": "aws-cli/1.16.113 Python/3.7.4 Linux/4.9.125-linuxkit botocore/1.12.103", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 761, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "fed4f65b-4e82-491d-b559-52cb82fe3740", "eventTime": "2019-07-24T03:07:18Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "7.254.250.215", "userAgent": "aws-cli/1.16.113 Python/3.7.4 Linux/4.9.125-linuxkit botocore/1.12.103", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "fed4f65b-4e82-491d-b559-52cb82fe3740", "record_id": "flaws_cloudtrail:0000056:fed4f65b-4e82-491d-b559-52cb82fe3740", "row_index": 56, "timestamp": "2019-07-24T03:07:18Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "7.254.250.215", "user_agent": "aws-cli/1.16.113 Python/3.7.4 Linux/4.9.125-linuxkit botocore/1.12.103", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 761, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "fed4f65b-4e82-491d-b559-52cb82fe3740", "eventTime": "2019-07-24T03:07:18Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "7.254.250.215", "userAgent": "aws-cli/1.16.113 Python/3.7.4 Linux/4.9.125-linuxkit botocore/1.12.103", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "a46e6fd2-82d3-4e30-bc56-8f0ae0e6c3e3", "record_id": "flaws_cloudtrail:0000057:a46e6fd2-82d3-4e30-bc56-8f0ae0e6c3e3", "row_index": 57, "timestamp": "2019-07-24T03:07:20Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "7.254.250.215", "user_agent": "aws-cli/1.16.113 Python/3.7.4 Linux/4.9.125-linuxkit botocore/1.12.103", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1078, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "a46e6fd2-82d3-4e30-bc56-8f0ae0e6c3e3", "eventTime": "2019-07-24T03:07:20Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "7.254.250.215", "userAgent": "aws-cli/1.16.113 Python/3.7.4 Linux/4.9.125-linuxkit botocore/1.12.103", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"nextToken": "eyJ2IjoiMiIsImMiOiJSVHdScmxKOWE2ZDUwZ3Y0NnhCQVRqa0d6U004dW9qSklwMTJkRWVvbXFwbnBicjFGREMwVTB3dmZpWHV2WG84d1hUWGFhZHIzeGMxL1lnQjZndDNycjhhWjJoRkVrWWI3RVlPVm5ES0lDVE95RldZczBmQXNZTnQyNitMZFE2RXlsTHdYVkpBSlBGVUwvdE4zRkZrZFovMUp2bTlWa3FlbXJQVTlkeWxhWUdiNWlpVWtQRC9pWFpaOTRiQzVFWXYyVFloV29vVDZ1Yz0iLCJzIjoiMSJ9", "maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "a46e6fd2-82d3-4e30-bc56-8f0ae0e6c3e3", "record_id": "flaws_cloudtrail:0000058:a46e6fd2-82d3-4e30-bc56-8f0ae0e6c3e3", "row_index": 58, "timestamp": "2019-07-24T03:07:20Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "7.254.250.215", "user_agent": "aws-cli/1.16.113 Python/3.7.4 Linux/4.9.125-linuxkit botocore/1.12.103", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1078, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "a46e6fd2-82d3-4e30-bc56-8f0ae0e6c3e3", "eventTime": "2019-07-24T03:07:20Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "7.254.250.215", "userAgent": "aws-cli/1.16.113 Python/3.7.4 Linux/4.9.125-linuxkit botocore/1.12.103", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"nextToken": "eyJ2IjoiMiIsImMiOiJSVHdScmxKOWE2ZDUwZ3Y0NnhCQVRqa0d6U004dW9qSklwMTJkRWVvbXFwbnBicjFGREMwVTB3dmZpWHV2WG84d1hUWGFhZHIzeGMxL1lnQjZndDNycjhhWjJoRkVrWWI3RVlPVm5ES0lDVE95RldZczBmQXNZTnQyNitMZFE2RXlsTHdYVkpBSlBGVUwvdE4zRkZrZFovMUp2bTlWa3FlbXJQVTlkeWxhWUdiNWlpVWtQRC9pWFpaOTRiQzVFWXYyVFloV29vVDZ1Yz0iLCJzIjoiMSJ9", "maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "5322fed9-e622-44cc-9365-3121e69b8693", "record_id": "flaws_cloudtrail:0000059:5322fed9-e622-44cc-9365-3121e69b8693", "row_index": 59, "timestamp": "2019-07-24T03:07:24Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "7.254.250.215", "user_agent": "aws-cli/1.16.113 Python/3.7.4 Linux/4.9.125-linuxkit botocore/1.12.103", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1088, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "5322fed9-e622-44cc-9365-3121e69b8693", "eventTime": "2019-07-24T03:07:24Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "7.254.250.215", "userAgent": "aws-cli/1.16.113 Python/3.7.4 Linux/4.9.125-linuxkit botocore/1.12.103", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"nextToken": "eyJ2IjoiMiIsImMiOiJoMk40MmF4OFI2YzZvMnJuVVRlaGtoT25PZGdDcUNMdWVOVlc0RlRXcE1Gay9rMTVSRzdBbEU3bXBya0Nlb3Nndm1oMFpxbHZpcFNSVjFrdXVUSklOR0hVeVMwRTcwL21UL3BRbXJJNVd3cEw0NHVxQXJkTDJsUXRiVFI5KzR2Nk03T1pJU2F5YWFZVlBoNktQWEVYc1JPVzRBdW5uL1QyWmM5MndJYytRWGlpaksvR3ZFdll0QXg2WW00N2pUYUtjQS80cTVzbkZYcm9GQT09IiwicyI6IjEifQ==", "maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "5322fed9-e622-44cc-9365-3121e69b8693", "record_id": "flaws_cloudtrail:0000060:5322fed9-e622-44cc-9365-3121e69b8693", "row_index": 60, "timestamp": "2019-07-24T03:07:24Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "7.254.250.215", "user_agent": "aws-cli/1.16.113 Python/3.7.4 Linux/4.9.125-linuxkit botocore/1.12.103", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1088, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "5322fed9-e622-44cc-9365-3121e69b8693", "eventTime": "2019-07-24T03:07:24Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "7.254.250.215", "userAgent": "aws-cli/1.16.113 Python/3.7.4 Linux/4.9.125-linuxkit botocore/1.12.103", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"nextToken": "eyJ2IjoiMiIsImMiOiJoMk40MmF4OFI2YzZvMnJuVVRlaGtoT25PZGdDcUNMdWVOVlc0RlRXcE1Gay9rMTVSRzdBbEU3bXBya0Nlb3Nndm1oMFpxbHZpcFNSVjFrdXVUSklOR0hVeVMwRTcwL21UL3BRbXJJNVd3cEw0NHVxQXJkTDJsUXRiVFI5KzR2Nk03T1pJU2F5YWFZVlBoNktQWEVYc1JPVzRBdW5uL1QyWmM5MndJYytRWGlpaksvR3ZFdll0QXg2WW00N2pUYUtjQS80cTVzbkZYcm9GQT09IiwicyI6IjEifQ==", "maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "b922584c3-7c73-4d7a-9899-e735238a4543e", "record_id": "flaws_cloudtrail:0000061:b922584c3-7c73-4d7a-9899-e735238a4543e", "row_index": 61, "timestamp": "2019-07-24T03:07:27Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "7.254.250.215", "user_agent": "aws-cli/1.16.113 Python/3.7.4 Linux/4.9.125-linuxkit botocore/1.12.103", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1090, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "b922584c3-7c73-4d7a-9899-e735238a4543e", "eventTime": "2019-07-24T03:07:27Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "7.254.250.215", "userAgent": "aws-cli/1.16.113 Python/3.7.4 Linux/4.9.125-linuxkit botocore/1.12.103", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"nextToken": "eyJ2IjoiMiIsImMiOiJxTmQrckdWc0N3TVF5amJXNHkrQXV5MUJ1NlZVUDBIb1B1eDJuR1VVaUZDemlRUHJlVm5idE1tdXZhRnoxR0NJR3I0U2pURk9uZnM5RDBMSjBRRHU5amw4ZUxGMStNRkxGNUJ5NVZxRlBJKzlERWk0N0FLcFFVbWhCeFV4MHFVbnAvTGdRNnFrNVhIMVF3NEVaUEorcE1iWWRDZWg4UXRJNk5Sb0d1VE8rVnBsdm9ETStWbmZTSHAxZitEaUc3ZjFScFZQaXJOM0VyOGYvdz09IiwicyI6IjEifQ==", "maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "b922584c3-7c73-4d7a-9899-e735238a4543e", "record_id": "flaws_cloudtrail:0000062:b922584c3-7c73-4d7a-9899-e735238a4543e", "row_index": 62, "timestamp": "2019-07-24T03:07:27Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "7.254.250.215", "user_agent": "aws-cli/1.16.113 Python/3.7.4 Linux/4.9.125-linuxkit botocore/1.12.103", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1090, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "b922584c3-7c73-4d7a-9899-e735238a4543e", "eventTime": "2019-07-24T03:07:27Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "7.254.250.215", "userAgent": "aws-cli/1.16.113 Python/3.7.4 Linux/4.9.125-linuxkit botocore/1.12.103", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"nextToken": "eyJ2IjoiMiIsImMiOiJxTmQrckdWc0N3TVF5amJXNHkrQXV5MUJ1NlZVUDBIb1B1eDJuR1VVaUZDemlRUHJlVm5idE1tdXZhRnoxR0NJR3I0U2pURk9uZnM5RDBMSjBRRHU5amw4ZUxGMStNRkxGNUJ5NVZxRlBJKzlERWk0N0FLcFFVbWhCeFV4MHFVbnAvTGdRNnFrNVhIMVF3NEVaUEorcE1iWWRDZWg4UXRJNk5Sb0d1VE8rVnBsdm9ETStWbmZTSHAxZitEaUc3ZjFScFZQaXJOM0VyOGYvdz09IiwicyI6IjEifQ==", "maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "2d2e263a-0fc8-4410-bd26-659c38a6505e", "record_id": "flaws_cloudtrail:0000063:2d2e263a-0fc8-4410-bd26-659c38a6505e", "row_index": 63, "timestamp": "2019-07-24T03:07:28Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "7.254.250.215", "user_agent": "aws-cli/1.16.113 Python/3.7.4 Linux/4.9.125-linuxkit botocore/1.12.103", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1080, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "2d2e263a-0fc8-4410-bd26-659c38a6505e", "eventTime": "2019-07-24T03:07:28Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "7.254.250.215", "userAgent": "aws-cli/1.16.113 Python/3.7.4 Linux/4.9.125-linuxkit botocore/1.12.103", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"nextToken": "eyJ2IjoiMiIsImMiOiI0ZmMwT2VXL24rRytmbitYT1MzaFpBN1c5WnRBeVpZV3hUYVZJaHpiS3NkQU4wdCtjQkR1ajZjNFBZYmtrVkV3dGVjN1VzRmMwNXpPSTRyYjk5NXZUem9INmwvL1U1RTVISmU5UjlRR3AyVE1CV1JMTFBjb0NFb0NVOXljQ2JsMmltQWJKbXJqT3krcHBiNXJVaFZ5UVVoWnp0cUtXWlZtdHowNUt5ZFdwaGJmdDRYL2h1bjdvcGE3TzZBRjdLQldJN3psQ1BNdFZBPT0iLCJzIjoiMSJ9", "maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "2d2e263a-0fc8-4410-bd26-659c38a6505e", "record_id": "flaws_cloudtrail:0000064:2d2e263a-0fc8-4410-bd26-659c38a6505e", "row_index": 64, "timestamp": "2019-07-24T03:07:28Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "7.254.250.215", "user_agent": "aws-cli/1.16.113 Python/3.7.4 Linux/4.9.125-linuxkit botocore/1.12.103", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1080, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "2d2e263a-0fc8-4410-bd26-659c38a6505e", "eventTime": "2019-07-24T03:07:28Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "7.254.250.215", "userAgent": "aws-cli/1.16.113 Python/3.7.4 Linux/4.9.125-linuxkit botocore/1.12.103", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"nextToken": "eyJ2IjoiMiIsImMiOiI0ZmMwT2VXL24rRytmbitYT1MzaFpBN1c5WnRBeVpZV3hUYVZJaHpiS3NkQU4wdCtjQkR1ajZjNFBZYmtrVkV3dGVjN1VzRmMwNXpPSTRyYjk5NXZUem9INmwvL1U1RTVISmU5UjlRR3AyVE1CV1JMTFBjb0NFb0NVOXljQ2JsMmltQWJKbXJqT3krcHBiNXJVaFZ5UVVoWnp0cUtXWlZtdHowNUt5ZFdwaGJmdDRYL2h1bjdvcGE3TzZBRjdLQldJN3psQ1BNdFZBPT0iLCJzIjoiMSJ9", "maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "285265f0-3c71-4393-8757-dc30285cb84", "record_id": "flaws_cloudtrail:0000065:285265f0-3c71-4393-8757-dc30285cb84", "row_index": 65, "timestamp": "2019-07-24T03:07:30Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "7.254.250.215", "user_agent": "aws-cli/1.16.113 Python/3.7.4 Linux/4.9.125-linuxkit botocore/1.12.103", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1087, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "285265f0-3c71-4393-8757-dc30285cb84", "eventTime": "2019-07-24T03:07:30Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "7.254.250.215", "userAgent": "aws-cli/1.16.113 Python/3.7.4 Linux/4.9.125-linuxkit botocore/1.12.103", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"nextToken": "eyJ2IjoiMiIsImMiOiJ3UEtBNUlsVWl3Ujl3ZDBuS3FXVk0vTzVBcXNGcnhkYW1YTjc0SVhvZmZlK0NNVU1lK2tBK1dRSGlvc2ZwS3VFN3Z0U1JSdDR4NUdmU0RSQkR6V0pLRVpjaGlRNlBqWVhDK3drMWZ4dzlOUSt0eXdhSlRuM0NIZURBOWZjWGdnay9PcHhOWU93eStTSjAyM0VSSHVKSlF5ZmdUUEh0TEpEdUJVYUdoRk1QZnVLRnJxYTlRYkNGck1vdDZCaTFIS1hZUndBd3VIeGpVcnNVZz09IiwicyI6IjEifQ==", "maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "285265f0-3c71-4393-8757-dc30285cb84", "record_id": "flaws_cloudtrail:0000066:285265f0-3c71-4393-8757-dc30285cb84", "row_index": 66, "timestamp": "2019-07-24T03:07:30Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "7.254.250.215", "user_agent": "aws-cli/1.16.113 Python/3.7.4 Linux/4.9.125-linuxkit botocore/1.12.103", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1087, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "285265f0-3c71-4393-8757-dc30285cb84", "eventTime": "2019-07-24T03:07:30Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "7.254.250.215", "userAgent": "aws-cli/1.16.113 Python/3.7.4 Linux/4.9.125-linuxkit botocore/1.12.103", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"nextToken": "eyJ2IjoiMiIsImMiOiJ3UEtBNUlsVWl3Ujl3ZDBuS3FXVk0vTzVBcXNGcnhkYW1YTjc0SVhvZmZlK0NNVU1lK2tBK1dRSGlvc2ZwS3VFN3Z0U1JSdDR4NUdmU0RSQkR6V0pLRVpjaGlRNlBqWVhDK3drMWZ4dzlOUSt0eXdhSlRuM0NIZURBOWZjWGdnay9PcHhOWU93eStTSjAyM0VSSHVKSlF5ZmdUUEh0TEpEdUJVYUdoRk1QZnVLRnJxYTlRYkNGck1vdDZCaTFIS1hZUndBd3VIeGpVcnNVZz09IiwicyI6IjEifQ==", "maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "4405f555-ccc0-46d6-9390-d5cabc790e9a", "record_id": "flaws_cloudtrail:0000067:4405f555-ccc0-46d6-9390-d5cabc790e9a", "row_index": 67, "timestamp": "2019-07-24T03:07:32Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "7.254.250.215", "user_agent": "aws-cli/1.16.113 Python/3.7.4 Linux/4.9.125-linuxkit botocore/1.12.103", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1088, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "4405f555-ccc0-46d6-9390-d5cabc790e9a", "eventTime": "2019-07-24T03:07:32Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "7.254.250.215", "userAgent": "aws-cli/1.16.113 Python/3.7.4 Linux/4.9.125-linuxkit botocore/1.12.103", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"nextToken": "eyJ2IjoiMiIsImMiOiJmTFNaWGluUlBlSTNQQ2RhR1ZPWldqQXRuYzFjczJEQkZCT0RwV2FiSnpxVDl4U1I4L24xZmE5bCtBeTljZ2djSWQ1TThGYk9aU3Q2dWNvci9NdW8yV1VnYS9TMG5DNzZYQ2RiUlBIQTBKL2V5bzFBR0xVVnJFNG5aV1grSWJFdDl5WnZ2U2FXNFgvWFFsS0VzYk52WkVnTkx5b3o2Y2JYYi9SMC9JRW5OWTdjVG9Iem52MHpwWDgyNFlpRU9jMUp4eDNVSVQwV21zYURodz09IiwicyI6IjEifQ==", "maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "4405f555-ccc0-46d6-9390-d5cabc790e9a", "record_id": "flaws_cloudtrail:0000068:4405f555-ccc0-46d6-9390-d5cabc790e9a", "row_index": 68, "timestamp": "2019-07-24T03:07:32Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "7.254.250.215", "user_agent": "aws-cli/1.16.113 Python/3.7.4 Linux/4.9.125-linuxkit botocore/1.12.103", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1088, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "4405f555-ccc0-46d6-9390-d5cabc790e9a", "eventTime": "2019-07-24T03:07:32Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "7.254.250.215", "userAgent": "aws-cli/1.16.113 Python/3.7.4 Linux/4.9.125-linuxkit botocore/1.12.103", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"nextToken": "eyJ2IjoiMiIsImMiOiJmTFNaWGluUlBlSTNQQ2RhR1ZPWldqQXRuYzFjczJEQkZCT0RwV2FiSnpxVDl4U1I4L24xZmE5bCtBeTljZ2djSWQ1TThGYk9aU3Q2dWNvci9NdW8yV1VnYS9TMG5DNzZYQ2RiUlBIQTBKL2V5bzFBR0xVVnJFNG5aV1grSWJFdDl5WnZ2U2FXNFgvWFFsS0VzYk52WkVnTkx5b3o2Y2JYYi9SMC9JRW5OWTdjVG9Iem52MHpwWDgyNFlpRU9jMUp4eDNVSVQwV21zYURodz09IiwicyI6IjEifQ==", "maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "cece1c5a-7cb4-4ae6-9252-9f3fe24d020c", "record_id": "flaws_cloudtrail:0000069:cece1c5a-7cb4-4ae6-9252-9f3fe24d020c", "row_index": 69, "timestamp": "2019-07-24T03:07:34Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "7.254.250.215", "user_agent": "aws-cli/1.16.113 Python/3.7.4 Linux/4.9.125-linuxkit botocore/1.12.103", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1079, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "cece1c5a-7cb4-4ae6-9252-9f3fe24d020c", "eventTime": "2019-07-24T03:07:34Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "7.254.250.215", "userAgent": "aws-cli/1.16.113 Python/3.7.4 Linux/4.9.125-linuxkit botocore/1.12.103", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"nextToken": "eyJ2IjoiMiIsImMiOiJXTXJlVnpxaTdrVm5xVGlWRlpjNFRtY0YwTDZDRHdlNXBEQnVOeU5xMUpvL3F3cHNCT1NDYnpkYklnT2hUYTZQZmdiT3NCVEtCMGpsZ1RneHB6Q0hSbUZtOS94SnoxemNwOFJOMUJhenFiUlhoMlM4YUVBUFAvMTdNWmFVSjZ1REtoNzBqVEJ2Q2hkalIyZGF0U0dBVnU1QVNBSG5hL3QzaUlURGh3WWszVmVGd2ZDWTlkR2xYMXFZa24xQUxqbS9tNi9jeDY0eUE1ND0iLCJzIjoiMSJ9", "maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "cece1c5a-7cb4-4ae6-9252-9f3fe24d020c", "record_id": "flaws_cloudtrail:0000070:cece1c5a-7cb4-4ae6-9252-9f3fe24d020c", "row_index": 70, "timestamp": "2019-07-24T03:07:34Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "7.254.250.215", "user_agent": "aws-cli/1.16.113 Python/3.7.4 Linux/4.9.125-linuxkit botocore/1.12.103", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1079, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "cece1c5a-7cb4-4ae6-9252-9f3fe24d020c", "eventTime": "2019-07-24T03:07:34Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "7.254.250.215", "userAgent": "aws-cli/1.16.113 Python/3.7.4 Linux/4.9.125-linuxkit botocore/1.12.103", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"nextToken": "eyJ2IjoiMiIsImMiOiJXTXJlVnpxaTdrVm5xVGlWRlpjNFRtY0YwTDZDRHdlNXBEQnVOeU5xMUpvL3F3cHNCT1NDYnpkYklnT2hUYTZQZmdiT3NCVEtCMGpsZ1RneHB6Q0hSbUZtOS94SnoxemNwOFJOMUJhenFiUlhoMlM4YUVBUFAvMTdNWmFVSjZ1REtoNzBqVEJ2Q2hkalIyZGF0U0dBVnU1QVNBSG5hL3QzaUlURGh3WWszVmVGd2ZDWTlkR2xYMXFZa24xQUxqbS9tNi9jeDY0eUE1ND0iLCJzIjoiMSJ9", "maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "20c5285d-f3dc-4fad-96dc-0e57e1c1062b", "record_id": "flaws_cloudtrail:0000071:20c5285d-f3dc-4fad-96dc-0e57e1c1062b", "row_index": 71, "timestamp": "2019-07-24T03:07:38Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "7.254.250.215", "user_agent": "aws-cli/1.16.113 Python/3.7.4 Linux/4.9.125-linuxkit botocore/1.12.103", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1088, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "20c5285d-f3dc-4fad-96dc-0e57e1c1062b", "eventTime": "2019-07-24T03:07:38Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "7.254.250.215", "userAgent": "aws-cli/1.16.113 Python/3.7.4 Linux/4.9.125-linuxkit botocore/1.12.103", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"nextToken": "eyJ2IjoiMiIsImMiOiI0aDBTYnFCQTFqUHhHczIrRHZ5dENQQ2xxRjhtNzE2Y2Z1Y2hwYTlnRllkRXRKZkJhUVRKMHNKY1JKSVZ1b3JpZnRDd3FONTJwOVRtK0l3b1YxYWtLSEIyUndPeXRVT2R0SW05NFdnKzFWTVZWbWo0eWRLanU4Y1Q5ZkJuN3FsRzR3T0E0Nk5QQkc0Zkk3ODh5NjViYUNEZHpMNUpBSVJIZ0tpRkxYUHZBT0h1cTJYeWZaTU82WUxKd3lXWFNlQkRvR016eGhGaUR2ajcrQT09IiwicyI6IjEifQ==", "maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "20c5285d-f3dc-4fad-96dc-0e57e1c1062b", "record_id": "flaws_cloudtrail:0000072:20c5285d-f3dc-4fad-96dc-0e57e1c1062b", "row_index": 72, "timestamp": "2019-07-24T03:07:38Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "7.254.250.215", "user_agent": "aws-cli/1.16.113 Python/3.7.4 Linux/4.9.125-linuxkit botocore/1.12.103", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1088, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "20c5285d-f3dc-4fad-96dc-0e57e1c1062b", "eventTime": "2019-07-24T03:07:38Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "7.254.250.215", "userAgent": "aws-cli/1.16.113 Python/3.7.4 Linux/4.9.125-linuxkit botocore/1.12.103", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"nextToken": "eyJ2IjoiMiIsImMiOiI0aDBTYnFCQTFqUHhHczIrRHZ5dENQQ2xxRjhtNzE2Y2Z1Y2hwYTlnRllkRXRKZkJhUVRKMHNKY1JKSVZ1b3JpZnRDd3FONTJwOVRtK0l3b1YxYWtLSEIyUndPeXRVT2R0SW05NFdnKzFWTVZWbWo0eWRLanU4Y1Q5ZkJuN3FsRzR3T0E0Nk5QQkc0Zkk3ODh5NjViYUNEZHpMNUpBSVJIZ0tpRkxYUHZBT0h1cTJYeWZaTU82WUxKd3lXWFNlQkRvR016eGhGaUR2ajcrQT09IiwicyI6IjEifQ==", "maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "06a31e63-297c-491f-9c46-79cbddc4c327", "record_id": "flaws_cloudtrail:0000073:06a31e63-297c-491f-9c46-79cbddc4c327", "row_index": 73, "timestamp": "2019-07-24T03:07:41Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "7.254.250.215", "user_agent": "aws-cli/1.16.113 Python/3.7.4 Linux/4.9.125-linuxkit botocore/1.12.103", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1077, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "06a31e63-297c-491f-9c46-79cbddc4c327", "eventTime": "2019-07-24T03:07:41Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "7.254.250.215", "userAgent": "aws-cli/1.16.113 Python/3.7.4 Linux/4.9.125-linuxkit botocore/1.12.103", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"nextToken": "eyJ2IjoiMiIsImMiOiI3NTdmVHBFbE0wck12aTJ2L0UzYXd2L2R0RDltc045RW5FdE1lRW9saWhhRExxYnA4TkIxR3NEdlY4SEdHRSt3QzNHTnVUVlg0RFhoVjB5TzFjYmFWZGJTSEh5bkczLzlOenBEcE0yZGQzV2ZUNzQ2d3JndGpVQ2ZzM0ZkZVB5ODUvZTREVjkvb1l1MTgwNXFqZGVkbm5CclREOTEwem1menN0T0ZvajJqQnVrdXhZVE83RGhsM2Y0L2ViTXJQVlBBTEFkdXZOc0t3PT0iLCJzIjoiMSJ9", "maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "06a31e63-297c-491f-9c46-79cbddc4c327", "record_id": "flaws_cloudtrail:0000074:06a31e63-297c-491f-9c46-79cbddc4c327", "row_index": 74, "timestamp": "2019-07-24T03:07:41Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "7.254.250.215", "user_agent": "aws-cli/1.16.113 Python/3.7.4 Linux/4.9.125-linuxkit botocore/1.12.103", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1077, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "06a31e63-297c-491f-9c46-79cbddc4c327", "eventTime": "2019-07-24T03:07:41Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "7.254.250.215", "userAgent": "aws-cli/1.16.113 Python/3.7.4 Linux/4.9.125-linuxkit botocore/1.12.103", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"nextToken": "eyJ2IjoiMiIsImMiOiI3NTdmVHBFbE0wck12aTJ2L0UzYXd2L2R0RDltc045RW5FdE1lRW9saWhhRExxYnA4TkIxR3NEdlY4SEdHRSt3QzNHTnVUVlg0RFhoVjB5TzFjYmFWZGJTSEh5bkczLzlOenBEcE0yZGQzV2ZUNzQ2d3JndGpVQ2ZzM0ZkZVB5ODUvZTREVjkvb1l1MTgwNXFqZGVkbm5CclREOTEwem1menN0T0ZvajJqQnVrdXhZVE83RGhsM2Y0L2ViTXJQVlBBTEFkdXZOc0t3PT0iLCJzIjoiMSJ9", "maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "7375e820-45cb-4eb0-b8c9-7eb83f859a15", "record_id": "flaws_cloudtrail:0000075:7375e820-45cb-4eb0-b8c9-7eb83f859a15", "row_index": 75, "timestamp": "2019-07-24T03:07:43Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "7.254.250.215", "user_agent": "aws-cli/1.16.113 Python/3.7.4 Linux/4.9.125-linuxkit botocore/1.12.103", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1088, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "7375e820-45cb-4eb0-b8c9-7eb83f859a15", "eventTime": "2019-07-24T03:07:43Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "7.254.250.215", "userAgent": "aws-cli/1.16.113 Python/3.7.4 Linux/4.9.125-linuxkit botocore/1.12.103", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"nextToken": "eyJ2IjoiMiIsImMiOiIzNGd3ejhnVW9lUFNOOVRHT3FHdlE4RmdUelF2ZlZRVG9ralk3VUtzdjBveUZNQXliYnFyN3V2MFJ3b05DSVF0UHBrZGViQXlhSXB6bmdJTCtyamc1R25MVWE2N0d2WWhYRjhrazR2U1R5SEYrM2p6aHA0N3U0OHJEQkplcGtCWktVQ29IOFhlU3hZR1Z2cDRTZDc1SWhiRXZtdmVHQjZiN3p6c2RhUFVrOVRsSmJJTzFFL3ZDYktCVFk1Qm9vbHBnMkI2bEFicHhhSTRlQT09IiwicyI6IjEifQ==", "maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "7375e820-45cb-4eb0-b8c9-7eb83f859a15", "record_id": "flaws_cloudtrail:0000076:7375e820-45cb-4eb0-b8c9-7eb83f859a15", "row_index": 76, "timestamp": "2019-07-24T03:07:43Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "7.254.250.215", "user_agent": "aws-cli/1.16.113 Python/3.7.4 Linux/4.9.125-linuxkit botocore/1.12.103", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1088, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "7375e820-45cb-4eb0-b8c9-7eb83f859a15", "eventTime": "2019-07-24T03:07:43Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "7.254.250.215", "userAgent": "aws-cli/1.16.113 Python/3.7.4 Linux/4.9.125-linuxkit botocore/1.12.103", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"nextToken": "eyJ2IjoiMiIsImMiOiIzNGd3ejhnVW9lUFNOOVRHT3FHdlE4RmdUelF2ZlZRVG9ralk3VUtzdjBveUZNQXliYnFyN3V2MFJ3b05DSVF0UHBrZGViQXlhSXB6bmdJTCtyamc1R25MVWE2N0d2WWhYRjhrazR2U1R5SEYrM2p6aHA0N3U0OHJEQkplcGtCWktVQ29IOFhlU3hZR1Z2cDRTZDc1SWhiRXZtdmVHQjZiN3p6c2RhUFVrOVRsSmJJTzFFL3ZDYktCVFk1Qm9vbHBnMkI2bEFicHhhSTRlQT09IiwicyI6IjEifQ==", "maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "3bc9e8f7-cbf9-45ad-8ca0-608b0200db71", "record_id": "flaws_cloudtrail:0000077:3bc9e8f7-cbf9-45ad-8ca0-608b0200db71", "row_index": 77, "timestamp": "2019-07-24T03:07:45Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "7.254.250.215", "user_agent": "aws-cli/1.16.113 Python/3.7.4 Linux/4.9.125-linuxkit botocore/1.12.103", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1088, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "3bc9e8f7-cbf9-45ad-8ca0-608b0200db71", "eventTime": "2019-07-24T03:07:45Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "7.254.250.215", "userAgent": "aws-cli/1.16.113 Python/3.7.4 Linux/4.9.125-linuxkit botocore/1.12.103", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"nextToken": "eyJ2IjoiMiIsImMiOiJpRjd5V2xQTXRFQWhMWm1WdHZXek9XS2NJRjVuVUpVcWRQeUtnajQxL3JXd09TSHRoMDYzL1V6eTN0M2ZRUjJhMmFsTXNoRnJXbHl4dWZHQWJMN1gwMUUxUlJLZHBtemMvdHpMNnA4cUdlRytLNzRrSHMxNW8vZnVrWmhXd3E1d2FMU1pKRXhZYWdiam9EM1Y0NVgya2RHOFU2QmlMQXpPekpNK2dmNWE5MkhqUlN3cFVXVGhLajBqSDVNemJNR1RLMkZ2bDJGekV2MW1wdz09IiwicyI6IjEifQ==", "maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "3bc9e8f7-cbf9-45ad-8ca0-608b0200db71", "record_id": "flaws_cloudtrail:0000078:3bc9e8f7-cbf9-45ad-8ca0-608b0200db71", "row_index": 78, "timestamp": "2019-07-24T03:07:45Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "7.254.250.215", "user_agent": "aws-cli/1.16.113 Python/3.7.4 Linux/4.9.125-linuxkit botocore/1.12.103", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1088, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "3bc9e8f7-cbf9-45ad-8ca0-608b0200db71", "eventTime": "2019-07-24T03:07:45Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "7.254.250.215", "userAgent": "aws-cli/1.16.113 Python/3.7.4 Linux/4.9.125-linuxkit botocore/1.12.103", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"nextToken": "eyJ2IjoiMiIsImMiOiJpRjd5V2xQTXRFQWhMWm1WdHZXek9XS2NJRjVuVUpVcWRQeUtnajQxL3JXd09TSHRoMDYzL1V6eTN0M2ZRUjJhMmFsTXNoRnJXbHl4dWZHQWJMN1gwMUUxUlJLZHBtemMvdHpMNnA4cUdlRytLNzRrSHMxNW8vZnVrWmhXd3E1d2FMU1pKRXhZYWdiam9EM1Y0NVgya2RHOFU2QmlMQXpPekpNK2dmNWE5MkhqUlN3cFVXVGhLajBqSDVNemJNR1RLMkZ2bDJGekV2MW1wdz09IiwicyI6IjEifQ==", "maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "b6c09be1-1051-4909-ae38-c86a8e398099e", "record_id": "flaws_cloudtrail:0000079:b6c09be1-1051-4909-ae38-c86a8e398099e", "row_index": 79, "timestamp": "2019-07-24T03:07:47Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "7.254.250.215", "user_agent": "aws-cli/1.16.113 Python/3.7.4 Linux/4.9.125-linuxkit botocore/1.12.103", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1081, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "b6c09be1-1051-4909-ae38-c86a8e398099e", "eventTime": "2019-07-24T03:07:47Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "7.254.250.215", "userAgent": "aws-cli/1.16.113 Python/3.7.4 Linux/4.9.125-linuxkit botocore/1.12.103", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"nextToken": "eyJ2IjoiMiIsImMiOiJDcTRXQVhlTzZQeVFrbjdhaW1YQTh6dGQyVEJYYW5zT3gwQWVDMUxkTS9KRnUwOUhNZnY5eVRYYjZEVGxkN1R6TTQ1RGlGNUtTZ0d6eTdFYUdtRldvTzd5YWJEaGhoT3pwdnlieE1wWnkrTWFoYjFtMStnQVN5TDFEd1ZzV2RXTi84Ylh5RVQwNng3MWZ4dkJYeXg2c041VUMyVGJGeTl1dE1pZG1IL1Vxd1hJS0dERmFzRG5ybTZFT3VMUmlHTDRkdXFNUS9vTEc5dz0iLCJzIjoiMSJ9", "maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "b6c09be1-1051-4909-ae38-c86a8e398099e", "record_id": "flaws_cloudtrail:0000080:b6c09be1-1051-4909-ae38-c86a8e398099e", "row_index": 80, "timestamp": "2019-07-24T03:07:47Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "7.254.250.215", "user_agent": "aws-cli/1.16.113 Python/3.7.4 Linux/4.9.125-linuxkit botocore/1.12.103", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1081, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "b6c09be1-1051-4909-ae38-c86a8e398099e", "eventTime": "2019-07-24T03:07:47Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "7.254.250.215", "userAgent": "aws-cli/1.16.113 Python/3.7.4 Linux/4.9.125-linuxkit botocore/1.12.103", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"nextToken": "eyJ2IjoiMiIsImMiOiJDcTRXQVhlTzZQeVFrbjdhaW1YQTh6dGQyVEJYYW5zT3gwQWVDMUxkTS9KRnUwOUhNZnY5eVRYYjZEVGxkN1R6TTQ1RGlGNUtTZ0d6eTdFYUdtRldvTzd5YWJEaGhoT3pwdnlieE1wWnkrTWFoYjFtMStnQVN5TDFEd1ZzV2RXTi84Ylh5RVQwNng3MWZ4dkJYeXg2c041VUMyVGJGeTl1dE1pZG1IL1Vxd1hJS0dERmFzRG5ybTZFT3VMUmlHTDRkdXFNUS9vTEc5dz0iLCJzIjoiMSJ9", "maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "a48081-1d23-4114-b2c1-8e6308fc64d1", "record_id": "flaws_cloudtrail:0000081:a48081-1d23-4114-b2c1-8e6308fc64d1", "row_index": 81, "timestamp": "2019-07-24T03:07:49Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "7.254.250.215", "user_agent": "aws-cli/1.16.113 Python/3.7.4 Linux/4.9.125-linuxkit botocore/1.12.103", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1078, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "a48081-1d23-4114-b2c1-8e6308fc64d1", "eventTime": "2019-07-24T03:07:49Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "7.254.250.215", "userAgent": "aws-cli/1.16.113 Python/3.7.4 Linux/4.9.125-linuxkit botocore/1.12.103", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"nextToken": "eyJ2IjoiMiIsImMiOiJlUkMyQ2FrcDBmMDRyZXo4TUx3SkQ4Y0NGbU1lbVRtR1d0NHFzSzc4RWFqbFhtNWI3ZDRBMFpBc3QzVU9TaWQ4NVI0eUx2UzJRVXdzNys0STV4QXAzUFJkWnVrMldYcmZtVkZvYUk5MFlBRVhmblpoMVhmc1Z2WFlLbC9WNkZlK2VLZlJuWWxJVnk1bmc4QWZ2K3ZhL0xWSjQyd2JhYTFTZzYwL1ZCcFNaRUREUXArZzNJbGIxejBjMzlFNDJseUpPbzlUdUh1M042TT0iLCJzIjoiMSJ9", "maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "a48081-1d23-4114-b2c1-8e6308fc64d1", "record_id": "flaws_cloudtrail:0000082:a48081-1d23-4114-b2c1-8e6308fc64d1", "row_index": 82, "timestamp": "2019-07-24T03:07:49Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "7.254.250.215", "user_agent": "aws-cli/1.16.113 Python/3.7.4 Linux/4.9.125-linuxkit botocore/1.12.103", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1078, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "a48081-1d23-4114-b2c1-8e6308fc64d1", "eventTime": "2019-07-24T03:07:49Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "7.254.250.215", "userAgent": "aws-cli/1.16.113 Python/3.7.4 Linux/4.9.125-linuxkit botocore/1.12.103", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"nextToken": "eyJ2IjoiMiIsImMiOiJlUkMyQ2FrcDBmMDRyZXo4TUx3SkQ4Y0NGbU1lbVRtR1d0NHFzSzc4RWFqbFhtNWI3ZDRBMFpBc3QzVU9TaWQ4NVI0eUx2UzJRVXdzNys0STV4QXAzUFJkWnVrMldYcmZtVkZvYUk5MFlBRVhmblpoMVhmc1Z2WFlLbC9WNkZlK2VLZlJuWWxJVnk1bmc4QWZ2K3ZhL0xWSjQyd2JhYTFTZzYwL1ZCcFNaRUREUXArZzNJbGIxejBjMzlFNDJseUpPbzlUdUh1M042TT0iLCJzIjoiMSJ9", "maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "f5dfe970-0665-4f3a-887f-138a43fcb682", "record_id": "flaws_cloudtrail:0000083:f5dfe970-0665-4f3a-887f-138a43fcb682", "row_index": 83, "timestamp": "2019-07-24T03:07:51Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "7.254.250.215", "user_agent": "aws-cli/1.16.113 Python/3.7.4 Linux/4.9.125-linuxkit botocore/1.12.103", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1108, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "f5dfe970-0665-4f3a-887f-138a43fcb682", "eventTime": "2019-07-24T03:07:51Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "7.254.250.215", "userAgent": "aws-cli/1.16.113 Python/3.7.4 Linux/4.9.125-linuxkit botocore/1.12.103", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"nextToken": "eyJ2IjoiMiIsImMiOiJrc2dCWUFodStSNXhPLzZidTcwZmk5aml6SWlPSjlaVlJhVzNRcm94WCtxdlRvRGwrOVhUdlRJOWlhY0NlZi8veno3SE9SQnBIdGRteERoZjhrMHFsT1R0WFhMMFdCRTJNQkRIUE5MdHQ5T0VGYXc2Q1F2bTNlQmdUOGk5dng3ektlcmF4a3VHemdiUU9DdmR3ZEdZZXBwNzVLRTZ4Qjl5MTM2N1k3WE9PWVRMQWU0RzZxS3V4NldzbTNxMFYrdE1VeldsSWp3VEpWNEtkV1RVQWg1Tm5tcjZqWDFKSXA0PSIsInMiOiIxIn0=", "maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "f5dfe970-0665-4f3a-887f-138a43fcb682", "record_id": "flaws_cloudtrail:0000084:f5dfe970-0665-4f3a-887f-138a43fcb682", "row_index": 84, "timestamp": "2019-07-24T03:07:51Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "7.254.250.215", "user_agent": "aws-cli/1.16.113 Python/3.7.4 Linux/4.9.125-linuxkit botocore/1.12.103", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1108, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "f5dfe970-0665-4f3a-887f-138a43fcb682", "eventTime": "2019-07-24T03:07:51Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "7.254.250.215", "userAgent": "aws-cli/1.16.113 Python/3.7.4 Linux/4.9.125-linuxkit botocore/1.12.103", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"nextToken": "eyJ2IjoiMiIsImMiOiJrc2dCWUFodStSNXhPLzZidTcwZmk5aml6SWlPSjlaVlJhVzNRcm94WCtxdlRvRGwrOVhUdlRJOWlhY0NlZi8veno3SE9SQnBIdGRteERoZjhrMHFsT1R0WFhMMFdCRTJNQkRIUE5MdHQ5T0VGYXc2Q1F2bTNlQmdUOGk5dng3ektlcmF4a3VHemdiUU9DdmR3ZEdZZXBwNzVLRTZ4Qjl5MTM2N1k3WE9PWVRMQWU0RzZxS3V4NldzbTNxMFYrdE1VeldsSWp3VEpWNEtkV1RVQWg1Tm5tcjZqWDFKSXA0PSIsInMiOiIxIn0=", "maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "e5ae51c6-fb2d-4445-bd73-f69b08d5a94b", "record_id": "flaws_cloudtrail:0000085:e5ae51c6-fb2d-4445-bd73-f69b08d5a94b", "row_index": 85, "timestamp": "2019-07-24T03:07:52Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "7.254.250.215", "user_agent": "aws-cli/1.16.113 Python/3.7.4 Linux/4.9.125-linuxkit botocore/1.12.103", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1096, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "e5ae51c6-fb2d-4445-bd73-f69b08d5a94b", "eventTime": "2019-07-24T03:07:52Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "7.254.250.215", "userAgent": "aws-cli/1.16.113 Python/3.7.4 Linux/4.9.125-linuxkit botocore/1.12.103", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"nextToken": "eyJ2IjoiMiIsImMiOiIreEJRRlN2cWg0YmRDT2Z0amhLTXNvcmg4NER5dXFhZ3Y5ZEdUUlVkY2V1YWdqclFSYmtLaXgrTHFDVVgxWWViYlNRQmRnRTJKcmw3alJuRGkrNUw2ME96c1BidmhNZXZuQlA5b3ludjJMYXhLYWdhc0czUWhSN2V6b3BQU3VtWWdFUlg5RDV1ZnJUQ3JPVGdKdnFaT0kvOXlLZEM3ZkZXNjAzak1icGhBLzZBSkptMGpaNlZyTkpYUkNTMDR6dXhXOXowcEo4eVF6TXM3K2wrOGFzaDVRPT0iLCJzIjoiMSJ9", "maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "e5ae51c6-fb2d-4445-bd73-f69b08d5a94b", "record_id": "flaws_cloudtrail:0000086:e5ae51c6-fb2d-4445-bd73-f69b08d5a94b", "row_index": 86, "timestamp": "2019-07-24T03:07:52Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "7.254.250.215", "user_agent": "aws-cli/1.16.113 Python/3.7.4 Linux/4.9.125-linuxkit botocore/1.12.103", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1096, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "e5ae51c6-fb2d-4445-bd73-f69b08d5a94b", "eventTime": "2019-07-24T03:07:52Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "7.254.250.215", "userAgent": "aws-cli/1.16.113 Python/3.7.4 Linux/4.9.125-linuxkit botocore/1.12.103", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"nextToken": "eyJ2IjoiMiIsImMiOiIreEJRRlN2cWg0YmRDT2Z0amhLTXNvcmg4NER5dXFhZ3Y5ZEdUUlVkY2V1YWdqclFSYmtLaXgrTHFDVVgxWWViYlNRQmRnRTJKcmw3alJuRGkrNUw2ME96c1BidmhNZXZuQlA5b3ludjJMYXhLYWdhc0czUWhSN2V6b3BQU3VtWWdFUlg5RDV1ZnJUQ3JPVGdKdnFaT0kvOXlLZEM3ZkZXNjAzak1icGhBLzZBSkptMGpaNlZyTkpYUkNTMDR6dXhXOXowcEo4eVF6TXM3K2wrOGFzaDVRPT0iLCJzIjoiMSJ9", "maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "8cf4cccb-6bd7-474f-9ae0-40c360b8a611", "record_id": "flaws_cloudtrail:0000087:8cf4cccb-6bd7-474f-9ae0-40c360b8a611", "row_index": 87, "timestamp": "2019-07-24T03:07:54Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "7.254.250.215", "user_agent": "aws-cli/1.16.113 Python/3.7.4 Linux/4.9.125-linuxkit botocore/1.12.103", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1108, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "8cf4cccb-6bd7-474f-9ae0-40c360b8a611", "eventTime": "2019-07-24T03:07:54Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "7.254.250.215", "userAgent": "aws-cli/1.16.113 Python/3.7.4 Linux/4.9.125-linuxkit botocore/1.12.103", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"nextToken": "eyJ2IjoiMiIsImMiOiJkVy9jSWlMd1pSeElsSHF4a3ByZkJydmlocUExeU5KWEd2Z1RhNWpXcklvOGJpMDhRK1RlVm9TNVpGMFExem51Uys0Z2ZzSWlRSU8wYVc3eWg0NjhBSXFlTGZpSVd5TWR6NkVYY3R5YWVnTHNJekxZSWlBOGIzaENoMVFCR1ZENHFMbzloWDhzQjRwc3gzbDhodFBwY3ZKNWxGMzFxQS85d3d4b1VJS3FYZ2lTc1A0Zk5hREkxRktUVVFuRWIvTmxucHpvUys4RUpIcHZtR25HK0FUcnBSL3VoSzZkNWJ3PSIsInMiOiIxIn0=", "maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "8cf4cccb-6bd7-474f-9ae0-40c360b8a611", "record_id": "flaws_cloudtrail:0000088:8cf4cccb-6bd7-474f-9ae0-40c360b8a611", "row_index": 88, "timestamp": "2019-07-24T03:07:54Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "7.254.250.215", "user_agent": "aws-cli/1.16.113 Python/3.7.4 Linux/4.9.125-linuxkit botocore/1.12.103", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1108, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "8cf4cccb-6bd7-474f-9ae0-40c360b8a611", "eventTime": "2019-07-24T03:07:54Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "7.254.250.215", "userAgent": "aws-cli/1.16.113 Python/3.7.4 Linux/4.9.125-linuxkit botocore/1.12.103", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"nextToken": "eyJ2IjoiMiIsImMiOiJkVy9jSWlMd1pSeElsSHF4a3ByZkJydmlocUExeU5KWEd2Z1RhNWpXcklvOGJpMDhRK1RlVm9TNVpGMFExem51Uys0Z2ZzSWlRSU8wYVc3eWg0NjhBSXFlTGZpSVd5TWR6NkVYY3R5YWVnTHNJekxZSWlBOGIzaENoMVFCR1ZENHFMbzloWDhzQjRwc3gzbDhodFBwY3ZKNWxGMzFxQS85d3d4b1VJS3FYZ2lTc1A0Zk5hREkxRktUVVFuRWIvTmxucHpvUys4RUpIcHZtR25HK0FUcnBSL3VoSzZkNWJ3PSIsInMiOiIxIn0=", "maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "941adb03-6ee8-4cc9-ae74-4c85dae13b85", "record_id": "flaws_cloudtrail:0000089:941adb03-6ee8-4cc9-ae74-4c85dae13b85", "row_index": 89, "timestamp": "2019-07-24T03:07:55Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "7.254.250.215", "user_agent": "aws-cli/1.16.113 Python/3.7.4 Linux/4.9.125-linuxkit botocore/1.12.103", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1064, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "941adb03-6ee8-4cc9-ae74-4c85dae13b85", "eventTime": "2019-07-24T03:07:55Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "7.254.250.215", "userAgent": "aws-cli/1.16.113 Python/3.7.4 Linux/4.9.125-linuxkit botocore/1.12.103", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"nextToken": "eyJ2IjoiMiIsImMiOiJjay9RZDhNMFBIQ0hhbFRGTUpPTXJUOFQzZEgwcEZ2VElpNlk4N2ZjTXlndEtoNlhxQ2JPeUN5VTBoMFB0Q0ozSTlZa0hVUWxQck1OU2plS29lVGlvQUJRNGpiSjZTbm96RGxKWTBrU3pBR0c5dkhTa1VpVWh0b2Q1NFJtYnpBRit2bk5ZTWJDcDh2TDlXZnU4NWFaRTVBWTE0QWYyWVloSDJFYmJUMEVwTzJXYTJIQ1JPWUZnQkdlRW80Z1YwVT0iLCJzIjoiMSJ9", "maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "941adb03-6ee8-4cc9-ae74-4c85dae13b85", "record_id": "flaws_cloudtrail:0000090:941adb03-6ee8-4cc9-ae74-4c85dae13b85", "row_index": 90, "timestamp": "2019-07-24T03:07:55Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "7.254.250.215", "user_agent": "aws-cli/1.16.113 Python/3.7.4 Linux/4.9.125-linuxkit botocore/1.12.103", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1064, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "941adb03-6ee8-4cc9-ae74-4c85dae13b85", "eventTime": "2019-07-24T03:07:55Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "7.254.250.215", "userAgent": "aws-cli/1.16.113 Python/3.7.4 Linux/4.9.125-linuxkit botocore/1.12.103", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"nextToken": "eyJ2IjoiMiIsImMiOiJjay9RZDhNMFBIQ0hhbFRGTUpPTXJUOFQzZEgwcEZ2VElpNlk4N2ZjTXlndEtoNlhxQ2JPeUN5VTBoMFB0Q0ozSTlZa0hVUWxQck1OU2plS29lVGlvQUJRNGpiSjZTbm96RGxKWTBrU3pBR0c5dkhTa1VpVWh0b2Q1NFJtYnpBRit2bk5ZTWJDcDh2TDlXZnU4NWFaRTVBWTE0QWYyWVloSDJFYmJUMEVwTzJXYTJIQ1JPWUZnQkdlRW80Z1YwVT0iLCJzIjoiMSJ9", "maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "1d99386b-b8b9-4f8b-931e-5cf6e8b213c6", "record_id": "flaws_cloudtrail:0000091:1d99386b-b8b9-4f8b-931e-5cf6e8b213c6", "row_index": 91, "timestamp": "2019-07-24T03:07:56Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "7.254.250.215", "user_agent": "aws-cli/1.16.113 Python/3.7.4 Linux/4.9.125-linuxkit botocore/1.12.103", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1108, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "1d99386b-b8b9-4f8b-931e-5cf6e8b213c6", "eventTime": "2019-07-24T03:07:56Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "7.254.250.215", "userAgent": "aws-cli/1.16.113 Python/3.7.4 Linux/4.9.125-linuxkit botocore/1.12.103", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"nextToken": "eyJ2IjoiMiIsImMiOiJhMHRlOXNveFFzZ0d2WjUrOVhiQlZLSUkyYVhncGc0My9vOW82OWpWN01NTmVPKzJ1ZTR2di9Xc2l3L2VQYTJjZFhpTUZlVVdEZkhWa2pBN2hOdUtWQVhKUTNJaHFHT05hQVVxY1lHdk5KMjluTFR2R0N0KytMVU1tdkZpUE4rcDNQSlduQ2syV2kzbXZodlYvRVVqZkVYZklNWlB4QzhqUS9pWm1zTDVKSzN4T1VpdFloYVdHdHFZSHhFUHRQOW5TTGIwNXFORjNjcG5SeFQ1SlUwSUtDT0FWa1BMS2RFPSIsInMiOiIxIn0=", "maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "1d99386b-b8b9-4f8b-931e-5cf6e8b213c6", "record_id": "flaws_cloudtrail:0000092:1d99386b-b8b9-4f8b-931e-5cf6e8b213c6", "row_index": 92, "timestamp": "2019-07-24T03:07:56Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "7.254.250.215", "user_agent": "aws-cli/1.16.113 Python/3.7.4 Linux/4.9.125-linuxkit botocore/1.12.103", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1108, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "1d99386b-b8b9-4f8b-931e-5cf6e8b213c6", "eventTime": "2019-07-24T03:07:56Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "7.254.250.215", "userAgent": "aws-cli/1.16.113 Python/3.7.4 Linux/4.9.125-linuxkit botocore/1.12.103", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"nextToken": "eyJ2IjoiMiIsImMiOiJhMHRlOXNveFFzZ0d2WjUrOVhiQlZLSUkyYVhncGc0My9vOW82OWpWN01NTmVPKzJ1ZTR2di9Xc2l3L2VQYTJjZFhpTUZlVVdEZkhWa2pBN2hOdUtWQVhKUTNJaHFHT05hQVVxY1lHdk5KMjluTFR2R0N0KytMVU1tdkZpUE4rcDNQSlduQ2syV2kzbXZodlYvRVVqZkVYZklNWlB4QzhqUS9pWm1zTDVKSzN4T1VpdFloYVdHdHFZSHhFUHRQOW5TTGIwNXFORjNjcG5SeFQ1SlUwSUtDT0FWa1BMS2RFPSIsInMiOiIxIn0=", "maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "a0aa9706-4dff-4f7a-8fc7-72ff5f8616e0", "record_id": "flaws_cloudtrail:0000093:a0aa9706-4dff-4f7a-8fc7-72ff5f8616e0", "row_index": 93, "timestamp": "2019-07-24T03:08:02Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "7.254.250.215", "user_agent": "aws-cli/1.16.113 Python/3.7.4 Linux/4.9.125-linuxkit botocore/1.12.103", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1096, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "a0aa9706-4dff-4f7a-8fc7-72ff5f8616e0", "eventTime": "2019-07-24T03:08:02Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "7.254.250.215", "userAgent": "aws-cli/1.16.113 Python/3.7.4 Linux/4.9.125-linuxkit botocore/1.12.103", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"nextToken": "eyJ2IjoiMiIsImMiOiIvRC9GeDhGTXczYnBhaXppdzM3TUVCOFVKZ1VlU0JTZEc0ZTNmSHNhOU40bDBuQ3dkbnFDTHEzZjNuUDZsUVBnbEM1aDA0N002aTlPMms5Q0JpYjFNaEFNbmtYZUNJMGR4enNhOE4zbXJMTms3amRoMjhWelkvVnhsNjRWRU1GRkdZSkszdDNWQ2E0WVhaK3hKQ2tTbTg5VUVQYWFLekNzd3U4MnNSM3NDNmZJMnNidlFGYTloVGVzM2VHbFRaeGZHK0xXNWRubDhmOVc0YmdEcXNTK1N3PT0iLCJzIjoiMSJ9", "maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "a0aa9706-4dff-4f7a-8fc7-72ff5f8616e0", "record_id": "flaws_cloudtrail:0000094:a0aa9706-4dff-4f7a-8fc7-72ff5f8616e0", "row_index": 94, "timestamp": "2019-07-24T03:08:02Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "7.254.250.215", "user_agent": "aws-cli/1.16.113 Python/3.7.4 Linux/4.9.125-linuxkit botocore/1.12.103", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1096, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "a0aa9706-4dff-4f7a-8fc7-72ff5f8616e0", "eventTime": "2019-07-24T03:08:02Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "7.254.250.215", "userAgent": "aws-cli/1.16.113 Python/3.7.4 Linux/4.9.125-linuxkit botocore/1.12.103", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"nextToken": "eyJ2IjoiMiIsImMiOiIvRC9GeDhGTXczYnBhaXppdzM3TUVCOFVKZ1VlU0JTZEc0ZTNmSHNhOU40bDBuQ3dkbnFDTHEzZjNuUDZsUVBnbEM1aDA0N002aTlPMms5Q0JpYjFNaEFNbmtYZUNJMGR4enNhOE4zbXJMTms3amRoMjhWelkvVnhsNjRWRU1GRkdZSkszdDNWQ2E0WVhaK3hKQ2tTbTg5VUVQYWFLekNzd3U4MnNSM3NDNmZJMnNidlFGYTloVGVzM2VHbFRaeGZHK0xXNWRubDhmOVc0YmdEcXNTK1N3PT0iLCJzIjoiMSJ9", "maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "2f1b9a86-a2cf-4563-a9fc-8cf1a3a5364f", "record_id": "flaws_cloudtrail:0000095:2f1b9a86-a2cf-4563-a9fc-8cf1a3a5364f", "row_index": 95, "timestamp": "2019-07-24T03:08:04Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "7.254.250.215", "user_agent": "aws-cli/1.16.113 Python/3.7.4 Linux/4.9.125-linuxkit botocore/1.12.103", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1109, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "2f1b9a86-a2cf-4563-a9fc-8cf1a3a5364f", "eventTime": "2019-07-24T03:08:04Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "7.254.250.215", "userAgent": "aws-cli/1.16.113 Python/3.7.4 Linux/4.9.125-linuxkit botocore/1.12.103", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"nextToken": "eyJ2IjoiMiIsImMiOiJ4TXZ0UEVwVUdUdHdwR3Q0R2plUm1UVWZ2eUNCN1VFZ2tDeC9kTkc2TzZtMzhEQXZ4Y253eXlyUkk5WmZmMUxGSURzWEpLUE5wRmR1ZnNRVnRoOVl1WTljdlJScFBwUGJBTTQ1RHUzSGE2amozM0N1bHZVNFRBN0wwUmQyNlBXdDJJRWp3bTM0dmtlRnVveGVuSWY2aEpEVjNUcytGdWg4VFVSN2RPTnRxYWxYZWpxL2hCcHhLOWJmSFVKbElJMVpZSk5SSlJJRW5BNStoUXlnOC9vUk9XVGp5dGlwTlgwPSIsInMiOiIxIn0=", "maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "2f1b9a86-a2cf-4563-a9fc-8cf1a3a5364f", "record_id": "flaws_cloudtrail:0000096:2f1b9a86-a2cf-4563-a9fc-8cf1a3a5364f", "row_index": 96, "timestamp": "2019-07-24T03:08:04Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "7.254.250.215", "user_agent": "aws-cli/1.16.113 Python/3.7.4 Linux/4.9.125-linuxkit botocore/1.12.103", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1109, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "2f1b9a86-a2cf-4563-a9fc-8cf1a3a5364f", "eventTime": "2019-07-24T03:08:04Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "7.254.250.215", "userAgent": "aws-cli/1.16.113 Python/3.7.4 Linux/4.9.125-linuxkit botocore/1.12.103", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"nextToken": "eyJ2IjoiMiIsImMiOiJ4TXZ0UEVwVUdUdHdwR3Q0R2plUm1UVWZ2eUNCN1VFZ2tDeC9kTkc2TzZtMzhEQXZ4Y253eXlyUkk5WmZmMUxGSURzWEpLUE5wRmR1ZnNRVnRoOVl1WTljdlJScFBwUGJBTTQ1RHUzSGE2amozM0N1bHZVNFRBN0wwUmQyNlBXdDJJRWp3bTM0dmtlRnVveGVuSWY2aEpEVjNUcytGdWg4VFVSN2RPTnRxYWxYZWpxL2hCcHhLOWJmSFVKbElJMVpZSk5SSlJJRW5BNStoUXlnOC9vUk9XVGp5dGlwTlgwPSIsInMiOiIxIn0=", "maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "aeefb2ef-bf7d-460b-aa61-46c364bbc1e1", "record_id": "flaws_cloudtrail:0000097:aeefb2ef-bf7d-460b-aa61-46c364bbc1e1", "row_index": 97, "timestamp": "2019-07-24T03:08:05Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "7.254.250.215", "user_agent": "aws-cli/1.16.113 Python/3.7.4 Linux/4.9.125-linuxkit botocore/1.12.103", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1096, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "aeefb2ef-bf7d-460b-aa61-46c364bbc1e1", "eventTime": "2019-07-24T03:08:05Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "7.254.250.215", "userAgent": "aws-cli/1.16.113 Python/3.7.4 Linux/4.9.125-linuxkit botocore/1.12.103", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"nextToken": "eyJ2IjoiMiIsImMiOiJxV1I2czJJeUl6c0tvQzJHWThnb2REbXQwdG9iVFpYeHlkVzh6YWtEYlptaWErcVlLM3Bhdm5HN2x6NjZaeXdGNDlwREdTMUE5QWlHMFFsRXdFaGxMN0c4MmdZQm40b2xFMG4vQVZLNWlqdDhpZjNCRmZiKzdHSUxhSzBUNjR5bXFOYVdRT1BRKzdySUdmZFI5czByaTY4L2ptemd6NTRMUjlkVjF6OVBVUXdFNFc3VmsrT3J3U1JsTEp3akVmZ1FoWXAzdkZSLzNyVG8yejZ0cU5FVDhnPT0iLCJzIjoiMSJ9", "maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "aeefb2ef-bf7d-460b-aa61-46c364bbc1e1", "record_id": "flaws_cloudtrail:0000098:aeefb2ef-bf7d-460b-aa61-46c364bbc1e1", "row_index": 98, "timestamp": "2019-07-24T03:08:05Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "7.254.250.215", "user_agent": "aws-cli/1.16.113 Python/3.7.4 Linux/4.9.125-linuxkit botocore/1.12.103", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1096, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "aeefb2ef-bf7d-460b-aa61-46c364bbc1e1", "eventTime": "2019-07-24T03:08:05Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "7.254.250.215", "userAgent": "aws-cli/1.16.113 Python/3.7.4 Linux/4.9.125-linuxkit botocore/1.12.103", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"nextToken": "eyJ2IjoiMiIsImMiOiJxV1I2czJJeUl6c0tvQzJHWThnb2REbXQwdG9iVFpYeHlkVzh6YWtEYlptaWErcVlLM3Bhdm5HN2x6NjZaeXdGNDlwREdTMUE5QWlHMFFsRXdFaGxMN0c4MmdZQm40b2xFMG4vQVZLNWlqdDhpZjNCRmZiKzdHSUxhSzBUNjR5bXFOYVdRT1BRKzdySUdmZFI5czByaTY4L2ptemd6NTRMUjlkVjF6OVBVUXdFNFc3VmsrT3J3U1JsTEp3akVmZ1FoWXAzdkZSLzNyVG8yejZ0cU5FVDhnPT0iLCJzIjoiMSJ9", "maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "d8f721813-eeb4-4065-add3-985ef084421", "record_id": "flaws_cloudtrail:0000099:d8f721813-eeb4-4065-add3-985ef084421", "row_index": 99, "timestamp": "2019-07-24T03:08:06Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "7.254.250.215", "user_agent": "aws-cli/1.16.113 Python/3.7.4 Linux/4.9.125-linuxkit botocore/1.12.103", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1108, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "d8f721813-eeb4-4065-add3-985ef084421", "eventTime": "2019-07-24T03:08:06Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "7.254.250.215", "userAgent": "aws-cli/1.16.113 Python/3.7.4 Linux/4.9.125-linuxkit botocore/1.12.103", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"nextToken": "eyJ2IjoiMiIsImMiOiJlMlAwUk9EZkM2bWQvSGdPSnd5RXBQdkpheDFMV3NoaW9iU3hyb3NDRUZZdWxBaldHdnk5TnBMaDhSVXNiNmZ4VFBjLzVvQmx6L0d0Yng1RUFSYVVnTVU4UmthSDdyS25GZDh2VUc3QXJxZCs3MkZuVzhzTEtrclRVYmtUM1hyVklvelBRRWdzMEtueE1PS2Z2MmZsZTNrVnBVQWhzR3o1bWNRaVRHYjJ6Wk95dmtOV29IekN2Zm1pSzhOeXdTNG4xYktNVmJOWDFxbXJneTVLaDBpUC91Q05HbTlIODBBPSIsInMiOiIxIn0=", "maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "d8f721813-eeb4-4065-add3-985ef084421", "record_id": "flaws_cloudtrail:0000100:d8f721813-eeb4-4065-add3-985ef084421", "row_index": 100, "timestamp": "2019-07-24T03:08:06Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "7.254.250.215", "user_agent": "aws-cli/1.16.113 Python/3.7.4 Linux/4.9.125-linuxkit botocore/1.12.103", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1108, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "d8f721813-eeb4-4065-add3-985ef084421", "eventTime": "2019-07-24T03:08:06Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "7.254.250.215", "userAgent": "aws-cli/1.16.113 Python/3.7.4 Linux/4.9.125-linuxkit botocore/1.12.103", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"nextToken": "eyJ2IjoiMiIsImMiOiJlMlAwUk9EZkM2bWQvSGdPSnd5RXBQdkpheDFMV3NoaW9iU3hyb3NDRUZZdWxBaldHdnk5TnBMaDhSVXNiNmZ4VFBjLzVvQmx6L0d0Yng1RUFSYVVnTVU4UmthSDdyS25GZDh2VUc3QXJxZCs3MkZuVzhzTEtrclRVYmtUM1hyVklvelBRRWdzMEtueE1PS2Z2MmZsZTNrVnBVQWhzR3o1bWNRaVRHYjJ6Wk95dmtOV29IekN2Zm1pSzhOeXdTNG4xYktNVmJOWDFxbXJneTVLaDBpUC91Q05HbTlIODBBPSIsInMiOiIxIn0=", "maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "099013d4-76ab-4a78-bd67-b9a35de02ddf", "record_id": "flaws_cloudtrail:0000101:099013d4-76ab-4a78-bd67-b9a35de02ddf", "row_index": 101, "timestamp": "2019-07-24T03:08:08Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "7.254.250.215", "user_agent": "aws-cli/1.16.113 Python/3.7.4 Linux/4.9.125-linuxkit botocore/1.12.103", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1064, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "099013d4-76ab-4a78-bd67-b9a35de02ddf", "eventTime": "2019-07-24T03:08:08Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "7.254.250.215", "userAgent": "aws-cli/1.16.113 Python/3.7.4 Linux/4.9.125-linuxkit botocore/1.12.103", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"nextToken": "eyJ2IjoiMiIsImMiOiJQLytNeGV1d1RjY21sa1J5N3dHYnpOc0plRXNieHd1RUlVZXllTVRROEltbmxNUGdsbVVTWkxmQnNpczdsY2lVbFlBVEdrYlVjenFUYWFiWG16ZVhlNG9hTGNEeERjSU9DeFczVjJLMDZNZ1BPdG5YYm5ZaFFFYW5NQjhOdG1JbUMvMGJ2ZlpMS0R0dWI4R0tQdHA0aUIvaGdqeTV5TVJ2bUhYa1ZIWnh6ejFLYWt2dFUyMHNocGIrSnd4dHVuVT0iLCJzIjoiMSJ9", "maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "099013d4-76ab-4a78-bd67-b9a35de02ddf", "record_id": "flaws_cloudtrail:0000102:099013d4-76ab-4a78-bd67-b9a35de02ddf", "row_index": 102, "timestamp": "2019-07-24T03:08:08Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "7.254.250.215", "user_agent": "aws-cli/1.16.113 Python/3.7.4 Linux/4.9.125-linuxkit botocore/1.12.103", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1064, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "099013d4-76ab-4a78-bd67-b9a35de02ddf", "eventTime": "2019-07-24T03:08:08Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "7.254.250.215", "userAgent": "aws-cli/1.16.113 Python/3.7.4 Linux/4.9.125-linuxkit botocore/1.12.103", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"nextToken": "eyJ2IjoiMiIsImMiOiJQLytNeGV1d1RjY21sa1J5N3dHYnpOc0plRXNieHd1RUlVZXllTVRROEltbmxNUGdsbVVTWkxmQnNpczdsY2lVbFlBVEdrYlVjenFUYWFiWG16ZVhlNG9hTGNEeERjSU9DeFczVjJLMDZNZ1BPdG5YYm5ZaFFFYW5NQjhOdG1JbUMvMGJ2ZlpMS0R0dWI4R0tQdHA0aUIvaGdqeTV5TVJ2bUhYa1ZIWnh6ejFLYWt2dFUyMHNocGIrSnd4dHVuVT0iLCJzIjoiMSJ9", "maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "2a9021db-a888-4a17-9fc8-35e2823d9d8f", "record_id": "flaws_cloudtrail:0000103:2a9021db-a888-4a17-9fc8-35e2823d9d8f", "row_index": 103, "timestamp": "2019-07-24T03:08:27Z", "event_type": "DescribeInstances", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "222.205.8.190", "user_agent": "aws-cli/1.11.13 Python/3.5.2 Linux/4.4.0-62-generic botocore/1.4.70", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 707, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "2a9021db-a888-4a17-9fc8-35e2823d9d8f", "eventTime": "2019-07-24T03:08:27Z", "eventName": "DescribeInstances", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "222.205.8.190", "userAgent": "aws-cli/1.11.13 Python/3.5.2 Linux/4.4.0-62-generic botocore/1.4.70", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"instancesSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "2a9021db-a888-4a17-9fc8-35e2823d9d8f", "record_id": "flaws_cloudtrail:0000104:2a9021db-a888-4a17-9fc8-35e2823d9d8f", "row_index": 104, "timestamp": "2019-07-24T03:08:27Z", "event_type": "DescribeInstances", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "222.205.8.190", "user_agent": "aws-cli/1.11.13 Python/3.5.2 Linux/4.4.0-62-generic botocore/1.4.70", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 707, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "2a9021db-a888-4a17-9fc8-35e2823d9d8f", "eventTime": "2019-07-24T03:08:27Z", "eventName": "DescribeInstances", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "222.205.8.190", "userAgent": "aws-cli/1.11.13 Python/3.5.2 Linux/4.4.0-62-generic botocore/1.4.70", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"instancesSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "c36ddc68-193e-476c-9336-6e22d743a3ce", "record_id": "flaws_cloudtrail:0000105:c36ddc68-193e-476c-9336-6e22d743a3ce", "row_index": 105, "timestamp": "2019-07-24T03:10:48Z", "event_type": "DescribeInstances", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "222.205.8.190", "user_agent": "aws-cli/1.11.13 Python/3.5.2 Linux/4.4.0-62-generic botocore/1.4.70", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 706, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "c36ddc68-193e-476c-9336-6e22d743a3ce", "eventTime": "2019-07-24T03:10:48Z", "eventName": "DescribeInstances", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "222.205.8.190", "userAgent": "aws-cli/1.11.13 Python/3.5.2 Linux/4.4.0-62-generic botocore/1.4.70", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"instancesSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "c36ddc68-193e-476c-9336-6e22d743a3ce", "record_id": "flaws_cloudtrail:0000106:c36ddc68-193e-476c-9336-6e22d743a3ce", "row_index": 106, "timestamp": "2019-07-24T03:10:48Z", "event_type": "DescribeInstances", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "222.205.8.190", "user_agent": "aws-cli/1.11.13 Python/3.5.2 Linux/4.4.0-62-generic botocore/1.4.70", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 706, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "c36ddc68-193e-476c-9336-6e22d743a3ce", "eventTime": "2019-07-24T03:10:48Z", "eventName": "DescribeInstances", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "222.205.8.190", "userAgent": "aws-cli/1.11.13 Python/3.5.2 Linux/4.4.0-62-generic botocore/1.4.70", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"instancesSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "7b2c1285-8d5a-418c-954c-bcb06fc64f2c", "record_id": "flaws_cloudtrail:0000107:7b2c1285-8d5a-418c-954c-bcb06fc64f2c", "row_index": 107, "timestamp": "2019-07-24T03:11:14Z", "event_type": "DescribeInstances", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "222.205.8.190", "user_agent": "aws-cli/1.11.13 Python/3.5.2 Linux/4.4.0-62-generic botocore/1.4.70", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 706, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "7b2c1285-8d5a-418c-954c-bcb06fc64f2c", "eventTime": "2019-07-24T03:11:14Z", "eventName": "DescribeInstances", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "222.205.8.190", "userAgent": "aws-cli/1.11.13 Python/3.5.2 Linux/4.4.0-62-generic botocore/1.4.70", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"instancesSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "7b2c1285-8d5a-418c-954c-bcb06fc64f2c", "record_id": "flaws_cloudtrail:0000108:7b2c1285-8d5a-418c-954c-bcb06fc64f2c", "row_index": 108, "timestamp": "2019-07-24T03:11:14Z", "event_type": "DescribeInstances", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "222.205.8.190", "user_agent": "aws-cli/1.11.13 Python/3.5.2 Linux/4.4.0-62-generic botocore/1.4.70", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 706, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "7b2c1285-8d5a-418c-954c-bcb06fc64f2c", "eventTime": "2019-07-24T03:11:14Z", "eventName": "DescribeInstances", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "222.205.8.190", "userAgent": "aws-cli/1.11.13 Python/3.5.2 Linux/4.4.0-62-generic botocore/1.4.70", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"instancesSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "3d6b3110-610d-4b43-b395-ad0ddcf60acc", "record_id": "flaws_cloudtrail:0000109:3d6b3110-610d-4b43-b395-ad0ddcf60acc", "row_index": 109, "timestamp": "2019-07-24T03:11:23Z", "event_type": "DescribeInstances", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "222.205.8.190", "user_agent": "aws-cli/1.11.13 Python/3.5.2 Linux/4.4.0-62-generic botocore/1.4.70", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 703, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "3d6b3110-610d-4b43-b395-ad0ddcf60acc", "eventTime": "2019-07-24T03:11:23Z", "eventName": "DescribeInstances", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "222.205.8.190", "userAgent": "aws-cli/1.11.13 Python/3.5.2 Linux/4.4.0-62-generic botocore/1.4.70", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"instancesSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "3d6b3110-610d-4b43-b395-ad0ddcf60acc", "record_id": "flaws_cloudtrail:0000110:3d6b3110-610d-4b43-b395-ad0ddcf60acc", "row_index": 110, "timestamp": "2019-07-24T03:11:23Z", "event_type": "DescribeInstances", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "222.205.8.190", "user_agent": "aws-cli/1.11.13 Python/3.5.2 Linux/4.4.0-62-generic botocore/1.4.70", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 703, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "3d6b3110-610d-4b43-b395-ad0ddcf60acc", "eventTime": "2019-07-24T03:11:23Z", "eventName": "DescribeInstances", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "222.205.8.190", "userAgent": "aws-cli/1.11.13 Python/3.5.2 Linux/4.4.0-62-generic botocore/1.4.70", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"instancesSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "d54c9713-10a1-456e-bf61-2cfd7f845592f", "record_id": "flaws_cloudtrail:0000111:d54c9713-10a1-456e-bf61-2cfd7f845592f", "row_index": 111, "timestamp": "2019-07-24T03:12:17Z", "event_type": "DescribeInstances", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "222.205.8.190", "user_agent": "aws-cli/1.11.13 Python/3.5.2 Linux/4.4.0-62-generic botocore/1.4.70", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 707, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "d54c9713-10a1-456e-bf61-2cfd7f845592f", "eventTime": "2019-07-24T03:12:17Z", "eventName": "DescribeInstances", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "222.205.8.190", "userAgent": "aws-cli/1.11.13 Python/3.5.2 Linux/4.4.0-62-generic botocore/1.4.70", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"instancesSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "d54c9713-10a1-456e-bf61-2cfd7f845592f", "record_id": "flaws_cloudtrail:0000112:d54c9713-10a1-456e-bf61-2cfd7f845592f", "row_index": 112, "timestamp": "2019-07-24T03:12:17Z", "event_type": "DescribeInstances", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "222.205.8.190", "user_agent": "aws-cli/1.11.13 Python/3.5.2 Linux/4.4.0-62-generic botocore/1.4.70", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 707, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "d54c9713-10a1-456e-bf61-2cfd7f845592f", "eventTime": "2019-07-24T03:12:17Z", "eventName": "DescribeInstances", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "222.205.8.190", "userAgent": "aws-cli/1.11.13 Python/3.5.2 Linux/4.4.0-62-generic botocore/1.4.70", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"instancesSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "1111e165-93e5-4190-87aa-34502aa3ba84", "record_id": "flaws_cloudtrail:0000113:1111e165-93e5-4190-87aa-34502aa3ba84", "row_index": 113, "timestamp": "2019-07-24T03:13:27Z", "event_type": "DescribeInstances", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "222.205.8.190", "user_agent": "aws-cli/1.11.13 Python/3.5.2 Linux/4.4.0-62-generic botocore/1.4.70", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 707, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "1111e165-93e5-4190-87aa-34502aa3ba84", "eventTime": "2019-07-24T03:13:27Z", "eventName": "DescribeInstances", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "222.205.8.190", "userAgent": "aws-cli/1.11.13 Python/3.5.2 Linux/4.4.0-62-generic botocore/1.4.70", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"instancesSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "1111e165-93e5-4190-87aa-34502aa3ba84", "record_id": "flaws_cloudtrail:0000114:1111e165-93e5-4190-87aa-34502aa3ba84", "row_index": 114, "timestamp": "2019-07-24T03:13:27Z", "event_type": "DescribeInstances", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "222.205.8.190", "user_agent": "aws-cli/1.11.13 Python/3.5.2 Linux/4.4.0-62-generic botocore/1.4.70", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 707, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "1111e165-93e5-4190-87aa-34502aa3ba84", "eventTime": "2019-07-24T03:13:27Z", "eventName": "DescribeInstances", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "222.205.8.190", "userAgent": "aws-cli/1.11.13 Python/3.5.2 Linux/4.4.0-62-generic botocore/1.4.70", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"instancesSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "18f79701-1d94-40b4-9edb-226613922be1", "record_id": "flaws_cloudtrail:0000115:18f79701-1d94-40b4-9edb-226613922be1", "row_index": 115, "timestamp": "2019-07-24T03:17:00Z", "event_type": "GetCallerIdentity", "event_source": "sts.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "222.205.8.190", "user_agent": "aws-cli/1.11.13 Python/3.5.2 Linux/4.4.0-62-generic botocore/1.4.70", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 777, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "18f79701-1d94-40b4-9edb-226613922be1", "eventTime": "2019-07-24T03:17:00Z", "eventName": "GetCallerIdentity", "eventSource": "sts.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "222.205.8.190", "userAgent": "aws-cli/1.11.13 Python/3.5.2 Linux/4.4.0-62-generic botocore/1.4.70", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "responseElements": {"userId": "AIDA9BO36HFBHKGJAO9C1", "account": "811596193553", "arn": "arn:aws:iam::811596193553:user/backup"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "18f79701-1d94-40b4-9edb-226613922be1", "record_id": "flaws_cloudtrail:0000116:18f79701-1d94-40b4-9edb-226613922be1", "row_index": 116, "timestamp": "2019-07-24T03:17:00Z", "event_type": "GetCallerIdentity", "event_source": "sts.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "222.205.8.190", "user_agent": "aws-cli/1.11.13 Python/3.5.2 Linux/4.4.0-62-generic botocore/1.4.70", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 777, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "18f79701-1d94-40b4-9edb-226613922be1", "eventTime": "2019-07-24T03:17:00Z", "eventName": "GetCallerIdentity", "eventSource": "sts.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "222.205.8.190", "userAgent": "aws-cli/1.11.13 Python/3.5.2 Linux/4.4.0-62-generic botocore/1.4.70", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "responseElements": {"userId": "AIDA9BO36HFBHKGJAO9C1", "account": "811596193553", "arn": "arn:aws:iam::811596193553:user/backup"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "d6e6a147-0a36-4d0b-82d1-c5a73cc4cb2b", "record_id": "flaws_cloudtrail:0000117:d6e6a147-0a36-4d0b-82d1-c5a73cc4cb2b", "row_index": 117, "timestamp": "2019-07-24T03:19:00Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "222.205.8.190", "user_agent": "aws-cli/1.11.13 Python/3.5.2 Linux/4.4.0-62-generic botocore/1.4.70", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 790, "raw_record_depth": 5, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "d6e6a147-0a36-4d0b-82d1-c5a73cc4cb2b", "eventTime": "2019-07-24T03:19:00Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "222.205.8.190", "userAgent": "aws-cli/1.11.13 Python/3.5.2 Linux/4.4.0-62-generic botocore/1.4.70", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"maxResults": 1000, "snapshotSet": {}, "ownersSet": {"items": [{"owner": "811596193553"}]}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "d6e6a147-0a36-4d0b-82d1-c5a73cc4cb2b", "record_id": "flaws_cloudtrail:0000118:d6e6a147-0a36-4d0b-82d1-c5a73cc4cb2b", "row_index": 118, "timestamp": "2019-07-24T03:19:00Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "222.205.8.190", "user_agent": "aws-cli/1.11.13 Python/3.5.2 Linux/4.4.0-62-generic botocore/1.4.70", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 790, "raw_record_depth": 5, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "d6e6a147-0a36-4d0b-82d1-c5a73cc4cb2b", "eventTime": "2019-07-24T03:19:00Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "222.205.8.190", "userAgent": "aws-cli/1.11.13 Python/3.5.2 Linux/4.4.0-62-generic botocore/1.4.70", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"maxResults": 1000, "snapshotSet": {}, "ownersSet": {"items": [{"owner": "811596193553"}]}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "07e78b3b-81de-46f6-844e-8751c971d1a8", "record_id": "flaws_cloudtrail:0000119:07e78b3b-81de-46f6-844e-8751c971d1a8", "row_index": 119, "timestamp": "2019-07-24T03:27:54Z", "event_type": "CreateVolume", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "222.205.8.190", "user_agent": "aws-cli/1.11.13 Python/3.5.2 Linux/4.4.0-62-generic botocore/1.4.70", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1526, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "07e78b3b-81de-46f6-844e-8751c971d1a8", "eventTime": "2019-07-24T03:27:54Z", "eventName": "CreateVolume", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "222.205.8.190", "userAgent": "aws-cli/1.11.13 Python/3.5.2 Linux/4.4.0-62-generic botocore/1.4.70", "awsRegion": "us-west-2", "errorCode": "Client.UnauthorizedOperation", "errorMessage": "You are not authorized to perform this operation. Encoded authorization failure message: rBP1to3fH77kKyyqKn6O3QVF8PsiKGyFaATnJpvhovQqxk_KJmIQYvWDJ1kjs_WgJNYbfnKsAgD7r7ZULfgyyAur36QjzrJY89EwKR6eQ0oeWmRkGoeo7FmLvhUIoFitgkh2zmdDiNIFaZvoJB9Pswnk1LQm869yld6U5X3Pxizk_LiJsi0zJUZ0nRlbXRU58OKzVAB5pz93sVkX8uyeLodhBjE7jKgVYvqh20HDaaiFWzI6IdwzfLOba0FczPp0l42E8_bcUXIYWEMZn41D2oBLpO_IOD0-m8JhCJRBWebJfZmjYz56txWme_kF0qYTGDrWG6rom595NGj9I32Ujs5i6Sc7o80OInc2veyNagZo2kdiX7K2_AUDMFNy9zYXA3OxwX2d89O3VeWMSG0sqO9DPSHwblJ8uSoltBhIwn9UcNHvSAkq8ZYt_3jAWiP1ifQ4bVu622Si_vFYsAB2LO-XPLWi60XK2mYZCDGUHyqsny9W0yJgNX2BHCZeY9LaNFUHK2jmj_hrZ2cFyM2BNtSaVU2oSwM0SkRJPxKCSQvki3X_p5W3woedQaAL28DfLmJwpNYDTG0IOD7W_FuWMOhkY3MNVf1bwA-dYSRuuqDaBj2rrcL5qjwKCrEbPYt0KPvJQV971g", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"snapshotId": "snap-83d15d668fb2941db", "zone": "us-west-2b"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "07e78b3b-81de-46f6-844e-8751c971d1a8", "record_id": "flaws_cloudtrail:0000120:07e78b3b-81de-46f6-844e-8751c971d1a8", "row_index": 120, "timestamp": "2019-07-24T03:27:54Z", "event_type": "CreateVolume", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "222.205.8.190", "user_agent": "aws-cli/1.11.13 Python/3.5.2 Linux/4.4.0-62-generic botocore/1.4.70", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1526, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "07e78b3b-81de-46f6-844e-8751c971d1a8", "eventTime": "2019-07-24T03:27:54Z", "eventName": "CreateVolume", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "222.205.8.190", "userAgent": "aws-cli/1.11.13 Python/3.5.2 Linux/4.4.0-62-generic botocore/1.4.70", "awsRegion": "us-west-2", "errorCode": "Client.UnauthorizedOperation", "errorMessage": "You are not authorized to perform this operation. Encoded authorization failure message: rBP1to3fH77kKyyqKn6O3QVF8PsiKGyFaATnJpvhovQqxk_KJmIQYvWDJ1kjs_WgJNYbfnKsAgD7r7ZULfgyyAur36QjzrJY89EwKR6eQ0oeWmRkGoeo7FmLvhUIoFitgkh2zmdDiNIFaZvoJB9Pswnk1LQm869yld6U5X3Pxizk_LiJsi0zJUZ0nRlbXRU58OKzVAB5pz93sVkX8uyeLodhBjE7jKgVYvqh20HDaaiFWzI6IdwzfLOba0FczPp0l42E8_bcUXIYWEMZn41D2oBLpO_IOD0-m8JhCJRBWebJfZmjYz56txWme_kF0qYTGDrWG6rom595NGj9I32Ujs5i6Sc7o80OInc2veyNagZo2kdiX7K2_AUDMFNy9zYXA3OxwX2d89O3VeWMSG0sqO9DPSHwblJ8uSoltBhIwn9UcNHvSAkq8ZYt_3jAWiP1ifQ4bVu622Si_vFYsAB2LO-XPLWi60XK2mYZCDGUHyqsny9W0yJgNX2BHCZeY9LaNFUHK2jmj_hrZ2cFyM2BNtSaVU2oSwM0SkRJPxKCSQvki3X_p5W3woedQaAL28DfLmJwpNYDTG0IOD7W_FuWMOhkY3MNVf1bwA-dYSRuuqDaBj2rrcL5qjwKCrEbPYt0KPvJQV971g", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"snapshotId": "snap-83d15d668fb2941db", "zone": "us-west-2b"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "ab9e457d-346f-49b8-9554-766b37f63fda", "record_id": "flaws_cloudtrail:0000121:ab9e457d-346f-49b8-9554-766b37f63fda", "row_index": 121, "timestamp": "2019-07-24T03:31:24Z", "event_type": "AssumeRole", "event_source": "sts.amazonaws.com", "principal": {"type": "AWSService", "arn": null, "account_id": null, "principal_id": null, "user_name": null, "access_key_id": null, "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "ec2.amazonaws.com", "user_agent": "ec2.amazonaws.com", "aws_region": "us-west-2"}, "resource_arns": ["arn:aws:iam::811596193553:role/flaws"], "raw_record_size_bytes": 1883, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "resources", "responseElements", "sharedEventID", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "ab9e457d-346f-49b8-9554-766b37f63fda", "eventTime": "2019-07-24T03:31:24Z", "eventName": "AssumeRole", "eventSource": "sts.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "ec2.amazonaws.com", "userAgent": "ec2.amazonaws.com", "awsRegion": "us-west-2", "userIdentity": {"type": "AWSService", "invokedBy": "ec2.amazonaws.com"}, "requestParameters": {"roleSessionName": "i-aa2d3b42e5c6e801a", "roleArn": "arn:aws:iam::811596193553:role/flaws"}, "responseElements": {"credentials": {"accessKeyId": "ASIA5W5DCKO8TFSDKX2W", "expiration": "Jul 24, 2019 9:54:01 AM", "sessionToken": "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"}}, "resources": [{"ARN": "arn:aws:iam::811596193553:role/flaws", "accountId": "811596193553", "type": "AWS::IAM::Role"}]}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "ab9e457d-346f-49b8-9554-766b37f63fda", "record_id": "flaws_cloudtrail:0000122:ab9e457d-346f-49b8-9554-766b37f63fda", "row_index": 122, "timestamp": "2019-07-24T03:31:24Z", "event_type": "AssumeRole", "event_source": "sts.amazonaws.com", "principal": {"type": "AWSService", "arn": null, "account_id": null, "principal_id": null, "user_name": null, "access_key_id": null, "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "ec2.amazonaws.com", "user_agent": "ec2.amazonaws.com", "aws_region": "us-west-2"}, "resource_arns": ["arn:aws:iam::811596193553:role/flaws"], "raw_record_size_bytes": 1883, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "resources", "responseElements", "sharedEventID", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "ab9e457d-346f-49b8-9554-766b37f63fda", "eventTime": "2019-07-24T03:31:24Z", "eventName": "AssumeRole", "eventSource": "sts.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "ec2.amazonaws.com", "userAgent": "ec2.amazonaws.com", "awsRegion": "us-west-2", "userIdentity": {"type": "AWSService", "invokedBy": "ec2.amazonaws.com"}, "requestParameters": {"roleSessionName": "i-aa2d3b42e5c6e801a", "roleArn": "arn:aws:iam::811596193553:role/flaws"}, "responseElements": {"credentials": {"accessKeyId": "ASIA5W5DCKO8TFSDKX2W", "expiration": "Jul 24, 2019 9:54:01 AM", "sessionToken": "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"}}, "resources": [{"ARN": "arn:aws:iam::811596193553:role/flaws", "accountId": "811596193553", "type": "AWS::IAM::Role"}]}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "f0ffa57e-2223-4c19-b1ef-46d3059e803c", "record_id": "flaws_cloudtrail:0000123:f0ffa57e-2223-4c19-b1ef-46d3059e803c", "row_index": 123, "timestamp": "2019-07-24T03:38:02Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "7.254.250.215", "user_agent": "aws-cli/1.16.113 Python/3.7.4 Linux/4.9.125-linuxkit botocore/1.12.103", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 761, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "f0ffa57e-2223-4c19-b1ef-46d3059e803c", "eventTime": "2019-07-24T03:38:02Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "7.254.250.215", "userAgent": "aws-cli/1.16.113 Python/3.7.4 Linux/4.9.125-linuxkit botocore/1.12.103", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "f0ffa57e-2223-4c19-b1ef-46d3059e803c", "record_id": "flaws_cloudtrail:0000124:f0ffa57e-2223-4c19-b1ef-46d3059e803c", "row_index": 124, "timestamp": "2019-07-24T03:38:02Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "7.254.250.215", "user_agent": "aws-cli/1.16.113 Python/3.7.4 Linux/4.9.125-linuxkit botocore/1.12.103", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 761, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "f0ffa57e-2223-4c19-b1ef-46d3059e803c", "eventTime": "2019-07-24T03:38:02Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "7.254.250.215", "userAgent": "aws-cli/1.16.113 Python/3.7.4 Linux/4.9.125-linuxkit botocore/1.12.103", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "bde2f181-6a77-4434-b3fc-35d53d64b785", "record_id": "flaws_cloudtrail:0000125:bde2f181-6a77-4434-b3fc-35d53d64b785", "row_index": 125, "timestamp": "2019-07-24T03:38:05Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "7.254.250.215", "user_agent": "aws-cli/1.16.113 Python/3.7.4 Linux/4.9.125-linuxkit botocore/1.12.103", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1078, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "bde2f181-6a77-4434-b3fc-35d53d64b785", "eventTime": "2019-07-24T03:38:05Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "7.254.250.215", "userAgent": "aws-cli/1.16.113 Python/3.7.4 Linux/4.9.125-linuxkit botocore/1.12.103", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"nextToken": "eyJ2IjoiMiIsImMiOiI3cENoTk1FUFVEL0tqUHdsNXg3QVBBM3pFV0NRanp2Q3NqY25FZFMrTXh3cHZRem53MkxEK0EwUHY4M1JvNFU5OXljNEVBb29kaXNZbU1lRUpFRkZDdUI0MjRnU1FUU0VONUlBRGJtNDVrTGdLRkVDUDdsK3g5dDNjeXlXNFUrV2VCYWxLQlBPMmxOa2xaMFhtYmh3ZEkzRGYwMUFnNm43Z2k1c0NrV0grYlVrNFRRY1pzMENDaVFnTG5PSHorMm9HU0ZjMnRnby8wbz0iLCJzIjoiMSJ9", "maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "bde2f181-6a77-4434-b3fc-35d53d64b785", "record_id": "flaws_cloudtrail:0000126:bde2f181-6a77-4434-b3fc-35d53d64b785", "row_index": 126, "timestamp": "2019-07-24T03:38:05Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "7.254.250.215", "user_agent": "aws-cli/1.16.113 Python/3.7.4 Linux/4.9.125-linuxkit botocore/1.12.103", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1078, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "bde2f181-6a77-4434-b3fc-35d53d64b785", "eventTime": "2019-07-24T03:38:05Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "7.254.250.215", "userAgent": "aws-cli/1.16.113 Python/3.7.4 Linux/4.9.125-linuxkit botocore/1.12.103", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"nextToken": "eyJ2IjoiMiIsImMiOiI3cENoTk1FUFVEL0tqUHdsNXg3QVBBM3pFV0NRanp2Q3NqY25FZFMrTXh3cHZRem53MkxEK0EwUHY4M1JvNFU5OXljNEVBb29kaXNZbU1lRUpFRkZDdUI0MjRnU1FUU0VONUlBRGJtNDVrTGdLRkVDUDdsK3g5dDNjeXlXNFUrV2VCYWxLQlBPMmxOa2xaMFhtYmh3ZEkzRGYwMUFnNm43Z2k1c0NrV0grYlVrNFRRY1pzMENDaVFnTG5PSHorMm9HU0ZjMnRnby8wbz0iLCJzIjoiMSJ9", "maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "bd49798b-5d74-4d42-a0a5-1fe7892d3838", "record_id": "flaws_cloudtrail:0000127:bd49798b-5d74-4d42-a0a5-1fe7892d3838", "row_index": 127, "timestamp": "2019-07-24T03:38:07Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "7.254.250.215", "user_agent": "aws-cli/1.16.113 Python/3.7.4 Linux/4.9.125-linuxkit botocore/1.12.103", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1088, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "bd49798b-5d74-4d42-a0a5-1fe7892d3838", "eventTime": "2019-07-24T03:38:07Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "7.254.250.215", "userAgent": "aws-cli/1.16.113 Python/3.7.4 Linux/4.9.125-linuxkit botocore/1.12.103", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"nextToken": "eyJ2IjoiMiIsImMiOiJ1Z3AwYzFHcjVtYjlEaXkyUDVsVmZSUXBLTlZ6a0dlNW5RZ3hTcXpYNElWTVJGZGRkMDBTRUlGT25kOTVrUGpkdkh5NDBrcGhwcWJpYWNiMTJnbWNTdXZLLzE4aHp3NW5GZnowQnRTVWh2ZjVXb2tIWHMzQXNTWWFSMzduc3BGbjBUSUVDaXV1NE1aREJnL0RTYkovWW9XRkYrOW4zbzhqVTJGMWFLM09kOHFWRlJiWFhMZm83ckl2RDNWaU5CbVhwQS82KzJyOFFUd1F3Zz09IiwicyI6IjEifQ==", "maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "bd49798b-5d74-4d42-a0a5-1fe7892d3838", "record_id": "flaws_cloudtrail:0000128:bd49798b-5d74-4d42-a0a5-1fe7892d3838", "row_index": 128, "timestamp": "2019-07-24T03:38:07Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "7.254.250.215", "user_agent": "aws-cli/1.16.113 Python/3.7.4 Linux/4.9.125-linuxkit botocore/1.12.103", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1088, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "bd49798b-5d74-4d42-a0a5-1fe7892d3838", "eventTime": "2019-07-24T03:38:07Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "7.254.250.215", "userAgent": "aws-cli/1.16.113 Python/3.7.4 Linux/4.9.125-linuxkit botocore/1.12.103", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"nextToken": "eyJ2IjoiMiIsImMiOiJ1Z3AwYzFHcjVtYjlEaXkyUDVsVmZSUXBLTlZ6a0dlNW5RZ3hTcXpYNElWTVJGZGRkMDBTRUlGT25kOTVrUGpkdkh5NDBrcGhwcWJpYWNiMTJnbWNTdXZLLzE4aHp3NW5GZnowQnRTVWh2ZjVXb2tIWHMzQXNTWWFSMzduc3BGbjBUSUVDaXV1NE1aREJnL0RTYkovWW9XRkYrOW4zbzhqVTJGMWFLM09kOHFWRlJiWFhMZm83ckl2RDNWaU5CbVhwQS82KzJyOFFUd1F3Zz09IiwicyI6IjEifQ==", "maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "def391f9-e9d9-4a45-a364-734b50f12ea1", "record_id": "flaws_cloudtrail:0000129:def391f9-e9d9-4a45-a364-734b50f12ea1", "row_index": 129, "timestamp": "2019-07-24T03:38:09Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "7.254.250.215", "user_agent": "aws-cli/1.16.113 Python/3.7.4 Linux/4.9.125-linuxkit botocore/1.12.103", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1088, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "def391f9-e9d9-4a45-a364-734b50f12ea1", "eventTime": "2019-07-24T03:38:09Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "7.254.250.215", "userAgent": "aws-cli/1.16.113 Python/3.7.4 Linux/4.9.125-linuxkit botocore/1.12.103", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"nextToken": "eyJ2IjoiMiIsImMiOiJtZHNXa2lXWHpWbWc3YUhXZmcybktIZGxRZWNmODVHME9UcWh1V01zZE1Ibk1PR2xSNExjcDloVmlySFlQQjV4S2QyMC9FMGRLYnNYazNCOHhOalEveGhQTTBqdjhQY0lZTTlLQXdOVkRteDdNQStXTlVFRmU2MlhMMFlUcFYzTkRUczd3YkttSDV6bGR1WUd4U2dJY1pRKzBDaUUvVFpZdmszV2xhV01UQmhVUkZpZ0J5WjlBYTh1N1BaK0hJRlNIOFRlOVg0WWY2ZzJKUT09IiwicyI6IjEifQ==", "maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "def391f9-e9d9-4a45-a364-734b50f12ea1", "record_id": "flaws_cloudtrail:0000130:def391f9-e9d9-4a45-a364-734b50f12ea1", "row_index": 130, "timestamp": "2019-07-24T03:38:09Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "7.254.250.215", "user_agent": "aws-cli/1.16.113 Python/3.7.4 Linux/4.9.125-linuxkit botocore/1.12.103", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1088, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "def391f9-e9d9-4a45-a364-734b50f12ea1", "eventTime": "2019-07-24T03:38:09Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "7.254.250.215", "userAgent": "aws-cli/1.16.113 Python/3.7.4 Linux/4.9.125-linuxkit botocore/1.12.103", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"nextToken": "eyJ2IjoiMiIsImMiOiJtZHNXa2lXWHpWbWc3YUhXZmcybktIZGxRZWNmODVHME9UcWh1V01zZE1Ibk1PR2xSNExjcDloVmlySFlQQjV4S2QyMC9FMGRLYnNYazNCOHhOalEveGhQTTBqdjhQY0lZTTlLQXdOVkRteDdNQStXTlVFRmU2MlhMMFlUcFYzTkRUczd3YkttSDV6bGR1WUd4U2dJY1pRKzBDaUUvVFpZdmszV2xhV01UQmhVUkZpZ0J5WjlBYTh1N1BaK0hJRlNIOFRlOVg0WWY2ZzJKUT09IiwicyI6IjEifQ==", "maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "f13294-be87-4a7a-ae07-5cc3879b3248", "record_id": "flaws_cloudtrail:0000131:f13294-be87-4a7a-ae07-5cc3879b3248", "row_index": 131, "timestamp": "2019-07-24T03:38:11Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "7.254.250.215", "user_agent": "aws-cli/1.16.113 Python/3.7.4 Linux/4.9.125-linuxkit botocore/1.12.103", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1078, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "f13294-be87-4a7a-ae07-5cc3879b3248", "eventTime": "2019-07-24T03:38:11Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "7.254.250.215", "userAgent": "aws-cli/1.16.113 Python/3.7.4 Linux/4.9.125-linuxkit botocore/1.12.103", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"nextToken": "eyJ2IjoiMiIsImMiOiJvcWI0WlFwSDhMUXNTRWxGMHhkSVc1ZWVTZ1l4UjFoWlZQSG9JeWZVMEVvUC9KaDBUWHF5TGpETFZOaFBDcVFXVFJkT2hlL05JMk5qNWRrOWF2Nk0xWnNKQmdIVVN3eXkzWFhLbDJUS0dMWHBSSWhNVW5sNndScFJsTWJRNlpCOElzWG5DVGtHVWU4VDdQWU5tdWtUSWNMUWp1T281YVVXYndjRUVMTk1KNUwrNWZsNG9XdEY4cC9QeSsvTUkvWFJqL05YT3dRTndnPT0iLCJzIjoiMSJ9", "maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "f13294-be87-4a7a-ae07-5cc3879b3248", "record_id": "flaws_cloudtrail:0000132:f13294-be87-4a7a-ae07-5cc3879b3248", "row_index": 132, "timestamp": "2019-07-24T03:38:11Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "7.254.250.215", "user_agent": "aws-cli/1.16.113 Python/3.7.4 Linux/4.9.125-linuxkit botocore/1.12.103", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1078, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "f13294-be87-4a7a-ae07-5cc3879b3248", "eventTime": "2019-07-24T03:38:11Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "7.254.250.215", "userAgent": "aws-cli/1.16.113 Python/3.7.4 Linux/4.9.125-linuxkit botocore/1.12.103", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"nextToken": "eyJ2IjoiMiIsImMiOiJvcWI0WlFwSDhMUXNTRWxGMHhkSVc1ZWVTZ1l4UjFoWlZQSG9JeWZVMEVvUC9KaDBUWHF5TGpETFZOaFBDcVFXVFJkT2hlL05JMk5qNWRrOWF2Nk0xWnNKQmdIVVN3eXkzWFhLbDJUS0dMWHBSSWhNVW5sNndScFJsTWJRNlpCOElzWG5DVGtHVWU4VDdQWU5tdWtUSWNMUWp1T281YVVXYndjRUVMTk1KNUwrNWZsNG9XdEY4cC9QeSsvTUkvWFJqL05YT3dRTndnPT0iLCJzIjoiMSJ9", "maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "b01ac696-27ea-4a0a-be5a-77d1099912b7", "record_id": "flaws_cloudtrail:0000133:b01ac696-27ea-4a0a-be5a-77d1099912b7", "row_index": 133, "timestamp": "2019-07-24T03:38:13Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "7.254.250.215", "user_agent": "aws-cli/1.16.113 Python/3.7.4 Linux/4.9.125-linuxkit botocore/1.12.103", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1088, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "b01ac696-27ea-4a0a-be5a-77d1099912b7", "eventTime": "2019-07-24T03:38:13Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "7.254.250.215", "userAgent": "aws-cli/1.16.113 Python/3.7.4 Linux/4.9.125-linuxkit botocore/1.12.103", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"nextToken": "eyJ2IjoiMiIsImMiOiJrU25WaUJ2OFI0L29MOWFpMjIwYXY4REp2Q0RxakFhWW0wZHRjdWE0L2piU2RNNFBRdDgvWk5acnZNbGtDdWVwcTYxNSt3K1lLaVJZdXVqRHRxQnlYR1FlYzF2ajFlYTZ2bVpVRC8rbHRxQ2lnMXJ6dDFISkp2MkxZdFpYYVlUNmdMSDg3TDUveGpKc3pvMGhsQXBmdzlCUjhtcjBtZDViZ1pmYmMzeUF5ZTBmYWZjY3JseXJVaDkxMGIvUEVCRXFKVzhhWnlGaWxrYlJVUT09IiwicyI6IjEifQ==", "maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "b01ac696-27ea-4a0a-be5a-77d1099912b7", "record_id": "flaws_cloudtrail:0000134:b01ac696-27ea-4a0a-be5a-77d1099912b7", "row_index": 134, "timestamp": "2019-07-24T03:38:13Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "7.254.250.215", "user_agent": "aws-cli/1.16.113 Python/3.7.4 Linux/4.9.125-linuxkit botocore/1.12.103", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1088, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "b01ac696-27ea-4a0a-be5a-77d1099912b7", "eventTime": "2019-07-24T03:38:13Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "7.254.250.215", "userAgent": "aws-cli/1.16.113 Python/3.7.4 Linux/4.9.125-linuxkit botocore/1.12.103", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"nextToken": "eyJ2IjoiMiIsImMiOiJrU25WaUJ2OFI0L29MOWFpMjIwYXY4REp2Q0RxakFhWW0wZHRjdWE0L2piU2RNNFBRdDgvWk5acnZNbGtDdWVwcTYxNSt3K1lLaVJZdXVqRHRxQnlYR1FlYzF2ajFlYTZ2bVpVRC8rbHRxQ2lnMXJ6dDFISkp2MkxZdFpYYVlUNmdMSDg3TDUveGpKc3pvMGhsQXBmdzlCUjhtcjBtZDViZ1pmYmMzeUF5ZTBmYWZjY3JseXJVaDkxMGIvUEVCRXFKVzhhWnlGaWxrYlJVUT09IiwicyI6IjEifQ==", "maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "f89ca031-5bfa-4ccd-a959-c2de500a0592", "record_id": "flaws_cloudtrail:0000135:f89ca031-5bfa-4ccd-a959-c2de500a0592", "row_index": 135, "timestamp": "2019-07-24T03:38:15Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "7.254.250.215", "user_agent": "aws-cli/1.16.113 Python/3.7.4 Linux/4.9.125-linuxkit botocore/1.12.103", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1087, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "f89ca031-5bfa-4ccd-a959-c2de500a0592", "eventTime": "2019-07-24T03:38:15Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "7.254.250.215", "userAgent": "aws-cli/1.16.113 Python/3.7.4 Linux/4.9.125-linuxkit botocore/1.12.103", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"nextToken": "eyJ2IjoiMiIsImMiOiJCeDl5MjdScm1MV0crcXJDcCthaFJqcHRrTEtoaVFqcDZqQ1lIbHJ0SkNHYXIxalFTWCtnMy9ILy9qYS9TK3dHeit0L203d2xFaXNraXMzSHNNWU9SRFgyczJGeXYzYXZrOXhOU0dFVzR1TlJYTE5aVGxjT1lOeSt3anVqOTlzdkRoOGtMZXZDTzZzaTlSYmQ4M2J1dm5CaEJ0YUk1NS9MSWpOUGx5UjdqNmsyUjM4M3pvU0pXUDFrZGtFUklSMFRBYnJmTTVuSnNkZ2tvdz09IiwicyI6IjEifQ==", "maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "f89ca031-5bfa-4ccd-a959-c2de500a0592", "record_id": "flaws_cloudtrail:0000136:f89ca031-5bfa-4ccd-a959-c2de500a0592", "row_index": 136, "timestamp": "2019-07-24T03:38:15Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "7.254.250.215", "user_agent": "aws-cli/1.16.113 Python/3.7.4 Linux/4.9.125-linuxkit botocore/1.12.103", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1087, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "f89ca031-5bfa-4ccd-a959-c2de500a0592", "eventTime": "2019-07-24T03:38:15Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "7.254.250.215", "userAgent": "aws-cli/1.16.113 Python/3.7.4 Linux/4.9.125-linuxkit botocore/1.12.103", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"nextToken": "eyJ2IjoiMiIsImMiOiJCeDl5MjdScm1MV0crcXJDcCthaFJqcHRrTEtoaVFqcDZqQ1lIbHJ0SkNHYXIxalFTWCtnMy9ILy9qYS9TK3dHeit0L203d2xFaXNraXMzSHNNWU9SRFgyczJGeXYzYXZrOXhOU0dFVzR1TlJYTE5aVGxjT1lOeSt3anVqOTlzdkRoOGtMZXZDTzZzaTlSYmQ4M2J1dm5CaEJ0YUk1NS9MSWpOUGx5UjdqNmsyUjM4M3pvU0pXUDFrZGtFUklSMFRBYnJmTTVuSnNkZ2tvdz09IiwicyI6IjEifQ==", "maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "7c284ca1-b8d1-46d0-bf4c-4d3640292356", "record_id": "flaws_cloudtrail:0000137:7c284ca1-b8d1-46d0-bf4c-4d3640292356", "row_index": 137, "timestamp": "2019-07-24T03:38:17Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "7.254.250.215", "user_agent": "aws-cli/1.16.113 Python/3.7.4 Linux/4.9.125-linuxkit botocore/1.12.103", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1080, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "7c284ca1-b8d1-46d0-bf4c-4d3640292356", "eventTime": "2019-07-24T03:38:17Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "7.254.250.215", "userAgent": "aws-cli/1.16.113 Python/3.7.4 Linux/4.9.125-linuxkit botocore/1.12.103", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"nextToken": "eyJ2IjoiMiIsImMiOiIzNVBReVhIcE5oV044c3QrQWZFNlBuVnFpemg2K2lkT0ErRFltSjFuWThjWnNDZVltYnI2dDlaMHpiUFNzUm9adzhYb2RoSTFNL0twQ0tweG5VckpqejVWZG84WE5nM04zemdLa0xFS05yN1lqaFBvZkxZT3JRWU05UjBsY3B3eVBnWmxtMy93dlBRL0swMVFLTWI2VW9VM295YjhSNVhraW43emQ0VW5HRXZUMnpSc0JvRWNPaEVVQ0ExQkg0M0tXSFBKOEYzMHREaz0iLCJzIjoiMSJ9", "maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "7c284ca1-b8d1-46d0-bf4c-4d3640292356", "record_id": "flaws_cloudtrail:0000138:7c284ca1-b8d1-46d0-bf4c-4d3640292356", "row_index": 138, "timestamp": "2019-07-24T03:38:17Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "7.254.250.215", "user_agent": "aws-cli/1.16.113 Python/3.7.4 Linux/4.9.125-linuxkit botocore/1.12.103", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1080, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "7c284ca1-b8d1-46d0-bf4c-4d3640292356", "eventTime": "2019-07-24T03:38:17Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "7.254.250.215", "userAgent": "aws-cli/1.16.113 Python/3.7.4 Linux/4.9.125-linuxkit botocore/1.12.103", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"nextToken": "eyJ2IjoiMiIsImMiOiIzNVBReVhIcE5oV044c3QrQWZFNlBuVnFpemg2K2lkT0ErRFltSjFuWThjWnNDZVltYnI2dDlaMHpiUFNzUm9adzhYb2RoSTFNL0twQ0tweG5VckpqejVWZG84WE5nM04zemdLa0xFS05yN1lqaFBvZkxZT3JRWU05UjBsY3B3eVBnWmxtMy93dlBRL0swMVFLTWI2VW9VM295YjhSNVhraW43emQ0VW5HRXZUMnpSc0JvRWNPaEVVQ0ExQkg0M0tXSFBKOEYzMHREaz0iLCJzIjoiMSJ9", "maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "329014-1fe0-4f0f-8597-ad546ea1c8db", "record_id": "flaws_cloudtrail:0000139:329014-1fe0-4f0f-8597-ad546ea1c8db", "row_index": 139, "timestamp": "2019-07-24T03:38:25Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "7.254.250.215", "user_agent": "aws-cli/1.16.113 Python/3.7.4 Linux/4.9.125-linuxkit botocore/1.12.103", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1086, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "329014-1fe0-4f0f-8597-ad546ea1c8db", "eventTime": "2019-07-24T03:38:25Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "7.254.250.215", "userAgent": "aws-cli/1.16.113 Python/3.7.4 Linux/4.9.125-linuxkit botocore/1.12.103", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"nextToken": "eyJ2IjoiMiIsImMiOiJ5WnpqNy9wNkN5Y3p1andIVVJYYXVYVVg0eGIweEZZTTd6K3pqb0Zqa2hLdHVJblRYak1Xa1daSFlEbDFjMlBwZzByZytPdXpEVVBXQWtMN0dBVW14bkJmSktBOWVjVVhWcG1ScUM3cmpWSFgzT0x2REwwSDl1Yi83V3NzeHN2SlFWUm01L0ZYR2MzWnhTUEVERWwxbjdlRVBxR0FlcU1zVjBWcWd4Vy80ZzBqd3g5ZXRpMW1WNDhUUU8xOUI3N3JHZUk1YlhPUlMwTDJHZz09IiwicyI6IjEifQ==", "maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "329014-1fe0-4f0f-8597-ad546ea1c8db", "record_id": "flaws_cloudtrail:0000140:329014-1fe0-4f0f-8597-ad546ea1c8db", "row_index": 140, "timestamp": "2019-07-24T03:38:25Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "7.254.250.215", "user_agent": "aws-cli/1.16.113 Python/3.7.4 Linux/4.9.125-linuxkit botocore/1.12.103", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1086, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "329014-1fe0-4f0f-8597-ad546ea1c8db", "eventTime": "2019-07-24T03:38:25Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "7.254.250.215", "userAgent": "aws-cli/1.16.113 Python/3.7.4 Linux/4.9.125-linuxkit botocore/1.12.103", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"nextToken": "eyJ2IjoiMiIsImMiOiJ5WnpqNy9wNkN5Y3p1andIVVJYYXVYVVg0eGIweEZZTTd6K3pqb0Zqa2hLdHVJblRYak1Xa1daSFlEbDFjMlBwZzByZytPdXpEVVBXQWtMN0dBVW14bkJmSktBOWVjVVhWcG1ScUM3cmpWSFgzT0x2REwwSDl1Yi83V3NzeHN2SlFWUm01L0ZYR2MzWnhTUEVERWwxbjdlRVBxR0FlcU1zVjBWcWd4Vy80ZzBqd3g5ZXRpMW1WNDhUUU8xOUI3N3JHZUk1YlhPUlMwTDJHZz09IiwicyI6IjEifQ==", "maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "dcc1631c-cef0-4e73-9949-b86a3ae7e444", "record_id": "flaws_cloudtrail:0000141:dcc1631c-cef0-4e73-9949-b86a3ae7e444", "row_index": 141, "timestamp": "2019-07-24T03:38:27Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "7.254.250.215", "user_agent": "aws-cli/1.16.113 Python/3.7.4 Linux/4.9.125-linuxkit botocore/1.12.103", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1080, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "dcc1631c-cef0-4e73-9949-b86a3ae7e444", "eventTime": "2019-07-24T03:38:27Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "7.254.250.215", "userAgent": "aws-cli/1.16.113 Python/3.7.4 Linux/4.9.125-linuxkit botocore/1.12.103", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"nextToken": "eyJ2IjoiMiIsImMiOiJiSlVXRDByeExQSTlmbG9hZGNvT1dObFlzSzlsV1lJbEY4YWQvQ3lMdi9VcTN0dHhneFBHSWhvdERsVEZDQzhCQVpmMHdBSlVlb1NkNktkMnpSRjVGcUFrOWQ0djRkR3hvbEU3eGxXejVaemFYNlVRaVpPYWdpeDlkYS9GNzduWHNSTnVESWdpanBGeWtkcER1T2xJUVVHUGh0U3BkaExTNUdBUzl4RU1hRHlzOGgvbWwxb1oxWktaMzBuVHAxbDlXa0V4MS9ZUmt3PT0iLCJzIjoiMSJ9", "maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "dcc1631c-cef0-4e73-9949-b86a3ae7e444", "record_id": "flaws_cloudtrail:0000142:dcc1631c-cef0-4e73-9949-b86a3ae7e444", "row_index": 142, "timestamp": "2019-07-24T03:38:27Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "7.254.250.215", "user_agent": "aws-cli/1.16.113 Python/3.7.4 Linux/4.9.125-linuxkit botocore/1.12.103", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1080, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "dcc1631c-cef0-4e73-9949-b86a3ae7e444", "eventTime": "2019-07-24T03:38:27Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "7.254.250.215", "userAgent": "aws-cli/1.16.113 Python/3.7.4 Linux/4.9.125-linuxkit botocore/1.12.103", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"nextToken": "eyJ2IjoiMiIsImMiOiJiSlVXRDByeExQSTlmbG9hZGNvT1dObFlzSzlsV1lJbEY4YWQvQ3lMdi9VcTN0dHhneFBHSWhvdERsVEZDQzhCQVpmMHdBSlVlb1NkNktkMnpSRjVGcUFrOWQ0djRkR3hvbEU3eGxXejVaemFYNlVRaVpPYWdpeDlkYS9GNzduWHNSTnVESWdpanBGeWtkcER1T2xJUVVHUGh0U3BkaExTNUdBUzl4RU1hRHlzOGgvbWwxb1oxWktaMzBuVHAxbDlXa0V4MS9ZUmt3PT0iLCJzIjoiMSJ9", "maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "2278f269-1cd1-4bb0-82c3-e225be1e49a0", "record_id": "flaws_cloudtrail:0000143:2278f269-1cd1-4bb0-82c3-e225be1e49a0", "row_index": 143, "timestamp": "2019-07-24T03:38:29Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "7.254.250.215", "user_agent": "aws-cli/1.16.113 Python/3.7.4 Linux/4.9.125-linuxkit botocore/1.12.103", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1086, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "2278f269-1cd1-4bb0-82c3-e225be1e49a0", "eventTime": "2019-07-24T03:38:29Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "7.254.250.215", "userAgent": "aws-cli/1.16.113 Python/3.7.4 Linux/4.9.125-linuxkit botocore/1.12.103", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"nextToken": "eyJ2IjoiMiIsImMiOiJuY2NmSDZQK3JaTTNrUmZDNExldnduWHBVN0FVUnFDK2RyZmpuMlRhK1IvWVREdTdpdnJyYjJTSUNnck12RXNRaHFoMTFEV0VTUzhzY3JEOTBFWkUxd1BCS1NEdFJRMk1XK0dnck1halhNS3NZamVxTnNDZXFia0NpcmRucXhaaWVrS21FOTlTMkZSSVRUbkxIWXEraWFLbkxVdXZ0YzFYM2oxc09sZVdmOFFaYnR5R2M4TmxieUY5Zm1EcjJHQWtUSW9nL2p0Q00rTnYwQT09IiwicyI6IjEifQ==", "maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "2278f269-1cd1-4bb0-82c3-e225be1e49a0", "record_id": "flaws_cloudtrail:0000144:2278f269-1cd1-4bb0-82c3-e225be1e49a0", "row_index": 144, "timestamp": "2019-07-24T03:38:29Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "7.254.250.215", "user_agent": "aws-cli/1.16.113 Python/3.7.4 Linux/4.9.125-linuxkit botocore/1.12.103", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1086, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "2278f269-1cd1-4bb0-82c3-e225be1e49a0", "eventTime": "2019-07-24T03:38:29Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "7.254.250.215", "userAgent": "aws-cli/1.16.113 Python/3.7.4 Linux/4.9.125-linuxkit botocore/1.12.103", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"nextToken": "eyJ2IjoiMiIsImMiOiJuY2NmSDZQK3JaTTNrUmZDNExldnduWHBVN0FVUnFDK2RyZmpuMlRhK1IvWVREdTdpdnJyYjJTSUNnck12RXNRaHFoMTFEV0VTUzhzY3JEOTBFWkUxd1BCS1NEdFJRMk1XK0dnck1halhNS3NZamVxTnNDZXFia0NpcmRucXhaaWVrS21FOTlTMkZSSVRUbkxIWXEraWFLbkxVdXZ0YzFYM2oxc09sZVdmOFFaYnR5R2M4TmxieUY5Zm1EcjJHQWtUSW9nL2p0Q00rTnYwQT09IiwicyI6IjEifQ==", "maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "31d82a86-065f-4c65-8dff-ac57e13d5e5a", "record_id": "flaws_cloudtrail:0000145:31d82a86-065f-4c65-8dff-ac57e13d5e5a", "row_index": 145, "timestamp": "2019-07-24T03:38:31Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "7.254.250.215", "user_agent": "aws-cli/1.16.113 Python/3.7.4 Linux/4.9.125-linuxkit botocore/1.12.103", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1088, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "31d82a86-065f-4c65-8dff-ac57e13d5e5a", "eventTime": "2019-07-24T03:38:31Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "7.254.250.215", "userAgent": "aws-cli/1.16.113 Python/3.7.4 Linux/4.9.125-linuxkit botocore/1.12.103", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"nextToken": "eyJ2IjoiMiIsImMiOiJ1N2FBNmZJNGRBVzFzQXJZZ2VBbmYrUkRCb1c4UmpQK3RVWWJJK1ltOGhIaldHU0FlRnZtajNodlVpcmtrOGxhMFVXemVlUWxMcFI0eVFGQi9tclI2Y1FXQ0dBc09UNDRoVjFnZDVtaVJab3hEcVp1UG9kVzlNZitTUlZtSmZveWNTWi9qRzQwRmptVW52RWxiT2xSWFpGeEwzdStCM21XWllOd2RLODdDRzRJczdxOEZHYVFoVjJNaUxuZUZNQmpwNFJ5enZ5Zk1pZlV0QT09IiwicyI6IjEifQ==", "maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "31d82a86-065f-4c65-8dff-ac57e13d5e5a", "record_id": "flaws_cloudtrail:0000146:31d82a86-065f-4c65-8dff-ac57e13d5e5a", "row_index": 146, "timestamp": "2019-07-24T03:38:31Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "7.254.250.215", "user_agent": "aws-cli/1.16.113 Python/3.7.4 Linux/4.9.125-linuxkit botocore/1.12.103", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1088, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "31d82a86-065f-4c65-8dff-ac57e13d5e5a", "eventTime": "2019-07-24T03:38:31Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "7.254.250.215", "userAgent": "aws-cli/1.16.113 Python/3.7.4 Linux/4.9.125-linuxkit botocore/1.12.103", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"nextToken": "eyJ2IjoiMiIsImMiOiJ1N2FBNmZJNGRBVzFzQXJZZ2VBbmYrUkRCb1c4UmpQK3RVWWJJK1ltOGhIaldHU0FlRnZtajNodlVpcmtrOGxhMFVXemVlUWxMcFI0eVFGQi9tclI2Y1FXQ0dBc09UNDRoVjFnZDVtaVJab3hEcVp1UG9kVzlNZitTUlZtSmZveWNTWi9qRzQwRmptVW52RWxiT2xSWFpGeEwzdStCM21XWllOd2RLODdDRzRJczdxOEZHYVFoVjJNaUxuZUZNQmpwNFJ5enZ5Zk1pZlV0QT09IiwicyI6IjEifQ==", "maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "bcc6abf8-71ab-4720-81c3-2c1d2b5650dc", "record_id": "flaws_cloudtrail:0000147:bcc6abf8-71ab-4720-81c3-2c1d2b5650dc", "row_index": 147, "timestamp": "2019-07-24T03:38:33Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "7.254.250.215", "user_agent": "aws-cli/1.16.113 Python/3.7.4 Linux/4.9.125-linuxkit botocore/1.12.103", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1080, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "bcc6abf8-71ab-4720-81c3-2c1d2b5650dc", "eventTime": "2019-07-24T03:38:33Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "7.254.250.215", "userAgent": "aws-cli/1.16.113 Python/3.7.4 Linux/4.9.125-linuxkit botocore/1.12.103", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"nextToken": "eyJ2IjoiMiIsImMiOiJxN0lCTS80S1c2ZnlQMkRpU3EraWdLSzE1RzhWRlJnY2lQaTJXV3l5L3lVVzl5d3VlT1NPSzdCSHlKS3drVk52Y1BFbUFKcDUvZCt4a0NaekFSaENqWDJ0dVFaQ2FDR3d1T01XSmgrOWtwczNzZzRVbnpwTWdDeml0Y2JBS2dYUjhHN1NpYzRBb1lwb2NGb3Rad2hPeW9yandOOU51cFhtNC9UYWpEV1V4cHE3L0MxQXlXTkZXYTJqRkkrczJhYWRWdHhKUmhCd0lpdz0iLCJzIjoiMSJ9", "maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "bcc6abf8-71ab-4720-81c3-2c1d2b5650dc", "record_id": "flaws_cloudtrail:0000148:bcc6abf8-71ab-4720-81c3-2c1d2b5650dc", "row_index": 148, "timestamp": "2019-07-24T03:38:33Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "7.254.250.215", "user_agent": "aws-cli/1.16.113 Python/3.7.4 Linux/4.9.125-linuxkit botocore/1.12.103", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1080, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "bcc6abf8-71ab-4720-81c3-2c1d2b5650dc", "eventTime": "2019-07-24T03:38:33Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "7.254.250.215", "userAgent": "aws-cli/1.16.113 Python/3.7.4 Linux/4.9.125-linuxkit botocore/1.12.103", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"nextToken": "eyJ2IjoiMiIsImMiOiJxN0lCTS80S1c2ZnlQMkRpU3EraWdLSzE1RzhWRlJnY2lQaTJXV3l5L3lVVzl5d3VlT1NPSzdCSHlKS3drVk52Y1BFbUFKcDUvZCt4a0NaekFSaENqWDJ0dVFaQ2FDR3d1T01XSmgrOWtwczNzZzRVbnpwTWdDeml0Y2JBS2dYUjhHN1NpYzRBb1lwb2NGb3Rad2hPeW9yandOOU51cFhtNC9UYWpEV1V4cHE3L0MxQXlXTkZXYTJqRkkrczJhYWRWdHhKUmhCd0lpdz0iLCJzIjoiMSJ9", "maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "d30d834b-da0a-4af0-b7d1-439fa9eb3593", "record_id": "flaws_cloudtrail:0000149:d30d834b-da0a-4af0-b7d1-439fa9eb3593", "row_index": 149, "timestamp": "2019-07-24T03:38:34Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "7.254.250.215", "user_agent": "aws-cli/1.16.113 Python/3.7.4 Linux/4.9.125-linuxkit botocore/1.12.103", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1080, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "d30d834b-da0a-4af0-b7d1-439fa9eb3593", "eventTime": "2019-07-24T03:38:34Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "7.254.250.215", "userAgent": "aws-cli/1.16.113 Python/3.7.4 Linux/4.9.125-linuxkit botocore/1.12.103", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"nextToken": "eyJ2IjoiMiIsImMiOiJRK1VTZHljOUp5S2ExRUt6UnhLdHZIcGZtZkNoUVJYZEwwYlBMRjRjRCs2djk2N0JoRW1OS3c2ekRrWGVQUEkzY1pNZjlsTWgzREIrUDh6S3hxMjZBMk1rWGU2MEdUK0ZQMWZjN0l6QmR0UHN2OFlEWjd2WlE4WlFlRGZsL0l5ZWROaHJJWm1sZW5kNVEzd1RoWE9zMDE2a0hYL1pIYjBmVGVhcUJaQnJNTDUveTdMN1VvMDNNU2QxeDRkYmI1ajU0dk9RM0w1Tk45Yz0iLCJzIjoiMSJ9", "maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "d30d834b-da0a-4af0-b7d1-439fa9eb3593", "record_id": "flaws_cloudtrail:0000150:d30d834b-da0a-4af0-b7d1-439fa9eb3593", "row_index": 150, "timestamp": "2019-07-24T03:38:34Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "7.254.250.215", "user_agent": "aws-cli/1.16.113 Python/3.7.4 Linux/4.9.125-linuxkit botocore/1.12.103", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1080, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "d30d834b-da0a-4af0-b7d1-439fa9eb3593", "eventTime": "2019-07-24T03:38:34Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "7.254.250.215", "userAgent": "aws-cli/1.16.113 Python/3.7.4 Linux/4.9.125-linuxkit botocore/1.12.103", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"nextToken": "eyJ2IjoiMiIsImMiOiJRK1VTZHljOUp5S2ExRUt6UnhLdHZIcGZtZkNoUVJYZEwwYlBMRjRjRCs2djk2N0JoRW1OS3c2ekRrWGVQUEkzY1pNZjlsTWgzREIrUDh6S3hxMjZBMk1rWGU2MEdUK0ZQMWZjN0l6QmR0UHN2OFlEWjd2WlE4WlFlRGZsL0l5ZWROaHJJWm1sZW5kNVEzd1RoWE9zMDE2a0hYL1pIYjBmVGVhcUJaQnJNTDUveTdMN1VvMDNNU2QxeDRkYmI1ajU0dk9RM0w1Tk45Yz0iLCJzIjoiMSJ9", "maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "eab0b4fb-eca3-46ea-a0c7-c28510f228917", "record_id": "flaws_cloudtrail:0000151:eab0b4fb-eca3-46ea-a0c7-c28510f228917", "row_index": 151, "timestamp": "2019-07-24T03:38:36Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "7.254.250.215", "user_agent": "aws-cli/1.16.113 Python/3.7.4 Linux/4.9.125-linuxkit botocore/1.12.103", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1109, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "eab0b4fb-eca3-46ea-a0c7-c28510f228917", "eventTime": "2019-07-24T03:38:36Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "7.254.250.215", "userAgent": "aws-cli/1.16.113 Python/3.7.4 Linux/4.9.125-linuxkit botocore/1.12.103", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"nextToken": "eyJ2IjoiMiIsImMiOiJYZmYycFgybjJ3dDVFNVdhQXlzZ1ZIc0xocGJYVTBTSzhIY1lkRDdRYTdEU3pzdGd3Lyt4WTIvQlJCUGJxWkdNZWU0ZTdXYTNmOVVWL1VSRnZRRXBLRWR2WU50dlJTWjRGMFQvQ1V4NzFVaDVHOWY4VVY5WXVNVlFOMGJvNzFNM2x5WWNSK00xc3ovaWJRTlUvckhTdFA3V0dSV0V4SWtwOUEvTWxMUGd3VS9HaEdTMGx0MmNxa0h0bmZrRGRzeXpENGpkMldhT0Vtb3Q5a1Z3WkJ4T0RUSzIyM3dWQUUwPSIsInMiOiIxIn0=", "maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "eab0b4fb-eca3-46ea-a0c7-c28510f228917", "record_id": "flaws_cloudtrail:0000152:eab0b4fb-eca3-46ea-a0c7-c28510f228917", "row_index": 152, "timestamp": "2019-07-24T03:38:36Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "7.254.250.215", "user_agent": "aws-cli/1.16.113 Python/3.7.4 Linux/4.9.125-linuxkit botocore/1.12.103", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1109, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "eab0b4fb-eca3-46ea-a0c7-c28510f228917", "eventTime": "2019-07-24T03:38:36Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "7.254.250.215", "userAgent": "aws-cli/1.16.113 Python/3.7.4 Linux/4.9.125-linuxkit botocore/1.12.103", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"nextToken": "eyJ2IjoiMiIsImMiOiJYZmYycFgybjJ3dDVFNVdhQXlzZ1ZIc0xocGJYVTBTSzhIY1lkRDdRYTdEU3pzdGd3Lyt4WTIvQlJCUGJxWkdNZWU0ZTdXYTNmOVVWL1VSRnZRRXBLRWR2WU50dlJTWjRGMFQvQ1V4NzFVaDVHOWY4VVY5WXVNVlFOMGJvNzFNM2x5WWNSK00xc3ovaWJRTlUvckhTdFA3V0dSV0V4SWtwOUEvTWxMUGd3VS9HaEdTMGx0MmNxa0h0bmZrRGRzeXpENGpkMldhT0Vtb3Q5a1Z3WkJ4T0RUSzIyM3dWQUUwPSIsInMiOiIxIn0=", "maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "289b4fb2-07de-40f8-9e0c-f16bfc5edbf5", "record_id": "flaws_cloudtrail:0000153:289b4fb2-07de-40f8-9e0c-f16bfc5edbf5", "row_index": 153, "timestamp": "2019-07-24T03:38:41Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "7.254.250.215", "user_agent": "aws-cli/1.16.113 Python/3.7.4 Linux/4.9.125-linuxkit botocore/1.12.103", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1096, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "289b4fb2-07de-40f8-9e0c-f16bfc5edbf5", "eventTime": "2019-07-24T03:38:41Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "7.254.250.215", "userAgent": "aws-cli/1.16.113 Python/3.7.4 Linux/4.9.125-linuxkit botocore/1.12.103", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"nextToken": "eyJ2IjoiMiIsImMiOiI2OS8wMDlxL3UzUFhaZ1FENjEyMjhrUzBybEMrUTJEb2tLN3lBbDVXbllubE5PdysxU0lmZUc0Q0d1WUd4VE9nQWRpSW0zeUpJcHllUWdUd2RLa0JudGUwNmtHZkRqQ2hnbXd2WlFRaDN0UWRkSUozWTJsT1JEeG9ya1UwTTkybWpjZUllemdjQkcxYjJIMVNiQjN5eHo5cFZqUGZlemxGb1F1bkxiVFVrOXNoL21PSW5aRkRBRlZ3cDdQQVROeU5CdUl1V2tjTkl1eU9rbTV1RlJEOFJRPT0iLCJzIjoiMSJ9", "maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "289b4fb2-07de-40f8-9e0c-f16bfc5edbf5", "record_id": "flaws_cloudtrail:0000154:289b4fb2-07de-40f8-9e0c-f16bfc5edbf5", "row_index": 154, "timestamp": "2019-07-24T03:38:41Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "7.254.250.215", "user_agent": "aws-cli/1.16.113 Python/3.7.4 Linux/4.9.125-linuxkit botocore/1.12.103", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1096, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "289b4fb2-07de-40f8-9e0c-f16bfc5edbf5", "eventTime": "2019-07-24T03:38:41Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "7.254.250.215", "userAgent": "aws-cli/1.16.113 Python/3.7.4 Linux/4.9.125-linuxkit botocore/1.12.103", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"nextToken": "eyJ2IjoiMiIsImMiOiI2OS8wMDlxL3UzUFhaZ1FENjEyMjhrUzBybEMrUTJEb2tLN3lBbDVXbllubE5PdysxU0lmZUc0Q0d1WUd4VE9nQWRpSW0zeUpJcHllUWdUd2RLa0JudGUwNmtHZkRqQ2hnbXd2WlFRaDN0UWRkSUozWTJsT1JEeG9ya1UwTTkybWpjZUllemdjQkcxYjJIMVNiQjN5eHo5cFZqUGZlemxGb1F1bkxiVFVrOXNoL21PSW5aRkRBRlZ3cDdQQVROeU5CdUl1V2tjTkl1eU9rbTV1RlJEOFJRPT0iLCJzIjoiMSJ9", "maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "44d4cb5d-107b-46ee-a7b9-4bffc170a54c", "record_id": "flaws_cloudtrail:0000155:44d4cb5d-107b-46ee-a7b9-4bffc170a54c", "row_index": 155, "timestamp": "2019-07-24T03:38:42Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "7.254.250.215", "user_agent": "aws-cli/1.16.113 Python/3.7.4 Linux/4.9.125-linuxkit botocore/1.12.103", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1108, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "44d4cb5d-107b-46ee-a7b9-4bffc170a54c", "eventTime": "2019-07-24T03:38:42Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "7.254.250.215", "userAgent": "aws-cli/1.16.113 Python/3.7.4 Linux/4.9.125-linuxkit botocore/1.12.103", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"nextToken": "eyJ2IjoiMiIsImMiOiIrZHRad0ZXV29yN2RxSmVPMGY5RG5ueFVlQUxianJoeWhqWW9Eajc1WE9jaDd2RERqcEVEVmI0WXhCODNQLzB0eVNOenp2Q2laUkNjUzMxbG5ueG1WRnRMcHdBOVY5ZXQyYjg1eUdHc3ZRZkRWd0lVcmt1UHBhVDhJaGtEb2tKU1pTOENMQ3lZamxoYlNNZWUveWJ3dllGalB3aHZ3ZktyeXYrYXhSQXZ3MDNXbENGNmdOSEVHc25RU2YrVklXSXFxMng5S0F3Tk00ZmdINzRmTWlWR0RmZitvc29yOG1FPSIsInMiOiIxIn0=", "maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "44d4cb5d-107b-46ee-a7b9-4bffc170a54c", "record_id": "flaws_cloudtrail:0000156:44d4cb5d-107b-46ee-a7b9-4bffc170a54c", "row_index": 156, "timestamp": "2019-07-24T03:38:42Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "7.254.250.215", "user_agent": "aws-cli/1.16.113 Python/3.7.4 Linux/4.9.125-linuxkit botocore/1.12.103", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1108, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "44d4cb5d-107b-46ee-a7b9-4bffc170a54c", "eventTime": "2019-07-24T03:38:42Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "7.254.250.215", "userAgent": "aws-cli/1.16.113 Python/3.7.4 Linux/4.9.125-linuxkit botocore/1.12.103", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"nextToken": "eyJ2IjoiMiIsImMiOiIrZHRad0ZXV29yN2RxSmVPMGY5RG5ueFVlQUxianJoeWhqWW9Eajc1WE9jaDd2RERqcEVEVmI0WXhCODNQLzB0eVNOenp2Q2laUkNjUzMxbG5ueG1WRnRMcHdBOVY5ZXQyYjg1eUdHc3ZRZkRWd0lVcmt1UHBhVDhJaGtEb2tKU1pTOENMQ3lZamxoYlNNZWUveWJ3dllGalB3aHZ3ZktyeXYrYXhSQXZ3MDNXbENGNmdOSEVHc25RU2YrVklXSXFxMng5S0F3Tk00ZmdINzRmTWlWR0RmZitvc29yOG1FPSIsInMiOiIxIn0=", "maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "165ce225-94aa-44ce-bda2-e031968c07d8f", "record_id": "flaws_cloudtrail:0000157:165ce225-94aa-44ce-bda2-e031968c07d8f", "row_index": 157, "timestamp": "2019-07-24T03:38:43Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "7.254.250.215", "user_agent": "aws-cli/1.16.113 Python/3.7.4 Linux/4.9.125-linuxkit botocore/1.12.103", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1066, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "165ce225-94aa-44ce-bda2-e031968c07d8f", "eventTime": "2019-07-24T03:38:43Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "7.254.250.215", "userAgent": "aws-cli/1.16.113 Python/3.7.4 Linux/4.9.125-linuxkit botocore/1.12.103", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"nextToken": "eyJ2IjoiMiIsImMiOiJVYjNvMXVzUFhaTGhucmR4bVUydG9TTUpVMW0zVytQa0ZvaEhGUlJpakpkajBnbHdXRGdEaHRUWGxkdkNxVVlrNDBwcGhndmNGZmJ4MzZ5aVhCSmwwTUM3TU40M0dESnNELy8rc0svTWxLUVZuZ0NuWlBZQ2VBVnhxOFdHK2VMU0NCbkFCbEI4S3VYY1lzdmpnOXJSQnVWRW9YblVxMkFZSzl1WnVrSjU3TzZzdHg5RmowRkZRbmMxejZ5aHJiUT0iLCJzIjoiMSJ9", "maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "165ce225-94aa-44ce-bda2-e031968c07d8f", "record_id": "flaws_cloudtrail:0000158:165ce225-94aa-44ce-bda2-e031968c07d8f", "row_index": 158, "timestamp": "2019-07-24T03:38:43Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "7.254.250.215", "user_agent": "aws-cli/1.16.113 Python/3.7.4 Linux/4.9.125-linuxkit botocore/1.12.103", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1066, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "165ce225-94aa-44ce-bda2-e031968c07d8f", "eventTime": "2019-07-24T03:38:43Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "7.254.250.215", "userAgent": "aws-cli/1.16.113 Python/3.7.4 Linux/4.9.125-linuxkit botocore/1.12.103", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"nextToken": "eyJ2IjoiMiIsImMiOiJVYjNvMXVzUFhaTGhucmR4bVUydG9TTUpVMW0zVytQa0ZvaEhGUlJpakpkajBnbHdXRGdEaHRUWGxkdkNxVVlrNDBwcGhndmNGZmJ4MzZ5aVhCSmwwTUM3TU40M0dESnNELy8rc0svTWxLUVZuZ0NuWlBZQ2VBVnhxOFdHK2VMU0NCbkFCbEI4S3VYY1lzdmpnOXJSQnVWRW9YblVxMkFZSzl1WnVrSjU3TzZzdHg5RmowRkZRbmMxejZ5aHJiUT0iLCJzIjoiMSJ9", "maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "db614ca1-c6e7-4d2b-ba14-182bfe654e38", "record_id": "flaws_cloudtrail:0000159:db614ca1-c6e7-4d2b-ba14-182bfe654e38", "row_index": 159, "timestamp": "2019-07-24T03:38:44Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "7.254.250.215", "user_agent": "aws-cli/1.16.113 Python/3.7.4 Linux/4.9.125-linuxkit botocore/1.12.103", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1108, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "db614ca1-c6e7-4d2b-ba14-182bfe654e38", "eventTime": "2019-07-24T03:38:44Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "7.254.250.215", "userAgent": "aws-cli/1.16.113 Python/3.7.4 Linux/4.9.125-linuxkit botocore/1.12.103", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"nextToken": "eyJ2IjoiMiIsImMiOiJRWTQrbk5aNXRrYWd1VHBzQ09ZNlFxV05PTGhzLzBXVTF1RTNYR3RTMjNuU2lTRTJSajFCMlB3Q0NBbytSd0xmdEpTTHRvWFRNR2VrUWp1azB5cWF5dGttb3ZWK0pnYnR0NkxvYmRhaWNVRCt0eFQvdWNlbUorOEhWMVpJTkNDdmdSNURCRnE3WEd0NFdDaktoaVFEa2JKdzI2VE9OeXk5ZEJlMTNnT1l3Y2ZVcHlUMHAwOVpERC81UE5RYUJFV3R1Z0oyZHorWHB4STVka2htRlFKM1NZdXNZWTRYTDRzPSIsInMiOiIxIn0=", "maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "db614ca1-c6e7-4d2b-ba14-182bfe654e38", "record_id": "flaws_cloudtrail:0000160:db614ca1-c6e7-4d2b-ba14-182bfe654e38", "row_index": 160, "timestamp": "2019-07-24T03:38:44Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "7.254.250.215", "user_agent": "aws-cli/1.16.113 Python/3.7.4 Linux/4.9.125-linuxkit botocore/1.12.103", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1108, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "db614ca1-c6e7-4d2b-ba14-182bfe654e38", "eventTime": "2019-07-24T03:38:44Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "7.254.250.215", "userAgent": "aws-cli/1.16.113 Python/3.7.4 Linux/4.9.125-linuxkit botocore/1.12.103", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"nextToken": "eyJ2IjoiMiIsImMiOiJRWTQrbk5aNXRrYWd1VHBzQ09ZNlFxV05PTGhzLzBXVTF1RTNYR3RTMjNuU2lTRTJSajFCMlB3Q0NBbytSd0xmdEpTTHRvWFRNR2VrUWp1azB5cWF5dGttb3ZWK0pnYnR0NkxvYmRhaWNVRCt0eFQvdWNlbUorOEhWMVpJTkNDdmdSNURCRnE3WEd0NFdDaktoaVFEa2JKdzI2VE9OeXk5ZEJlMTNnT1l3Y2ZVcHlUMHAwOVpERC81UE5RYUJFV3R1Z0oyZHorWHB4STVka2htRlFKM1NZdXNZWTRYTDRzPSIsInMiOiIxIn0=", "maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "83d914c2-7b1f-4349-8afa-9564c3f04a52", "record_id": "flaws_cloudtrail:0000161:83d914c2-7b1f-4349-8afa-9564c3f04a52", "row_index": 161, "timestamp": "2019-07-24T03:38:46Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "7.254.250.215", "user_agent": "aws-cli/1.16.113 Python/3.7.4 Linux/4.9.125-linuxkit botocore/1.12.103", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1096, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "83d914c2-7b1f-4349-8afa-9564c3f04a52", "eventTime": "2019-07-24T03:38:46Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "7.254.250.215", "userAgent": "aws-cli/1.16.113 Python/3.7.4 Linux/4.9.125-linuxkit botocore/1.12.103", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"nextToken": "eyJ2IjoiMiIsImMiOiJySzh1L1A2eFlNZTAwaTNCWDE0WXdkcmk3bTdOOHkwVC9mOW1neDJ5SEFMK1RKYVJqUEZmRGx2a0swRlRBTU9jTFNkQXdORlpMS1JYdXo3eEcwOVdQRk83LzFiS3JSNlNJSGNqQmpRZng1UU1JZTJHT2VxbzU0Zkhla2dmSUhiOURrRjAwM1crd2M5bURkQVlLd3MwQUY1OFoyRUZBcHQxTE9vREpPMEhGbDlzMzNPcTJ2cnhaNCs3emZaUzRxVUN6WmFLQytla2huMlJmTGZtTXlCZ1N3PT0iLCJzIjoiMSJ9", "maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "83d914c2-7b1f-4349-8afa-9564c3f04a52", "record_id": "flaws_cloudtrail:0000162:83d914c2-7b1f-4349-8afa-9564c3f04a52", "row_index": 162, "timestamp": "2019-07-24T03:38:46Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "7.254.250.215", "user_agent": "aws-cli/1.16.113 Python/3.7.4 Linux/4.9.125-linuxkit botocore/1.12.103", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1096, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "83d914c2-7b1f-4349-8afa-9564c3f04a52", "eventTime": "2019-07-24T03:38:46Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "7.254.250.215", "userAgent": "aws-cli/1.16.113 Python/3.7.4 Linux/4.9.125-linuxkit botocore/1.12.103", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"nextToken": "eyJ2IjoiMiIsImMiOiJySzh1L1A2eFlNZTAwaTNCWDE0WXdkcmk3bTdOOHkwVC9mOW1neDJ5SEFMK1RKYVJqUEZmRGx2a0swRlRBTU9jTFNkQXdORlpMS1JYdXo3eEcwOVdQRk83LzFiS3JSNlNJSGNqQmpRZng1UU1JZTJHT2VxbzU0Zkhla2dmSUhiOURrRjAwM1crd2M5bURkQVlLd3MwQUY1OFoyRUZBcHQxTE9vREpPMEhGbDlzMzNPcTJ2cnhaNCs3emZaUzRxVUN6WmFLQytla2huMlJmTGZtTXlCZ1N3PT0iLCJzIjoiMSJ9", "maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "8b06138a-a668-4874-ac83-f93a96aec85a", "record_id": "flaws_cloudtrail:0000163:8b06138a-a668-4874-ac83-f93a96aec85a", "row_index": 163, "timestamp": "2019-07-24T03:38:48Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "7.254.250.215", "user_agent": "aws-cli/1.16.113 Python/3.7.4 Linux/4.9.125-linuxkit botocore/1.12.103", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1108, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "8b06138a-a668-4874-ac83-f93a96aec85a", "eventTime": "2019-07-24T03:38:48Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "7.254.250.215", "userAgent": "aws-cli/1.16.113 Python/3.7.4 Linux/4.9.125-linuxkit botocore/1.12.103", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"nextToken": "eyJ2IjoiMiIsImMiOiJHTTN3NVdXZzFvM3NQR1Q5UVlsZk5jdlNuaEVXTkdYS05VZHlEcTYwTElEZGlIQjdyUHJKTy93eTFJcnQvbmd0ZHdGT3JMVDV4d3RKbHJOdnBxS05wYWtnNzRINnZ0WmZNVVJyVGFDMDVoQ2xhSGxEVzg2b1dTZGRUOVlDQXVZZHBGREw5aXNwUVNyNFdiVTBiVG5nc1I0Rmg3WFJ6L0lCMEdpUnJ0dW9UYmtUTEpVbjFycGRQdHFPVFE1Sm5XcHJNMjBObnRna0dOK2MvbW92QkpBUlhpUVZWWkEvcmpnPSIsInMiOiIxIn0=", "maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "8b06138a-a668-4874-ac83-f93a96aec85a", "record_id": "flaws_cloudtrail:0000164:8b06138a-a668-4874-ac83-f93a96aec85a", "row_index": 164, "timestamp": "2019-07-24T03:38:48Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "7.254.250.215", "user_agent": "aws-cli/1.16.113 Python/3.7.4 Linux/4.9.125-linuxkit botocore/1.12.103", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1108, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "8b06138a-a668-4874-ac83-f93a96aec85a", "eventTime": "2019-07-24T03:38:48Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "7.254.250.215", "userAgent": "aws-cli/1.16.113 Python/3.7.4 Linux/4.9.125-linuxkit botocore/1.12.103", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"nextToken": "eyJ2IjoiMiIsImMiOiJHTTN3NVdXZzFvM3NQR1Q5UVlsZk5jdlNuaEVXTkdYS05VZHlEcTYwTElEZGlIQjdyUHJKTy93eTFJcnQvbmd0ZHdGT3JMVDV4d3RKbHJOdnBxS05wYWtnNzRINnZ0WmZNVVJyVGFDMDVoQ2xhSGxEVzg2b1dTZGRUOVlDQXVZZHBGREw5aXNwUVNyNFdiVTBiVG5nc1I0Rmg3WFJ6L0lCMEdpUnJ0dW9UYmtUTEpVbjFycGRQdHFPVFE1Sm5XcHJNMjBObnRna0dOK2MvbW92QkpBUlhpUVZWWkEvcmpnPSIsInMiOiIxIn0=", "maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "8ff93ebd-d52e-4f93-8cc5-4275d755dde2", "record_id": "flaws_cloudtrail:0000165:8ff93ebd-d52e-4f93-8cc5-4275d755dde2", "row_index": 165, "timestamp": "2019-07-24T03:38:49Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "7.254.250.215", "user_agent": "aws-cli/1.16.113 Python/3.7.4 Linux/4.9.125-linuxkit botocore/1.12.103", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1096, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "8ff93ebd-d52e-4f93-8cc5-4275d755dde2", "eventTime": "2019-07-24T03:38:49Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "7.254.250.215", "userAgent": "aws-cli/1.16.113 Python/3.7.4 Linux/4.9.125-linuxkit botocore/1.12.103", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"nextToken": "eyJ2IjoiMiIsImMiOiJRRVBrRS94WFJJL25lUFZteTlRQnhOQ2diY1ZTdDA1YUlTVTZDdklvUlRZQ1FZY09QNzJCbHFBanU2eWNZYnQxa3RBbisycWU5TG40YVo0N3QxNjRnRko4eklydlA3WklvNmkxbWFVNGxqYXd1MVdSdzh0T1ZzS2NYTkVmUHdCbWt2SHg5M3lON2FqYTdvTUEzQ2xwTDFrMEhJUGFoRTBaSUcyMURibWxRYjRRTkl4MkwwVnQvR2RrbE16RitjRTlHcFBMdjEzRnJNRFNaTzFLNkN3ZnpBPT0iLCJzIjoiMSJ9", "maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "8ff93ebd-d52e-4f93-8cc5-4275d755dde2", "record_id": "flaws_cloudtrail:0000166:8ff93ebd-d52e-4f93-8cc5-4275d755dde2", "row_index": 166, "timestamp": "2019-07-24T03:38:49Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "7.254.250.215", "user_agent": "aws-cli/1.16.113 Python/3.7.4 Linux/4.9.125-linuxkit botocore/1.12.103", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1096, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "8ff93ebd-d52e-4f93-8cc5-4275d755dde2", "eventTime": "2019-07-24T03:38:49Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "7.254.250.215", "userAgent": "aws-cli/1.16.113 Python/3.7.4 Linux/4.9.125-linuxkit botocore/1.12.103", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"nextToken": "eyJ2IjoiMiIsImMiOiJRRVBrRS94WFJJL25lUFZteTlRQnhOQ2diY1ZTdDA1YUlTVTZDdklvUlRZQ1FZY09QNzJCbHFBanU2eWNZYnQxa3RBbisycWU5TG40YVo0N3QxNjRnRko4eklydlA3WklvNmkxbWFVNGxqYXd1MVdSdzh0T1ZzS2NYTkVmUHdCbWt2SHg5M3lON2FqYTdvTUEzQ2xwTDFrMEhJUGFoRTBaSUcyMURibWxRYjRRTkl4MkwwVnQvR2RrbE16RitjRTlHcFBMdjEzRnJNRFNaTzFLNkN3ZnpBPT0iLCJzIjoiMSJ9", "maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "03a070633-d9b6-4107-a69f-73b6cc53f00d", "record_id": "flaws_cloudtrail:0000167:03a070633-d9b6-4107-a69f-73b6cc53f00d", "row_index": 167, "timestamp": "2019-07-24T03:38:51Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "7.254.250.215", "user_agent": "aws-cli/1.16.113 Python/3.7.4 Linux/4.9.125-linuxkit botocore/1.12.103", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1109, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "03a070633-d9b6-4107-a69f-73b6cc53f00d", "eventTime": "2019-07-24T03:38:51Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "7.254.250.215", "userAgent": "aws-cli/1.16.113 Python/3.7.4 Linux/4.9.125-linuxkit botocore/1.12.103", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"nextToken": "eyJ2IjoiMiIsImMiOiJxU0FHT2l2c2dLV2dvQ01JWkxvMEtpbnRRSjROcTNCYUR1OVBNcmdkeXNvTWtnK212bkowZFJoNGh5NWpZM1kwR3VZRWFzUmJWa3FNL01DV0NIandOT2pGY1c4VVFRc0tsenYvbjYvQmtPd05PQ1M2K04vQ0ZkOFgrK0ZRdk5heWR1WmwyTmxNREtXU0N2WUdzTlZBcElRdWtSRWVUL1dpbHc3aHg4TVljaGtlbjNqcTJPbnR6TlYxY1BDMUxFd0xrQ1BER002Y3VRLzRRZW9GRi9Ed2hlRDNONmF6d1RjPSIsInMiOiIxIn0=", "maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "03a070633-d9b6-4107-a69f-73b6cc53f00d", "record_id": "flaws_cloudtrail:0000168:03a070633-d9b6-4107-a69f-73b6cc53f00d", "row_index": 168, "timestamp": "2019-07-24T03:38:51Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "7.254.250.215", "user_agent": "aws-cli/1.16.113 Python/3.7.4 Linux/4.9.125-linuxkit botocore/1.12.103", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1109, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "03a070633-d9b6-4107-a69f-73b6cc53f00d", "eventTime": "2019-07-24T03:38:51Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "7.254.250.215", "userAgent": "aws-cli/1.16.113 Python/3.7.4 Linux/4.9.125-linuxkit botocore/1.12.103", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"nextToken": "eyJ2IjoiMiIsImMiOiJxU0FHT2l2c2dLV2dvQ01JWkxvMEtpbnRRSjROcTNCYUR1OVBNcmdkeXNvTWtnK212bkowZFJoNGh5NWpZM1kwR3VZRWFzUmJWa3FNL01DV0NIandOT2pGY1c4VVFRc0tsenYvbjYvQmtPd05PQ1M2K04vQ0ZkOFgrK0ZRdk5heWR1WmwyTmxNREtXU0N2WUdzTlZBcElRdWtSRWVUL1dpbHc3aHg4TVljaGtlbjNqcTJPbnR6TlYxY1BDMUxFd0xrQ1BER002Y3VRLzRRZW9GRi9Ed2hlRDNONmF6d1RjPSIsInMiOiIxIn0=", "maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "7d1cfa8a-5a69-4c7f-8784-a9e2eb59a584", "record_id": "flaws_cloudtrail:0000169:7d1cfa8a-5a69-4c7f-8784-a9e2eb59a584", "row_index": 169, "timestamp": "2019-07-24T03:38:53Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "7.254.250.215", "user_agent": "aws-cli/1.16.113 Python/3.7.4 Linux/4.9.125-linuxkit botocore/1.12.103", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1064, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "7d1cfa8a-5a69-4c7f-8784-a9e2eb59a584", "eventTime": "2019-07-24T03:38:53Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "7.254.250.215", "userAgent": "aws-cli/1.16.113 Python/3.7.4 Linux/4.9.125-linuxkit botocore/1.12.103", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"nextToken": "eyJ2IjoiMiIsImMiOiIyWU5xbFcwV2ZPS1JocVV5N0Z6anl6Z0lkMDEvaUhET205MGtsYmZaT0Q2SHdDN0RyRjdUVDdUa0JhZjQzdFQwK01pRWkwaThTb3RDYVZ4YXdZWmFFSmVkb0NxMHZjS2JxQ0lDdnJTSk94NVVGRW1tdndtSnlSL211c0N0azQwQTd1Y2M5TnU5Zng1a21tK1JkQkttQ05pYUlvZTh1VGNndlU4cmYxRDlkVzErTXJjM1ZYUFpTQmpqV3BYSnNZRT0iLCJzIjoiMSJ9", "maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "7d1cfa8a-5a69-4c7f-8784-a9e2eb59a584", "record_id": "flaws_cloudtrail:0000170:7d1cfa8a-5a69-4c7f-8784-a9e2eb59a584", "row_index": 170, "timestamp": "2019-07-24T03:38:53Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "7.254.250.215", "user_agent": "aws-cli/1.16.113 Python/3.7.4 Linux/4.9.125-linuxkit botocore/1.12.103", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1064, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "7d1cfa8a-5a69-4c7f-8784-a9e2eb59a584", "eventTime": "2019-07-24T03:38:53Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "7.254.250.215", "userAgent": "aws-cli/1.16.113 Python/3.7.4 Linux/4.9.125-linuxkit botocore/1.12.103", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"nextToken": "eyJ2IjoiMiIsImMiOiIyWU5xbFcwV2ZPS1JocVV5N0Z6anl6Z0lkMDEvaUhET205MGtsYmZaT0Q2SHdDN0RyRjdUVDdUa0JhZjQzdFQwK01pRWkwaThTb3RDYVZ4YXdZWmFFSmVkb0NxMHZjS2JxQ0lDdnJTSk94NVVGRW1tdndtSnlSL211c0N0azQwQTd1Y2M5TnU5Zng1a21tK1JkQkttQ05pYUlvZTh1VGNndlU4cmYxRDlkVzErTXJjM1ZYUFpTQmpqV3BYSnNZRT0iLCJzIjoiMSJ9", "maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "4b974d09-e5f1-45b1-912d-0f6aa350c824", "record_id": "flaws_cloudtrail:0000171:4b974d09-e5f1-45b1-912d-0f6aa350c824", "row_index": 171, "timestamp": "2019-07-24T04:19:13Z", "event_type": "GetUser", "event_source": "iam.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "222.205.8.190", "user_agent": "aws-cli/1.11.13 Python/3.5.2 Linux/4.4.0-62-generic botocore/1.4.70", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 666, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "4b974d09-e5f1-45b1-912d-0f6aa350c824", "eventTime": "2019-07-24T04:19:13Z", "eventName": "GetUser", "eventSource": "iam.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "222.205.8.190", "userAgent": "aws-cli/1.11.13 Python/3.5.2 Linux/4.4.0-62-generic botocore/1.4.70", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "4b974d09-e5f1-45b1-912d-0f6aa350c824", "record_id": "flaws_cloudtrail:0000172:4b974d09-e5f1-45b1-912d-0f6aa350c824", "row_index": 172, "timestamp": "2019-07-24T04:19:13Z", "event_type": "GetUser", "event_source": "iam.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "222.205.8.190", "user_agent": "aws-cli/1.11.13 Python/3.5.2 Linux/4.4.0-62-generic botocore/1.4.70", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 666, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "4b974d09-e5f1-45b1-912d-0f6aa350c824", "eventTime": "2019-07-24T04:19:13Z", "eventName": "GetUser", "eventSource": "iam.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "222.205.8.190", "userAgent": "aws-cli/1.11.13 Python/3.5.2 Linux/4.4.0-62-generic botocore/1.4.70", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "9e0d5e1f-7ae6-4def-b244-4ccf8bf3ac96", "record_id": "flaws_cloudtrail:0000173:9e0d5e1f-7ae6-4def-b244-4ccf8bf3ac96", "row_index": 173, "timestamp": "2019-07-24T04:19:27Z", "event_type": "ListAttachedUserPolicies", "event_source": "iam.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "222.205.8.190", "user_agent": "aws-cli/1.11.13 Python/3.5.2 Linux/4.4.0-62-generic botocore/1.4.70", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 700, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "9e0d5e1f-7ae6-4def-b244-4ccf8bf3ac96", "eventTime": "2019-07-24T04:19:27Z", "eventName": "ListAttachedUserPolicies", "eventSource": "iam.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "222.205.8.190", "userAgent": "aws-cli/1.11.13 Python/3.5.2 Linux/4.4.0-62-generic botocore/1.4.70", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"userName": "Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "9e0d5e1f-7ae6-4def-b244-4ccf8bf3ac96", "record_id": "flaws_cloudtrail:0000174:9e0d5e1f-7ae6-4def-b244-4ccf8bf3ac96", "row_index": 174, "timestamp": "2019-07-24T04:19:27Z", "event_type": "ListAttachedUserPolicies", "event_source": "iam.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "222.205.8.190", "user_agent": "aws-cli/1.11.13 Python/3.5.2 Linux/4.4.0-62-generic botocore/1.4.70", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 700, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "9e0d5e1f-7ae6-4def-b244-4ccf8bf3ac96", "eventTime": "2019-07-24T04:19:27Z", "eventName": "ListAttachedUserPolicies", "eventSource": "iam.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "222.205.8.190", "userAgent": "aws-cli/1.11.13 Python/3.5.2 Linux/4.4.0-62-generic botocore/1.4.70", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"userName": "Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "0d954657-7c6a-4341-9f85-353dc021626", "record_id": "flaws_cloudtrail:0000175:0d954657-7c6a-4341-9f85-353dc021626", "row_index": 175, "timestamp": "2019-07-24T04:19:41Z", "event_type": "GetPolicy", "event_source": "iam.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "222.205.8.190", "user_agent": "aws-cli/1.11.13 Python/3.5.2 Linux/4.4.0-62-generic botocore/1.4.70", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 728, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "0d954657-7c6a-4341-9f85-353dc021626", "eventTime": "2019-07-24T04:19:41Z", "eventName": "GetPolicy", "eventSource": "iam.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "222.205.8.190", "userAgent": "aws-cli/1.11.13 Python/3.5.2 Linux/4.4.0-62-generic botocore/1.4.70", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"policyArn": "arn:aws:iam::811596193553:policy/list_apigateways"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "0d954657-7c6a-4341-9f85-353dc021626", "record_id": "flaws_cloudtrail:0000176:0d954657-7c6a-4341-9f85-353dc021626", "row_index": 176, "timestamp": "2019-07-24T04:19:41Z", "event_type": "GetPolicy", "event_source": "iam.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "222.205.8.190", "user_agent": "aws-cli/1.11.13 Python/3.5.2 Linux/4.4.0-62-generic botocore/1.4.70", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 728, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "0d954657-7c6a-4341-9f85-353dc021626", "eventTime": "2019-07-24T04:19:41Z", "eventName": "GetPolicy", "eventSource": "iam.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "222.205.8.190", "userAgent": "aws-cli/1.11.13 Python/3.5.2 Linux/4.4.0-62-generic botocore/1.4.70", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"policyArn": "arn:aws:iam::811596193553:policy/list_apigateways"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "9cfe4e0c-6eae-420a-824c-6110cc104570", "record_id": "flaws_cloudtrail:0000177:9cfe4e0c-6eae-420a-824c-6110cc104570", "row_index": 177, "timestamp": "2019-07-24T04:20:13Z", "event_type": "GetPolicyVersion", "event_source": "iam.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "222.205.8.190", "user_agent": "aws-cli/1.11.13 Python/3.5.2 Linux/4.4.0-62-generic botocore/1.4.70", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 753, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "9cfe4e0c-6eae-420a-824c-6110cc104570", "eventTime": "2019-07-24T04:20:13Z", "eventName": "GetPolicyVersion", "eventSource": "iam.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "222.205.8.190", "userAgent": "aws-cli/1.11.13 Python/3.5.2 Linux/4.4.0-62-generic botocore/1.4.70", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"policyArn": "arn:aws:iam::811596193553:policy/list_apigateways", "versionId": "v4"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "9cfe4e0c-6eae-420a-824c-6110cc104570", "record_id": "flaws_cloudtrail:0000178:9cfe4e0c-6eae-420a-824c-6110cc104570", "row_index": 178, "timestamp": "2019-07-24T04:20:13Z", "event_type": "GetPolicyVersion", "event_source": "iam.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "222.205.8.190", "user_agent": "aws-cli/1.11.13 Python/3.5.2 Linux/4.4.0-62-generic botocore/1.4.70", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 753, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "9cfe4e0c-6eae-420a-824c-6110cc104570", "eventTime": "2019-07-24T04:20:13Z", "eventName": "GetPolicyVersion", "eventSource": "iam.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "222.205.8.190", "userAgent": "aws-cli/1.11.13 Python/3.5.2 Linux/4.4.0-62-generic botocore/1.4.70", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"policyArn": "arn:aws:iam::811596193553:policy/list_apigateways", "versionId": "v4"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "3624b7fd-f1e9-4296-84e5-c0dc4e64ca93", "record_id": "flaws_cloudtrail:0000179:3624b7fd-f1e9-4296-84e5-c0dc4e64ca93", "row_index": 179, "timestamp": "2019-07-24T04:20:32Z", "event_type": "ListFunctions202224", "event_source": "lambda.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "222.205.8.190", "user_agent": "aws-cli/1.11.13 Python/3.5.2 Linux/4.4.0-62-generic botocore/1.4.70", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 681, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "3624b7fd-f1e9-4296-84e5-c0dc4e64ca93", "eventTime": "2019-07-24T04:20:32Z", "eventName": "ListFunctions202224", "eventSource": "lambda.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "222.205.8.190", "userAgent": "aws-cli/1.11.13 Python/3.5.2 Linux/4.4.0-62-generic botocore/1.4.70", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "3624b7fd-f1e9-4296-84e5-c0dc4e64ca93", "record_id": "flaws_cloudtrail:0000180:3624b7fd-f1e9-4296-84e5-c0dc4e64ca93", "row_index": 180, "timestamp": "2019-07-24T04:20:32Z", "event_type": "ListFunctions202224", "event_source": "lambda.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "222.205.8.190", "user_agent": "aws-cli/1.11.13 Python/3.5.2 Linux/4.4.0-62-generic botocore/1.4.70", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 681, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "3624b7fd-f1e9-4296-84e5-c0dc4e64ca93", "eventTime": "2019-07-24T04:20:32Z", "eventName": "ListFunctions202224", "eventSource": "lambda.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "222.205.8.190", "userAgent": "aws-cli/1.11.13 Python/3.5.2 Linux/4.4.0-62-generic botocore/1.4.70", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "c0dd0f2d-6feb-4ac9-a32b-f6b742bc2cc3", "record_id": "flaws_cloudtrail:0000181:c0dd0f2d-6feb-4ac9-a32b-f6b742bc2cc3", "row_index": 181, "timestamp": "2019-07-24T04:20:42Z", "event_type": "GetPolicy202224v2", "event_source": "lambda.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "222.205.8.190", "user_agent": "aws-cli/1.11.13 Python/3.5.2 Linux/4.4.0-62-generic botocore/1.4.70", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 700, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "c0dd0f2d-6feb-4ac9-a32b-f6b742bc2cc3", "eventTime": "2019-07-24T04:20:42Z", "eventName": "GetPolicy202224v2", "eventSource": "lambda.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "222.205.8.190", "userAgent": "aws-cli/1.11.13 Python/3.5.2 Linux/4.4.0-62-generic botocore/1.4.70", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"functionName": "Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "c0dd0f2d-6feb-4ac9-a32b-f6b742bc2cc3", "record_id": "flaws_cloudtrail:0000182:c0dd0f2d-6feb-4ac9-a32b-f6b742bc2cc3", "row_index": 182, "timestamp": "2019-07-24T04:20:42Z", "event_type": "GetPolicy202224v2", "event_source": "lambda.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "222.205.8.190", "user_agent": "aws-cli/1.11.13 Python/3.5.2 Linux/4.4.0-62-generic botocore/1.4.70", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 700, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "c0dd0f2d-6feb-4ac9-a32b-f6b742bc2cc3", "eventTime": "2019-07-24T04:20:42Z", "eventName": "GetPolicy202224v2", "eventSource": "lambda.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "222.205.8.190", "userAgent": "aws-cli/1.11.13 Python/3.5.2 Linux/4.4.0-62-generic botocore/1.4.70", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"functionName": "Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "2f5ab517-71ed-41fb-8f4a-2a2484437a36", "record_id": "flaws_cloudtrail:0000183:2f5ab517-71ed-41fb-8f4a-2a2484437a36", "row_index": 183, "timestamp": "2019-07-24T04:20:54Z", "event_type": "GetStages", "event_source": "apigateway.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "222.205.8.190", "user_agent": "aws-cli/1.11.13 Python/3.5.2 Linux/4.4.0-62-generic botocore/1.4.70", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 730, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "readOnly", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "2f5ab517-71ed-41fb-8f4a-2a2484437a36", "eventTime": "2019-07-24T04:20:54Z", "eventName": "GetStages", "eventSource": "apigateway.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "222.205.8.190", "userAgent": "aws-cli/1.11.13 Python/3.5.2 Linux/4.4.0-62-generic botocore/1.4.70", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"restApiId": "s33ppypa75", "template": false}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "2f5ab517-71ed-41fb-8f4a-2a2484437a36", "record_id": "flaws_cloudtrail:0000184:2f5ab517-71ed-41fb-8f4a-2a2484437a36", "row_index": 184, "timestamp": "2019-07-24T04:20:54Z", "event_type": "GetStages", "event_source": "apigateway.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "222.205.8.190", "user_agent": "aws-cli/1.11.13 Python/3.5.2 Linux/4.4.0-62-generic botocore/1.4.70", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 730, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "readOnly", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "2f5ab517-71ed-41fb-8f4a-2a2484437a36", "eventTime": "2019-07-24T04:20:54Z", "eventName": "GetStages", "eventSource": "apigateway.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "222.205.8.190", "userAgent": "aws-cli/1.11.13 Python/3.5.2 Linux/4.4.0-62-generic botocore/1.4.70", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"restApiId": "s33ppypa75", "template": false}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "85ee6370-7733-4875-b5ee-b2e7437e1d41", "record_id": "flaws_cloudtrail:0000185:85ee6370-7733-4875-b5ee-b2e7437e1d41", "row_index": 185, "timestamp": "2019-07-24T04:21:05Z", "event_type": "CreateLogStream", "event_source": "logs.amazonaws.com", "principal": {"type": "AssumedRole", "arn": "arn:aws:sts::811596193553:assumed-role/Level6/Level6", "account_id": "811596193553", "principal_id": "AROAI4E1FBACLY3FPC6BB:Level6", "user_name": null, "access_key_id": "ASIAIBCG7BO31IT1V0MH", "session_issuer_arn": "arn:aws:iam::811596193553:role/service-role/Level6", "session_issuer_user_name": "Level6"}, "network": {"source_ip": "6.112.3.56", "user_agent": "awslambda-worker", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1027, "raw_record_depth": 4, "raw_record_top_level_keys": ["apiVersion", "awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "85ee6370-7733-4875-b5ee-b2e7437e1d41", "eventTime": "2019-07-24T04:21:05Z", "eventName": "CreateLogStream", "eventSource": "logs.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "6.112.3.56", "userAgent": "awslambda-worker", "awsRegion": "us-west-2", "userIdentity": {"type": "AssumedRole", "principalId": "AROAI4E1FBACLY3FPC6BB:Level6", "arn": "arn:aws:sts::811596193553:assumed-role/Level6/Level6", "accountId": "811596193553", "accessKeyId": "ASIAIBCG7BO31IT1V0MH", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2019-07-24T04:21:05Z"}, "sessionIssuer": {"type": "Role", "principalId": "AROAI4E1FBACLY3FPC6BB", "arn": "arn:aws:iam::811596193553:role/service-role/Level6", "accountId": "811596193553", "userName": "Level6"}}}, "requestParameters": {"logGroupName": "/aws/lambda/Level6", "logStreamName": "2019/07/24/[$LATEST]9c49c757d68dca05554f4983143cb498"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "020aa04d-730d-40f1-ad57-055909ee05cc", "record_id": "flaws_cloudtrail:0000186:020aa04d-730d-40f1-ad57-055909ee05cc", "row_index": 186, "timestamp": "2019-07-24T04:21:05Z", "event_type": "AssumeRole", "event_source": "sts.amazonaws.com", "principal": {"type": "AWSService", "arn": null, "account_id": null, "principal_id": null, "user_name": null, "access_key_id": null, "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "lambda.amazonaws.com", "user_agent": "lambda.amazonaws.com", "aws_region": "us-west-2"}, "resource_arns": ["arn:aws:iam::811596193553:role/service-role/Level6"], "raw_record_size_bytes": 1618, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "resources", "responseElements", "sharedEventID", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "020aa04d-730d-40f1-ad57-055909ee05cc", "eventTime": "2019-07-24T04:21:05Z", "eventName": "AssumeRole", "eventSource": "sts.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "lambda.amazonaws.com", "userAgent": "lambda.amazonaws.com", "awsRegion": "us-west-2", "userIdentity": {"type": "AWSService", "invokedBy": "lambda.amazonaws.com"}, "requestParameters": {"roleSessionName": "Level6", "roleArn": "arn:aws:iam::811596193553:role/service-role/Level6"}, "responseElements": {"credentials": {"accessKeyId": "ASIAIBCG7BO31IT1V0MH", "expiration": "Jul 24, 2019 4:21:05 PM", "sessionToken": "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"}}, "resources": [{"ARN": "arn:aws:iam::811596193553:role/service-role/Level6", "accountId": "811596193553", "type": "AWS::IAM::Role"}]}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "a3772a0e-5fc0-48ea-9a82-2f57e7e1a54c", "record_id": "flaws_cloudtrail:0000187:a3772a0e-5fc0-48ea-9a82-2f57e7e1a54c", "row_index": 187, "timestamp": "2019-07-24T04:21:05Z", "event_type": "AssumeRole", "event_source": "sts.amazonaws.com", "principal": {"type": "AWSService", "arn": null, "account_id": null, "principal_id": null, "user_name": null, "access_key_id": null, "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "lambda.amazonaws.com", "user_agent": "lambda.amazonaws.com", "aws_region": "us-west-2"}, "resource_arns": ["arn:aws:iam::811596193553:role/service-role/Level6"], "raw_record_size_bytes": 1618, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "resources", "responseElements", "sharedEventID", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "a3772a0e-5fc0-48ea-9a82-2f57e7e1a54c", "eventTime": "2019-07-24T04:21:05Z", "eventName": "AssumeRole", "eventSource": "sts.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "lambda.amazonaws.com", "userAgent": "lambda.amazonaws.com", "awsRegion": "us-west-2", "userIdentity": {"type": "AWSService", "invokedBy": "lambda.amazonaws.com"}, "requestParameters": {"roleSessionName": "Level6", "roleArn": "arn:aws:iam::811596193553:role/service-role/Level6"}, "responseElements": {"credentials": {"accessKeyId": "ASIAUWRY50104VYF68QX", "expiration": "Jul 24, 2019 4:21:05 PM", "sessionToken": "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"}}, "resources": [{"ARN": "arn:aws:iam::811596193553:role/service-role/Level6", "accountId": "811596193553", "type": "AWS::IAM::Role"}]}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "85ee6370-7733-4875-b5ee-b2e7437e1d41", "record_id": "flaws_cloudtrail:0000188:85ee6370-7733-4875-b5ee-b2e7437e1d41", "row_index": 188, "timestamp": "2019-07-24T04:21:05Z", "event_type": "CreateLogStream", "event_source": "logs.amazonaws.com", "principal": {"type": "AssumedRole", "arn": "arn:aws:sts::811596193553:assumed-role/Level6/Level6", "account_id": "811596193553", "principal_id": "AROAI4E1FBACLY3FPC6BB:Level6", "user_name": null, "access_key_id": "ASIAIBCG7BO31IT1V0MH", "session_issuer_arn": "arn:aws:iam::811596193553:role/service-role/Level6", "session_issuer_user_name": "Level6"}, "network": {"source_ip": "6.112.3.56", "user_agent": "awslambda-worker", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1027, "raw_record_depth": 4, "raw_record_top_level_keys": ["apiVersion", "awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "85ee6370-7733-4875-b5ee-b2e7437e1d41", "eventTime": "2019-07-24T04:21:05Z", "eventName": "CreateLogStream", "eventSource": "logs.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "6.112.3.56", "userAgent": "awslambda-worker", "awsRegion": "us-west-2", "userIdentity": {"type": "AssumedRole", "principalId": "AROAI4E1FBACLY3FPC6BB:Level6", "arn": "arn:aws:sts::811596193553:assumed-role/Level6/Level6", "accountId": "811596193553", "accessKeyId": "ASIAIBCG7BO31IT1V0MH", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2019-07-24T04:21:05Z"}, "sessionIssuer": {"type": "Role", "principalId": "AROAI4E1FBACLY3FPC6BB", "arn": "arn:aws:iam::811596193553:role/service-role/Level6", "accountId": "811596193553", "userName": "Level6"}}}, "requestParameters": {"logGroupName": "/aws/lambda/Level6", "logStreamName": "2019/07/24/[$LATEST]9c49c757d68dca05554f4983143cb498"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "020aa04d-730d-40f1-ad57-055909ee05cc", "record_id": "flaws_cloudtrail:0000189:020aa04d-730d-40f1-ad57-055909ee05cc", "row_index": 189, "timestamp": "2019-07-24T04:21:05Z", "event_type": "AssumeRole", "event_source": "sts.amazonaws.com", "principal": {"type": "AWSService", "arn": null, "account_id": null, "principal_id": null, "user_name": null, "access_key_id": null, "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "lambda.amazonaws.com", "user_agent": "lambda.amazonaws.com", "aws_region": "us-west-2"}, "resource_arns": ["arn:aws:iam::811596193553:role/service-role/Level6"], "raw_record_size_bytes": 1618, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "resources", "responseElements", "sharedEventID", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "020aa04d-730d-40f1-ad57-055909ee05cc", "eventTime": "2019-07-24T04:21:05Z", "eventName": "AssumeRole", "eventSource": "sts.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "lambda.amazonaws.com", "userAgent": "lambda.amazonaws.com", "awsRegion": "us-west-2", "userIdentity": {"type": "AWSService", "invokedBy": "lambda.amazonaws.com"}, "requestParameters": {"roleSessionName": "Level6", "roleArn": "arn:aws:iam::811596193553:role/service-role/Level6"}, "responseElements": {"credentials": {"accessKeyId": "ASIAIBCG7BO31IT1V0MH", "expiration": "Jul 24, 2019 4:21:05 PM", "sessionToken": "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"}}, "resources": [{"ARN": "arn:aws:iam::811596193553:role/service-role/Level6", "accountId": "811596193553", "type": "AWS::IAM::Role"}]}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "a3772a0e-5fc0-48ea-9a82-2f57e7e1a54c", "record_id": "flaws_cloudtrail:0000190:a3772a0e-5fc0-48ea-9a82-2f57e7e1a54c", "row_index": 190, "timestamp": "2019-07-24T04:21:05Z", "event_type": "AssumeRole", "event_source": "sts.amazonaws.com", "principal": {"type": "AWSService", "arn": null, "account_id": null, "principal_id": null, "user_name": null, "access_key_id": null, "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "lambda.amazonaws.com", "user_agent": "lambda.amazonaws.com", "aws_region": "us-west-2"}, "resource_arns": ["arn:aws:iam::811596193553:role/service-role/Level6"], "raw_record_size_bytes": 1618, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "resources", "responseElements", "sharedEventID", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "a3772a0e-5fc0-48ea-9a82-2f57e7e1a54c", "eventTime": "2019-07-24T04:21:05Z", "eventName": "AssumeRole", "eventSource": "sts.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "lambda.amazonaws.com", "userAgent": "lambda.amazonaws.com", "awsRegion": "us-west-2", "userIdentity": {"type": "AWSService", "invokedBy": "lambda.amazonaws.com"}, "requestParameters": {"roleSessionName": "Level6", "roleArn": "arn:aws:iam::811596193553:role/service-role/Level6"}, "responseElements": {"credentials": {"accessKeyId": "ASIAUWRY50104VYF68QX", "expiration": "Jul 24, 2019 4:21:05 PM", "sessionToken": "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"}}, "resources": [{"ARN": "arn:aws:iam::811596193553:role/service-role/Level6", "accountId": "811596193553", "type": "AWS::IAM::Role"}]}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "28131-5413-4cc4-9b4c-0ad002bc43a3", "record_id": "flaws_cloudtrail:0000191:28131-5413-4cc4-9b4c-0ad002bc43a3", "row_index": 191, "timestamp": "2019-07-24T04:31:24Z", "event_type": "AssumeRole", "event_source": "sts.amazonaws.com", "principal": {"type": "AWSService", "arn": null, "account_id": null, "principal_id": null, "user_name": null, "access_key_id": null, "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "ec2.amazonaws.com", "user_agent": "ec2.amazonaws.com", "aws_region": "us-west-2"}, "resource_arns": ["arn:aws:iam::811596193553:role/flaws"], "raw_record_size_bytes": 1879, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "resources", "responseElements", "sharedEventID", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "28131-5413-4cc4-9b4c-0ad002bc43a3", "eventTime": "2019-07-24T04:31:24Z", "eventName": "AssumeRole", "eventSource": "sts.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "ec2.amazonaws.com", "userAgent": "ec2.amazonaws.com", "awsRegion": "us-west-2", "userIdentity": {"type": "AWSService", "invokedBy": "ec2.amazonaws.com"}, "requestParameters": {"roleSessionName": "i-aa2d3b42e5c6e801a", "roleArn": "arn:aws:iam::811596193553:role/flaws"}, "responseElements": {"credentials": {"accessKeyId": "ASIA2XZSNMS81K2JWQ21", "expiration": "Jul 24, 2019 10:54:45 AM", "sessionToken": "AgoJb3JpZ2luX2VjEH0aCXVzLXdlc3QtMiJHMEUCIQDzBg/Rgi8iLAhRMDPnLZsAQa9jxBv6BXe43IlGzYSlmQIgWj09g/BK0f7xmgx//qa+JR1tyKcdvG92C55djFBC/6wq4wMI5v//////////ARAAGgw5NzU0MjYyNjIwMjkiDA8LlFJydlYpw59N7iq3A6QLfRSYa/VnQ3/JKG9Is7XSSatIXSJNlbuTucZaRAKt0fHTZFhToODFxmpVXVlTzpFNIezF56bfGR3bhrjiaRHnG7LlKgdTQc0AB767u2rFZxNSI+xCq6KC7v8GSVG5fMEROpzwMxpBku/NN6NgKfqBH+SnvQPG+jF6iShI2Jw0yWHtJlQtEkw3nNBDseDUVMAVPrmFzCt6XlE8Sh4bta/aPabOhs9+k96AjZUX86zJYSevPnqfWrQHnfgOw8OpPiEskEE5plPpTC8U6wN9i+Qyzo/Ch2WcUkOogNYuumLEmZywLa6V+pjHeyzzGc3sdmE1WSnkakQO6NZVVWYcEohgO6g8JjymAdMTkP5JNkNWK1f6V5759+ZHgM1Y8OY6ZGe6ml1WvbMorWb65aIR3i/5j72X66+kuyDp29iCpsOfnP16fhYoaPp13KjqMILDDp+84F2nDGs6zR2NX8a9vS8w1QkkGjTRmCe/NLrGo8533JuWW2ZKVZBg9bQZhl5iECUAqlytJ3FnZYaOrUgaXrwjMM0jB6Y2RRH9u83XS+li9M3hrhqI9x1CwxYdTSNq6IIcVlb6hoswnL7f6QU6tAEb/61Rnh5D3LatFnmc15YiDaOtutebPYTReaC+Ur/jaU8/P2cfngdpC5tQQT6k7dlYd9qD/2iIEqsDh3oyPH+aCFiWBZVsx8fvFUDeGN6prWU2JFMQvbnDdEAwIgXk09iMn3jQaighgI026+xGLx0bIvoFU7IU/wfjdwfTWnmpBH9NPLn28o93HVtZn4OG/xsUuinWgci27txM4u818Kw9XJh9+H7MtTdM5it8cKDSu/Yl5DU="}}, "resources": [{"ARN": "arn:aws:iam::811596193553:role/flaws", "accountId": "811596193553", "type": "AWS::IAM::Role"}]}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "28131-5413-4cc4-9b4c-0ad002bc43a3", "record_id": "flaws_cloudtrail:0000192:28131-5413-4cc4-9b4c-0ad002bc43a3", "row_index": 192, "timestamp": "2019-07-24T04:31:24Z", "event_type": "AssumeRole", "event_source": "sts.amazonaws.com", "principal": {"type": "AWSService", "arn": null, "account_id": null, "principal_id": null, "user_name": null, "access_key_id": null, "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "ec2.amazonaws.com", "user_agent": "ec2.amazonaws.com", "aws_region": "us-west-2"}, "resource_arns": ["arn:aws:iam::811596193553:role/flaws"], "raw_record_size_bytes": 1879, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "resources", "responseElements", "sharedEventID", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "28131-5413-4cc4-9b4c-0ad002bc43a3", "eventTime": "2019-07-24T04:31:24Z", "eventName": "AssumeRole", "eventSource": "sts.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "ec2.amazonaws.com", "userAgent": "ec2.amazonaws.com", "awsRegion": "us-west-2", "userIdentity": {"type": "AWSService", "invokedBy": "ec2.amazonaws.com"}, "requestParameters": {"roleSessionName": "i-aa2d3b42e5c6e801a", "roleArn": "arn:aws:iam::811596193553:role/flaws"}, "responseElements": {"credentials": {"accessKeyId": "ASIA2XZSNMS81K2JWQ21", "expiration": "Jul 24, 2019 10:54:45 AM", "sessionToken": "AgoJb3JpZ2luX2VjEH0aCXVzLXdlc3QtMiJHMEUCIQDzBg/Rgi8iLAhRMDPnLZsAQa9jxBv6BXe43IlGzYSlmQIgWj09g/BK0f7xmgx//qa+JR1tyKcdvG92C55djFBC/6wq4wMI5v//////////ARAAGgw5NzU0MjYyNjIwMjkiDA8LlFJydlYpw59N7iq3A6QLfRSYa/VnQ3/JKG9Is7XSSatIXSJNlbuTucZaRAKt0fHTZFhToODFxmpVXVlTzpFNIezF56bfGR3bhrjiaRHnG7LlKgdTQc0AB767u2rFZxNSI+xCq6KC7v8GSVG5fMEROpzwMxpBku/NN6NgKfqBH+SnvQPG+jF6iShI2Jw0yWHtJlQtEkw3nNBDseDUVMAVPrmFzCt6XlE8Sh4bta/aPabOhs9+k96AjZUX86zJYSevPnqfWrQHnfgOw8OpPiEskEE5plPpTC8U6wN9i+Qyzo/Ch2WcUkOogNYuumLEmZywLa6V+pjHeyzzGc3sdmE1WSnkakQO6NZVVWYcEohgO6g8JjymAdMTkP5JNkNWK1f6V5759+ZHgM1Y8OY6ZGe6ml1WvbMorWb65aIR3i/5j72X66+kuyDp29iCpsOfnP16fhYoaPp13KjqMILDDp+84F2nDGs6zR2NX8a9vS8w1QkkGjTRmCe/NLrGo8533JuWW2ZKVZBg9bQZhl5iECUAqlytJ3FnZYaOrUgaXrwjMM0jB6Y2RRH9u83XS+li9M3hrhqI9x1CwxYdTSNq6IIcVlb6hoswnL7f6QU6tAEb/61Rnh5D3LatFnmc15YiDaOtutebPYTReaC+Ur/jaU8/P2cfngdpC5tQQT6k7dlYd9qD/2iIEqsDh3oyPH+aCFiWBZVsx8fvFUDeGN6prWU2JFMQvbnDdEAwIgXk09iMn3jQaighgI026+xGLx0bIvoFU7IU/wfjdwfTWnmpBH9NPLn28o93HVtZn4OG/xsUuinWgci27txM4u818Kw9XJh9+H7MtTdM5it8cKDSu/Yl5DU="}}, "resources": [{"ARN": "arn:aws:iam::811596193553:role/flaws", "accountId": "811596193553", "type": "AWS::IAM::Role"}]}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "7fc40b63-a711-4ec1-b33c-deb4a6e20e1b", "record_id": "flaws_cloudtrail:0000193:7fc40b63-a711-4ec1-b33c-deb4a6e20e1b", "row_index": 193, "timestamp": "2019-07-24T05:31:24Z", "event_type": "AssumeRole", "event_source": "sts.amazonaws.com", "principal": {"type": "AWSService", "arn": null, "account_id": null, "principal_id": null, "user_name": null, "access_key_id": null, "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "ec2.amazonaws.com", "user_agent": "ec2.amazonaws.com", "aws_region": "us-west-2"}, "resource_arns": ["arn:aws:iam::811596193553:role/flaws"], "raw_record_size_bytes": 1883, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "resources", "responseElements", "sharedEventID", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "7fc40b63-a711-4ec1-b33c-deb4a6e20e1b", "eventTime": "2019-07-24T05:31:24Z", "eventName": "AssumeRole", "eventSource": "sts.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "ec2.amazonaws.com", "userAgent": "ec2.amazonaws.com", "awsRegion": "us-west-2", "userIdentity": {"type": "AWSService", "invokedBy": "ec2.amazonaws.com"}, "requestParameters": {"roleSessionName": "i-aa2d3b42e5c6e801a", "roleArn": "arn:aws:iam::811596193553:role/flaws"}, "responseElements": {"credentials": {"accessKeyId": "ASIAZ3CWS2LHOAPE8LGF", "expiration": "Jul 24, 2019 12:00:37 PM", "sessionToken": "AgoJb3JpZ2luX2VjEH4aCXVzLXdlc3QtMiJHMEUCIQDQdqEtLm9RRuJmQdnZ9JOL+ZCnE/Gd9ZJx06Lty5Xr1gIgA5VRTvg7ux1zCnFMvVIIKNJoS+TY7G5Kf8hhdcHrWwYq4wMI5///////////ARAAGgw5NzU0MjYyNjIwMjkiDHw3e9UlkHAuX/uVCyq3A+uAmdqXTVsMcz8XmroENr7SVHTnsEB10NfghNp8s0tJFQWtaKLvAWYHwvllG1QSoQ1uyQGhRD83wRQNnDg2PnHc+K9+lByuzdAYNtumXAqjNsQDOmkfGuLN4bIT7KougP6RtuvDn926KfolrEIYHtgbgujBDx7Xmppd6B5zBc4ecoIbdB7x5h2pDjP2LfoLL/b4iqLxoPCBU8TnAD49OyTyzYLD/ZrJhi5liN4nozGdNqLPoCOi9A90ig9Op/e+hUg303DT1QFzsgp106oaZ37l3vQx8ffO/8qru+41PSc1RlsmkQoJgb0JCxQrv/JT6hkGOMFyAkbuXOhk23auwFZVh3nWjvbs2wGTsigu9h6pKuhAvJEn1+ZhnE3q7fgriKTXLVsMZL69leXQL1EhitQ9/VMZyQ99dj+EFOT2+jgwblUl4k0zLM9zrrbOAGj6IEjbUt+SeBiMe2gaqZXIaaO8YGST0X+UlzYUpHPlFRuurNITW5DvZHpKHzzPM/+gOfJUGCHUZy7/ChrAZu1P5fJPm9INoi8V5nqTbZswQabgjF10XYlT0hVjEyhg+HLNYhePVYqB4vswrNrf6QU6tAFQonjFfM8SDHhWX2CQCOCnqRDuLOLDqEhUPzVTTnAvBW5vq6pNv9nP4NqWgQOurEkQzkzJl/1+OcZT9eq7ppdRW0DC4xCY1SDQrThho7c3YQuKQeEc6N42L8oaPWO1y+hklIqe6mgReiJtqiTRM0cqhT2OJZqYLHnPUGbuzMQ+YXIgOkxcuuCd2WfYWyjqZmjoJP/m468ghAzTouVTJ+T3hSVHWK7o0co13G/ffAMyI1KIf8w="}}, "resources": [{"ARN": "arn:aws:iam::811596193553:role/flaws", "accountId": "811596193553", "type": "AWS::IAM::Role"}]}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "7fc40b63-a711-4ec1-b33c-deb4a6e20e1b", "record_id": "flaws_cloudtrail:0000194:7fc40b63-a711-4ec1-b33c-deb4a6e20e1b", "row_index": 194, "timestamp": "2019-07-24T05:31:24Z", "event_type": "AssumeRole", "event_source": "sts.amazonaws.com", "principal": {"type": "AWSService", "arn": null, "account_id": null, "principal_id": null, "user_name": null, "access_key_id": null, "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "ec2.amazonaws.com", "user_agent": "ec2.amazonaws.com", "aws_region": "us-west-2"}, "resource_arns": ["arn:aws:iam::811596193553:role/flaws"], "raw_record_size_bytes": 1883, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "resources", "responseElements", "sharedEventID", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "7fc40b63-a711-4ec1-b33c-deb4a6e20e1b", "eventTime": "2019-07-24T05:31:24Z", "eventName": "AssumeRole", "eventSource": "sts.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "ec2.amazonaws.com", "userAgent": "ec2.amazonaws.com", "awsRegion": "us-west-2", "userIdentity": {"type": "AWSService", "invokedBy": "ec2.amazonaws.com"}, "requestParameters": {"roleSessionName": "i-aa2d3b42e5c6e801a", "roleArn": "arn:aws:iam::811596193553:role/flaws"}, "responseElements": {"credentials": {"accessKeyId": "ASIAZ3CWS2LHOAPE8LGF", "expiration": "Jul 24, 2019 12:00:37 PM", "sessionToken": "AgoJb3JpZ2luX2VjEH4aCXVzLXdlc3QtMiJHMEUCIQDQdqEtLm9RRuJmQdnZ9JOL+ZCnE/Gd9ZJx06Lty5Xr1gIgA5VRTvg7ux1zCnFMvVIIKNJoS+TY7G5Kf8hhdcHrWwYq4wMI5///////////ARAAGgw5NzU0MjYyNjIwMjkiDHw3e9UlkHAuX/uVCyq3A+uAmdqXTVsMcz8XmroENr7SVHTnsEB10NfghNp8s0tJFQWtaKLvAWYHwvllG1QSoQ1uyQGhRD83wRQNnDg2PnHc+K9+lByuzdAYNtumXAqjNsQDOmkfGuLN4bIT7KougP6RtuvDn926KfolrEIYHtgbgujBDx7Xmppd6B5zBc4ecoIbdB7x5h2pDjP2LfoLL/b4iqLxoPCBU8TnAD49OyTyzYLD/ZrJhi5liN4nozGdNqLPoCOi9A90ig9Op/e+hUg303DT1QFzsgp106oaZ37l3vQx8ffO/8qru+41PSc1RlsmkQoJgb0JCxQrv/JT6hkGOMFyAkbuXOhk23auwFZVh3nWjvbs2wGTsigu9h6pKuhAvJEn1+ZhnE3q7fgriKTXLVsMZL69leXQL1EhitQ9/VMZyQ99dj+EFOT2+jgwblUl4k0zLM9zrrbOAGj6IEjbUt+SeBiMe2gaqZXIaaO8YGST0X+UlzYUpHPlFRuurNITW5DvZHpKHzzPM/+gOfJUGCHUZy7/ChrAZu1P5fJPm9INoi8V5nqTbZswQabgjF10XYlT0hVjEyhg+HLNYhePVYqB4vswrNrf6QU6tAFQonjFfM8SDHhWX2CQCOCnqRDuLOLDqEhUPzVTTnAvBW5vq6pNv9nP4NqWgQOurEkQzkzJl/1+OcZT9eq7ppdRW0DC4xCY1SDQrThho7c3YQuKQeEc6N42L8oaPWO1y+hklIqe6mgReiJtqiTRM0cqhT2OJZqYLHnPUGbuzMQ+YXIgOkxcuuCd2WfYWyjqZmjoJP/m468ghAzTouVTJ+T3hSVHWK7o0co13G/ffAMyI1KIf8w="}}, "resources": [{"ARN": "arn:aws:iam::811596193553:role/flaws", "accountId": "811596193553", "type": "AWS::IAM::Role"}]}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "add95ae9-87d7-498f-aa42-4f3439da6840", "record_id": "flaws_cloudtrail:0000195:add95ae9-87d7-498f-aa42-4f3439da6840", "row_index": 195, "timestamp": "2019-07-24T06:23:15Z", "event_type": "AssumeRole", "event_source": "sts.amazonaws.com", "principal": {"type": "AWSService", "arn": null, "account_id": null, "principal_id": null, "user_name": null, "access_key_id": null, "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "config.amazonaws.com", "user_agent": "config.amazonaws.com", "aws_region": "us-west-2"}, "resource_arns": ["arn:aws:iam::811596193553:role/service-role/config-role-us-west-2"], "raw_record_size_bytes": 1936, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "resources", "responseElements", "sharedEventID", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "add95ae9-87d7-498f-aa42-4f3439da6840", "eventTime": "2019-07-24T06:23:15Z", "eventName": "AssumeRole", "eventSource": "sts.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "config.amazonaws.com", "userAgent": "config.amazonaws.com", "awsRegion": "us-west-2", "userIdentity": {"type": "AWSService", "invokedBy": "config.amazonaws.com"}, "requestParameters": {"roleArn": "arn:aws:iam::811596193553:role/service-role/config-role-us-west-2", "roleSessionName": "AWSConfig"}, "responseElements": {"credentials": {"accessKeyId": "ASIAPPXQK2E8PPM44NYF", "expiration": "Jul 24, 2019 7:23:15 AM", "sessionToken": "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"}, "assumedRoleUser": {"assumedRoleId": "AROASM3HWKK95VDO4HH81:AWSConfig", "arn": "arn:aws:sts::811596193553:assumed-role/config-role-us-west-2/AWSConfig"}}, "resources": [{"ARN": "arn:aws:iam::811596193553:role/service-role/config-role-us-west-2", "accountId": "811596193553", "type": "AWS::IAM::Role"}]}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "add95ae9-87d7-498f-aa42-4f3439da6840", "record_id": "flaws_cloudtrail:0000196:add95ae9-87d7-498f-aa42-4f3439da6840", "row_index": 196, "timestamp": "2019-07-24T06:23:15Z", "event_type": "AssumeRole", "event_source": "sts.amazonaws.com", "principal": {"type": "AWSService", "arn": null, "account_id": null, "principal_id": null, "user_name": null, "access_key_id": null, "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "config.amazonaws.com", "user_agent": "config.amazonaws.com", "aws_region": "us-west-2"}, "resource_arns": ["arn:aws:iam::811596193553:role/service-role/config-role-us-west-2"], "raw_record_size_bytes": 1936, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "resources", "responseElements", "sharedEventID", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "add95ae9-87d7-498f-aa42-4f3439da6840", "eventTime": "2019-07-24T06:23:15Z", "eventName": "AssumeRole", "eventSource": "sts.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "config.amazonaws.com", "userAgent": "config.amazonaws.com", "awsRegion": "us-west-2", "userIdentity": {"type": "AWSService", "invokedBy": "config.amazonaws.com"}, "requestParameters": {"roleArn": "arn:aws:iam::811596193553:role/service-role/config-role-us-west-2", "roleSessionName": "AWSConfig"}, "responseElements": {"credentials": {"accessKeyId": "ASIAPPXQK2E8PPM44NYF", "expiration": "Jul 24, 2019 7:23:15 AM", "sessionToken": "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"}, "assumedRoleUser": {"assumedRoleId": "AROASM3HWKK95VDO4HH81:AWSConfig", "arn": "arn:aws:sts::811596193553:assumed-role/config-role-us-west-2/AWSConfig"}}, "resources": [{"ARN": "arn:aws:iam::811596193553:role/service-role/config-role-us-west-2", "accountId": "811596193553", "type": "AWS::IAM::Role"}]}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "562aee5e-7c83-48a5-b85a-7c8a7bbb7a09", "record_id": "flaws_cloudtrail:0000197:562aee5e-7c83-48a5-b85a-7c8a7bbb7a09", "row_index": 197, "timestamp": "2019-07-24T06:31:24Z", "event_type": "AssumeRole", "event_source": "sts.amazonaws.com", "principal": {"type": "AWSService", "arn": null, "account_id": null, "principal_id": null, "user_name": null, "access_key_id": null, "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "ec2.amazonaws.com", "user_agent": "ec2.amazonaws.com", "aws_region": "us-west-2"}, "resource_arns": ["arn:aws:iam::811596193553:role/flaws"], "raw_record_size_bytes": 1883, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "resources", "responseElements", "sharedEventID", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "562aee5e-7c83-48a5-b85a-7c8a7bbb7a09", "eventTime": "2019-07-24T06:31:24Z", "eventName": "AssumeRole", "eventSource": "sts.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "ec2.amazonaws.com", "userAgent": "ec2.amazonaws.com", "awsRegion": "us-west-2", "userIdentity": {"type": "AWSService", "invokedBy": "ec2.amazonaws.com"}, "requestParameters": {"roleSessionName": "i-aa2d3b42e5c6e801a", "roleArn": "arn:aws:iam::811596193553:role/flaws"}, "responseElements": {"credentials": {"accessKeyId": "ASIA5GG8MNWKRZZD1P8X", "expiration": "Jul 24, 2019 12:55:02 PM", "sessionToken": "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"}}, "resources": [{"ARN": "arn:aws:iam::811596193553:role/flaws", "accountId": "811596193553", "type": "AWS::IAM::Role"}]}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "562aee5e-7c83-48a5-b85a-7c8a7bbb7a09", "record_id": "flaws_cloudtrail:0000198:562aee5e-7c83-48a5-b85a-7c8a7bbb7a09", "row_index": 198, "timestamp": "2019-07-24T06:31:24Z", "event_type": "AssumeRole", "event_source": "sts.amazonaws.com", "principal": {"type": "AWSService", "arn": null, "account_id": null, "principal_id": null, "user_name": null, "access_key_id": null, "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "ec2.amazonaws.com", "user_agent": "ec2.amazonaws.com", "aws_region": "us-west-2"}, "resource_arns": ["arn:aws:iam::811596193553:role/flaws"], "raw_record_size_bytes": 1883, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "resources", "responseElements", "sharedEventID", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "562aee5e-7c83-48a5-b85a-7c8a7bbb7a09", "eventTime": "2019-07-24T06:31:24Z", "eventName": "AssumeRole", "eventSource": "sts.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "ec2.amazonaws.com", "userAgent": "ec2.amazonaws.com", "awsRegion": "us-west-2", "userIdentity": {"type": "AWSService", "invokedBy": "ec2.amazonaws.com"}, "requestParameters": {"roleSessionName": "i-aa2d3b42e5c6e801a", "roleArn": "arn:aws:iam::811596193553:role/flaws"}, "responseElements": {"credentials": {"accessKeyId": "ASIA5GG8MNWKRZZD1P8X", "expiration": "Jul 24, 2019 12:55:02 PM", "sessionToken": "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"}}, "resources": [{"ARN": "arn:aws:iam::811596193553:role/flaws", "accountId": "811596193553", "type": "AWS::IAM::Role"}]}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "f589e1d9-d876-4bdd-9267-67bd2efac5bc", "record_id": "flaws_cloudtrail:0000199:f589e1d9-d876-4bdd-9267-67bd2efac5bc", "row_index": 199, "timestamp": "2019-07-24T06:41:34Z", "event_type": "GetCallerIdentity", "event_source": "sts.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "211.111.151.81", "user_agent": "aws-cli/1.16.202 Python/2.7.13 Linux/4.9.0-9-amd64 botocore/1.12.192", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 779, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "f589e1d9-d876-4bdd-9267-67bd2efac5bc", "eventTime": "2019-07-24T06:41:34Z", "eventName": "GetCallerIdentity", "eventSource": "sts.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "211.111.151.81", "userAgent": "aws-cli/1.16.202 Python/2.7.13 Linux/4.9.0-9-amd64 botocore/1.12.192", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "responseElements": {"userId": "AIDA9BO36HFBHKGJAO9C1", "account": "811596193553", "arn": "arn:aws:iam::811596193553:user/backup"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "f589e1d9-d876-4bdd-9267-67bd2efac5bc", "record_id": "flaws_cloudtrail:0000200:f589e1d9-d876-4bdd-9267-67bd2efac5bc", "row_index": 200, "timestamp": "2019-07-24T06:41:34Z", "event_type": "GetCallerIdentity", "event_source": "sts.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "211.111.151.81", "user_agent": "aws-cli/1.16.202 Python/2.7.13 Linux/4.9.0-9-amd64 botocore/1.12.192", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 779, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "f589e1d9-d876-4bdd-9267-67bd2efac5bc", "eventTime": "2019-07-24T06:41:34Z", "eventName": "GetCallerIdentity", "eventSource": "sts.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "211.111.151.81", "userAgent": "aws-cli/1.16.202 Python/2.7.13 Linux/4.9.0-9-amd64 botocore/1.12.192", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "responseElements": {"userId": "AIDA9BO36HFBHKGJAO9C1", "account": "811596193553", "arn": "arn:aws:iam::811596193553:user/backup"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "8e0a0104-4e41-41df-8d2e-a0588659e62f", "record_id": "flaws_cloudtrail:0000201:8e0a0104-4e41-41df-8d2e-a0588659e62f", "row_index": 201, "timestamp": "2019-07-24T06:41:49Z", "event_type": "GetCallerIdentity", "event_source": "sts.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "211.111.151.81", "user_agent": "aws-cli/1.16.202 Python/2.7.13 Linux/4.9.0-9-amd64 botocore/1.12.192", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 779, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "8e0a0104-4e41-41df-8d2e-a0588659e62f", "eventTime": "2019-07-24T06:41:49Z", "eventName": "GetCallerIdentity", "eventSource": "sts.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "211.111.151.81", "userAgent": "aws-cli/1.16.202 Python/2.7.13 Linux/4.9.0-9-amd64 botocore/1.12.192", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "responseElements": {"userId": "AIDA9BO36HFBHKGJAO9C1", "account": "811596193553", "arn": "arn:aws:iam::811596193553:user/backup"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "8e0a0104-4e41-41df-8d2e-a0588659e62f", "record_id": "flaws_cloudtrail:0000202:8e0a0104-4e41-41df-8d2e-a0588659e62f", "row_index": 202, "timestamp": "2019-07-24T06:41:49Z", "event_type": "GetCallerIdentity", "event_source": "sts.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "211.111.151.81", "user_agent": "aws-cli/1.16.202 Python/2.7.13 Linux/4.9.0-9-amd64 botocore/1.12.192", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 779, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "8e0a0104-4e41-41df-8d2e-a0588659e62f", "eventTime": "2019-07-24T06:41:49Z", "eventName": "GetCallerIdentity", "eventSource": "sts.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "211.111.151.81", "userAgent": "aws-cli/1.16.202 Python/2.7.13 Linux/4.9.0-9-amd64 botocore/1.12.192", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "responseElements": {"userId": "AIDA9BO36HFBHKGJAO9C1", "account": "811596193553", "arn": "arn:aws:iam::811596193553:user/backup"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "11c48ca2-780f-407d-b979-5efe79330", "record_id": "flaws_cloudtrail:0000203:11c48ca2-780f-407d-b979-5efe79330", "row_index": 203, "timestamp": "2019-07-24T07:31:24Z", "event_type": "AssumeRole", "event_source": "sts.amazonaws.com", "principal": {"type": "AWSService", "arn": null, "account_id": null, "principal_id": null, "user_name": null, "access_key_id": null, "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "ec2.amazonaws.com", "user_agent": "ec2.amazonaws.com", "aws_region": "us-west-2"}, "resource_arns": ["arn:aws:iam::811596193553:role/flaws"], "raw_record_size_bytes": 1889, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "resources", "responseElements", "sharedEventID", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "11c48ca2-780f-407d-b979-5efe79330", "eventTime": "2019-07-24T07:31:24Z", "eventName": "AssumeRole", "eventSource": "sts.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "ec2.amazonaws.com", "userAgent": "ec2.amazonaws.com", "awsRegion": "us-west-2", "userIdentity": {"type": "AWSService", "invokedBy": "ec2.amazonaws.com"}, "requestParameters": {"roleSessionName": "i-aa2d3b42e5c6e801a", "roleArn": "arn:aws:iam::811596193553:role/flaws"}, "responseElements": {"credentials": {"accessKeyId": "ASIA2TT4OG94WKAS01EN", "expiration": "Jul 24, 2019 1:33:13 PM", "sessionToken": "AgoJb3JpZ2luX2VjEID//////////wEaCXVzLXdlc3QtMiJHMEUCIG6c9dUtjZ2Fbo19CkTYpXSOQc+BLCI6dK8zqo8tyDsnAiEAsDBiZxYYph5MyivFkoFK9ckEMm+U4R9ogy3VfBhE9Msq4wMI6f//////////ARAAGgw5NzU0MjYyNjIwMjkiDKb0DWNDCBGhPEydjCq3A3cobH6Ntaml41uHDGkQUk9P3oaLOWWzOrNEMMQnbmUIqDVGYSwx/XzP99Ljl0mjXIt8uL6Z2cj5ikwCQlXSTKf4LwszVDOw5ouPnoaNKGpLiWKZr9wqtUcPP5GnO/WJZgBP3NHdUHJ3f32cwOEUYNrhJa1TRmctjifValIidTw0qxjS+l5CU1KAcIyhp71UAtamMkiNGw1P9GrmOZgztzspl2cx+IkkmN8k+wGKQiGhABFKekHB5TcS3FS2JN2BHCW9/ErmAuUVB/hwJeKg6BLLrqqlv5wm3Jrk/SXxiqrTiExJ01CspAR3xy3d5SFJtUHRqcxiYKhnQafRQRRmR8vXztFLZ0vjQ3h2vGqDdJ7WaByfaf4URV7DZbnPONkZMit23cN1UGRTxN5tlsViY1B9lChvTmV09D2tf9QLi7fSHYPkVDUnAs/i1HN60rgWPW5gn8bIvsG1NBq8wRIv89QoDgN1FNcVXJjDc7McbPm3RjlngxsAxYMl+7tFKR5erYKsawIK3609MjDowcTOMUuHZFgB+m8axtufJc3iuVfG9Z+P3qJ6wZ+T46zp4J9PuOInZRGE9k8wzJLg6QU6tAE8/b0r8U91EizI7F0/zVaZJI/kh/58dj63XJI1RiScwS0TlueAHYvLT92yfQoV6bYQQ8GBRmuPtEX0dsAwZY1HzMIkelwkpgWcLkV6rifE0eP9UOdiubppxD1f9Gpy79OO1fyUbfO1ZN2+WdE4G4RswDYjUUf/ukvVuydBgA3q+ljGM7vhui8abEOSUeytEckgKZduhanNIwhtAOWRld6jic3s4PC6nuDZ/o3NQP0exkkmHus="}}, "resources": [{"ARN": "arn:aws:iam::811596193553:role/flaws", "accountId": "811596193553", "type": "AWS::IAM::Role"}]}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "11c48ca2-780f-407d-b979-5efe79330", "record_id": "flaws_cloudtrail:0000204:11c48ca2-780f-407d-b979-5efe79330", "row_index": 204, "timestamp": "2019-07-24T07:31:24Z", "event_type": "AssumeRole", "event_source": "sts.amazonaws.com", "principal": {"type": "AWSService", "arn": null, "account_id": null, "principal_id": null, "user_name": null, "access_key_id": null, "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "ec2.amazonaws.com", "user_agent": "ec2.amazonaws.com", "aws_region": "us-west-2"}, "resource_arns": ["arn:aws:iam::811596193553:role/flaws"], "raw_record_size_bytes": 1889, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "resources", "responseElements", "sharedEventID", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "11c48ca2-780f-407d-b979-5efe79330", "eventTime": "2019-07-24T07:31:24Z", "eventName": "AssumeRole", "eventSource": "sts.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "ec2.amazonaws.com", "userAgent": "ec2.amazonaws.com", "awsRegion": "us-west-2", "userIdentity": {"type": "AWSService", "invokedBy": "ec2.amazonaws.com"}, "requestParameters": {"roleSessionName": "i-aa2d3b42e5c6e801a", "roleArn": "arn:aws:iam::811596193553:role/flaws"}, "responseElements": {"credentials": {"accessKeyId": "ASIA2TT4OG94WKAS01EN", "expiration": "Jul 24, 2019 1:33:13 PM", "sessionToken": "AgoJb3JpZ2luX2VjEID//////////wEaCXVzLXdlc3QtMiJHMEUCIG6c9dUtjZ2Fbo19CkTYpXSOQc+BLCI6dK8zqo8tyDsnAiEAsDBiZxYYph5MyivFkoFK9ckEMm+U4R9ogy3VfBhE9Msq4wMI6f//////////ARAAGgw5NzU0MjYyNjIwMjkiDKb0DWNDCBGhPEydjCq3A3cobH6Ntaml41uHDGkQUk9P3oaLOWWzOrNEMMQnbmUIqDVGYSwx/XzP99Ljl0mjXIt8uL6Z2cj5ikwCQlXSTKf4LwszVDOw5ouPnoaNKGpLiWKZr9wqtUcPP5GnO/WJZgBP3NHdUHJ3f32cwOEUYNrhJa1TRmctjifValIidTw0qxjS+l5CU1KAcIyhp71UAtamMkiNGw1P9GrmOZgztzspl2cx+IkkmN8k+wGKQiGhABFKekHB5TcS3FS2JN2BHCW9/ErmAuUVB/hwJeKg6BLLrqqlv5wm3Jrk/SXxiqrTiExJ01CspAR3xy3d5SFJtUHRqcxiYKhnQafRQRRmR8vXztFLZ0vjQ3h2vGqDdJ7WaByfaf4URV7DZbnPONkZMit23cN1UGRTxN5tlsViY1B9lChvTmV09D2tf9QLi7fSHYPkVDUnAs/i1HN60rgWPW5gn8bIvsG1NBq8wRIv89QoDgN1FNcVXJjDc7McbPm3RjlngxsAxYMl+7tFKR5erYKsawIK3609MjDowcTOMUuHZFgB+m8axtufJc3iuVfG9Z+P3qJ6wZ+T46zp4J9PuOInZRGE9k8wzJLg6QU6tAE8/b0r8U91EizI7F0/zVaZJI/kh/58dj63XJI1RiScwS0TlueAHYvLT92yfQoV6bYQQ8GBRmuPtEX0dsAwZY1HzMIkelwkpgWcLkV6rifE0eP9UOdiubppxD1f9Gpy79OO1fyUbfO1ZN2+WdE4G4RswDYjUUf/ukvVuydBgA3q+ljGM7vhui8abEOSUeytEckgKZduhanNIwhtAOWRld6jic3s4PC6nuDZ/o3NQP0exkkmHus="}}, "resources": [{"ARN": "arn:aws:iam::811596193553:role/flaws", "accountId": "811596193553", "type": "AWS::IAM::Role"}]}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "b49db95e-0596-4d99-8cae-a8f5e8929578", "record_id": "flaws_cloudtrail:0000205:b49db95e-0596-4d99-8cae-a8f5e8929578", "row_index": 205, "timestamp": "2019-07-24T07:44:45Z", "event_type": "ListBuckets", "event_source": "s3.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "5.180.250.254", "user_agent": "[aws-cli/1.16.203 Python/3.6.0 Windows/10 botocore/1.12.193]", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 809, "raw_record_depth": 3, "raw_record_top_level_keys": ["additionalEventData", "awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "b49db95e-0596-4d99-8cae-a8f5e8929578", "eventTime": "2019-07-24T07:44:45Z", "eventName": "ListBuckets", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "5.180.250.254", "userAgent": "[aws-cli/1.16.203 Python/3.6.0 Windows/10 botocore/1.12.193]", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"host": ["s3.us-west-2.amazonaws.com"]}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "b49db95e-0596-4d99-8cae-a8f5e8929578", "record_id": "flaws_cloudtrail:0000206:b49db95e-0596-4d99-8cae-a8f5e8929578", "row_index": 206, "timestamp": "2019-07-24T07:44:45Z", "event_type": "ListBuckets", "event_source": "s3.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "5.180.250.254", "user_agent": "[aws-cli/1.16.203 Python/3.6.0 Windows/10 botocore/1.12.193]", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 809, "raw_record_depth": 3, "raw_record_top_level_keys": ["additionalEventData", "awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "b49db95e-0596-4d99-8cae-a8f5e8929578", "eventTime": "2019-07-24T07:44:45Z", "eventName": "ListBuckets", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "5.180.250.254", "userAgent": "[aws-cli/1.16.203 Python/3.6.0 Windows/10 botocore/1.12.193]", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"host": ["s3.us-west-2.amazonaws.com"]}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "81218-eaf3-4174-bbfc-79dd991dcb56", "record_id": "flaws_cloudtrail:0000207:81218-eaf3-4174-bbfc-79dd991dcb56", "row_index": 207, "timestamp": "2019-07-24T07:50:56Z", "event_type": "DescribeSSLPolicies", "event_source": "elasticloadbalancing.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "5.180.250.254", "user_agent": "aws-cli/1.16.203 Python/3.6.0 Windows/10 botocore/1.12.193", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 717, "raw_record_depth": 3, "raw_record_top_level_keys": ["apiVersion", "awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "81218-eaf3-4174-bbfc-79dd991dcb56", "eventTime": "2019-07-24T07:50:56Z", "eventName": "DescribeSSLPolicies", "eventSource": "elasticloadbalancing.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "5.180.250.254", "userAgent": "aws-cli/1.16.203 Python/3.6.0 Windows/10 botocore/1.12.193", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"names": []}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "81218-eaf3-4174-bbfc-79dd991dcb56", "record_id": "flaws_cloudtrail:0000208:81218-eaf3-4174-bbfc-79dd991dcb56", "row_index": 208, "timestamp": "2019-07-24T07:50:56Z", "event_type": "DescribeSSLPolicies", "event_source": "elasticloadbalancing.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "5.180.250.254", "user_agent": "aws-cli/1.16.203 Python/3.6.0 Windows/10 botocore/1.12.193", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 717, "raw_record_depth": 3, "raw_record_top_level_keys": ["apiVersion", "awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "81218-eaf3-4174-bbfc-79dd991dcb56", "eventTime": "2019-07-24T07:50:56Z", "eventName": "DescribeSSLPolicies", "eventSource": "elasticloadbalancing.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "5.180.250.254", "userAgent": "aws-cli/1.16.203 Python/3.6.0 Windows/10 botocore/1.12.193", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"names": []}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "a8e87fb8-61a0-42d7-88ee-f12741ce3318", "record_id": "flaws_cloudtrail:0000209:a8e87fb8-61a0-42d7-88ee-f12741ce3318", "row_index": 209, "timestamp": "2019-07-24T07:56:05Z", "event_type": "DescribeSecurityGroups", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "5.180.250.254", "user_agent": "aws-cli/1.16.203 Python/3.6.0 Windows/10 botocore/1.12.193", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 730, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "a8e87fb8-61a0-42d7-88ee-f12741ce3318", "eventTime": "2019-07-24T07:56:05Z", "eventName": "DescribeSecurityGroups", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "5.180.250.254", "userAgent": "aws-cli/1.16.203 Python/3.6.0 Windows/10 botocore/1.12.193", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"securityGroupSet": {}, "securityGroupIdSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "a8e87fb8-61a0-42d7-88ee-f12741ce3318", "record_id": "flaws_cloudtrail:0000210:a8e87fb8-61a0-42d7-88ee-f12741ce3318", "row_index": 210, "timestamp": "2019-07-24T07:56:05Z", "event_type": "DescribeSecurityGroups", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "5.180.250.254", "user_agent": "aws-cli/1.16.203 Python/3.6.0 Windows/10 botocore/1.12.193", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 730, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "a8e87fb8-61a0-42d7-88ee-f12741ce3318", "eventTime": "2019-07-24T07:56:05Z", "eventName": "DescribeSecurityGroups", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "5.180.250.254", "userAgent": "aws-cli/1.16.203 Python/3.6.0 Windows/10 botocore/1.12.193", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"securityGroupSet": {}, "securityGroupIdSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "1604d567-3351-4352-bd27-445d061842", "record_id": "flaws_cloudtrail:0000211:1604d567-3351-4352-bd27-445d061842", "row_index": 211, "timestamp": "2019-07-24T08:02:38Z", "event_type": "DescribeSecurityGroups", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "5.180.250.254", "user_agent": "aws-cli/1.16.203 Python/3.6.0 Windows/10 botocore/1.12.193", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 728, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "1604d567-3351-4352-bd27-445d061842", "eventTime": "2019-07-24T08:02:38Z", "eventName": "DescribeSecurityGroups", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "5.180.250.254", "userAgent": "aws-cli/1.16.203 Python/3.6.0 Windows/10 botocore/1.12.193", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"securityGroupSet": {}, "securityGroupIdSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "1604d567-3351-4352-bd27-445d061842", "record_id": "flaws_cloudtrail:0000212:1604d567-3351-4352-bd27-445d061842", "row_index": 212, "timestamp": "2019-07-24T08:02:38Z", "event_type": "DescribeSecurityGroups", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "5.180.250.254", "user_agent": "aws-cli/1.16.203 Python/3.6.0 Windows/10 botocore/1.12.193", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 728, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "1604d567-3351-4352-bd27-445d061842", "eventTime": "2019-07-24T08:02:38Z", "eventName": "DescribeSecurityGroups", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "5.180.250.254", "userAgent": "aws-cli/1.16.203 Python/3.6.0 Windows/10 botocore/1.12.193", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"securityGroupSet": {}, "securityGroupIdSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "e9c9db3a-e2a4-4d20-b3f2-a70d0b55bfaa", "record_id": "flaws_cloudtrail:0000213:e9c9db3a-e2a4-4d20-b3f2-a70d0b55bfaa", "row_index": 213, "timestamp": "2019-07-24T08:03:26Z", "event_type": "DescribeSecurityGroups", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "5.180.250.254", "user_agent": "aws-cli/1.16.203 Python/3.6.0 Windows/10 botocore/1.12.193", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 765, "raw_record_depth": 5, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "e9c9db3a-e2a4-4d20-b3f2-a70d0b55bfaa", "eventTime": "2019-07-24T08:03:26Z", "eventName": "DescribeSecurityGroups", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "5.180.250.254", "userAgent": "aws-cli/1.16.203 Python/3.6.0 Windows/10 botocore/1.12.193", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"securityGroupSet": {}, "securityGroupIdSet": {"items": [{"groupId": "sg-12ed83b4"}]}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "e9c9db3a-e2a4-4d20-b3f2-a70d0b55bfaa", "record_id": "flaws_cloudtrail:0000214:e9c9db3a-e2a4-4d20-b3f2-a70d0b55bfaa", "row_index": 214, "timestamp": "2019-07-24T08:03:26Z", "event_type": "DescribeSecurityGroups", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "5.180.250.254", "user_agent": "aws-cli/1.16.203 Python/3.6.0 Windows/10 botocore/1.12.193", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 765, "raw_record_depth": 5, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "e9c9db3a-e2a4-4d20-b3f2-a70d0b55bfaa", "eventTime": "2019-07-24T08:03:26Z", "eventName": "DescribeSecurityGroups", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "5.180.250.254", "userAgent": "aws-cli/1.16.203 Python/3.6.0 Windows/10 botocore/1.12.193", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"securityGroupSet": {}, "securityGroupIdSet": {"items": [{"groupId": "sg-12ed83b4"}]}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "afd435b7-5b40-4e78-bdc4-4d616056", "record_id": "flaws_cloudtrail:0000215:afd435b7-5b40-4e78-bdc4-4d616056", "row_index": 215, "timestamp": "2019-07-24T08:16:00Z", "event_type": "GetAccountAuthorizationDetails", "event_source": "iam.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "5.180.250.254", "user_agent": "aws-cli/1.16.203 Python/3.6.0 Windows/10 botocore/1.12.193", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 676, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "afd435b7-5b40-4e78-bdc4-4d616056", "eventTime": "2019-07-24T08:16:00Z", "eventName": "GetAccountAuthorizationDetails", "eventSource": "iam.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "5.180.250.254", "userAgent": "aws-cli/1.16.203 Python/3.6.0 Windows/10 botocore/1.12.193", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "afd435b7-5b40-4e78-bdc4-4d616056", "record_id": "flaws_cloudtrail:0000216:afd435b7-5b40-4e78-bdc4-4d616056", "row_index": 216, "timestamp": "2019-07-24T08:16:00Z", "event_type": "GetAccountAuthorizationDetails", "event_source": "iam.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "5.180.250.254", "user_agent": "aws-cli/1.16.203 Python/3.6.0 Windows/10 botocore/1.12.193", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 676, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "afd435b7-5b40-4e78-bdc4-4d616056", "eventTime": "2019-07-24T08:16:00Z", "eventName": "GetAccountAuthorizationDetails", "eventSource": "iam.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "5.180.250.254", "userAgent": "aws-cli/1.16.203 Python/3.6.0 Windows/10 botocore/1.12.193", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "35f9a772-38ba-421b-b639-33d5b4e7d757", "record_id": "flaws_cloudtrail:0000217:35f9a772-38ba-421b-b639-33d5b4e7d757", "row_index": 217, "timestamp": "2019-07-24T08:22:23Z", "event_type": "ListBuckets", "event_source": "s3.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "248.251.245.4", "user_agent": "[aws-cli/1.16.96 Python/2.7.16 Linux/4.19.0-kali5-amd64 botocore/1.12.86]", "aws_region": "eu-west-1"}, "resource_arns": [], "raw_record_size_bytes": 820, "raw_record_depth": 3, "raw_record_top_level_keys": ["additionalEventData", "awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "35f9a772-38ba-421b-b639-33d5b4e7d757", "eventTime": "2019-07-24T08:22:23Z", "eventName": "ListBuckets", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "248.251.245.4", "userAgent": "[aws-cli/1.16.96 Python/2.7.16 Linux/4.19.0-kali5-amd64 botocore/1.12.86]", "awsRegion": "eu-west-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"host": ["s3.eu-west-1.amazonaws.com"]}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "35f9a772-38ba-421b-b639-33d5b4e7d757", "record_id": "flaws_cloudtrail:0000218:35f9a772-38ba-421b-b639-33d5b4e7d757", "row_index": 218, "timestamp": "2019-07-24T08:22:23Z", "event_type": "ListBuckets", "event_source": "s3.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "248.251.245.4", "user_agent": "[aws-cli/1.16.96 Python/2.7.16 Linux/4.19.0-kali5-amd64 botocore/1.12.86]", "aws_region": "eu-west-1"}, "resource_arns": [], "raw_record_size_bytes": 820, "raw_record_depth": 3, "raw_record_top_level_keys": ["additionalEventData", "awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "35f9a772-38ba-421b-b639-33d5b4e7d757", "eventTime": "2019-07-24T08:22:23Z", "eventName": "ListBuckets", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "248.251.245.4", "userAgent": "[aws-cli/1.16.96 Python/2.7.16 Linux/4.19.0-kali5-amd64 botocore/1.12.86]", "awsRegion": "eu-west-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"host": ["s3.eu-west-1.amazonaws.com"]}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "350f5611-96a8-47d9-8894-d112c7bc746d", "record_id": "flaws_cloudtrail:0000219:350f5611-96a8-47d9-8894-d112c7bc746d", "row_index": 219, "timestamp": "2019-07-24T08:27:51Z", "event_type": "GetAccountAuthorizationDetails", "event_source": "iam.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "5.180.250.254", "user_agent": "aws-cli/1.16.203 Python/3.6.0 Windows/10 botocore/1.12.193", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 680, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "350f5611-96a8-47d9-8894-d112c7bc746d", "eventTime": "2019-07-24T08:27:51Z", "eventName": "GetAccountAuthorizationDetails", "eventSource": "iam.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "5.180.250.254", "userAgent": "aws-cli/1.16.203 Python/3.6.0 Windows/10 botocore/1.12.193", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "350f5611-96a8-47d9-8894-d112c7bc746d", "record_id": "flaws_cloudtrail:0000220:350f5611-96a8-47d9-8894-d112c7bc746d", "row_index": 220, "timestamp": "2019-07-24T08:27:51Z", "event_type": "GetAccountAuthorizationDetails", "event_source": "iam.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "5.180.250.254", "user_agent": "aws-cli/1.16.203 Python/3.6.0 Windows/10 botocore/1.12.193", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 680, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "350f5611-96a8-47d9-8894-d112c7bc746d", "eventTime": "2019-07-24T08:27:51Z", "eventName": "GetAccountAuthorizationDetails", "eventSource": "iam.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "5.180.250.254", "userAgent": "aws-cli/1.16.203 Python/3.6.0 Windows/10 botocore/1.12.193", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "f56801b-5a5d-490b-92b8-164e529302a58", "record_id": "flaws_cloudtrail:0000221:f56801b-5a5d-490b-92b8-164e529302a58", "row_index": 221, "timestamp": "2019-07-24T08:29:57Z", "event_type": "GetCallerIdentity", "event_source": "sts.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "248.251.245.4", "user_agent": "aws-cli/1.16.96 Python/2.7.16 Linux/4.19.0-kali5-amd64 botocore/1.12.86", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 781, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "f56801b-5a5d-490b-92b8-164e529302a58", "eventTime": "2019-07-24T08:29:57Z", "eventName": "GetCallerIdentity", "eventSource": "sts.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "248.251.245.4", "userAgent": "aws-cli/1.16.96 Python/2.7.16 Linux/4.19.0-kali5-amd64 botocore/1.12.86", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "responseElements": {"userId": "AIDA9BO36HFBHKGJAO9C1", "account": "811596193553", "arn": "arn:aws:iam::811596193553:user/backup"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "f56801b-5a5d-490b-92b8-164e529302a58", "record_id": "flaws_cloudtrail:0000222:f56801b-5a5d-490b-92b8-164e529302a58", "row_index": 222, "timestamp": "2019-07-24T08:29:57Z", "event_type": "GetCallerIdentity", "event_source": "sts.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "248.251.245.4", "user_agent": "aws-cli/1.16.96 Python/2.7.16 Linux/4.19.0-kali5-amd64 botocore/1.12.86", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 781, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "f56801b-5a5d-490b-92b8-164e529302a58", "eventTime": "2019-07-24T08:29:57Z", "eventName": "GetCallerIdentity", "eventSource": "sts.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "248.251.245.4", "userAgent": "aws-cli/1.16.96 Python/2.7.16 Linux/4.19.0-kali5-amd64 botocore/1.12.86", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "responseElements": {"userId": "AIDA9BO36HFBHKGJAO9C1", "account": "811596193553", "arn": "arn:aws:iam::811596193553:user/backup"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "c229cff7-5518-4e2b-aa8c-d59016ea29c2", "record_id": "flaws_cloudtrail:0000223:c229cff7-5518-4e2b-aa8c-d59016ea29c2", "row_index": 223, "timestamp": "2019-07-24T08:31:13Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "248.251.245.4", "user_agent": "aws-cli/1.16.96 Python/2.7.16 Linux/4.19.0-kali5-amd64 botocore/1.12.86", "aws_region": "eu-west-1"}, "resource_arns": [], "raw_record_size_bytes": 762, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "c229cff7-5518-4e2b-aa8c-d59016ea29c2", "eventTime": "2019-07-24T08:31:13Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "248.251.245.4", "userAgent": "aws-cli/1.16.96 Python/2.7.16 Linux/4.19.0-kali5-amd64 botocore/1.12.86", "awsRegion": "eu-west-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "c229cff7-5518-4e2b-aa8c-d59016ea29c2", "record_id": "flaws_cloudtrail:0000224:c229cff7-5518-4e2b-aa8c-d59016ea29c2", "row_index": 224, "timestamp": "2019-07-24T08:31:13Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "248.251.245.4", "user_agent": "aws-cli/1.16.96 Python/2.7.16 Linux/4.19.0-kali5-amd64 botocore/1.12.86", "aws_region": "eu-west-1"}, "resource_arns": [], "raw_record_size_bytes": 762, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "c229cff7-5518-4e2b-aa8c-d59016ea29c2", "eventTime": "2019-07-24T08:31:13Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "248.251.245.4", "userAgent": "aws-cli/1.16.96 Python/2.7.16 Linux/4.19.0-kali5-amd64 botocore/1.12.86", "awsRegion": "eu-west-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "090655fbb-048f-4277-be1a-19e3c7d4468f", "record_id": "flaws_cloudtrail:0000225:090655fbb-048f-4277-be1a-19e3c7d4468f", "row_index": 225, "timestamp": "2019-07-24T08:31:15Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "248.251.245.4", "user_agent": "aws-cli/1.16.96 Python/2.7.16 Linux/4.19.0-kali5-amd64 botocore/1.12.86", "aws_region": "eu-west-1"}, "resource_arns": [], "raw_record_size_bytes": 1082, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "090655fbb-048f-4277-be1a-19e3c7d4468f", "eventTime": "2019-07-24T08:31:15Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "248.251.245.4", "userAgent": "aws-cli/1.16.96 Python/2.7.16 Linux/4.19.0-kali5-amd64 botocore/1.12.86", "awsRegion": "eu-west-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"nextToken": "eyJ2IjoiMiIsImMiOiJIdXZGNnliTTVxbUJOK3M5Q1JrWGhoNGw1SjRIazl2OTI1S0tZZWk1WERsS2dIZDY1V2xqWFB5alc4d3UrMnc0c0lXRHFHZFlQRTBKMWhrY25xSGJvYnBEc3QrY1A1a2U0VDFBclJ6RjRtWkZoNTlRYWRZMzI0djBoVXJIbk45RzNFRXRsU2tMU2tCSDNTSzFha1VvNTNjMjJ3Vkl6b2xOUlQ0MHlTczRiWUZSdVlLWmZqRWNYT2xRMjZwdWFGTkl0Y0NJdEhiME9PdGsiLCJzIjoiMSJ9", "maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "090655fbb-048f-4277-be1a-19e3c7d4468f", "record_id": "flaws_cloudtrail:0000226:090655fbb-048f-4277-be1a-19e3c7d4468f", "row_index": 226, "timestamp": "2019-07-24T08:31:15Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "248.251.245.4", "user_agent": "aws-cli/1.16.96 Python/2.7.16 Linux/4.19.0-kali5-amd64 botocore/1.12.86", "aws_region": "eu-west-1"}, "resource_arns": [], "raw_record_size_bytes": 1082, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "090655fbb-048f-4277-be1a-19e3c7d4468f", "eventTime": "2019-07-24T08:31:15Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "248.251.245.4", "userAgent": "aws-cli/1.16.96 Python/2.7.16 Linux/4.19.0-kali5-amd64 botocore/1.12.86", "awsRegion": "eu-west-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"nextToken": "eyJ2IjoiMiIsImMiOiJIdXZGNnliTTVxbUJOK3M5Q1JrWGhoNGw1SjRIazl2OTI1S0tZZWk1WERsS2dIZDY1V2xqWFB5alc4d3UrMnc0c0lXRHFHZFlQRTBKMWhrY25xSGJvYnBEc3QrY1A1a2U0VDFBclJ6RjRtWkZoNTlRYWRZMzI0djBoVXJIbk45RzNFRXRsU2tMU2tCSDNTSzFha1VvNTNjMjJ3Vkl6b2xOUlQ0MHlTczRiWUZSdVlLWmZqRWNYT2xRMjZwdWFGTkl0Y0NJdEhiME9PdGsiLCJzIjoiMSJ9", "maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "77aaaf6b-d5b1-4ab9-9062-8d6d180216", "record_id": "flaws_cloudtrail:0000227:77aaaf6b-d5b1-4ab9-9062-8d6d180216", "row_index": 227, "timestamp": "2019-07-24T08:31:17Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "248.251.245.4", "user_agent": "aws-cli/1.16.96 Python/2.7.16 Linux/4.19.0-kali5-amd64 botocore/1.12.86", "aws_region": "eu-west-1"}, "resource_arns": [], "raw_record_size_bytes": 1079, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "77aaaf6b-d5b1-4ab9-9062-8d6d180216", "eventTime": "2019-07-24T08:31:17Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "248.251.245.4", "userAgent": "aws-cli/1.16.96 Python/2.7.16 Linux/4.19.0-kali5-amd64 botocore/1.12.86", "awsRegion": "eu-west-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"nextToken": "eyJ2IjoiMiIsImMiOiJEZ1NzdkNpNk0wQTJZS0VYdklOeWFGNzIybHpYYThNazhHL1I0U3FWQmFVZko2NGtTNUNhQVlUWlUxRlB4eUJTYmpGcjF1QWFlUlpycjRxdVU3TmNLTU5YanhOa1kxOEFEVXF3d0ZpNFMrU0ErM2ppWWhacWhHbHptOGZvTkRWVUJhT2twRWpoMUlIWm5RODk5blppTFpDY0NNdWhPbDFDT0FhTmRsREs3UXNyWTRyaXdxQWl0UDA1eFk3V25JY1ZrM1loNUs4dDQzTT0iLCJzIjoiMSJ9", "maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "77aaaf6b-d5b1-4ab9-9062-8d6d180216", "record_id": "flaws_cloudtrail:0000228:77aaaf6b-d5b1-4ab9-9062-8d6d180216", "row_index": 228, "timestamp": "2019-07-24T08:31:17Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "248.251.245.4", "user_agent": "aws-cli/1.16.96 Python/2.7.16 Linux/4.19.0-kali5-amd64 botocore/1.12.86", "aws_region": "eu-west-1"}, "resource_arns": [], "raw_record_size_bytes": 1079, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "77aaaf6b-d5b1-4ab9-9062-8d6d180216", "eventTime": "2019-07-24T08:31:17Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "248.251.245.4", "userAgent": "aws-cli/1.16.96 Python/2.7.16 Linux/4.19.0-kali5-amd64 botocore/1.12.86", "awsRegion": "eu-west-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"nextToken": "eyJ2IjoiMiIsImMiOiJEZ1NzdkNpNk0wQTJZS0VYdklOeWFGNzIybHpYYThNazhHL1I0U3FWQmFVZko2NGtTNUNhQVlUWlUxRlB4eUJTYmpGcjF1QWFlUlpycjRxdVU3TmNLTU5YanhOa1kxOEFEVXF3d0ZpNFMrU0ErM2ppWWhacWhHbHptOGZvTkRWVUJhT2twRWpoMUlIWm5RODk5blppTFpDY0NNdWhPbDFDT0FhTmRsREs3UXNyWTRyaXdxQWl0UDA1eFk3V25JY1ZrM1loNUs4dDQzTT0iLCJzIjoiMSJ9", "maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "d2229bf6-413b-47f7-ae57-86a7e220d5dc", "record_id": "flaws_cloudtrail:0000229:d2229bf6-413b-47f7-ae57-86a7e220d5dc", "row_index": 229, "timestamp": "2019-07-24T08:31:18Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "248.251.245.4", "user_agent": "aws-cli/1.16.96 Python/2.7.16 Linux/4.19.0-kali5-amd64 botocore/1.12.86", "aws_region": "eu-west-1"}, "resource_arns": [], "raw_record_size_bytes": 1081, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "d2229bf6-413b-47f7-ae57-86a7e220d5dc", "eventTime": "2019-07-24T08:31:18Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "248.251.245.4", "userAgent": "aws-cli/1.16.96 Python/2.7.16 Linux/4.19.0-kali5-amd64 botocore/1.12.86", "awsRegion": "eu-west-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"nextToken": "eyJ2IjoiMiIsImMiOiIxTmgrcUJQdDJHZEFuQWFRZVV4WnVndm1Qc1VPcktaNHp4dVcxMVVaNTZGcVFtTkd6QjRlSEh0dXRlZVU1VkZ6a0FBUVI4ZkZTWlZyZnlXRmNFZzdHNDlsS1lJalRZcUdZTGJHWE92NUJKbmlUYzJZWGhsdkJQcFlKN0dIRXpiLzRrc3hmd0g0UTZIN2VONklFVHJoZGFUREI1TmRzYmxhcFBSVGU1VjJ3ZUxJTWg1SDVSRGVvNWVNdTRQd0dxT2VTcjF4R3BPZkoxRWQiLCJzIjoiMSJ9", "maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "d2229bf6-413b-47f7-ae57-86a7e220d5dc", "record_id": "flaws_cloudtrail:0000230:d2229bf6-413b-47f7-ae57-86a7e220d5dc", "row_index": 230, "timestamp": "2019-07-24T08:31:18Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "248.251.245.4", "user_agent": "aws-cli/1.16.96 Python/2.7.16 Linux/4.19.0-kali5-amd64 botocore/1.12.86", "aws_region": "eu-west-1"}, "resource_arns": [], "raw_record_size_bytes": 1081, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "d2229bf6-413b-47f7-ae57-86a7e220d5dc", "eventTime": "2019-07-24T08:31:18Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "248.251.245.4", "userAgent": "aws-cli/1.16.96 Python/2.7.16 Linux/4.19.0-kali5-amd64 botocore/1.12.86", "awsRegion": "eu-west-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"nextToken": "eyJ2IjoiMiIsImMiOiIxTmgrcUJQdDJHZEFuQWFRZVV4WnVndm1Qc1VPcktaNHp4dVcxMVVaNTZGcVFtTkd6QjRlSEh0dXRlZVU1VkZ6a0FBUVI4ZkZTWlZyZnlXRmNFZzdHNDlsS1lJalRZcUdZTGJHWE92NUJKbmlUYzJZWGhsdkJQcFlKN0dIRXpiLzRrc3hmd0g0UTZIN2VONklFVHJoZGFUREI1TmRzYmxhcFBSVGU1VjJ3ZUxJTWg1SDVSRGVvNWVNdTRQd0dxT2VTcjF4R3BPZkoxRWQiLCJzIjoiMSJ9", "maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "8e88d44f-a48d-4f54-8834-4947c6b7f0b4", "record_id": "flaws_cloudtrail:0000231:8e88d44f-a48d-4f54-8834-4947c6b7f0b4", "row_index": 231, "timestamp": "2019-07-24T08:31:20Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "248.251.245.4", "user_agent": "aws-cli/1.16.96 Python/2.7.16 Linux/4.19.0-kali5-amd64 botocore/1.12.86", "aws_region": "eu-west-1"}, "resource_arns": [], "raw_record_size_bytes": 1081, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "8e88d44f-a48d-4f54-8834-4947c6b7f0b4", "eventTime": "2019-07-24T08:31:20Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "248.251.245.4", "userAgent": "aws-cli/1.16.96 Python/2.7.16 Linux/4.19.0-kali5-amd64 botocore/1.12.86", "awsRegion": "eu-west-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"nextToken": "eyJ2IjoiMiIsImMiOiJwcnhMdWxmWi9rTUxEWVd4SXB1dE5KdW5JZVM1Z3J6cG5lVnJ0bHNQYk55ZmVNSjJ0aTB1R3pBbnQvRU5sZ3lnajM1TGMyVHZxY04yaTJWM3NwajVIQVBndFpxY0Y4c2RiVGx4emRxZnFIWmdqVktETW02VjNEeFEraUVjSE10T1c4R243WEFOOEpyUE1JYUJJQUlwRVc5c0NhN3p6MzZpRkxQOC9rc1JtdnBKZG12Z1JxQVZ1MUxZa3dWeWNCUUtYVXhtRGFUYXlsYz0iLCJzIjoiMSJ9", "maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "8e88d44f-a48d-4f54-8834-4947c6b7f0b4", "record_id": "flaws_cloudtrail:0000232:8e88d44f-a48d-4f54-8834-4947c6b7f0b4", "row_index": 232, "timestamp": "2019-07-24T08:31:20Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "248.251.245.4", "user_agent": "aws-cli/1.16.96 Python/2.7.16 Linux/4.19.0-kali5-amd64 botocore/1.12.86", "aws_region": "eu-west-1"}, "resource_arns": [], "raw_record_size_bytes": 1081, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "8e88d44f-a48d-4f54-8834-4947c6b7f0b4", "eventTime": "2019-07-24T08:31:20Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "248.251.245.4", "userAgent": "aws-cli/1.16.96 Python/2.7.16 Linux/4.19.0-kali5-amd64 botocore/1.12.86", "awsRegion": "eu-west-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"nextToken": "eyJ2IjoiMiIsImMiOiJwcnhMdWxmWi9rTUxEWVd4SXB1dE5KdW5JZVM1Z3J6cG5lVnJ0bHNQYk55ZmVNSjJ0aTB1R3pBbnQvRU5sZ3lnajM1TGMyVHZxY04yaTJWM3NwajVIQVBndFpxY0Y4c2RiVGx4emRxZnFIWmdqVktETW02VjNEeFEraUVjSE10T1c4R243WEFOOEpyUE1JYUJJQUlwRVc5c0NhN3p6MzZpRkxQOC9rc1JtdnBKZG12Z1JxQVZ1MUxZa3dWeWNCUUtYVXhtRGFUYXlsYz0iLCJzIjoiMSJ9", "maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "c40e3982-4a43-4ea8-b014-f79312e5a3b", "record_id": "flaws_cloudtrail:0000233:c40e3982-4a43-4ea8-b014-f79312e5a3b", "row_index": 233, "timestamp": "2019-07-24T08:31:21Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "248.251.245.4", "user_agent": "aws-cli/1.16.96 Python/2.7.16 Linux/4.19.0-kali5-amd64 botocore/1.12.86", "aws_region": "eu-west-1"}, "resource_arns": [], "raw_record_size_bytes": 1080, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "c40e3982-4a43-4ea8-b014-f79312e5a3b", "eventTime": "2019-07-24T08:31:21Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "248.251.245.4", "userAgent": "aws-cli/1.16.96 Python/2.7.16 Linux/4.19.0-kali5-amd64 botocore/1.12.86", "awsRegion": "eu-west-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"nextToken": "eyJ2IjoiMiIsImMiOiI5M0t3d1VSZzQvV0dES3huMjdxc3ZXM1p1T0JDdWRuNXM1S1ladE42MFNoY3kwZTlETXEzSWtEbmJMbFc5cWYrOFhwbElONGJBYTNzdUVxYWNyVElTcDlUUFNYVU1oTmdrUzh6cVNiRnZ6bFFoTVUwTG4vVElUUUFtRGc3alU2b0Ria1pRSGFtRi83SnlYdG1lbXpzMExsRTZxbjBRWkFRTGVWN0tWdFdMcDM2K0JDSmZVdFNuRFloamYwRSs4YitpS1hvazA2WDE1cz0iLCJzIjoiMSJ9", "maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "c40e3982-4a43-4ea8-b014-f79312e5a3b", "record_id": "flaws_cloudtrail:0000234:c40e3982-4a43-4ea8-b014-f79312e5a3b", "row_index": 234, "timestamp": "2019-07-24T08:31:21Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "248.251.245.4", "user_agent": "aws-cli/1.16.96 Python/2.7.16 Linux/4.19.0-kali5-amd64 botocore/1.12.86", "aws_region": "eu-west-1"}, "resource_arns": [], "raw_record_size_bytes": 1080, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "c40e3982-4a43-4ea8-b014-f79312e5a3b", "eventTime": "2019-07-24T08:31:21Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "248.251.245.4", "userAgent": "aws-cli/1.16.96 Python/2.7.16 Linux/4.19.0-kali5-amd64 botocore/1.12.86", "awsRegion": "eu-west-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"nextToken": "eyJ2IjoiMiIsImMiOiI5M0t3d1VSZzQvV0dES3huMjdxc3ZXM1p1T0JDdWRuNXM1S1ladE42MFNoY3kwZTlETXEzSWtEbmJMbFc5cWYrOFhwbElONGJBYTNzdUVxYWNyVElTcDlUUFNYVU1oTmdrUzh6cVNiRnZ6bFFoTVUwTG4vVElUUUFtRGc3alU2b0Ria1pRSGFtRi83SnlYdG1lbXpzMExsRTZxbjBRWkFRTGVWN0tWdFdMcDM2K0JDSmZVdFNuRFloamYwRSs4YitpS1hvazA2WDE1cz0iLCJzIjoiMSJ9", "maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "955b7c1d-c993-4f77-aafd-3e1eacce270a", "record_id": "flaws_cloudtrail:0000235:955b7c1d-c993-4f77-aafd-3e1eacce270a", "row_index": 235, "timestamp": "2019-07-24T08:31:22Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "248.251.245.4", "user_agent": "aws-cli/1.16.96 Python/2.7.16 Linux/4.19.0-kali5-amd64 botocore/1.12.86", "aws_region": "eu-west-1"}, "resource_arns": [], "raw_record_size_bytes": 1081, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "955b7c1d-c993-4f77-aafd-3e1eacce270a", "eventTime": "2019-07-24T08:31:22Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "248.251.245.4", "userAgent": "aws-cli/1.16.96 Python/2.7.16 Linux/4.19.0-kali5-amd64 botocore/1.12.86", "awsRegion": "eu-west-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"nextToken": "eyJ2IjoiMiIsImMiOiJBRm84M3BWY3pxQVVnbFRIeDRzRThqanIyYkplQjdiU3VpaXh1VUNNdWUvU1NjcGxWY0FmM2FRN0ozN0RybE9ZYUxpTUNKWGlVYmIrYlQzbkJVM1JjUkFxdWVob3JDU1NYVlpIV2lBSGtPUytGUWUyNm1GOTN5cVlSS0x6aE5pTzFFc3lRNzduYklndkN0eG05UCt1dXdDQm1wR0cxMDhSWHZ4K0Rpd25kZUdtcks3bnlwajV0dnBpOHU1SnRyS0lwOFUzTGZmN2ZuVG0iLCJzIjoiMSJ9", "maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "955b7c1d-c993-4f77-aafd-3e1eacce270a", "record_id": "flaws_cloudtrail:0000236:955b7c1d-c993-4f77-aafd-3e1eacce270a", "row_index": 236, "timestamp": "2019-07-24T08:31:22Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "248.251.245.4", "user_agent": "aws-cli/1.16.96 Python/2.7.16 Linux/4.19.0-kali5-amd64 botocore/1.12.86", "aws_region": "eu-west-1"}, "resource_arns": [], "raw_record_size_bytes": 1081, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "955b7c1d-c993-4f77-aafd-3e1eacce270a", "eventTime": "2019-07-24T08:31:22Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "248.251.245.4", "userAgent": "aws-cli/1.16.96 Python/2.7.16 Linux/4.19.0-kali5-amd64 botocore/1.12.86", "awsRegion": "eu-west-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"nextToken": "eyJ2IjoiMiIsImMiOiJBRm84M3BWY3pxQVVnbFRIeDRzRThqanIyYkplQjdiU3VpaXh1VUNNdWUvU1NjcGxWY0FmM2FRN0ozN0RybE9ZYUxpTUNKWGlVYmIrYlQzbkJVM1JjUkFxdWVob3JDU1NYVlpIV2lBSGtPUytGUWUyNm1GOTN5cVlSS0x6aE5pTzFFc3lRNzduYklndkN0eG05UCt1dXdDQm1wR0cxMDhSWHZ4K0Rpd25kZUdtcks3bnlwajV0dnBpOHU1SnRyS0lwOFUzTGZmN2ZuVG0iLCJzIjoiMSJ9", "maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "ba35072e-750d-4648-a627-5c7ef5ce4305", "record_id": "flaws_cloudtrail:0000237:ba35072e-750d-4648-a627-5c7ef5ce4305", "row_index": 237, "timestamp": "2019-07-24T08:31:24Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "248.251.245.4", "user_agent": "aws-cli/1.16.96 Python/2.7.16 Linux/4.19.0-kali5-amd64 botocore/1.12.86", "aws_region": "eu-west-1"}, "resource_arns": [], "raw_record_size_bytes": 1078, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "ba35072e-750d-4648-a627-5c7ef5ce4305", "eventTime": "2019-07-24T08:31:24Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "248.251.245.4", "userAgent": "aws-cli/1.16.96 Python/2.7.16 Linux/4.19.0-kali5-amd64 botocore/1.12.86", "awsRegion": "eu-west-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"nextToken": "eyJ2IjoiMiIsImMiOiJ6aEVXUzRQRzlMQUhPbUdZOHFlL2JUUDZWRXB6VG4wZEtzK2oyd1NFbDRSeWtPelFpc3N0eVBjbTNNUFY3TkZjNFg3RHVJdUZKbktPek1uMU5rOUFNYTBGSzdPU3NKdWNMTmhBcktJaXJoWGRCdmtjbERhemlhYkZONnlzQjQ0MDloVU1aSlFobjI5K2YxOVFnS1dOVUxBZTJGdnlzSmVxLyt1ZlZHNm40YnV6d1lXUTVNM2hQVUc1SWhwM2tNMWd0d2NIbUlrNVNpSmEiLCJzIjoiMSJ9", "maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "01ab411f-821a-4c82-8704-66c2c952cfef", "record_id": "flaws_cloudtrail:0000238:01ab411f-821a-4c82-8704-66c2c952cfef", "row_index": 238, "timestamp": "2019-07-24T08:31:24Z", "event_type": "AssumeRole", "event_source": "sts.amazonaws.com", "principal": {"type": "AWSService", "arn": null, "account_id": null, "principal_id": null, "user_name": null, "access_key_id": null, "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "ec2.amazonaws.com", "user_agent": "ec2.amazonaws.com", "aws_region": "us-west-2"}, "resource_arns": ["arn:aws:iam::811596193553:role/flaws"], "raw_record_size_bytes": 1894, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "resources", "responseElements", "sharedEventID", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "01ab411f-821a-4c82-8704-66c2c952cfef", "eventTime": "2019-07-24T08:31:24Z", "eventName": "AssumeRole", "eventSource": "sts.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "ec2.amazonaws.com", "userAgent": "ec2.amazonaws.com", "awsRegion": "us-west-2", "userIdentity": {"type": "AWSService", "invokedBy": "ec2.amazonaws.com"}, "requestParameters": {"roleSessionName": "i-aa2d3b42e5c6e801a", "roleArn": "arn:aws:iam::811596193553:role/flaws"}, "responseElements": {"credentials": {"accessKeyId": "ASIABB5543MMY46WXHCP", "expiration": "Jul 24, 2019 2:48:36 PM", "sessionToken": "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"}}, "resources": [{"ARN": "arn:aws:iam::811596193553:role/flaws", "accountId": "811596193553", "type": "AWS::IAM::Role"}]}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "ba35072e-750d-4648-a627-5c7ef5ce4305", "record_id": "flaws_cloudtrail:0000239:ba35072e-750d-4648-a627-5c7ef5ce4305", "row_index": 239, "timestamp": "2019-07-24T08:31:24Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "248.251.245.4", "user_agent": "aws-cli/1.16.96 Python/2.7.16 Linux/4.19.0-kali5-amd64 botocore/1.12.86", "aws_region": "eu-west-1"}, "resource_arns": [], "raw_record_size_bytes": 1078, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "ba35072e-750d-4648-a627-5c7ef5ce4305", "eventTime": "2019-07-24T08:31:24Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "248.251.245.4", "userAgent": "aws-cli/1.16.96 Python/2.7.16 Linux/4.19.0-kali5-amd64 botocore/1.12.86", "awsRegion": "eu-west-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"nextToken": "eyJ2IjoiMiIsImMiOiJ6aEVXUzRQRzlMQUhPbUdZOHFlL2JUUDZWRXB6VG4wZEtzK2oyd1NFbDRSeWtPelFpc3N0eVBjbTNNUFY3TkZjNFg3RHVJdUZKbktPek1uMU5rOUFNYTBGSzdPU3NKdWNMTmhBcktJaXJoWGRCdmtjbERhemlhYkZONnlzQjQ0MDloVU1aSlFobjI5K2YxOVFnS1dOVUxBZTJGdnlzSmVxLyt1ZlZHNm40YnV6d1lXUTVNM2hQVUc1SWhwM2tNMWd0d2NIbUlrNVNpSmEiLCJzIjoiMSJ9", "maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "01ab411f-821a-4c82-8704-66c2c952cfef", "record_id": "flaws_cloudtrail:0000240:01ab411f-821a-4c82-8704-66c2c952cfef", "row_index": 240, "timestamp": "2019-07-24T08:31:24Z", "event_type": "AssumeRole", "event_source": "sts.amazonaws.com", "principal": {"type": "AWSService", "arn": null, "account_id": null, "principal_id": null, "user_name": null, "access_key_id": null, "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "ec2.amazonaws.com", "user_agent": "ec2.amazonaws.com", "aws_region": "us-west-2"}, "resource_arns": ["arn:aws:iam::811596193553:role/flaws"], "raw_record_size_bytes": 1894, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "resources", "responseElements", "sharedEventID", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "01ab411f-821a-4c82-8704-66c2c952cfef", "eventTime": "2019-07-24T08:31:24Z", "eventName": "AssumeRole", "eventSource": "sts.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "ec2.amazonaws.com", "userAgent": "ec2.amazonaws.com", "awsRegion": "us-west-2", "userIdentity": {"type": "AWSService", "invokedBy": "ec2.amazonaws.com"}, "requestParameters": {"roleSessionName": "i-aa2d3b42e5c6e801a", "roleArn": "arn:aws:iam::811596193553:role/flaws"}, "responseElements": {"credentials": {"accessKeyId": "ASIABB5543MMY46WXHCP", "expiration": "Jul 24, 2019 2:48:36 PM", "sessionToken": "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"}}, "resources": [{"ARN": "arn:aws:iam::811596193553:role/flaws", "accountId": "811596193553", "type": "AWS::IAM::Role"}]}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "61e69859-f805-4a7b-8415-3ccfad26b108", "record_id": "flaws_cloudtrail:0000241:61e69859-f805-4a7b-8415-3ccfad26b108", "row_index": 241, "timestamp": "2019-07-24T08:31:25Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "248.251.245.4", "user_agent": "aws-cli/1.16.96 Python/2.7.16 Linux/4.19.0-kali5-amd64 botocore/1.12.86", "aws_region": "eu-west-1"}, "resource_arns": [], "raw_record_size_bytes": 1081, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "61e69859-f805-4a7b-8415-3ccfad26b108", "eventTime": "2019-07-24T08:31:25Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "248.251.245.4", "userAgent": "aws-cli/1.16.96 Python/2.7.16 Linux/4.19.0-kali5-amd64 botocore/1.12.86", "awsRegion": "eu-west-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"nextToken": "eyJ2IjoiMiIsImMiOiJvWDFVLzgvMGs1Vy9XZ3JZbjhzWmJHK1F3MDdLbU5DRFNYWjNoczI0QlExRHFONkpXdUUreUtwZUtQVWVlSTV0L04ra2FUN0ttdHIxMDRSdXBnQkhBZzYwSGlxYmNFYzVUVkxYZ2picUdQNlEwZ0ZiR25lVm1HTWN3c2NYTjJmUmlIY1RjMHBBbFVTS2lIRmVwSFl2VzVSSHY1K1lOZVRRNkJET0ZJdkNld3BCb3c1ZzhFZy9PYVVjZHpORTVjZkppV1lOYmJpMDJKNzIiLCJzIjoiMSJ9", "maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "61e69859-f805-4a7b-8415-3ccfad26b108", "record_id": "flaws_cloudtrail:0000242:61e69859-f805-4a7b-8415-3ccfad26b108", "row_index": 242, "timestamp": "2019-07-24T08:31:25Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "248.251.245.4", "user_agent": "aws-cli/1.16.96 Python/2.7.16 Linux/4.19.0-kali5-amd64 botocore/1.12.86", "aws_region": "eu-west-1"}, "resource_arns": [], "raw_record_size_bytes": 1081, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "61e69859-f805-4a7b-8415-3ccfad26b108", "eventTime": "2019-07-24T08:31:25Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "248.251.245.4", "userAgent": "aws-cli/1.16.96 Python/2.7.16 Linux/4.19.0-kali5-amd64 botocore/1.12.86", "awsRegion": "eu-west-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"nextToken": "eyJ2IjoiMiIsImMiOiJvWDFVLzgvMGs1Vy9XZ3JZbjhzWmJHK1F3MDdLbU5DRFNYWjNoczI0QlExRHFONkpXdUUreUtwZUtQVWVlSTV0L04ra2FUN0ttdHIxMDRSdXBnQkhBZzYwSGlxYmNFYzVUVkxYZ2picUdQNlEwZ0ZiR25lVm1HTWN3c2NYTjJmUmlIY1RjMHBBbFVTS2lIRmVwSFl2VzVSSHY1K1lOZVRRNkJET0ZJdkNld3BCb3c1ZzhFZy9PYVVjZHpORTVjZkppV1lOYmJpMDJKNzIiLCJzIjoiMSJ9", "maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "9f58fe7a-3b8d-48a1-8026-980949e1", "record_id": "flaws_cloudtrail:0000243:9f58fe7a-3b8d-48a1-8026-980949e1", "row_index": 243, "timestamp": "2019-07-24T08:31:26Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "248.251.245.4", "user_agent": "aws-cli/1.16.96 Python/2.7.16 Linux/4.19.0-kali5-amd64 botocore/1.12.86", "aws_region": "eu-west-1"}, "resource_arns": [], "raw_record_size_bytes": 1077, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "9f58fe7a-3b8d-48a1-8026-980949e1", "eventTime": "2019-07-24T08:31:26Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "248.251.245.4", "userAgent": "aws-cli/1.16.96 Python/2.7.16 Linux/4.19.0-kali5-amd64 botocore/1.12.86", "awsRegion": "eu-west-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"nextToken": "eyJ2IjoiMiIsImMiOiJ4TnE4Q0Y0UEZBWGdGdEFEQWI2ZW5ra0NRRTlwdTFMdm4zdUgxK3NLdExhbVJ0TE5NWUxMQjdodlFGaGJKcWFPWjU5clRoQlJlMWx1bWJxOWlCUndBaDBrN3R6bjdiZnJaTk1sUnpTWGJlRnhXSDFGR05WUDR0b2RrU3hlN0IyNjI5ckp5dmtoM2hrOW1PNEF1UjVTZk83RkZrWk5wU0tvbUFXRHpPMWp6YklITFhoSHdwMlVjdDE4UXkvMFkwVTZ2bjFheHFYT1hERm0iLCJzIjoiMSJ9", "maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "9f58fe7a-3b8d-48a1-8026-980949e1", "record_id": "flaws_cloudtrail:0000244:9f58fe7a-3b8d-48a1-8026-980949e1", "row_index": 244, "timestamp": "2019-07-24T08:31:26Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "248.251.245.4", "user_agent": "aws-cli/1.16.96 Python/2.7.16 Linux/4.19.0-kali5-amd64 botocore/1.12.86", "aws_region": "eu-west-1"}, "resource_arns": [], "raw_record_size_bytes": 1077, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "9f58fe7a-3b8d-48a1-8026-980949e1", "eventTime": "2019-07-24T08:31:26Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "248.251.245.4", "userAgent": "aws-cli/1.16.96 Python/2.7.16 Linux/4.19.0-kali5-amd64 botocore/1.12.86", "awsRegion": "eu-west-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"nextToken": "eyJ2IjoiMiIsImMiOiJ4TnE4Q0Y0UEZBWGdGdEFEQWI2ZW5ra0NRRTlwdTFMdm4zdUgxK3NLdExhbVJ0TE5NWUxMQjdodlFGaGJKcWFPWjU5clRoQlJlMWx1bWJxOWlCUndBaDBrN3R6bjdiZnJaTk1sUnpTWGJlRnhXSDFGR05WUDR0b2RrU3hlN0IyNjI5ckp5dmtoM2hrOW1PNEF1UjVTZk83RkZrWk5wU0tvbUFXRHpPMWp6YklITFhoSHdwMlVjdDE4UXkvMFkwVTZ2bjFheHFYT1hERm0iLCJzIjoiMSJ9", "maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "71a78fa4-9b0e-492a-ad2c-9d6b9726d04f", "record_id": "flaws_cloudtrail:0000245:71a78fa4-9b0e-492a-ad2c-9d6b9726d04f", "row_index": 245, "timestamp": "2019-07-24T08:31:28Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "248.251.245.4", "user_agent": "aws-cli/1.16.96 Python/2.7.16 Linux/4.19.0-kali5-amd64 botocore/1.12.86", "aws_region": "eu-west-1"}, "resource_arns": [], "raw_record_size_bytes": 1081, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "71a78fa4-9b0e-492a-ad2c-9d6b9726d04f", "eventTime": "2019-07-24T08:31:28Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "248.251.245.4", "userAgent": "aws-cli/1.16.96 Python/2.7.16 Linux/4.19.0-kali5-amd64 botocore/1.12.86", "awsRegion": "eu-west-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"nextToken": "eyJ2IjoiMiIsImMiOiJrYjE2SVEwOG4yZXp5ekpqZ1NsUXFuaUR1bzh1bTc0bzVod25KT2FlcHhuZVlRYXJMQTVpNnd1UCtyamtVVkQzSXU2QXVrOFRRUTJ5UTFMcG5aWEpNQ0NwdUVQd1BkQ0xjdHNGL21oQnZBZ085SUZYWVJMM3RrSnVsdkZxckdtQkZYUTRqcittMlhnWEFRcUdRdy9uZDh6ejl6SXhmejEwcWM2MGJKeWk5OEVodUEzcTk2NU5iSVpmdFpjdGhsSk50NlYxQkRBOVl1T00iLCJzIjoiMSJ9", "maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "71a78fa4-9b0e-492a-ad2c-9d6b9726d04f", "record_id": "flaws_cloudtrail:0000246:71a78fa4-9b0e-492a-ad2c-9d6b9726d04f", "row_index": 246, "timestamp": "2019-07-24T08:31:28Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "248.251.245.4", "user_agent": "aws-cli/1.16.96 Python/2.7.16 Linux/4.19.0-kali5-amd64 botocore/1.12.86", "aws_region": "eu-west-1"}, "resource_arns": [], "raw_record_size_bytes": 1081, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "71a78fa4-9b0e-492a-ad2c-9d6b9726d04f", "eventTime": "2019-07-24T08:31:28Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "248.251.245.4", "userAgent": "aws-cli/1.16.96 Python/2.7.16 Linux/4.19.0-kali5-amd64 botocore/1.12.86", "awsRegion": "eu-west-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"nextToken": "eyJ2IjoiMiIsImMiOiJrYjE2SVEwOG4yZXp5ekpqZ1NsUXFuaUR1bzh1bTc0bzVod25KT2FlcHhuZVlRYXJMQTVpNnd1UCtyamtVVkQzSXU2QXVrOFRRUTJ5UTFMcG5aWEpNQ0NwdUVQd1BkQ0xjdHNGL21oQnZBZ085SUZYWVJMM3RrSnVsdkZxckdtQkZYUTRqcittMlhnWEFRcUdRdy9uZDh6ejl6SXhmejEwcWM2MGJKeWk5OEVodUEzcTk2NU5iSVpmdFpjdGhsSk50NlYxQkRBOVl1T00iLCJzIjoiMSJ9", "maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "b0efc8d7-edee-4b4a-b0a5-052fb1bafa89", "record_id": "flaws_cloudtrail:0000247:b0efc8d7-edee-4b4a-b0a5-052fb1bafa89", "row_index": 247, "timestamp": "2019-07-24T08:31:29Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "248.251.245.4", "user_agent": "aws-cli/1.16.96 Python/2.7.16 Linux/4.19.0-kali5-amd64 botocore/1.12.86", "aws_region": "eu-west-1"}, "resource_arns": [], "raw_record_size_bytes": 1081, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "b0efc8d7-edee-4b4a-b0a5-052fb1bafa89", "eventTime": "2019-07-24T08:31:29Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "248.251.245.4", "userAgent": "aws-cli/1.16.96 Python/2.7.16 Linux/4.19.0-kali5-amd64 botocore/1.12.86", "awsRegion": "eu-west-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"nextToken": "eyJ2IjoiMiIsImMiOiJjaDRha29YR2dRaUxDTWNIdjRwMHN4SkxSUExOUG5JK2l6cGhIR3N6ZGJzUTE2K1FMU0NSY09QV1JXMHR5T1l3dUhOenhzdnZuK0dWdzl5QTE1Mk9JRUM1WTU4QUxLM1hXMFhDazNjNzg2cGc2NFJDLzAzSmZVZEtqUGpTUmMycGQvMHpPNGhKN0dWbFR6dnVPRUNoUE9UMHdUOThON2pqT0t4Mm9DcDI0R1dEZkZINTFvUWx3TlpZNGpnRHA5SjJ0QS84enlxMUg1ND0iLCJzIjoiMSJ9", "maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "b0efc8d7-edee-4b4a-b0a5-052fb1bafa89", "record_id": "flaws_cloudtrail:0000248:b0efc8d7-edee-4b4a-b0a5-052fb1bafa89", "row_index": 248, "timestamp": "2019-07-24T08:31:29Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "248.251.245.4", "user_agent": "aws-cli/1.16.96 Python/2.7.16 Linux/4.19.0-kali5-amd64 botocore/1.12.86", "aws_region": "eu-west-1"}, "resource_arns": [], "raw_record_size_bytes": 1081, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "b0efc8d7-edee-4b4a-b0a5-052fb1bafa89", "eventTime": "2019-07-24T08:31:29Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "248.251.245.4", "userAgent": "aws-cli/1.16.96 Python/2.7.16 Linux/4.19.0-kali5-amd64 botocore/1.12.86", "awsRegion": "eu-west-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"nextToken": "eyJ2IjoiMiIsImMiOiJjaDRha29YR2dRaUxDTWNIdjRwMHN4SkxSUExOUG5JK2l6cGhIR3N6ZGJzUTE2K1FMU0NSY09QV1JXMHR5T1l3dUhOenhzdnZuK0dWdzl5QTE1Mk9JRUM1WTU4QUxLM1hXMFhDazNjNzg2cGc2NFJDLzAzSmZVZEtqUGpTUmMycGQvMHpPNGhKN0dWbFR6dnVPRUNoUE9UMHdUOThON2pqT0t4Mm9DcDI0R1dEZkZINTFvUWx3TlpZNGpnRHA5SjJ0QS84enlxMUg1ND0iLCJzIjoiMSJ9", "maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "de77985-2b43-4fd8-81a0-b36241aa6", "record_id": "flaws_cloudtrail:0000249:de77985-2b43-4fd8-81a0-b36241aa6", "row_index": 249, "timestamp": "2019-07-24T08:31:30Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "248.251.245.4", "user_agent": "aws-cli/1.16.96 Python/2.7.16 Linux/4.19.0-kali5-amd64 botocore/1.12.86", "aws_region": "eu-west-1"}, "resource_arns": [], "raw_record_size_bytes": 1073, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "de77985-2b43-4fd8-81a0-b36241aa6", "eventTime": "2019-07-24T08:31:30Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "248.251.245.4", "userAgent": "aws-cli/1.16.96 Python/2.7.16 Linux/4.19.0-kali5-amd64 botocore/1.12.86", "awsRegion": "eu-west-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"nextToken": "eyJ2IjoiMiIsImMiOiJtcEwxZ1ZudjI1TDNvUnFWaXRUY21VQW1tWjl1ekpPbnllZlZYdno2WVBJNU8yL1BpSU1LK01pa0h2eHNnRDhNS3RnR1V6Wk5uWmxzcTBwUG50Y0ZvMXV3QnJMSU9xanZ2UkhIZUFuelU0TEREVm41dHhVc1RkQWplZURlbHlRWGsxclJqc3REWXloNS9xVUxLMWFBOENTUFJJYUg3TXNPZllCemxSVk1WMVhoRk1jV210aldJaHJmWXRXWC9ZSVhIbjBpTExsNiIsInMiOiIxIn0=", "maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "de77985-2b43-4fd8-81a0-b36241aa6", "record_id": "flaws_cloudtrail:0000250:de77985-2b43-4fd8-81a0-b36241aa6", "row_index": 250, "timestamp": "2019-07-24T08:31:30Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "248.251.245.4", "user_agent": "aws-cli/1.16.96 Python/2.7.16 Linux/4.19.0-kali5-amd64 botocore/1.12.86", "aws_region": "eu-west-1"}, "resource_arns": [], "raw_record_size_bytes": 1073, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "de77985-2b43-4fd8-81a0-b36241aa6", "eventTime": "2019-07-24T08:31:30Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "248.251.245.4", "userAgent": "aws-cli/1.16.96 Python/2.7.16 Linux/4.19.0-kali5-amd64 botocore/1.12.86", "awsRegion": "eu-west-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"nextToken": "eyJ2IjoiMiIsImMiOiJtcEwxZ1ZudjI1TDNvUnFWaXRUY21VQW1tWjl1ekpPbnllZlZYdno2WVBJNU8yL1BpSU1LK01pa0h2eHNnRDhNS3RnR1V6Wk5uWmxzcTBwUG50Y0ZvMXV3QnJMSU9xanZ2UkhIZUFuelU0TEREVm41dHhVc1RkQWplZURlbHlRWGsxclJqc3REWXloNS9xVUxLMWFBOENTUFJJYUg3TXNPZllCemxSVk1WMVhoRk1jV210aldJaHJmWXRXWC9ZSVhIbjBpTExsNiIsInMiOiIxIn0=", "maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "bd027769f-0300-454c-b719-de6ddee7284f", "record_id": "flaws_cloudtrail:0000251:bd027769f-0300-454c-b719-de6ddee7284f", "row_index": 251, "timestamp": "2019-07-24T08:31:31Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "248.251.245.4", "user_agent": "aws-cli/1.16.96 Python/2.7.16 Linux/4.19.0-kali5-amd64 botocore/1.12.86", "aws_region": "eu-west-1"}, "resource_arns": [], "raw_record_size_bytes": 1082, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "bd027769f-0300-454c-b719-de6ddee7284f", "eventTime": "2019-07-24T08:31:31Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "248.251.245.4", "userAgent": "aws-cli/1.16.96 Python/2.7.16 Linux/4.19.0-kali5-amd64 botocore/1.12.86", "awsRegion": "eu-west-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"nextToken": "eyJ2IjoiMiIsImMiOiJCOHRPT1NvRFU0WUdaaURqQWs1cjNOKzRkeUdtM29IeWxXbnNjcFB5ZW5UaTBnN1FPRnAyZXJXZ2Ywd3BHRllFakhHcWpyQXMyNEVkYkQ1UlVBWGE2cmxWQ0ROV2hwUk9HYUphNG5sVis4NTFGdFFhYm1WcVFYRzZQaEkvaVFxcnk0MjhaNnR5cDdaWTlqU2UxRzJiUkZOandyczQ5WkNUdEZzODJ6NURoSVJ1Q3Nqbko0SnpuUVB2a3c3NCtZTVExMUtRZU95aGtQbW8iLCJzIjoiMSJ9", "maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "bd027769f-0300-454c-b719-de6ddee7284f", "record_id": "flaws_cloudtrail:0000252:bd027769f-0300-454c-b719-de6ddee7284f", "row_index": 252, "timestamp": "2019-07-24T08:31:31Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "248.251.245.4", "user_agent": "aws-cli/1.16.96 Python/2.7.16 Linux/4.19.0-kali5-amd64 botocore/1.12.86", "aws_region": "eu-west-1"}, "resource_arns": [], "raw_record_size_bytes": 1082, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "bd027769f-0300-454c-b719-de6ddee7284f", "eventTime": "2019-07-24T08:31:31Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "248.251.245.4", "userAgent": "aws-cli/1.16.96 Python/2.7.16 Linux/4.19.0-kali5-amd64 botocore/1.12.86", "awsRegion": "eu-west-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"nextToken": "eyJ2IjoiMiIsImMiOiJCOHRPT1NvRFU0WUdaaURqQWs1cjNOKzRkeUdtM29IeWxXbnNjcFB5ZW5UaTBnN1FPRnAyZXJXZ2Ywd3BHRllFakhHcWpyQXMyNEVkYkQ1UlVBWGE2cmxWQ0ROV2hwUk9HYUphNG5sVis4NTFGdFFhYm1WcVFYRzZQaEkvaVFxcnk0MjhaNnR5cDdaWTlqU2UxRzJiUkZOandyczQ5WkNUdEZzODJ6NURoSVJ1Q3Nqbko0SnpuUVB2a3c3NCtZTVExMUtRZU95aGtQbW8iLCJzIjoiMSJ9", "maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "f19ca5c9-9844-41de-97c3-465fec785d69", "record_id": "flaws_cloudtrail:0000253:f19ca5c9-9844-41de-97c3-465fec785d69", "row_index": 253, "timestamp": "2019-07-24T08:31:32Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "248.251.245.4", "user_agent": "aws-cli/1.16.96 Python/2.7.16 Linux/4.19.0-kali5-amd64 botocore/1.12.86", "aws_region": "eu-west-1"}, "resource_arns": [], "raw_record_size_bytes": 1065, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "f19ca5c9-9844-41de-97c3-465fec785d69", "eventTime": "2019-07-24T08:31:32Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "248.251.245.4", "userAgent": "aws-cli/1.16.96 Python/2.7.16 Linux/4.19.0-kali5-amd64 botocore/1.12.86", "awsRegion": "eu-west-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"nextToken": "eyJ2IjoiMiIsImMiOiI1R3lxYi9IcFIvTnFsVGJKc2phc0poYzJnUmF1bkV4eno2L1h1cE1tY0hRcG9TeGM1MnFjd1FxY2lDdGhRZUNmYmNWUW1pTERTSjVIRjkyVjJ2d29Hb1ZIV29oclNOYWdlbGhreHNTZ0cyMi9IcDZ5UE5Tb1FQODRPaGh0RkNKdVlKTC9FWml1VDF6dUdZNWJUK1hGWDZjazZ0U09LU1dEZnA3K0pDN2ZZRFpLRFMra2M0RHBrbHIyUEZ4dmdvMD0iLCJzIjoiMSJ9", "maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "8a33472-4fd4-4215-bef8-5f552076c91f0", "record_id": "flaws_cloudtrail:0000254:8a33472-4fd4-4215-bef8-5f552076c91f0", "row_index": 254, "timestamp": "2019-07-24T08:31:32Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "248.251.245.4", "user_agent": "aws-cli/1.16.96 Python/2.7.16 Linux/4.19.0-kali5-amd64 botocore/1.12.86", "aws_region": "eu-west-1"}, "resource_arns": [], "raw_record_size_bytes": 1109, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "8a33472-4fd4-4215-bef8-5f552076c91f0", "eventTime": "2019-07-24T08:31:32Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "248.251.245.4", "userAgent": "aws-cli/1.16.96 Python/2.7.16 Linux/4.19.0-kali5-amd64 botocore/1.12.86", "awsRegion": "eu-west-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"nextToken": "eyJ2IjoiMiIsImMiOiJ4c2FlM1ZnSnNveWNpQ1ZXQkJtWUhGR3M2aFM4Qk9oNUllNlovdW9HU1hSWHRvM21SRlRVTmVpeG93THJBeVVGTURnMTBhRXlYOTVTdFZuQXBJVjZDRHdoR1NpY1RoUUJyeGYwRFp1ZXBtbnRqRzRwUTRFNW9iMExiZlYzNUNuWWkreVdoRmQyL2dVMHBYTFRqeGVoME9hNWpORXdkNkRoV29TKy95eVl3M3Q5UkZaS21CSnprdjIrZmRNNDVQTzhlMkVkSk5yMFJUV2p4K0Vob1p1NDdjUkRjWlVVV2dRPSIsInMiOiIxIn0=", "maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "f19ca5c9-9844-41de-97c3-465fec785d69", "record_id": "flaws_cloudtrail:0000255:f19ca5c9-9844-41de-97c3-465fec785d69", "row_index": 255, "timestamp": "2019-07-24T08:31:32Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "248.251.245.4", "user_agent": "aws-cli/1.16.96 Python/2.7.16 Linux/4.19.0-kali5-amd64 botocore/1.12.86", "aws_region": "eu-west-1"}, "resource_arns": [], "raw_record_size_bytes": 1065, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "f19ca5c9-9844-41de-97c3-465fec785d69", "eventTime": "2019-07-24T08:31:32Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "248.251.245.4", "userAgent": "aws-cli/1.16.96 Python/2.7.16 Linux/4.19.0-kali5-amd64 botocore/1.12.86", "awsRegion": "eu-west-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"nextToken": "eyJ2IjoiMiIsImMiOiI1R3lxYi9IcFIvTnFsVGJKc2phc0poYzJnUmF1bkV4eno2L1h1cE1tY0hRcG9TeGM1MnFjd1FxY2lDdGhRZUNmYmNWUW1pTERTSjVIRjkyVjJ2d29Hb1ZIV29oclNOYWdlbGhreHNTZ0cyMi9IcDZ5UE5Tb1FQODRPaGh0RkNKdVlKTC9FWml1VDF6dUdZNWJUK1hGWDZjazZ0U09LU1dEZnA3K0pDN2ZZRFpLRFMra2M0RHBrbHIyUEZ4dmdvMD0iLCJzIjoiMSJ9", "maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "8a33472-4fd4-4215-bef8-5f552076c91f0", "record_id": "flaws_cloudtrail:0000256:8a33472-4fd4-4215-bef8-5f552076c91f0", "row_index": 256, "timestamp": "2019-07-24T08:31:32Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "248.251.245.4", "user_agent": "aws-cli/1.16.96 Python/2.7.16 Linux/4.19.0-kali5-amd64 botocore/1.12.86", "aws_region": "eu-west-1"}, "resource_arns": [], "raw_record_size_bytes": 1109, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "8a33472-4fd4-4215-bef8-5f552076c91f0", "eventTime": "2019-07-24T08:31:32Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "248.251.245.4", "userAgent": "aws-cli/1.16.96 Python/2.7.16 Linux/4.19.0-kali5-amd64 botocore/1.12.86", "awsRegion": "eu-west-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"nextToken": "eyJ2IjoiMiIsImMiOiJ4c2FlM1ZnSnNveWNpQ1ZXQkJtWUhGR3M2aFM4Qk9oNUllNlovdW9HU1hSWHRvM21SRlRVTmVpeG93THJBeVVGTURnMTBhRXlYOTVTdFZuQXBJVjZDRHdoR1NpY1RoUUJyeGYwRFp1ZXBtbnRqRzRwUTRFNW9iMExiZlYzNUNuWWkreVdoRmQyL2dVMHBYTFRqeGVoME9hNWpORXdkNkRoV29TKy95eVl3M3Q5UkZaS21CSnprdjIrZmRNNDVQTzhlMkVkSk5yMFJUV2p4K0Vob1p1NDdjUkRjWlVVV2dRPSIsInMiOiIxIn0=", "maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "dd1c14ca-2566-4c19-ae9d-0c3dfc16a8f5", "record_id": "flaws_cloudtrail:0000257:dd1c14ca-2566-4c19-ae9d-0c3dfc16a8f5", "row_index": 257, "timestamp": "2019-07-24T08:31:33Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "248.251.245.4", "user_agent": "aws-cli/1.16.96 Python/2.7.16 Linux/4.19.0-kali5-amd64 botocore/1.12.86", "aws_region": "eu-west-1"}, "resource_arns": [], "raw_record_size_bytes": 1109, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "dd1c14ca-2566-4c19-ae9d-0c3dfc16a8f5", "eventTime": "2019-07-24T08:31:33Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "248.251.245.4", "userAgent": "aws-cli/1.16.96 Python/2.7.16 Linux/4.19.0-kali5-amd64 botocore/1.12.86", "awsRegion": "eu-west-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"nextToken": "eyJ2IjoiMiIsImMiOiIrOTF5NW56K0R1VWtaa0hpbmFXY2JjeW4rclJCVFk0b25VU1NXMkdNT1BNVzNHRW5Vc3R1eStrdmpmbGlidkRlZmtKT3JNdmpSeHhENXIvUmw3dnJBbFp6anpjbEdBRkwveGdRNklaMzlQa0c3cDRGVTBpcTQ3WUh2SGwzRzFOUWRqampvb01YZklPQTdQUkNPNFdnQUFnTTB2cU81ZDFFTUpDQVRUMTA4K1pwUUJZQUE2ejJNa3ZqcEMxVk5wU096TXhPaG5xRkFkVEF6SUVzUjBDbFJnWGxadEZ5Z01vPSIsInMiOiIxIn0=", "maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "dd1c14ca-2566-4c19-ae9d-0c3dfc16a8f5", "record_id": "flaws_cloudtrail:0000258:dd1c14ca-2566-4c19-ae9d-0c3dfc16a8f5", "row_index": 258, "timestamp": "2019-07-24T08:31:33Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "248.251.245.4", "user_agent": "aws-cli/1.16.96 Python/2.7.16 Linux/4.19.0-kali5-amd64 botocore/1.12.86", "aws_region": "eu-west-1"}, "resource_arns": [], "raw_record_size_bytes": 1109, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "dd1c14ca-2566-4c19-ae9d-0c3dfc16a8f5", "eventTime": "2019-07-24T08:31:33Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "248.251.245.4", "userAgent": "aws-cli/1.16.96 Python/2.7.16 Linux/4.19.0-kali5-amd64 botocore/1.12.86", "awsRegion": "eu-west-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"nextToken": "eyJ2IjoiMiIsImMiOiIrOTF5NW56K0R1VWtaa0hpbmFXY2JjeW4rclJCVFk0b25VU1NXMkdNT1BNVzNHRW5Vc3R1eStrdmpmbGlidkRlZmtKT3JNdmpSeHhENXIvUmw3dnJBbFp6anpjbEdBRkwveGdRNklaMzlQa0c3cDRGVTBpcTQ3WUh2SGwzRzFOUWRqampvb01YZklPQTdQUkNPNFdnQUFnTTB2cU81ZDFFTUpDQVRUMTA4K1pwUUJZQUE2ejJNa3ZqcEMxVk5wU096TXhPaG5xRkFkVEF6SUVzUjBDbFJnWGxadEZ5Z01vPSIsInMiOiIxIn0=", "maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "a96c8e16-20be-4366-9476-ff6775d931313", "record_id": "flaws_cloudtrail:0000259:a96c8e16-20be-4366-9476-ff6775d931313", "row_index": 259, "timestamp": "2019-07-24T08:31:34Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "248.251.245.4", "user_agent": "aws-cli/1.16.96 Python/2.7.16 Linux/4.19.0-kali5-amd64 botocore/1.12.86", "aws_region": "eu-west-1"}, "resource_arns": [], "raw_record_size_bytes": 1094, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "a96c8e16-20be-4366-9476-ff6775d931313", "eventTime": "2019-07-24T08:31:34Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "248.251.245.4", "userAgent": "aws-cli/1.16.96 Python/2.7.16 Linux/4.19.0-kali5-amd64 botocore/1.12.86", "awsRegion": "eu-west-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"nextToken": "eyJ2IjoiMiIsImMiOiJ3MTFiUmY4Y0YzVGZubERWcnFndjlBMjhER2N0TC9VZktaYU41V2dIOFRPKzRSNGN1bDdMMGIzRC9ibS9mdlZhaytJYVN5VDlsd3hIUXQ0ZHU3L0tNWS9SL1Y0NmdEVFl1SU1JS05xeUQ2SVpCNnVhUTlyWGNGaUxlZEd0VW5uMXl2OEFPd2NoTCs5blZUMi9ocG1saWwwcVdLTE5CVWNrSFlnQ09CUE5kV1M1cmNUZXpEVlJIWGlSZDZkaEpsb3hKcklwSEJuTUhNUG4wcXpXSWgxayIsInMiOiIxIn0=", "maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "a96c8e16-20be-4366-9476-ff6775d931313", "record_id": "flaws_cloudtrail:0000260:a96c8e16-20be-4366-9476-ff6775d931313", "row_index": 260, "timestamp": "2019-07-24T08:31:34Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "248.251.245.4", "user_agent": "aws-cli/1.16.96 Python/2.7.16 Linux/4.19.0-kali5-amd64 botocore/1.12.86", "aws_region": "eu-west-1"}, "resource_arns": [], "raw_record_size_bytes": 1094, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "a96c8e16-20be-4366-9476-ff6775d931313", "eventTime": "2019-07-24T08:31:34Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "248.251.245.4", "userAgent": "aws-cli/1.16.96 Python/2.7.16 Linux/4.19.0-kali5-amd64 botocore/1.12.86", "awsRegion": "eu-west-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"nextToken": "eyJ2IjoiMiIsImMiOiJ3MTFiUmY4Y0YzVGZubERWcnFndjlBMjhER2N0TC9VZktaYU41V2dIOFRPKzRSNGN1bDdMMGIzRC9ibS9mdlZhaytJYVN5VDlsd3hIUXQ0ZHU3L0tNWS9SL1Y0NmdEVFl1SU1JS05xeUQ2SVpCNnVhUTlyWGNGaUxlZEd0VW5uMXl2OEFPd2NoTCs5blZUMi9ocG1saWwwcVdLTE5CVWNrSFlnQ09CUE5kV1M1cmNUZXpEVlJIWGlSZDZkaEpsb3hKcklwSEJuTUhNUG4wcXpXSWgxayIsInMiOiIxIn0=", "maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "33f633e1-a454-4e40-b1a3-02ba94d9923f", "record_id": "flaws_cloudtrail:0000261:33f633e1-a454-4e40-b1a3-02ba94d9923f", "row_index": 261, "timestamp": "2019-07-24T08:31:35Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "248.251.245.4", "user_agent": "aws-cli/1.16.96 Python/2.7.16 Linux/4.19.0-kali5-amd64 botocore/1.12.86", "aws_region": "eu-west-1"}, "resource_arns": [], "raw_record_size_bytes": 1108, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "33f633e1-a454-4e40-b1a3-02ba94d9923f", "eventTime": "2019-07-24T08:31:35Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "248.251.245.4", "userAgent": "aws-cli/1.16.96 Python/2.7.16 Linux/4.19.0-kali5-amd64 botocore/1.12.86", "awsRegion": "eu-west-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"nextToken": "eyJ2IjoiMiIsImMiOiI3cjJqSXlMY2JlbnRiNEl3ZjdGY0dFdG0xeTBHWFFmbmFnZ0kwMm5LeDNoclEzcFJ4NmRwOUJIK2JIUlZReDg4Z3NrRzk2RWFBRGJhTnNVNjB5QzFLRmhDUmxVb2x1em5rOGFRdnJyTWdYVEgyeVQwK2FhdEZ4YWFZTUVUTnNmbytMSWxSRmh2cTdNRkNzSGpOTlNNMnl0b0h4RnlNa25HQXUxLzc1VnFCK1ljU20rUmwrMFVKeEtRaGhkTm4vbWhNWm14cjhUd05pOXFTbHJueWlKR2dVZ2IxMUxMaGdRPSIsInMiOiIxIn0=", "maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "33f633e1-a454-4e40-b1a3-02ba94d9923f", "record_id": "flaws_cloudtrail:0000262:33f633e1-a454-4e40-b1a3-02ba94d9923f", "row_index": 262, "timestamp": "2019-07-24T08:31:35Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "248.251.245.4", "user_agent": "aws-cli/1.16.96 Python/2.7.16 Linux/4.19.0-kali5-amd64 botocore/1.12.86", "aws_region": "eu-west-1"}, "resource_arns": [], "raw_record_size_bytes": 1108, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "33f633e1-a454-4e40-b1a3-02ba94d9923f", "eventTime": "2019-07-24T08:31:35Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "248.251.245.4", "userAgent": "aws-cli/1.16.96 Python/2.7.16 Linux/4.19.0-kali5-amd64 botocore/1.12.86", "awsRegion": "eu-west-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"nextToken": "eyJ2IjoiMiIsImMiOiI3cjJqSXlMY2JlbnRiNEl3ZjdGY0dFdG0xeTBHWFFmbmFnZ0kwMm5LeDNoclEzcFJ4NmRwOUJIK2JIUlZReDg4Z3NrRzk2RWFBRGJhTnNVNjB5QzFLRmhDUmxVb2x1em5rOGFRdnJyTWdYVEgyeVQwK2FhdEZ4YWFZTUVUTnNmbytMSWxSRmh2cTdNRkNzSGpOTlNNMnl0b0h4RnlNa25HQXUxLzc1VnFCK1ljU20rUmwrMFVKeEtRaGhkTm4vbWhNWm14cjhUd05pOXFTbHJueWlKR2dVZ2IxMUxMaGdRPSIsInMiOiIxIn0=", "maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "e189b576-7a5f-484c-b9c3-acf7df30aaf6", "record_id": "flaws_cloudtrail:0000263:e189b576-7a5f-484c-b9c3-acf7df30aaf6", "row_index": 263, "timestamp": "2019-07-24T08:31:36Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "248.251.245.4", "user_agent": "aws-cli/1.16.96 Python/2.7.16 Linux/4.19.0-kali5-amd64 botocore/1.12.86", "aws_region": "eu-west-1"}, "resource_arns": [], "raw_record_size_bytes": 1109, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "e189b576-7a5f-484c-b9c3-acf7df30aaf6", "eventTime": "2019-07-24T08:31:36Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "248.251.245.4", "userAgent": "aws-cli/1.16.96 Python/2.7.16 Linux/4.19.0-kali5-amd64 botocore/1.12.86", "awsRegion": "eu-west-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"nextToken": "eyJ2IjoiMiIsImMiOiJVTlEya2hNUmpERCt6T3laS1l1Z0NEL3pjNkUxN2p1S21KZjFnU3FCRXE3bjhjWS9RVnFTblV6SjRSOTdlUE1SNXl1SWZ2eG9oT3FPTGxSb1kzRCtjRWVXZ2E1MXFvRkdIQllEaStnbVVtK1oxQlVCcVJrbXRGcFcreDRva1JVUzhTMWdPQkE0eU5OSFAvUWs1RWZSenFNamRTSzNNZEovenF3VmJnVHFWUEs1L0QvRmZpajd5UU5jNk8vejlHdmZacXNEOThrbVMxdThhSVJVczFVTm42U2tZRTRGVzdZPSIsInMiOiIxIn0=", "maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "b9c8c5b0-2b6d-49db-8af0-7774f709a35a", "record_id": "flaws_cloudtrail:0000264:b9c8c5b0-2b6d-49db-8af0-7774f709a35a", "row_index": 264, "timestamp": "2019-07-24T08:31:36Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "248.251.245.4", "user_agent": "aws-cli/1.16.96 Python/2.7.16 Linux/4.19.0-kali5-amd64 botocore/1.12.86", "aws_region": "eu-west-1"}, "resource_arns": [], "raw_record_size_bytes": 1093, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "b9c8c5b0-2b6d-49db-8af0-7774f709a35a", "eventTime": "2019-07-24T08:31:36Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "248.251.245.4", "userAgent": "aws-cli/1.16.96 Python/2.7.16 Linux/4.19.0-kali5-amd64 botocore/1.12.86", "awsRegion": "eu-west-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"nextToken": "eyJ2IjoiMiIsImMiOiJwNnZjYXB5WUkyTmxibGlFZFRPajMvSGwzblI4Tk55d0VFV1A0NHh1YnlEOXVMUEJXSWFqWnF0VzRzODNXcDF4S0hvWm5XeXNFSFlFMkxSUlcvNnBsa2hJTVVwdVhWdDB6eStXUlE4ZmwvN3J2WjdJYXgvMWRPTXNjeGk0ZlIvZi9IcDNpR2NEU2hhdjhXTmRWOWp2MkNEWlJ2TmpUWERhcmt6bHdueVVCM25UQWVJUHFiWUFHMUpsQ1hKTTVqL2hXOVNFQnR5YUcvZE9NLzlsbnA5aSIsInMiOiIxIn0=", "maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "e189b576-7a5f-484c-b9c3-acf7df30aaf6", "record_id": "flaws_cloudtrail:0000265:e189b576-7a5f-484c-b9c3-acf7df30aaf6", "row_index": 265, "timestamp": "2019-07-24T08:31:36Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "248.251.245.4", "user_agent": "aws-cli/1.16.96 Python/2.7.16 Linux/4.19.0-kali5-amd64 botocore/1.12.86", "aws_region": "eu-west-1"}, "resource_arns": [], "raw_record_size_bytes": 1109, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "e189b576-7a5f-484c-b9c3-acf7df30aaf6", "eventTime": "2019-07-24T08:31:36Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "248.251.245.4", "userAgent": "aws-cli/1.16.96 Python/2.7.16 Linux/4.19.0-kali5-amd64 botocore/1.12.86", "awsRegion": "eu-west-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"nextToken": "eyJ2IjoiMiIsImMiOiJVTlEya2hNUmpERCt6T3laS1l1Z0NEL3pjNkUxN2p1S21KZjFnU3FCRXE3bjhjWS9RVnFTblV6SjRSOTdlUE1SNXl1SWZ2eG9oT3FPTGxSb1kzRCtjRWVXZ2E1MXFvRkdIQllEaStnbVVtK1oxQlVCcVJrbXRGcFcreDRva1JVUzhTMWdPQkE0eU5OSFAvUWs1RWZSenFNamRTSzNNZEovenF3VmJnVHFWUEs1L0QvRmZpajd5UU5jNk8vejlHdmZacXNEOThrbVMxdThhSVJVczFVTm42U2tZRTRGVzdZPSIsInMiOiIxIn0=", "maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "b9c8c5b0-2b6d-49db-8af0-7774f709a35a", "record_id": "flaws_cloudtrail:0000266:b9c8c5b0-2b6d-49db-8af0-7774f709a35a", "row_index": 266, "timestamp": "2019-07-24T08:31:36Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "248.251.245.4", "user_agent": "aws-cli/1.16.96 Python/2.7.16 Linux/4.19.0-kali5-amd64 botocore/1.12.86", "aws_region": "eu-west-1"}, "resource_arns": [], "raw_record_size_bytes": 1093, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "b9c8c5b0-2b6d-49db-8af0-7774f709a35a", "eventTime": "2019-07-24T08:31:36Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "248.251.245.4", "userAgent": "aws-cli/1.16.96 Python/2.7.16 Linux/4.19.0-kali5-amd64 botocore/1.12.86", "awsRegion": "eu-west-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"nextToken": "eyJ2IjoiMiIsImMiOiJwNnZjYXB5WUkyTmxibGlFZFRPajMvSGwzblI4Tk55d0VFV1A0NHh1YnlEOXVMUEJXSWFqWnF0VzRzODNXcDF4S0hvWm5XeXNFSFlFMkxSUlcvNnBsa2hJTVVwdVhWdDB6eStXUlE4ZmwvN3J2WjdJYXgvMWRPTXNjeGk0ZlIvZi9IcDNpR2NEU2hhdjhXTmRWOWp2MkNEWlJ2TmpUWERhcmt6bHdueVVCM25UQWVJUHFiWUFHMUpsQ1hKTTVqL2hXOVNFQnR5YUcvZE9NLzlsbnA5aSIsInMiOiIxIn0=", "maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "3b0d2f88-da48-4af7-a774-d287f294d58a", "record_id": "flaws_cloudtrail:0000267:3b0d2f88-da48-4af7-a774-d287f294d58a", "row_index": 267, "timestamp": "2019-07-24T08:31:37Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "248.251.245.4", "user_agent": "aws-cli/1.16.96 Python/2.7.16 Linux/4.19.0-kali5-amd64 botocore/1.12.86", "aws_region": "eu-west-1"}, "resource_arns": [], "raw_record_size_bytes": 1065, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "3b0d2f88-da48-4af7-a774-d287f294d58a", "eventTime": "2019-07-24T08:31:37Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "248.251.245.4", "userAgent": "aws-cli/1.16.96 Python/2.7.16 Linux/4.19.0-kali5-amd64 botocore/1.12.86", "awsRegion": "eu-west-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"nextToken": "eyJ2IjoiMiIsImMiOiI4blRGdjVWZjkvM2xKd3h1bGlvSXByV0RHUmhHeGlaM1dqWUFFd3BTU2s1eVBwSGF3amxsRTRhb1JYWFphbU0rRUxNYkpjQzJ2MmhIamhzSzFVSDFIR090emd2ZlFPelVvWmo5K0NZditlV2UxRmx1MGxrQmYxVTUyT2NVNHovSmo1ZGxYM3lyNkp2UGdxK2dxdFlrbWhoU1R1cHZOVElqa1dHVTA3OUt5bEhwSkdwTXhrNCt4T1psdXNmTXlFcz0iLCJzIjoiMSJ9", "maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "3b0d2f88-da48-4af7-a774-d287f294d58a", "record_id": "flaws_cloudtrail:0000268:3b0d2f88-da48-4af7-a774-d287f294d58a", "row_index": 268, "timestamp": "2019-07-24T08:31:37Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "248.251.245.4", "user_agent": "aws-cli/1.16.96 Python/2.7.16 Linux/4.19.0-kali5-amd64 botocore/1.12.86", "aws_region": "eu-west-1"}, "resource_arns": [], "raw_record_size_bytes": 1065, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "3b0d2f88-da48-4af7-a774-d287f294d58a", "eventTime": "2019-07-24T08:31:37Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "248.251.245.4", "userAgent": "aws-cli/1.16.96 Python/2.7.16 Linux/4.19.0-kali5-amd64 botocore/1.12.86", "awsRegion": "eu-west-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"nextToken": "eyJ2IjoiMiIsImMiOiI4blRGdjVWZjkvM2xKd3h1bGlvSXByV0RHUmhHeGlaM1dqWUFFd3BTU2s1eVBwSGF3amxsRTRhb1JYWFphbU0rRUxNYkpjQzJ2MmhIamhzSzFVSDFIR090emd2ZlFPelVvWmo5K0NZditlV2UxRmx1MGxrQmYxVTUyT2NVNHovSmo1ZGxYM3lyNkp2UGdxK2dxdFlrbWhoU1R1cHZOVElqa1dHVTA3OUt5bEhwSkdwTXhrNCt4T1psdXNmTXlFcz0iLCJzIjoiMSJ9", "maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "bf33b90d-55fb-41b7-bb70-058b5e698d11", "record_id": "flaws_cloudtrail:0000269:bf33b90d-55fb-41b7-bb70-058b5e698d11", "row_index": 269, "timestamp": "2019-07-24T08:31:48Z", "event_type": "GetCallerIdentity", "event_source": "sts.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "248.251.245.4", "user_agent": "aws-cli/1.16.96 Python/2.7.16 Linux/4.19.0-kali5-amd64 botocore/1.12.86", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 781, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "bf33b90d-55fb-41b7-bb70-058b5e698d11", "eventTime": "2019-07-24T08:31:48Z", "eventName": "GetCallerIdentity", "eventSource": "sts.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "248.251.245.4", "userAgent": "aws-cli/1.16.96 Python/2.7.16 Linux/4.19.0-kali5-amd64 botocore/1.12.86", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "responseElements": {"userId": "AIDA9BO36HFBHKGJAO9C1", "account": "811596193553", "arn": "arn:aws:iam::811596193553:user/backup"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "bf33b90d-55fb-41b7-bb70-058b5e698d11", "record_id": "flaws_cloudtrail:0000270:bf33b90d-55fb-41b7-bb70-058b5e698d11", "row_index": 270, "timestamp": "2019-07-24T08:31:48Z", "event_type": "GetCallerIdentity", "event_source": "sts.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "248.251.245.4", "user_agent": "aws-cli/1.16.96 Python/2.7.16 Linux/4.19.0-kali5-amd64 botocore/1.12.86", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 781, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "bf33b90d-55fb-41b7-bb70-058b5e698d11", "eventTime": "2019-07-24T08:31:48Z", "eventName": "GetCallerIdentity", "eventSource": "sts.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "248.251.245.4", "userAgent": "aws-cli/1.16.96 Python/2.7.16 Linux/4.19.0-kali5-amd64 botocore/1.12.86", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "responseElements": {"userId": "AIDA9BO36HFBHKGJAO9C1", "account": "811596193553", "arn": "arn:aws:iam::811596193553:user/backup"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "5e123ec9-9e8d-4956-a9b5-d4d4cb16035", "record_id": "flaws_cloudtrail:0000271:5e123ec9-9e8d-4956-a9b5-d4d4cb16035", "row_index": 271, "timestamp": "2019-07-24T08:31:56Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "248.251.245.4", "user_agent": "aws-cli/1.16.96 Python/2.7.16 Linux/4.19.0-kali5-amd64 botocore/1.12.86", "aws_region": "eu-west-1"}, "resource_arns": [], "raw_record_size_bytes": 795, "raw_record_depth": 5, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "5e123ec9-9e8d-4956-a9b5-d4d4cb16035", "eventTime": "2019-07-24T08:31:56Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "248.251.245.4", "userAgent": "aws-cli/1.16.96 Python/2.7.16 Linux/4.19.0-kali5-amd64 botocore/1.12.86", "awsRegion": "eu-west-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"maxResults": 1000, "snapshotSet": {}, "ownersSet": {"items": [{"owner": "811596193553"}]}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "5e123ec9-9e8d-4956-a9b5-d4d4cb16035", "record_id": "flaws_cloudtrail:0000272:5e123ec9-9e8d-4956-a9b5-d4d4cb16035", "row_index": 272, "timestamp": "2019-07-24T08:31:56Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "248.251.245.4", "user_agent": "aws-cli/1.16.96 Python/2.7.16 Linux/4.19.0-kali5-amd64 botocore/1.12.86", "aws_region": "eu-west-1"}, "resource_arns": [], "raw_record_size_bytes": 795, "raw_record_depth": 5, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "5e123ec9-9e8d-4956-a9b5-d4d4cb16035", "eventTime": "2019-07-24T08:31:56Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "248.251.245.4", "userAgent": "aws-cli/1.16.96 Python/2.7.16 Linux/4.19.0-kali5-amd64 botocore/1.12.86", "awsRegion": "eu-west-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"maxResults": 1000, "snapshotSet": {}, "ownersSet": {"items": [{"owner": "811596193553"}]}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "1d5d5eac-f2e0-4844-91e9-bad9e6b4f4dd", "record_id": "flaws_cloudtrail:0000273:1d5d5eac-f2e0-4844-91e9-bad9e6b4f4dd", "row_index": 273, "timestamp": "2019-07-24T08:32:02Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "248.251.245.4", "user_agent": "aws-cli/1.16.96 Python/2.7.16 Linux/4.19.0-kali5-amd64 botocore/1.12.86", "aws_region": "eu-west-1"}, "resource_arns": [], "raw_record_size_bytes": 910, "raw_record_depth": 5, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "1d5d5eac-f2e0-4844-91e9-bad9e6b4f4dd", "eventTime": "2019-07-24T08:32:02Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "248.251.245.4", "userAgent": "aws-cli/1.16.96 Python/2.7.16 Linux/4.19.0-kali5-amd64 botocore/1.12.86", "awsRegion": "eu-west-1", "errorCode": "Client.InvalidUserID.Malformed", "errorMessage": "Invalid user id: \"AIDA9BO36HFBHKGJAO9C1\"", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"maxResults": 1000, "snapshotSet": {}, "ownersSet": {"items": [{"owner": "AIDA9BO36HFBHKGJAO9C1"}]}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "1d5d5eac-f2e0-4844-91e9-bad9e6b4f4dd", "record_id": "flaws_cloudtrail:0000274:1d5d5eac-f2e0-4844-91e9-bad9e6b4f4dd", "row_index": 274, "timestamp": "2019-07-24T08:32:02Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "248.251.245.4", "user_agent": "aws-cli/1.16.96 Python/2.7.16 Linux/4.19.0-kali5-amd64 botocore/1.12.86", "aws_region": "eu-west-1"}, "resource_arns": [], "raw_record_size_bytes": 910, "raw_record_depth": 5, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "1d5d5eac-f2e0-4844-91e9-bad9e6b4f4dd", "eventTime": "2019-07-24T08:32:02Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "248.251.245.4", "userAgent": "aws-cli/1.16.96 Python/2.7.16 Linux/4.19.0-kali5-amd64 botocore/1.12.86", "awsRegion": "eu-west-1", "errorCode": "Client.InvalidUserID.Malformed", "errorMessage": "Invalid user id: \"AIDA9BO36HFBHKGJAO9C1\"", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"maxResults": 1000, "snapshotSet": {}, "ownersSet": {"items": [{"owner": "AIDA9BO36HFBHKGJAO9C1"}]}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "e3786fdc-6ed6-482b-9457-b4be1fc585eb", "record_id": "flaws_cloudtrail:0000275:e3786fdc-6ed6-482b-9457-b4be1fc585eb", "row_index": 275, "timestamp": "2019-07-24T08:32:08Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "248.251.245.4", "user_agent": "aws-cli/1.16.96 Python/2.7.16 Linux/4.19.0-kali5-amd64 botocore/1.12.86", "aws_region": "eu-west-1"}, "resource_arns": [], "raw_record_size_bytes": 795, "raw_record_depth": 5, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "e3786fdc-6ed6-482b-9457-b4be1fc585eb", "eventTime": "2019-07-24T08:32:08Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "248.251.245.4", "userAgent": "aws-cli/1.16.96 Python/2.7.16 Linux/4.19.0-kali5-amd64 botocore/1.12.86", "awsRegion": "eu-west-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"maxResults": 1000, "snapshotSet": {}, "ownersSet": {"items": [{"owner": "811596193553"}]}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "e3786fdc-6ed6-482b-9457-b4be1fc585eb", "record_id": "flaws_cloudtrail:0000276:e3786fdc-6ed6-482b-9457-b4be1fc585eb", "row_index": 276, "timestamp": "2019-07-24T08:32:08Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "248.251.245.4", "user_agent": "aws-cli/1.16.96 Python/2.7.16 Linux/4.19.0-kali5-amd64 botocore/1.12.86", "aws_region": "eu-west-1"}, "resource_arns": [], "raw_record_size_bytes": 795, "raw_record_depth": 5, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "e3786fdc-6ed6-482b-9457-b4be1fc585eb", "eventTime": "2019-07-24T08:32:08Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "248.251.245.4", "userAgent": "aws-cli/1.16.96 Python/2.7.16 Linux/4.19.0-kali5-amd64 botocore/1.12.86", "awsRegion": "eu-west-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"maxResults": 1000, "snapshotSet": {}, "ownersSet": {"items": [{"owner": "811596193553"}]}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "2b46f561-d8fb-4fdc-832e-a233ceba8c10", "record_id": "flaws_cloudtrail:0000277:2b46f561-d8fb-4fdc-832e-a233ceba8c10", "row_index": 277, "timestamp": "2019-07-24T08:32:50Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "248.251.245.4", "user_agent": "aws-cli/1.16.96 Python/2.7.16 Linux/4.19.0-kali5-amd64 botocore/1.12.86", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 796, "raw_record_depth": 5, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "2b46f561-d8fb-4fdc-832e-a233ceba8c10", "eventTime": "2019-07-24T08:32:50Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "248.251.245.4", "userAgent": "aws-cli/1.16.96 Python/2.7.16 Linux/4.19.0-kali5-amd64 botocore/1.12.86", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"maxResults": 1000, "snapshotSet": {}, "ownersSet": {"items": [{"owner": "811596193553"}]}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "2b46f561-d8fb-4fdc-832e-a233ceba8c10", "record_id": "flaws_cloudtrail:0000278:2b46f561-d8fb-4fdc-832e-a233ceba8c10", "row_index": 278, "timestamp": "2019-07-24T08:32:50Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "248.251.245.4", "user_agent": "aws-cli/1.16.96 Python/2.7.16 Linux/4.19.0-kali5-amd64 botocore/1.12.86", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 796, "raw_record_depth": 5, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "2b46f561-d8fb-4fdc-832e-a233ceba8c10", "eventTime": "2019-07-24T08:32:50Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "248.251.245.4", "userAgent": "aws-cli/1.16.96 Python/2.7.16 Linux/4.19.0-kali5-amd64 botocore/1.12.86", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"maxResults": 1000, "snapshotSet": {}, "ownersSet": {"items": [{"owner": "811596193553"}]}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "13c6b80e-2249-41fb-9fa2-42697f7e067", "record_id": "flaws_cloudtrail:0000279:13c6b80e-2249-41fb-9fa2-42697f7e067", "row_index": 279, "timestamp": "2019-07-24T08:38:22Z", "event_type": "GetAccountAuthorizationDetails", "event_source": "iam.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "5.180.250.254", "user_agent": "aws-cli/1.16.203 Python/3.6.0 Windows/10 botocore/1.12.193", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 679, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "13c6b80e-2249-41fb-9fa2-42697f7e067", "eventTime": "2019-07-24T08:38:22Z", "eventName": "GetAccountAuthorizationDetails", "eventSource": "iam.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "5.180.250.254", "userAgent": "aws-cli/1.16.203 Python/3.6.0 Windows/10 botocore/1.12.193", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "13c6b80e-2249-41fb-9fa2-42697f7e067", "record_id": "flaws_cloudtrail:0000280:13c6b80e-2249-41fb-9fa2-42697f7e067", "row_index": 280, "timestamp": "2019-07-24T08:38:22Z", "event_type": "GetAccountAuthorizationDetails", "event_source": "iam.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "5.180.250.254", "user_agent": "aws-cli/1.16.203 Python/3.6.0 Windows/10 botocore/1.12.193", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 679, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "13c6b80e-2249-41fb-9fa2-42697f7e067", "eventTime": "2019-07-24T08:38:22Z", "eventName": "GetAccountAuthorizationDetails", "eventSource": "iam.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "5.180.250.254", "userAgent": "aws-cli/1.16.203 Python/3.6.0 Windows/10 botocore/1.12.193", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "2d7f9143-b5da-4395-8615-3575fb0ebb10", "record_id": "flaws_cloudtrail:0000281:2d7f9143-b5da-4395-8615-3575fb0ebb10", "row_index": 281, "timestamp": "2019-07-24T08:40:21Z", "event_type": "GetAccountAuthorizationDetails", "event_source": "iam.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "5.180.250.254", "user_agent": "aws-cli/1.16.203 Python/3.6.0 Windows/10 botocore/1.12.193", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 680, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "2d7f9143-b5da-4395-8615-3575fb0ebb10", "eventTime": "2019-07-24T08:40:21Z", "eventName": "GetAccountAuthorizationDetails", "eventSource": "iam.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "5.180.250.254", "userAgent": "aws-cli/1.16.203 Python/3.6.0 Windows/10 botocore/1.12.193", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "2d7f9143-b5da-4395-8615-3575fb0ebb10", "record_id": "flaws_cloudtrail:0000282:2d7f9143-b5da-4395-8615-3575fb0ebb10", "row_index": 282, "timestamp": "2019-07-24T08:40:21Z", "event_type": "GetAccountAuthorizationDetails", "event_source": "iam.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "5.180.250.254", "user_agent": "aws-cli/1.16.203 Python/3.6.0 Windows/10 botocore/1.12.193", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 680, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "2d7f9143-b5da-4395-8615-3575fb0ebb10", "eventTime": "2019-07-24T08:40:21Z", "eventName": "GetAccountAuthorizationDetails", "eventSource": "iam.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "5.180.250.254", "userAgent": "aws-cli/1.16.203 Python/3.6.0 Windows/10 botocore/1.12.193", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "0ad98d27-b681-4a6d-b4a4-75ab26981dac", "record_id": "flaws_cloudtrail:0000283:0ad98d27-b681-4a6d-b4a4-75ab26981dac", "row_index": 283, "timestamp": "2019-07-24T08:45:42Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "9.26.56.242", "user_agent": "aws-cli/1.16.203 Python/2.7.16 Linux/4.19.0-kali4-amd64 botocore/1.12.193", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 762, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "0ad98d27-b681-4a6d-b4a4-75ab26981dac", "eventTime": "2019-07-24T08:45:42Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "9.26.56.242", "userAgent": "aws-cli/1.16.203 Python/2.7.16 Linux/4.19.0-kali4-amd64 botocore/1.12.193", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "0ad98d27-b681-4a6d-b4a4-75ab26981dac", "record_id": "flaws_cloudtrail:0000284:0ad98d27-b681-4a6d-b4a4-75ab26981dac", "row_index": 284, "timestamp": "2019-07-24T08:45:42Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "9.26.56.242", "user_agent": "aws-cli/1.16.203 Python/2.7.16 Linux/4.19.0-kali4-amd64 botocore/1.12.193", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 762, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "0ad98d27-b681-4a6d-b4a4-75ab26981dac", "eventTime": "2019-07-24T08:45:42Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "9.26.56.242", "userAgent": "aws-cli/1.16.203 Python/2.7.16 Linux/4.19.0-kali4-amd64 botocore/1.12.193", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "70edc215-3d51-4452-8609-b098b49319a", "record_id": "flaws_cloudtrail:0000285:70edc215-3d51-4452-8609-b098b49319a", "row_index": 285, "timestamp": "2019-07-24T08:45:45Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "9.26.56.242", "user_agent": "aws-cli/1.16.203 Python/2.7.16 Linux/4.19.0-kali4-amd64 botocore/1.12.193", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1080, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "70edc215-3d51-4452-8609-b098b49319a", "eventTime": "2019-07-24T08:45:45Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "9.26.56.242", "userAgent": "aws-cli/1.16.203 Python/2.7.16 Linux/4.19.0-kali4-amd64 botocore/1.12.193", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"nextToken": "eyJ2IjoiMiIsImMiOiJFMkNJMEs5ZW5DWWRmTFJWdytEM3dYUWx0MzFRL2NES052aGJzVlFMZlo2TE9iMFk3emh2S3p4Mm9hdTlsSnl6Um51NGs1VVBrZGMzODFUU0FmSXpmTGl1K1U2enB1RmVBeTBEMUs5dWY0Y0lvZFFNN1JHZ3UyNlp4MDBGa0pmRytWY3ZhWFJ6UDVoZzRXdW5TK2lXTnNFQ3ZpK2FMdzF4Z053ajVIbUNsczZrbUpQQUU1QXcvME9WczZBNkFaZ3gvN3VvOTlmS1E2RT0iLCJzIjoiMSJ9", "maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "70edc215-3d51-4452-8609-b098b49319a", "record_id": "flaws_cloudtrail:0000286:70edc215-3d51-4452-8609-b098b49319a", "row_index": 286, "timestamp": "2019-07-24T08:45:45Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "9.26.56.242", "user_agent": "aws-cli/1.16.203 Python/2.7.16 Linux/4.19.0-kali4-amd64 botocore/1.12.193", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1080, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "70edc215-3d51-4452-8609-b098b49319a", "eventTime": "2019-07-24T08:45:45Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "9.26.56.242", "userAgent": "aws-cli/1.16.203 Python/2.7.16 Linux/4.19.0-kali4-amd64 botocore/1.12.193", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"nextToken": "eyJ2IjoiMiIsImMiOiJFMkNJMEs5ZW5DWWRmTFJWdytEM3dYUWx0MzFRL2NES052aGJzVlFMZlo2TE9iMFk3emh2S3p4Mm9hdTlsSnl6Um51NGs1VVBrZGMzODFUU0FmSXpmTGl1K1U2enB1RmVBeTBEMUs5dWY0Y0lvZFFNN1JHZ3UyNlp4MDBGa0pmRytWY3ZhWFJ6UDVoZzRXdW5TK2lXTnNFQ3ZpK2FMdzF4Z053ajVIbUNsczZrbUpQQUU1QXcvME9WczZBNkFaZ3gvN3VvOTlmS1E2RT0iLCJzIjoiMSJ9", "maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "67babe7a-3d3f-441d-a252-c741872d54590", "record_id": "flaws_cloudtrail:0000287:67babe7a-3d3f-441d-a252-c741872d54590", "row_index": 287, "timestamp": "2019-07-24T08:45:47Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "9.26.56.242", "user_agent": "aws-cli/1.16.203 Python/2.7.16 Linux/4.19.0-kali4-amd64 botocore/1.12.193", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1088, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "67babe7a-3d3f-441d-a252-c741872d54590", "eventTime": "2019-07-24T08:45:47Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "9.26.56.242", "userAgent": "aws-cli/1.16.203 Python/2.7.16 Linux/4.19.0-kali4-amd64 botocore/1.12.193", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"nextToken": "eyJ2IjoiMiIsImMiOiJLQ0duVTVXbUNyNjZGRFRlRnVKL0ZwU0NTeWV0WmFRSjR2VUh1MFJOVlRQckV3ZVR2VDA1Ni9vWS9aV3NYaE9kWXo1dHZlYzQrQTdlZkpoSDZLOStEck9JOGRsVG9yMU1WaXZqOUhqbHFZNHhFY1RBNktzaS9SWFJIdWVoNXFJRTBLS1ByanFYYkMxUVVEa3M2TXRCWXBVYWw2SmxOL1NxY1ZTUWJXQWJtNGt0WlRTcWlXcXNBSXBCSWhhNElFMTY1aHdUb2QyYkNkM3RoUT09IiwicyI6IjEifQ==", "maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "67babe7a-3d3f-441d-a252-c741872d54590", "record_id": "flaws_cloudtrail:0000288:67babe7a-3d3f-441d-a252-c741872d54590", "row_index": 288, "timestamp": "2019-07-24T08:45:47Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "9.26.56.242", "user_agent": "aws-cli/1.16.203 Python/2.7.16 Linux/4.19.0-kali4-amd64 botocore/1.12.193", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1088, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "67babe7a-3d3f-441d-a252-c741872d54590", "eventTime": "2019-07-24T08:45:47Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "9.26.56.242", "userAgent": "aws-cli/1.16.203 Python/2.7.16 Linux/4.19.0-kali4-amd64 botocore/1.12.193", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"nextToken": "eyJ2IjoiMiIsImMiOiJLQ0duVTVXbUNyNjZGRFRlRnVKL0ZwU0NTeWV0WmFRSjR2VUh1MFJOVlRQckV3ZVR2VDA1Ni9vWS9aV3NYaE9kWXo1dHZlYzQrQTdlZkpoSDZLOStEck9JOGRsVG9yMU1WaXZqOUhqbHFZNHhFY1RBNktzaS9SWFJIdWVoNXFJRTBLS1ByanFYYkMxUVVEa3M2TXRCWXBVYWw2SmxOL1NxY1ZTUWJXQWJtNGt0WlRTcWlXcXNBSXBCSWhhNElFMTY1aHdUb2QyYkNkM3RoUT09IiwicyI6IjEifQ==", "maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "e95d9db3-74cd-4f79-a0c2-f8ca58915e5e", "record_id": "flaws_cloudtrail:0000289:e95d9db3-74cd-4f79-a0c2-f8ca58915e5e", "row_index": 289, "timestamp": "2019-07-24T08:45:49Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "9.26.56.242", "user_agent": "aws-cli/1.16.203 Python/2.7.16 Linux/4.19.0-kali4-amd64 botocore/1.12.193", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1089, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "e95d9db3-74cd-4f79-a0c2-f8ca58915e5e", "eventTime": "2019-07-24T08:45:49Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "9.26.56.242", "userAgent": "aws-cli/1.16.203 Python/2.7.16 Linux/4.19.0-kali4-amd64 botocore/1.12.193", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"nextToken": "eyJ2IjoiMiIsImMiOiJlRmN3MlpqTlNXSENvd0VTUnUvMEE3MExkZmwxaHZTcWY5Zjlkb3dPVkF3MFFaNkloK3dUSzFWY3NkV0FiZDlBd2VVVy9Na2xRSitBK3RvL0RLNTZEYi9kemM4MzZOUWJqbE1GSjMza3p0V2xLb2g2MkY4WWY5MCtKdi9tZHVyZmp1MUt2ekY1NEh1SXdxTWE1UWtxd0dScjM1bi9MREtwMUNPN1RtMVVOMkU5ZUVNN2FsM1FPMjlCSnAydmwvZXVEclVmSk9XYUlRL0poUT09IiwicyI6IjEifQ==", "maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "e95d9db3-74cd-4f79-a0c2-f8ca58915e5e", "record_id": "flaws_cloudtrail:0000290:e95d9db3-74cd-4f79-a0c2-f8ca58915e5e", "row_index": 290, "timestamp": "2019-07-24T08:45:49Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "9.26.56.242", "user_agent": "aws-cli/1.16.203 Python/2.7.16 Linux/4.19.0-kali4-amd64 botocore/1.12.193", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1089, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "e95d9db3-74cd-4f79-a0c2-f8ca58915e5e", "eventTime": "2019-07-24T08:45:49Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "9.26.56.242", "userAgent": "aws-cli/1.16.203 Python/2.7.16 Linux/4.19.0-kali4-amd64 botocore/1.12.193", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"nextToken": "eyJ2IjoiMiIsImMiOiJlRmN3MlpqTlNXSENvd0VTUnUvMEE3MExkZmwxaHZTcWY5Zjlkb3dPVkF3MFFaNkloK3dUSzFWY3NkV0FiZDlBd2VVVy9Na2xRSitBK3RvL0RLNTZEYi9kemM4MzZOUWJqbE1GSjMza3p0V2xLb2g2MkY4WWY5MCtKdi9tZHVyZmp1MUt2ekY1NEh1SXdxTWE1UWtxd0dScjM1bi9MREtwMUNPN1RtMVVOMkU5ZUVNN2FsM1FPMjlCSnAydmwvZXVEclVmSk9XYUlRL0poUT09IiwicyI6IjEifQ==", "maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "ad784050-3724-4f44-8014-3b852952ad53", "record_id": "flaws_cloudtrail:0000291:ad784050-3724-4f44-8014-3b852952ad53", "row_index": 291, "timestamp": "2019-07-24T08:45:52Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "9.26.56.242", "user_agent": "aws-cli/1.16.203 Python/2.7.16 Linux/4.19.0-kali4-amd64 botocore/1.12.193", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1081, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "ad784050-3724-4f44-8014-3b852952ad53", "eventTime": "2019-07-24T08:45:52Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "9.26.56.242", "userAgent": "aws-cli/1.16.203 Python/2.7.16 Linux/4.19.0-kali4-amd64 botocore/1.12.193", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"nextToken": "eyJ2IjoiMiIsImMiOiJzMTN5QXVKK05Nem93SEZSSDMzQ3V6UjM5ck9iZUhXaHFIS09Za0lLVW5zYS8xV2RDcWpWYjhXWk5VNnNOeXA4ZlJiNWRjYkRmdmZVYjFuV1N1V21JVmVxRGU3Yy92UmN4cnZyYVhoNXVVRHYrZUNSU2pLakNXMmh6ekxiMVJVS0RBM1JpbXFsWGtCWG84cXJRWEt5Zi9OK09TTElXd21kNURjWEFUVk5uU2tSQ2N0bUpPV1llMlhXdUV1VUprZVFXeDl3MHdVR2lRPT0iLCJzIjoiMSJ9", "maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "ad784050-3724-4f44-8014-3b852952ad53", "record_id": "flaws_cloudtrail:0000292:ad784050-3724-4f44-8014-3b852952ad53", "row_index": 292, "timestamp": "2019-07-24T08:45:52Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "9.26.56.242", "user_agent": "aws-cli/1.16.203 Python/2.7.16 Linux/4.19.0-kali4-amd64 botocore/1.12.193", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1081, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "ad784050-3724-4f44-8014-3b852952ad53", "eventTime": "2019-07-24T08:45:52Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "9.26.56.242", "userAgent": "aws-cli/1.16.203 Python/2.7.16 Linux/4.19.0-kali4-amd64 botocore/1.12.193", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"nextToken": "eyJ2IjoiMiIsImMiOiJzMTN5QXVKK05Nem93SEZSSDMzQ3V6UjM5ck9iZUhXaHFIS09Za0lLVW5zYS8xV2RDcWpWYjhXWk5VNnNOeXA4ZlJiNWRjYkRmdmZVYjFuV1N1V21JVmVxRGU3Yy92UmN4cnZyYVhoNXVVRHYrZUNSU2pLakNXMmh6ekxiMVJVS0RBM1JpbXFsWGtCWG84cXJRWEt5Zi9OK09TTElXd21kNURjWEFUVk5uU2tSQ2N0bUpPV1llMlhXdUV1VUprZVFXeDl3MHdVR2lRPT0iLCJzIjoiMSJ9", "maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "86338a5-4656-4d9a-a1eb-792da4c848b3", "record_id": "flaws_cloudtrail:0000293:86338a5-4656-4d9a-a1eb-792da4c848b3", "row_index": 293, "timestamp": "2019-07-24T08:45:54Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "9.26.56.242", "user_agent": "aws-cli/1.16.203 Python/2.7.16 Linux/4.19.0-kali4-amd64 botocore/1.12.193", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1086, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "86338a5-4656-4d9a-a1eb-792da4c848b3", "eventTime": "2019-07-24T08:45:54Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "9.26.56.242", "userAgent": "aws-cli/1.16.203 Python/2.7.16 Linux/4.19.0-kali4-amd64 botocore/1.12.193", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"nextToken": "eyJ2IjoiMiIsImMiOiJBQ0VicTNOZjlRam44S29KQU1BeG1ybG9ueVgwRlY2K1BMNWZxQ043Y0hqYnphRnByQ0UrRFRFOTVSQWI4bW9oalU3cHBWYkhuc2s2OHdaRXdZa05YVXlzYnlWbitQbHhSUXk5SEQ4RzNTM3Iya0tmbitWNFNvYnBoTk1oNGhjc0dld29JTEx0Y2NzcXZBR1k2ZXZORWt6MjlLYjFSQXowOHRqeDkrWEd1cENNNnVmdDlxZy81bTk5SEV1RnhsSnNQOEx2L0htcUNmODd4QT09IiwicyI6IjEifQ==", "maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "86338a5-4656-4d9a-a1eb-792da4c848b3", "record_id": "flaws_cloudtrail:0000294:86338a5-4656-4d9a-a1eb-792da4c848b3", "row_index": 294, "timestamp": "2019-07-24T08:45:54Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "9.26.56.242", "user_agent": "aws-cli/1.16.203 Python/2.7.16 Linux/4.19.0-kali4-amd64 botocore/1.12.193", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1086, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "86338a5-4656-4d9a-a1eb-792da4c848b3", "eventTime": "2019-07-24T08:45:54Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "9.26.56.242", "userAgent": "aws-cli/1.16.203 Python/2.7.16 Linux/4.19.0-kali4-amd64 botocore/1.12.193", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"nextToken": "eyJ2IjoiMiIsImMiOiJBQ0VicTNOZjlRam44S29KQU1BeG1ybG9ueVgwRlY2K1BMNWZxQ043Y0hqYnphRnByQ0UrRFRFOTVSQWI4bW9oalU3cHBWYkhuc2s2OHdaRXdZa05YVXlzYnlWbitQbHhSUXk5SEQ4RzNTM3Iya0tmbitWNFNvYnBoTk1oNGhjc0dld29JTEx0Y2NzcXZBR1k2ZXZORWt6MjlLYjFSQXowOHRqeDkrWEd1cENNNnVmdDlxZy81bTk5SEV1RnhsSnNQOEx2L0htcUNmODd4QT09IiwicyI6IjEifQ==", "maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "fb9eaa8d-898c-48f0-a6ab-960f72274be8", "record_id": "flaws_cloudtrail:0000295:fb9eaa8d-898c-48f0-a6ab-960f72274be8", "row_index": 295, "timestamp": "2019-07-24T08:45:55Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "9.26.56.242", "user_agent": "aws-cli/1.16.203 Python/2.7.16 Linux/4.19.0-kali4-amd64 botocore/1.12.193", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1089, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "fb9eaa8d-898c-48f0-a6ab-960f72274be8", "eventTime": "2019-07-24T08:45:55Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "9.26.56.242", "userAgent": "aws-cli/1.16.203 Python/2.7.16 Linux/4.19.0-kali4-amd64 botocore/1.12.193", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"nextToken": "eyJ2IjoiMiIsImMiOiJHTXVCWTZNS1pmYjhMdmsvVGZEcUVPR0FxUGV5c25OaUtEcnArVzRkM05qUDNXTjlhV3NQU1pYN21PRDNBbjR6eW53MXJmazZXamlRWTNsejVzN29UOTE2dUhVckY3U1l2eUYzdDVrT2ttUzkrdVVxM2ZHelBDUkdOZVYzRzk2bjlUT251SXpPNDIxaGdDRENjOGp5S1dGbjNCdDAvYzJGOEVRMkNsbjYvREZ2ME5McXRhNGhQUVNQbVJ4Qmo1ZEdDejF3L3NKWjRiRitUQT09IiwicyI6IjEifQ==", "maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "fb9eaa8d-898c-48f0-a6ab-960f72274be8", "record_id": "flaws_cloudtrail:0000296:fb9eaa8d-898c-48f0-a6ab-960f72274be8", "row_index": 296, "timestamp": "2019-07-24T08:45:55Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "9.26.56.242", "user_agent": "aws-cli/1.16.203 Python/2.7.16 Linux/4.19.0-kali4-amd64 botocore/1.12.193", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1089, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "fb9eaa8d-898c-48f0-a6ab-960f72274be8", "eventTime": "2019-07-24T08:45:55Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "9.26.56.242", "userAgent": "aws-cli/1.16.203 Python/2.7.16 Linux/4.19.0-kali4-amd64 botocore/1.12.193", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"nextToken": "eyJ2IjoiMiIsImMiOiJHTXVCWTZNS1pmYjhMdmsvVGZEcUVPR0FxUGV5c25OaUtEcnArVzRkM05qUDNXTjlhV3NQU1pYN21PRDNBbjR6eW53MXJmazZXamlRWTNsejVzN29UOTE2dUhVckY3U1l2eUYzdDVrT2ttUzkrdVVxM2ZHelBDUkdOZVYzRzk2bjlUT251SXpPNDIxaGdDRENjOGp5S1dGbjNCdDAvYzJGOEVRMkNsbjYvREZ2ME5McXRhNGhQUVNQbVJ4Qmo1ZEdDejF3L3NKWjRiRitUQT09IiwicyI6IjEifQ==", "maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "1cb886383-d3c6-4d9a-b8e3-59f25c9de230", "record_id": "flaws_cloudtrail:0000297:1cb886383-d3c6-4d9a-b8e3-59f25c9de230", "row_index": 297, "timestamp": "2019-07-24T08:45:57Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "9.26.56.242", "user_agent": "aws-cli/1.16.203 Python/2.7.16 Linux/4.19.0-kali4-amd64 botocore/1.12.193", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1081, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "1cb886383-d3c6-4d9a-b8e3-59f25c9de230", "eventTime": "2019-07-24T08:45:57Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "9.26.56.242", "userAgent": "aws-cli/1.16.203 Python/2.7.16 Linux/4.19.0-kali4-amd64 botocore/1.12.193", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"nextToken": "eyJ2IjoiMiIsImMiOiIwZXZPQk12Wmx5aDcxR1FuU3ZpNzl2UWUycFVaTUZUU1RPbm5JV25jN3d5cDNQMDNiNW1MbkM4aXNYMzBwSk9TZXJqakVHNUFoNGxteVU0SWo3UzN0V3prYzlCWnRWSmpxSTBMVVBsM1ZqY2sreVYzVE8rRk5QY2lva2s3NkxNTmJsNFFxOGFnMS96M0tJNzMreEhiZzFMQm4xb29jcGlIaG5Sb1ZUZUpHc2pUTWlnUjVZaVl6TEo5cmRScldGSkdCdy9SL1B6cHk1ST0iLCJzIjoiMSJ9", "maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "1cb886383-d3c6-4d9a-b8e3-59f25c9de230", "record_id": "flaws_cloudtrail:0000298:1cb886383-d3c6-4d9a-b8e3-59f25c9de230", "row_index": 298, "timestamp": "2019-07-24T08:45:57Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "9.26.56.242", "user_agent": "aws-cli/1.16.203 Python/2.7.16 Linux/4.19.0-kali4-amd64 botocore/1.12.193", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1081, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "1cb886383-d3c6-4d9a-b8e3-59f25c9de230", "eventTime": "2019-07-24T08:45:57Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "9.26.56.242", "userAgent": "aws-cli/1.16.203 Python/2.7.16 Linux/4.19.0-kali4-amd64 botocore/1.12.193", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"nextToken": "eyJ2IjoiMiIsImMiOiIwZXZPQk12Wmx5aDcxR1FuU3ZpNzl2UWUycFVaTUZUU1RPbm5JV25jN3d5cDNQMDNiNW1MbkM4aXNYMzBwSk9TZXJqakVHNUFoNGxteVU0SWo3UzN0V3prYzlCWnRWSmpxSTBMVVBsM1ZqY2sreVYzVE8rRk5QY2lva2s3NkxNTmJsNFFxOGFnMS96M0tJNzMreEhiZzFMQm4xb29jcGlIaG5Sb1ZUZUpHc2pUTWlnUjVZaVl6TEo5cmRScldGSkdCdy9SL1B6cHk1ST0iLCJzIjoiMSJ9", "maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "81807ed0-5940-4e8b-a8dd-40a54623caec", "record_id": "flaws_cloudtrail:0000299:81807ed0-5940-4e8b-a8dd-40a54623caec", "row_index": 299, "timestamp": "2019-07-24T08:45:59Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "9.26.56.242", "user_agent": "aws-cli/1.16.203 Python/2.7.16 Linux/4.19.0-kali4-amd64 botocore/1.12.193", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1087, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "81807ed0-5940-4e8b-a8dd-40a54623caec", "eventTime": "2019-07-24T08:45:59Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "9.26.56.242", "userAgent": "aws-cli/1.16.203 Python/2.7.16 Linux/4.19.0-kali4-amd64 botocore/1.12.193", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"nextToken": "eyJ2IjoiMiIsImMiOiJDaXBDTFZlVC9qZEpBSHhUY2UwUlpyS1cvNWZhcURGRUFqbmgxVmpPcGl1RExpSFJaNi91QmR6NWVmR1dWVEVhSFY1ejM4QnlYTitrQkh6MklRb25iSmFFclA2TkVFemNnejE3UUwwU2doT3dzQ3NVelVBZTNCTFY1WCtJek1vbFZkQ056YWNwdWJvR08rUkFNeGhIT2J0M00rM29zcHY2TUpaUTROMTlKZlFRdjVleDRUVUMwckRIbGt0NERFNnFMV1hScVNNQWFmekNadz09IiwicyI6IjEifQ==", "maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "81807ed0-5940-4e8b-a8dd-40a54623caec", "record_id": "flaws_cloudtrail:0000300:81807ed0-5940-4e8b-a8dd-40a54623caec", "row_index": 300, "timestamp": "2019-07-24T08:45:59Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "9.26.56.242", "user_agent": "aws-cli/1.16.203 Python/2.7.16 Linux/4.19.0-kali4-amd64 botocore/1.12.193", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1087, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "81807ed0-5940-4e8b-a8dd-40a54623caec", "eventTime": "2019-07-24T08:45:59Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "9.26.56.242", "userAgent": "aws-cli/1.16.203 Python/2.7.16 Linux/4.19.0-kali4-amd64 botocore/1.12.193", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"nextToken": "eyJ2IjoiMiIsImMiOiJDaXBDTFZlVC9qZEpBSHhUY2UwUlpyS1cvNWZhcURGRUFqbmgxVmpPcGl1RExpSFJaNi91QmR6NWVmR1dWVEVhSFY1ejM4QnlYTitrQkh6MklRb25iSmFFclA2TkVFemNnejE3UUwwU2doT3dzQ3NVelVBZTNCTFY1WCtJek1vbFZkQ056YWNwdWJvR08rUkFNeGhIT2J0M00rM29zcHY2TUpaUTROMTlKZlFRdjVleDRUVUMwckRIbGt0NERFNnFMV1hScVNNQWFmekNadz09IiwicyI6IjEifQ==", "maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "076aca0b-030f-45e8-a6db-d2c8d420d9f6", "record_id": "flaws_cloudtrail:0000301:076aca0b-030f-45e8-a6db-d2c8d420d9f6", "row_index": 301, "timestamp": "2019-07-24T08:46:01Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "9.26.56.242", "user_agent": "aws-cli/1.16.203 Python/2.7.16 Linux/4.19.0-kali4-amd64 botocore/1.12.193", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1081, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "076aca0b-030f-45e8-a6db-d2c8d420d9f6", "eventTime": "2019-07-24T08:46:01Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "9.26.56.242", "userAgent": "aws-cli/1.16.203 Python/2.7.16 Linux/4.19.0-kali4-amd64 botocore/1.12.193", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"nextToken": "eyJ2IjoiMiIsImMiOiIrYzhFUVFtd2tISERyZGwwclhzTTVEMzFXcmhZZ1lFaE4rL0RsT0U1SDVvdTNiRytMR2tLRlZReGwzNmwwZlZkYU43QnNLbi9majJaUU5HbXl5VnN4dUNjcEVFSlBJMXJ5RW1DTVJ5ODZldXBLalcwUURtWnV0Q284YnZCKyt6RTc0UzhSZEU1eWpZV0lTcXRHMHZZV1ZnS0E0R3BlRmduYlQwZUF0WDA0QU95VG14Y3hiMHlOQ0hIdjlCQ3I4dW13b1NHcUd3OWp3PT0iLCJzIjoiMSJ9", "maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "076aca0b-030f-45e8-a6db-d2c8d420d9f6", "record_id": "flaws_cloudtrail:0000302:076aca0b-030f-45e8-a6db-d2c8d420d9f6", "row_index": 302, "timestamp": "2019-07-24T08:46:01Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "9.26.56.242", "user_agent": "aws-cli/1.16.203 Python/2.7.16 Linux/4.19.0-kali4-amd64 botocore/1.12.193", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1081, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "076aca0b-030f-45e8-a6db-d2c8d420d9f6", "eventTime": "2019-07-24T08:46:01Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "9.26.56.242", "userAgent": "aws-cli/1.16.203 Python/2.7.16 Linux/4.19.0-kali4-amd64 botocore/1.12.193", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"nextToken": "eyJ2IjoiMiIsImMiOiIrYzhFUVFtd2tISERyZGwwclhzTTVEMzFXcmhZZ1lFaE4rL0RsT0U1SDVvdTNiRytMR2tLRlZReGwzNmwwZlZkYU43QnNLbi9majJaUU5HbXl5VnN4dUNjcEVFSlBJMXJ5RW1DTVJ5ODZldXBLalcwUURtWnV0Q284YnZCKyt6RTc0UzhSZEU1eWpZV0lTcXRHMHZZV1ZnS0E0R3BlRmduYlQwZUF0WDA0QU95VG14Y3hiMHlOQ0hIdjlCQ3I4dW13b1NHcUd3OWp3PT0iLCJzIjoiMSJ9", "maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "445343-f0ee-4524-86b2-f01710d9c9cf", "record_id": "flaws_cloudtrail:0000303:445343-f0ee-4524-86b2-f01710d9c9cf", "row_index": 303, "timestamp": "2019-07-24T08:46:03Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "9.26.56.242", "user_agent": "aws-cli/1.16.203 Python/2.7.16 Linux/4.19.0-kali4-amd64 botocore/1.12.193", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1087, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "445343-f0ee-4524-86b2-f01710d9c9cf", "eventTime": "2019-07-24T08:46:03Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "9.26.56.242", "userAgent": "aws-cli/1.16.203 Python/2.7.16 Linux/4.19.0-kali4-amd64 botocore/1.12.193", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"nextToken": "eyJ2IjoiMiIsImMiOiJPZytxUzRjY3dGUGY0MzBENk5Mc2ZvVXVnQk1YbjNJSUk1OU8vNngvZTNHSlFTTnFpcXlsQkNVUEVxV3A5R2MvSkhSNEZMTWM1cnU0a2lCeERhQVNielNBQmp4L2RFSmxUOGxoN3VCSDNBOVBrTUZYbmFyWVVlbGtqU3k4TGd1RTd5MEFhekRsUWZMSXVaSC9xWS9zWVdKOWEyTVRTSFhpcG0yRWgybzRMWTEzQ3JEYkdmbDcrcS9wS2cxUmFsRXNKVzdqS3JXcjB3TGNjZz09IiwicyI6IjEifQ==", "maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "445343-f0ee-4524-86b2-f01710d9c9cf", "record_id": "flaws_cloudtrail:0000304:445343-f0ee-4524-86b2-f01710d9c9cf", "row_index": 304, "timestamp": "2019-07-24T08:46:03Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "9.26.56.242", "user_agent": "aws-cli/1.16.203 Python/2.7.16 Linux/4.19.0-kali4-amd64 botocore/1.12.193", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1087, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "445343-f0ee-4524-86b2-f01710d9c9cf", "eventTime": "2019-07-24T08:46:03Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "9.26.56.242", "userAgent": "aws-cli/1.16.203 Python/2.7.16 Linux/4.19.0-kali4-amd64 botocore/1.12.193", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"nextToken": "eyJ2IjoiMiIsImMiOiJPZytxUzRjY3dGUGY0MzBENk5Mc2ZvVXVnQk1YbjNJSUk1OU8vNngvZTNHSlFTTnFpcXlsQkNVUEVxV3A5R2MvSkhSNEZMTWM1cnU0a2lCeERhQVNielNBQmp4L2RFSmxUOGxoN3VCSDNBOVBrTUZYbmFyWVVlbGtqU3k4TGd1RTd5MEFhekRsUWZMSXVaSC9xWS9zWVdKOWEyTVRTSFhpcG0yRWgybzRMWTEzQ3JEYkdmbDcrcS9wS2cxUmFsRXNKVzdqS3JXcjB3TGNjZz09IiwicyI6IjEifQ==", "maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "ef0bb1c4-5c9c-407f-9068-8e8e0cb6e5f5", "record_id": "flaws_cloudtrail:0000305:ef0bb1c4-5c9c-407f-9068-8e8e0cb6e5f5", "row_index": 305, "timestamp": "2019-07-24T08:46:04Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "9.26.56.242", "user_agent": "aws-cli/1.16.203 Python/2.7.16 Linux/4.19.0-kali4-amd64 botocore/1.12.193", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1088, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "ef0bb1c4-5c9c-407f-9068-8e8e0cb6e5f5", "eventTime": "2019-07-24T08:46:04Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "9.26.56.242", "userAgent": "aws-cli/1.16.203 Python/2.7.16 Linux/4.19.0-kali4-amd64 botocore/1.12.193", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"nextToken": "eyJ2IjoiMiIsImMiOiJDVGFSdUNZS1NBN3pCM21hNEQrdHZSTjV6c0ErNDJpemFDTUcyUytHc3k1d3dHU3RPVUJOUXdGNExieFVoTVhWdjV6RVE0V2tLbGhXQjEwY25WN1R3NFJqZHAvK3ZqYklZMHhrcXBqQUVURW5NRnJCbXZBVWZOS0RWbDd0cDRqa09zNS8wSnp2dHd5bnZWTUJzOUFjc0VkWHJJNzZWUDhTb0NSNUpNZTFiNnJ1WVJhdElMRXFiSXVVL01mSEJBRWFUcEZsSnpXa3UzRkw0UT09IiwicyI6IjEifQ==", "maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "ef0bb1c4-5c9c-407f-9068-8e8e0cb6e5f5", "record_id": "flaws_cloudtrail:0000306:ef0bb1c4-5c9c-407f-9068-8e8e0cb6e5f5", "row_index": 306, "timestamp": "2019-07-24T08:46:04Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "9.26.56.242", "user_agent": "aws-cli/1.16.203 Python/2.7.16 Linux/4.19.0-kali4-amd64 botocore/1.12.193", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1088, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "ef0bb1c4-5c9c-407f-9068-8e8e0cb6e5f5", "eventTime": "2019-07-24T08:46:04Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "9.26.56.242", "userAgent": "aws-cli/1.16.203 Python/2.7.16 Linux/4.19.0-kali4-amd64 botocore/1.12.193", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"nextToken": "eyJ2IjoiMiIsImMiOiJDVGFSdUNZS1NBN3pCM21hNEQrdHZSTjV6c0ErNDJpemFDTUcyUytHc3k1d3dHU3RPVUJOUXdGNExieFVoTVhWdjV6RVE0V2tLbGhXQjEwY25WN1R3NFJqZHAvK3ZqYklZMHhrcXBqQUVURW5NRnJCbXZBVWZOS0RWbDd0cDRqa09zNS8wSnp2dHd5bnZWTUJzOUFjc0VkWHJJNzZWUDhTb0NSNUpNZTFiNnJ1WVJhdElMRXFiSXVVL01mSEJBRWFUcEZsSnpXa3UzRkw0UT09IiwicyI6IjEifQ==", "maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "9a07309-6efe-428d-acb0-4f82cd1a2653", "record_id": "flaws_cloudtrail:0000307:9a07309-6efe-428d-acb0-4f82cd1a2653", "row_index": 307, "timestamp": "2019-07-24T08:46:06Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "9.26.56.242", "user_agent": "aws-cli/1.16.203 Python/2.7.16 Linux/4.19.0-kali4-amd64 botocore/1.12.193", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1080, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "9a07309-6efe-428d-acb0-4f82cd1a2653", "eventTime": "2019-07-24T08:46:06Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "9.26.56.242", "userAgent": "aws-cli/1.16.203 Python/2.7.16 Linux/4.19.0-kali4-amd64 botocore/1.12.193", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"nextToken": "eyJ2IjoiMiIsImMiOiI5Y0JUREtjK2c2QjAzRldLWk9QNlVPQ3lPVGdwWWZheElhWWx0dGN3T0RwVmMrZ21yYk1jZ2l3Tk1CdWNLRmlMdVdDd09OSW1GMFJmc2pNK3FkTWFoR2hCb2JOWkd2N0YzSWF5ZGdFSEJQcFUzTkpOcGdRUk8wTWpLdEtwcHgraDVWY1ladExvK3pZUVhHb2hjUkFGUGFnYmYyZzRNVlZxUGxxRlp3anFKQ1owb2R4eW9rU0Qyd1NPaUsvQys5ZTErR1lDSVZ0cWQwYz0iLCJzIjoiMSJ9", "maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "9a07309-6efe-428d-acb0-4f82cd1a2653", "record_id": "flaws_cloudtrail:0000308:9a07309-6efe-428d-acb0-4f82cd1a2653", "row_index": 308, "timestamp": "2019-07-24T08:46:06Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "9.26.56.242", "user_agent": "aws-cli/1.16.203 Python/2.7.16 Linux/4.19.0-kali4-amd64 botocore/1.12.193", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1080, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "9a07309-6efe-428d-acb0-4f82cd1a2653", "eventTime": "2019-07-24T08:46:06Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "9.26.56.242", "userAgent": "aws-cli/1.16.203 Python/2.7.16 Linux/4.19.0-kali4-amd64 botocore/1.12.193", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"nextToken": "eyJ2IjoiMiIsImMiOiI5Y0JUREtjK2c2QjAzRldLWk9QNlVPQ3lPVGdwWWZheElhWWx0dGN3T0RwVmMrZ21yYk1jZ2l3Tk1CdWNLRmlMdVdDd09OSW1GMFJmc2pNK3FkTWFoR2hCb2JOWkd2N0YzSWF5ZGdFSEJQcFUzTkpOcGdRUk8wTWpLdEtwcHgraDVWY1ladExvK3pZUVhHb2hjUkFGUGFnYmYyZzRNVlZxUGxxRlp3anFKQ1owb2R4eW9rU0Qyd1NPaUsvQys5ZTErR1lDSVZ0cWQwYz0iLCJzIjoiMSJ9", "maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "325c8e5d-6548-4bcb-a45c-405acdc8d099", "record_id": "flaws_cloudtrail:0000309:325c8e5d-6548-4bcb-a45c-405acdc8d099", "row_index": 309, "timestamp": "2019-07-24T08:46:08Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "9.26.56.242", "user_agent": "aws-cli/1.16.203 Python/2.7.16 Linux/4.19.0-kali4-amd64 botocore/1.12.193", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1081, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "325c8e5d-6548-4bcb-a45c-405acdc8d099", "eventTime": "2019-07-24T08:46:08Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "9.26.56.242", "userAgent": "aws-cli/1.16.203 Python/2.7.16 Linux/4.19.0-kali4-amd64 botocore/1.12.193", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"nextToken": "eyJ2IjoiMiIsImMiOiI1U0licjhSRlV5ZTBoRzlZUXN5VnQwa0ZEUlN4cGxTTndpWEZWaW5PcFV6YldaSHVSZ0pRVzJXMllnMkNDOFl1RnhoTUEzS2d1bkNDdnJyYkpGNTVXZEVVSXhFSVZzdlUzWnNZVldzYWlqWmhtb0lqTmlxd1l3Umh0aDNjY0JjY2NLck9pb2grMzd4VzlvbXBEN2ExbDhENk02WW5wbk5ERzFDMG5aRXpTTnlLYmM4ZzZraVNCTXdhcHV2RWV6WUFiOE9CSEJJNUZqbz0iLCJzIjoiMSJ9", "maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "325c8e5d-6548-4bcb-a45c-405acdc8d099", "record_id": "flaws_cloudtrail:0000310:325c8e5d-6548-4bcb-a45c-405acdc8d099", "row_index": 310, "timestamp": "2019-07-24T08:46:08Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "9.26.56.242", "user_agent": "aws-cli/1.16.203 Python/2.7.16 Linux/4.19.0-kali4-amd64 botocore/1.12.193", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1081, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "325c8e5d-6548-4bcb-a45c-405acdc8d099", "eventTime": "2019-07-24T08:46:08Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "9.26.56.242", "userAgent": "aws-cli/1.16.203 Python/2.7.16 Linux/4.19.0-kali4-amd64 botocore/1.12.193", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"nextToken": "eyJ2IjoiMiIsImMiOiI1U0licjhSRlV5ZTBoRzlZUXN5VnQwa0ZEUlN4cGxTTndpWEZWaW5PcFV6YldaSHVSZ0pRVzJXMllnMkNDOFl1RnhoTUEzS2d1bkNDdnJyYkpGNTVXZEVVSXhFSVZzdlUzWnNZVldzYWlqWmhtb0lqTmlxd1l3Umh0aDNjY0JjY2NLck9pb2grMzd4VzlvbXBEN2ExbDhENk02WW5wbk5ERzFDMG5aRXpTTnlLYmM4ZzZraVNCTXdhcHV2RWV6WUFiOE9CSEJJNUZqbz0iLCJzIjoiMSJ9", "maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "d2e14dd0-432c-4fe6-ac16-484a16020c0f", "record_id": "flaws_cloudtrail:0000311:d2e14dd0-432c-4fe6-ac16-484a16020c0f", "row_index": 311, "timestamp": "2019-07-24T08:46:09Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "9.26.56.242", "user_agent": "aws-cli/1.16.203 Python/2.7.16 Linux/4.19.0-kali4-amd64 botocore/1.12.193", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1109, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "d2e14dd0-432c-4fe6-ac16-484a16020c0f", "eventTime": "2019-07-24T08:46:09Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "9.26.56.242", "userAgent": "aws-cli/1.16.203 Python/2.7.16 Linux/4.19.0-kali4-amd64 botocore/1.12.193", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"nextToken": "eyJ2IjoiMiIsImMiOiJYMlpqMExWV25HOGpJT2ZlRHYzdXVRL2pwT2haTTdhSXJSU1lpZzFKYW40Qy9abW9mMVZJbjlnOXVvN2FhRm9HUlNDQjZkNXhPM04yYjJ4QXVzeHlMeDhCZmtTanh1T2xCL3RTRk1yaHBTRkVQUzIrMGZkT09HVlpmbVZjZlRobThZcG41Q1VqUk4zQVdSYk9XYys0YUxINWw3TUtaMWFoVHVqbU91S2tFdjZmekczeXkrWXR0NmtzR1gxbWI4aUVhRktXMzRKYS9lbHhYV29Kb3lvN2RrZlVXb2Y0cEFRPSIsInMiOiIxIn0=", "maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "d2e14dd0-432c-4fe6-ac16-484a16020c0f", "record_id": "flaws_cloudtrail:0000312:d2e14dd0-432c-4fe6-ac16-484a16020c0f", "row_index": 312, "timestamp": "2019-07-24T08:46:09Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "9.26.56.242", "user_agent": "aws-cli/1.16.203 Python/2.7.16 Linux/4.19.0-kali4-amd64 botocore/1.12.193", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1109, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "d2e14dd0-432c-4fe6-ac16-484a16020c0f", "eventTime": "2019-07-24T08:46:09Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "9.26.56.242", "userAgent": "aws-cli/1.16.203 Python/2.7.16 Linux/4.19.0-kali4-amd64 botocore/1.12.193", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"nextToken": "eyJ2IjoiMiIsImMiOiJYMlpqMExWV25HOGpJT2ZlRHYzdXVRL2pwT2haTTdhSXJSU1lpZzFKYW40Qy9abW9mMVZJbjlnOXVvN2FhRm9HUlNDQjZkNXhPM04yYjJ4QXVzeHlMeDhCZmtTanh1T2xCL3RTRk1yaHBTRkVQUzIrMGZkT09HVlpmbVZjZlRobThZcG41Q1VqUk4zQVdSYk9XYys0YUxINWw3TUtaMWFoVHVqbU91S2tFdjZmekczeXkrWXR0NmtzR1gxbWI4aUVhRktXMzRKYS9lbHhYV29Kb3lvN2RrZlVXb2Y0cEFRPSIsInMiOiIxIn0=", "maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "aa494363-65cd-473a-a2f4-eb15e73045", "record_id": "flaws_cloudtrail:0000313:aa494363-65cd-473a-a2f4-eb15e73045", "row_index": 313, "timestamp": "2019-07-24T08:46:11Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "9.26.56.242", "user_agent": "aws-cli/1.16.203 Python/2.7.16 Linux/4.19.0-kali4-amd64 botocore/1.12.193", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1091, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "aa494363-65cd-473a-a2f4-eb15e73045", "eventTime": "2019-07-24T08:46:11Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "9.26.56.242", "userAgent": "aws-cli/1.16.203 Python/2.7.16 Linux/4.19.0-kali4-amd64 botocore/1.12.193", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"nextToken": "eyJ2IjoiMiIsImMiOiJuckdVY25BVkwwM0ZVRU9MQSt6aXpKMlltVjVqbzQ0eHc3MkErNG1JdHZLdlg0Y1dKY1FXeHplN3BqWCtwdXlUd3loQmpoNTN5VkpBNGtzbGtzcSsxY21QQnpHOWFwNExzZjdNUVo4ZVI0WXFlakduREhVTXlYUk5CRW1hUG1MQ3VzNHN3ZUZ4ODFOM2ZQZzU1Z1hyN3E3YWtOZ2gvKzVrTlBJMUxreHdkT2MzeGJ1KzdqNThpemt1ejc1a3ZNK1RvMkU0Zy9zQlJRaVN3ZFhYRWU3bXZRPT0iLCJzIjoiMSJ9", "maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "aa494363-65cd-473a-a2f4-eb15e73045", "record_id": "flaws_cloudtrail:0000314:aa494363-65cd-473a-a2f4-eb15e73045", "row_index": 314, "timestamp": "2019-07-24T08:46:11Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "9.26.56.242", "user_agent": "aws-cli/1.16.203 Python/2.7.16 Linux/4.19.0-kali4-amd64 botocore/1.12.193", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1091, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "aa494363-65cd-473a-a2f4-eb15e73045", "eventTime": "2019-07-24T08:46:11Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "9.26.56.242", "userAgent": "aws-cli/1.16.203 Python/2.7.16 Linux/4.19.0-kali4-amd64 botocore/1.12.193", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"nextToken": "eyJ2IjoiMiIsImMiOiJuckdVY25BVkwwM0ZVRU9MQSt6aXpKMlltVjVqbzQ0eHc3MkErNG1JdHZLdlg0Y1dKY1FXeHplN3BqWCtwdXlUd3loQmpoNTN5VkpBNGtzbGtzcSsxY21QQnpHOWFwNExzZjdNUVo4ZVI0WXFlakduREhVTXlYUk5CRW1hUG1MQ3VzNHN3ZUZ4ODFOM2ZQZzU1Z1hyN3E3YWtOZ2gvKzVrTlBJMUxreHdkT2MzeGJ1KzdqNThpemt1ejc1a3ZNK1RvMkU0Zy9zQlJRaVN3ZFhYRWU3bXZRPT0iLCJzIjoiMSJ9", "maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "9bc3e6b4-e251-4d3e-8307-8ecfe2a320179", "record_id": "flaws_cloudtrail:0000315:9bc3e6b4-e251-4d3e-8307-8ecfe2a320179", "row_index": 315, "timestamp": "2019-07-24T08:46:12Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "9.26.56.242", "user_agent": "aws-cli/1.16.203 Python/2.7.16 Linux/4.19.0-kali4-amd64 botocore/1.12.193", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1110, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "9bc3e6b4-e251-4d3e-8307-8ecfe2a320179", "eventTime": "2019-07-24T08:46:12Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "9.26.56.242", "userAgent": "aws-cli/1.16.203 Python/2.7.16 Linux/4.19.0-kali4-amd64 botocore/1.12.193", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"nextToken": "eyJ2IjoiMiIsImMiOiJneGMrcUhKK0dFVnVtYkhiT0VjNGd3QUh1dE5kejRBdVJrWUhZTnFQZjBVaUlrRS9NZ000WVZFLytjd25KWmtwL3hFQW5NeHpRaGZkNzdFc0x5bzNDcjU1RHV2cG9iQk5sa0NNODRraHVXR0w1VXJnQkRETVNDVGVLS2xZcStMTWZLdzVzQlNoSVR2V2tvTTNPejE1MmhoZng2aGRWMDhaTmNnMi9HT0Q0T1F3MTkvRWZzL1JON2xjTnIzeEl1TVJvSFlvcWR5R0Y2TFpTQ242aUczdmZLMFA2MGNGdjlJPSIsInMiOiIxIn0=", "maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "9bc3e6b4-e251-4d3e-8307-8ecfe2a320179", "record_id": "flaws_cloudtrail:0000316:9bc3e6b4-e251-4d3e-8307-8ecfe2a320179", "row_index": 316, "timestamp": "2019-07-24T08:46:12Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "9.26.56.242", "user_agent": "aws-cli/1.16.203 Python/2.7.16 Linux/4.19.0-kali4-amd64 botocore/1.12.193", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1110, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "9bc3e6b4-e251-4d3e-8307-8ecfe2a320179", "eventTime": "2019-07-24T08:46:12Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "9.26.56.242", "userAgent": "aws-cli/1.16.203 Python/2.7.16 Linux/4.19.0-kali4-amd64 botocore/1.12.193", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"nextToken": "eyJ2IjoiMiIsImMiOiJneGMrcUhKK0dFVnVtYkhiT0VjNGd3QUh1dE5kejRBdVJrWUhZTnFQZjBVaUlrRS9NZ000WVZFLytjd25KWmtwL3hFQW5NeHpRaGZkNzdFc0x5bzNDcjU1RHV2cG9iQk5sa0NNODRraHVXR0w1VXJnQkRETVNDVGVLS2xZcStMTWZLdzVzQlNoSVR2V2tvTTNPejE1MmhoZng2aGRWMDhaTmNnMi9HT0Q0T1F3MTkvRWZzL1JON2xjTnIzeEl1TVJvSFlvcWR5R0Y2TFpTQ242aUczdmZLMFA2MGNGdjlJPSIsInMiOiIxIn0=", "maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "8cb6126f-58a9-48ce-9664-dffdfa71cf63", "record_id": "flaws_cloudtrail:0000317:8cb6126f-58a9-48ce-9664-dffdfa71cf63", "row_index": 317, "timestamp": "2019-07-24T08:46:13Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "9.26.56.242", "user_agent": "aws-cli/1.16.203 Python/2.7.16 Linux/4.19.0-kali4-amd64 botocore/1.12.193", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1064, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "8cb6126f-58a9-48ce-9664-dffdfa71cf63", "eventTime": "2019-07-24T08:46:13Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "9.26.56.242", "userAgent": "aws-cli/1.16.203 Python/2.7.16 Linux/4.19.0-kali4-amd64 botocore/1.12.193", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"nextToken": "eyJ2IjoiMiIsImMiOiJhRHVjSGJIbXpOckU2S3E2cTFFaXU2Uk41czJIdmRYYnV4MmNtQmtBaXZHSSt0S3YybGkrcG1vL1EwWGlwdmZqZ3NVdW1sVmo0WXZrSnFObW0weEFoRHk1V2hBbVJZYVB6R1pBaGhnb3I4UTdOZ0haWnhBODllZjh2bjgrRWkxRkR2VWZWMnAvRzRnNzNwU0hCa05tNnQ5UU11VnREZ01jaSs1akpVcTV3QVNyR3A4MjdjbUxLdGRXS2ZLblJDTT0iLCJzIjoiMSJ9", "maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "8cb6126f-58a9-48ce-9664-dffdfa71cf63", "record_id": "flaws_cloudtrail:0000318:8cb6126f-58a9-48ce-9664-dffdfa71cf63", "row_index": 318, "timestamp": "2019-07-24T08:46:13Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "9.26.56.242", "user_agent": "aws-cli/1.16.203 Python/2.7.16 Linux/4.19.0-kali4-amd64 botocore/1.12.193", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1064, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "8cb6126f-58a9-48ce-9664-dffdfa71cf63", "eventTime": "2019-07-24T08:46:13Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "9.26.56.242", "userAgent": "aws-cli/1.16.203 Python/2.7.16 Linux/4.19.0-kali4-amd64 botocore/1.12.193", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"nextToken": "eyJ2IjoiMiIsImMiOiJhRHVjSGJIbXpOckU2S3E2cTFFaXU2Uk41czJIdmRYYnV4MmNtQmtBaXZHSSt0S3YybGkrcG1vL1EwWGlwdmZqZ3NVdW1sVmo0WXZrSnFObW0weEFoRHk1V2hBbVJZYVB6R1pBaGhnb3I4UTdOZ0haWnhBODllZjh2bjgrRWkxRkR2VWZWMnAvRzRnNzNwU0hCa05tNnQ5UU11VnREZ01jaSs1akpVcTV3QVNyR3A4MjdjbUxLdGRXS2ZLblJDTT0iLCJzIjoiMSJ9", "maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "d8543dce-6e2f-4c46-9789-54f6f2f50525", "record_id": "flaws_cloudtrail:0000319:d8543dce-6e2f-4c46-9789-54f6f2f50525", "row_index": 319, "timestamp": "2019-07-24T08:46:14Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "9.26.56.242", "user_agent": "aws-cli/1.16.203 Python/2.7.16 Linux/4.19.0-kali4-amd64 botocore/1.12.193", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1109, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "d8543dce-6e2f-4c46-9789-54f6f2f50525", "eventTime": "2019-07-24T08:46:14Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "9.26.56.242", "userAgent": "aws-cli/1.16.203 Python/2.7.16 Linux/4.19.0-kali4-amd64 botocore/1.12.193", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"nextToken": "eyJ2IjoiMiIsImMiOiI2WHRsRzNVZUMyMktBZUJtY2VXZTdHSXY3Z3RTYTRNZU1sWEY4S0M1aThBWWhpemEzQ0xweWNGZzJVOS90QS9lN1pHRlY3YWtNY0N5NmQ2ZGxzeDlIeW5XdTFIZGZ0Rko4alNiamJzTFFuRjAyYlBOWStBMGQ4Z29iODh2NmVxQms0V1RZekpFR0xQOFBnU0VSRTJLblJ6OE5yT3dUT2VWZXJsUFJta2w5ZlFZcTg4bFhqZmR2QjdsL2hBc2VuNG1kWjBJSlFvZnF1aGpZR0xyNVZLdnNIVHNMVWNsVDlzPSIsInMiOiIxIn0=", "maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "d8543dce-6e2f-4c46-9789-54f6f2f50525", "record_id": "flaws_cloudtrail:0000320:d8543dce-6e2f-4c46-9789-54f6f2f50525", "row_index": 320, "timestamp": "2019-07-24T08:46:14Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "9.26.56.242", "user_agent": "aws-cli/1.16.203 Python/2.7.16 Linux/4.19.0-kali4-amd64 botocore/1.12.193", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1109, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "d8543dce-6e2f-4c46-9789-54f6f2f50525", "eventTime": "2019-07-24T08:46:14Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "9.26.56.242", "userAgent": "aws-cli/1.16.203 Python/2.7.16 Linux/4.19.0-kali4-amd64 botocore/1.12.193", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"nextToken": "eyJ2IjoiMiIsImMiOiI2WHRsRzNVZUMyMktBZUJtY2VXZTdHSXY3Z3RTYTRNZU1sWEY4S0M1aThBWWhpemEzQ0xweWNGZzJVOS90QS9lN1pHRlY3YWtNY0N5NmQ2ZGxzeDlIeW5XdTFIZGZ0Rko4alNiamJzTFFuRjAyYlBOWStBMGQ4Z29iODh2NmVxQms0V1RZekpFR0xQOFBnU0VSRTJLblJ6OE5yT3dUT2VWZXJsUFJta2w5ZlFZcTg4bFhqZmR2QjdsL2hBc2VuNG1kWjBJSlFvZnF1aGpZR0xyNVZLdnNIVHNMVWNsVDlzPSIsInMiOiIxIn0=", "maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "229278ab5-4313-4bd0-b9f1-0a155cacf4b1", "record_id": "flaws_cloudtrail:0000321:229278ab5-4313-4bd0-b9f1-0a155cacf4b1", "row_index": 321, "timestamp": "2019-07-24T08:46:16Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "9.26.56.242", "user_agent": "aws-cli/1.16.203 Python/2.7.16 Linux/4.19.0-kali4-amd64 botocore/1.12.193", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1099, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "229278ab5-4313-4bd0-b9f1-0a155cacf4b1", "eventTime": "2019-07-24T08:46:16Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "9.26.56.242", "userAgent": "aws-cli/1.16.203 Python/2.7.16 Linux/4.19.0-kali4-amd64 botocore/1.12.193", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"nextToken": "eyJ2IjoiMiIsImMiOiJ2SllUNjhQQ3ZGRmM4dGY4ZG1lRFhYVU1kWTFpc0hPcnp0OWp0Sk55M01sNmk4aWlTd2xKUEF5SCt0eVVxdmJ0VUduRk56c2QvM1dMSmtGNmFxOWovNWF4SzZoLy85Rk54MHJqNnBlT092c2N4b01zaGpncCtXcDlIQVdtb0VNK0dTYS9mYVVtOS9RdlI5dFRiZTUxU2ljQmNHN2lNQjVUelRjYjl4QWZQVFdpcDNOYnRXTkpFa2M2NnNDcUFCMk5sMG1Wb3pIZDZkakVkUzRKNE5VN1lRPT0iLCJzIjoiMSJ9", "maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "229278ab5-4313-4bd0-b9f1-0a155cacf4b1", "record_id": "flaws_cloudtrail:0000322:229278ab5-4313-4bd0-b9f1-0a155cacf4b1", "row_index": 322, "timestamp": "2019-07-24T08:46:16Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "9.26.56.242", "user_agent": "aws-cli/1.16.203 Python/2.7.16 Linux/4.19.0-kali4-amd64 botocore/1.12.193", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1099, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "229278ab5-4313-4bd0-b9f1-0a155cacf4b1", "eventTime": "2019-07-24T08:46:16Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "9.26.56.242", "userAgent": "aws-cli/1.16.203 Python/2.7.16 Linux/4.19.0-kali4-amd64 botocore/1.12.193", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"nextToken": "eyJ2IjoiMiIsImMiOiJ2SllUNjhQQ3ZGRmM4dGY4ZG1lRFhYVU1kWTFpc0hPcnp0OWp0Sk55M01sNmk4aWlTd2xKUEF5SCt0eVVxdmJ0VUduRk56c2QvM1dMSmtGNmFxOWovNWF4SzZoLy85Rk54MHJqNnBlT092c2N4b01zaGpncCtXcDlIQVdtb0VNK0dTYS9mYVVtOS9RdlI5dFRiZTUxU2ljQmNHN2lNQjVUelRjYjl4QWZQVFdpcDNOYnRXTkpFa2M2NnNDcUFCMk5sMG1Wb3pIZDZkakVkUzRKNE5VN1lRPT0iLCJzIjoiMSJ9", "maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "c2b70caf-6dfb-42fe-b62d-4768d4bb896c", "record_id": "flaws_cloudtrail:0000323:c2b70caf-6dfb-42fe-b62d-4768d4bb896c", "row_index": 323, "timestamp": "2019-07-24T08:46:17Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "9.26.56.242", "user_agent": "aws-cli/1.16.203 Python/2.7.16 Linux/4.19.0-kali4-amd64 botocore/1.12.193", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1108, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "c2b70caf-6dfb-42fe-b62d-4768d4bb896c", "eventTime": "2019-07-24T08:46:17Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "9.26.56.242", "userAgent": "aws-cli/1.16.203 Python/2.7.16 Linux/4.19.0-kali4-amd64 botocore/1.12.193", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"nextToken": "eyJ2IjoiMiIsImMiOiJiUElGeG1uWkZFRHR5dU1QYUdnbjZna0FYTmJrVnVoQWpBZ3VzSzN2Q2xXWVNaM0UzQUNJZFRObTVuWXptZXdMQUFuZnF3bU1EVHUrdnc1MVdra1pGQVRHTWQrNEhRNDNUdDJManQzbG9MZ3RqWW9CeWpNM1F3SXZqV0dZVDlrZDFDNU9jS2xaT3RFTzA5bEtKRjZSWUpzbll0bmRwOXUwRk1adHZtT1JLd3g1K0RFcGc2S0hQVXZRL3dQVHlMS040V1RmVzI2Zk5aWUVEKzlOUGlPcXpCVVUyR01aT2xNPSIsInMiOiIxIn0=", "maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "c2b70caf-6dfb-42fe-b62d-4768d4bb896c", "record_id": "flaws_cloudtrail:0000324:c2b70caf-6dfb-42fe-b62d-4768d4bb896c", "row_index": 324, "timestamp": "2019-07-24T08:46:17Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "9.26.56.242", "user_agent": "aws-cli/1.16.203 Python/2.7.16 Linux/4.19.0-kali4-amd64 botocore/1.12.193", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1108, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "c2b70caf-6dfb-42fe-b62d-4768d4bb896c", "eventTime": "2019-07-24T08:46:17Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "9.26.56.242", "userAgent": "aws-cli/1.16.203 Python/2.7.16 Linux/4.19.0-kali4-amd64 botocore/1.12.193", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"nextToken": "eyJ2IjoiMiIsImMiOiJiUElGeG1uWkZFRHR5dU1QYUdnbjZna0FYTmJrVnVoQWpBZ3VzSzN2Q2xXWVNaM0UzQUNJZFRObTVuWXptZXdMQUFuZnF3bU1EVHUrdnc1MVdra1pGQVRHTWQrNEhRNDNUdDJManQzbG9MZ3RqWW9CeWpNM1F3SXZqV0dZVDlrZDFDNU9jS2xaT3RFTzA5bEtKRjZSWUpzbll0bmRwOXUwRk1adHZtT1JLd3g1K0RFcGc2S0hQVXZRL3dQVHlMS040V1RmVzI2Zk5aWUVEKzlOUGlPcXpCVVUyR01aT2xNPSIsInMiOiIxIn0=", "maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "d128fa67-c231-4acc-8010-3b02ed758ec3", "record_id": "flaws_cloudtrail:0000325:d128fa67-c231-4acc-8010-3b02ed758ec3", "row_index": 325, "timestamp": "2019-07-24T08:46:19Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "9.26.56.242", "user_agent": "aws-cli/1.16.203 Python/2.7.16 Linux/4.19.0-kali4-amd64 botocore/1.12.193", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1097, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "d128fa67-c231-4acc-8010-3b02ed758ec3", "eventTime": "2019-07-24T08:46:19Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "9.26.56.242", "userAgent": "aws-cli/1.16.203 Python/2.7.16 Linux/4.19.0-kali4-amd64 botocore/1.12.193", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"nextToken": "eyJ2IjoiMiIsImMiOiJHbkloZDJQcXVDWWFlK1JUNXl5aDJlbFoxSmNkQUtjd2J6UVJWTzczN0sveWszZTM3OHpIbm54VkV4VGdEcE0reUVVYmNWbDBBbkh4ZVVQNVA0ZFRGTy84M2NhdVU5QW9OMTJEdm9DcmptRG1UL2ZmZGFSU2tZd1dpT2l5Um9EOXFWWjJZajl0RFcrdUtUZ2ZKbytmaHQ4ekVvL3ltSUtmbW4zSW1yT3lGR014QnJ2dHFiYXhFaEw3cSs0RDR0N0tTenlsQ3hrdlZpWnVYNTJrdDhiR1N3PT0iLCJzIjoiMSJ9", "maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "d128fa67-c231-4acc-8010-3b02ed758ec3", "record_id": "flaws_cloudtrail:0000326:d128fa67-c231-4acc-8010-3b02ed758ec3", "row_index": 326, "timestamp": "2019-07-24T08:46:19Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "9.26.56.242", "user_agent": "aws-cli/1.16.203 Python/2.7.16 Linux/4.19.0-kali4-amd64 botocore/1.12.193", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1097, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "d128fa67-c231-4acc-8010-3b02ed758ec3", "eventTime": "2019-07-24T08:46:19Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "9.26.56.242", "userAgent": "aws-cli/1.16.203 Python/2.7.16 Linux/4.19.0-kali4-amd64 botocore/1.12.193", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"nextToken": "eyJ2IjoiMiIsImMiOiJHbkloZDJQcXVDWWFlK1JUNXl5aDJlbFoxSmNkQUtjd2J6UVJWTzczN0sveWszZTM3OHpIbm54VkV4VGdEcE0reUVVYmNWbDBBbkh4ZVVQNVA0ZFRGTy84M2NhdVU5QW9OMTJEdm9DcmptRG1UL2ZmZGFSU2tZd1dpT2l5Um9EOXFWWjJZajl0RFcrdUtUZ2ZKbytmaHQ4ekVvL3ltSUtmbW4zSW1yT3lGR014QnJ2dHFiYXhFaEw3cSs0RDR0N0tTenlsQ3hrdlZpWnVYNTJrdDhiR1N3PT0iLCJzIjoiMSJ9", "maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "57a6c7e0-3e50-496f-81e8-95765f229846c", "record_id": "flaws_cloudtrail:0000327:57a6c7e0-3e50-496f-81e8-95765f229846c", "row_index": 327, "timestamp": "2019-07-24T08:46:21Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "9.26.56.242", "user_agent": "aws-cli/1.16.203 Python/2.7.16 Linux/4.19.0-kali4-amd64 botocore/1.12.193", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1110, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "57a6c7e0-3e50-496f-81e8-95765f229846c", "eventTime": "2019-07-24T08:46:21Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "9.26.56.242", "userAgent": "aws-cli/1.16.203 Python/2.7.16 Linux/4.19.0-kali4-amd64 botocore/1.12.193", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"nextToken": "eyJ2IjoiMiIsImMiOiJOdUd5WTh6WjB6VHlNQjlCOUVCb3ZkVGw4ZE1kaEhxUllwZWl1Q1gyZkRRb3RZZGFMaXdrQmY2a0xoL3kyMldyYTE5QW1HWkF6TllXWGtvZlRTbzIxdlBaalVIbzQyYjdKUlp1UngvWk5EZDAzbGZDbW1hZnlCV2FPQmlGOVoremRWTVpaeUlNTjgvWmo1N0ZTMldPZ25TSXV1VEpuZHFyeXlhZ2lVeGZVR01hREhJOEFHRzdTcVljNGZCMnNIbUNZcGhDQU5kSXdMdk1nd2ZzVytPUVlra1IxNXdKVlRBPSIsInMiOiIxIn0=", "maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "57a6c7e0-3e50-496f-81e8-95765f229846c", "record_id": "flaws_cloudtrail:0000328:57a6c7e0-3e50-496f-81e8-95765f229846c", "row_index": 328, "timestamp": "2019-07-24T08:46:21Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "9.26.56.242", "user_agent": "aws-cli/1.16.203 Python/2.7.16 Linux/4.19.0-kali4-amd64 botocore/1.12.193", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1110, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "57a6c7e0-3e50-496f-81e8-95765f229846c", "eventTime": "2019-07-24T08:46:21Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "9.26.56.242", "userAgent": "aws-cli/1.16.203 Python/2.7.16 Linux/4.19.0-kali4-amd64 botocore/1.12.193", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"nextToken": "eyJ2IjoiMiIsImMiOiJOdUd5WTh6WjB6VHlNQjlCOUVCb3ZkVGw4ZE1kaEhxUllwZWl1Q1gyZkRRb3RZZGFMaXdrQmY2a0xoL3kyMldyYTE5QW1HWkF6TllXWGtvZlRTbzIxdlBaalVIbzQyYjdKUlp1UngvWk5EZDAzbGZDbW1hZnlCV2FPQmlGOVoremRWTVpaeUlNTjgvWmo1N0ZTMldPZ25TSXV1VEpuZHFyeXlhZ2lVeGZVR01hREhJOEFHRzdTcVljNGZCMnNIbUNZcGhDQU5kSXdMdk1nd2ZzVytPUVlra1IxNXdKVlRBPSIsInMiOiIxIn0=", "maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "b930798-c79a-4efa-a9a4-021911edea2", "record_id": "flaws_cloudtrail:0000329:b930798-c79a-4efa-a9a4-021911edea2", "row_index": 329, "timestamp": "2019-07-24T08:46:22Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "9.26.56.242", "user_agent": "aws-cli/1.16.203 Python/2.7.16 Linux/4.19.0-kali4-amd64 botocore/1.12.193", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1061, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "b930798-c79a-4efa-a9a4-021911edea2", "eventTime": "2019-07-24T08:46:22Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "9.26.56.242", "userAgent": "aws-cli/1.16.203 Python/2.7.16 Linux/4.19.0-kali4-amd64 botocore/1.12.193", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"nextToken": "eyJ2IjoiMiIsImMiOiI1RjI2bFRBVUdRQml3MDhPRG1SQWFtWjArQkgxYXhvSTBMd044anNOWmZZNC9GS1FlbTVPaUJ2UFZWem1mQTJVQ0lNV3hvcmFIMnNHM0NqbEgyUzYrTGFJT042RFFnSTFZbFcwZ1FVMmNFdVhPUzhWaUhEMCtPZnV2T0JlN09HZEREb29mRmpqaThCUnZKclZ1SVNpUkRyd3g3RGo5UzdqV3hnalNlVXk4NktVaHF1bUZOVmpJQmNGbnNJSUxmcz0iLCJzIjoiMSJ9", "maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "b930798-c79a-4efa-a9a4-021911edea2", "record_id": "flaws_cloudtrail:0000330:b930798-c79a-4efa-a9a4-021911edea2", "row_index": 330, "timestamp": "2019-07-24T08:46:22Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "9.26.56.242", "user_agent": "aws-cli/1.16.203 Python/2.7.16 Linux/4.19.0-kali4-amd64 botocore/1.12.193", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1061, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "b930798-c79a-4efa-a9a4-021911edea2", "eventTime": "2019-07-24T08:46:22Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "9.26.56.242", "userAgent": "aws-cli/1.16.203 Python/2.7.16 Linux/4.19.0-kali4-amd64 botocore/1.12.193", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"nextToken": "eyJ2IjoiMiIsImMiOiI1RjI2bFRBVUdRQml3MDhPRG1SQWFtWjArQkgxYXhvSTBMd044anNOWmZZNC9GS1FlbTVPaUJ2UFZWem1mQTJVQ0lNV3hvcmFIMnNHM0NqbEgyUzYrTGFJT042RFFnSTFZbFcwZ1FVMmNFdVhPUzhWaUhEMCtPZnV2T0JlN09HZEREb29mRmpqaThCUnZKclZ1SVNpUkRyd3g3RGo5UzdqV3hnalNlVXk4NktVaHF1bUZOVmpJQmNGbnNJSUxmcz0iLCJzIjoiMSJ9", "maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "de7f2e0f-bd7c-44a9-aab9-b35f5d444169", "record_id": "flaws_cloudtrail:0000331:de7f2e0f-bd7c-44a9-aab9-b35f5d444169", "row_index": 331, "timestamp": "2019-07-24T08:47:34Z", "event_type": "GetUser", "event_source": "iam.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "5.180.250.254", "user_agent": "aws-cli/1.16.203 Python/3.6.0 Windows/10 botocore/1.12.193", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 656, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "de7f2e0f-bd7c-44a9-aab9-b35f5d444169", "eventTime": "2019-07-24T08:47:34Z", "eventName": "GetUser", "eventSource": "iam.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "5.180.250.254", "userAgent": "aws-cli/1.16.203 Python/3.6.0 Windows/10 botocore/1.12.193", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "de7f2e0f-bd7c-44a9-aab9-b35f5d444169", "record_id": "flaws_cloudtrail:0000332:de7f2e0f-bd7c-44a9-aab9-b35f5d444169", "row_index": 332, "timestamp": "2019-07-24T08:47:34Z", "event_type": "GetUser", "event_source": "iam.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "5.180.250.254", "user_agent": "aws-cli/1.16.203 Python/3.6.0 Windows/10 botocore/1.12.193", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 656, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "de7f2e0f-bd7c-44a9-aab9-b35f5d444169", "eventTime": "2019-07-24T08:47:34Z", "eventName": "GetUser", "eventSource": "iam.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "5.180.250.254", "userAgent": "aws-cli/1.16.203 Python/3.6.0 Windows/10 botocore/1.12.193", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "0bea0e56-a979-4102-aeaa-84b346665d2c", "record_id": "flaws_cloudtrail:0000333:0bea0e56-a979-4102-aeaa-84b346665d2c", "row_index": 333, "timestamp": "2019-07-24T08:49:03Z", "event_type": "ListAttachedUserPolicies", "event_source": "iam.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "5.180.250.254", "user_agent": "aws-cli/1.16.203 Python/3.6.0 Windows/10 botocore/1.12.193", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 691, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "0bea0e56-a979-4102-aeaa-84b346665d2c", "eventTime": "2019-07-24T08:49:03Z", "eventName": "ListAttachedUserPolicies", "eventSource": "iam.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "5.180.250.254", "userAgent": "aws-cli/1.16.203 Python/3.6.0 Windows/10 botocore/1.12.193", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"userName": "Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "0bea0e56-a979-4102-aeaa-84b346665d2c", "record_id": "flaws_cloudtrail:0000334:0bea0e56-a979-4102-aeaa-84b346665d2c", "row_index": 334, "timestamp": "2019-07-24T08:49:03Z", "event_type": "ListAttachedUserPolicies", "event_source": "iam.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "5.180.250.254", "user_agent": "aws-cli/1.16.203 Python/3.6.0 Windows/10 botocore/1.12.193", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 691, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "0bea0e56-a979-4102-aeaa-84b346665d2c", "eventTime": "2019-07-24T08:49:03Z", "eventName": "ListAttachedUserPolicies", "eventSource": "iam.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "5.180.250.254", "userAgent": "aws-cli/1.16.203 Python/3.6.0 Windows/10 botocore/1.12.193", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"userName": "Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "6d212599-5c9a-4ed4-a518-6bcc9d2d558c", "record_id": "flaws_cloudtrail:0000335:6d212599-5c9a-4ed4-a518-6bcc9d2d558c", "row_index": 335, "timestamp": "2019-07-24T08:50:35Z", "event_type": "GetPolicy", "event_source": "iam.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "5.180.250.254", "user_agent": "aws-cli/1.16.203 Python/3.6.0 Windows/10 botocore/1.12.193", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 720, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "6d212599-5c9a-4ed4-a518-6bcc9d2d558c", "eventTime": "2019-07-24T08:50:35Z", "eventName": "GetPolicy", "eventSource": "iam.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "5.180.250.254", "userAgent": "aws-cli/1.16.203 Python/3.6.0 Windows/10 botocore/1.12.193", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"policyArn": "arn:aws:iam::811596193553:policy/MySecurityAudit"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "6d212599-5c9a-4ed4-a518-6bcc9d2d558c", "record_id": "flaws_cloudtrail:0000336:6d212599-5c9a-4ed4-a518-6bcc9d2d558c", "row_index": 336, "timestamp": "2019-07-24T08:50:35Z", "event_type": "GetPolicy", "event_source": "iam.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "5.180.250.254", "user_agent": "aws-cli/1.16.203 Python/3.6.0 Windows/10 botocore/1.12.193", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 720, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "6d212599-5c9a-4ed4-a518-6bcc9d2d558c", "eventTime": "2019-07-24T08:50:35Z", "eventName": "GetPolicy", "eventSource": "iam.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "5.180.250.254", "userAgent": "aws-cli/1.16.203 Python/3.6.0 Windows/10 botocore/1.12.193", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"policyArn": "arn:aws:iam::811596193553:policy/MySecurityAudit"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "709a025c-3354-414d-a70a-b7fefa95969e", "record_id": "flaws_cloudtrail:0000337:709a025c-3354-414d-a70a-b7fefa95969e", "row_index": 337, "timestamp": "2019-07-24T08:51:38Z", "event_type": "GetPolicy", "event_source": "iam.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "5.180.250.254", "user_agent": "aws-cli/1.16.203 Python/3.6.0 Windows/10 botocore/1.12.193", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 720, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "709a025c-3354-414d-a70a-b7fefa95969e", "eventTime": "2019-07-24T08:51:38Z", "eventName": "GetPolicy", "eventSource": "iam.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "5.180.250.254", "userAgent": "aws-cli/1.16.203 Python/3.6.0 Windows/10 botocore/1.12.193", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"policyArn": "arn:aws:iam::811596193553:policy/list_apigateways"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "709a025c-3354-414d-a70a-b7fefa95969e", "record_id": "flaws_cloudtrail:0000338:709a025c-3354-414d-a70a-b7fefa95969e", "row_index": 338, "timestamp": "2019-07-24T08:51:38Z", "event_type": "GetPolicy", "event_source": "iam.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "5.180.250.254", "user_agent": "aws-cli/1.16.203 Python/3.6.0 Windows/10 botocore/1.12.193", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 720, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "709a025c-3354-414d-a70a-b7fefa95969e", "eventTime": "2019-07-24T08:51:38Z", "eventName": "GetPolicy", "eventSource": "iam.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "5.180.250.254", "userAgent": "aws-cli/1.16.203 Python/3.6.0 Windows/10 botocore/1.12.193", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"policyArn": "arn:aws:iam::811596193553:policy/list_apigateways"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "60719-9709-4260-8006-872e62635dd", "record_id": "flaws_cloudtrail:0000339:60719-9709-4260-8006-872e62635dd", "row_index": 339, "timestamp": "2019-07-24T08:51:43Z", "event_type": "DescribeInstances", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "9.26.56.242", "user_agent": "aws-cli/1.16.203 Python/2.7.16 Linux/4.19.0-kali4-amd64 botocore/1.12.193", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 706, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "60719-9709-4260-8006-872e62635dd", "eventTime": "2019-07-24T08:51:43Z", "eventName": "DescribeInstances", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "9.26.56.242", "userAgent": "aws-cli/1.16.203 Python/2.7.16 Linux/4.19.0-kali4-amd64 botocore/1.12.193", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"instancesSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "60719-9709-4260-8006-872e62635dd", "record_id": "flaws_cloudtrail:0000340:60719-9709-4260-8006-872e62635dd", "row_index": 340, "timestamp": "2019-07-24T08:51:43Z", "event_type": "DescribeInstances", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "9.26.56.242", "user_agent": "aws-cli/1.16.203 Python/2.7.16 Linux/4.19.0-kali4-amd64 botocore/1.12.193", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 706, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "60719-9709-4260-8006-872e62635dd", "eventTime": "2019-07-24T08:51:43Z", "eventName": "DescribeInstances", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "9.26.56.242", "userAgent": "aws-cli/1.16.203 Python/2.7.16 Linux/4.19.0-kali4-amd64 botocore/1.12.193", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"instancesSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "cb95477-2e9d-401b-aa42-2ec75a83569", "record_id": "flaws_cloudtrail:0000341:cb95477-2e9d-401b-aa42-2ec75a83569", "row_index": 341, "timestamp": "2019-07-24T08:52:27Z", "event_type": "DescribeInstances", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "9.26.56.242", "user_agent": "aws-cli/1.16.203 Python/2.7.16 Linux/4.19.0-kali4-amd64 botocore/1.12.193", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 709, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "cb95477-2e9d-401b-aa42-2ec75a83569", "eventTime": "2019-07-24T08:52:27Z", "eventName": "DescribeInstances", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "9.26.56.242", "userAgent": "aws-cli/1.16.203 Python/2.7.16 Linux/4.19.0-kali4-amd64 botocore/1.12.193", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"instancesSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "cb95477-2e9d-401b-aa42-2ec75a83569", "record_id": "flaws_cloudtrail:0000342:cb95477-2e9d-401b-aa42-2ec75a83569", "row_index": 342, "timestamp": "2019-07-24T08:52:27Z", "event_type": "DescribeInstances", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "9.26.56.242", "user_agent": "aws-cli/1.16.203 Python/2.7.16 Linux/4.19.0-kali4-amd64 botocore/1.12.193", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 709, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "cb95477-2e9d-401b-aa42-2ec75a83569", "eventTime": "2019-07-24T08:52:27Z", "eventName": "DescribeInstances", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "9.26.56.242", "userAgent": "aws-cli/1.16.203 Python/2.7.16 Linux/4.19.0-kali4-amd64 botocore/1.12.193", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"instancesSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "9520c118-e2ec-4d42-ae6d-e7d149147871", "record_id": "flaws_cloudtrail:0000343:9520c118-e2ec-4d42-ae6d-e7d149147871", "row_index": 343, "timestamp": "2019-07-24T08:52:52Z", "event_type": "GetPolicyVersion", "event_source": "iam.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "5.180.250.254", "user_agent": "aws-cli/1.16.203 Python/3.6.0 Windows/10 botocore/1.12.193", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 744, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "9520c118-e2ec-4d42-ae6d-e7d149147871", "eventTime": "2019-07-24T08:52:52Z", "eventName": "GetPolicyVersion", "eventSource": "iam.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "5.180.250.254", "userAgent": "aws-cli/1.16.203 Python/3.6.0 Windows/10 botocore/1.12.193", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"policyArn": "arn:aws:iam::811596193553:policy/list_apigateways", "versionId": "v4"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "9520c118-e2ec-4d42-ae6d-e7d149147871", "record_id": "flaws_cloudtrail:0000344:9520c118-e2ec-4d42-ae6d-e7d149147871", "row_index": 344, "timestamp": "2019-07-24T08:52:52Z", "event_type": "GetPolicyVersion", "event_source": "iam.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "5.180.250.254", "user_agent": "aws-cli/1.16.203 Python/3.6.0 Windows/10 botocore/1.12.193", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 744, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "9520c118-e2ec-4d42-ae6d-e7d149147871", "eventTime": "2019-07-24T08:52:52Z", "eventName": "GetPolicyVersion", "eventSource": "iam.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "5.180.250.254", "userAgent": "aws-cli/1.16.203 Python/3.6.0 Windows/10 botocore/1.12.193", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"policyArn": "arn:aws:iam::811596193553:policy/list_apigateways", "versionId": "v4"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "2044e692-c1a7-4a8b-a708-11f2faaedeaf", "record_id": "flaws_cloudtrail:0000345:2044e692-c1a7-4a8b-a708-11f2faaedeaf", "row_index": 345, "timestamp": "2019-07-24T08:53:47Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "9.26.56.242", "user_agent": "aws-cli/1.16.203 Python/2.7.16 Linux/4.19.0-kali4-amd64 botocore/1.12.193", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 831, "raw_record_depth": 8, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "2044e692-c1a7-4a8b-a708-11f2faaedeaf", "eventTime": "2019-07-24T08:53:47Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "9.26.56.242", "userAgent": "aws-cli/1.16.203 Python/2.7.16 Linux/4.19.0-kali4-amd64 botocore/1.12.193", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {"items": [{"name": "volume-id", "valueSet": {"items": {"__truncated_type": "list"}}}]}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "2044e692-c1a7-4a8b-a708-11f2faaedeaf", "record_id": "flaws_cloudtrail:0000346:2044e692-c1a7-4a8b-a708-11f2faaedeaf", "row_index": 346, "timestamp": "2019-07-24T08:53:47Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "9.26.56.242", "user_agent": "aws-cli/1.16.203 Python/2.7.16 Linux/4.19.0-kali4-amd64 botocore/1.12.193", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 831, "raw_record_depth": 8, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "2044e692-c1a7-4a8b-a708-11f2faaedeaf", "eventTime": "2019-07-24T08:53:47Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "9.26.56.242", "userAgent": "aws-cli/1.16.203 Python/2.7.16 Linux/4.19.0-kali4-amd64 botocore/1.12.193", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {"items": [{"name": "volume-id", "valueSet": {"items": {"__truncated_type": "list"}}}]}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "61a21760-3938-4692-9549-fa257d4b2c87", "record_id": "flaws_cloudtrail:0000347:61a21760-3938-4692-9549-fa257d4b2c87", "row_index": 347, "timestamp": "2019-07-24T08:54:45Z", "event_type": "GetPolicyVersion", "event_source": "iam.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "5.180.250.254", "user_agent": "aws-cli/1.16.203 Python/3.6.0 Windows/10 botocore/1.12.193", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 919, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "61a21760-3938-4692-9549-fa257d4b2c87", "eventTime": "2019-07-24T08:54:45Z", "eventName": "GetPolicyVersion", "eventSource": "iam.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "5.180.250.254", "userAgent": "aws-cli/1.16.203 Python/3.6.0 Windows/10 botocore/1.12.193", "awsRegion": "us-east-1", "errorCode": "NoSuchEntityException", "errorMessage": "Policy arn:aws:iam::811596193553:policy/list_apigateways/restapis version v4 does not exist or is not attachable.", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"policyArn": "arn:aws:iam::811596193553:policy/list_apigateways/restapis", "versionId": "v4"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "61a21760-3938-4692-9549-fa257d4b2c87", "record_id": "flaws_cloudtrail:0000348:61a21760-3938-4692-9549-fa257d4b2c87", "row_index": 348, "timestamp": "2019-07-24T08:54:45Z", "event_type": "GetPolicyVersion", "event_source": "iam.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "5.180.250.254", "user_agent": "aws-cli/1.16.203 Python/3.6.0 Windows/10 botocore/1.12.193", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 919, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "61a21760-3938-4692-9549-fa257d4b2c87", "eventTime": "2019-07-24T08:54:45Z", "eventName": "GetPolicyVersion", "eventSource": "iam.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "5.180.250.254", "userAgent": "aws-cli/1.16.203 Python/3.6.0 Windows/10 botocore/1.12.193", "awsRegion": "us-east-1", "errorCode": "NoSuchEntityException", "errorMessage": "Policy arn:aws:iam::811596193553:policy/list_apigateways/restapis version v4 does not exist or is not attachable.", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"policyArn": "arn:aws:iam::811596193553:policy/list_apigateways/restapis", "versionId": "v4"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "2b3d9bcb-1baf-4033-ae88-fa952e9831e4", "record_id": "flaws_cloudtrail:0000349:2b3d9bcb-1baf-4033-ae88-fa952e9831e4", "row_index": 349, "timestamp": "2019-07-24T08:54:51Z", "event_type": "DescribeSnapshotAttribute", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "9.26.56.242", "user_agent": "aws-cli/1.16.203 Python/2.7.16 Linux/4.19.0-kali4-amd64 botocore/1.12.193", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 766, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "2b3d9bcb-1baf-4033-ae88-fa952e9831e4", "eventTime": "2019-07-24T08:54:51Z", "eventName": "DescribeSnapshotAttribute", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "9.26.56.242", "userAgent": "aws-cli/1.16.203 Python/2.7.16 Linux/4.19.0-kali4-amd64 botocore/1.12.193", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"snapshotId": "snap-83d15d668fb2941db", "attributeType": "CREATE_VOLUME_PERMISSION"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "2b3d9bcb-1baf-4033-ae88-fa952e9831e4", "record_id": "flaws_cloudtrail:0000350:2b3d9bcb-1baf-4033-ae88-fa952e9831e4", "row_index": 350, "timestamp": "2019-07-24T08:54:51Z", "event_type": "DescribeSnapshotAttribute", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "9.26.56.242", "user_agent": "aws-cli/1.16.203 Python/2.7.16 Linux/4.19.0-kali4-amd64 botocore/1.12.193", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 766, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "2b3d9bcb-1baf-4033-ae88-fa952e9831e4", "eventTime": "2019-07-24T08:54:51Z", "eventName": "DescribeSnapshotAttribute", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "9.26.56.242", "userAgent": "aws-cli/1.16.203 Python/2.7.16 Linux/4.19.0-kali4-amd64 botocore/1.12.193", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"snapshotId": "snap-83d15d668fb2941db", "attributeType": "CREATE_VOLUME_PERMISSION"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "b47403-e045-44ee-bafd-c646c9347aa5", "record_id": "flaws_cloudtrail:0000351:b47403-e045-44ee-bafd-c646c9347aa5", "row_index": 351, "timestamp": "2019-07-24T08:56:16Z", "event_type": "DescribeTags", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "5.180.250.254", "user_agent": "aws-cli/1.16.203 Python/3.6.0 Windows/10 botocore/1.12.193", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 670, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "b47403-e045-44ee-bafd-c646c9347aa5", "eventTime": "2019-07-24T08:56:16Z", "eventName": "DescribeTags", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "5.180.250.254", "userAgent": "aws-cli/1.16.203 Python/3.6.0 Windows/10 botocore/1.12.193", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "b47403-e045-44ee-bafd-c646c9347aa5", "record_id": "flaws_cloudtrail:0000352:b47403-e045-44ee-bafd-c646c9347aa5", "row_index": 352, "timestamp": "2019-07-24T08:56:16Z", "event_type": "DescribeTags", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "5.180.250.254", "user_agent": "aws-cli/1.16.203 Python/3.6.0 Windows/10 botocore/1.12.193", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 670, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "b47403-e045-44ee-bafd-c646c9347aa5", "eventTime": "2019-07-24T08:56:16Z", "eventName": "DescribeTags", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "5.180.250.254", "userAgent": "aws-cli/1.16.203 Python/3.6.0 Windows/10 botocore/1.12.193", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "cd09a653-be5a-4c77-9b91-211b6b9fda79", "record_id": "flaws_cloudtrail:0000353:cd09a653-be5a-4c77-9b91-211b6b9fda79", "row_index": 353, "timestamp": "2019-07-24T08:56:57Z", "event_type": "ListBuckets", "event_source": "s3.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "5.180.250.254", "user_agent": "[aws-cli/1.16.203 Python/3.6.0 Windows/10 botocore/1.12.193]", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 808, "raw_record_depth": 3, "raw_record_top_level_keys": ["additionalEventData", "awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "cd09a653-be5a-4c77-9b91-211b6b9fda79", "eventTime": "2019-07-24T08:56:57Z", "eventName": "ListBuckets", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "5.180.250.254", "userAgent": "[aws-cli/1.16.203 Python/3.6.0 Windows/10 botocore/1.12.193]", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"host": ["s3.us-west-2.amazonaws.com"]}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "cd09a653-be5a-4c77-9b91-211b6b9fda79", "record_id": "flaws_cloudtrail:0000354:cd09a653-be5a-4c77-9b91-211b6b9fda79", "row_index": 354, "timestamp": "2019-07-24T08:56:57Z", "event_type": "ListBuckets", "event_source": "s3.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "5.180.250.254", "user_agent": "[aws-cli/1.16.203 Python/3.6.0 Windows/10 botocore/1.12.193]", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 808, "raw_record_depth": 3, "raw_record_top_level_keys": ["additionalEventData", "awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "cd09a653-be5a-4c77-9b91-211b6b9fda79", "eventTime": "2019-07-24T08:56:57Z", "eventName": "ListBuckets", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "5.180.250.254", "userAgent": "[aws-cli/1.16.203 Python/3.6.0 Windows/10 botocore/1.12.193]", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"host": ["s3.us-west-2.amazonaws.com"]}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "19c9436e-7371-413e-b002-cae2d110de4f", "record_id": "flaws_cloudtrail:0000355:19c9436e-7371-413e-b002-cae2d110de4f", "row_index": 355, "timestamp": "2019-07-24T09:00:14Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "9.26.56.242", "user_agent": "aws-cli/1.16.203 Python/2.7.16 Linux/4.19.0-kali4-amd64 botocore/1.12.193", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 831, "raw_record_depth": 8, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "19c9436e-7371-413e-b002-cae2d110de4f", "eventTime": "2019-07-24T09:00:14Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "9.26.56.242", "userAgent": "aws-cli/1.16.203 Python/2.7.16 Linux/4.19.0-kali4-amd64 botocore/1.12.193", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {"items": [{"name": "volume-id", "valueSet": {"items": {"__truncated_type": "list"}}}]}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "19c9436e-7371-413e-b002-cae2d110de4f", "record_id": "flaws_cloudtrail:0000356:19c9436e-7371-413e-b002-cae2d110de4f", "row_index": 356, "timestamp": "2019-07-24T09:00:14Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "9.26.56.242", "user_agent": "aws-cli/1.16.203 Python/2.7.16 Linux/4.19.0-kali4-amd64 botocore/1.12.193", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 831, "raw_record_depth": 8, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "19c9436e-7371-413e-b002-cae2d110de4f", "eventTime": "2019-07-24T09:00:14Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "9.26.56.242", "userAgent": "aws-cli/1.16.203 Python/2.7.16 Linux/4.19.0-kali4-amd64 botocore/1.12.193", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {"items": [{"name": "volume-id", "valueSet": {"items": {"__truncated_type": "list"}}}]}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "311cd362-7f5a-4fa7-a42f-c16c5baf03ba", "record_id": "flaws_cloudtrail:0000357:311cd362-7f5a-4fa7-a42f-c16c5baf03ba", "row_index": 357, "timestamp": "2019-07-24T09:01:35Z", "event_type": "DescribeSnapshotAttribute", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "9.26.56.242", "user_agent": "aws-cli/1.16.203 Python/2.7.16 Linux/4.19.0-kali4-amd64 botocore/1.12.193", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 767, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "311cd362-7f5a-4fa7-a42f-c16c5baf03ba", "eventTime": "2019-07-24T09:01:35Z", "eventName": "DescribeSnapshotAttribute", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "9.26.56.242", "userAgent": "aws-cli/1.16.203 Python/2.7.16 Linux/4.19.0-kali4-amd64 botocore/1.12.193", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"snapshotId": "snap-83d15d668fb2941db", "attributeType": "CREATE_VOLUME_PERMISSION"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "311cd362-7f5a-4fa7-a42f-c16c5baf03ba", "record_id": "flaws_cloudtrail:0000358:311cd362-7f5a-4fa7-a42f-c16c5baf03ba", "row_index": 358, "timestamp": "2019-07-24T09:01:35Z", "event_type": "DescribeSnapshotAttribute", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "9.26.56.242", "user_agent": "aws-cli/1.16.203 Python/2.7.16 Linux/4.19.0-kali4-amd64 botocore/1.12.193", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 767, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "311cd362-7f5a-4fa7-a42f-c16c5baf03ba", "eventTime": "2019-07-24T09:01:35Z", "eventName": "DescribeSnapshotAttribute", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "9.26.56.242", "userAgent": "aws-cli/1.16.203 Python/2.7.16 Linux/4.19.0-kali4-amd64 botocore/1.12.193", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"snapshotId": "snap-83d15d668fb2941db", "attributeType": "CREATE_VOLUME_PERMISSION"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "b08dd401-64b7-4ade-90f0-ca15ce216e43", "record_id": "flaws_cloudtrail:0000359:b08dd401-64b7-4ade-90f0-ca15ce216e43", "row_index": 359, "timestamp": "2019-07-24T09:05:22Z", "event_type": "DescribeSnapshotAttribute", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "9.26.56.242", "user_agent": "aws-cli/1.16.203 Python/2.7.16 Linux/4.19.0-kali4-amd64 botocore/1.12.193", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 766, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "b08dd401-64b7-4ade-90f0-ca15ce216e43", "eventTime": "2019-07-24T09:05:22Z", "eventName": "DescribeSnapshotAttribute", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "9.26.56.242", "userAgent": "aws-cli/1.16.203 Python/2.7.16 Linux/4.19.0-kali4-amd64 botocore/1.12.193", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"snapshotId": "snap-83d15d668fb2941db", "attributeType": "CREATE_VOLUME_PERMISSION"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "b08dd401-64b7-4ade-90f0-ca15ce216e43", "record_id": "flaws_cloudtrail:0000360:b08dd401-64b7-4ade-90f0-ca15ce216e43", "row_index": 360, "timestamp": "2019-07-24T09:05:22Z", "event_type": "DescribeSnapshotAttribute", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "9.26.56.242", "user_agent": "aws-cli/1.16.203 Python/2.7.16 Linux/4.19.0-kali4-amd64 botocore/1.12.193", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 766, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "b08dd401-64b7-4ade-90f0-ca15ce216e43", "eventTime": "2019-07-24T09:05:22Z", "eventName": "DescribeSnapshotAttribute", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "9.26.56.242", "userAgent": "aws-cli/1.16.203 Python/2.7.16 Linux/4.19.0-kali4-amd64 botocore/1.12.193", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"snapshotId": "snap-83d15d668fb2941db", "attributeType": "CREATE_VOLUME_PERMISSION"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "747643b03-fb70-43ae-b630-bdfbaf9b1751", "record_id": "flaws_cloudtrail:0000361:747643b03-fb70-43ae-b630-bdfbaf9b1751", "row_index": 361, "timestamp": "2019-07-24T09:25:59Z", "event_type": "ListFunctions202224", "event_source": "lambda.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "5.180.250.254", "user_agent": "aws-cli/1.16.203 Python/3.6.0 Windows/10 botocore/1.12.193", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 672, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "747643b03-fb70-43ae-b630-bdfbaf9b1751", "eventTime": "2019-07-24T09:25:59Z", "eventName": "ListFunctions202224", "eventSource": "lambda.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "5.180.250.254", "userAgent": "aws-cli/1.16.203 Python/3.6.0 Windows/10 botocore/1.12.193", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "747643b03-fb70-43ae-b630-bdfbaf9b1751", "record_id": "flaws_cloudtrail:0000362:747643b03-fb70-43ae-b630-bdfbaf9b1751", "row_index": 362, "timestamp": "2019-07-24T09:25:59Z", "event_type": "ListFunctions202224", "event_source": "lambda.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "5.180.250.254", "user_agent": "aws-cli/1.16.203 Python/3.6.0 Windows/10 botocore/1.12.193", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 672, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "747643b03-fb70-43ae-b630-bdfbaf9b1751", "eventTime": "2019-07-24T09:25:59Z", "eventName": "ListFunctions202224", "eventSource": "lambda.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "5.180.250.254", "userAgent": "aws-cli/1.16.203 Python/3.6.0 Windows/10 botocore/1.12.193", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "b4963e88-cc3d-4e33-9aaa-a2c8843ab2fc", "record_id": "flaws_cloudtrail:0000363:b4963e88-cc3d-4e33-9aaa-a2c8843ab2fc", "row_index": 363, "timestamp": "2019-07-24T09:27:43Z", "event_type": "GetPolicy202224v2", "event_source": "lambda.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "5.180.250.254", "user_agent": "aws-cli/1.16.203 Python/3.6.0 Windows/10 botocore/1.12.193", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 738, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "b4963e88-cc3d-4e33-9aaa-a2c8843ab2fc", "eventTime": "2019-07-24T09:27:43Z", "eventName": "GetPolicy202224v2", "eventSource": "lambda.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "5.180.250.254", "userAgent": "aws-cli/1.16.203 Python/3.6.0 Windows/10 botocore/1.12.193", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"functionName": "arn:aws:lambda:us-west-2:811596193553:function:Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "b4963e88-cc3d-4e33-9aaa-a2c8843ab2fc", "record_id": "flaws_cloudtrail:0000364:b4963e88-cc3d-4e33-9aaa-a2c8843ab2fc", "row_index": 364, "timestamp": "2019-07-24T09:27:43Z", "event_type": "GetPolicy202224v2", "event_source": "lambda.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "5.180.250.254", "user_agent": "aws-cli/1.16.203 Python/3.6.0 Windows/10 botocore/1.12.193", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 738, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "b4963e88-cc3d-4e33-9aaa-a2c8843ab2fc", "eventTime": "2019-07-24T09:27:43Z", "eventName": "GetPolicy202224v2", "eventSource": "lambda.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "5.180.250.254", "userAgent": "aws-cli/1.16.203 Python/3.6.0 Windows/10 botocore/1.12.193", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"functionName": "arn:aws:lambda:us-west-2:811596193553:function:Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "ea70ca28-41bb-4798-a3f1-25a126c2cb50", "record_id": "flaws_cloudtrail:0000365:ea70ca28-41bb-4798-a3f1-25a126c2cb50", "row_index": 365, "timestamp": "2019-07-24T09:28:02Z", "event_type": "GetPolicy202224v2", "event_source": "lambda.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "5.180.250.254", "user_agent": "aws-cli/1.16.203 Python/3.6.0 Windows/10 botocore/1.12.193", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 689, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "ea70ca28-41bb-4798-a3f1-25a126c2cb50", "eventTime": "2019-07-24T09:28:02Z", "eventName": "GetPolicy202224v2", "eventSource": "lambda.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "5.180.250.254", "userAgent": "aws-cli/1.16.203 Python/3.6.0 Windows/10 botocore/1.12.193", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"functionName": "Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "ea70ca28-41bb-4798-a3f1-25a126c2cb50", "record_id": "flaws_cloudtrail:0000366:ea70ca28-41bb-4798-a3f1-25a126c2cb50", "row_index": 366, "timestamp": "2019-07-24T09:28:02Z", "event_type": "GetPolicy202224v2", "event_source": "lambda.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "5.180.250.254", "user_agent": "aws-cli/1.16.203 Python/3.6.0 Windows/10 botocore/1.12.193", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 689, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "ea70ca28-41bb-4798-a3f1-25a126c2cb50", "eventTime": "2019-07-24T09:28:02Z", "eventName": "GetPolicy202224v2", "eventSource": "lambda.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "5.180.250.254", "userAgent": "aws-cli/1.16.203 Python/3.6.0 Windows/10 botocore/1.12.193", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"functionName": "Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "423e0208-5e20-4193-9d24-df910d49a55c", "record_id": "flaws_cloudtrail:0000367:423e0208-5e20-4193-9d24-df910d49a55c", "row_index": 367, "timestamp": "2019-07-24T09:31:25Z", "event_type": "AssumeRole", "event_source": "sts.amazonaws.com", "principal": {"type": "AWSService", "arn": null, "account_id": null, "principal_id": null, "user_name": null, "access_key_id": null, "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "ec2.amazonaws.com", "user_agent": "ec2.amazonaws.com", "aws_region": "us-west-2"}, "resource_arns": ["arn:aws:iam::811596193553:role/flaws"], "raw_record_size_bytes": 1894, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "resources", "responseElements", "sharedEventID", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "423e0208-5e20-4193-9d24-df910d49a55c", "eventTime": "2019-07-24T09:31:25Z", "eventName": "AssumeRole", "eventSource": "sts.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "ec2.amazonaws.com", "userAgent": "ec2.amazonaws.com", "awsRegion": "us-west-2", "userIdentity": {"type": "AWSService", "invokedBy": "ec2.amazonaws.com"}, "requestParameters": {"roleSessionName": "i-aa2d3b42e5c6e801a", "roleArn": "arn:aws:iam::811596193553:role/flaws"}, "responseElements": {"credentials": {"accessKeyId": "ASIA6ULW28Y49D1GZWF1", "expiration": "Jul 24, 2019 3:37:11 PM", "sessionToken": "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"}}, "resources": [{"ARN": "arn:aws:iam::811596193553:role/flaws", "accountId": "811596193553", "type": "AWS::IAM::Role"}]}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "423e0208-5e20-4193-9d24-df910d49a55c", "record_id": "flaws_cloudtrail:0000368:423e0208-5e20-4193-9d24-df910d49a55c", "row_index": 368, "timestamp": "2019-07-24T09:31:25Z", "event_type": "AssumeRole", "event_source": "sts.amazonaws.com", "principal": {"type": "AWSService", "arn": null, "account_id": null, "principal_id": null, "user_name": null, "access_key_id": null, "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "ec2.amazonaws.com", "user_agent": "ec2.amazonaws.com", "aws_region": "us-west-2"}, "resource_arns": ["arn:aws:iam::811596193553:role/flaws"], "raw_record_size_bytes": 1894, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "resources", "responseElements", "sharedEventID", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "423e0208-5e20-4193-9d24-df910d49a55c", "eventTime": "2019-07-24T09:31:25Z", "eventName": "AssumeRole", "eventSource": "sts.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "ec2.amazonaws.com", "userAgent": "ec2.amazonaws.com", "awsRegion": "us-west-2", "userIdentity": {"type": "AWSService", "invokedBy": "ec2.amazonaws.com"}, "requestParameters": {"roleSessionName": "i-aa2d3b42e5c6e801a", "roleArn": "arn:aws:iam::811596193553:role/flaws"}, "responseElements": {"credentials": {"accessKeyId": "ASIA6ULW28Y49D1GZWF1", "expiration": "Jul 24, 2019 3:37:11 PM", "sessionToken": "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"}}, "resources": [{"ARN": "arn:aws:iam::811596193553:role/flaws", "accountId": "811596193553", "type": "AWS::IAM::Role"}]}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "b563068f2-17fd-4150-af93-d28520b8b0", "record_id": "flaws_cloudtrail:0000369:b563068f2-17fd-4150-af93-d28520b8b0", "row_index": 369, "timestamp": "2019-07-24T09:33:35Z", "event_type": "GetStages", "event_source": "apigateway.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "5.180.250.254", "user_agent": "aws-cli/1.16.203 Python/3.6.0 Windows/10 botocore/1.12.193", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 720, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "readOnly", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "b563068f2-17fd-4150-af93-d28520b8b0", "eventTime": "2019-07-24T09:33:35Z", "eventName": "GetStages", "eventSource": "apigateway.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "5.180.250.254", "userAgent": "aws-cli/1.16.203 Python/3.6.0 Windows/10 botocore/1.12.193", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"restApiId": "s33ppypa75", "template": false}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "b563068f2-17fd-4150-af93-d28520b8b0", "record_id": "flaws_cloudtrail:0000370:b563068f2-17fd-4150-af93-d28520b8b0", "row_index": 370, "timestamp": "2019-07-24T09:33:35Z", "event_type": "GetStages", "event_source": "apigateway.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "5.180.250.254", "user_agent": "aws-cli/1.16.203 Python/3.6.0 Windows/10 botocore/1.12.193", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 720, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "readOnly", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "b563068f2-17fd-4150-af93-d28520b8b0", "eventTime": "2019-07-24T09:33:35Z", "eventName": "GetStages", "eventSource": "apigateway.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "5.180.250.254", "userAgent": "aws-cli/1.16.203 Python/3.6.0 Windows/10 botocore/1.12.193", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"restApiId": "s33ppypa75", "template": false}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "b5db40f3-bbc1-40e7-b705-b980fac3dc26", "record_id": "flaws_cloudtrail:0000371:b5db40f3-bbc1-40e7-b705-b980fac3dc26", "row_index": 371, "timestamp": "2019-07-24T09:37:17Z", "event_type": "GetStages", "event_source": "apigateway.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "5.180.250.254", "user_agent": "aws-cli/1.16.203 Python/3.6.0 Windows/10 botocore/1.12.193", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 721, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "readOnly", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "b5db40f3-bbc1-40e7-b705-b980fac3dc26", "eventTime": "2019-07-24T09:37:17Z", "eventName": "GetStages", "eventSource": "apigateway.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "5.180.250.254", "userAgent": "aws-cli/1.16.203 Python/3.6.0 Windows/10 botocore/1.12.193", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"restApiId": "s33ppypa75", "template": false}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "b5db40f3-bbc1-40e7-b705-b980fac3dc26", "record_id": "flaws_cloudtrail:0000372:b5db40f3-bbc1-40e7-b705-b980fac3dc26", "row_index": 372, "timestamp": "2019-07-24T09:37:17Z", "event_type": "GetStages", "event_source": "apigateway.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "5.180.250.254", "user_agent": "aws-cli/1.16.203 Python/3.6.0 Windows/10 botocore/1.12.193", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 721, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "readOnly", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "b5db40f3-bbc1-40e7-b705-b980fac3dc26", "eventTime": "2019-07-24T09:37:17Z", "eventName": "GetStages", "eventSource": "apigateway.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "5.180.250.254", "userAgent": "aws-cli/1.16.203 Python/3.6.0 Windows/10 botocore/1.12.193", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"restApiId": "s33ppypa75", "template": false}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "e490fd4b-4433-467a-bc42-68cb2ae5d282", "record_id": "flaws_cloudtrail:0000373:e490fd4b-4433-467a-bc42-68cb2ae5d282", "row_index": 373, "timestamp": "2019-07-24T09:50:53Z", "event_type": "GetUser", "event_source": "iam.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "9.26.56.242", "user_agent": "aws-cli/1.16.203 Python/2.7.16 Linux/4.19.0-kali4-amd64 botocore/1.12.193", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 670, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "e490fd4b-4433-467a-bc42-68cb2ae5d282", "eventTime": "2019-07-24T09:50:53Z", "eventName": "GetUser", "eventSource": "iam.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "9.26.56.242", "userAgent": "aws-cli/1.16.203 Python/2.7.16 Linux/4.19.0-kali4-amd64 botocore/1.12.193", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "e490fd4b-4433-467a-bc42-68cb2ae5d282", "record_id": "flaws_cloudtrail:0000374:e490fd4b-4433-467a-bc42-68cb2ae5d282", "row_index": 374, "timestamp": "2019-07-24T09:50:53Z", "event_type": "GetUser", "event_source": "iam.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "9.26.56.242", "user_agent": "aws-cli/1.16.203 Python/2.7.16 Linux/4.19.0-kali4-amd64 botocore/1.12.193", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 670, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "e490fd4b-4433-467a-bc42-68cb2ae5d282", "eventTime": "2019-07-24T09:50:53Z", "eventName": "GetUser", "eventSource": "iam.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "9.26.56.242", "userAgent": "aws-cli/1.16.203 Python/2.7.16 Linux/4.19.0-kali4-amd64 botocore/1.12.193", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "e25d97e1-92f4-40ba-a482-1c4e4bc1657e", "record_id": "flaws_cloudtrail:0000375:e25d97e1-92f4-40ba-a482-1c4e4bc1657e", "row_index": 375, "timestamp": "2019-07-24T09:51:59Z", "event_type": "ListAttachedUserPolicies", "event_source": "iam.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "9.26.56.242", "user_agent": "aws-cli/1.16.203 Python/2.7.16 Linux/4.19.0-kali4-amd64 botocore/1.12.193", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 704, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "e25d97e1-92f4-40ba-a482-1c4e4bc1657e", "eventTime": "2019-07-24T09:51:59Z", "eventName": "ListAttachedUserPolicies", "eventSource": "iam.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "9.26.56.242", "userAgent": "aws-cli/1.16.203 Python/2.7.16 Linux/4.19.0-kali4-amd64 botocore/1.12.193", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"userName": "Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "e25d97e1-92f4-40ba-a482-1c4e4bc1657e", "record_id": "flaws_cloudtrail:0000376:e25d97e1-92f4-40ba-a482-1c4e4bc1657e", "row_index": 376, "timestamp": "2019-07-24T09:51:59Z", "event_type": "ListAttachedUserPolicies", "event_source": "iam.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "9.26.56.242", "user_agent": "aws-cli/1.16.203 Python/2.7.16 Linux/4.19.0-kali4-amd64 botocore/1.12.193", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 704, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "e25d97e1-92f4-40ba-a482-1c4e4bc1657e", "eventTime": "2019-07-24T09:51:59Z", "eventName": "ListAttachedUserPolicies", "eventSource": "iam.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "9.26.56.242", "userAgent": "aws-cli/1.16.203 Python/2.7.16 Linux/4.19.0-kali4-amd64 botocore/1.12.193", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"userName": "Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "dc77b85a-e7d2-41da-a8af-2fd704a9b229", "record_id": "flaws_cloudtrail:0000377:dc77b85a-e7d2-41da-a8af-2fd704a9b229", "row_index": 377, "timestamp": "2019-07-24T09:53:06Z", "event_type": "GetPolicy", "event_source": "iam.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "9.26.56.242", "user_agent": "aws-cli/1.16.203 Python/2.7.16 Linux/4.19.0-kali4-amd64 botocore/1.12.193", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 733, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "dc77b85a-e7d2-41da-a8af-2fd704a9b229", "eventTime": "2019-07-24T09:53:06Z", "eventName": "GetPolicy", "eventSource": "iam.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "9.26.56.242", "userAgent": "aws-cli/1.16.203 Python/2.7.16 Linux/4.19.0-kali4-amd64 botocore/1.12.193", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"policyArn": "arn:aws:iam::811596193553:policy/list_apigateways"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "dc77b85a-e7d2-41da-a8af-2fd704a9b229", "record_id": "flaws_cloudtrail:0000378:dc77b85a-e7d2-41da-a8af-2fd704a9b229", "row_index": 378, "timestamp": "2019-07-24T09:53:06Z", "event_type": "GetPolicy", "event_source": "iam.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "9.26.56.242", "user_agent": "aws-cli/1.16.203 Python/2.7.16 Linux/4.19.0-kali4-amd64 botocore/1.12.193", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 733, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "dc77b85a-e7d2-41da-a8af-2fd704a9b229", "eventTime": "2019-07-24T09:53:06Z", "eventName": "GetPolicy", "eventSource": "iam.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "9.26.56.242", "userAgent": "aws-cli/1.16.203 Python/2.7.16 Linux/4.19.0-kali4-amd64 botocore/1.12.193", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"policyArn": "arn:aws:iam::811596193553:policy/list_apigateways"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "d03fcbfe-0b9f-4bea-adb6-88dbd8fa9b3a", "record_id": "flaws_cloudtrail:0000379:d03fcbfe-0b9f-4bea-adb6-88dbd8fa9b3a", "row_index": 379, "timestamp": "2019-07-24T09:53:48Z", "event_type": "GetPolicyVersion", "event_source": "iam.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "9.26.56.242", "user_agent": "aws-cli/1.16.203 Python/2.7.16 Linux/4.19.0-kali4-amd64 botocore/1.12.193", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 756, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "d03fcbfe-0b9f-4bea-adb6-88dbd8fa9b3a", "eventTime": "2019-07-24T09:53:48Z", "eventName": "GetPolicyVersion", "eventSource": "iam.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "9.26.56.242", "userAgent": "aws-cli/1.16.203 Python/2.7.16 Linux/4.19.0-kali4-amd64 botocore/1.12.193", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"policyArn": "arn:aws:iam::811596193553:policy/list_apigateways", "versionId": "v4"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "d03fcbfe-0b9f-4bea-adb6-88dbd8fa9b3a", "record_id": "flaws_cloudtrail:0000380:d03fcbfe-0b9f-4bea-adb6-88dbd8fa9b3a", "row_index": 380, "timestamp": "2019-07-24T09:53:48Z", "event_type": "GetPolicyVersion", "event_source": "iam.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "9.26.56.242", "user_agent": "aws-cli/1.16.203 Python/2.7.16 Linux/4.19.0-kali4-amd64 botocore/1.12.193", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 756, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "d03fcbfe-0b9f-4bea-adb6-88dbd8fa9b3a", "eventTime": "2019-07-24T09:53:48Z", "eventName": "GetPolicyVersion", "eventSource": "iam.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "9.26.56.242", "userAgent": "aws-cli/1.16.203 Python/2.7.16 Linux/4.19.0-kali4-amd64 botocore/1.12.193", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"policyArn": "arn:aws:iam::811596193553:policy/list_apigateways", "versionId": "v4"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "f0e682e6-5fa7-4b8e-8fe9-683479a2fcfbb", "record_id": "flaws_cloudtrail:0000381:f0e682e6-5fa7-4b8e-8fe9-683479a2fcfbb", "row_index": 381, "timestamp": "2019-07-24T09:54:36Z", "event_type": "AssumeRole", "event_source": "sts.amazonaws.com", "principal": {"type": "AWSService", "arn": null, "account_id": null, "principal_id": null, "user_name": null, "access_key_id": null, "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "lambda.amazonaws.com", "user_agent": "lambda.amazonaws.com", "aws_region": "us-west-2"}, "resource_arns": ["arn:aws:iam::811596193553:role/service-role/Level6"], "raw_record_size_bytes": 1631, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "resources", "responseElements", "sharedEventID", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "f0e682e6-5fa7-4b8e-8fe9-683479a2fcfbb", "eventTime": "2019-07-24T09:54:36Z", "eventName": "AssumeRole", "eventSource": "sts.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "lambda.amazonaws.com", "userAgent": "lambda.amazonaws.com", "awsRegion": "us-west-2", "userIdentity": {"type": "AWSService", "invokedBy": "lambda.amazonaws.com"}, "requestParameters": {"roleSessionName": "Level6", "roleArn": "arn:aws:iam::811596193553:role/service-role/Level6"}, "responseElements": {"credentials": {"accessKeyId": "ASIARN2IH6JUN8VNW1TU", "expiration": "Jul 24, 2019 9:54:36 PM", "sessionToken": "AgoJb3JpZ2luX2VjEIL//////////wEaCXVzLXdlc3QtMiJHMEUCIBJgbBhBYGy1w3FP4tjpIqP6x4Qcv8p78BaZl39CbeZKAiEA+U/ZvVEpXDynJRVvmEnJtXgKKKVzWJOWXZPJEA/qXbwqiwII6///////////ARAAGgw5NzU0MjYyNjIwMjkiDE5oYdof+40Dn1VBHCrfARBVDMW5DGfav8ksJa/gnElbe4zTFBcVYGhFz11OJEp0ead2FrtqUy8CMQ9UIezXB4k/qwnOh/5/iZlXA0qW/+mKITIMpHuTg/EeU42TYLO7mnh54S2dfawml8P7/P2rv/o/AxDz//5f7SfjuGnNtYYmuFAN5YsgWV1LWbT2NK+C0T6mNfvw4X/rJpn757/gCqbdJWSSiB99sNidwl7WBeahKu2Bz6WSWDNsaw6i0PxC9UNBy/7aij3i4TNaT9J/XfWdUyovqRfEYOhIkAAZerWptIGrwAor4QRUyyZfZL4w3NXg6QU6tAFqRC/dstYLR7D2mjJAUg1TKG6g+YDt2BJIcXG4t3Pv224qG7SaAmAYkeAHkmS4H8oxTsJ9FqY08S2F0CByzgv+h+Y5tnD/P+NtphouyEytOi7ctJyfOUa9bBYCVvPuuE90kdaSo2rsVwcMJt35DtK777m5pBegllSK3PG1v4rcVTcIpLt7JPCRBGzuwczLVma+tMRWROYMyKFRqtqzXdxGdPWlpzTP2WfIcU0/U0HPs/Ed1ak="}}, "resources": [{"ARN": "arn:aws:iam::811596193553:role/service-role/Level6", "accountId": "811596193553", "type": "AWS::IAM::Role"}]}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "9aa65549-5d72-4f7c-98de-ca9de491cc9f", "record_id": "flaws_cloudtrail:0000382:9aa65549-5d72-4f7c-98de-ca9de491cc9f", "row_index": 382, "timestamp": "2019-07-24T09:54:36Z", "event_type": "CreateLogStream", "event_source": "logs.amazonaws.com", "principal": {"type": "AssumedRole", "arn": "arn:aws:sts::811596193553:assumed-role/Level6/Level6", "account_id": "811596193553", "principal_id": "AROAI4E1FBACLY3FPC6BB:Level6", "user_name": null, "access_key_id": "ASIARN2IH6JUN8VNW1TU", "session_issuer_arn": "arn:aws:iam::811596193553:role/service-role/Level6", "session_issuer_user_name": "Level6"}, "network": {"source_ip": "4.7.249.197", "user_agent": "awslambda-worker", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1028, "raw_record_depth": 4, "raw_record_top_level_keys": ["apiVersion", "awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "9aa65549-5d72-4f7c-98de-ca9de491cc9f", "eventTime": "2019-07-24T09:54:36Z", "eventName": "CreateLogStream", "eventSource": "logs.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "4.7.249.197", "userAgent": "awslambda-worker", "awsRegion": "us-west-2", "userIdentity": {"type": "AssumedRole", "principalId": "AROAI4E1FBACLY3FPC6BB:Level6", "arn": "arn:aws:sts::811596193553:assumed-role/Level6/Level6", "accountId": "811596193553", "accessKeyId": "ASIARN2IH6JUN8VNW1TU", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2019-07-24T09:54:36Z"}, "sessionIssuer": {"type": "Role", "principalId": "AROAI4E1FBACLY3FPC6BB", "arn": "arn:aws:iam::811596193553:role/service-role/Level6", "accountId": "811596193553", "userName": "Level6"}}}, "requestParameters": {"logGroupName": "/aws/lambda/Level6", "logStreamName": "2019/07/24/[$LATEST]c2b8684d2be1412fcce83b130c00772d"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "0409b6d9-ae60-465b-a387-d590b6ffa42b", "record_id": "flaws_cloudtrail:0000383:0409b6d9-ae60-465b-a387-d590b6ffa42b", "row_index": 383, "timestamp": "2019-07-24T09:54:36Z", "event_type": "AssumeRole", "event_source": "sts.amazonaws.com", "principal": {"type": "AWSService", "arn": null, "account_id": null, "principal_id": null, "user_name": null, "access_key_id": null, "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "lambda.amazonaws.com", "user_agent": "lambda.amazonaws.com", "aws_region": "us-west-2"}, "resource_arns": ["arn:aws:iam::811596193553:role/service-role/Level6"], "raw_record_size_bytes": 1630, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "resources", "responseElements", "sharedEventID", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "0409b6d9-ae60-465b-a387-d590b6ffa42b", "eventTime": "2019-07-24T09:54:36Z", "eventName": "AssumeRole", "eventSource": "sts.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "lambda.amazonaws.com", "userAgent": "lambda.amazonaws.com", "awsRegion": "us-west-2", "userIdentity": {"type": "AWSService", "invokedBy": "lambda.amazonaws.com"}, "requestParameters": {"roleSessionName": "Level6", "roleArn": "arn:aws:iam::811596193553:role/service-role/Level6"}, "responseElements": {"credentials": {"accessKeyId": "ASIA6VXUJKAM8VYN6V8T", "expiration": "Jul 24, 2019 9:54:36 PM", "sessionToken": "AgoJb3JpZ2luX2VjEIL//////////wEaCXVzLXdlc3QtMiJGMEQCIEtoXJuKSjVX8KVZdDUUUU9awHS7RKIKqtLsXz0Btob5AiArkXmA0ucxKV3qhGd817rCnMwBXEij5hEYlVqlP0l5piqLAgjr//////////8BEAAaDDk3NTQyNjI2MjAyOSIMu+1hdq4UODdXMT21Kt8BliOUEBGLq5tJTfrWlXVZdUF7fVmPpkl0+gvj5vaRdZ1pfR69d1yOAt6SLLpiY6Kro3baCAJhx2/py75yWvFqjEbwq7DnToTtMyaOGAmdPApp6XmhcPp8DDoi+bdneaA/edK0OH55k+kl/AbQghqkDxS8n3VJfR+mMp70KcMB0QHomUGGwFGo79Je2I5O3T/TnmE2VIuUq6XrRFcqM2JnCz7fssdkg405pnf8QezQ/wLFh2Mc2MzZrhCFfomE7GbiQ2FBnu5MzaSLYW1uPRe4EL9XuRl68Xivg6zO3SadqDDc1eDpBTq1AafX3cCM1lwOUNi4eWwflLpl/IohqcXo3U/oVyLW6jJWXcuqT6dI3/StAvNT/4kJcFEXq9PW2naTdVYEuvTHHsYjJev57bRAmLbNwqXoS9JBbuZvsJa5c0crMHya9BKvy0acMkTus/2Pfu85j03GaJEmVGsuzYGGJ/+Zcsh6t8UhmQeav94DyI4DvXOqzd4mnXBGN6GJCTsOhowoKUlY91DjALbRUS9mfSRnlrXg07qQWTujnyo="}}, "resources": [{"ARN": "arn:aws:iam::811596193553:role/service-role/Level6", "accountId": "811596193553", "type": "AWS::IAM::Role"}]}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "f0e682e6-5fa7-4b8e-8fe9-683479a2fcfbb", "record_id": "flaws_cloudtrail:0000384:f0e682e6-5fa7-4b8e-8fe9-683479a2fcfbb", "row_index": 384, "timestamp": "2019-07-24T09:54:36Z", "event_type": "AssumeRole", "event_source": "sts.amazonaws.com", "principal": {"type": "AWSService", "arn": null, "account_id": null, "principal_id": null, "user_name": null, "access_key_id": null, "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "lambda.amazonaws.com", "user_agent": "lambda.amazonaws.com", "aws_region": "us-west-2"}, "resource_arns": ["arn:aws:iam::811596193553:role/service-role/Level6"], "raw_record_size_bytes": 1631, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "resources", "responseElements", "sharedEventID", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "f0e682e6-5fa7-4b8e-8fe9-683479a2fcfbb", "eventTime": "2019-07-24T09:54:36Z", "eventName": "AssumeRole", "eventSource": "sts.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "lambda.amazonaws.com", "userAgent": "lambda.amazonaws.com", "awsRegion": "us-west-2", "userIdentity": {"type": "AWSService", "invokedBy": "lambda.amazonaws.com"}, "requestParameters": {"roleSessionName": "Level6", "roleArn": "arn:aws:iam::811596193553:role/service-role/Level6"}, "responseElements": {"credentials": {"accessKeyId": "ASIARN2IH6JUN8VNW1TU", "expiration": "Jul 24, 2019 9:54:36 PM", "sessionToken": "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"}}, "resources": [{"ARN": "arn:aws:iam::811596193553:role/service-role/Level6", "accountId": "811596193553", "type": "AWS::IAM::Role"}]}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "9aa65549-5d72-4f7c-98de-ca9de491cc9f", "record_id": "flaws_cloudtrail:0000385:9aa65549-5d72-4f7c-98de-ca9de491cc9f", "row_index": 385, "timestamp": "2019-07-24T09:54:36Z", "event_type": "CreateLogStream", "event_source": "logs.amazonaws.com", "principal": {"type": "AssumedRole", "arn": "arn:aws:sts::811596193553:assumed-role/Level6/Level6", "account_id": "811596193553", "principal_id": "AROAI4E1FBACLY3FPC6BB:Level6", "user_name": null, "access_key_id": "ASIARN2IH6JUN8VNW1TU", "session_issuer_arn": "arn:aws:iam::811596193553:role/service-role/Level6", "session_issuer_user_name": "Level6"}, "network": {"source_ip": "4.7.249.197", "user_agent": "awslambda-worker", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1028, "raw_record_depth": 4, "raw_record_top_level_keys": ["apiVersion", "awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "9aa65549-5d72-4f7c-98de-ca9de491cc9f", "eventTime": "2019-07-24T09:54:36Z", "eventName": "CreateLogStream", "eventSource": "logs.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "4.7.249.197", "userAgent": "awslambda-worker", "awsRegion": "us-west-2", "userIdentity": {"type": "AssumedRole", "principalId": "AROAI4E1FBACLY3FPC6BB:Level6", "arn": "arn:aws:sts::811596193553:assumed-role/Level6/Level6", "accountId": "811596193553", "accessKeyId": "ASIARN2IH6JUN8VNW1TU", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2019-07-24T09:54:36Z"}, "sessionIssuer": {"type": "Role", "principalId": "AROAI4E1FBACLY3FPC6BB", "arn": "arn:aws:iam::811596193553:role/service-role/Level6", "accountId": "811596193553", "userName": "Level6"}}}, "requestParameters": {"logGroupName": "/aws/lambda/Level6", "logStreamName": "2019/07/24/[$LATEST]c2b8684d2be1412fcce83b130c00772d"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "0409b6d9-ae60-465b-a387-d590b6ffa42b", "record_id": "flaws_cloudtrail:0000386:0409b6d9-ae60-465b-a387-d590b6ffa42b", "row_index": 386, "timestamp": "2019-07-24T09:54:36Z", "event_type": "AssumeRole", "event_source": "sts.amazonaws.com", "principal": {"type": "AWSService", "arn": null, "account_id": null, "principal_id": null, "user_name": null, "access_key_id": null, "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "lambda.amazonaws.com", "user_agent": "lambda.amazonaws.com", "aws_region": "us-west-2"}, "resource_arns": ["arn:aws:iam::811596193553:role/service-role/Level6"], "raw_record_size_bytes": 1630, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "resources", "responseElements", "sharedEventID", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "0409b6d9-ae60-465b-a387-d590b6ffa42b", "eventTime": "2019-07-24T09:54:36Z", "eventName": "AssumeRole", "eventSource": "sts.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "lambda.amazonaws.com", "userAgent": "lambda.amazonaws.com", "awsRegion": "us-west-2", "userIdentity": {"type": "AWSService", "invokedBy": "lambda.amazonaws.com"}, "requestParameters": {"roleSessionName": "Level6", "roleArn": "arn:aws:iam::811596193553:role/service-role/Level6"}, "responseElements": {"credentials": {"accessKeyId": "ASIA6VXUJKAM8VYN6V8T", "expiration": "Jul 24, 2019 9:54:36 PM", "sessionToken": "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"}}, "resources": [{"ARN": "arn:aws:iam::811596193553:role/service-role/Level6", "accountId": "811596193553", "type": "AWS::IAM::Role"}]}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "14e7a3c6-b5b2-48a3-829f-2842ff071849", "record_id": "flaws_cloudtrail:0000387:14e7a3c6-b5b2-48a3-829f-2842ff071849", "row_index": 387, "timestamp": "2019-07-24T09:59:09Z", "event_type": "ListFunctions202224", "event_source": "lambda.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "9.26.56.242", "user_agent": "aws-cli/1.16.203 Python/2.7.16 Linux/4.19.0-kali4-amd64 botocore/1.12.193", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 685, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "14e7a3c6-b5b2-48a3-829f-2842ff071849", "eventTime": "2019-07-24T09:59:09Z", "eventName": "ListFunctions202224", "eventSource": "lambda.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "9.26.56.242", "userAgent": "aws-cli/1.16.203 Python/2.7.16 Linux/4.19.0-kali4-amd64 botocore/1.12.193", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "14e7a3c6-b5b2-48a3-829f-2842ff071849", "record_id": "flaws_cloudtrail:0000388:14e7a3c6-b5b2-48a3-829f-2842ff071849", "row_index": 388, "timestamp": "2019-07-24T09:59:09Z", "event_type": "ListFunctions202224", "event_source": "lambda.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "9.26.56.242", "user_agent": "aws-cli/1.16.203 Python/2.7.16 Linux/4.19.0-kali4-amd64 botocore/1.12.193", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 685, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "14e7a3c6-b5b2-48a3-829f-2842ff071849", "eventTime": "2019-07-24T09:59:09Z", "eventName": "ListFunctions202224", "eventSource": "lambda.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "9.26.56.242", "userAgent": "aws-cli/1.16.203 Python/2.7.16 Linux/4.19.0-kali4-amd64 botocore/1.12.193", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "0f899c4d-c4bf-4d0c-8bba-ab436558f7cf", "record_id": "flaws_cloudtrail:0000389:0f899c4d-c4bf-4d0c-8bba-ab436558f7cf", "row_index": 389, "timestamp": "2019-07-24T10:19:24Z", "event_type": "ListBuckets", "event_source": "s3.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "251.0.166.127", "user_agent": "[aws-cli/1.16.169 Python/3.6.0 Darwin/15.6.0 botocore/1.12.159]", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 801, "raw_record_depth": 3, "raw_record_top_level_keys": ["additionalEventData", "awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "0f899c4d-c4bf-4d0c-8bba-ab436558f7cf", "eventTime": "2019-07-24T10:19:24Z", "eventName": "ListBuckets", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "251.0.166.127", "userAgent": "[aws-cli/1.16.169 Python/3.6.0 Darwin/15.6.0 botocore/1.12.159]", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"host": ["s3.amazonaws.com"]}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "0f899c4d-c4bf-4d0c-8bba-ab436558f7cf", "record_id": "flaws_cloudtrail:0000390:0f899c4d-c4bf-4d0c-8bba-ab436558f7cf", "row_index": 390, "timestamp": "2019-07-24T10:19:24Z", "event_type": "ListBuckets", "event_source": "s3.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "251.0.166.127", "user_agent": "[aws-cli/1.16.169 Python/3.6.0 Darwin/15.6.0 botocore/1.12.159]", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 801, "raw_record_depth": 3, "raw_record_top_level_keys": ["additionalEventData", "awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "0f899c4d-c4bf-4d0c-8bba-ab436558f7cf", "eventTime": "2019-07-24T10:19:24Z", "eventName": "ListBuckets", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "251.0.166.127", "userAgent": "[aws-cli/1.16.169 Python/3.6.0 Darwin/15.6.0 botocore/1.12.159]", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"host": ["s3.amazonaws.com"]}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "893ce791-c67f-45f7-9534-5668e49fad47", "record_id": "flaws_cloudtrail:0000391:893ce791-c67f-45f7-9534-5668e49fad47", "row_index": 391, "timestamp": "2019-07-24T10:21:42Z", "event_type": "GetStages", "event_source": "apigateway.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "5.180.250.254", "user_agent": "aws-cli/1.16.203 Python/2.7.16 Linux/4.19.0-kali4-amd64 botocore/1.12.193", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 736, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "readOnly", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "893ce791-c67f-45f7-9534-5668e49fad47", "eventTime": "2019-07-24T10:21:42Z", "eventName": "GetStages", "eventSource": "apigateway.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "5.180.250.254", "userAgent": "aws-cli/1.16.203 Python/2.7.16 Linux/4.19.0-kali4-amd64 botocore/1.12.193", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"restApiId": "s33ppypa75", "template": false}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "893ce791-c67f-45f7-9534-5668e49fad47", "record_id": "flaws_cloudtrail:0000392:893ce791-c67f-45f7-9534-5668e49fad47", "row_index": 392, "timestamp": "2019-07-24T10:21:42Z", "event_type": "GetStages", "event_source": "apigateway.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "5.180.250.254", "user_agent": "aws-cli/1.16.203 Python/2.7.16 Linux/4.19.0-kali4-amd64 botocore/1.12.193", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 736, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "readOnly", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "893ce791-c67f-45f7-9534-5668e49fad47", "eventTime": "2019-07-24T10:21:42Z", "eventName": "GetStages", "eventSource": "apigateway.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "5.180.250.254", "userAgent": "aws-cli/1.16.203 Python/2.7.16 Linux/4.19.0-kali4-amd64 botocore/1.12.193", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"restApiId": "s33ppypa75", "template": false}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "de9ec1c2-fce4-4b63-b8d0-96b868b1f128", "record_id": "flaws_cloudtrail:0000393:de9ec1c2-fce4-4b63-b8d0-96b868b1f128", "row_index": 393, "timestamp": "2019-07-24T10:21:53Z", "event_type": "GetCallerIdentity", "event_source": "sts.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "251.0.166.127", "user_agent": "aws-cli/1.16.169 Python/3.6.0 Darwin/15.6.0 botocore/1.12.159", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 771, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "de9ec1c2-fce4-4b63-b8d0-96b868b1f128", "eventTime": "2019-07-24T10:21:53Z", "eventName": "GetCallerIdentity", "eventSource": "sts.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "251.0.166.127", "userAgent": "aws-cli/1.16.169 Python/3.6.0 Darwin/15.6.0 botocore/1.12.159", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "responseElements": {"userId": "AIDA9BO36HFBHKGJAO9C1", "account": "811596193553", "arn": "arn:aws:iam::811596193553:user/backup"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "de9ec1c2-fce4-4b63-b8d0-96b868b1f128", "record_id": "flaws_cloudtrail:0000394:de9ec1c2-fce4-4b63-b8d0-96b868b1f128", "row_index": 394, "timestamp": "2019-07-24T10:21:53Z", "event_type": "GetCallerIdentity", "event_source": "sts.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "251.0.166.127", "user_agent": "aws-cli/1.16.169 Python/3.6.0 Darwin/15.6.0 botocore/1.12.159", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 771, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "de9ec1c2-fce4-4b63-b8d0-96b868b1f128", "eventTime": "2019-07-24T10:21:53Z", "eventName": "GetCallerIdentity", "eventSource": "sts.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "251.0.166.127", "userAgent": "aws-cli/1.16.169 Python/3.6.0 Darwin/15.6.0 botocore/1.12.159", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "responseElements": {"userId": "AIDA9BO36HFBHKGJAO9C1", "account": "811596193553", "arn": "arn:aws:iam::811596193553:user/backup"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "e8f71d5e-ca2f-4ccf-b370-05c7a18a7dd5", "record_id": "flaws_cloudtrail:0000395:e8f71d5e-ca2f-4ccf-b370-05c7a18a7dd5", "row_index": 395, "timestamp": "2019-07-24T10:22:15Z", "event_type": "CreateLogStream", "event_source": "logs.amazonaws.com", "principal": {"type": "AssumedRole", "arn": "arn:aws:sts::811596193553:assumed-role/Level6/Level6", "account_id": "811596193553", "principal_id": "AROAI4E1FBACLY3FPC6BB:Level6", "user_name": null, "access_key_id": "ASIARN2IH6JUN8VNW1TU", "session_issuer_arn": "arn:aws:iam::811596193553:role/service-role/Level6", "session_issuer_user_name": "Level6"}, "network": {"source_ip": "180.251.254.120", "user_agent": "awslambda-worker", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1032, "raw_record_depth": 4, "raw_record_top_level_keys": ["apiVersion", "awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "e8f71d5e-ca2f-4ccf-b370-05c7a18a7dd5", "eventTime": "2019-07-24T10:22:15Z", "eventName": "CreateLogStream", "eventSource": "logs.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "180.251.254.120", "userAgent": "awslambda-worker", "awsRegion": "us-west-2", "userIdentity": {"type": "AssumedRole", "principalId": "AROAI4E1FBACLY3FPC6BB:Level6", "arn": "arn:aws:sts::811596193553:assumed-role/Level6/Level6", "accountId": "811596193553", "accessKeyId": "ASIARN2IH6JUN8VNW1TU", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2019-07-24T09:54:36Z"}, "sessionIssuer": {"type": "Role", "principalId": "AROAI4E1FBACLY3FPC6BB", "arn": "arn:aws:iam::811596193553:role/service-role/Level6", "accountId": "811596193553", "userName": "Level6"}}}, "requestParameters": {"logStreamName": "2019/07/24/[$LATEST]d706e6f30fbd87558802f0e055a5e393", "logGroupName": "/aws/lambda/Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "7bb280189-3803-416e-af72-feb27de65ce2", "record_id": "flaws_cloudtrail:0000396:7bb280189-3803-416e-af72-feb27de65ce2", "row_index": 396, "timestamp": "2019-07-24T10:22:15Z", "event_type": "AssumeRole", "event_source": "sts.amazonaws.com", "principal": {"type": "AWSService", "arn": null, "account_id": null, "principal_id": null, "user_name": null, "access_key_id": null, "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "lambda.amazonaws.com", "user_agent": "lambda.amazonaws.com", "aws_region": "us-west-2"}, "resource_arns": ["arn:aws:iam::811596193553:role/service-role/Level6"], "raw_record_size_bytes": 1631, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "resources", "responseElements", "sharedEventID", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "7bb280189-3803-416e-af72-feb27de65ce2", "eventTime": "2019-07-24T10:22:15Z", "eventName": "AssumeRole", "eventSource": "sts.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "lambda.amazonaws.com", "userAgent": "lambda.amazonaws.com", "awsRegion": "us-west-2", "userIdentity": {"type": "AWSService", "invokedBy": "lambda.amazonaws.com"}, "requestParameters": {"roleSessionName": "Level6", "roleArn": "arn:aws:iam::811596193553:role/service-role/Level6"}, "responseElements": {"credentials": {"accessKeyId": "ASIADBILAMTS5HWMBS7A", "expiration": "Jul 24, 2019 10:22:15 PM", "sessionToken": "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"}}, "resources": [{"ARN": "arn:aws:iam::811596193553:role/service-role/Level6", "accountId": "811596193553", "type": "AWS::IAM::Role"}]}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "e8f71d5e-ca2f-4ccf-b370-05c7a18a7dd5", "record_id": "flaws_cloudtrail:0000397:e8f71d5e-ca2f-4ccf-b370-05c7a18a7dd5", "row_index": 397, "timestamp": "2019-07-24T10:22:15Z", "event_type": "CreateLogStream", "event_source": "logs.amazonaws.com", "principal": {"type": "AssumedRole", "arn": "arn:aws:sts::811596193553:assumed-role/Level6/Level6", "account_id": "811596193553", "principal_id": "AROAI4E1FBACLY3FPC6BB:Level6", "user_name": null, "access_key_id": "ASIARN2IH6JUN8VNW1TU", "session_issuer_arn": "arn:aws:iam::811596193553:role/service-role/Level6", "session_issuer_user_name": "Level6"}, "network": {"source_ip": "180.251.254.120", "user_agent": "awslambda-worker", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1032, "raw_record_depth": 4, "raw_record_top_level_keys": ["apiVersion", "awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "e8f71d5e-ca2f-4ccf-b370-05c7a18a7dd5", "eventTime": "2019-07-24T10:22:15Z", "eventName": "CreateLogStream", "eventSource": "logs.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "180.251.254.120", "userAgent": "awslambda-worker", "awsRegion": "us-west-2", "userIdentity": {"type": "AssumedRole", "principalId": "AROAI4E1FBACLY3FPC6BB:Level6", "arn": "arn:aws:sts::811596193553:assumed-role/Level6/Level6", "accountId": "811596193553", "accessKeyId": "ASIARN2IH6JUN8VNW1TU", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2019-07-24T09:54:36Z"}, "sessionIssuer": {"type": "Role", "principalId": "AROAI4E1FBACLY3FPC6BB", "arn": "arn:aws:iam::811596193553:role/service-role/Level6", "accountId": "811596193553", "userName": "Level6"}}}, "requestParameters": {"logStreamName": "2019/07/24/[$LATEST]d706e6f30fbd87558802f0e055a5e393", "logGroupName": "/aws/lambda/Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "7bb280189-3803-416e-af72-feb27de65ce2", "record_id": "flaws_cloudtrail:0000398:7bb280189-3803-416e-af72-feb27de65ce2", "row_index": 398, "timestamp": "2019-07-24T10:22:15Z", "event_type": "AssumeRole", "event_source": "sts.amazonaws.com", "principal": {"type": "AWSService", "arn": null, "account_id": null, "principal_id": null, "user_name": null, "access_key_id": null, "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "lambda.amazonaws.com", "user_agent": "lambda.amazonaws.com", "aws_region": "us-west-2"}, "resource_arns": ["arn:aws:iam::811596193553:role/service-role/Level6"], "raw_record_size_bytes": 1631, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "resources", "responseElements", "sharedEventID", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "7bb280189-3803-416e-af72-feb27de65ce2", "eventTime": "2019-07-24T10:22:15Z", "eventName": "AssumeRole", "eventSource": "sts.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "lambda.amazonaws.com", "userAgent": "lambda.amazonaws.com", "awsRegion": "us-west-2", "userIdentity": {"type": "AWSService", "invokedBy": "lambda.amazonaws.com"}, "requestParameters": {"roleSessionName": "Level6", "roleArn": "arn:aws:iam::811596193553:role/service-role/Level6"}, "responseElements": {"credentials": {"accessKeyId": "ASIADBILAMTS5HWMBS7A", "expiration": "Jul 24, 2019 10:22:15 PM", "sessionToken": "AgoJb3JpZ2luX2VjEIP//////////wEaCXVzLXdlc3QtMiJIMEYCIQCHvWKEsFodRslB6SwQ8l+PHNJbWNhAULRWYhLEOBQ2XAIhAPcWVeQqEB14b7lMShqE6cEtBNxxaUl3pq6NV0ojOOR6KosCCOz//////////wEQABoMOTc1NDI2MjYyMDI5IgytJLSmyy3VUpAUB1oq3wHsyZ/ELbQk9NIQ1P/jcnYjhSaWeA8dw4r9MiRm4bPWbKaamI3LuU4iWb0nWtDhSepuDea7bT+MoY7IxLb+NbQ1RPSfwMZ4dg9CvapleuOYWhk52ucE/f5/EKvRuWtit/2eQAdeN7tgNhBXU2DJmloQ8FpD6EJ833rRw0DJXMfrNUB4rr+U/FE70wMY8lk0cwdVq3wwy43F+jaZMk0ULFtJe+YfY8UFfCQ0qxOx8MbCpm0G7l+5SUyHirw1SWfrscklEwxZ9Zu4FbTjPXDI4ZXu1axoNS7zgTFVCEwKDTIFMNfi4OkFOrMBEvu2mtjVuey4OSCl9hUYudUqBmGHLM31DJ0ZonLCJJ0enOa5Ov2meOQqkhHK2BGmj1cO0VSDd4jk8qGoXcMKB8vjJcM9rVCU8OclghDgeEwW37wLTK5lEGptRc5l9BeshsCfvWTBmXUSY2N12iNueoN1wvP5iY4Twcwgg4UzwromDIYhP367TWQCmonvfhw6ILKwb4EiBLe5ybnuoRsTWajqNZm9TN/dPLus1dg0LiLGWaA="}}, "resources": [{"ARN": "arn:aws:iam::811596193553:role/service-role/Level6", "accountId": "811596193553", "type": "AWS::IAM::Role"}]}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "419718d60-489b-4c57-b62a-ba5a6adb42df", "record_id": "flaws_cloudtrail:0000399:419718d60-489b-4c57-b62a-ba5a6adb42df", "row_index": 399, "timestamp": "2019-07-24T10:24:29Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "251.0.166.127", "user_agent": "aws-cli/1.16.169 Python/3.6.0 Darwin/15.6.0 botocore/1.12.159", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 787, "raw_record_depth": 5, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "419718d60-489b-4c57-b62a-ba5a6adb42df", "eventTime": "2019-07-24T10:24:29Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "251.0.166.127", "userAgent": "aws-cli/1.16.169 Python/3.6.0 Darwin/15.6.0 botocore/1.12.159", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"maxResults": 1000, "snapshotSet": {}, "ownersSet": {"items": [{"owner": "811596193553"}]}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "419718d60-489b-4c57-b62a-ba5a6adb42df", "record_id": "flaws_cloudtrail:0000400:419718d60-489b-4c57-b62a-ba5a6adb42df", "row_index": 400, "timestamp": "2019-07-24T10:24:29Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "251.0.166.127", "user_agent": "aws-cli/1.16.169 Python/3.6.0 Darwin/15.6.0 botocore/1.12.159", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 787, "raw_record_depth": 5, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "419718d60-489b-4c57-b62a-ba5a6adb42df", "eventTime": "2019-07-24T10:24:29Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "251.0.166.127", "userAgent": "aws-cli/1.16.169 Python/3.6.0 Darwin/15.6.0 botocore/1.12.159", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"maxResults": 1000, "snapshotSet": {}, "ownersSet": {"items": [{"owner": "811596193553"}]}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "db85089-946e-40f8-bae0-6e4d367d07f1", "record_id": "flaws_cloudtrail:0000401:db85089-946e-40f8-bae0-6e4d367d07f1", "row_index": 401, "timestamp": "2019-07-24T10:31:25Z", "event_type": "AssumeRole", "event_source": "sts.amazonaws.com", "principal": {"type": "AWSService", "arn": null, "account_id": null, "principal_id": null, "user_name": null, "access_key_id": null, "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "ec2.amazonaws.com", "user_agent": "ec2.amazonaws.com", "aws_region": "us-west-2"}, "resource_arns": ["arn:aws:iam::811596193553:role/flaws"], "raw_record_size_bytes": 1894, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "resources", "responseElements", "sharedEventID", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "db85089-946e-40f8-bae0-6e4d367d07f1", "eventTime": "2019-07-24T10:31:25Z", "eventName": "AssumeRole", "eventSource": "sts.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "ec2.amazonaws.com", "userAgent": "ec2.amazonaws.com", "awsRegion": "us-west-2", "userIdentity": {"type": "AWSService", "invokedBy": "ec2.amazonaws.com"}, "requestParameters": {"roleSessionName": "i-aa2d3b42e5c6e801a", "roleArn": "arn:aws:iam::811596193553:role/flaws"}, "responseElements": {"credentials": {"accessKeyId": "ASIA1A70OQYWZUL2D3UU", "expiration": "Jul 24, 2019 4:48:22 PM", "sessionToken": "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"}}, "resources": [{"ARN": "arn:aws:iam::811596193553:role/flaws", "accountId": "811596193553", "type": "AWS::IAM::Role"}]}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "db85089-946e-40f8-bae0-6e4d367d07f1", "record_id": "flaws_cloudtrail:0000402:db85089-946e-40f8-bae0-6e4d367d07f1", "row_index": 402, "timestamp": "2019-07-24T10:31:25Z", "event_type": "AssumeRole", "event_source": "sts.amazonaws.com", "principal": {"type": "AWSService", "arn": null, "account_id": null, "principal_id": null, "user_name": null, "access_key_id": null, "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "ec2.amazonaws.com", "user_agent": "ec2.amazonaws.com", "aws_region": "us-west-2"}, "resource_arns": ["arn:aws:iam::811596193553:role/flaws"], "raw_record_size_bytes": 1894, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "resources", "responseElements", "sharedEventID", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "db85089-946e-40f8-bae0-6e4d367d07f1", "eventTime": "2019-07-24T10:31:25Z", "eventName": "AssumeRole", "eventSource": "sts.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "ec2.amazonaws.com", "userAgent": "ec2.amazonaws.com", "awsRegion": "us-west-2", "userIdentity": {"type": "AWSService", "invokedBy": "ec2.amazonaws.com"}, "requestParameters": {"roleSessionName": "i-aa2d3b42e5c6e801a", "roleArn": "arn:aws:iam::811596193553:role/flaws"}, "responseElements": {"credentials": {"accessKeyId": "ASIA1A70OQYWZUL2D3UU", "expiration": "Jul 24, 2019 4:48:22 PM", "sessionToken": "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"}}, "resources": [{"ARN": "arn:aws:iam::811596193553:role/flaws", "accountId": "811596193553", "type": "AWS::IAM::Role"}]}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "3434bfb9-a65e-4b7b-aa29-69555b06", "record_id": "flaws_cloudtrail:0000403:3434bfb9-a65e-4b7b-aa29-69555b06", "row_index": 403, "timestamp": "2019-07-24T10:36:17Z", "event_type": "GetUser", "event_source": "iam.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "251.0.166.127", "user_agent": "aws-cli/1.16.169 Python/3.6.0 Darwin/15.6.0 botocore/1.12.159", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 656, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "3434bfb9-a65e-4b7b-aa29-69555b06", "eventTime": "2019-07-24T10:36:17Z", "eventName": "GetUser", "eventSource": "iam.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "251.0.166.127", "userAgent": "aws-cli/1.16.169 Python/3.6.0 Darwin/15.6.0 botocore/1.12.159", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "3434bfb9-a65e-4b7b-aa29-69555b06", "record_id": "flaws_cloudtrail:0000404:3434bfb9-a65e-4b7b-aa29-69555b06", "row_index": 404, "timestamp": "2019-07-24T10:36:17Z", "event_type": "GetUser", "event_source": "iam.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "251.0.166.127", "user_agent": "aws-cli/1.16.169 Python/3.6.0 Darwin/15.6.0 botocore/1.12.159", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 656, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "3434bfb9-a65e-4b7b-aa29-69555b06", "eventTime": "2019-07-24T10:36:17Z", "eventName": "GetUser", "eventSource": "iam.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "251.0.166.127", "userAgent": "aws-cli/1.16.169 Python/3.6.0 Darwin/15.6.0 botocore/1.12.159", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "54fa516d-f137-4047-a904-c32e652d8ea5", "record_id": "flaws_cloudtrail:0000405:54fa516d-f137-4047-a904-c32e652d8ea5", "row_index": 405, "timestamp": "2019-07-24T10:36:25Z", "event_type": "ListAttachedUserPolicies", "event_source": "iam.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "251.0.166.127", "user_agent": "aws-cli/1.16.169 Python/3.6.0 Darwin/15.6.0 botocore/1.12.159", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 692, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "54fa516d-f137-4047-a904-c32e652d8ea5", "eventTime": "2019-07-24T10:36:25Z", "eventName": "ListAttachedUserPolicies", "eventSource": "iam.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "251.0.166.127", "userAgent": "aws-cli/1.16.169 Python/3.6.0 Darwin/15.6.0 botocore/1.12.159", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"userName": "Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "54fa516d-f137-4047-a904-c32e652d8ea5", "record_id": "flaws_cloudtrail:0000406:54fa516d-f137-4047-a904-c32e652d8ea5", "row_index": 406, "timestamp": "2019-07-24T10:36:25Z", "event_type": "ListAttachedUserPolicies", "event_source": "iam.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "251.0.166.127", "user_agent": "aws-cli/1.16.169 Python/3.6.0 Darwin/15.6.0 botocore/1.12.159", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 692, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "54fa516d-f137-4047-a904-c32e652d8ea5", "eventTime": "2019-07-24T10:36:25Z", "eventName": "ListAttachedUserPolicies", "eventSource": "iam.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "251.0.166.127", "userAgent": "aws-cli/1.16.169 Python/3.6.0 Darwin/15.6.0 botocore/1.12.159", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"userName": "Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "8b04e6a5-dca2-42a8-b2f6-af36e4a88e80", "record_id": "flaws_cloudtrail:0000407:8b04e6a5-dca2-42a8-b2f6-af36e4a88e80", "row_index": 407, "timestamp": "2019-07-24T10:36:50Z", "event_type": "GetPolicy", "event_source": "iam.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "251.0.166.127", "user_agent": "aws-cli/1.16.169 Python/3.6.0 Darwin/15.6.0 botocore/1.12.159", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 723, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "8b04e6a5-dca2-42a8-b2f6-af36e4a88e80", "eventTime": "2019-07-24T10:36:50Z", "eventName": "GetPolicy", "eventSource": "iam.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "251.0.166.127", "userAgent": "aws-cli/1.16.169 Python/3.6.0 Darwin/15.6.0 botocore/1.12.159", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"policyArn": "arn:aws:iam::811596193553:policy/list_apigateways"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "8b04e6a5-dca2-42a8-b2f6-af36e4a88e80", "record_id": "flaws_cloudtrail:0000408:8b04e6a5-dca2-42a8-b2f6-af36e4a88e80", "row_index": 408, "timestamp": "2019-07-24T10:36:50Z", "event_type": "GetPolicy", "event_source": "iam.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "251.0.166.127", "user_agent": "aws-cli/1.16.169 Python/3.6.0 Darwin/15.6.0 botocore/1.12.159", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 723, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "8b04e6a5-dca2-42a8-b2f6-af36e4a88e80", "eventTime": "2019-07-24T10:36:50Z", "eventName": "GetPolicy", "eventSource": "iam.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "251.0.166.127", "userAgent": "aws-cli/1.16.169 Python/3.6.0 Darwin/15.6.0 botocore/1.12.159", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"policyArn": "arn:aws:iam::811596193553:policy/list_apigateways"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "d43b74d5-1ed8-4afd-87eb-3ef435ee4924", "record_id": "flaws_cloudtrail:0000409:d43b74d5-1ed8-4afd-87eb-3ef435ee4924", "row_index": 409, "timestamp": "2019-07-24T10:37:15Z", "event_type": "GetPolicyVersion", "event_source": "iam.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "251.0.166.127", "user_agent": "aws-cli/1.16.169 Python/3.6.0 Darwin/15.6.0 botocore/1.12.159", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 747, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "d43b74d5-1ed8-4afd-87eb-3ef435ee4924", "eventTime": "2019-07-24T10:37:15Z", "eventName": "GetPolicyVersion", "eventSource": "iam.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "251.0.166.127", "userAgent": "aws-cli/1.16.169 Python/3.6.0 Darwin/15.6.0 botocore/1.12.159", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"policyArn": "arn:aws:iam::811596193553:policy/list_apigateways", "versionId": "v4"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "d43b74d5-1ed8-4afd-87eb-3ef435ee4924", "record_id": "flaws_cloudtrail:0000410:d43b74d5-1ed8-4afd-87eb-3ef435ee4924", "row_index": 410, "timestamp": "2019-07-24T10:37:15Z", "event_type": "GetPolicyVersion", "event_source": "iam.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "251.0.166.127", "user_agent": "aws-cli/1.16.169 Python/3.6.0 Darwin/15.6.0 botocore/1.12.159", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 747, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "d43b74d5-1ed8-4afd-87eb-3ef435ee4924", "eventTime": "2019-07-24T10:37:15Z", "eventName": "GetPolicyVersion", "eventSource": "iam.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "251.0.166.127", "userAgent": "aws-cli/1.16.169 Python/3.6.0 Darwin/15.6.0 botocore/1.12.159", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"policyArn": "arn:aws:iam::811596193553:policy/list_apigateways", "versionId": "v4"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "2785de48-fed0-4a60-a1d7-3a9da8a192b5", "record_id": "flaws_cloudtrail:0000411:2785de48-fed0-4a60-a1d7-3a9da8a192b5", "row_index": 411, "timestamp": "2019-07-24T10:37:40Z", "event_type": "CreateLogStream", "event_source": "logs.amazonaws.com", "principal": {"type": "AssumedRole", "arn": "arn:aws:sts::811596193553:assumed-role/Level6/Level6", "account_id": "811596193553", "principal_id": "AROAI4E1FBACLY3FPC6BB:Level6", "user_name": null, "access_key_id": "ASIARN2IH6JUN8VNW1TU", "session_issuer_arn": "arn:aws:iam::811596193553:role/service-role/Level6", "session_issuer_user_name": "Level6"}, "network": {"source_ip": "220.99.2.255", "user_agent": "awslambda-worker", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1029, "raw_record_depth": 4, "raw_record_top_level_keys": ["apiVersion", "awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "2785de48-fed0-4a60-a1d7-3a9da8a192b5", "eventTime": "2019-07-24T10:37:40Z", "eventName": "CreateLogStream", "eventSource": "logs.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "220.99.2.255", "userAgent": "awslambda-worker", "awsRegion": "us-west-2", "userIdentity": {"type": "AssumedRole", "principalId": "AROAI4E1FBACLY3FPC6BB:Level6", "arn": "arn:aws:sts::811596193553:assumed-role/Level6/Level6", "accountId": "811596193553", "accessKeyId": "ASIARN2IH6JUN8VNW1TU", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2019-07-24T09:54:36Z"}, "sessionIssuer": {"type": "Role", "principalId": "AROAI4E1FBACLY3FPC6BB", "arn": "arn:aws:iam::811596193553:role/service-role/Level6", "accountId": "811596193553", "userName": "Level6"}}}, "requestParameters": {"logGroupName": "/aws/lambda/Level6", "logStreamName": "2019/07/24/[$LATEST]4462701e0242bf1bbe2c48fa4cd3a365"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "d76b8487-8031-4011-a10f-de4c9646adf1", "record_id": "flaws_cloudtrail:0000412:d76b8487-8031-4011-a10f-de4c9646adf1", "row_index": 412, "timestamp": "2019-07-24T10:37:40Z", "event_type": "AssumeRole", "event_source": "sts.amazonaws.com", "principal": {"type": "AWSService", "arn": null, "account_id": null, "principal_id": null, "user_name": null, "access_key_id": null, "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "lambda.amazonaws.com", "user_agent": "lambda.amazonaws.com", "aws_region": "us-west-2"}, "resource_arns": ["arn:aws:iam::811596193553:role/service-role/Level6"], "raw_record_size_bytes": 1631, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "resources", "responseElements", "sharedEventID", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "d76b8487-8031-4011-a10f-de4c9646adf1", "eventTime": "2019-07-24T10:37:40Z", "eventName": "AssumeRole", "eventSource": "sts.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "lambda.amazonaws.com", "userAgent": "lambda.amazonaws.com", "awsRegion": "us-west-2", "userIdentity": {"type": "AWSService", "invokedBy": "lambda.amazonaws.com"}, "requestParameters": {"roleSessionName": "Level6", "roleArn": "arn:aws:iam::811596193553:role/service-role/Level6"}, "responseElements": {"credentials": {"accessKeyId": "ASIAQOMMWJM3LLIA7AOV", "expiration": "Jul 24, 2019 10:37:40 PM", "sessionToken": "AgoJb3JpZ2luX2VjEIP//////////wEaCXVzLXdlc3QtMiJHMEUCIBHxnR4EnwVHOLHB4TdX89KvTk8sFN7QnmQjbmpLtfl2AiEA4PRy3dKbrxE/umY2Lpymhloe9HCqF8v1f8SSCbCIXtcqiwII7P//////////ARAAGgw5NzU0MjYyNjIwMjkiDAA8InIx4TJRGg+uaSrfAYbzJ5jOR1/FdiaKdfQCUO++9U4ucZ3Ugd4htqq/V28/XNnJ2m/RjOI3gIjZFryBfRrNseGRPnbvFbJwRrFcLdTZdF7gUf/m3dDlbFXP+8/W+FM8k/BrEPP9re9QbbuQk5i2xiYseGiW0N4mqKAySAJljea0IZi9ck0DkQKGDHpNkbwgybVdawG/twfcM5Kc6B9hVbmC7UMm9/b44tcZLgBGLKRtusBYXpiMxrTdKnVjlqh8p5WKbQdt7FgVeYxhKcLkSu7HVgjhgUC++giMUn7et1OUJUwY/UW47sUMYvww9Ong6QU6tAHNsHUWYQkNoXvuDwzHMw5inxPOPaR3zYMjBD3WX4U64gTa5YgjB2iG8KD4dvRFBw2lzr8cabJB17+siP1FCRUIu7Np811UER+Mf5Azsa6Tjc8nHCOxfuIVqkAAmoDcllLpOhnymMfcaicv/XDDky0KJZtkVGzQN+VDOxv32gNFYfjaTlNbWgA1bPkIlMG4ScVz0aLQoXxwo4v4Pc5N0wJvhPtsGuNRUp2z5MWBhmI70L//anA="}}, "resources": [{"ARN": "arn:aws:iam::811596193553:role/service-role/Level6", "accountId": "811596193553", "type": "AWS::IAM::Role"}]}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "2785de48-fed0-4a60-a1d7-3a9da8a192b5", "record_id": "flaws_cloudtrail:0000413:2785de48-fed0-4a60-a1d7-3a9da8a192b5", "row_index": 413, "timestamp": "2019-07-24T10:37:40Z", "event_type": "CreateLogStream", "event_source": "logs.amazonaws.com", "principal": {"type": "AssumedRole", "arn": "arn:aws:sts::811596193553:assumed-role/Level6/Level6", "account_id": "811596193553", "principal_id": "AROAI4E1FBACLY3FPC6BB:Level6", "user_name": null, "access_key_id": "ASIARN2IH6JUN8VNW1TU", "session_issuer_arn": "arn:aws:iam::811596193553:role/service-role/Level6", "session_issuer_user_name": "Level6"}, "network": {"source_ip": "220.99.2.255", "user_agent": "awslambda-worker", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1029, "raw_record_depth": 4, "raw_record_top_level_keys": ["apiVersion", "awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "2785de48-fed0-4a60-a1d7-3a9da8a192b5", "eventTime": "2019-07-24T10:37:40Z", "eventName": "CreateLogStream", "eventSource": "logs.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "220.99.2.255", "userAgent": "awslambda-worker", "awsRegion": "us-west-2", "userIdentity": {"type": "AssumedRole", "principalId": "AROAI4E1FBACLY3FPC6BB:Level6", "arn": "arn:aws:sts::811596193553:assumed-role/Level6/Level6", "accountId": "811596193553", "accessKeyId": "ASIARN2IH6JUN8VNW1TU", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2019-07-24T09:54:36Z"}, "sessionIssuer": {"type": "Role", "principalId": "AROAI4E1FBACLY3FPC6BB", "arn": "arn:aws:iam::811596193553:role/service-role/Level6", "accountId": "811596193553", "userName": "Level6"}}}, "requestParameters": {"logGroupName": "/aws/lambda/Level6", "logStreamName": "2019/07/24/[$LATEST]4462701e0242bf1bbe2c48fa4cd3a365"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "d76b8487-8031-4011-a10f-de4c9646adf1", "record_id": "flaws_cloudtrail:0000414:d76b8487-8031-4011-a10f-de4c9646adf1", "row_index": 414, "timestamp": "2019-07-24T10:37:40Z", "event_type": "AssumeRole", "event_source": "sts.amazonaws.com", "principal": {"type": "AWSService", "arn": null, "account_id": null, "principal_id": null, "user_name": null, "access_key_id": null, "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "lambda.amazonaws.com", "user_agent": "lambda.amazonaws.com", "aws_region": "us-west-2"}, "resource_arns": ["arn:aws:iam::811596193553:role/service-role/Level6"], "raw_record_size_bytes": 1631, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "resources", "responseElements", "sharedEventID", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "d76b8487-8031-4011-a10f-de4c9646adf1", "eventTime": "2019-07-24T10:37:40Z", "eventName": "AssumeRole", "eventSource": "sts.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "lambda.amazonaws.com", "userAgent": "lambda.amazonaws.com", "awsRegion": "us-west-2", "userIdentity": {"type": "AWSService", "invokedBy": "lambda.amazonaws.com"}, "requestParameters": {"roleSessionName": "Level6", "roleArn": "arn:aws:iam::811596193553:role/service-role/Level6"}, "responseElements": {"credentials": {"accessKeyId": "ASIAQOMMWJM3LLIA7AOV", "expiration": "Jul 24, 2019 10:37:40 PM", "sessionToken": "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"}}, "resources": [{"ARN": "arn:aws:iam::811596193553:role/service-role/Level6", "accountId": "811596193553", "type": "AWS::IAM::Role"}]}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "f6c37a2d-0aa3-473f-911e-ee21cb2e3a90", "record_id": "flaws_cloudtrail:0000415:f6c37a2d-0aa3-473f-911e-ee21cb2e3a90", "row_index": 415, "timestamp": "2019-07-24T11:31:25Z", "event_type": "AssumeRole", "event_source": "sts.amazonaws.com", "principal": {"type": "AWSService", "arn": null, "account_id": null, "principal_id": null, "user_name": null, "access_key_id": null, "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "ec2.amazonaws.com", "user_agent": "ec2.amazonaws.com", "aws_region": "us-west-2"}, "resource_arns": ["arn:aws:iam::811596193553:role/flaws"], "raw_record_size_bytes": 1895, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "resources", "responseElements", "sharedEventID", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "f6c37a2d-0aa3-473f-911e-ee21cb2e3a90", "eventTime": "2019-07-24T11:31:25Z", "eventName": "AssumeRole", "eventSource": "sts.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "ec2.amazonaws.com", "userAgent": "ec2.amazonaws.com", "awsRegion": "us-west-2", "userIdentity": {"type": "AWSService", "invokedBy": "ec2.amazonaws.com"}, "requestParameters": {"roleSessionName": "i-aa2d3b42e5c6e801a", "roleArn": "arn:aws:iam::811596193553:role/flaws"}, "responseElements": {"credentials": {"accessKeyId": "ASIAYFIVAE1M5TI9WC3A", "expiration": "Jul 24, 2019 5:41:47 PM", "sessionToken": "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"}}, "resources": [{"ARN": "arn:aws:iam::811596193553:role/flaws", "accountId": "811596193553", "type": "AWS::IAM::Role"}]}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "f6c37a2d-0aa3-473f-911e-ee21cb2e3a90", "record_id": "flaws_cloudtrail:0000416:f6c37a2d-0aa3-473f-911e-ee21cb2e3a90", "row_index": 416, "timestamp": "2019-07-24T11:31:25Z", "event_type": "AssumeRole", "event_source": "sts.amazonaws.com", "principal": {"type": "AWSService", "arn": null, "account_id": null, "principal_id": null, "user_name": null, "access_key_id": null, "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "ec2.amazonaws.com", "user_agent": "ec2.amazonaws.com", "aws_region": "us-west-2"}, "resource_arns": ["arn:aws:iam::811596193553:role/flaws"], "raw_record_size_bytes": 1895, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "resources", "responseElements", "sharedEventID", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "f6c37a2d-0aa3-473f-911e-ee21cb2e3a90", "eventTime": "2019-07-24T11:31:25Z", "eventName": "AssumeRole", "eventSource": "sts.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "ec2.amazonaws.com", "userAgent": "ec2.amazonaws.com", "awsRegion": "us-west-2", "userIdentity": {"type": "AWSService", "invokedBy": "ec2.amazonaws.com"}, "requestParameters": {"roleSessionName": "i-aa2d3b42e5c6e801a", "roleArn": "arn:aws:iam::811596193553:role/flaws"}, "responseElements": {"credentials": {"accessKeyId": "ASIAYFIVAE1M5TI9WC3A", "expiration": "Jul 24, 2019 5:41:47 PM", "sessionToken": "AgoJb3JpZ2luX2VjEIT//////////wEaCXVzLXdlc3QtMiJGMEQCIEaHfdrvIII18n3GxBxPOmJrqXszNLJ5dHgBmAvvue32AiB7ONXHMouixnpgBpFvWUrK8wiVAOzdemi6kqmBKOhqgCrjAwjt//////////8BEAAaDDk3NTQyNjI2MjAyOSIMits4U5iPJN31EMfPKrcDJdKw9m4bSbKHHOpVKQ2iwpmKERW9p3RB25C9lby6AF1TRgeVKGwvuaJGWLd/NjJKiHcR3splyLdiHmEqh3dDLbi54aIZtR56LcwyolWINVLkOsBR7c7JDD0gJ/BUV4H+P9foysFj042vb9+dgubUh+9iW0jX6Buhb77T1jFs1OWQNBoaaLK1AC3MfE8QmIWPsXRfNAJsziuNdF63/ep+vq9HT8ax8xxYifCKQ3bujgNyKqSBBPzD7TiGgRMUUd8RxfLoFT0z4dxZHdKD3gudjSTOJMaoYBYBNXLbhnmCUY49baMOKbKjQuPAsKM/eXnnns5oEu/WLrdPLA3zOFVDZjOE3wCrJF/yNI2KHV7gRrA+Zt39gq7I2OF9alNpkZBGpP+Ztbax4WKBhNBs/fezepB3Y4FJFKavDozYPk5GRTV9mGu0SHjwFCF6IqKn8H6vRZCcHrHa7eypUOZsD9oCVquTFt5M5iC7b+MPl46U1OirwL7v4xbIgFwEGgFp0knZudosrrKwxK2KP+zN9FIC4LMZkdnLN2YhRTBZbGWsVQVYv2kKX8lSmKKi3I0T6r2ipwvy7Vn9ITCNg+HpBTq1ARTzqTOpMiNvZb7h5hwI99/yiPJ6DGxjYJZlot37qCO2ZegGJosP7S98f3lPtz3JJ/0t+Vhi/lYw7KWZGM4n/75R7sb2oWXCGbQHCi7oqo3/2Hz0kQUxv0tVGgwBJny4cZgz5ntfZ2+zC/dUqNuhaLFovvIhh7nyq6vOTeud3KPEQDyBfbkJeTosxpjtQrC+xRoD1Z6vvnn15GfaymkHLu442QWDmDrBYkVIDJSDy1WKvvtb6Mg="}}, "resources": [{"ARN": "arn:aws:iam::811596193553:role/flaws", "accountId": "811596193553", "type": "AWS::IAM::Role"}]}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "a11e000d-87c8-4e9b-9dc5-e77f1e9c9f5b", "record_id": "flaws_cloudtrail:0000417:a11e000d-87c8-4e9b-9dc5-e77f1e9c9f5b", "row_index": 417, "timestamp": "2019-07-24T12:22:30Z", "event_type": "AssumeRole", "event_source": "sts.amazonaws.com", "principal": {"type": "AWSService", "arn": null, "account_id": null, "principal_id": null, "user_name": null, "access_key_id": null, "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "config.amazonaws.com", "user_agent": "config.amazonaws.com", "aws_region": "us-west-2"}, "resource_arns": ["arn:aws:iam::811596193553:role/service-role/config-role-us-west-2"], "raw_record_size_bytes": 1948, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "resources", "responseElements", "sharedEventID", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "a11e000d-87c8-4e9b-9dc5-e77f1e9c9f5b", "eventTime": "2019-07-24T12:22:30Z", "eventName": "AssumeRole", "eventSource": "sts.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "config.amazonaws.com", "userAgent": "config.amazonaws.com", "awsRegion": "us-west-2", "userIdentity": {"type": "AWSService", "invokedBy": "config.amazonaws.com"}, "requestParameters": {"roleArn": "arn:aws:iam::811596193553:role/service-role/config-role-us-west-2", "roleSessionName": "AWSConfig"}, "responseElements": {"credentials": {"accessKeyId": "ASIAOTH3K61LJR5FDLVV", "expiration": "Jul 24, 2019 1:22:30 PM", "sessionToken": "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"}, "assumedRoleUser": {"assumedRoleId": "AROASM3HWKK95VDO4HH81:AWSConfig", "arn": "arn:aws:sts::811596193553:assumed-role/config-role-us-west-2/AWSConfig"}}, "resources": [{"ARN": "arn:aws:iam::811596193553:role/service-role/config-role-us-west-2", "accountId": "811596193553", "type": "AWS::IAM::Role"}]}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "a11e000d-87c8-4e9b-9dc5-e77f1e9c9f5b", "record_id": "flaws_cloudtrail:0000418:a11e000d-87c8-4e9b-9dc5-e77f1e9c9f5b", "row_index": 418, "timestamp": "2019-07-24T12:22:30Z", "event_type": "AssumeRole", "event_source": "sts.amazonaws.com", "principal": {"type": "AWSService", "arn": null, "account_id": null, "principal_id": null, "user_name": null, "access_key_id": null, "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "config.amazonaws.com", "user_agent": "config.amazonaws.com", "aws_region": "us-west-2"}, "resource_arns": ["arn:aws:iam::811596193553:role/service-role/config-role-us-west-2"], "raw_record_size_bytes": 1948, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "resources", "responseElements", "sharedEventID", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "a11e000d-87c8-4e9b-9dc5-e77f1e9c9f5b", "eventTime": "2019-07-24T12:22:30Z", "eventName": "AssumeRole", "eventSource": "sts.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "config.amazonaws.com", "userAgent": "config.amazonaws.com", "awsRegion": "us-west-2", "userIdentity": {"type": "AWSService", "invokedBy": "config.amazonaws.com"}, "requestParameters": {"roleArn": "arn:aws:iam::811596193553:role/service-role/config-role-us-west-2", "roleSessionName": "AWSConfig"}, "responseElements": {"credentials": {"accessKeyId": "ASIAOTH3K61LJR5FDLVV", "expiration": "Jul 24, 2019 1:22:30 PM", "sessionToken": "AgoJb3JpZ2luX2VjEIX//////////wEaCXVzLXdlc3QtMiJIMEYCIQD0V5HNpYjnSGYuRXxPOlf5O4YIIw7Bw1XXlU2EXVfgcAIhAKA8cTA3r3iBMNFlQooLsi/25FlCgfA4XwoY1V2mcs+NKvECCO7//////////wEQABoMOTc1NDI2MjYyMDI5IgzrTsMRQWfmgLIa7OkqxQJV7kXY7oMimrk2nhaMx5sND1px7YdZRWNYxJI1bRbC0S8M17YYUd76VqI0PZYr5ZTa90g3TNDWZXTN3zFYqRoqiy1Ggc504Z00maR+PvMozRamS+gMxfzwRCQvXZsselrkjzkPZxmSiO4O2J42/2W/2no/5cYQNOMNGLNhnbP8Jranbv6jNA6wXR3TAwkvUB2jDLDqj1B77vyPMjyiA/yWi3RpoIqCKgli/OXjkcn7Fa+a8oHwxEkMZ6dz6t+xeQdo54yj1XafAc/cvPm+aXw8Mks3LQ51O26gm8LAZfeKOr8EXpvf8FVy4TbCYeai8/vDG+btsdqvyL043Wa9xSiuwMjCXO8Ze1nZK07lCRLwJLR56Lzb73ehlrrC0cKB/ryIIDVkEpmIhze6k6Ad0zRJuEUOlndr1q82uWT6Jc2WZ8BbHCQtMIab4ekFOrMB9Zp/9y12qFihuIMyItbaqzM5NBnlxdFqin/mDKMC48Ok4CMN7IV8PPfQlN/rvO6Ui98PTEPKiQtVJHiJjkDmWPx3kIH4gAcsOmQMkBzFJ24Pz/v5+uypFuTOdPKVW+mQ7sCFE1KNTRp1DuBxMBrcWK5nkQiydl1g8wokzLoqIBUoCIU7zmQ+rlUKMe6GdqATCrmGuWoeXXJnLIZUHkj+8VdtK5HozYOogR8Mmkz+GE+gfWo="}, "assumedRoleUser": {"assumedRoleId": "AROASM3HWKK95VDO4HH81:AWSConfig", "arn": "arn:aws:sts::811596193553:assumed-role/config-role-us-west-2/AWSConfig"}}, "resources": [{"ARN": "arn:aws:iam::811596193553:role/service-role/config-role-us-west-2", "accountId": "811596193553", "type": "AWS::IAM::Role"}]}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "fd3a52b6-a510-4470-ae5c-0097ee4182b7", "record_id": "flaws_cloudtrail:0000419:fd3a52b6-a510-4470-ae5c-0097ee4182b7", "row_index": 419, "timestamp": "2019-07-24T12:31:25Z", "event_type": "AssumeRole", "event_source": "sts.amazonaws.com", "principal": {"type": "AWSService", "arn": null, "account_id": null, "principal_id": null, "user_name": null, "access_key_id": null, "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "ec2.amazonaws.com", "user_agent": "ec2.amazonaws.com", "aws_region": "us-west-2"}, "resource_arns": ["arn:aws:iam::811596193553:role/flaws"], "raw_record_size_bytes": 1894, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "resources", "responseElements", "sharedEventID", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "fd3a52b6-a510-4470-ae5c-0097ee4182b7", "eventTime": "2019-07-24T12:31:25Z", "eventName": "AssumeRole", "eventSource": "sts.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "ec2.amazonaws.com", "userAgent": "ec2.amazonaws.com", "awsRegion": "us-west-2", "userIdentity": {"type": "AWSService", "invokedBy": "ec2.amazonaws.com"}, "requestParameters": {"roleSessionName": "i-aa2d3b42e5c6e801a", "roleArn": "arn:aws:iam::811596193553:role/flaws"}, "responseElements": {"credentials": {"accessKeyId": "ASIAP0Q8QWLW07AS7716", "expiration": "Jul 24, 2019 6:55:45 PM", "sessionToken": "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"}}, "resources": [{"ARN": "arn:aws:iam::811596193553:role/flaws", "accountId": "811596193553", "type": "AWS::IAM::Role"}]}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "fd3a52b6-a510-4470-ae5c-0097ee4182b7", "record_id": "flaws_cloudtrail:0000420:fd3a52b6-a510-4470-ae5c-0097ee4182b7", "row_index": 420, "timestamp": "2019-07-24T12:31:25Z", "event_type": "AssumeRole", "event_source": "sts.amazonaws.com", "principal": {"type": "AWSService", "arn": null, "account_id": null, "principal_id": null, "user_name": null, "access_key_id": null, "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "ec2.amazonaws.com", "user_agent": "ec2.amazonaws.com", "aws_region": "us-west-2"}, "resource_arns": ["arn:aws:iam::811596193553:role/flaws"], "raw_record_size_bytes": 1894, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "resources", "responseElements", "sharedEventID", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "fd3a52b6-a510-4470-ae5c-0097ee4182b7", "eventTime": "2019-07-24T12:31:25Z", "eventName": "AssumeRole", "eventSource": "sts.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "ec2.amazonaws.com", "userAgent": "ec2.amazonaws.com", "awsRegion": "us-west-2", "userIdentity": {"type": "AWSService", "invokedBy": "ec2.amazonaws.com"}, "requestParameters": {"roleSessionName": "i-aa2d3b42e5c6e801a", "roleArn": "arn:aws:iam::811596193553:role/flaws"}, "responseElements": {"credentials": {"accessKeyId": "ASIAP0Q8QWLW07AS7716", "expiration": "Jul 24, 2019 6:55:45 PM", "sessionToken": "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"}}, "resources": [{"ARN": "arn:aws:iam::811596193553:role/flaws", "accountId": "811596193553", "type": "AWS::IAM::Role"}]}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "2b719786-d1aa-43e3-a461-67ec773b8dd2", "record_id": "flaws_cloudtrail:0000421:2b719786-d1aa-43e3-a461-67ec773b8dd2", "row_index": 421, "timestamp": "2019-07-24T13:15:42Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "218.206.236.1", "user_agent": "aws-cli/1.16.204 Python/3.7.4 Darwin/18.0.0 botocore/1.12.194", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 752, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "2b719786-d1aa-43e3-a461-67ec773b8dd2", "eventTime": "2019-07-24T13:15:42Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "218.206.236.1", "userAgent": "aws-cli/1.16.204 Python/3.7.4 Darwin/18.0.0 botocore/1.12.194", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "2b719786-d1aa-43e3-a461-67ec773b8dd2", "record_id": "flaws_cloudtrail:0000422:2b719786-d1aa-43e3-a461-67ec773b8dd2", "row_index": 422, "timestamp": "2019-07-24T13:15:42Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "218.206.236.1", "user_agent": "aws-cli/1.16.204 Python/3.7.4 Darwin/18.0.0 botocore/1.12.194", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 752, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "2b719786-d1aa-43e3-a461-67ec773b8dd2", "eventTime": "2019-07-24T13:15:42Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "218.206.236.1", "userAgent": "aws-cli/1.16.204 Python/3.7.4 Darwin/18.0.0 botocore/1.12.194", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "c7ebfa2f-ea47-4783-a3f9-2dce023cd789", "record_id": "flaws_cloudtrail:0000423:c7ebfa2f-ea47-4783-a3f9-2dce023cd789", "row_index": 423, "timestamp": "2019-07-24T13:15:43Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "218.206.236.1", "user_agent": "aws-cli/1.16.204 Python/3.7.4 Darwin/18.0.0 botocore/1.12.194", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1069, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "c7ebfa2f-ea47-4783-a3f9-2dce023cd789", "eventTime": "2019-07-24T13:15:43Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "218.206.236.1", "userAgent": "aws-cli/1.16.204 Python/3.7.4 Darwin/18.0.0 botocore/1.12.194", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"nextToken": "eyJ2IjoiMiIsImMiOiIveGMydURBM1dqVk44bUlTbmZ1cnNYODhFNXpTc2FITWhKNlh6ZVJNdlVDd1FKQ1Z1b01BbTFLRkxoSi9iN04xQ2xlMWJTUm95Sjlmd21hRmkwTFZVemtDV3hLVmw0anh6amNpdFdKODFobUZaMGlOc1F0dFdlc0YvNkYvZGs2NVVtTWE3WEtZQ25iZUlwc016ajZTdEU4YjRZVlNhbE5QODcxM1I2RGR2Nm5NV0dNV3ZZNFhoVlBlYldSSjNmUFFGVGU3SVY3bVJRMD0iLCJzIjoiMSJ9", "maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "c7ebfa2f-ea47-4783-a3f9-2dce023cd789", "record_id": "flaws_cloudtrail:0000424:c7ebfa2f-ea47-4783-a3f9-2dce023cd789", "row_index": 424, "timestamp": "2019-07-24T13:15:43Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "218.206.236.1", "user_agent": "aws-cli/1.16.204 Python/3.7.4 Darwin/18.0.0 botocore/1.12.194", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1069, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "c7ebfa2f-ea47-4783-a3f9-2dce023cd789", "eventTime": "2019-07-24T13:15:43Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "218.206.236.1", "userAgent": "aws-cli/1.16.204 Python/3.7.4 Darwin/18.0.0 botocore/1.12.194", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"nextToken": "eyJ2IjoiMiIsImMiOiIveGMydURBM1dqVk44bUlTbmZ1cnNYODhFNXpTc2FITWhKNlh6ZVJNdlVDd1FKQ1Z1b01BbTFLRkxoSi9iN04xQ2xlMWJTUm95Sjlmd21hRmkwTFZVemtDV3hLVmw0anh6amNpdFdKODFobUZaMGlOc1F0dFdlc0YvNkYvZGs2NVVtTWE3WEtZQ25iZUlwc016ajZTdEU4YjRZVlNhbE5QODcxM1I2RGR2Nm5NV0dNV3ZZNFhoVlBlYldSSjNmUFFGVGU3SVY3bVJRMD0iLCJzIjoiMSJ9", "maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "7b48dd6e-5630-4a88-b8d5-6bb9fe0b1532", "record_id": "flaws_cloudtrail:0000425:7b48dd6e-5630-4a88-b8d5-6bb9fe0b1532", "row_index": 425, "timestamp": "2019-07-24T13:15:45Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "218.206.236.1", "user_agent": "aws-cli/1.16.204 Python/3.7.4 Darwin/18.0.0 botocore/1.12.194", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1079, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "7b48dd6e-5630-4a88-b8d5-6bb9fe0b1532", "eventTime": "2019-07-24T13:15:45Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "218.206.236.1", "userAgent": "aws-cli/1.16.204 Python/3.7.4 Darwin/18.0.0 botocore/1.12.194", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"nextToken": "eyJ2IjoiMiIsImMiOiJKYUMzekVZRlFQZEhuaVpsSkFwRnQzdWRIRVo4UTlaS0Jlbk9kd2g5dVJacUJXVWErK3UvcC9vOElZczJLYlVSQlJIR29SSzA4Skt4d01NV2pWZFF3Z2xpd1NZck9TOTBja0tWR2dKV1ZNek8wWGVheU9QbnpnaDVWK3RVU0txSDI0b2RlWkF3WGRsSm9uRWJPQXhUWSt2T1hTei91c0lBamV2L1Mrd2ROMWhpMnB1eFVCbldMQ2pyNnlCSk1vSzF3YVZYWlQ4cGdDT1JFQT09IiwicyI6IjEifQ==", "maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "7b48dd6e-5630-4a88-b8d5-6bb9fe0b1532", "record_id": "flaws_cloudtrail:0000426:7b48dd6e-5630-4a88-b8d5-6bb9fe0b1532", "row_index": 426, "timestamp": "2019-07-24T13:15:45Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "218.206.236.1", "user_agent": "aws-cli/1.16.204 Python/3.7.4 Darwin/18.0.0 botocore/1.12.194", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1079, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "7b48dd6e-5630-4a88-b8d5-6bb9fe0b1532", "eventTime": "2019-07-24T13:15:45Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "218.206.236.1", "userAgent": "aws-cli/1.16.204 Python/3.7.4 Darwin/18.0.0 botocore/1.12.194", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"nextToken": "eyJ2IjoiMiIsImMiOiJKYUMzekVZRlFQZEhuaVpsSkFwRnQzdWRIRVo4UTlaS0Jlbk9kd2g5dVJacUJXVWErK3UvcC9vOElZczJLYlVSQlJIR29SSzA4Skt4d01NV2pWZFF3Z2xpd1NZck9TOTBja0tWR2dKV1ZNek8wWGVheU9QbnpnaDVWK3RVU0txSDI0b2RlWkF3WGRsSm9uRWJPQXhUWSt2T1hTei91c0lBamV2L1Mrd2ROMWhpMnB1eFVCbldMQ2pyNnlCSk1vSzF3YVZYWlQ4cGdDT1JFQT09IiwicyI6IjEifQ==", "maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "f2a7a46e-afcb-4dc9-9274-bfd622f1163d", "record_id": "flaws_cloudtrail:0000427:f2a7a46e-afcb-4dc9-9274-bfd622f1163d", "row_index": 427, "timestamp": "2019-07-24T13:15:46Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "218.206.236.1", "user_agent": "aws-cli/1.16.204 Python/3.7.4 Darwin/18.0.0 botocore/1.12.194", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1079, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "f2a7a46e-afcb-4dc9-9274-bfd622f1163d", "eventTime": "2019-07-24T13:15:46Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "218.206.236.1", "userAgent": "aws-cli/1.16.204 Python/3.7.4 Darwin/18.0.0 botocore/1.12.194", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"nextToken": "eyJ2IjoiMiIsImMiOiJyU1JnalhsYTlqYm1xY3RraHk0Rmt2bEdURkdVS1lXWis0TzV1NS9tMDFrR1c3Lzc1WmN6YkYyYm1sS2RZM2ZsSFVJTHZiK1dzd053MzBPTFNTYkxRNG9OZFhTZUNUbG1RZHkrd1h3VlFSVkJpdldyTk9YQzJ3WjdFYWxSeEc2SDk1eWpJQ2FDRkJkM0NMS01sZjZvRk9XSzR1UEhqZkI5cGpWcXVIOWNKcXZSZDBxNXR3SG8xU2cyYnRBSFZ1ZmcwYWFVdW0zeG9kUG1ldz09IiwicyI6IjEifQ==", "maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "f2a7a46e-afcb-4dc9-9274-bfd622f1163d", "record_id": "flaws_cloudtrail:0000428:f2a7a46e-afcb-4dc9-9274-bfd622f1163d", "row_index": 428, "timestamp": "2019-07-24T13:15:46Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "218.206.236.1", "user_agent": "aws-cli/1.16.204 Python/3.7.4 Darwin/18.0.0 botocore/1.12.194", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1079, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "f2a7a46e-afcb-4dc9-9274-bfd622f1163d", "eventTime": "2019-07-24T13:15:46Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "218.206.236.1", "userAgent": "aws-cli/1.16.204 Python/3.7.4 Darwin/18.0.0 botocore/1.12.194", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"nextToken": "eyJ2IjoiMiIsImMiOiJyU1JnalhsYTlqYm1xY3RraHk0Rmt2bEdURkdVS1lXWis0TzV1NS9tMDFrR1c3Lzc1WmN6YkYyYm1sS2RZM2ZsSFVJTHZiK1dzd053MzBPTFNTYkxRNG9OZFhTZUNUbG1RZHkrd1h3VlFSVkJpdldyTk9YQzJ3WjdFYWxSeEc2SDk1eWpJQ2FDRkJkM0NMS01sZjZvRk9XSzR1UEhqZkI5cGpWcXVIOWNKcXZSZDBxNXR3SG8xU2cyYnRBSFZ1ZmcwYWFVdW0zeG9kUG1ldz09IiwicyI6IjEifQ==", "maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "d012bb89-0b39-4a72-8e7b-a0d30bfd5f0b", "record_id": "flaws_cloudtrail:0000429:d012bb89-0b39-4a72-8e7b-a0d30bfd5f0b", "row_index": 429, "timestamp": "2019-07-24T13:15:47Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "218.206.236.1", "user_agent": "aws-cli/1.16.204 Python/3.7.4 Darwin/18.0.0 botocore/1.12.194", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1071, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "d012bb89-0b39-4a72-8e7b-a0d30bfd5f0b", "eventTime": "2019-07-24T13:15:47Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "218.206.236.1", "userAgent": "aws-cli/1.16.204 Python/3.7.4 Darwin/18.0.0 botocore/1.12.194", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"nextToken": "eyJ2IjoiMiIsImMiOiI2QUxkRys1ZzE0dXQvT3pvU1RldkFJcXRYanoyeDlZQ0xSMk94MDBoM1BydElXYWUyU0tHT1k4cUJFYnEwMWtvR2RIL0JoL2piWGt4TzdETmRydkNzWFdCYk9QaTNLRU1iUmtKSXJCUkM3eWpDM0hORGVkRUZvMldiYWZWZHdVdU5SRnNoZDZWT2l2UWVDYUo5V0tRVFdYVllURTZHckRqK0VYUHJ6WDFsdGpQNyt5OElvbVVCSWFZUUZYVk93cmtVVVhTUlArOHNnPT0iLCJzIjoiMSJ9", "maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "d012bb89-0b39-4a72-8e7b-a0d30bfd5f0b", "record_id": "flaws_cloudtrail:0000430:d012bb89-0b39-4a72-8e7b-a0d30bfd5f0b", "row_index": 430, "timestamp": "2019-07-24T13:15:47Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "218.206.236.1", "user_agent": "aws-cli/1.16.204 Python/3.7.4 Darwin/18.0.0 botocore/1.12.194", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1071, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "d012bb89-0b39-4a72-8e7b-a0d30bfd5f0b", "eventTime": "2019-07-24T13:15:47Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "218.206.236.1", "userAgent": "aws-cli/1.16.204 Python/3.7.4 Darwin/18.0.0 botocore/1.12.194", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"nextToken": "eyJ2IjoiMiIsImMiOiI2QUxkRys1ZzE0dXQvT3pvU1RldkFJcXRYanoyeDlZQ0xSMk94MDBoM1BydElXYWUyU0tHT1k4cUJFYnEwMWtvR2RIL0JoL2piWGt4TzdETmRydkNzWFdCYk9QaTNLRU1iUmtKSXJCUkM3eWpDM0hORGVkRUZvMldiYWZWZHdVdU5SRnNoZDZWT2l2UWVDYUo5V0tRVFdYVllURTZHckRqK0VYUHJ6WDFsdGpQNyt5OElvbVVCSWFZUUZYVk93cmtVVVhTUlArOHNnPT0iLCJzIjoiMSJ9", "maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "42b50229-0ffa-446f-8183-ac2d2face172", "record_id": "flaws_cloudtrail:0000431:42b50229-0ffa-446f-8183-ac2d2face172", "row_index": 431, "timestamp": "2019-07-24T13:15:49Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "218.206.236.1", "user_agent": "aws-cli/1.16.204 Python/3.7.4 Darwin/18.0.0 botocore/1.12.194", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1079, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "42b50229-0ffa-446f-8183-ac2d2face172", "eventTime": "2019-07-24T13:15:49Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "218.206.236.1", "userAgent": "aws-cli/1.16.204 Python/3.7.4 Darwin/18.0.0 botocore/1.12.194", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"nextToken": "eyJ2IjoiMiIsImMiOiJpNFBjbE14eGFBTGJrZGVWcjFMUG53THZUTCtoSWNHVDE1RVhDcDhSQTFiVlY1UWVmZUZHdFplQVJ1aXBrZ2lTUlJKTW1laUtpZWtZUzFFYkY0bWlkN2hSSmZucTc1aVV1V3NqeHdMZFFZVHl2aktBaVRaUGN0emFvT1E1QVdEY2lIa2FZdklEMlM3bjNXS0NZQ0t5ZTQweGwySWJIU1B2ZEVlNm9XbjV1azJzZFpDaUp5WjFNNndiSUlQUGhjanR1WXJjRnFjbTdSMWRKdz09IiwicyI6IjEifQ==", "maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "42b50229-0ffa-446f-8183-ac2d2face172", "record_id": "flaws_cloudtrail:0000432:42b50229-0ffa-446f-8183-ac2d2face172", "row_index": 432, "timestamp": "2019-07-24T13:15:49Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "218.206.236.1", "user_agent": "aws-cli/1.16.204 Python/3.7.4 Darwin/18.0.0 botocore/1.12.194", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1079, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "42b50229-0ffa-446f-8183-ac2d2face172", "eventTime": "2019-07-24T13:15:49Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "218.206.236.1", "userAgent": "aws-cli/1.16.204 Python/3.7.4 Darwin/18.0.0 botocore/1.12.194", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"nextToken": "eyJ2IjoiMiIsImMiOiJpNFBjbE14eGFBTGJrZGVWcjFMUG53THZUTCtoSWNHVDE1RVhDcDhSQTFiVlY1UWVmZUZHdFplQVJ1aXBrZ2lTUlJKTW1laUtpZWtZUzFFYkY0bWlkN2hSSmZucTc1aVV1V3NqeHdMZFFZVHl2aktBaVRaUGN0emFvT1E1QVdEY2lIa2FZdklEMlM3bjNXS0NZQ0t5ZTQweGwySWJIU1B2ZEVlNm9XbjV1azJzZFpDaUp5WjFNNndiSUlQUGhjanR1WXJjRnFjbTdSMWRKdz09IiwicyI6IjEifQ==", "maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "cf1b167c-7fe9-443b-9439-39f58f63cdd7", "record_id": "flaws_cloudtrail:0000433:cf1b167c-7fe9-443b-9439-39f58f63cdd7", "row_index": 433, "timestamp": "2019-07-24T13:15:50Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "218.206.236.1", "user_agent": "aws-cli/1.16.204 Python/3.7.4 Darwin/18.0.0 botocore/1.12.194", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1079, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "cf1b167c-7fe9-443b-9439-39f58f63cdd7", "eventTime": "2019-07-24T13:15:50Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "218.206.236.1", "userAgent": "aws-cli/1.16.204 Python/3.7.4 Darwin/18.0.0 botocore/1.12.194", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"nextToken": "eyJ2IjoiMiIsImMiOiJhRmJVc0d2QmFYUnFaRW0zV0tlQkc1MnhCWU1lY0d4cmtvVjBMQTI2dTFkOG5RYzVoQ2hSa09GNkZhYUlPYlZLV3cwSzBHdk9aSXFXb3A5emVDWTJnQ09MZ2xURkM2UGFKWVl4R2xUbENMaWVCZ2hTNlhyby9YbzFldFMzOTY5NzB5aTJSczdjNmhkRHpTSTI4WlM5enluK0xjWEF1em95NFdJbVdnc01oNW11M2xwb2V6WmJIbFRUcUFLNWhyUkpJYnA3QnFteWhCNUtTUT09IiwicyI6IjEifQ==", "maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "cf1b167c-7fe9-443b-9439-39f58f63cdd7", "record_id": "flaws_cloudtrail:0000434:cf1b167c-7fe9-443b-9439-39f58f63cdd7", "row_index": 434, "timestamp": "2019-07-24T13:15:50Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "218.206.236.1", "user_agent": "aws-cli/1.16.204 Python/3.7.4 Darwin/18.0.0 botocore/1.12.194", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1079, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "cf1b167c-7fe9-443b-9439-39f58f63cdd7", "eventTime": "2019-07-24T13:15:50Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "218.206.236.1", "userAgent": "aws-cli/1.16.204 Python/3.7.4 Darwin/18.0.0 botocore/1.12.194", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"nextToken": "eyJ2IjoiMiIsImMiOiJhRmJVc0d2QmFYUnFaRW0zV0tlQkc1MnhCWU1lY0d4cmtvVjBMQTI2dTFkOG5RYzVoQ2hSa09GNkZhYUlPYlZLV3cwSzBHdk9aSXFXb3A5emVDWTJnQ09MZ2xURkM2UGFKWVl4R2xUbENMaWVCZ2hTNlhyby9YbzFldFMzOTY5NzB5aTJSczdjNmhkRHpTSTI4WlM5enluK0xjWEF1em95NFdJbVdnc01oNW11M2xwb2V6WmJIbFRUcUFLNWhyUkpJYnA3QnFteWhCNUtTUT09IiwicyI6IjEifQ==", "maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "9c2876bb-68e3-439c-b2f7-34ff7c6c51c0", "record_id": "flaws_cloudtrail:0000435:9c2876bb-68e3-439c-b2f7-34ff7c6c51c0", "row_index": 435, "timestamp": "2019-07-24T13:15:51Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "218.206.236.1", "user_agent": "aws-cli/1.16.204 Python/3.7.4 Darwin/18.0.0 botocore/1.12.194", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1072, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "9c2876bb-68e3-439c-b2f7-34ff7c6c51c0", "eventTime": "2019-07-24T13:15:51Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "218.206.236.1", "userAgent": "aws-cli/1.16.204 Python/3.7.4 Darwin/18.0.0 botocore/1.12.194", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"nextToken": "eyJ2IjoiMiIsImMiOiI4RENHOWt1Q3g2Ky85QkpOVnQ0cEVtUUxkTW1SK2wvT2ZJRkJ2eXhtMkdmRHo5OTZNRXloT2xxMVZlRXdqczdsTStjb25HSHA2THRXcEpsZXZaa2I5MUh5MCtrbEJhN3dGdHBnS25JeFgyUGU4b3pRVWVLTEFiRVNXbkdnVFVTcCtQZG82WUpvSVFnRHZvQ0hKRmpxbzZOMlE2dkFJQVJtUnRldVV1dmZOc3BDRXFLL09VUDczVHdCaTAwWnhKRndqWG1uaCtwU1hraz0iLCJzIjoiMSJ9", "maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "9c2876bb-68e3-439c-b2f7-34ff7c6c51c0", "record_id": "flaws_cloudtrail:0000436:9c2876bb-68e3-439c-b2f7-34ff7c6c51c0", "row_index": 436, "timestamp": "2019-07-24T13:15:51Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "218.206.236.1", "user_agent": "aws-cli/1.16.204 Python/3.7.4 Darwin/18.0.0 botocore/1.12.194", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1072, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "9c2876bb-68e3-439c-b2f7-34ff7c6c51c0", "eventTime": "2019-07-24T13:15:51Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "218.206.236.1", "userAgent": "aws-cli/1.16.204 Python/3.7.4 Darwin/18.0.0 botocore/1.12.194", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"nextToken": "eyJ2IjoiMiIsImMiOiI4RENHOWt1Q3g2Ky85QkpOVnQ0cEVtUUxkTW1SK2wvT2ZJRkJ2eXhtMkdmRHo5OTZNRXloT2xxMVZlRXdqczdsTStjb25HSHA2THRXcEpsZXZaa2I5MUh5MCtrbEJhN3dGdHBnS25JeFgyUGU4b3pRVWVLTEFiRVNXbkdnVFVTcCtQZG82WUpvSVFnRHZvQ0hKRmpxbzZOMlE2dkFJQVJtUnRldVV1dmZOc3BDRXFLL09VUDczVHdCaTAwWnhKRndqWG1uaCtwU1hraz0iLCJzIjoiMSJ9", "maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "044bf401-f6f4-48d1-acef-327434aa8c95", "record_id": "flaws_cloudtrail:0000437:044bf401-f6f4-48d1-acef-327434aa8c95", "row_index": 437, "timestamp": "2019-07-24T13:15:52Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "218.206.236.1", "user_agent": "aws-cli/1.16.204 Python/3.7.4 Darwin/18.0.0 botocore/1.12.194", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1079, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "044bf401-f6f4-48d1-acef-327434aa8c95", "eventTime": "2019-07-24T13:15:52Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "218.206.236.1", "userAgent": "aws-cli/1.16.204 Python/3.7.4 Darwin/18.0.0 botocore/1.12.194", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"nextToken": "eyJ2IjoiMiIsImMiOiJ0aTdPQXNCK1hrdFRYdGtyZ3dWeTRxS0hOL1RsaHNOV2F1VncxS0tQUkRXR2xMSmlOVmRPTjZEMXZSVmpHYmRXRWJSVHRrNm92ODRyNmpyeThGbFJMZXE5R0dmLzNGNzJDdHNxQVc3OHdPcithSVB2cWRrYmhIZ2ZqR3ZJcWNhZXZJVjcwb0NpWGE4bitadEhFNnp1MDQ5QUpVRVJjb1lDS3lNMXpIVCtwK3dnT0Uyc2V0MzZlNDhxanNFRkJ5UTZnanZqRWxjM0o0aGNDdz09IiwicyI6IjEifQ==", "maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "044bf401-f6f4-48d1-acef-327434aa8c95", "record_id": "flaws_cloudtrail:0000438:044bf401-f6f4-48d1-acef-327434aa8c95", "row_index": 438, "timestamp": "2019-07-24T13:15:52Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "218.206.236.1", "user_agent": "aws-cli/1.16.204 Python/3.7.4 Darwin/18.0.0 botocore/1.12.194", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1079, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "044bf401-f6f4-48d1-acef-327434aa8c95", "eventTime": "2019-07-24T13:15:52Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "218.206.236.1", "userAgent": "aws-cli/1.16.204 Python/3.7.4 Darwin/18.0.0 botocore/1.12.194", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"nextToken": "eyJ2IjoiMiIsImMiOiJ0aTdPQXNCK1hrdFRYdGtyZ3dWeTRxS0hOL1RsaHNOV2F1VncxS0tQUkRXR2xMSmlOVmRPTjZEMXZSVmpHYmRXRWJSVHRrNm92ODRyNmpyeThGbFJMZXE5R0dmLzNGNzJDdHNxQVc3OHdPcithSVB2cWRrYmhIZ2ZqR3ZJcWNhZXZJVjcwb0NpWGE4bitadEhFNnp1MDQ5QUpVRVJjb1lDS3lNMXpIVCtwK3dnT0Uyc2V0MzZlNDhxanNFRkJ5UTZnanZqRWxjM0o0aGNDdz09IiwicyI6IjEifQ==", "maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "cb21baea-52a7-4e12-95d3-3524f5d8f358", "record_id": "flaws_cloudtrail:0000439:cb21baea-52a7-4e12-95d3-3524f5d8f358", "row_index": 439, "timestamp": "2019-07-24T13:15:53Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "218.206.236.1", "user_agent": "aws-cli/1.16.204 Python/3.7.4 Darwin/18.0.0 botocore/1.12.194", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1071, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "cb21baea-52a7-4e12-95d3-3524f5d8f358", "eventTime": "2019-07-24T13:15:53Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "218.206.236.1", "userAgent": "aws-cli/1.16.204 Python/3.7.4 Darwin/18.0.0 botocore/1.12.194", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"nextToken": "eyJ2IjoiMiIsImMiOiIxcDNOdVlib1E3VGVCbjhQUDB2TGdTME8ya2pMRlFid3BKcHNmaHp1OTI4WVVLU0kwMTREUU5EK3dCanFSTjBVeE95ZHRQV2lKL1RYd3ZhMDlKbXBkSmcrNlZ1RlhRVU45dGlMa29kcmc2VG4rQUlpY2w2aU9pcGZOb3hkRTRxR3pCMDlqNWxyZ2JXRzFsczRpM21wNkpkOG1XZ1JNZ1pRVmZ0TXJ0QmlzYWcyVngzYlljYitlakp2OFh3MFRnZGFVUzBGbW5IZTRRPT0iLCJzIjoiMSJ9", "maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "cb21baea-52a7-4e12-95d3-3524f5d8f358", "record_id": "flaws_cloudtrail:0000440:cb21baea-52a7-4e12-95d3-3524f5d8f358", "row_index": 440, "timestamp": "2019-07-24T13:15:53Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "218.206.236.1", "user_agent": "aws-cli/1.16.204 Python/3.7.4 Darwin/18.0.0 botocore/1.12.194", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1071, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "cb21baea-52a7-4e12-95d3-3524f5d8f358", "eventTime": "2019-07-24T13:15:53Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "218.206.236.1", "userAgent": "aws-cli/1.16.204 Python/3.7.4 Darwin/18.0.0 botocore/1.12.194", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"nextToken": "eyJ2IjoiMiIsImMiOiIxcDNOdVlib1E3VGVCbjhQUDB2TGdTME8ya2pMRlFid3BKcHNmaHp1OTI4WVVLU0kwMTREUU5EK3dCanFSTjBVeE95ZHRQV2lKL1RYd3ZhMDlKbXBkSmcrNlZ1RlhRVU45dGlMa29kcmc2VG4rQUlpY2w2aU9pcGZOb3hkRTRxR3pCMDlqNWxyZ2JXRzFsczRpM21wNkpkOG1XZ1JNZ1pRVmZ0TXJ0QmlzYWcyVngzYlljYitlakp2OFh3MFRnZGFVUzBGbW5IZTRRPT0iLCJzIjoiMSJ9", "maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "63ef1974-32a0-42b0-87c9-220e785357bd7", "record_id": "flaws_cloudtrail:0000441:63ef1974-32a0-42b0-87c9-220e785357bd7", "row_index": 441, "timestamp": "2019-07-24T13:15:55Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "218.206.236.1", "user_agent": "aws-cli/1.16.204 Python/3.7.4 Darwin/18.0.0 botocore/1.12.194", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1078, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "63ef1974-32a0-42b0-87c9-220e785357bd7", "eventTime": "2019-07-24T13:15:55Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "218.206.236.1", "userAgent": "aws-cli/1.16.204 Python/3.7.4 Darwin/18.0.0 botocore/1.12.194", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"nextToken": "eyJ2IjoiMiIsImMiOiJNN0VPbDdYQXJ2UURTdW5wMDJjZEJ0STFEd2FzL3RVNXkwY2VWeXhlZmhSdkhOK2dmTE1KTi9ETVZLS2NtSHk3SkFWYW8wQ0hXYzJSeHlJTnlpUk9XZ3U5M05UbUI2a09vY3ZOaXBxZHo1ZkIrQ0Y3UnhYRVJUdklKbEgyU0dINVpaUTF4Y0ZnMFNiMlcxczBFMzYvUlRpYUVBTGZ5YmJkQTZnd0hId29MZlZITWhFZUtHR0N4Sk1EVkFSUlVNYjJGVjNJUEsvWTI3SUFBUT09IiwicyI6IjEifQ==", "maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "63ef1974-32a0-42b0-87c9-220e785357bd7", "record_id": "flaws_cloudtrail:0000442:63ef1974-32a0-42b0-87c9-220e785357bd7", "row_index": 442, "timestamp": "2019-07-24T13:15:55Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "218.206.236.1", "user_agent": "aws-cli/1.16.204 Python/3.7.4 Darwin/18.0.0 botocore/1.12.194", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1078, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "63ef1974-32a0-42b0-87c9-220e785357bd7", "eventTime": "2019-07-24T13:15:55Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "218.206.236.1", "userAgent": "aws-cli/1.16.204 Python/3.7.4 Darwin/18.0.0 botocore/1.12.194", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"nextToken": "eyJ2IjoiMiIsImMiOiJNN0VPbDdYQXJ2UURTdW5wMDJjZEJ0STFEd2FzL3RVNXkwY2VWeXhlZmhSdkhOK2dmTE1KTi9ETVZLS2NtSHk3SkFWYW8wQ0hXYzJSeHlJTnlpUk9XZ3U5M05UbUI2a09vY3ZOaXBxZHo1ZkIrQ0Y3UnhYRVJUdklKbEgyU0dINVpaUTF4Y0ZnMFNiMlcxczBFMzYvUlRpYUVBTGZ5YmJkQTZnd0hId29MZlZITWhFZUtHR0N4Sk1EVkFSUlVNYjJGVjNJUEsvWTI3SUFBUT09IiwicyI6IjEifQ==", "maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "1f825772a-bce2-470a-9bb8-110e6ea94874", "record_id": "flaws_cloudtrail:0000443:1f825772a-bce2-470a-9bb8-110e6ea94874", "row_index": 443, "timestamp": "2019-07-24T13:15:57Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "218.206.236.1", "user_agent": "aws-cli/1.16.204 Python/3.7.4 Darwin/18.0.0 botocore/1.12.194", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1080, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "1f825772a-bce2-470a-9bb8-110e6ea94874", "eventTime": "2019-07-24T13:15:57Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "218.206.236.1", "userAgent": "aws-cli/1.16.204 Python/3.7.4 Darwin/18.0.0 botocore/1.12.194", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"nextToken": "eyJ2IjoiMiIsImMiOiJRSGhGMHgyWnhQWXlQVnlXOWZiZ1k5L2I3eXIyR1l2WUtFdVRWMEFwUHZGcWlDVllKL29UVHZDckkvQi82REhQUzROK3I5M2daSlNBZWJQUnFsMTZ5OXY1OFNERXh1N0ZIM1ZKdnlaVmE4RHJmQzJlUGxCTlV1Mkc4ZG96ZHVnb3BzZnBRMjJmOC9XSlhmanh3akpEZ2NBYXk0VmZpWkl3UzNwQXFzaGxYUFVnWkxUZjNGRVNDTGtJNTNqeHRIOUNEczdlTEJZb2s5bVpXdz09IiwicyI6IjEifQ==", "maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "1f825772a-bce2-470a-9bb8-110e6ea94874", "record_id": "flaws_cloudtrail:0000444:1f825772a-bce2-470a-9bb8-110e6ea94874", "row_index": 444, "timestamp": "2019-07-24T13:15:57Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "218.206.236.1", "user_agent": "aws-cli/1.16.204 Python/3.7.4 Darwin/18.0.0 botocore/1.12.194", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1080, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "1f825772a-bce2-470a-9bb8-110e6ea94874", "eventTime": "2019-07-24T13:15:57Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "218.206.236.1", "userAgent": "aws-cli/1.16.204 Python/3.7.4 Darwin/18.0.0 botocore/1.12.194", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"nextToken": "eyJ2IjoiMiIsImMiOiJRSGhGMHgyWnhQWXlQVnlXOWZiZ1k5L2I3eXIyR1l2WUtFdVRWMEFwUHZGcWlDVllKL29UVHZDckkvQi82REhQUzROK3I5M2daSlNBZWJQUnFsMTZ5OXY1OFNERXh1N0ZIM1ZKdnlaVmE4RHJmQzJlUGxCTlV1Mkc4ZG96ZHVnb3BzZnBRMjJmOC9XSlhmanh3akpEZ2NBYXk0VmZpWkl3UzNwQXFzaGxYUFVnWkxUZjNGRVNDTGtJNTNqeHRIOUNEczdlTEJZb2s5bVpXdz09IiwicyI6IjEifQ==", "maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "10798d42-9478-44ab-9c55-37c938d35b9b", "record_id": "flaws_cloudtrail:0000445:10798d42-9478-44ab-9c55-37c938d35b9b", "row_index": 445, "timestamp": "2019-07-24T13:15:58Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "218.206.236.1", "user_agent": "aws-cli/1.16.204 Python/3.7.4 Darwin/18.0.0 botocore/1.12.194", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1071, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "10798d42-9478-44ab-9c55-37c938d35b9b", "eventTime": "2019-07-24T13:15:58Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "218.206.236.1", "userAgent": "aws-cli/1.16.204 Python/3.7.4 Darwin/18.0.0 botocore/1.12.194", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"nextToken": "eyJ2IjoiMiIsImMiOiJvaWh6bjhtMXl2eStXTkNCdGkveGZkbVIwamc4dzRldmh1a2lSQ3pIa0R1NitsK3FVU3RWWHlXbEF5R29pNTdnUjNVRkFObTdyUThTOHc2V1V1N1E2Vis0bUt0VTE2bCtrNlptdENsMTJjbW9xZDI5V2lwT2tOT01rejYzTVZLSjJheEJlVEQydEYvVGdUa21ENkpKM1llUm02bmc1b3VXU1UwL2xpUVcxUEFyNHp5VzVyamdaOXl6aUMxKzNIQ21rcCtWcmNYTnVaRT0iLCJzIjoiMSJ9", "maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "10798d42-9478-44ab-9c55-37c938d35b9b", "record_id": "flaws_cloudtrail:0000446:10798d42-9478-44ab-9c55-37c938d35b9b", "row_index": 446, "timestamp": "2019-07-24T13:15:58Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "218.206.236.1", "user_agent": "aws-cli/1.16.204 Python/3.7.4 Darwin/18.0.0 botocore/1.12.194", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1071, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "10798d42-9478-44ab-9c55-37c938d35b9b", "eventTime": "2019-07-24T13:15:58Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "218.206.236.1", "userAgent": "aws-cli/1.16.204 Python/3.7.4 Darwin/18.0.0 botocore/1.12.194", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"nextToken": "eyJ2IjoiMiIsImMiOiJvaWh6bjhtMXl2eStXTkNCdGkveGZkbVIwamc4dzRldmh1a2lSQ3pIa0R1NitsK3FVU3RWWHlXbEF5R29pNTdnUjNVRkFObTdyUThTOHc2V1V1N1E2Vis0bUt0VTE2bCtrNlptdENsMTJjbW9xZDI5V2lwT2tOT01rejYzTVZLSjJheEJlVEQydEYvVGdUa21ENkpKM1llUm02bmc1b3VXU1UwL2xpUVcxUEFyNHp5VzVyamdaOXl6aUMxKzNIQ21rcCtWcmNYTnVaRT0iLCJzIjoiMSJ9", "maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "f71e4dc5-b96b-4663-946f-027c85aabd5e", "record_id": "flaws_cloudtrail:0000447:f71e4dc5-b96b-4663-946f-027c85aabd5e", "row_index": 447, "timestamp": "2019-07-24T13:15:59Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "218.206.236.1", "user_agent": "aws-cli/1.16.204 Python/3.7.4 Darwin/18.0.0 botocore/1.12.194", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1071, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "f71e4dc5-b96b-4663-946f-027c85aabd5e", "eventTime": "2019-07-24T13:15:59Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "218.206.236.1", "userAgent": "aws-cli/1.16.204 Python/3.7.4 Darwin/18.0.0 botocore/1.12.194", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"nextToken": "eyJ2IjoiMiIsImMiOiJ6NjFtSUNwd1dpS2Y3NjAvZzVkUmZMVGYyUWRPWkhjazFsaWpISXR2ci9RKzJaV1FqK2JXZFFIZStyUFVIamhSaUlROHE4YksyaFQxbW9ucVp3bXR2enlCSW83eDFhdHI4aUp4NDZoMnBkbGNGYiszR29lMHVBNlVyYjJRcWJxbTd5eWl6WTlzTVBsZEpsOEdaVWlFZUIzcUNFd2FhVlJ1RlByT052Y3dZcW1lSnE4S0F0Tk9TV2RXYUZuTXM2d1QrSUVkb0ZGNUswdz0iLCJzIjoiMSJ9", "maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "f71e4dc5-b96b-4663-946f-027c85aabd5e", "record_id": "flaws_cloudtrail:0000448:f71e4dc5-b96b-4663-946f-027c85aabd5e", "row_index": 448, "timestamp": "2019-07-24T13:15:59Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "218.206.236.1", "user_agent": "aws-cli/1.16.204 Python/3.7.4 Darwin/18.0.0 botocore/1.12.194", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1071, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "f71e4dc5-b96b-4663-946f-027c85aabd5e", "eventTime": "2019-07-24T13:15:59Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "218.206.236.1", "userAgent": "aws-cli/1.16.204 Python/3.7.4 Darwin/18.0.0 botocore/1.12.194", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"nextToken": "eyJ2IjoiMiIsImMiOiJ6NjFtSUNwd1dpS2Y3NjAvZzVkUmZMVGYyUWRPWkhjazFsaWpISXR2ci9RKzJaV1FqK2JXZFFIZStyUFVIamhSaUlROHE4YksyaFQxbW9ucVp3bXR2enlCSW83eDFhdHI4aUp4NDZoMnBkbGNGYiszR29lMHVBNlVyYjJRcWJxbTd5eWl6WTlzTVBsZEpsOEdaVWlFZUIzcUNFd2FhVlJ1RlByT052Y3dZcW1lSnE4S0F0Tk9TV2RXYUZuTXM2d1QrSUVkb0ZGNUswdz0iLCJzIjoiMSJ9", "maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "c81b7c63-1660-4b52-a8c0-614ba8e6f19e", "record_id": "flaws_cloudtrail:0000449:c81b7c63-1660-4b52-a8c0-614ba8e6f19e", "row_index": 449, "timestamp": "2019-07-24T13:16:00Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "218.206.236.1", "user_agent": "aws-cli/1.16.204 Python/3.7.4 Darwin/18.0.0 botocore/1.12.194", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1099, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "c81b7c63-1660-4b52-a8c0-614ba8e6f19e", "eventTime": "2019-07-24T13:16:00Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "218.206.236.1", "userAgent": "aws-cli/1.16.204 Python/3.7.4 Darwin/18.0.0 botocore/1.12.194", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"nextToken": "eyJ2IjoiMiIsImMiOiJsc3YxMExaMW1lSWpuWllpTnNXY3h1Vy83OWpOMGpBV2RLd3VsbGdvbTZjVlBiZVJyQjA1c2sxTkNHdE5wWFozdnliR1MzbExiSnRmNGRSRmVCeVdGbnBKOERadEwydXJUdFVsL080cHp4N2R2VURKKzN3UG9vaHlaczJyN3R1dWs1dXdncnM1RmVOQ2tyWThiYWlJYTA1cU1xUnV2SWFTQ21mOFd1elNsVXlnOFllc0dEVERVWUE5M0xlaU5HVjNqSDlaTDhpMm9RdDRYWDB5WXRiTnpTRXkxd01mZ2dFPSIsInMiOiIxIn0=", "maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "c81b7c63-1660-4b52-a8c0-614ba8e6f19e", "record_id": "flaws_cloudtrail:0000450:c81b7c63-1660-4b52-a8c0-614ba8e6f19e", "row_index": 450, "timestamp": "2019-07-24T13:16:00Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "218.206.236.1", "user_agent": "aws-cli/1.16.204 Python/3.7.4 Darwin/18.0.0 botocore/1.12.194", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1099, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "c81b7c63-1660-4b52-a8c0-614ba8e6f19e", "eventTime": "2019-07-24T13:16:00Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "218.206.236.1", "userAgent": "aws-cli/1.16.204 Python/3.7.4 Darwin/18.0.0 botocore/1.12.194", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"nextToken": "eyJ2IjoiMiIsImMiOiJsc3YxMExaMW1lSWpuWllpTnNXY3h1Vy83OWpOMGpBV2RLd3VsbGdvbTZjVlBiZVJyQjA1c2sxTkNHdE5wWFozdnliR1MzbExiSnRmNGRSRmVCeVdGbnBKOERadEwydXJUdFVsL080cHp4N2R2VURKKzN3UG9vaHlaczJyN3R1dWs1dXdncnM1RmVOQ2tyWThiYWlJYTA1cU1xUnV2SWFTQ21mOFd1elNsVXlnOFllc0dEVERVWUE5M0xlaU5HVjNqSDlaTDhpMm9RdDRYWDB5WXRiTnpTRXkxd01mZ2dFPSIsInMiOiIxIn0=", "maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "f41811-dd0b-4ff1-928b-6d78dabb1d44", "record_id": "flaws_cloudtrail:0000451:f41811-dd0b-4ff1-928b-6d78dabb1d44", "row_index": 451, "timestamp": "2019-07-24T13:16:01Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "218.206.236.1", "user_agent": "aws-cli/1.16.204 Python/3.7.4 Darwin/18.0.0 botocore/1.12.194", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1085, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "f41811-dd0b-4ff1-928b-6d78dabb1d44", "eventTime": "2019-07-24T13:16:01Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "218.206.236.1", "userAgent": "aws-cli/1.16.204 Python/3.7.4 Darwin/18.0.0 botocore/1.12.194", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"nextToken": "eyJ2IjoiMiIsImMiOiJBVHZQek1SMzJwV1ZTcUlyVDJpVU9YaXFRMFhsSW1FNjVxL2VOMXhYSVQ5UXhiakhvTXA0b2wwakpKc09pUWpWT3F5RXVOckpDajZVV1dYcXJuTW1uNnozejU0ZWRzNTBIaFJqenR3Z3pjcmRES0dZZ3NaMWZSYjEzd2xNc1JWK1lKQTdEYW4zcUhsTG1UTkg0OEJsMDFCVXVhNS9GR3NiY0pLM0FHY2hrNWRlQ0o1WXBmeG1PV0hPdVhGV3dHQjJ1YmlSSTVhSC9ETHhmNVJCNDdOaCtRPT0iLCJzIjoiMSJ9", "maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "f41811-dd0b-4ff1-928b-6d78dabb1d44", "record_id": "flaws_cloudtrail:0000452:f41811-dd0b-4ff1-928b-6d78dabb1d44", "row_index": 452, "timestamp": "2019-07-24T13:16:01Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "218.206.236.1", "user_agent": "aws-cli/1.16.204 Python/3.7.4 Darwin/18.0.0 botocore/1.12.194", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1085, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "f41811-dd0b-4ff1-928b-6d78dabb1d44", "eventTime": "2019-07-24T13:16:01Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "218.206.236.1", "userAgent": "aws-cli/1.16.204 Python/3.7.4 Darwin/18.0.0 botocore/1.12.194", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"nextToken": "eyJ2IjoiMiIsImMiOiJBVHZQek1SMzJwV1ZTcUlyVDJpVU9YaXFRMFhsSW1FNjVxL2VOMXhYSVQ5UXhiakhvTXA0b2wwakpKc09pUWpWT3F5RXVOckpDajZVV1dYcXJuTW1uNnozejU0ZWRzNTBIaFJqenR3Z3pjcmRES0dZZ3NaMWZSYjEzd2xNc1JWK1lKQTdEYW4zcUhsTG1UTkg0OEJsMDFCVXVhNS9GR3NiY0pLM0FHY2hrNWRlQ0o1WXBmeG1PV0hPdVhGV3dHQjJ1YmlSSTVhSC9ETHhmNVJCNDdOaCtRPT0iLCJzIjoiMSJ9", "maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "4acc211d-ace3-4039-8b63-8ccf8bfe3fab", "record_id": "flaws_cloudtrail:0000453:4acc211d-ace3-4039-8b63-8ccf8bfe3fab", "row_index": 453, "timestamp": "2019-07-24T13:16:02Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "218.206.236.1", "user_agent": "aws-cli/1.16.204 Python/3.7.4 Darwin/18.0.0 botocore/1.12.194", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1099, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "4acc211d-ace3-4039-8b63-8ccf8bfe3fab", "eventTime": "2019-07-24T13:16:02Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "218.206.236.1", "userAgent": "aws-cli/1.16.204 Python/3.7.4 Darwin/18.0.0 botocore/1.12.194", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"nextToken": "eyJ2IjoiMiIsImMiOiJGcWJaT3F4eE1WYU1CdUFaMlRlUkRyNGl0K01MYUVva1RDeTcwK1Z5QnJ6eXMzNFR2eWZtbzVoQU50ai9ESzFqbHJmUndta01tM1RPdjNVanhhMFdSRDY4UVdSYk1XbzVoY0NSRE9YcDRwOWc5MlV6Rm1Fb2NkVDhOR0RHZy95LzZtRE8wckNjL3BMQU1tb1IwYnF3SjgrWWJjOWgxQndFSVhzYmtlajYxMnpEenNQd2UxU1pWZ0Q0eTc1RU9WaVV4eC9LSm5vOVMwMitDMEpKMVZsemFzSi9NNnY5N0xFPSIsInMiOiIxIn0=", "maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "52645e-360a-4f3e-8a8b-b20b6d6575e6", "record_id": "flaws_cloudtrail:0000454:52645e-360a-4f3e-8a8b-b20b6d6575e6", "row_index": 454, "timestamp": "2019-07-24T13:16:02Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "218.206.236.1", "user_agent": "aws-cli/1.16.204 Python/3.7.4 Darwin/18.0.0 botocore/1.12.194", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1053, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "52645e-360a-4f3e-8a8b-b20b6d6575e6", "eventTime": "2019-07-24T13:16:02Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "218.206.236.1", "userAgent": "aws-cli/1.16.204 Python/3.7.4 Darwin/18.0.0 botocore/1.12.194", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"nextToken": "eyJ2IjoiMiIsImMiOiJQNGJxVUQrdTBqZktNTml1ZWJUSnhiU1NCVC9QRTZVL0pZNjV5RnJQYkpNeTROalc4VDRaUjZwT25tMmF1cUVxTlRMUXZsSTBUSGhzeSticWpqalNSVDcvKy9XK0JmSTh3TVo2Rk9ub1VVVFpzeGtQSkhlemxsV0lRUG9tWTEwZDB2VEg2Y3VFR210U1NTTGE1VEhzRHhvNGIxaW9hZTFrOGtFZFVsdmU0RmRaT2dDN2xNZWVIL1NESGxQeDJ3Yz0iLCJzIjoiMSJ9", "maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "4acc211d-ace3-4039-8b63-8ccf8bfe3fab", "record_id": "flaws_cloudtrail:0000455:4acc211d-ace3-4039-8b63-8ccf8bfe3fab", "row_index": 455, "timestamp": "2019-07-24T13:16:02Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "218.206.236.1", "user_agent": "aws-cli/1.16.204 Python/3.7.4 Darwin/18.0.0 botocore/1.12.194", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1099, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "4acc211d-ace3-4039-8b63-8ccf8bfe3fab", "eventTime": "2019-07-24T13:16:02Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "218.206.236.1", "userAgent": "aws-cli/1.16.204 Python/3.7.4 Darwin/18.0.0 botocore/1.12.194", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"nextToken": "eyJ2IjoiMiIsImMiOiJGcWJaT3F4eE1WYU1CdUFaMlRlUkRyNGl0K01MYUVva1RDeTcwK1Z5QnJ6eXMzNFR2eWZtbzVoQU50ai9ESzFqbHJmUndta01tM1RPdjNVanhhMFdSRDY4UVdSYk1XbzVoY0NSRE9YcDRwOWc5MlV6Rm1Fb2NkVDhOR0RHZy95LzZtRE8wckNjL3BMQU1tb1IwYnF3SjgrWWJjOWgxQndFSVhzYmtlajYxMnpEenNQd2UxU1pWZ0Q0eTc1RU9WaVV4eC9LSm5vOVMwMitDMEpKMVZsemFzSi9NNnY5N0xFPSIsInMiOiIxIn0=", "maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "52645e-360a-4f3e-8a8b-b20b6d6575e6", "record_id": "flaws_cloudtrail:0000456:52645e-360a-4f3e-8a8b-b20b6d6575e6", "row_index": 456, "timestamp": "2019-07-24T13:16:02Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "218.206.236.1", "user_agent": "aws-cli/1.16.204 Python/3.7.4 Darwin/18.0.0 botocore/1.12.194", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1053, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "52645e-360a-4f3e-8a8b-b20b6d6575e6", "eventTime": "2019-07-24T13:16:02Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "218.206.236.1", "userAgent": "aws-cli/1.16.204 Python/3.7.4 Darwin/18.0.0 botocore/1.12.194", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"nextToken": "eyJ2IjoiMiIsImMiOiJQNGJxVUQrdTBqZktNTml1ZWJUSnhiU1NCVC9QRTZVL0pZNjV5RnJQYkpNeTROalc4VDRaUjZwT25tMmF1cUVxTlRMUXZsSTBUSGhzeSticWpqalNSVDcvKy9XK0JmSTh3TVo2Rk9ub1VVVFpzeGtQSkhlemxsV0lRUG9tWTEwZDB2VEg2Y3VFR210U1NTTGE1VEhzRHhvNGIxaW9hZTFrOGtFZFVsdmU0RmRaT2dDN2xNZWVIL1NESGxQeDJ3Yz0iLCJzIjoiMSJ9", "maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "1db0d277-84fd-405a-869f-205bba443d1a", "record_id": "flaws_cloudtrail:0000457:1db0d277-84fd-405a-869f-205bba443d1a", "row_index": 457, "timestamp": "2019-07-24T13:16:03Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "218.206.236.1", "user_agent": "aws-cli/1.16.204 Python/3.7.4 Darwin/18.0.0 botocore/1.12.194", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1099, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "1db0d277-84fd-405a-869f-205bba443d1a", "eventTime": "2019-07-24T13:16:03Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "218.206.236.1", "userAgent": "aws-cli/1.16.204 Python/3.7.4 Darwin/18.0.0 botocore/1.12.194", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"nextToken": "eyJ2IjoiMiIsImMiOiJvM0ZpVEhBM3FXWW9QckJtblhLR2FFY1BvcFZVUWhXYk1kWXVEMVJ0TFJJMXR4ZFVZeEExc1MzbExxVkF2d042RGlVUlBoc0hWa1pyc2VBVkdialY2Y3JaeUxjTU9ZZ2VFcUFpeGJaWnRNOE54alU3aWRDWEZiVDQ4dGUvdnpXVnNranl0c0pCMXQ1dDZXMk5NWFIvZHkvaUtaUnBuN3RuWVZrUkFnWFA0eHBhSkRoZ0E1WXhFSndubDZlbndjb21DdFZRYzA5OUpkSnNCUzFoMjcrR1NJbXJ1NWZsRW5RPSIsInMiOiIxIn0=", "maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "1db0d277-84fd-405a-869f-205bba443d1a", "record_id": "flaws_cloudtrail:0000458:1db0d277-84fd-405a-869f-205bba443d1a", "row_index": 458, "timestamp": "2019-07-24T13:16:03Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "218.206.236.1", "user_agent": "aws-cli/1.16.204 Python/3.7.4 Darwin/18.0.0 botocore/1.12.194", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1099, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "1db0d277-84fd-405a-869f-205bba443d1a", "eventTime": "2019-07-24T13:16:03Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "218.206.236.1", "userAgent": "aws-cli/1.16.204 Python/3.7.4 Darwin/18.0.0 botocore/1.12.194", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"nextToken": "eyJ2IjoiMiIsImMiOiJvM0ZpVEhBM3FXWW9QckJtblhLR2FFY1BvcFZVUWhXYk1kWXVEMVJ0TFJJMXR4ZFVZeEExc1MzbExxVkF2d042RGlVUlBoc0hWa1pyc2VBVkdialY2Y3JaeUxjTU9ZZ2VFcUFpeGJaWnRNOE54alU3aWRDWEZiVDQ4dGUvdnpXVnNranl0c0pCMXQ1dDZXMk5NWFIvZHkvaUtaUnBuN3RuWVZrUkFnWFA0eHBhSkRoZ0E1WXhFSndubDZlbndjb21DdFZRYzA5OUpkSnNCUzFoMjcrR1NJbXJ1NWZsRW5RPSIsInMiOiIxIn0=", "maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "ec70de10-ed17-4d7d-98ec-4e7254d18605", "record_id": "flaws_cloudtrail:0000459:ec70de10-ed17-4d7d-98ec-4e7254d18605", "row_index": 459, "timestamp": "2019-07-24T13:16:04Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "218.206.236.1", "user_agent": "aws-cli/1.16.204 Python/3.7.4 Darwin/18.0.0 botocore/1.12.194", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1087, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "ec70de10-ed17-4d7d-98ec-4e7254d18605", "eventTime": "2019-07-24T13:16:04Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "218.206.236.1", "userAgent": "aws-cli/1.16.204 Python/3.7.4 Darwin/18.0.0 botocore/1.12.194", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"nextToken": "eyJ2IjoiMiIsImMiOiJSUm5qM2l2N3hBM0ZYOWJRVDhveTJxOUZaanNpU2R5MmpEYkdDV2ZMZFp5a09xOHZ3enpzSXFsN3B4M3pBYTNySFh6OTlEM0ZaaFZrTGgyUjM5aGMxdXFKSFA4WGpqR240VnhPUzExT2NUcllhWmJlN0krK202c2IyR1hkbDZRNFNkQ1lmRFpjWmZqSzNYamRNSExqS0VmRXJCVVVOZGhURlU3YWNWa0RRTmhlVDVuWHVkdnBObmFsNGh6VkN5R0lvWFg1emJvTklqcVBlajVYWC9vR1dBPT0iLCJzIjoiMSJ9", "maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "ec70de10-ed17-4d7d-98ec-4e7254d18605", "record_id": "flaws_cloudtrail:0000460:ec70de10-ed17-4d7d-98ec-4e7254d18605", "row_index": 460, "timestamp": "2019-07-24T13:16:04Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "218.206.236.1", "user_agent": "aws-cli/1.16.204 Python/3.7.4 Darwin/18.0.0 botocore/1.12.194", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1087, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "ec70de10-ed17-4d7d-98ec-4e7254d18605", "eventTime": "2019-07-24T13:16:04Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "218.206.236.1", "userAgent": "aws-cli/1.16.204 Python/3.7.4 Darwin/18.0.0 botocore/1.12.194", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"nextToken": "eyJ2IjoiMiIsImMiOiJSUm5qM2l2N3hBM0ZYOWJRVDhveTJxOUZaanNpU2R5MmpEYkdDV2ZMZFp5a09xOHZ3enpzSXFsN3B4M3pBYTNySFh6OTlEM0ZaaFZrTGgyUjM5aGMxdXFKSFA4WGpqR240VnhPUzExT2NUcllhWmJlN0krK202c2IyR1hkbDZRNFNkQ1lmRFpjWmZqSzNYamRNSExqS0VmRXJCVVVOZGhURlU3YWNWa0RRTmhlVDVuWHVkdnBObmFsNGh6VkN5R0lvWFg1emJvTklqcVBlajVYWC9vR1dBPT0iLCJzIjoiMSJ9", "maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "6b955dee-d070-4aa5-accf-02e87908c580", "record_id": "flaws_cloudtrail:0000461:6b955dee-d070-4aa5-accf-02e87908c580", "row_index": 461, "timestamp": "2019-07-24T13:16:05Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "218.206.236.1", "user_agent": "aws-cli/1.16.204 Python/3.7.4 Darwin/18.0.0 botocore/1.12.194", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1099, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "6b955dee-d070-4aa5-accf-02e87908c580", "eventTime": "2019-07-24T13:16:05Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "218.206.236.1", "userAgent": "aws-cli/1.16.204 Python/3.7.4 Darwin/18.0.0 botocore/1.12.194", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"nextToken": "eyJ2IjoiMiIsImMiOiJuZkxyRUhDaDQ3dkJaQ2FHTVpIU243a3BBSUZnNzFtdnZCcy9hMVBKcnJ6QXVyWnVOTzZJWk1rTStVSFYzMjJJWHFWYmYxKzRvejJsdk0wVXdSK1hMenVjbzFyNHBvbE5hQThrSEllQUpXV0dZM2FNcDlHS25lYklxcm5aRmtUaWJxL20xZVl2V2NJbk5EWFBYMlpuczV3K3dPUDFaRC8wWGpYSDZ4WUwvS0dpRS9aSkFtQnFWVWJSMkpTV3E2SHNFbjRNTmJEbVQzc1VpUThrNzllelpJSmdlbCtPWENBPSIsInMiOiIxIn0=", "maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "6b955dee-d070-4aa5-accf-02e87908c580", "record_id": "flaws_cloudtrail:0000462:6b955dee-d070-4aa5-accf-02e87908c580", "row_index": 462, "timestamp": "2019-07-24T13:16:05Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "218.206.236.1", "user_agent": "aws-cli/1.16.204 Python/3.7.4 Darwin/18.0.0 botocore/1.12.194", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1099, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "6b955dee-d070-4aa5-accf-02e87908c580", "eventTime": "2019-07-24T13:16:05Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "218.206.236.1", "userAgent": "aws-cli/1.16.204 Python/3.7.4 Darwin/18.0.0 botocore/1.12.194", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"nextToken": "eyJ2IjoiMiIsImMiOiJuZkxyRUhDaDQ3dkJaQ2FHTVpIU243a3BBSUZnNzFtdnZCcy9hMVBKcnJ6QXVyWnVOTzZJWk1rTStVSFYzMjJJWHFWYmYxKzRvejJsdk0wVXdSK1hMenVjbzFyNHBvbE5hQThrSEllQUpXV0dZM2FNcDlHS25lYklxcm5aRmtUaWJxL20xZVl2V2NJbk5EWFBYMlpuczV3K3dPUDFaRC8wWGpYSDZ4WUwvS0dpRS9aSkFtQnFWVWJSMkpTV3E2SHNFbjRNTmJEbVQzc1VpUThrNzllelpJSmdlbCtPWENBPSIsInMiOiIxIn0=", "maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "4e1c04db-a6fb-416d-bdf4-a2dea0d1f880", "record_id": "flaws_cloudtrail:0000463:4e1c04db-a6fb-416d-bdf4-a2dea0d1f880", "row_index": 463, "timestamp": "2019-07-24T13:16:06Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "218.206.236.1", "user_agent": "aws-cli/1.16.204 Python/3.7.4 Darwin/18.0.0 botocore/1.12.194", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1087, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "4e1c04db-a6fb-416d-bdf4-a2dea0d1f880", "eventTime": "2019-07-24T13:16:06Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "218.206.236.1", "userAgent": "aws-cli/1.16.204 Python/3.7.4 Darwin/18.0.0 botocore/1.12.194", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"nextToken": "eyJ2IjoiMiIsImMiOiJKZE00UENqRlg3VURoRzZua295OVZKYm52VGlqd25pODVib3dUMkRpNThzQ0k1T2poaFZlNDBCbGNXeGhNYXJFaGJZMEpOMzFhNU1aam0yNXN3RVR4dDRQVTMvSlEyZUYwZUZLaE1KaWhJRERKQW9zYzFqaGI2eEdzMURHd08yK1hRNzZlcFhXeGN5VElvSUFmTHc1NnV4alJMbWNpVTEzVlBYTVRwT0ZlWUpSamZoUTlyY1Q1dE9ZRkh4ZkkyY0NVTGJzWTVycmxvNzRLMmhlMUVUM2FnPT0iLCJzIjoiMSJ9", "maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "4e1c04db-a6fb-416d-bdf4-a2dea0d1f880", "record_id": "flaws_cloudtrail:0000464:4e1c04db-a6fb-416d-bdf4-a2dea0d1f880", "row_index": 464, "timestamp": "2019-07-24T13:16:06Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "218.206.236.1", "user_agent": "aws-cli/1.16.204 Python/3.7.4 Darwin/18.0.0 botocore/1.12.194", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1087, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "4e1c04db-a6fb-416d-bdf4-a2dea0d1f880", "eventTime": "2019-07-24T13:16:06Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "218.206.236.1", "userAgent": "aws-cli/1.16.204 Python/3.7.4 Darwin/18.0.0 botocore/1.12.194", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"nextToken": "eyJ2IjoiMiIsImMiOiJKZE00UENqRlg3VURoRzZua295OVZKYm52VGlqd25pODVib3dUMkRpNThzQ0k1T2poaFZlNDBCbGNXeGhNYXJFaGJZMEpOMzFhNU1aam0yNXN3RVR4dDRQVTMvSlEyZUYwZUZLaE1KaWhJRERKQW9zYzFqaGI2eEdzMURHd08yK1hRNzZlcFhXeGN5VElvSUFmTHc1NnV4alJMbWNpVTEzVlBYTVRwT0ZlWUpSamZoUTlyY1Q1dE9ZRkh4ZkkyY0NVTGJzWTVycmxvNzRLMmhlMUVUM2FnPT0iLCJzIjoiMSJ9", "maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "f119abaa-1dfe-4d9c-b41d-d813412b4b76", "record_id": "flaws_cloudtrail:0000465:f119abaa-1dfe-4d9c-b41d-d813412b4b76", "row_index": 465, "timestamp": "2019-07-24T13:16:08Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "218.206.236.1", "user_agent": "aws-cli/1.16.204 Python/3.7.4 Darwin/18.0.0 botocore/1.12.194", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1054, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "f119abaa-1dfe-4d9c-b41d-d813412b4b76", "eventTime": "2019-07-24T13:16:08Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "218.206.236.1", "userAgent": "aws-cli/1.16.204 Python/3.7.4 Darwin/18.0.0 botocore/1.12.194", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"nextToken": "eyJ2IjoiMiIsImMiOiJUd2ZUcEd5N1pjSGVNSWRDY2hRbmU5MEhvblJFV1cvcXd4anArSEtYZkRrTy8wbWgvWktlay8rQm00YUZQaXNobDlXQy9uaXRkZEdKSmU2RkU5b1lJbTM1SjZxQTcrcVF2ekFQRGhOaUVQNXdDYkFIbEdhZlMxcmpZQnA2S2RKRGY2OE1KZFdOSjEybitWNW40Z0lCUlJZT3I3TEFweVRoRnVhRFNkMmNYbDdJUXlHandsY3RQdnF1NkUyTmU2VT0iLCJzIjoiMSJ9", "maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "c266012bf-b0c7-4aa7-8d0b-5fdcefc99301", "record_id": "flaws_cloudtrail:0000466:c266012bf-b0c7-4aa7-8d0b-5fdcefc99301", "row_index": 466, "timestamp": "2019-07-24T13:16:08Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "218.206.236.1", "user_agent": "aws-cli/1.16.204 Python/3.7.4 Darwin/18.0.0 botocore/1.12.194", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1100, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "c266012bf-b0c7-4aa7-8d0b-5fdcefc99301", "eventTime": "2019-07-24T13:16:08Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "218.206.236.1", "userAgent": "aws-cli/1.16.204 Python/3.7.4 Darwin/18.0.0 botocore/1.12.194", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"nextToken": "eyJ2IjoiMiIsImMiOiJEb1pKYUtMaDdxZHVMWnpOM0gyQUxSYnc5V3A2VFZmYVdSVDdxZVduTy9jaDNRTmowWW9HQ0VhS2s2L0NXamw2WjZzVGZEY3BnZi8rYjhGMjNjbW1HY2JKdDNLOGs3YnpPYms5bTlFeEZNeWhBempNSDA1UUZESDZCM1dyd1IwdUZMKy9lUEhKaUc3Mk9Pbm1pb1FXeE1ucXpPNm13T1VmTU5JUjRSclNNY0dPdFc5YlhZR2lQdXRueDFHNTloTzFpYWVkby9OQjJRN3VTbWJvRi96cWkzQUQ4WTJUZFYwPSIsInMiOiIxIn0=", "maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "f119abaa-1dfe-4d9c-b41d-d813412b4b76", "record_id": "flaws_cloudtrail:0000467:f119abaa-1dfe-4d9c-b41d-d813412b4b76", "row_index": 467, "timestamp": "2019-07-24T13:16:08Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "218.206.236.1", "user_agent": "aws-cli/1.16.204 Python/3.7.4 Darwin/18.0.0 botocore/1.12.194", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1054, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "f119abaa-1dfe-4d9c-b41d-d813412b4b76", "eventTime": "2019-07-24T13:16:08Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "218.206.236.1", "userAgent": "aws-cli/1.16.204 Python/3.7.4 Darwin/18.0.0 botocore/1.12.194", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"nextToken": "eyJ2IjoiMiIsImMiOiJUd2ZUcEd5N1pjSGVNSWRDY2hRbmU5MEhvblJFV1cvcXd4anArSEtYZkRrTy8wbWgvWktlay8rQm00YUZQaXNobDlXQy9uaXRkZEdKSmU2RkU5b1lJbTM1SjZxQTcrcVF2ekFQRGhOaUVQNXdDYkFIbEdhZlMxcmpZQnA2S2RKRGY2OE1KZFdOSjEybitWNW40Z0lCUlJZT3I3TEFweVRoRnVhRFNkMmNYbDdJUXlHandsY3RQdnF1NkUyTmU2VT0iLCJzIjoiMSJ9", "maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "c266012bf-b0c7-4aa7-8d0b-5fdcefc99301", "record_id": "flaws_cloudtrail:0000468:c266012bf-b0c7-4aa7-8d0b-5fdcefc99301", "row_index": 468, "timestamp": "2019-07-24T13:16:08Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "218.206.236.1", "user_agent": "aws-cli/1.16.204 Python/3.7.4 Darwin/18.0.0 botocore/1.12.194", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1100, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "c266012bf-b0c7-4aa7-8d0b-5fdcefc99301", "eventTime": "2019-07-24T13:16:08Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "218.206.236.1", "userAgent": "aws-cli/1.16.204 Python/3.7.4 Darwin/18.0.0 botocore/1.12.194", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"nextToken": "eyJ2IjoiMiIsImMiOiJEb1pKYUtMaDdxZHVMWnpOM0gyQUxSYnc5V3A2VFZmYVdSVDdxZVduTy9jaDNRTmowWW9HQ0VhS2s2L0NXamw2WjZzVGZEY3BnZi8rYjhGMjNjbW1HY2JKdDNLOGs3YnpPYms5bTlFeEZNeWhBempNSDA1UUZESDZCM1dyd1IwdUZMKy9lUEhKaUc3Mk9Pbm1pb1FXeE1ucXpPNm13T1VmTU5JUjRSclNNY0dPdFc5YlhZR2lQdXRueDFHNTloTzFpYWVkby9OQjJRN3VTbWJvRi96cWkzQUQ4WTJUZFYwPSIsInMiOiIxIn0=", "maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "2506d772-a788-43c0-87a2-b31ba9212c75", "record_id": "flaws_cloudtrail:0000469:2506d772-a788-43c0-87a2-b31ba9212c75", "row_index": 469, "timestamp": "2019-07-24T13:16:28Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "218.206.236.1", "user_agent": "aws-cli/1.16.204 Python/3.7.4 Darwin/18.0.0 botocore/1.12.194", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 786, "raw_record_depth": 5, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "2506d772-a788-43c0-87a2-b31ba9212c75", "eventTime": "2019-07-24T13:16:28Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "218.206.236.1", "userAgent": "aws-cli/1.16.204 Python/3.7.4 Darwin/18.0.0 botocore/1.12.194", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"maxResults": 1000, "snapshotSet": {}, "ownersSet": {"items": [{"owner": "811596193553"}]}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "2506d772-a788-43c0-87a2-b31ba9212c75", "record_id": "flaws_cloudtrail:0000470:2506d772-a788-43c0-87a2-b31ba9212c75", "row_index": 470, "timestamp": "2019-07-24T13:16:28Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "218.206.236.1", "user_agent": "aws-cli/1.16.204 Python/3.7.4 Darwin/18.0.0 botocore/1.12.194", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 786, "raw_record_depth": 5, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "2506d772-a788-43c0-87a2-b31ba9212c75", "eventTime": "2019-07-24T13:16:28Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "218.206.236.1", "userAgent": "aws-cli/1.16.204 Python/3.7.4 Darwin/18.0.0 botocore/1.12.194", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"maxResults": 1000, "snapshotSet": {}, "ownersSet": {"items": [{"owner": "811596193553"}]}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "f2bd0540-a770-46f4-9b5f-8de2898ee3c0", "record_id": "flaws_cloudtrail:0000471:f2bd0540-a770-46f4-9b5f-8de2898ee3c0", "row_index": 471, "timestamp": "2019-07-24T13:16:54Z", "event_type": "GetCallerIdentity", "event_source": "sts.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "218.206.236.1", "user_agent": "aws-cli/1.16.204 Python/3.7.4 Darwin/18.0.0 botocore/1.12.194", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 771, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "f2bd0540-a770-46f4-9b5f-8de2898ee3c0", "eventTime": "2019-07-24T13:16:54Z", "eventName": "GetCallerIdentity", "eventSource": "sts.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "218.206.236.1", "userAgent": "aws-cli/1.16.204 Python/3.7.4 Darwin/18.0.0 botocore/1.12.194", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "responseElements": {"userId": "AIDA9BO36HFBHKGJAO9C1", "account": "811596193553", "arn": "arn:aws:iam::811596193553:user/backup"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "f2bd0540-a770-46f4-9b5f-8de2898ee3c0", "record_id": "flaws_cloudtrail:0000472:f2bd0540-a770-46f4-9b5f-8de2898ee3c0", "row_index": 472, "timestamp": "2019-07-24T13:16:54Z", "event_type": "GetCallerIdentity", "event_source": "sts.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "218.206.236.1", "user_agent": "aws-cli/1.16.204 Python/3.7.4 Darwin/18.0.0 botocore/1.12.194", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 771, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "f2bd0540-a770-46f4-9b5f-8de2898ee3c0", "eventTime": "2019-07-24T13:16:54Z", "eventName": "GetCallerIdentity", "eventSource": "sts.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "218.206.236.1", "userAgent": "aws-cli/1.16.204 Python/3.7.4 Darwin/18.0.0 botocore/1.12.194", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "responseElements": {"userId": "AIDA9BO36HFBHKGJAO9C1", "account": "811596193553", "arn": "arn:aws:iam::811596193553:user/backup"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "d6ac7122-87f5-46ac-b3ea-5b1ab87ac345", "record_id": "flaws_cloudtrail:0000473:d6ac7122-87f5-46ac-b3ea-5b1ab87ac345", "row_index": 473, "timestamp": "2019-07-24T13:28:12Z", "event_type": "AssumeRole", "event_source": "sts.amazonaws.com", "principal": {"type": "AWSService", "arn": null, "account_id": null, "principal_id": null, "user_name": null, "access_key_id": null, "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "lambda.amazonaws.com", "user_agent": "lambda.amazonaws.com", "aws_region": "us-west-2"}, "resource_arns": ["arn:aws:iam::811596193553:role/service-role/Level6"], "raw_record_size_bytes": 1630, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "resources", "responseElements", "sharedEventID", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "d6ac7122-87f5-46ac-b3ea-5b1ab87ac345", "eventTime": "2019-07-24T13:28:12Z", "eventName": "AssumeRole", "eventSource": "sts.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "lambda.amazonaws.com", "userAgent": "lambda.amazonaws.com", "awsRegion": "us-west-2", "userIdentity": {"type": "AWSService", "invokedBy": "lambda.amazonaws.com"}, "requestParameters": {"roleSessionName": "Level6", "roleArn": "arn:aws:iam::811596193553:role/service-role/Level6"}, "responseElements": {"credentials": {"accessKeyId": "ASIA12QGTLHHUGWDJJUL", "expiration": "Jul 25, 2019 1:28:12 AM", "sessionToken": "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"}}, "resources": [{"ARN": "arn:aws:iam::811596193553:role/service-role/Level6", "accountId": "811596193553", "type": "AWS::IAM::Role"}]}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "5500f825-751e-4df6-af3c-7d0724201350", "record_id": "flaws_cloudtrail:0000474:5500f825-751e-4df6-af3c-7d0724201350", "row_index": 474, "timestamp": "2019-07-24T13:28:12Z", "event_type": "CreateLogStream", "event_source": "logs.amazonaws.com", "principal": {"type": "AssumedRole", "arn": "arn:aws:sts::811596193553:assumed-role/Level6/Level6", "account_id": "811596193553", "principal_id": "AROAI4E1FBACLY3FPC6BB:Level6", "user_name": null, "access_key_id": "ASIA12QGTLHHUGWDJJUL", "session_issuer_arn": "arn:aws:iam::811596193553:role/service-role/Level6", "session_issuer_user_name": "Level6"}, "network": {"source_ip": "247.0.174.70", "user_agent": "awslambda-worker", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1029, "raw_record_depth": 4, "raw_record_top_level_keys": ["apiVersion", "awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "5500f825-751e-4df6-af3c-7d0724201350", "eventTime": "2019-07-24T13:28:12Z", "eventName": "CreateLogStream", "eventSource": "logs.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "247.0.174.70", "userAgent": "awslambda-worker", "awsRegion": "us-west-2", "userIdentity": {"type": "AssumedRole", "principalId": "AROAI4E1FBACLY3FPC6BB:Level6", "arn": "arn:aws:sts::811596193553:assumed-role/Level6/Level6", "accountId": "811596193553", "accessKeyId": "ASIA12QGTLHHUGWDJJUL", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2019-07-24T13:28:12Z"}, "sessionIssuer": {"type": "Role", "principalId": "AROAI4E1FBACLY3FPC6BB", "arn": "arn:aws:iam::811596193553:role/service-role/Level6", "accountId": "811596193553", "userName": "Level6"}}}, "requestParameters": {"logGroupName": "/aws/lambda/Level6", "logStreamName": "2019/07/24/[$LATEST]1e789fb65c6eb17771281c3aa504c6da"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "c1009b19-1a47-4af1-9348-ef39b6b8718d", "record_id": "flaws_cloudtrail:0000475:c1009b19-1a47-4af1-9348-ef39b6b8718d", "row_index": 475, "timestamp": "2019-07-24T13:28:12Z", "event_type": "AssumeRole", "event_source": "sts.amazonaws.com", "principal": {"type": "AWSService", "arn": null, "account_id": null, "principal_id": null, "user_name": null, "access_key_id": null, "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "lambda.amazonaws.com", "user_agent": "lambda.amazonaws.com", "aws_region": "us-west-2"}, "resource_arns": ["arn:aws:iam::811596193553:role/service-role/Level6"], "raw_record_size_bytes": 1630, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "resources", "responseElements", "sharedEventID", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "c1009b19-1a47-4af1-9348-ef39b6b8718d", "eventTime": "2019-07-24T13:28:12Z", "eventName": "AssumeRole", "eventSource": "sts.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "lambda.amazonaws.com", "userAgent": "lambda.amazonaws.com", "awsRegion": "us-west-2", "userIdentity": {"type": "AWSService", "invokedBy": "lambda.amazonaws.com"}, "requestParameters": {"roleSessionName": "Level6", "roleArn": "arn:aws:iam::811596193553:role/service-role/Level6"}, "responseElements": {"credentials": {"accessKeyId": "ASIAMUGTO758FQ5NETFB", "expiration": "Jul 25, 2019 1:28:12 AM", "sessionToken": "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"}}, "resources": [{"ARN": "arn:aws:iam::811596193553:role/service-role/Level6", "accountId": "811596193553", "type": "AWS::IAM::Role"}]}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "d6ac7122-87f5-46ac-b3ea-5b1ab87ac345", "record_id": "flaws_cloudtrail:0000476:d6ac7122-87f5-46ac-b3ea-5b1ab87ac345", "row_index": 476, "timestamp": "2019-07-24T13:28:12Z", "event_type": "AssumeRole", "event_source": "sts.amazonaws.com", "principal": {"type": "AWSService", "arn": null, "account_id": null, "principal_id": null, "user_name": null, "access_key_id": null, "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "lambda.amazonaws.com", "user_agent": "lambda.amazonaws.com", "aws_region": "us-west-2"}, "resource_arns": ["arn:aws:iam::811596193553:role/service-role/Level6"], "raw_record_size_bytes": 1630, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "resources", "responseElements", "sharedEventID", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "d6ac7122-87f5-46ac-b3ea-5b1ab87ac345", "eventTime": "2019-07-24T13:28:12Z", "eventName": "AssumeRole", "eventSource": "sts.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "lambda.amazonaws.com", "userAgent": "lambda.amazonaws.com", "awsRegion": "us-west-2", "userIdentity": {"type": "AWSService", "invokedBy": "lambda.amazonaws.com"}, "requestParameters": {"roleSessionName": "Level6", "roleArn": "arn:aws:iam::811596193553:role/service-role/Level6"}, "responseElements": {"credentials": {"accessKeyId": "ASIA12QGTLHHUGWDJJUL", "expiration": "Jul 25, 2019 1:28:12 AM", "sessionToken": "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"}}, "resources": [{"ARN": "arn:aws:iam::811596193553:role/service-role/Level6", "accountId": "811596193553", "type": "AWS::IAM::Role"}]}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "5500f825-751e-4df6-af3c-7d0724201350", "record_id": "flaws_cloudtrail:0000477:5500f825-751e-4df6-af3c-7d0724201350", "row_index": 477, "timestamp": "2019-07-24T13:28:12Z", "event_type": "CreateLogStream", "event_source": "logs.amazonaws.com", "principal": {"type": "AssumedRole", "arn": "arn:aws:sts::811596193553:assumed-role/Level6/Level6", "account_id": "811596193553", "principal_id": "AROAI4E1FBACLY3FPC6BB:Level6", "user_name": null, "access_key_id": "ASIA12QGTLHHUGWDJJUL", "session_issuer_arn": "arn:aws:iam::811596193553:role/service-role/Level6", "session_issuer_user_name": "Level6"}, "network": {"source_ip": "247.0.174.70", "user_agent": "awslambda-worker", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1029, "raw_record_depth": 4, "raw_record_top_level_keys": ["apiVersion", "awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "5500f825-751e-4df6-af3c-7d0724201350", "eventTime": "2019-07-24T13:28:12Z", "eventName": "CreateLogStream", "eventSource": "logs.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "247.0.174.70", "userAgent": "awslambda-worker", "awsRegion": "us-west-2", "userIdentity": {"type": "AssumedRole", "principalId": "AROAI4E1FBACLY3FPC6BB:Level6", "arn": "arn:aws:sts::811596193553:assumed-role/Level6/Level6", "accountId": "811596193553", "accessKeyId": "ASIA12QGTLHHUGWDJJUL", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2019-07-24T13:28:12Z"}, "sessionIssuer": {"type": "Role", "principalId": "AROAI4E1FBACLY3FPC6BB", "arn": "arn:aws:iam::811596193553:role/service-role/Level6", "accountId": "811596193553", "userName": "Level6"}}}, "requestParameters": {"logGroupName": "/aws/lambda/Level6", "logStreamName": "2019/07/24/[$LATEST]1e789fb65c6eb17771281c3aa504c6da"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "c1009b19-1a47-4af1-9348-ef39b6b8718d", "record_id": "flaws_cloudtrail:0000478:c1009b19-1a47-4af1-9348-ef39b6b8718d", "row_index": 478, "timestamp": "2019-07-24T13:28:12Z", "event_type": "AssumeRole", "event_source": "sts.amazonaws.com", "principal": {"type": "AWSService", "arn": null, "account_id": null, "principal_id": null, "user_name": null, "access_key_id": null, "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "lambda.amazonaws.com", "user_agent": "lambda.amazonaws.com", "aws_region": "us-west-2"}, "resource_arns": ["arn:aws:iam::811596193553:role/service-role/Level6"], "raw_record_size_bytes": 1630, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "resources", "responseElements", "sharedEventID", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "c1009b19-1a47-4af1-9348-ef39b6b8718d", "eventTime": "2019-07-24T13:28:12Z", "eventName": "AssumeRole", "eventSource": "sts.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "lambda.amazonaws.com", "userAgent": "lambda.amazonaws.com", "awsRegion": "us-west-2", "userIdentity": {"type": "AWSService", "invokedBy": "lambda.amazonaws.com"}, "requestParameters": {"roleSessionName": "Level6", "roleArn": "arn:aws:iam::811596193553:role/service-role/Level6"}, "responseElements": {"credentials": {"accessKeyId": "ASIAMUGTO758FQ5NETFB", "expiration": "Jul 25, 2019 1:28:12 AM", "sessionToken": "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"}}, "resources": [{"ARN": "arn:aws:iam::811596193553:role/service-role/Level6", "accountId": "811596193553", "type": "AWS::IAM::Role"}]}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "b4c7ff29-e573-4f17-9592-7805f905753", "record_id": "flaws_cloudtrail:0000479:b4c7ff29-e573-4f17-9592-7805f905753", "row_index": 479, "timestamp": "2019-07-24T13:31:25Z", "event_type": "AssumeRole", "event_source": "sts.amazonaws.com", "principal": {"type": "AWSService", "arn": null, "account_id": null, "principal_id": null, "user_name": null, "access_key_id": null, "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "ec2.amazonaws.com", "user_agent": "ec2.amazonaws.com", "aws_region": "us-west-2"}, "resource_arns": ["arn:aws:iam::811596193553:role/flaws"], "raw_record_size_bytes": 1893, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "resources", "responseElements", "sharedEventID", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "b4c7ff29-e573-4f17-9592-7805f905753", "eventTime": "2019-07-24T13:31:25Z", "eventName": "AssumeRole", "eventSource": "sts.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "ec2.amazonaws.com", "userAgent": "ec2.amazonaws.com", "awsRegion": "us-west-2", "userIdentity": {"type": "AWSService", "invokedBy": "ec2.amazonaws.com"}, "requestParameters": {"roleSessionName": "i-aa2d3b42e5c6e801a", "roleArn": "arn:aws:iam::811596193553:role/flaws"}, "responseElements": {"credentials": {"accessKeyId": "ASIAMDBG94HXLPHMW6C2", "expiration": "Jul 24, 2019 7:38:26 PM", "sessionToken": "AgoJb3JpZ2luX2VjEIb//////////wEaCXVzLXdlc3QtMiJIMEYCIQC6QScDC7D6A31cqJ9uotdEDz54yTlqlmELjE/29KxJHQIhAKa3NqfGjjfHZTvKmvzT5F9OoHqm4CuXNkdKxSggRTwHKuMDCO///////////wEQABoMOTc1NDI2MjYyMDI5Igw2+Dc4hIUmysjbui8qtwPkVidCgVAFnaWuR/A1p2x/OsUijRtgjz/FUs8NxQTypijcGTZP/2xECsYagP4ifyL/qIkFCuJrn8pVT7V6L75cH68xEXyfQFMQdbbs3Nre+N3zye2OA1eZQQKzRUk/vzhOnCi4WcJRCxlsM+2lr+PO7v5vgH1WNJLYdMzq/D4LcqAf7EWpz+/155TPj6H+UBm5YcDKPEtaOx8B12geIObDk13NdHMnRHYZ48GY1crKInr3Eh+ttAQXkfFsFRGqgFxPnEWnwysxIJGg/zG0+m3RhEeHI5cReLde5OMTwY1Bmgrj+k5fauN58tm03wKW902nFcdyLC0SvlCTmwchb0uKKFvk3Lx+pCmCS6ZUIyGw1cPxdlYfprDI6bjPeA+oeS0XA0Rawg2ArefH240rYPTthanyS+eM3LbNZ3gU+Ci0jnddBXDLCQkwzXEUUJnVsxTn8dwD+YwFOzzNItV1zrBQS4h3FgahkbnDe6hu+1L/s5RtKbUj7c619G/XR8X4LmzYDp1v+G4fP429vcUvhwrd3mRiyhsc1UhxSh9f5CJCQqt9l2o7ViMwrzIAdCgWcpy5cnBMpi/oMK274ekFOrMBFL9iIkjZw+ForqdZejNBGNCn5gPjJkFZofZajjeUQ2LrMAZ9XTt2sYJYrPf2BuqztZavsNLxq1X7z7vkU7sQ+0J0ntFgptdTIn+aEVAsVs3NI00qmGgQrFVXHrLIo2zOK9dPk/FQX+cnSpsctlZ1aj/JQ2J4nqgtjTR8s6f4L5aRBfbYA3FaXry5H8uHsCNkCJftEYNK9/kOJEzQom/c+EJyVtqlvJyj910Ppag51i9ya2s="}}, "resources": [{"ARN": "arn:aws:iam::811596193553:role/flaws", "accountId": "811596193553", "type": "AWS::IAM::Role"}]}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "b4c7ff29-e573-4f17-9592-7805f905753", "record_id": "flaws_cloudtrail:0000480:b4c7ff29-e573-4f17-9592-7805f905753", "row_index": 480, "timestamp": "2019-07-24T13:31:25Z", "event_type": "AssumeRole", "event_source": "sts.amazonaws.com", "principal": {"type": "AWSService", "arn": null, "account_id": null, "principal_id": null, "user_name": null, "access_key_id": null, "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "ec2.amazonaws.com", "user_agent": "ec2.amazonaws.com", "aws_region": "us-west-2"}, "resource_arns": ["arn:aws:iam::811596193553:role/flaws"], "raw_record_size_bytes": 1893, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "resources", "responseElements", "sharedEventID", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "b4c7ff29-e573-4f17-9592-7805f905753", "eventTime": "2019-07-24T13:31:25Z", "eventName": "AssumeRole", "eventSource": "sts.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "ec2.amazonaws.com", "userAgent": "ec2.amazonaws.com", "awsRegion": "us-west-2", "userIdentity": {"type": "AWSService", "invokedBy": "ec2.amazonaws.com"}, "requestParameters": {"roleSessionName": "i-aa2d3b42e5c6e801a", "roleArn": "arn:aws:iam::811596193553:role/flaws"}, "responseElements": {"credentials": {"accessKeyId": "ASIAMDBG94HXLPHMW6C2", "expiration": "Jul 24, 2019 7:38:26 PM", "sessionToken": "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"}}, "resources": [{"ARN": "arn:aws:iam::811596193553:role/flaws", "accountId": "811596193553", "type": "AWS::IAM::Role"}]}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "9d5f9d95-f4f0-4be7-b534-cd931ca227cf", "record_id": "flaws_cloudtrail:0000481:9d5f9d95-f4f0-4be7-b534-cd931ca227cf", "row_index": 481, "timestamp": "2019-07-24T13:33:12Z", "event_type": "ListBuckets", "event_source": "s3.amazonaws.com", "principal": {"type": "AssumedRole", "arn": "arn:aws:sts::811596193553:assumed-role/flaws/i-aa2d3b42e5c6e801a", "account_id": "811596193553", "principal_id": "AROACW5CSA8C8WHOB3O7Q:i-aa2d3b42e5c6e801a", "user_name": null, "access_key_id": "ASIAP0Q8QWLW07AS7716", "session_issuer_arn": "arn:aws:iam::811596193553:role/flaws", "session_issuer_user_name": "flaws"}, "network": {"source_ip": "218.206.236.1", "user_agent": "[aws-cli/1.16.204 Python/3.7.4 Darwin/18.0.0 botocore/1.12.194]", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 1150, "raw_record_depth": 4, "raw_record_top_level_keys": ["additionalEventData", "awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "9d5f9d95-f4f0-4be7-b534-cd931ca227cf", "eventTime": "2019-07-24T13:33:12Z", "eventName": "ListBuckets", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "218.206.236.1", "userAgent": "[aws-cli/1.16.204 Python/3.7.4 Darwin/18.0.0 botocore/1.12.194]", "awsRegion": "us-east-1", "errorCode": "AccessDenied", "errorMessage": "Access Denied", "userIdentity": {"type": "AssumedRole", "principalId": "AROACW5CSA8C8WHOB3O7Q:i-aa2d3b42e5c6e801a", "arn": "arn:aws:sts::811596193553:assumed-role/flaws/i-aa2d3b42e5c6e801a", "accountId": "811596193553", "accessKeyId": "ASIAP0Q8QWLW07AS7716", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2019-07-24T12:31:25Z"}, "sessionIssuer": {"type": "Role", "principalId": "AROACW5CSA8C8WHOB3O7Q", "arn": "arn:aws:iam::811596193553:role/flaws", "accountId": "811596193553", "userName": "flaws"}}}, "requestParameters": {"host": ["s3.amazonaws.com"]}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "9d5f9d95-f4f0-4be7-b534-cd931ca227cf", "record_id": "flaws_cloudtrail:0000482:9d5f9d95-f4f0-4be7-b534-cd931ca227cf", "row_index": 482, "timestamp": "2019-07-24T13:33:12Z", "event_type": "ListBuckets", "event_source": "s3.amazonaws.com", "principal": {"type": "AssumedRole", "arn": "arn:aws:sts::811596193553:assumed-role/flaws/i-aa2d3b42e5c6e801a", "account_id": "811596193553", "principal_id": "AROACW5CSA8C8WHOB3O7Q:i-aa2d3b42e5c6e801a", "user_name": null, "access_key_id": "ASIAP0Q8QWLW07AS7716", "session_issuer_arn": "arn:aws:iam::811596193553:role/flaws", "session_issuer_user_name": "flaws"}, "network": {"source_ip": "218.206.236.1", "user_agent": "[aws-cli/1.16.204 Python/3.7.4 Darwin/18.0.0 botocore/1.12.194]", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 1150, "raw_record_depth": 4, "raw_record_top_level_keys": ["additionalEventData", "awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "9d5f9d95-f4f0-4be7-b534-cd931ca227cf", "eventTime": "2019-07-24T13:33:12Z", "eventName": "ListBuckets", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "218.206.236.1", "userAgent": "[aws-cli/1.16.204 Python/3.7.4 Darwin/18.0.0 botocore/1.12.194]", "awsRegion": "us-east-1", "errorCode": "AccessDenied", "errorMessage": "Access Denied", "userIdentity": {"type": "AssumedRole", "principalId": "AROACW5CSA8C8WHOB3O7Q:i-aa2d3b42e5c6e801a", "arn": "arn:aws:sts::811596193553:assumed-role/flaws/i-aa2d3b42e5c6e801a", "accountId": "811596193553", "accessKeyId": "ASIAP0Q8QWLW07AS7716", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2019-07-24T12:31:25Z"}, "sessionIssuer": {"type": "Role", "principalId": "AROACW5CSA8C8WHOB3O7Q", "arn": "arn:aws:iam::811596193553:role/flaws", "accountId": "811596193553", "userName": "flaws"}}}, "requestParameters": {"host": ["s3.amazonaws.com"]}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "55ce76a8-9c24-4fa8-a5b4-55f68a609b7b", "record_id": "flaws_cloudtrail:0000483:55ce76a8-9c24-4fa8-a5b4-55f68a609b7b", "row_index": 483, "timestamp": "2019-07-24T13:47:52Z", "event_type": "GetUser", "event_source": "iam.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "218.206.236.1", "user_agent": "aws-cli/1.16.204 Python/3.7.4 Darwin/18.0.0 botocore/1.12.194", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 658, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "55ce76a8-9c24-4fa8-a5b4-55f68a609b7b", "eventTime": "2019-07-24T13:47:52Z", "eventName": "GetUser", "eventSource": "iam.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "218.206.236.1", "userAgent": "aws-cli/1.16.204 Python/3.7.4 Darwin/18.0.0 botocore/1.12.194", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "55ce76a8-9c24-4fa8-a5b4-55f68a609b7b", "record_id": "flaws_cloudtrail:0000484:55ce76a8-9c24-4fa8-a5b4-55f68a609b7b", "row_index": 484, "timestamp": "2019-07-24T13:47:52Z", "event_type": "GetUser", "event_source": "iam.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "218.206.236.1", "user_agent": "aws-cli/1.16.204 Python/3.7.4 Darwin/18.0.0 botocore/1.12.194", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 658, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "55ce76a8-9c24-4fa8-a5b4-55f68a609b7b", "eventTime": "2019-07-24T13:47:52Z", "eventName": "GetUser", "eventSource": "iam.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "218.206.236.1", "userAgent": "aws-cli/1.16.204 Python/3.7.4 Darwin/18.0.0 botocore/1.12.194", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "dfe2e833-9733-4ebe-9645-0a331d5f48bf", "record_id": "flaws_cloudtrail:0000485:dfe2e833-9733-4ebe-9645-0a331d5f48bf", "row_index": 485, "timestamp": "2019-07-24T13:48:37Z", "event_type": "ListAttachedUserPolicies", "event_source": "iam.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "218.206.236.1", "user_agent": "aws-cli/1.16.204 Python/3.7.4 Darwin/18.0.0 botocore/1.12.194", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 694, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "dfe2e833-9733-4ebe-9645-0a331d5f48bf", "eventTime": "2019-07-24T13:48:37Z", "eventName": "ListAttachedUserPolicies", "eventSource": "iam.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "218.206.236.1", "userAgent": "aws-cli/1.16.204 Python/3.7.4 Darwin/18.0.0 botocore/1.12.194", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"userName": "Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "dfe2e833-9733-4ebe-9645-0a331d5f48bf", "record_id": "flaws_cloudtrail:0000486:dfe2e833-9733-4ebe-9645-0a331d5f48bf", "row_index": 486, "timestamp": "2019-07-24T13:48:37Z", "event_type": "ListAttachedUserPolicies", "event_source": "iam.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "218.206.236.1", "user_agent": "aws-cli/1.16.204 Python/3.7.4 Darwin/18.0.0 botocore/1.12.194", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 694, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "dfe2e833-9733-4ebe-9645-0a331d5f48bf", "eventTime": "2019-07-24T13:48:37Z", "eventName": "ListAttachedUserPolicies", "eventSource": "iam.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "218.206.236.1", "userAgent": "aws-cli/1.16.204 Python/3.7.4 Darwin/18.0.0 botocore/1.12.194", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"userName": "Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "92b55975-9302-475d-bbde-a59359534a4e", "record_id": "flaws_cloudtrail:0000487:92b55975-9302-475d-bbde-a59359534a4e", "row_index": 487, "timestamp": "2019-07-24T13:55:15Z", "event_type": "ListAttachedUserPolicies", "event_source": "iam.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "218.206.236.1", "user_agent": "aws-cli/1.16.204 Python/3.7.4 Darwin/18.0.0 botocore/1.12.194", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 694, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "92b55975-9302-475d-bbde-a59359534a4e", "eventTime": "2019-07-24T13:55:15Z", "eventName": "ListAttachedUserPolicies", "eventSource": "iam.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "218.206.236.1", "userAgent": "aws-cli/1.16.204 Python/3.7.4 Darwin/18.0.0 botocore/1.12.194", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"userName": "Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "92b55975-9302-475d-bbde-a59359534a4e", "record_id": "flaws_cloudtrail:0000488:92b55975-9302-475d-bbde-a59359534a4e", "row_index": 488, "timestamp": "2019-07-24T13:55:15Z", "event_type": "ListAttachedUserPolicies", "event_source": "iam.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "218.206.236.1", "user_agent": "aws-cli/1.16.204 Python/3.7.4 Darwin/18.0.0 botocore/1.12.194", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 694, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "92b55975-9302-475d-bbde-a59359534a4e", "eventTime": "2019-07-24T13:55:15Z", "eventName": "ListAttachedUserPolicies", "eventSource": "iam.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "218.206.236.1", "userAgent": "aws-cli/1.16.204 Python/3.7.4 Darwin/18.0.0 botocore/1.12.194", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"userName": "Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "cddca108-afea-4de8-8a9e-07cb5b38b134", "record_id": "flaws_cloudtrail:0000489:cddca108-afea-4de8-8a9e-07cb5b38b134", "row_index": 489, "timestamp": "2019-07-24T13:57:55Z", "event_type": "GetPolicy", "event_source": "iam.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "218.206.236.1", "user_agent": "aws-cli/1.16.204 Python/3.7.4 Darwin/18.0.0 botocore/1.12.194", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 723, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "cddca108-afea-4de8-8a9e-07cb5b38b134", "eventTime": "2019-07-24T13:57:55Z", "eventName": "GetPolicy", "eventSource": "iam.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "218.206.236.1", "userAgent": "aws-cli/1.16.204 Python/3.7.4 Darwin/18.0.0 botocore/1.12.194", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"policyArn": "arn:aws:iam::811596193553:policy/list_apigateways"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "cddca108-afea-4de8-8a9e-07cb5b38b134", "record_id": "flaws_cloudtrail:0000490:cddca108-afea-4de8-8a9e-07cb5b38b134", "row_index": 490, "timestamp": "2019-07-24T13:57:55Z", "event_type": "GetPolicy", "event_source": "iam.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "218.206.236.1", "user_agent": "aws-cli/1.16.204 Python/3.7.4 Darwin/18.0.0 botocore/1.12.194", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 723, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "cddca108-afea-4de8-8a9e-07cb5b38b134", "eventTime": "2019-07-24T13:57:55Z", "eventName": "GetPolicy", "eventSource": "iam.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "218.206.236.1", "userAgent": "aws-cli/1.16.204 Python/3.7.4 Darwin/18.0.0 botocore/1.12.194", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"policyArn": "arn:aws:iam::811596193553:policy/list_apigateways"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "46bbffa8-d89a-48d6-b83a-4b0ff1150935", "record_id": "flaws_cloudtrail:0000491:46bbffa8-d89a-48d6-b83a-4b0ff1150935", "row_index": 491, "timestamp": "2019-07-24T13:58:38Z", "event_type": "GetPolicyVersion", "event_source": "iam.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "218.206.236.1", "user_agent": "aws-cli/1.16.204 Python/3.7.4 Darwin/18.0.0 botocore/1.12.194", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 746, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "46bbffa8-d89a-48d6-b83a-4b0ff1150935", "eventTime": "2019-07-24T13:58:38Z", "eventName": "GetPolicyVersion", "eventSource": "iam.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "218.206.236.1", "userAgent": "aws-cli/1.16.204 Python/3.7.4 Darwin/18.0.0 botocore/1.12.194", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"policyArn": "arn:aws:iam::811596193553:policy/list_apigateways", "versionId": "v4"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "46bbffa8-d89a-48d6-b83a-4b0ff1150935", "record_id": "flaws_cloudtrail:0000492:46bbffa8-d89a-48d6-b83a-4b0ff1150935", "row_index": 492, "timestamp": "2019-07-24T13:58:38Z", "event_type": "GetPolicyVersion", "event_source": "iam.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "218.206.236.1", "user_agent": "aws-cli/1.16.204 Python/3.7.4 Darwin/18.0.0 botocore/1.12.194", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 746, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "46bbffa8-d89a-48d6-b83a-4b0ff1150935", "eventTime": "2019-07-24T13:58:38Z", "eventName": "GetPolicyVersion", "eventSource": "iam.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "218.206.236.1", "userAgent": "aws-cli/1.16.204 Python/3.7.4 Darwin/18.0.0 botocore/1.12.194", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"policyArn": "arn:aws:iam::811596193553:policy/list_apigateways", "versionId": "v4"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "6db2abcb-d7ac-4c4c-ae74-285a9d054c76", "record_id": "flaws_cloudtrail:0000493:6db2abcb-d7ac-4c4c-ae74-285a9d054c76", "row_index": 493, "timestamp": "2019-07-24T14:02:39Z", "event_type": "ListFunctions202224", "event_source": "lambda.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "218.206.236.1", "user_agent": "aws-cli/1.16.204 Python/3.7.4 Darwin/18.0.0 botocore/1.12.194", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 675, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "6db2abcb-d7ac-4c4c-ae74-285a9d054c76", "eventTime": "2019-07-24T14:02:39Z", "eventName": "ListFunctions202224", "eventSource": "lambda.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "218.206.236.1", "userAgent": "aws-cli/1.16.204 Python/3.7.4 Darwin/18.0.0 botocore/1.12.194", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "6db2abcb-d7ac-4c4c-ae74-285a9d054c76", "record_id": "flaws_cloudtrail:0000494:6db2abcb-d7ac-4c4c-ae74-285a9d054c76", "row_index": 494, "timestamp": "2019-07-24T14:02:39Z", "event_type": "ListFunctions202224", "event_source": "lambda.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "218.206.236.1", "user_agent": "aws-cli/1.16.204 Python/3.7.4 Darwin/18.0.0 botocore/1.12.194", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 675, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "6db2abcb-d7ac-4c4c-ae74-285a9d054c76", "eventTime": "2019-07-24T14:02:39Z", "eventName": "ListFunctions202224", "eventSource": "lambda.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "218.206.236.1", "userAgent": "aws-cli/1.16.204 Python/3.7.4 Darwin/18.0.0 botocore/1.12.194", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "89e31189-dd1d-4b33-8f9d-57051077596b", "record_id": "flaws_cloudtrail:0000495:89e31189-dd1d-4b33-8f9d-57051077596b", "row_index": 495, "timestamp": "2019-07-24T14:04:34Z", "event_type": "ListFunctions202224", "event_source": "lambda.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "218.206.236.1", "user_agent": "aws-cli/1.16.204 Python/3.7.4 Darwin/18.0.0 botocore/1.12.194", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 675, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "89e31189-dd1d-4b33-8f9d-57051077596b", "eventTime": "2019-07-24T14:04:34Z", "eventName": "ListFunctions202224", "eventSource": "lambda.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "218.206.236.1", "userAgent": "aws-cli/1.16.204 Python/3.7.4 Darwin/18.0.0 botocore/1.12.194", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "89e31189-dd1d-4b33-8f9d-57051077596b", "record_id": "flaws_cloudtrail:0000496:89e31189-dd1d-4b33-8f9d-57051077596b", "row_index": 496, "timestamp": "2019-07-24T14:04:34Z", "event_type": "ListFunctions202224", "event_source": "lambda.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "218.206.236.1", "user_agent": "aws-cli/1.16.204 Python/3.7.4 Darwin/18.0.0 botocore/1.12.194", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 675, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "89e31189-dd1d-4b33-8f9d-57051077596b", "eventTime": "2019-07-24T14:04:34Z", "eventName": "ListFunctions202224", "eventSource": "lambda.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "218.206.236.1", "userAgent": "aws-cli/1.16.204 Python/3.7.4 Darwin/18.0.0 botocore/1.12.194", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "8c59d3c4-fd07-4477-8198-692860be943399", "record_id": "flaws_cloudtrail:0000497:8c59d3c4-fd07-4477-8198-692860be943399", "row_index": 497, "timestamp": "2019-07-24T14:05:05Z", "event_type": "GetPolicy202224v2", "event_source": "lambda.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "218.206.236.1", "user_agent": "aws-cli/1.16.204 Python/3.7.4 Darwin/18.0.0 botocore/1.12.194", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 696, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "8c59d3c4-fd07-4477-8198-692860be943399", "eventTime": "2019-07-24T14:05:05Z", "eventName": "GetPolicy202224v2", "eventSource": "lambda.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "218.206.236.1", "userAgent": "aws-cli/1.16.204 Python/3.7.4 Darwin/18.0.0 botocore/1.12.194", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"functionName": "Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "8c59d3c4-fd07-4477-8198-692860be943399", "record_id": "flaws_cloudtrail:0000498:8c59d3c4-fd07-4477-8198-692860be943399", "row_index": 498, "timestamp": "2019-07-24T14:05:05Z", "event_type": "GetPolicy202224v2", "event_source": "lambda.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "218.206.236.1", "user_agent": "aws-cli/1.16.204 Python/3.7.4 Darwin/18.0.0 botocore/1.12.194", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 696, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "8c59d3c4-fd07-4477-8198-692860be943399", "eventTime": "2019-07-24T14:05:05Z", "eventName": "GetPolicy202224v2", "eventSource": "lambda.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "218.206.236.1", "userAgent": "aws-cli/1.16.204 Python/3.7.4 Darwin/18.0.0 botocore/1.12.194", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"functionName": "Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "aedf93bc-74ca-4492-9ae5-83a610b98ef0", "record_id": "flaws_cloudtrail:0000499:aedf93bc-74ca-4492-9ae5-83a610b98ef0", "row_index": 499, "timestamp": "2019-07-24T14:06:53Z", "event_type": "GetPolicy202224v2", "event_source": "lambda.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "218.206.236.1", "user_agent": "aws-cli/1.16.204 Python/3.7.4 Darwin/18.0.0 botocore/1.12.194", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 694, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "aedf93bc-74ca-4492-9ae5-83a610b98ef0", "eventTime": "2019-07-24T14:06:53Z", "eventName": "GetPolicy202224v2", "eventSource": "lambda.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "218.206.236.1", "userAgent": "aws-cli/1.16.204 Python/3.7.4 Darwin/18.0.0 botocore/1.12.194", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"functionName": "Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "aedf93bc-74ca-4492-9ae5-83a610b98ef0", "record_id": "flaws_cloudtrail:0000500:aedf93bc-74ca-4492-9ae5-83a610b98ef0", "row_index": 500, "timestamp": "2019-07-24T14:06:53Z", "event_type": "GetPolicy202224v2", "event_source": "lambda.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "218.206.236.1", "user_agent": "aws-cli/1.16.204 Python/3.7.4 Darwin/18.0.0 botocore/1.12.194", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 694, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "aedf93bc-74ca-4492-9ae5-83a610b98ef0", "eventTime": "2019-07-24T14:06:53Z", "eventName": "GetPolicy202224v2", "eventSource": "lambda.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "218.206.236.1", "userAgent": "aws-cli/1.16.204 Python/3.7.4 Darwin/18.0.0 botocore/1.12.194", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"functionName": "Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "6efc106d-1389-4b0b-94a4-f7bcf9f9a77f", "record_id": "flaws_cloudtrail:0000501:6efc106d-1389-4b0b-94a4-f7bcf9f9a77f", "row_index": 501, "timestamp": "2019-07-24T14:07:02Z", "event_type": "GetPolicy202224v2", "event_source": "lambda.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "218.206.236.1", "user_agent": "aws-cli/1.16.204 Python/3.7.4 Darwin/18.0.0 botocore/1.12.194", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 693, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "6efc106d-1389-4b0b-94a4-f7bcf9f9a77f", "eventTime": "2019-07-24T14:07:02Z", "eventName": "GetPolicy202224v2", "eventSource": "lambda.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "218.206.236.1", "userAgent": "aws-cli/1.16.204 Python/3.7.4 Darwin/18.0.0 botocore/1.12.194", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"functionName": "Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "6efc106d-1389-4b0b-94a4-f7bcf9f9a77f", "record_id": "flaws_cloudtrail:0000502:6efc106d-1389-4b0b-94a4-f7bcf9f9a77f", "row_index": 502, "timestamp": "2019-07-24T14:07:02Z", "event_type": "GetPolicy202224v2", "event_source": "lambda.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "218.206.236.1", "user_agent": "aws-cli/1.16.204 Python/3.7.4 Darwin/18.0.0 botocore/1.12.194", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 693, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "6efc106d-1389-4b0b-94a4-f7bcf9f9a77f", "eventTime": "2019-07-24T14:07:02Z", "eventName": "GetPolicy202224v2", "eventSource": "lambda.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "218.206.236.1", "userAgent": "aws-cli/1.16.204 Python/3.7.4 Darwin/18.0.0 botocore/1.12.194", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"functionName": "Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "60859cb5-1dc3-433b-af45-9fb3c00a67e7", "record_id": "flaws_cloudtrail:0000503:60859cb5-1dc3-433b-af45-9fb3c00a67e7", "row_index": 503, "timestamp": "2019-07-24T14:08:07Z", "event_type": "GetPolicy202224v2", "event_source": "lambda.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "218.206.236.1", "user_agent": "aws-cli/1.16.204 Python/3.7.4 Darwin/18.0.0 botocore/1.12.194", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 694, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "60859cb5-1dc3-433b-af45-9fb3c00a67e7", "eventTime": "2019-07-24T14:08:07Z", "eventName": "GetPolicy202224v2", "eventSource": "lambda.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "218.206.236.1", "userAgent": "aws-cli/1.16.204 Python/3.7.4 Darwin/18.0.0 botocore/1.12.194", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"functionName": "Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "60859cb5-1dc3-433b-af45-9fb3c00a67e7", "record_id": "flaws_cloudtrail:0000504:60859cb5-1dc3-433b-af45-9fb3c00a67e7", "row_index": 504, "timestamp": "2019-07-24T14:08:07Z", "event_type": "GetPolicy202224v2", "event_source": "lambda.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "218.206.236.1", "user_agent": "aws-cli/1.16.204 Python/3.7.4 Darwin/18.0.0 botocore/1.12.194", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 694, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "60859cb5-1dc3-433b-af45-9fb3c00a67e7", "eventTime": "2019-07-24T14:08:07Z", "eventName": "GetPolicy202224v2", "eventSource": "lambda.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "218.206.236.1", "userAgent": "aws-cli/1.16.204 Python/3.7.4 Darwin/18.0.0 botocore/1.12.194", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"functionName": "Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "7f24e9bd-0adf-4401-a800-62bf147747a2", "record_id": "flaws_cloudtrail:0000505:7f24e9bd-0adf-4401-a800-62bf147747a2", "row_index": 505, "timestamp": "2019-07-24T14:08:52Z", "event_type": "GetPolicy202224v2", "event_source": "lambda.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "218.206.236.1", "user_agent": "aws-cli/1.16.204 Python/3.7.4 Darwin/18.0.0 botocore/1.12.194", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 695, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "7f24e9bd-0adf-4401-a800-62bf147747a2", "eventTime": "2019-07-24T14:08:52Z", "eventName": "GetPolicy202224v2", "eventSource": "lambda.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "218.206.236.1", "userAgent": "aws-cli/1.16.204 Python/3.7.4 Darwin/18.0.0 botocore/1.12.194", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"functionName": "Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "7f24e9bd-0adf-4401-a800-62bf147747a2", "record_id": "flaws_cloudtrail:0000506:7f24e9bd-0adf-4401-a800-62bf147747a2", "row_index": 506, "timestamp": "2019-07-24T14:08:52Z", "event_type": "GetPolicy202224v2", "event_source": "lambda.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "218.206.236.1", "user_agent": "aws-cli/1.16.204 Python/3.7.4 Darwin/18.0.0 botocore/1.12.194", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 695, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "7f24e9bd-0adf-4401-a800-62bf147747a2", "eventTime": "2019-07-24T14:08:52Z", "eventName": "GetPolicy202224v2", "eventSource": "lambda.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "218.206.236.1", "userAgent": "aws-cli/1.16.204 Python/3.7.4 Darwin/18.0.0 botocore/1.12.194", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"functionName": "Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "6ddce4f2-3430-4ae4-861a-2cee1cccf4b9", "record_id": "flaws_cloudtrail:0000507:6ddce4f2-3430-4ae4-861a-2cee1cccf4b9", "row_index": 507, "timestamp": "2019-07-24T14:10:18Z", "event_type": "GetStages", "event_source": "apigateway.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "218.206.236.1", "user_agent": "aws-cli/1.16.204 Python/3.7.4 Darwin/18.0.0 botocore/1.12.194", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 831, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "readOnly", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "6ddce4f2-3430-4ae4-861a-2cee1cccf4b9", "eventTime": "2019-07-24T14:10:18Z", "eventName": "GetStages", "eventSource": "apigateway.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "218.206.236.1", "userAgent": "aws-cli/1.16.204 Python/3.7.4 Darwin/18.0.0 botocore/1.12.194", "awsRegion": "us-west-2", "errorCode": "NotFoundException", "errorMessage": "Invalid API identifier specified 811596193553:s33ppypa75\n", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"restApiId": "s33ppypa75\n", "template": false}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "6ddce4f2-3430-4ae4-861a-2cee1cccf4b9", "record_id": "flaws_cloudtrail:0000508:6ddce4f2-3430-4ae4-861a-2cee1cccf4b9", "row_index": 508, "timestamp": "2019-07-24T14:10:18Z", "event_type": "GetStages", "event_source": "apigateway.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "218.206.236.1", "user_agent": "aws-cli/1.16.204 Python/3.7.4 Darwin/18.0.0 botocore/1.12.194", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 831, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "readOnly", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "6ddce4f2-3430-4ae4-861a-2cee1cccf4b9", "eventTime": "2019-07-24T14:10:18Z", "eventName": "GetStages", "eventSource": "apigateway.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "218.206.236.1", "userAgent": "aws-cli/1.16.204 Python/3.7.4 Darwin/18.0.0 botocore/1.12.194", "awsRegion": "us-west-2", "errorCode": "NotFoundException", "errorMessage": "Invalid API identifier specified 811596193553:s33ppypa75\n", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"restApiId": "s33ppypa75\n", "template": false}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "f6cc28b9-108d-4658-a607-e2653bd30aec", "record_id": "flaws_cloudtrail:0000509:f6cc28b9-108d-4658-a607-e2653bd30aec", "row_index": 509, "timestamp": "2019-07-24T14:10:24Z", "event_type": "GetStages", "event_source": "apigateway.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "218.206.236.1", "user_agent": "aws-cli/1.16.204 Python/3.7.4 Darwin/18.0.0 botocore/1.12.194", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 724, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "readOnly", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "f6cc28b9-108d-4658-a607-e2653bd30aec", "eventTime": "2019-07-24T14:10:24Z", "eventName": "GetStages", "eventSource": "apigateway.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "218.206.236.1", "userAgent": "aws-cli/1.16.204 Python/3.7.4 Darwin/18.0.0 botocore/1.12.194", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"restApiId": "s33ppypa75", "template": false}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "f6cc28b9-108d-4658-a607-e2653bd30aec", "record_id": "flaws_cloudtrail:0000510:f6cc28b9-108d-4658-a607-e2653bd30aec", "row_index": 510, "timestamp": "2019-07-24T14:10:24Z", "event_type": "GetStages", "event_source": "apigateway.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "218.206.236.1", "user_agent": "aws-cli/1.16.204 Python/3.7.4 Darwin/18.0.0 botocore/1.12.194", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 724, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "readOnly", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "f6cc28b9-108d-4658-a607-e2653bd30aec", "eventTime": "2019-07-24T14:10:24Z", "eventName": "GetStages", "eventSource": "apigateway.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "218.206.236.1", "userAgent": "aws-cli/1.16.204 Python/3.7.4 Darwin/18.0.0 botocore/1.12.194", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"restApiId": "s33ppypa75", "template": false}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "affbf2a2-2965-4cf7-ac7f-4b10014d5f70", "record_id": "flaws_cloudtrail:0000511:affbf2a2-2965-4cf7-ac7f-4b10014d5f70", "row_index": 511, "timestamp": "2019-07-24T14:13:26Z", "event_type": "GetStages", "event_source": "apigateway.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "218.206.236.1", "user_agent": "aws-cli/1.16.204 Python/3.7.4 Darwin/18.0.0 botocore/1.12.194", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 724, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "readOnly", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "affbf2a2-2965-4cf7-ac7f-4b10014d5f70", "eventTime": "2019-07-24T14:13:26Z", "eventName": "GetStages", "eventSource": "apigateway.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "218.206.236.1", "userAgent": "aws-cli/1.16.204 Python/3.7.4 Darwin/18.0.0 botocore/1.12.194", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"restApiId": "s33ppypa75", "template": false}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "affbf2a2-2965-4cf7-ac7f-4b10014d5f70", "record_id": "flaws_cloudtrail:0000512:affbf2a2-2965-4cf7-ac7f-4b10014d5f70", "row_index": 512, "timestamp": "2019-07-24T14:13:26Z", "event_type": "GetStages", "event_source": "apigateway.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "218.206.236.1", "user_agent": "aws-cli/1.16.204 Python/3.7.4 Darwin/18.0.0 botocore/1.12.194", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 724, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "readOnly", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "affbf2a2-2965-4cf7-ac7f-4b10014d5f70", "eventTime": "2019-07-24T14:13:26Z", "eventName": "GetStages", "eventSource": "apigateway.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "218.206.236.1", "userAgent": "aws-cli/1.16.204 Python/3.7.4 Darwin/18.0.0 botocore/1.12.194", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"restApiId": "s33ppypa75", "template": false}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "ca8cce02-ab96-45ae-8b3f-b8498daab334", "record_id": "flaws_cloudtrail:0000513:ca8cce02-ab96-45ae-8b3f-b8498daab334", "row_index": 513, "timestamp": "2019-07-24T14:13:45Z", "event_type": "GetPolicy202224v2", "event_source": "lambda.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "218.206.236.1", "user_agent": "aws-cli/1.16.204 Python/3.7.4 Darwin/18.0.0 botocore/1.12.194", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 694, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "ca8cce02-ab96-45ae-8b3f-b8498daab334", "eventTime": "2019-07-24T14:13:45Z", "eventName": "GetPolicy202224v2", "eventSource": "lambda.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "218.206.236.1", "userAgent": "aws-cli/1.16.204 Python/3.7.4 Darwin/18.0.0 botocore/1.12.194", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"functionName": "Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "ca8cce02-ab96-45ae-8b3f-b8498daab334", "record_id": "flaws_cloudtrail:0000514:ca8cce02-ab96-45ae-8b3f-b8498daab334", "row_index": 514, "timestamp": "2019-07-24T14:13:45Z", "event_type": "GetPolicy202224v2", "event_source": "lambda.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "218.206.236.1", "user_agent": "aws-cli/1.16.204 Python/3.7.4 Darwin/18.0.0 botocore/1.12.194", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 694, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "ca8cce02-ab96-45ae-8b3f-b8498daab334", "eventTime": "2019-07-24T14:13:45Z", "eventName": "GetPolicy202224v2", "eventSource": "lambda.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "218.206.236.1", "userAgent": "aws-cli/1.16.204 Python/3.7.4 Darwin/18.0.0 botocore/1.12.194", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"functionName": "Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "730d4002-40e7-4909-bb71-d462353bea2be", "record_id": "flaws_cloudtrail:0000515:730d4002-40e7-4909-bb71-d462353bea2be", "row_index": 515, "timestamp": "2019-07-24T14:14:00Z", "event_type": "GetStages", "event_source": "apigateway.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "218.206.236.1", "user_agent": "aws-cli/1.16.204 Python/3.7.4 Darwin/18.0.0 botocore/1.12.194", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 835, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "readOnly", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "730d4002-40e7-4909-bb71-d462353bea2be", "eventTime": "2019-07-24T14:14:00Z", "eventName": "GetStages", "eventSource": "apigateway.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "218.206.236.1", "userAgent": "aws-cli/1.16.204 Python/3.7.4 Darwin/18.0.0 botocore/1.12.194", "awsRegion": "us-west-2", "errorCode": "NotFoundException", "errorMessage": "Invalid API identifier specified 811596193553:s33ppypa75\n", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"restApiId": "s33ppypa75\n", "template": false}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "730d4002-40e7-4909-bb71-d462353bea2be", "record_id": "flaws_cloudtrail:0000516:730d4002-40e7-4909-bb71-d462353bea2be", "row_index": 516, "timestamp": "2019-07-24T14:14:00Z", "event_type": "GetStages", "event_source": "apigateway.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "218.206.236.1", "user_agent": "aws-cli/1.16.204 Python/3.7.4 Darwin/18.0.0 botocore/1.12.194", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 835, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "readOnly", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "730d4002-40e7-4909-bb71-d462353bea2be", "eventTime": "2019-07-24T14:14:00Z", "eventName": "GetStages", "eventSource": "apigateway.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "218.206.236.1", "userAgent": "aws-cli/1.16.204 Python/3.7.4 Darwin/18.0.0 botocore/1.12.194", "awsRegion": "us-west-2", "errorCode": "NotFoundException", "errorMessage": "Invalid API identifier specified 811596193553:s33ppypa75\n", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"restApiId": "s33ppypa75\n", "template": false}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "817706ff2-6497-4660-a103-eb6a515d878c", "record_id": "flaws_cloudtrail:0000517:817706ff2-6497-4660-a103-eb6a515d878c", "row_index": 517, "timestamp": "2019-07-24T14:14:06Z", "event_type": "GetStages", "event_source": "apigateway.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "218.206.236.1", "user_agent": "aws-cli/1.16.204 Python/3.7.4 Darwin/18.0.0 botocore/1.12.194", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 719, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "readOnly", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "817706ff2-6497-4660-a103-eb6a515d878c", "eventTime": "2019-07-24T14:14:06Z", "eventName": "GetStages", "eventSource": "apigateway.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "218.206.236.1", "userAgent": "aws-cli/1.16.204 Python/3.7.4 Darwin/18.0.0 botocore/1.12.194", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"restApiId": "s33ppypa75", "template": false}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "817706ff2-6497-4660-a103-eb6a515d878c", "record_id": "flaws_cloudtrail:0000518:817706ff2-6497-4660-a103-eb6a515d878c", "row_index": 518, "timestamp": "2019-07-24T14:14:06Z", "event_type": "GetStages", "event_source": "apigateway.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "218.206.236.1", "user_agent": "aws-cli/1.16.204 Python/3.7.4 Darwin/18.0.0 botocore/1.12.194", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 719, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "readOnly", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "817706ff2-6497-4660-a103-eb6a515d878c", "eventTime": "2019-07-24T14:14:06Z", "eventName": "GetStages", "eventSource": "apigateway.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "218.206.236.1", "userAgent": "aws-cli/1.16.204 Python/3.7.4 Darwin/18.0.0 botocore/1.12.194", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"restApiId": "s33ppypa75", "template": false}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "e7103c2e-66bd-4251-a4cf-4493746360bf", "record_id": "flaws_cloudtrail:0000519:e7103c2e-66bd-4251-a4cf-4493746360bf", "row_index": 519, "timestamp": "2019-07-24T14:17:18Z", "event_type": "CreateLogStream", "event_source": "logs.amazonaws.com", "principal": {"type": "AssumedRole", "arn": "arn:aws:sts::811596193553:assumed-role/Level6/Level6", "account_id": "811596193553", "principal_id": "AROAI4E1FBACLY3FPC6BB:Level6", "user_name": null, "access_key_id": "ASIA12QGTLHHUGWDJJUL", "session_issuer_arn": "arn:aws:iam::811596193553:role/service-role/Level6", "session_issuer_user_name": "Level6"}, "network": {"source_ip": "221.250.250.5", "user_agent": "awslambda-worker", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1030, "raw_record_depth": 4, "raw_record_top_level_keys": ["apiVersion", "awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "e7103c2e-66bd-4251-a4cf-4493746360bf", "eventTime": "2019-07-24T14:17:18Z", "eventName": "CreateLogStream", "eventSource": "logs.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "221.250.250.5", "userAgent": "awslambda-worker", "awsRegion": "us-west-2", "userIdentity": {"type": "AssumedRole", "principalId": "AROAI4E1FBACLY3FPC6BB:Level6", "arn": "arn:aws:sts::811596193553:assumed-role/Level6/Level6", "accountId": "811596193553", "accessKeyId": "ASIA12QGTLHHUGWDJJUL", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2019-07-24T13:28:12Z"}, "sessionIssuer": {"type": "Role", "principalId": "AROAI4E1FBACLY3FPC6BB", "arn": "arn:aws:iam::811596193553:role/service-role/Level6", "accountId": "811596193553", "userName": "Level6"}}}, "requestParameters": {"logStreamName": "2019/07/24/[$LATEST]dfc3b7a44bd7474c94e5d338c97b7116", "logGroupName": "/aws/lambda/Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "b3ef1c9f-475c-4f32-8a22-a8c79d11d8f6", "record_id": "flaws_cloudtrail:0000520:b3ef1c9f-475c-4f32-8a22-a8c79d11d8f6", "row_index": 520, "timestamp": "2019-07-24T14:17:18Z", "event_type": "AssumeRole", "event_source": "sts.amazonaws.com", "principal": {"type": "AWSService", "arn": null, "account_id": null, "principal_id": null, "user_name": null, "access_key_id": null, "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "lambda.amazonaws.com", "user_agent": "lambda.amazonaws.com", "aws_region": "us-west-2"}, "resource_arns": ["arn:aws:iam::811596193553:role/service-role/Level6"], "raw_record_size_bytes": 1628, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "resources", "responseElements", "sharedEventID", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "b3ef1c9f-475c-4f32-8a22-a8c79d11d8f6", "eventTime": "2019-07-24T14:17:18Z", "eventName": "AssumeRole", "eventSource": "sts.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "lambda.amazonaws.com", "userAgent": "lambda.amazonaws.com", "awsRegion": "us-west-2", "userIdentity": {"type": "AWSService", "invokedBy": "lambda.amazonaws.com"}, "requestParameters": {"roleSessionName": "Level6", "roleArn": "arn:aws:iam::811596193553:role/service-role/Level6"}, "responseElements": {"credentials": {"accessKeyId": "ASIAGB8AKBCC24T4A9NJ", "expiration": "Jul 25, 2019 2:17:18 AM", "sessionToken": "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"}}, "resources": [{"ARN": "arn:aws:iam::811596193553:role/service-role/Level6", "accountId": "811596193553", "type": "AWS::IAM::Role"}]}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "e7103c2e-66bd-4251-a4cf-4493746360bf", "record_id": "flaws_cloudtrail:0000521:e7103c2e-66bd-4251-a4cf-4493746360bf", "row_index": 521, "timestamp": "2019-07-24T14:17:18Z", "event_type": "CreateLogStream", "event_source": "logs.amazonaws.com", "principal": {"type": "AssumedRole", "arn": "arn:aws:sts::811596193553:assumed-role/Level6/Level6", "account_id": "811596193553", "principal_id": "AROAI4E1FBACLY3FPC6BB:Level6", "user_name": null, "access_key_id": "ASIA12QGTLHHUGWDJJUL", "session_issuer_arn": "arn:aws:iam::811596193553:role/service-role/Level6", "session_issuer_user_name": "Level6"}, "network": {"source_ip": "221.250.250.5", "user_agent": "awslambda-worker", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1030, "raw_record_depth": 4, "raw_record_top_level_keys": ["apiVersion", "awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "e7103c2e-66bd-4251-a4cf-4493746360bf", "eventTime": "2019-07-24T14:17:18Z", "eventName": "CreateLogStream", "eventSource": "logs.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "221.250.250.5", "userAgent": "awslambda-worker", "awsRegion": "us-west-2", "userIdentity": {"type": "AssumedRole", "principalId": "AROAI4E1FBACLY3FPC6BB:Level6", "arn": "arn:aws:sts::811596193553:assumed-role/Level6/Level6", "accountId": "811596193553", "accessKeyId": "ASIA12QGTLHHUGWDJJUL", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2019-07-24T13:28:12Z"}, "sessionIssuer": {"type": "Role", "principalId": "AROAI4E1FBACLY3FPC6BB", "arn": "arn:aws:iam::811596193553:role/service-role/Level6", "accountId": "811596193553", "userName": "Level6"}}}, "requestParameters": {"logStreamName": "2019/07/24/[$LATEST]dfc3b7a44bd7474c94e5d338c97b7116", "logGroupName": "/aws/lambda/Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "b3ef1c9f-475c-4f32-8a22-a8c79d11d8f6", "record_id": "flaws_cloudtrail:0000522:b3ef1c9f-475c-4f32-8a22-a8c79d11d8f6", "row_index": 522, "timestamp": "2019-07-24T14:17:18Z", "event_type": "AssumeRole", "event_source": "sts.amazonaws.com", "principal": {"type": "AWSService", "arn": null, "account_id": null, "principal_id": null, "user_name": null, "access_key_id": null, "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "lambda.amazonaws.com", "user_agent": "lambda.amazonaws.com", "aws_region": "us-west-2"}, "resource_arns": ["arn:aws:iam::811596193553:role/service-role/Level6"], "raw_record_size_bytes": 1628, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "resources", "responseElements", "sharedEventID", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "b3ef1c9f-475c-4f32-8a22-a8c79d11d8f6", "eventTime": "2019-07-24T14:17:18Z", "eventName": "AssumeRole", "eventSource": "sts.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "lambda.amazonaws.com", "userAgent": "lambda.amazonaws.com", "awsRegion": "us-west-2", "userIdentity": {"type": "AWSService", "invokedBy": "lambda.amazonaws.com"}, "requestParameters": {"roleSessionName": "Level6", "roleArn": "arn:aws:iam::811596193553:role/service-role/Level6"}, "responseElements": {"credentials": {"accessKeyId": "ASIAGB8AKBCC24T4A9NJ", "expiration": "Jul 25, 2019 2:17:18 AM", "sessionToken": "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"}}, "resources": [{"ARN": "arn:aws:iam::811596193553:role/service-role/Level6", "accountId": "811596193553", "type": "AWS::IAM::Role"}]}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "6f8aaa64-aa33-447b-8449-aba5b19d6553", "record_id": "flaws_cloudtrail:0000523:6f8aaa64-aa33-447b-8449-aba5b19d6553", "row_index": 523, "timestamp": "2019-07-24T14:23:28Z", "event_type": "GetPolicy202224v2", "event_source": "lambda.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "5.180.250.254", "user_agent": "aws-cli/1.16.203 Python/3.6.0 Windows/10 botocore/1.12.193", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 876, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "6f8aaa64-aa33-447b-8449-aba5b19d6553", "eventTime": "2019-07-24T14:23:28Z", "eventName": "GetPolicy202224v2", "eventSource": "lambda.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "5.180.250.254", "userAgent": "aws-cli/1.16.203 Python/3.6.0 Windows/10 botocore/1.12.193", "awsRegion": "us-west-2", "errorCode": "AccessDenied", "errorMessage": "User: arn:aws:iam::811596193553:user/backup is not authorized to perform: lambda:GetPolicy on resource: arn:aws:lambda:us-west-2:811596193553:function:2rfismmoo8", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "6f8aaa64-aa33-447b-8449-aba5b19d6553", "record_id": "flaws_cloudtrail:0000524:6f8aaa64-aa33-447b-8449-aba5b19d6553", "row_index": 524, "timestamp": "2019-07-24T14:23:28Z", "event_type": "GetPolicy202224v2", "event_source": "lambda.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "5.180.250.254", "user_agent": "aws-cli/1.16.203 Python/3.6.0 Windows/10 botocore/1.12.193", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 876, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "6f8aaa64-aa33-447b-8449-aba5b19d6553", "eventTime": "2019-07-24T14:23:28Z", "eventName": "GetPolicy202224v2", "eventSource": "lambda.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "5.180.250.254", "userAgent": "aws-cli/1.16.203 Python/3.6.0 Windows/10 botocore/1.12.193", "awsRegion": "us-west-2", "errorCode": "AccessDenied", "errorMessage": "User: arn:aws:iam::811596193553:user/backup is not authorized to perform: lambda:GetPolicy on resource: arn:aws:lambda:us-west-2:811596193553:function:2rfismmoo8", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "9a1e9415-f655-4569-94cb-b588e2a8d477", "record_id": "flaws_cloudtrail:0000525:9a1e9415-f655-4569-94cb-b588e2a8d477", "row_index": 525, "timestamp": "2019-07-24T14:31:25Z", "event_type": "AssumeRole", "event_source": "sts.amazonaws.com", "principal": {"type": "AWSService", "arn": null, "account_id": null, "principal_id": null, "user_name": null, "access_key_id": null, "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "ec2.amazonaws.com", "user_agent": "ec2.amazonaws.com", "aws_region": "us-west-2"}, "resource_arns": ["arn:aws:iam::811596193553:role/flaws"], "raw_record_size_bytes": 1895, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "resources", "responseElements", "sharedEventID", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "9a1e9415-f655-4569-94cb-b588e2a8d477", "eventTime": "2019-07-24T14:31:25Z", "eventName": "AssumeRole", "eventSource": "sts.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "ec2.amazonaws.com", "userAgent": "ec2.amazonaws.com", "awsRegion": "us-west-2", "userIdentity": {"type": "AWSService", "invokedBy": "ec2.amazonaws.com"}, "requestParameters": {"roleSessionName": "i-aa2d3b42e5c6e801a", "roleArn": "arn:aws:iam::811596193553:role/flaws"}, "responseElements": {"credentials": {"accessKeyId": "ASIARR8UD7OLN1SDOBV7", "expiration": "Jul 24, 2019 8:50:44 PM", "sessionToken": "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"}}, "resources": [{"ARN": "arn:aws:iam::811596193553:role/flaws", "accountId": "811596193553", "type": "AWS::IAM::Role"}]}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "9a1e9415-f655-4569-94cb-b588e2a8d477", "record_id": "flaws_cloudtrail:0000526:9a1e9415-f655-4569-94cb-b588e2a8d477", "row_index": 526, "timestamp": "2019-07-24T14:31:25Z", "event_type": "AssumeRole", "event_source": "sts.amazonaws.com", "principal": {"type": "AWSService", "arn": null, "account_id": null, "principal_id": null, "user_name": null, "access_key_id": null, "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "ec2.amazonaws.com", "user_agent": "ec2.amazonaws.com", "aws_region": "us-west-2"}, "resource_arns": ["arn:aws:iam::811596193553:role/flaws"], "raw_record_size_bytes": 1895, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "resources", "responseElements", "sharedEventID", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "9a1e9415-f655-4569-94cb-b588e2a8d477", "eventTime": "2019-07-24T14:31:25Z", "eventName": "AssumeRole", "eventSource": "sts.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "ec2.amazonaws.com", "userAgent": "ec2.amazonaws.com", "awsRegion": "us-west-2", "userIdentity": {"type": "AWSService", "invokedBy": "ec2.amazonaws.com"}, "requestParameters": {"roleSessionName": "i-aa2d3b42e5c6e801a", "roleArn": "arn:aws:iam::811596193553:role/flaws"}, "responseElements": {"credentials": {"accessKeyId": "ASIARR8UD7OLN1SDOBV7", "expiration": "Jul 24, 2019 8:50:44 PM", "sessionToken": "AgoJb3JpZ2luX2VjEIf//////////wEaCXVzLXdlc3QtMiJHMEUCIES/7rE5/whbJPax8PFqO4EVtF9MGHKFnq1uRLNonN0NAiEA+ADOQkk0CE3B18E9B2EQ6i1IiM78ymY8Ff0z8OoCmgEq4wMI8P//////////ARAAGgw5NzU0MjYyNjIwMjkiDJlfwotTk2YloWdeGCq3AyW8+8vj0ir+hRrSfCg5IreF5kMr6L1pb5/pvIw1KHwMQbu1AdgrvbiQDtxRoWMoJz48Y7nedOe7VyNBot6pcBJHt/weY+CBuWJLhhRUZ/Cy0yIP+dK44y93LWsPL7h1oBxrBcQBpo6TxZJwqcoN8bpChHHbyjtnf+syXDPjZQ1bCWE7Gjw6s5LysDjyT8BH+Ts2tT8KGekYk32+WUyaGgi+WVcdUslgR4mh+5buc2P2M5H2o0Mlt1PcuGa/1YoREliqEhijyFIiC2l8QHZSmBddhg5NjiZccK7jKWQ3neuotMKAJReNeJtWFDge4FAzYJf2+EkVAtlQr1Dyh0Q5PTnXHQbIsape6pCDxqMX6yxAKXrMfWjAXDGCZ/pfLPcafwlB/bpER4w4kn5wo/Wari+C9e3JvWCeCYqh7zcoaKuD1dzJX6YwvKAJJWKGZvZKB+lsZqOuxSh8dKDS37kRa++Zmz8RD8abcO+TOn3jFNyrbySIGGeToD1MHCwyjXtoEO9QWP1LY9jikLvK3rZRsDA8CVRQ4iKFsr1RXrtwX71ex5I1yHoQvRSTCNsd7Ip5brzxT7RmJHEwvdfh6QU6tAFWr6pSJflFRk+tC9AUM9qsBk1L7BobzBQs0DstaBEN7avHM9NYoa4MqPl9abhj7bB6bVtH4iSx6/to0aAtgGu2xGPcZrc6VqaBgeMZfdgszSNSRiuC9Ln1rE8yhx+Dniwsne3+91K8FUPhVtDMGTOQ7FnC8rYYG0X8DPFDqiFooXLVu6gezmavY9LPX4jpSYfhORj7fGCirX3OzjOw9oNaG3AhmIrDHDCZqgTkgiVLUjoNoGI="}}, "resources": [{"ARN": "arn:aws:iam::811596193553:role/flaws", "accountId": "811596193553", "type": "AWS::IAM::Role"}]}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "215f4bbb-939a-4aa0-9506-fcc9d5ccabd4", "record_id": "flaws_cloudtrail:0000527:215f4bbb-939a-4aa0-9506-fcc9d5ccabd4", "row_index": 527, "timestamp": "2019-07-24T14:32:49Z", "event_type": "GetRestApis", "event_source": "apigateway.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "5.180.250.254", "user_agent": "aws-cli/1.16.203 Python/3.6.0 Windows/10 botocore/1.12.193", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 853, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "215f4bbb-939a-4aa0-9506-fcc9d5ccabd4", "eventTime": "2019-07-24T14:32:49Z", "eventName": "GetRestApis", "eventSource": "apigateway.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "5.180.250.254", "userAgent": "aws-cli/1.16.203 Python/3.6.0 Windows/10 botocore/1.12.193", "awsRegion": "us-west-2", "errorCode": "AccessDenied", "errorMessage": "User: arn:aws:iam::811596193553:user/backup is not authorized to perform: apigateway:GET on resource: arn:aws:apigateway:us-west-2::/restapis", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "215f4bbb-939a-4aa0-9506-fcc9d5ccabd4", "record_id": "flaws_cloudtrail:0000528:215f4bbb-939a-4aa0-9506-fcc9d5ccabd4", "row_index": 528, "timestamp": "2019-07-24T14:32:49Z", "event_type": "GetRestApis", "event_source": "apigateway.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "5.180.250.254", "user_agent": "aws-cli/1.16.203 Python/3.6.0 Windows/10 botocore/1.12.193", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 853, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "215f4bbb-939a-4aa0-9506-fcc9d5ccabd4", "eventTime": "2019-07-24T14:32:49Z", "eventName": "GetRestApis", "eventSource": "apigateway.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "5.180.250.254", "userAgent": "aws-cli/1.16.203 Python/3.6.0 Windows/10 botocore/1.12.193", "awsRegion": "us-west-2", "errorCode": "AccessDenied", "errorMessage": "User: arn:aws:iam::811596193553:user/backup is not authorized to perform: apigateway:GET on resource: arn:aws:apigateway:us-west-2::/restapis", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "499f884a-0630-412e-9bb8-139df134ec58", "record_id": "flaws_cloudtrail:0000529:499f884a-0630-412e-9bb8-139df134ec58", "row_index": 529, "timestamp": "2019-07-24T14:45:47Z", "event_type": "AssumeRole", "event_source": "sts.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "9.26.56.242", "user_agent": "aws-cli/1.16.203 Python/2.7.16+ Linux/4.19.0-kali5-amd64 botocore/1.12.193", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 860, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "499f884a-0630-412e-9bb8-139df134ec58", "eventTime": "2019-07-24T14:45:47Z", "eventName": "AssumeRole", "eventSource": "sts.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "9.26.56.242", "userAgent": "aws-cli/1.16.203 Python/2.7.16+ Linux/4.19.0-kali5-amd64 botocore/1.12.193", "awsRegion": "us-east-1", "errorCode": "AccessDenied", "errorMessage": "User: arn:aws:iam::811596193553:user/Level6 is not authorized to perform: sts:AssumeRole on resource: arn:aws:iam::516340647433:role/security", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "499f884a-0630-412e-9bb8-139df134ec58", "record_id": "flaws_cloudtrail:0000530:499f884a-0630-412e-9bb8-139df134ec58", "row_index": 530, "timestamp": "2019-07-24T14:45:47Z", "event_type": "AssumeRole", "event_source": "sts.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "9.26.56.242", "user_agent": "aws-cli/1.16.203 Python/2.7.16+ Linux/4.19.0-kali5-amd64 botocore/1.12.193", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 860, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "499f884a-0630-412e-9bb8-139df134ec58", "eventTime": "2019-07-24T14:45:47Z", "eventName": "AssumeRole", "eventSource": "sts.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "9.26.56.242", "userAgent": "aws-cli/1.16.203 Python/2.7.16+ Linux/4.19.0-kali5-amd64 botocore/1.12.193", "awsRegion": "us-east-1", "errorCode": "AccessDenied", "errorMessage": "User: arn:aws:iam::811596193553:user/Level6 is not authorized to perform: sts:AssumeRole on resource: arn:aws:iam::516340647433:role/security", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "7acaaa9c-9c4f-45a4-b432-1378ce139d17", "record_id": "flaws_cloudtrail:0000531:7acaaa9c-9c4f-45a4-b432-1378ce139d17", "row_index": 531, "timestamp": "2019-07-24T14:45:58Z", "event_type": "AssumeRole", "event_source": "sts.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "9.26.56.242", "user_agent": "aws-cli/1.16.203 Python/2.7.16+ Linux/4.19.0-kali5-amd64 botocore/1.12.193", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 860, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "7acaaa9c-9c4f-45a4-b432-1378ce139d17", "eventTime": "2019-07-24T14:45:58Z", "eventName": "AssumeRole", "eventSource": "sts.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "9.26.56.242", "userAgent": "aws-cli/1.16.203 Python/2.7.16+ Linux/4.19.0-kali5-amd64 botocore/1.12.193", "awsRegion": "us-east-1", "errorCode": "AccessDenied", "errorMessage": "User: arn:aws:iam::811596193553:user/Level6 is not authorized to perform: sts:AssumeRole on resource: arn:aws:iam::516340647433:role/security", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "7acaaa9c-9c4f-45a4-b432-1378ce139d17", "record_id": "flaws_cloudtrail:0000532:7acaaa9c-9c4f-45a4-b432-1378ce139d17", "row_index": 532, "timestamp": "2019-07-24T14:45:58Z", "event_type": "AssumeRole", "event_source": "sts.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "9.26.56.242", "user_agent": "aws-cli/1.16.203 Python/2.7.16+ Linux/4.19.0-kali5-amd64 botocore/1.12.193", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 860, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "7acaaa9c-9c4f-45a4-b432-1378ce139d17", "eventTime": "2019-07-24T14:45:58Z", "eventName": "AssumeRole", "eventSource": "sts.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "9.26.56.242", "userAgent": "aws-cli/1.16.203 Python/2.7.16+ Linux/4.19.0-kali5-amd64 botocore/1.12.193", "awsRegion": "us-east-1", "errorCode": "AccessDenied", "errorMessage": "User: arn:aws:iam::811596193553:user/Level6 is not authorized to perform: sts:AssumeRole on resource: arn:aws:iam::516340647433:role/security", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "729918daf-e4a6-4119-a26c-c9c890cbde2c", "record_id": "flaws_cloudtrail:0000533:729918daf-e4a6-4119-a26c-c9c890cbde2c", "row_index": 533, "timestamp": "2019-07-24T14:48:06Z", "event_type": "AssumeRole", "event_source": "sts.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "9.26.56.242", "user_agent": "aws-cli/1.16.203 Python/2.7.16+ Linux/4.19.0-kali5-amd64 botocore/1.12.193", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 861, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "729918daf-e4a6-4119-a26c-c9c890cbde2c", "eventTime": "2019-07-24T14:48:06Z", "eventName": "AssumeRole", "eventSource": "sts.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "9.26.56.242", "userAgent": "aws-cli/1.16.203 Python/2.7.16+ Linux/4.19.0-kali5-amd64 botocore/1.12.193", "awsRegion": "us-east-1", "errorCode": "AccessDenied", "errorMessage": "User: arn:aws:iam::811596193553:user/Level6 is not authorized to perform: sts:AssumeRole on resource: arn:aws:iam::516340647433:role/security", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "729918daf-e4a6-4119-a26c-c9c890cbde2c", "record_id": "flaws_cloudtrail:0000534:729918daf-e4a6-4119-a26c-c9c890cbde2c", "row_index": 534, "timestamp": "2019-07-24T14:48:06Z", "event_type": "AssumeRole", "event_source": "sts.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "9.26.56.242", "user_agent": "aws-cli/1.16.203 Python/2.7.16+ Linux/4.19.0-kali5-amd64 botocore/1.12.193", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 861, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "729918daf-e4a6-4119-a26c-c9c890cbde2c", "eventTime": "2019-07-24T14:48:06Z", "eventName": "AssumeRole", "eventSource": "sts.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "9.26.56.242", "userAgent": "aws-cli/1.16.203 Python/2.7.16+ Linux/4.19.0-kali5-amd64 botocore/1.12.193", "awsRegion": "us-east-1", "errorCode": "AccessDenied", "errorMessage": "User: arn:aws:iam::811596193553:user/Level6 is not authorized to perform: sts:AssumeRole on resource: arn:aws:iam::516340647433:role/security", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "ad24ac6f-2889-415b-8480-76465e94ddb", "record_id": "flaws_cloudtrail:0000535:ad24ac6f-2889-415b-8480-76465e94ddb", "row_index": 535, "timestamp": "2019-07-24T14:49:39Z", "event_type": "AssumeRole", "event_source": "sts.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "9.26.56.242", "user_agent": "aws-cli/1.16.203 Python/2.7.16+ Linux/4.19.0-kali5-amd64 botocore/1.12.193", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 860, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "ad24ac6f-2889-415b-8480-76465e94ddb", "eventTime": "2019-07-24T14:49:39Z", "eventName": "AssumeRole", "eventSource": "sts.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "9.26.56.242", "userAgent": "aws-cli/1.16.203 Python/2.7.16+ Linux/4.19.0-kali5-amd64 botocore/1.12.193", "awsRegion": "us-east-1", "errorCode": "AccessDenied", "errorMessage": "User: arn:aws:iam::811596193553:user/Level6 is not authorized to perform: sts:AssumeRole on resource: arn:aws:iam::516340647433:role/security", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "ad24ac6f-2889-415b-8480-76465e94ddb", "record_id": "flaws_cloudtrail:0000536:ad24ac6f-2889-415b-8480-76465e94ddb", "row_index": 536, "timestamp": "2019-07-24T14:49:39Z", "event_type": "AssumeRole", "event_source": "sts.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "9.26.56.242", "user_agent": "aws-cli/1.16.203 Python/2.7.16+ Linux/4.19.0-kali5-amd64 botocore/1.12.193", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 860, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "ad24ac6f-2889-415b-8480-76465e94ddb", "eventTime": "2019-07-24T14:49:39Z", "eventName": "AssumeRole", "eventSource": "sts.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "9.26.56.242", "userAgent": "aws-cli/1.16.203 Python/2.7.16+ Linux/4.19.0-kali5-amd64 botocore/1.12.193", "awsRegion": "us-east-1", "errorCode": "AccessDenied", "errorMessage": "User: arn:aws:iam::811596193553:user/Level6 is not authorized to perform: sts:AssumeRole on resource: arn:aws:iam::516340647433:role/security", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "b2b5935e-608a-4642-95e9-771711a872abc", "record_id": "flaws_cloudtrail:0000537:b2b5935e-608a-4642-95e9-771711a872abc", "row_index": 537, "timestamp": "2019-07-24T14:50:43Z", "event_type": "AssumeRole", "event_source": "sts.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "9.26.56.242", "user_agent": "aws-cli/1.16.203 Python/2.7.16+ Linux/4.19.0-kali5-amd64 botocore/1.12.193", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 861, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "b2b5935e-608a-4642-95e9-771711a872abc", "eventTime": "2019-07-24T14:50:43Z", "eventName": "AssumeRole", "eventSource": "sts.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "9.26.56.242", "userAgent": "aws-cli/1.16.203 Python/2.7.16+ Linux/4.19.0-kali5-amd64 botocore/1.12.193", "awsRegion": "us-east-1", "errorCode": "AccessDenied", "errorMessage": "User: arn:aws:iam::811596193553:user/Level6 is not authorized to perform: sts:AssumeRole on resource: arn:aws:iam::516340647433:role/security", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "b2b5935e-608a-4642-95e9-771711a872abc", "record_id": "flaws_cloudtrail:0000538:b2b5935e-608a-4642-95e9-771711a872abc", "row_index": 538, "timestamp": "2019-07-24T14:50:43Z", "event_type": "AssumeRole", "event_source": "sts.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "9.26.56.242", "user_agent": "aws-cli/1.16.203 Python/2.7.16+ Linux/4.19.0-kali5-amd64 botocore/1.12.193", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 861, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "b2b5935e-608a-4642-95e9-771711a872abc", "eventTime": "2019-07-24T14:50:43Z", "eventName": "AssumeRole", "eventSource": "sts.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "9.26.56.242", "userAgent": "aws-cli/1.16.203 Python/2.7.16+ Linux/4.19.0-kali5-amd64 botocore/1.12.193", "awsRegion": "us-east-1", "errorCode": "AccessDenied", "errorMessage": "User: arn:aws:iam::811596193553:user/Level6 is not authorized to perform: sts:AssumeRole on resource: arn:aws:iam::516340647433:role/security", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "d4bcbb89-01fb-4466-ac57-244df8c1e9a4", "record_id": "flaws_cloudtrail:0000539:d4bcbb89-01fb-4466-ac57-244df8c1e9a4", "row_index": 539, "timestamp": "2019-07-24T14:52:49Z", "event_type": "AssumeRole", "event_source": "sts.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "9.26.56.242", "user_agent": "aws-cli/1.16.203 Python/2.7.16+ Linux/4.19.0-kali5-amd64 botocore/1.12.193", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 860, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "d4bcbb89-01fb-4466-ac57-244df8c1e9a4", "eventTime": "2019-07-24T14:52:49Z", "eventName": "AssumeRole", "eventSource": "sts.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "9.26.56.242", "userAgent": "aws-cli/1.16.203 Python/2.7.16+ Linux/4.19.0-kali5-amd64 botocore/1.12.193", "awsRegion": "us-east-1", "errorCode": "AccessDenied", "errorMessage": "User: arn:aws:iam::811596193553:user/Level6 is not authorized to perform: sts:AssumeRole on resource: arn:aws:iam::516340647433:role/security", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "d4bcbb89-01fb-4466-ac57-244df8c1e9a4", "record_id": "flaws_cloudtrail:0000540:d4bcbb89-01fb-4466-ac57-244df8c1e9a4", "row_index": 540, "timestamp": "2019-07-24T14:52:49Z", "event_type": "AssumeRole", "event_source": "sts.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "9.26.56.242", "user_agent": "aws-cli/1.16.203 Python/2.7.16+ Linux/4.19.0-kali5-amd64 botocore/1.12.193", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 860, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "d4bcbb89-01fb-4466-ac57-244df8c1e9a4", "eventTime": "2019-07-24T14:52:49Z", "eventName": "AssumeRole", "eventSource": "sts.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "9.26.56.242", "userAgent": "aws-cli/1.16.203 Python/2.7.16+ Linux/4.19.0-kali5-amd64 botocore/1.12.193", "awsRegion": "us-east-1", "errorCode": "AccessDenied", "errorMessage": "User: arn:aws:iam::811596193553:user/Level6 is not authorized to perform: sts:AssumeRole on resource: arn:aws:iam::516340647433:role/security", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "d6007c1e-9b78-4033-abb1-72c4bcf1b1af", "record_id": "flaws_cloudtrail:0000541:d6007c1e-9b78-4033-abb1-72c4bcf1b1af", "row_index": 541, "timestamp": "2019-07-24T15:20:35Z", "event_type": "ListBuckets", "event_source": "s3.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "5.180.250.254", "user_agent": "[aws-cli/1.16.204 Python/3.6.8 Linux/4.19.0-kali3-amd64 botocore/1.12.194]", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 813, "raw_record_depth": 3, "raw_record_top_level_keys": ["additionalEventData", "awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "d6007c1e-9b78-4033-abb1-72c4bcf1b1af", "eventTime": "2019-07-24T15:20:35Z", "eventName": "ListBuckets", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "5.180.250.254", "userAgent": "[aws-cli/1.16.204 Python/3.6.8 Linux/4.19.0-kali3-amd64 botocore/1.12.194]", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"host": ["s3.amazonaws.com"]}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "d6007c1e-9b78-4033-abb1-72c4bcf1b1af", "record_id": "flaws_cloudtrail:0000542:d6007c1e-9b78-4033-abb1-72c4bcf1b1af", "row_index": 542, "timestamp": "2019-07-24T15:20:35Z", "event_type": "ListBuckets", "event_source": "s3.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "5.180.250.254", "user_agent": "[aws-cli/1.16.204 Python/3.6.8 Linux/4.19.0-kali3-amd64 botocore/1.12.194]", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 813, "raw_record_depth": 3, "raw_record_top_level_keys": ["additionalEventData", "awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "d6007c1e-9b78-4033-abb1-72c4bcf1b1af", "eventTime": "2019-07-24T15:20:35Z", "eventName": "ListBuckets", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "5.180.250.254", "userAgent": "[aws-cli/1.16.204 Python/3.6.8 Linux/4.19.0-kali3-amd64 botocore/1.12.194]", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"host": ["s3.amazonaws.com"]}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "7159c01f-e3ec-41ac-9bc0-6f2826adb0e0", "record_id": "flaws_cloudtrail:0000543:7159c01f-e3ec-41ac-9bc0-6f2826adb0e0", "row_index": 543, "timestamp": "2019-07-24T15:31:25Z", "event_type": "AssumeRole", "event_source": "sts.amazonaws.com", "principal": {"type": "AWSService", "arn": null, "account_id": null, "principal_id": null, "user_name": null, "access_key_id": null, "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "ec2.amazonaws.com", "user_agent": "ec2.amazonaws.com", "aws_region": "us-west-2"}, "resource_arns": ["arn:aws:iam::811596193553:role/flaws"], "raw_record_size_bytes": 1892, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "resources", "responseElements", "sharedEventID", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "7159c01f-e3ec-41ac-9bc0-6f2826adb0e0", "eventTime": "2019-07-24T15:31:25Z", "eventName": "AssumeRole", "eventSource": "sts.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "ec2.amazonaws.com", "userAgent": "ec2.amazonaws.com", "awsRegion": "us-west-2", "userIdentity": {"type": "AWSService", "invokedBy": "ec2.amazonaws.com"}, "requestParameters": {"roleSessionName": "i-aa2d3b42e5c6e801a", "roleArn": "arn:aws:iam::811596193553:role/flaws"}, "responseElements": {"credentials": {"accessKeyId": "ASIAXC6JV80M01BKVX0P", "expiration": "Jul 24, 2019 9:59:59 PM", "sessionToken": "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"}}, "resources": [{"ARN": "arn:aws:iam::811596193553:role/flaws", "accountId": "811596193553", "type": "AWS::IAM::Role"}]}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "7159c01f-e3ec-41ac-9bc0-6f2826adb0e0", "record_id": "flaws_cloudtrail:0000544:7159c01f-e3ec-41ac-9bc0-6f2826adb0e0", "row_index": 544, "timestamp": "2019-07-24T15:31:25Z", "event_type": "AssumeRole", "event_source": "sts.amazonaws.com", "principal": {"type": "AWSService", "arn": null, "account_id": null, "principal_id": null, "user_name": null, "access_key_id": null, "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "ec2.amazonaws.com", "user_agent": "ec2.amazonaws.com", "aws_region": "us-west-2"}, "resource_arns": ["arn:aws:iam::811596193553:role/flaws"], "raw_record_size_bytes": 1892, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "resources", "responseElements", "sharedEventID", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "7159c01f-e3ec-41ac-9bc0-6f2826adb0e0", "eventTime": "2019-07-24T15:31:25Z", "eventName": "AssumeRole", "eventSource": "sts.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "ec2.amazonaws.com", "userAgent": "ec2.amazonaws.com", "awsRegion": "us-west-2", "userIdentity": {"type": "AWSService", "invokedBy": "ec2.amazonaws.com"}, "requestParameters": {"roleSessionName": "i-aa2d3b42e5c6e801a", "roleArn": "arn:aws:iam::811596193553:role/flaws"}, "responseElements": {"credentials": {"accessKeyId": "ASIAXC6JV80M01BKVX0P", "expiration": "Jul 24, 2019 9:59:59 PM", "sessionToken": "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"}}, "resources": [{"ARN": "arn:aws:iam::811596193553:role/flaws", "accountId": "811596193553", "type": "AWS::IAM::Role"}]}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "60036a8-71b8-4a96-ad87-69f0d051fe26", "record_id": "flaws_cloudtrail:0000545:60036a8-71b8-4a96-ad87-69f0d051fe26", "row_index": 545, "timestamp": "2019-07-24T15:54:01Z", "event_type": "AssumeRole", "event_source": "sts.amazonaws.com", "principal": {"type": "AWSService", "arn": null, "account_id": null, "principal_id": null, "user_name": null, "access_key_id": null, "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "lambda.amazonaws.com", "user_agent": "lambda.amazonaws.com", "aws_region": "us-west-2"}, "resource_arns": ["arn:aws:iam::811596193553:role/service-role/Level6"], "raw_record_size_bytes": 1629, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "resources", "responseElements", "sharedEventID", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "60036a8-71b8-4a96-ad87-69f0d051fe26", "eventTime": "2019-07-24T15:54:01Z", "eventName": "AssumeRole", "eventSource": "sts.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "lambda.amazonaws.com", "userAgent": "lambda.amazonaws.com", "awsRegion": "us-west-2", "userIdentity": {"type": "AWSService", "invokedBy": "lambda.amazonaws.com"}, "requestParameters": {"roleSessionName": "Level6", "roleArn": "arn:aws:iam::811596193553:role/service-role/Level6"}, "responseElements": {"credentials": {"accessKeyId": "ASIAEP51941PQEV91EYV", "expiration": "Jul 25, 2019 3:54:01 AM", "sessionToken": "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"}}, "resources": [{"ARN": "arn:aws:iam::811596193553:role/service-role/Level6", "accountId": "811596193553", "type": "AWS::IAM::Role"}]}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "f55b8769-5a7b-4b59-b11c-c57f2fd91a8a", "record_id": "flaws_cloudtrail:0000546:f55b8769-5a7b-4b59-b11c-c57f2fd91a8a", "row_index": 546, "timestamp": "2019-07-24T15:54:01Z", "event_type": "AssumeRole", "event_source": "sts.amazonaws.com", "principal": {"type": "AWSService", "arn": null, "account_id": null, "principal_id": null, "user_name": null, "access_key_id": null, "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "lambda.amazonaws.com", "user_agent": "lambda.amazonaws.com", "aws_region": "us-west-2"}, "resource_arns": ["arn:aws:iam::811596193553:role/service-role/Level6"], "raw_record_size_bytes": 1631, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "resources", "responseElements", "sharedEventID", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "f55b8769-5a7b-4b59-b11c-c57f2fd91a8a", "eventTime": "2019-07-24T15:54:01Z", "eventName": "AssumeRole", "eventSource": "sts.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "lambda.amazonaws.com", "userAgent": "lambda.amazonaws.com", "awsRegion": "us-west-2", "userIdentity": {"type": "AWSService", "invokedBy": "lambda.amazonaws.com"}, "requestParameters": {"roleSessionName": "Level6", "roleArn": "arn:aws:iam::811596193553:role/service-role/Level6"}, "responseElements": {"credentials": {"accessKeyId": "ASIAT6C9TQ9ZRRJ72W05", "expiration": "Jul 25, 2019 3:54:01 AM", "sessionToken": "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"}}, "resources": [{"ARN": "arn:aws:iam::811596193553:role/service-role/Level6", "accountId": "811596193553", "type": "AWS::IAM::Role"}]}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "b69671b1-4c25-481a-b2d6-cef10af937883", "record_id": "flaws_cloudtrail:0000547:b69671b1-4c25-481a-b2d6-cef10af937883", "row_index": 547, "timestamp": "2019-07-24T15:54:01Z", "event_type": "CreateLogStream", "event_source": "logs.amazonaws.com", "principal": {"type": "AssumedRole", "arn": "arn:aws:sts::811596193553:assumed-role/Level6/Level6", "account_id": "811596193553", "principal_id": "AROAI4E1FBACLY3FPC6BB:Level6", "user_name": null, "access_key_id": "ASIAEP51941PQEV91EYV", "session_issuer_arn": "arn:aws:iam::811596193553:role/service-role/Level6", "session_issuer_user_name": "Level6"}, "network": {"source_ip": "2.210.105.20", "user_agent": "awslambda-worker", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1030, "raw_record_depth": 4, "raw_record_top_level_keys": ["apiVersion", "awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "b69671b1-4c25-481a-b2d6-cef10af937883", "eventTime": "2019-07-24T15:54:01Z", "eventName": "CreateLogStream", "eventSource": "logs.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "2.210.105.20", "userAgent": "awslambda-worker", "awsRegion": "us-west-2", "userIdentity": {"type": "AssumedRole", "principalId": "AROAI4E1FBACLY3FPC6BB:Level6", "arn": "arn:aws:sts::811596193553:assumed-role/Level6/Level6", "accountId": "811596193553", "accessKeyId": "ASIAEP51941PQEV91EYV", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2019-07-24T15:54:01Z"}, "sessionIssuer": {"type": "Role", "principalId": "AROAI4E1FBACLY3FPC6BB", "arn": "arn:aws:iam::811596193553:role/service-role/Level6", "accountId": "811596193553", "userName": "Level6"}}}, "requestParameters": {"logGroupName": "/aws/lambda/Level6", "logStreamName": "2019/07/24/[$LATEST]7fd6424a4ce4c74479c6d7dc434a80a0"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "60036a8-71b8-4a96-ad87-69f0d051fe26", "record_id": "flaws_cloudtrail:0000548:60036a8-71b8-4a96-ad87-69f0d051fe26", "row_index": 548, "timestamp": "2019-07-24T15:54:01Z", "event_type": "AssumeRole", "event_source": "sts.amazonaws.com", "principal": {"type": "AWSService", "arn": null, "account_id": null, "principal_id": null, "user_name": null, "access_key_id": null, "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "lambda.amazonaws.com", "user_agent": "lambda.amazonaws.com", "aws_region": "us-west-2"}, "resource_arns": ["arn:aws:iam::811596193553:role/service-role/Level6"], "raw_record_size_bytes": 1629, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "resources", "responseElements", "sharedEventID", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "60036a8-71b8-4a96-ad87-69f0d051fe26", "eventTime": "2019-07-24T15:54:01Z", "eventName": "AssumeRole", "eventSource": "sts.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "lambda.amazonaws.com", "userAgent": "lambda.amazonaws.com", "awsRegion": "us-west-2", "userIdentity": {"type": "AWSService", "invokedBy": "lambda.amazonaws.com"}, "requestParameters": {"roleSessionName": "Level6", "roleArn": "arn:aws:iam::811596193553:role/service-role/Level6"}, "responseElements": {"credentials": {"accessKeyId": "ASIAEP51941PQEV91EYV", "expiration": "Jul 25, 2019 3:54:01 AM", "sessionToken": "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"}}, "resources": [{"ARN": "arn:aws:iam::811596193553:role/service-role/Level6", "accountId": "811596193553", "type": "AWS::IAM::Role"}]}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "f55b8769-5a7b-4b59-b11c-c57f2fd91a8a", "record_id": "flaws_cloudtrail:0000549:f55b8769-5a7b-4b59-b11c-c57f2fd91a8a", "row_index": 549, "timestamp": "2019-07-24T15:54:01Z", "event_type": "AssumeRole", "event_source": "sts.amazonaws.com", "principal": {"type": "AWSService", "arn": null, "account_id": null, "principal_id": null, "user_name": null, "access_key_id": null, "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "lambda.amazonaws.com", "user_agent": "lambda.amazonaws.com", "aws_region": "us-west-2"}, "resource_arns": ["arn:aws:iam::811596193553:role/service-role/Level6"], "raw_record_size_bytes": 1631, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "resources", "responseElements", "sharedEventID", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "f55b8769-5a7b-4b59-b11c-c57f2fd91a8a", "eventTime": "2019-07-24T15:54:01Z", "eventName": "AssumeRole", "eventSource": "sts.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "lambda.amazonaws.com", "userAgent": "lambda.amazonaws.com", "awsRegion": "us-west-2", "userIdentity": {"type": "AWSService", "invokedBy": "lambda.amazonaws.com"}, "requestParameters": {"roleSessionName": "Level6", "roleArn": "arn:aws:iam::811596193553:role/service-role/Level6"}, "responseElements": {"credentials": {"accessKeyId": "ASIAT6C9TQ9ZRRJ72W05", "expiration": "Jul 25, 2019 3:54:01 AM", "sessionToken": "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"}}, "resources": [{"ARN": "arn:aws:iam::811596193553:role/service-role/Level6", "accountId": "811596193553", "type": "AWS::IAM::Role"}]}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "b69671b1-4c25-481a-b2d6-cef10af937883", "record_id": "flaws_cloudtrail:0000550:b69671b1-4c25-481a-b2d6-cef10af937883", "row_index": 550, "timestamp": "2019-07-24T15:54:01Z", "event_type": "CreateLogStream", "event_source": "logs.amazonaws.com", "principal": {"type": "AssumedRole", "arn": "arn:aws:sts::811596193553:assumed-role/Level6/Level6", "account_id": "811596193553", "principal_id": "AROAI4E1FBACLY3FPC6BB:Level6", "user_name": null, "access_key_id": "ASIAEP51941PQEV91EYV", "session_issuer_arn": "arn:aws:iam::811596193553:role/service-role/Level6", "session_issuer_user_name": "Level6"}, "network": {"source_ip": "2.210.105.20", "user_agent": "awslambda-worker", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1030, "raw_record_depth": 4, "raw_record_top_level_keys": ["apiVersion", "awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "b69671b1-4c25-481a-b2d6-cef10af937883", "eventTime": "2019-07-24T15:54:01Z", "eventName": "CreateLogStream", "eventSource": "logs.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "2.210.105.20", "userAgent": "awslambda-worker", "awsRegion": "us-west-2", "userIdentity": {"type": "AssumedRole", "principalId": "AROAI4E1FBACLY3FPC6BB:Level6", "arn": "arn:aws:sts::811596193553:assumed-role/Level6/Level6", "accountId": "811596193553", "accessKeyId": "ASIAEP51941PQEV91EYV", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2019-07-24T15:54:01Z"}, "sessionIssuer": {"type": "Role", "principalId": "AROAI4E1FBACLY3FPC6BB", "arn": "arn:aws:iam::811596193553:role/service-role/Level6", "accountId": "811596193553", "userName": "Level6"}}}, "requestParameters": {"logGroupName": "/aws/lambda/Level6", "logStreamName": "2019/07/24/[$LATEST]7fd6424a4ce4c74479c6d7dc434a80a0"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "fadddddd-aec7-435e-ba90-476bfa1a65c2", "record_id": "flaws_cloudtrail:0000551:fadddddd-aec7-435e-ba90-476bfa1a65c2", "row_index": 551, "timestamp": "2019-07-24T16:31:25Z", "event_type": "AssumeRole", "event_source": "sts.amazonaws.com", "principal": {"type": "AWSService", "arn": null, "account_id": null, "principal_id": null, "user_name": null, "access_key_id": null, "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "ec2.amazonaws.com", "user_agent": "ec2.amazonaws.com", "aws_region": "us-west-2"}, "resource_arns": ["arn:aws:iam::811596193553:role/flaws"], "raw_record_size_bytes": 1893, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "resources", "responseElements", "sharedEventID", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "fadddddd-aec7-435e-ba90-476bfa1a65c2", "eventTime": "2019-07-24T16:31:25Z", "eventName": "AssumeRole", "eventSource": "sts.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "ec2.amazonaws.com", "userAgent": "ec2.amazonaws.com", "awsRegion": "us-west-2", "userIdentity": {"type": "AWSService", "invokedBy": "ec2.amazonaws.com"}, "requestParameters": {"roleSessionName": "i-aa2d3b42e5c6e801a", "roleArn": "arn:aws:iam::811596193553:role/flaws"}, "responseElements": {"credentials": {"accessKeyId": "ASIAR8FUH1D8NUHI5NDF", "expiration": "Jul 24, 2019 10:48:32 PM", "sessionToken": "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"}}, "resources": [{"ARN": "arn:aws:iam::811596193553:role/flaws", "accountId": "811596193553", "type": "AWS::IAM::Role"}]}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "fadddddd-aec7-435e-ba90-476bfa1a65c2", "record_id": "flaws_cloudtrail:0000552:fadddddd-aec7-435e-ba90-476bfa1a65c2", "row_index": 552, "timestamp": "2019-07-24T16:31:25Z", "event_type": "AssumeRole", "event_source": "sts.amazonaws.com", "principal": {"type": "AWSService", "arn": null, "account_id": null, "principal_id": null, "user_name": null, "access_key_id": null, "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "ec2.amazonaws.com", "user_agent": "ec2.amazonaws.com", "aws_region": "us-west-2"}, "resource_arns": ["arn:aws:iam::811596193553:role/flaws"], "raw_record_size_bytes": 1893, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "resources", "responseElements", "sharedEventID", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "fadddddd-aec7-435e-ba90-476bfa1a65c2", "eventTime": "2019-07-24T16:31:25Z", "eventName": "AssumeRole", "eventSource": "sts.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "ec2.amazonaws.com", "userAgent": "ec2.amazonaws.com", "awsRegion": "us-west-2", "userIdentity": {"type": "AWSService", "invokedBy": "ec2.amazonaws.com"}, "requestParameters": {"roleSessionName": "i-aa2d3b42e5c6e801a", "roleArn": "arn:aws:iam::811596193553:role/flaws"}, "responseElements": {"credentials": {"accessKeyId": "ASIAR8FUH1D8NUHI5NDF", "expiration": "Jul 24, 2019 10:48:32 PM", "sessionToken": "AgoJb3JpZ2luX2VjEIn//////////wEaCXVzLXdlc3QtMiJHMEUCIFTu/I5hLMInTXmNxhdITdG12bVxUwpQO7759LB+pzFRAiEA/5JO6I96FawURm8CYbclZQwwYe1qFCzUzRPT7UR6T5kq4wMI8v//////////ARAAGgw5NzU0MjYyNjIwMjkiDHU3womfEbyUdC/eTSq3A+rNQOQaO2sF73PhN6hM7ptpo7xaT/yCQ5tjPDwY+LPPe+Ak6lTygZ6m6HprZoOEoSVN8PP6SnHUVZbJrI8RZr1TGvl36o9ESrgYKZoiajnH2euaUqveXSUHkOp5CA2XDdxM+P7Rb1eUIzkZ3nQ8FB+/tUM39dl+RRaGrFoj4H691a33PXeCLxZRky/xoXrCpoMeyz2MJhVGLjNpbpfodYpHPClcF4QLPlyUgR6HnmfQgdq6jsj5/UkzLT8QKR0WQobSQJD2/XDU/T5ctGehVZlZ7wWuy5/kQr4ieDLh3Z6Q5KwOzHChj4BgIiAgVi64SiH3zTUrJfcPpuHxdxUMFlPk0TJTs0KgXIaaHREyPQYiB4/Ze0g0RUukgTwBtALod5KuIBoataS/BoCbvsims1a4YTlwIa29Sr97o6qHr1Q1WOiqsd9uwyyL6y3RCa+xoGAzSTtm8OHOjHRAWVuBKTTigaY7EXgR84HVWzFcAzeVyJasupyC9lESpKHQIPcpLbYKZdklSm+2JlDSaIPoL2iwEYk3N41T7LO+1G29dbyp8LLfH7AaCeiDBRadGuhOAUNgtDXyfqgw3Y/i6QU6tAEa9H7kqCpCw8AWukLZ+uiHlVl7q6NvMLjvPv+tsuxtflN446hHFgU9Dd0AWYQu/gR2aSHCY5nYKpQ3fj2qTJA4BbsWbyDDX8MYp1Cd7yX0ZpDsvWt1Juacgq0/Dn9zdpTse04dQEuQth9f5CzhP5s2RMZb3bsEtl0/aVg2UtvsploV5l241IPpXiTifDMTmEh3W+M5L4eSIxsssqb2JIy8v7LRKA27AU6sVR3VmyGv6dxvyZk="}}, "resources": [{"ARN": "arn:aws:iam::811596193553:role/flaws", "accountId": "811596193553", "type": "AWS::IAM::Role"}]}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "dc19f1f1-3938-490f-91ca-e3d6dbf8b473", "record_id": "flaws_cloudtrail:0000553:dc19f1f1-3938-490f-91ca-e3d6dbf8b473", "row_index": 553, "timestamp": "2019-07-24T17:21:15Z", "event_type": "GetCallerIdentity", "event_source": "sts.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA74GMGS6LGI53AGFX", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "159.145.58.125", "user_agent": "Boto3/1.18.4 Python/3.9.6 Linux/5.10.0-8-amd64 Botocore/1.21.4", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 514, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "dc19f1f1-3938-490f-91ca-e3d6dbf8b473", "eventTime": "2019-07-24T17:21:15Z", "eventName": "GetCallerIdentity", "eventSource": "sts.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "159.145.58.125", "userAgent": "Boto3/1.18.4 Python/3.9.6 Linux/5.10.0-8-amd64 Botocore/1.21.4", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA74GMGS6LGI53AGFX", "userName": "Level6"}}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "933a9bb1-a5d8-44f2-affb-d2b72cfbb668", "record_id": "flaws_cloudtrail:0000554:933a9bb1-a5d8-44f2-affb-d2b72cfbb668", "row_index": 554, "timestamp": "2019-07-24T17:22:43Z", "event_type": "DescribeTrails", "event_source": "cloudtrail.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA74GMGS6LGI53AGFX", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "159.145.58.125", "user_agent": "Boto3/1.18.4 Python/3.9.6 Linux/5.10.0-8-amd64 Botocore/1.21.4", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 518, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "933a9bb1-a5d8-44f2-affb-d2b72cfbb668", "eventTime": "2019-07-24T17:22:43Z", "eventName": "DescribeTrails", "eventSource": "cloudtrail.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "159.145.58.125", "userAgent": "Boto3/1.18.4 Python/3.9.6 Linux/5.10.0-8-amd64 Botocore/1.21.4", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA74GMGS6LGI53AGFX", "userName": "Level6"}}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "634fc7ec-c7b8-4f01-a864-dcc48942915b", "record_id": "flaws_cloudtrail:0000555:634fc7ec-c7b8-4f01-a864-dcc48942915b", "row_index": 555, "timestamp": "2019-07-24T17:24:50Z", "event_type": "GetTrailStatus", "event_source": "cloudtrail.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA74GMGS6LGI53AGFX", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "159.145.58.125", "user_agent": "Boto3/1.18.4 Python/3.9.6 Linux/5.10.0-8-amd64 Botocore/1.21.4", "aws_region": "us-west-2"}, "resource_arns": ["arn:aws:cloudtrail:us-west-2:811596193553:trail/trail-8448"], "raw_record_size_bytes": 643, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "requestParameters", "resources", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "634fc7ec-c7b8-4f01-a864-dcc48942915b", "eventTime": "2019-07-24T17:24:50Z", "eventName": "GetTrailStatus", "eventSource": "cloudtrail.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "159.145.58.125", "userAgent": "Boto3/1.18.4 Python/3.9.6 Linux/5.10.0-8-amd64 Botocore/1.21.4", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA74GMGS6LGI53AGFX", "userName": "Level6"}, "requestParameters": {"name": "trail-8448"}, "resources": [{"ARN": "arn:aws:cloudtrail:us-west-2:811596193553:trail/trail-8448"}]}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "c379272c-7348-473f-b890-1ea9691d8cfb", "record_id": "flaws_cloudtrail:0000556:c379272c-7348-473f-b890-1ea9691d8cfb", "row_index": 556, "timestamp": "2019-07-24T17:25:45Z", "event_type": "StopLogging", "event_source": "cloudtrail.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA74GMGS6LGI53AGFX", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "159.145.58.125", "user_agent": "Boto3/1.18.4 Python/3.9.6 Linux/5.10.0-8-amd64 Botocore/1.21.4", "aws_region": "us-west-2"}, "resource_arns": ["arn:aws:cloudtrail:us-west-2:811596193553:trail/trail-8448"], "raw_record_size_bytes": 640, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "requestParameters", "resources", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "c379272c-7348-473f-b890-1ea9691d8cfb", "eventTime": "2019-07-24T17:25:45Z", "eventName": "StopLogging", "eventSource": "cloudtrail.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "159.145.58.125", "userAgent": "Boto3/1.18.4 Python/3.9.6 Linux/5.10.0-8-amd64 Botocore/1.21.4", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA74GMGS6LGI53AGFX", "userName": "Level6"}, "requestParameters": {"name": "trail-8448"}, "resources": [{"ARN": "arn:aws:cloudtrail:us-west-2:811596193553:trail/trail-8448"}]}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "bfd89c4b-c09f-4d7f-9fe1-26e983ff1d46", "record_id": "flaws_cloudtrail:0000557:bfd89c4b-c09f-4d7f-9fe1-26e983ff1d46", "row_index": 557, "timestamp": "2019-07-24T17:26:41Z", "event_type": "UpdateTrail", "event_source": "cloudtrail.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA74GMGS6LGI53AGFX", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "159.145.58.125", "user_agent": "Boto3/1.18.4 Python/3.9.6 Linux/5.10.0-8-amd64 Botocore/1.21.4", "aws_region": "us-west-2"}, "resource_arns": ["arn:aws:cloudtrail:us-west-2:811596193553:trail/trail-8448"], "raw_record_size_bytes": 699, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "requestParameters", "resources", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "bfd89c4b-c09f-4d7f-9fe1-26e983ff1d46", "eventTime": "2019-07-24T17:26:41Z", "eventName": "UpdateTrail", "eventSource": "cloudtrail.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "159.145.58.125", "userAgent": "Boto3/1.18.4 Python/3.9.6 Linux/5.10.0-8-amd64 Botocore/1.21.4", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA74GMGS6LGI53AGFX", "userName": "Level6"}, "requestParameters": {"name": "trail-8448", "isMultiRegionTrail": false, "enableLogFileValidation": false}, "resources": [{"ARN": "arn:aws:cloudtrail:us-west-2:811596193553:trail/trail-8448"}]}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "7bc405024-b6bb-4650-b5ba-4dd8e1f81669", "record_id": "flaws_cloudtrail:0000558:7bc405024-b6bb-4650-b5ba-4dd8e1f81669", "row_index": 558, "timestamp": "2019-07-24T17:31:25Z", "event_type": "AssumeRole", "event_source": "sts.amazonaws.com", "principal": {"type": "AWSService", "arn": null, "account_id": null, "principal_id": null, "user_name": null, "access_key_id": null, "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "ec2.amazonaws.com", "user_agent": "ec2.amazonaws.com", "aws_region": "us-west-2"}, "resource_arns": ["arn:aws:iam::811596193553:role/flaws"], "raw_record_size_bytes": 1896, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "resources", "responseElements", "sharedEventID", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "7bc405024-b6bb-4650-b5ba-4dd8e1f81669", "eventTime": "2019-07-24T17:31:25Z", "eventName": "AssumeRole", "eventSource": "sts.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "ec2.amazonaws.com", "userAgent": "ec2.amazonaws.com", "awsRegion": "us-west-2", "userIdentity": {"type": "AWSService", "invokedBy": "ec2.amazonaws.com"}, "requestParameters": {"roleSessionName": "i-aa2d3b42e5c6e801a", "roleArn": "arn:aws:iam::811596193553:role/flaws"}, "responseElements": {"credentials": {"accessKeyId": "ASIA8LL759K29MXDXFE2", "expiration": "Jul 24, 2019 11:39:05 PM", "sessionToken": "AgoJb3JpZ2luX2VjEIr//////////wEaCXVzLXdlc3QtMiJHMEUCIBKzmXhCvhPBJWH0WmbH0PZzORMCXAuySqmrWzwc/8iVAiEAxH5H9clUX1yA7DhcsYKq6F9e7sKJnNkmUurINYIU4uoq4wMI8///////////ARAAGgw5NzU0MjYyNjIwMjkiDGEmBRwR/gCn1Y2aoCq3AzCgl+R5sbDcxTbIKBStF4gb5hMTZhyEF7tO/RzPekiySTQ2+CAEk0zaI8i9IRKXtgnbPtS+m6i6KZ8qJKwUKm3zmAT8YQ6kipeQvbyzGGrkMOH9x83ZrOhm8fYglFq9D7Me1NEbSqZ8wUL0khP+TyaQOW8Rdwp+ZQx4qOl9NMrwW9Kb5KVsyDEDvPJyX+09yepcS32ny9Clz41bz+bM0YebBAUo4gBhErltz2lkZqCQ6E8ClHADprydiRiwUI5jCa9JuuL2qTJySb65K7EytE3BvFNpF8yPE9haU0IZhtxxmRdyw5HV4GG5IoH+dkAQ0D5jDAoQdA6G+PA+I2wniXzwVOxebLcqhOHoXAN34qmj2cuyXNyZAr0FkUNlSDlpsBj5bvTIT+TK2cXxqnWFPpnu7X1O/WlK5B0cbKcp+MNDppTHNDry2vRMswqd6SNy20FMi4tHt9g8l33Wt0gPqFwGYKDzI+BXj8BA8Kdx7dcr5d9lSQBLvBgRI/QIwF4OYUkCeoPGtOauapK07D0EatVxseEsuhuFZPu101T2fqASRgLLtR33GPSIgpBlu3lLDydZEr7PFzow7avi6QU6tAFeBqXGmWau4q33zk6nduTtGC5fLNSbmVaiJgF9byTfwhCr9un2jCDOseymFzwLOWVjiD187K9KC7a7ngVag/qCBX2OC2jQpVVR3xwcuW5Xh2LTpVzq2NznV7RKZcek87+uNPSMYeOVfJSRw+rdMuPnG6I8LrrPVMnZI0PB5kxTPP5SSJ+TGQ5WDhHz2TJAaGpoUVRJRgiCMON/w4efiQtz1bgGin4RMEfXufjOz/H+60ac8eA="}}, "resources": [{"ARN": "arn:aws:iam::811596193553:role/flaws", "accountId": "811596193553", "type": "AWS::IAM::Role"}]}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "7bc405024-b6bb-4650-b5ba-4dd8e1f81669", "record_id": "flaws_cloudtrail:0000559:7bc405024-b6bb-4650-b5ba-4dd8e1f81669", "row_index": 559, "timestamp": "2019-07-24T17:31:25Z", "event_type": "AssumeRole", "event_source": "sts.amazonaws.com", "principal": {"type": "AWSService", "arn": null, "account_id": null, "principal_id": null, "user_name": null, "access_key_id": null, "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "ec2.amazonaws.com", "user_agent": "ec2.amazonaws.com", "aws_region": "us-west-2"}, "resource_arns": ["arn:aws:iam::811596193553:role/flaws"], "raw_record_size_bytes": 1896, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "resources", "responseElements", "sharedEventID", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "7bc405024-b6bb-4650-b5ba-4dd8e1f81669", "eventTime": "2019-07-24T17:31:25Z", "eventName": "AssumeRole", "eventSource": "sts.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "ec2.amazonaws.com", "userAgent": "ec2.amazonaws.com", "awsRegion": "us-west-2", "userIdentity": {"type": "AWSService", "invokedBy": "ec2.amazonaws.com"}, "requestParameters": {"roleSessionName": "i-aa2d3b42e5c6e801a", "roleArn": "arn:aws:iam::811596193553:role/flaws"}, "responseElements": {"credentials": {"accessKeyId": "ASIA8LL759K29MXDXFE2", "expiration": "Jul 24, 2019 11:39:05 PM", "sessionToken": "AgoJb3JpZ2luX2VjEIr//////////wEaCXVzLXdlc3QtMiJHMEUCIBKzmXhCvhPBJWH0WmbH0PZzORMCXAuySqmrWzwc/8iVAiEAxH5H9clUX1yA7DhcsYKq6F9e7sKJnNkmUurINYIU4uoq4wMI8///////////ARAAGgw5NzU0MjYyNjIwMjkiDGEmBRwR/gCn1Y2aoCq3AzCgl+R5sbDcxTbIKBStF4gb5hMTZhyEF7tO/RzPekiySTQ2+CAEk0zaI8i9IRKXtgnbPtS+m6i6KZ8qJKwUKm3zmAT8YQ6kipeQvbyzGGrkMOH9x83ZrOhm8fYglFq9D7Me1NEbSqZ8wUL0khP+TyaQOW8Rdwp+ZQx4qOl9NMrwW9Kb5KVsyDEDvPJyX+09yepcS32ny9Clz41bz+bM0YebBAUo4gBhErltz2lkZqCQ6E8ClHADprydiRiwUI5jCa9JuuL2qTJySb65K7EytE3BvFNpF8yPE9haU0IZhtxxmRdyw5HV4GG5IoH+dkAQ0D5jDAoQdA6G+PA+I2wniXzwVOxebLcqhOHoXAN34qmj2cuyXNyZAr0FkUNlSDlpsBj5bvTIT+TK2cXxqnWFPpnu7X1O/WlK5B0cbKcp+MNDppTHNDry2vRMswqd6SNy20FMi4tHt9g8l33Wt0gPqFwGYKDzI+BXj8BA8Kdx7dcr5d9lSQBLvBgRI/QIwF4OYUkCeoPGtOauapK07D0EatVxseEsuhuFZPu101T2fqASRgLLtR33GPSIgpBlu3lLDydZEr7PFzow7avi6QU6tAFeBqXGmWau4q33zk6nduTtGC5fLNSbmVaiJgF9byTfwhCr9un2jCDOseymFzwLOWVjiD187K9KC7a7ngVag/qCBX2OC2jQpVVR3xwcuW5Xh2LTpVzq2NznV7RKZcek87+uNPSMYeOVfJSRw+rdMuPnG6I8LrrPVMnZI0PB5kxTPP5SSJ+TGQ5WDhHz2TJAaGpoUVRJRgiCMON/w4efiQtz1bgGin4RMEfXufjOz/H+60ac8eA="}}, "resources": [{"ARN": "arn:aws:iam::811596193553:role/flaws", "accountId": "811596193553", "type": "AWS::IAM::Role"}]}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "76eb6377-0ca1-470e-be5c-42f2d76e363e", "record_id": "flaws_cloudtrail:0000560:76eb6377-0ca1-470e-be5c-42f2d76e363e", "row_index": 560, "timestamp": "2019-07-24T18:23:01Z", "event_type": "AssumeRole", "event_source": "sts.amazonaws.com", "principal": {"type": "AWSService", "arn": null, "account_id": null, "principal_id": null, "user_name": null, "access_key_id": null, "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "config.amazonaws.com", "user_agent": "config.amazonaws.com", "aws_region": "us-west-2"}, "resource_arns": ["arn:aws:iam::811596193553:role/service-role/config-role-us-west-2"], "raw_record_size_bytes": 1948, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "resources", "responseElements", "sharedEventID", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "76eb6377-0ca1-470e-be5c-42f2d76e363e", "eventTime": "2019-07-24T18:23:01Z", "eventName": "AssumeRole", "eventSource": "sts.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "config.amazonaws.com", "userAgent": "config.amazonaws.com", "awsRegion": "us-west-2", "userIdentity": {"type": "AWSService", "invokedBy": "config.amazonaws.com"}, "requestParameters": {"roleArn": "arn:aws:iam::811596193553:role/service-role/config-role-us-west-2", "roleSessionName": "AWSConfig"}, "responseElements": {"credentials": {"accessKeyId": "ASIAR815S5UXRIC0K1BX", "expiration": "Jul 24, 2019 7:23:01 PM", "sessionToken": "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"}, "assumedRoleUser": {"assumedRoleId": "AROASM3HWKK95VDO4HH81:AWSConfig", "arn": "arn:aws:sts::811596193553:assumed-role/config-role-us-west-2/AWSConfig"}}, "resources": [{"ARN": "arn:aws:iam::811596193553:role/service-role/config-role-us-west-2", "accountId": "811596193553", "type": "AWS::IAM::Role"}]}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "76eb6377-0ca1-470e-be5c-42f2d76e363e", "record_id": "flaws_cloudtrail:0000561:76eb6377-0ca1-470e-be5c-42f2d76e363e", "row_index": 561, "timestamp": "2019-07-24T18:23:01Z", "event_type": "AssumeRole", "event_source": "sts.amazonaws.com", "principal": {"type": "AWSService", "arn": null, "account_id": null, "principal_id": null, "user_name": null, "access_key_id": null, "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "config.amazonaws.com", "user_agent": "config.amazonaws.com", "aws_region": "us-west-2"}, "resource_arns": ["arn:aws:iam::811596193553:role/service-role/config-role-us-west-2"], "raw_record_size_bytes": 1948, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "resources", "responseElements", "sharedEventID", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "76eb6377-0ca1-470e-be5c-42f2d76e363e", "eventTime": "2019-07-24T18:23:01Z", "eventName": "AssumeRole", "eventSource": "sts.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "config.amazonaws.com", "userAgent": "config.amazonaws.com", "awsRegion": "us-west-2", "userIdentity": {"type": "AWSService", "invokedBy": "config.amazonaws.com"}, "requestParameters": {"roleArn": "arn:aws:iam::811596193553:role/service-role/config-role-us-west-2", "roleSessionName": "AWSConfig"}, "responseElements": {"credentials": {"accessKeyId": "ASIAR815S5UXRIC0K1BX", "expiration": "Jul 24, 2019 7:23:01 PM", "sessionToken": "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"}, "assumedRoleUser": {"assumedRoleId": "AROASM3HWKK95VDO4HH81:AWSConfig", "arn": "arn:aws:sts::811596193553:assumed-role/config-role-us-west-2/AWSConfig"}}, "resources": [{"ARN": "arn:aws:iam::811596193553:role/service-role/config-role-us-west-2", "accountId": "811596193553", "type": "AWS::IAM::Role"}]}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "d96d3636-98cc-479b-9420-249e909865de", "record_id": "flaws_cloudtrail:0000562:d96d3636-98cc-479b-9420-249e909865de", "row_index": 562, "timestamp": "2019-07-24T18:31:25Z", "event_type": "AssumeRole", "event_source": "sts.amazonaws.com", "principal": {"type": "AWSService", "arn": null, "account_id": null, "principal_id": null, "user_name": null, "access_key_id": null, "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "ec2.amazonaws.com", "user_agent": "ec2.amazonaws.com", "aws_region": "us-west-2"}, "resource_arns": ["arn:aws:iam::811596193553:role/flaws"], "raw_record_size_bytes": 1896, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "resources", "responseElements", "sharedEventID", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "d96d3636-98cc-479b-9420-249e909865de", "eventTime": "2019-07-24T18:31:25Z", "eventName": "AssumeRole", "eventSource": "sts.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "ec2.amazonaws.com", "userAgent": "ec2.amazonaws.com", "awsRegion": "us-west-2", "userIdentity": {"type": "AWSService", "invokedBy": "ec2.amazonaws.com"}, "requestParameters": {"roleSessionName": "i-aa2d3b42e5c6e801a", "roleArn": "arn:aws:iam::811596193553:role/flaws"}, "responseElements": {"credentials": {"accessKeyId": "ASIAZYTHBDU5FFA752PZ", "expiration": "Jul 25, 2019 12:34:48 AM", "sessionToken": "AgoJb3JpZ2luX2VjEIv//////////wEaCXVzLXdlc3QtMiJGMEQCIBXf8KoiWWutIADDTsvUsfGFP7WE0Gl7Qz3Zge+541113AiBQqKp9aphEdb/3Ys1OSeH5VckvonfrduMRKUq0YPARlyrjAwj0//////////8BEAAaDDk3NTQyNjI2MjAyOSIMEibVblAGjsUxRU/zKrcDuZydVqpTVa9fGu8ZaCu9W1QIwR6kYOvHM1rnawR4vwi6bVdO/a7NwHGathcnVXeULkyftjhqmKKLB+GADjtkH1GQy9SJpmNMNPVlrTYRZDSu4PyDO2tAqZ8etPceLiScfDLNiYhuikG67uW1jVKqOSy5CSdULuQcgRRaNdRCtIF8eRfhpVme7ntsXKza8XYgz4EqQqQyd9185s/MOAbfoMK8TINQNOsKb3dJKU0JLb0We59ggJqpbmSkSi6eS3RuZ0UJ++uBMPikNmFmHFfTnvhtfYoyDqxBzL9nTFWNQDDHFwQTHx8sixgi6T3ZZNl7xB5Qz3RdmTtjy9W1J4eA3q6XsZW9ilE0klUwm9BC6/TugLC0qDmhrpzxJ+w9EHFe9CKL9+SycEfHwfWGjZh5Xi6N33xVFHKWrT03207Q+XUpGrsPEGBrFNQPklJVr+uldfKBCrXCV56UnoBEEJsW6noT6M0xaryPzLOM2O8mnpRkfexl1vLrbBP32Ukc3pUcH4vmcKCHmyqZhSDFQfuANKkqm7lZlEmgLwYbLTZozGuIVcESgXfYJuNGIAMIFV5OG8XKgzUzlzD9x+LpBTq1AYPXXi8oRV7p+9iDy5K5SiNPgl/0kKusOVOK9qExF6I4QgX/kh4Utx5W5ZJHL/bVHCq+nAlUjGdaUOsyiTyRnPJeeJeu0Gow5tegWXSv9Cn6fNqWhS61jIWElyYAp2JYC+7TeykCOnUPfj/VqLQaI4IO8s0cthv9q+8nZVgF69SARsTO7DM7ca6eSwHpXZpFWn1pXEZwtJR3qIVFTeKVEXdHvqKjXl7GAoalNVqV+MfIu4Nw0ZU="}}, "resources": [{"ARN": "arn:aws:iam::811596193553:role/flaws", "accountId": "811596193553", "type": "AWS::IAM::Role"}]}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "d96d3636-98cc-479b-9420-249e909865de", "record_id": "flaws_cloudtrail:0000563:d96d3636-98cc-479b-9420-249e909865de", "row_index": 563, "timestamp": "2019-07-24T18:31:25Z", "event_type": "AssumeRole", "event_source": "sts.amazonaws.com", "principal": {"type": "AWSService", "arn": null, "account_id": null, "principal_id": null, "user_name": null, "access_key_id": null, "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "ec2.amazonaws.com", "user_agent": "ec2.amazonaws.com", "aws_region": "us-west-2"}, "resource_arns": ["arn:aws:iam::811596193553:role/flaws"], "raw_record_size_bytes": 1896, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "resources", "responseElements", "sharedEventID", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "d96d3636-98cc-479b-9420-249e909865de", "eventTime": "2019-07-24T18:31:25Z", "eventName": "AssumeRole", "eventSource": "sts.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "ec2.amazonaws.com", "userAgent": "ec2.amazonaws.com", "awsRegion": "us-west-2", "userIdentity": {"type": "AWSService", "invokedBy": "ec2.amazonaws.com"}, "requestParameters": {"roleSessionName": "i-aa2d3b42e5c6e801a", "roleArn": "arn:aws:iam::811596193553:role/flaws"}, "responseElements": {"credentials": {"accessKeyId": "ASIAZYTHBDU5FFA752PZ", "expiration": "Jul 25, 2019 12:34:48 AM", "sessionToken": "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"}}, "resources": [{"ARN": "arn:aws:iam::811596193553:role/flaws", "accountId": "811596193553", "type": "AWS::IAM::Role"}]}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "6aad9938-040c-42c9-ba69-2d78e0ecf928", "record_id": "flaws_cloudtrail:0000564:6aad9938-040c-42c9-ba69-2d78e0ecf928", "row_index": 564, "timestamp": "2019-07-24T18:47:41Z", "event_type": "ListBuckets", "event_source": "s3.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "211.147.47.10", "user_agent": "[aws-cli/1.16.200 Python/3.7.4 Darwin/18.2.0 botocore/1.12.190]", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 801, "raw_record_depth": 3, "raw_record_top_level_keys": ["additionalEventData", "awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "6aad9938-040c-42c9-ba69-2d78e0ecf928", "eventTime": "2019-07-24T18:47:41Z", "eventName": "ListBuckets", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "211.147.47.10", "userAgent": "[aws-cli/1.16.200 Python/3.7.4 Darwin/18.2.0 botocore/1.12.190]", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"host": ["s3.amazonaws.com"]}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "6aad9938-040c-42c9-ba69-2d78e0ecf928", "record_id": "flaws_cloudtrail:0000565:6aad9938-040c-42c9-ba69-2d78e0ecf928", "row_index": 565, "timestamp": "2019-07-24T18:47:41Z", "event_type": "ListBuckets", "event_source": "s3.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "211.147.47.10", "user_agent": "[aws-cli/1.16.200 Python/3.7.4 Darwin/18.2.0 botocore/1.12.190]", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 801, "raw_record_depth": 3, "raw_record_top_level_keys": ["additionalEventData", "awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "6aad9938-040c-42c9-ba69-2d78e0ecf928", "eventTime": "2019-07-24T18:47:41Z", "eventName": "ListBuckets", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "211.147.47.10", "userAgent": "[aws-cli/1.16.200 Python/3.7.4 Darwin/18.2.0 botocore/1.12.190]", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"host": ["s3.amazonaws.com"]}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "046fe9fb-62f5-40fd-b971-a550b6ac3893", "record_id": "flaws_cloudtrail:0000566:046fe9fb-62f5-40fd-b971-a550b6ac3893", "row_index": 566, "timestamp": "2019-07-24T18:58:46Z", "event_type": "GetCallerIdentity", "event_source": "sts.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "211.147.47.10", "user_agent": "aws-cli/1.16.200 Python/3.7.4 Darwin/18.2.0 botocore/1.12.190", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 771, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "046fe9fb-62f5-40fd-b971-a550b6ac3893", "eventTime": "2019-07-24T18:58:46Z", "eventName": "GetCallerIdentity", "eventSource": "sts.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "211.147.47.10", "userAgent": "aws-cli/1.16.200 Python/3.7.4 Darwin/18.2.0 botocore/1.12.190", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "responseElements": {"userId": "AIDA9BO36HFBHKGJAO9C1", "account": "811596193553", "arn": "arn:aws:iam::811596193553:user/backup"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "046fe9fb-62f5-40fd-b971-a550b6ac3893", "record_id": "flaws_cloudtrail:0000567:046fe9fb-62f5-40fd-b971-a550b6ac3893", "row_index": 567, "timestamp": "2019-07-24T18:58:46Z", "event_type": "GetCallerIdentity", "event_source": "sts.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "211.147.47.10", "user_agent": "aws-cli/1.16.200 Python/3.7.4 Darwin/18.2.0 botocore/1.12.190", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 771, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "046fe9fb-62f5-40fd-b971-a550b6ac3893", "eventTime": "2019-07-24T18:58:46Z", "eventName": "GetCallerIdentity", "eventSource": "sts.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "211.147.47.10", "userAgent": "aws-cli/1.16.200 Python/3.7.4 Darwin/18.2.0 botocore/1.12.190", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "responseElements": {"userId": "AIDA9BO36HFBHKGJAO9C1", "account": "811596193553", "arn": "arn:aws:iam::811596193553:user/backup"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "88c225c9-a2a0-4758-b1cf-8eddd653322f", "record_id": "flaws_cloudtrail:0000568:88c225c9-a2a0-4758-b1cf-8eddd653322f", "row_index": 568, "timestamp": "2019-07-24T19:00:10Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "211.147.47.10", "user_agent": "aws-cli/1.16.200 Python/3.7.4 Darwin/18.2.0 botocore/1.12.190", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 786, "raw_record_depth": 5, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "88c225c9-a2a0-4758-b1cf-8eddd653322f", "eventTime": "2019-07-24T19:00:10Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "211.147.47.10", "userAgent": "aws-cli/1.16.200 Python/3.7.4 Darwin/18.2.0 botocore/1.12.190", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"maxResults": 1000, "snapshotSet": {}, "ownersSet": {"items": [{"owner": "811596193553"}]}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "88c225c9-a2a0-4758-b1cf-8eddd653322f", "record_id": "flaws_cloudtrail:0000569:88c225c9-a2a0-4758-b1cf-8eddd653322f", "row_index": 569, "timestamp": "2019-07-24T19:00:10Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "211.147.47.10", "user_agent": "aws-cli/1.16.200 Python/3.7.4 Darwin/18.2.0 botocore/1.12.190", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 786, "raw_record_depth": 5, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "88c225c9-a2a0-4758-b1cf-8eddd653322f", "eventTime": "2019-07-24T19:00:10Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "211.147.47.10", "userAgent": "aws-cli/1.16.200 Python/3.7.4 Darwin/18.2.0 botocore/1.12.190", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"maxResults": 1000, "snapshotSet": {}, "ownersSet": {"items": [{"owner": "811596193553"}]}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "ea3c58c3-eae4-49d0-9992-e7017de183669", "record_id": "flaws_cloudtrail:0000570:ea3c58c3-eae4-49d0-9992-e7017de183669", "row_index": 570, "timestamp": "2019-07-24T19:00:44Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "211.147.47.10", "user_agent": "aws-cli/1.16.200 Python/3.7.4 Darwin/18.2.0 botocore/1.12.190", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 753, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "ea3c58c3-eae4-49d0-9992-e7017de183669", "eventTime": "2019-07-24T19:00:44Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "211.147.47.10", "userAgent": "aws-cli/1.16.200 Python/3.7.4 Darwin/18.2.0 botocore/1.12.190", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "ea3c58c3-eae4-49d0-9992-e7017de183669", "record_id": "flaws_cloudtrail:0000571:ea3c58c3-eae4-49d0-9992-e7017de183669", "row_index": 571, "timestamp": "2019-07-24T19:00:44Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "211.147.47.10", "user_agent": "aws-cli/1.16.200 Python/3.7.4 Darwin/18.2.0 botocore/1.12.190", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 753, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "ea3c58c3-eae4-49d0-9992-e7017de183669", "eventTime": "2019-07-24T19:00:44Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "211.147.47.10", "userAgent": "aws-cli/1.16.200 Python/3.7.4 Darwin/18.2.0 botocore/1.12.190", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "7c74bf98-88b4-4ffc-8cf9-07727c69be7", "record_id": "flaws_cloudtrail:0000572:7c74bf98-88b4-4ffc-8cf9-07727c69be7", "row_index": 572, "timestamp": "2019-07-24T19:00:50Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "211.147.47.10", "user_agent": "aws-cli/1.16.200 Python/3.7.4 Darwin/18.2.0 botocore/1.12.190", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1070, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "7c74bf98-88b4-4ffc-8cf9-07727c69be7", "eventTime": "2019-07-24T19:00:50Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "211.147.47.10", "userAgent": "aws-cli/1.16.200 Python/3.7.4 Darwin/18.2.0 botocore/1.12.190", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"nextToken": "eyJ2IjoiMiIsImMiOiI3SWZLcU9KMFRWWWJCWUdvV3g2TktZWGZUYVdaSUIwY3ZXRUxwRjkwTmk3K2t3TDNXbGg4ZEsxWHl6dzFrcmxzQUszb1FmUWduajlYNkRZajFYeHpLWFd5NllyckFJTUsyYUk2MCtrU2lINm9zaGcvd092WWZuNi9pU2ltbSsyMnZQTnpBd092Nzd1MjloNExzMHhiOWF6aXAzQzRFL0hITVNBNnBzZ0pDQ3p2NEpIY0Z2bnFuanZsZStXZFU1MzBieU5CNmdXTGowVT0iLCJzIjoiMSJ9", "maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "7c74bf98-88b4-4ffc-8cf9-07727c69be7", "record_id": "flaws_cloudtrail:0000573:7c74bf98-88b4-4ffc-8cf9-07727c69be7", "row_index": 573, "timestamp": "2019-07-24T19:00:50Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "211.147.47.10", "user_agent": "aws-cli/1.16.200 Python/3.7.4 Darwin/18.2.0 botocore/1.12.190", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1070, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "7c74bf98-88b4-4ffc-8cf9-07727c69be7", "eventTime": "2019-07-24T19:00:50Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "211.147.47.10", "userAgent": "aws-cli/1.16.200 Python/3.7.4 Darwin/18.2.0 botocore/1.12.190", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"nextToken": "eyJ2IjoiMiIsImMiOiI3SWZLcU9KMFRWWWJCWUdvV3g2TktZWGZUYVdaSUIwY3ZXRUxwRjkwTmk3K2t3TDNXbGg4ZEsxWHl6dzFrcmxzQUszb1FmUWduajlYNkRZajFYeHpLWFd5NllyckFJTUsyYUk2MCtrU2lINm9zaGcvd092WWZuNi9pU2ltbSsyMnZQTnpBd092Nzd1MjloNExzMHhiOWF6aXAzQzRFL0hITVNBNnBzZ0pDQ3p2NEpIY0Z2bnFuanZsZStXZFU1MzBieU5CNmdXTGowVT0iLCJzIjoiMSJ9", "maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "588495-1a86-4121-9533-d64be1b67aa5", "record_id": "flaws_cloudtrail:0000574:588495-1a86-4121-9533-d64be1b67aa5", "row_index": 574, "timestamp": "2019-07-24T19:00:53Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "211.147.47.10", "user_agent": "aws-cli/1.16.200 Python/3.7.4 Darwin/18.2.0 botocore/1.12.190", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1077, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "588495-1a86-4121-9533-d64be1b67aa5", "eventTime": "2019-07-24T19:00:53Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "211.147.47.10", "userAgent": "aws-cli/1.16.200 Python/3.7.4 Darwin/18.2.0 botocore/1.12.190", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"nextToken": "eyJ2IjoiMiIsImMiOiJieWNOWGNDeXZZTURadVdvNTVTRFdWSWJ1VEVDMXBGZjR2Q0tscTJiYlZ0eENkNUgrTkZHMW05Z2J4NnV3RkRURFllLzNiTk1oWEVkelFoQWE5WkZJUElUVnhFK1FOTjJHZWlDN044aVMvOSt5QUUvaDdQc0lqZngvQklQQmNqQ1Q3Rkt3TFd4ZS9hdHFnUzhrek9hY0lobWJuaFhuMjNad08zMUs2V3BkbWhsY09BRmxCZFEvSG5aMG0wMllPdEhrY3AwMFJqOTFSNFZTZz09IiwicyI6IjEifQ==", "maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "588495-1a86-4121-9533-d64be1b67aa5", "record_id": "flaws_cloudtrail:0000575:588495-1a86-4121-9533-d64be1b67aa5", "row_index": 575, "timestamp": "2019-07-24T19:00:53Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "211.147.47.10", "user_agent": "aws-cli/1.16.200 Python/3.7.4 Darwin/18.2.0 botocore/1.12.190", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1077, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "588495-1a86-4121-9533-d64be1b67aa5", "eventTime": "2019-07-24T19:00:53Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "211.147.47.10", "userAgent": "aws-cli/1.16.200 Python/3.7.4 Darwin/18.2.0 botocore/1.12.190", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"nextToken": "eyJ2IjoiMiIsImMiOiJieWNOWGNDeXZZTURadVdvNTVTRFdWSWJ1VEVDMXBGZjR2Q0tscTJiYlZ0eENkNUgrTkZHMW05Z2J4NnV3RkRURFllLzNiTk1oWEVkelFoQWE5WkZJUElUVnhFK1FOTjJHZWlDN044aVMvOSt5QUUvaDdQc0lqZngvQklQQmNqQ1Q3Rkt3TFd4ZS9hdHFnUzhrek9hY0lobWJuaFhuMjNad08zMUs2V3BkbWhsY09BRmxCZFEvSG5aMG0wMllPdEhrY3AwMFJqOTFSNFZTZz09IiwicyI6IjEifQ==", "maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "a66fd382-d0ae-4733-87b3-048c24f059b3", "record_id": "flaws_cloudtrail:0000576:a66fd382-d0ae-4733-87b3-048c24f059b3", "row_index": 576, "timestamp": "2019-07-24T19:00:58Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "211.147.47.10", "user_agent": "aws-cli/1.16.200 Python/3.7.4 Darwin/18.2.0 botocore/1.12.190", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1079, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "a66fd382-d0ae-4733-87b3-048c24f059b3", "eventTime": "2019-07-24T19:00:58Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "211.147.47.10", "userAgent": "aws-cli/1.16.200 Python/3.7.4 Darwin/18.2.0 botocore/1.12.190", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"nextToken": "eyJ2IjoiMiIsImMiOiJMRkNvakJQTE50K2VGRVNCVVFUUlFDcGI3MDR3R2RMWXFqemFQUzBSQ05CWlNEY1drTldLSEJHT2wxK0FZSlJaaXpTWUd1eWkrR3lkeStBOHFiV3k4cjVPTjZzcW95M1NPNGk3QUhWTy9iQkNSSnhKaUtuNlN5bXc4Y2FEeGNlT1EzZk9rU2RTb3cxNzFnVFM5djJ1ZUQ3dUlZTFZsd3IyZk9BalBvdVBtQWN1c1VRUzZWVnI1ZHV0d2RuV0JGMkJGUzZVeThmVVRiTktaZz09IiwicyI6IjEifQ==", "maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "a66fd382-d0ae-4733-87b3-048c24f059b3", "record_id": "flaws_cloudtrail:0000577:a66fd382-d0ae-4733-87b3-048c24f059b3", "row_index": 577, "timestamp": "2019-07-24T19:00:58Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "211.147.47.10", "user_agent": "aws-cli/1.16.200 Python/3.7.4 Darwin/18.2.0 botocore/1.12.190", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1079, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "a66fd382-d0ae-4733-87b3-048c24f059b3", "eventTime": "2019-07-24T19:00:58Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "211.147.47.10", "userAgent": "aws-cli/1.16.200 Python/3.7.4 Darwin/18.2.0 botocore/1.12.190", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"nextToken": "eyJ2IjoiMiIsImMiOiJMRkNvakJQTE50K2VGRVNCVVFUUlFDcGI3MDR3R2RMWXFqemFQUzBSQ05CWlNEY1drTldLSEJHT2wxK0FZSlJaaXpTWUd1eWkrR3lkeStBOHFiV3k4cjVPTjZzcW95M1NPNGk3QUhWTy9iQkNSSnhKaUtuNlN5bXc4Y2FEeGNlT1EzZk9rU2RTb3cxNzFnVFM5djJ1ZUQ3dUlZTFZsd3IyZk9BalBvdVBtQWN1c1VRUzZWVnI1ZHV0d2RuV0JGMkJGUzZVeThmVVRiTktaZz09IiwicyI6IjEifQ==", "maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "cf0b484c-62a4-4bfd-b685-f064c5b98ea6", "record_id": "flaws_cloudtrail:0000578:cf0b484c-62a4-4bfd-b685-f064c5b98ea6", "row_index": 578, "timestamp": "2019-07-24T19:01:01Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "211.147.47.10", "user_agent": "aws-cli/1.16.200 Python/3.7.4 Darwin/18.2.0 botocore/1.12.190", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1071, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "cf0b484c-62a4-4bfd-b685-f064c5b98ea6", "eventTime": "2019-07-24T19:01:01Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "211.147.47.10", "userAgent": "aws-cli/1.16.200 Python/3.7.4 Darwin/18.2.0 botocore/1.12.190", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"nextToken": "eyJ2IjoiMiIsImMiOiJiTDhXZGROaFRRdmY5dG1WMEc5S3pkOVUwS3FaakhTWnpBS2lKUmtaMVU4YzNFeE1FU1FqRmxCdU55aXUvV0JPN3pEK3JpQmZGMnU5ZktjUHUzR0Q2N1JQYWhmaUVrSnpBNjR2RTI5ZUw2WkZIUUdjVjhESkI2V3Yya1VlZjJVMGtGWVJMSDNyMG1ENTAyN2RSclJnTXZ2UnRTdHRCOU96cnd2eVk1bzQ3bkZwdE9kQSs0MGh4YjkyNGJXN0MrckpHRDJhRXNETzN3PT0iLCJzIjoiMSJ9", "maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "cf0b484c-62a4-4bfd-b685-f064c5b98ea6", "record_id": "flaws_cloudtrail:0000579:cf0b484c-62a4-4bfd-b685-f064c5b98ea6", "row_index": 579, "timestamp": "2019-07-24T19:01:01Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "211.147.47.10", "user_agent": "aws-cli/1.16.200 Python/3.7.4 Darwin/18.2.0 botocore/1.12.190", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1071, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "cf0b484c-62a4-4bfd-b685-f064c5b98ea6", "eventTime": "2019-07-24T19:01:01Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "211.147.47.10", "userAgent": "aws-cli/1.16.200 Python/3.7.4 Darwin/18.2.0 botocore/1.12.190", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"nextToken": "eyJ2IjoiMiIsImMiOiJiTDhXZGROaFRRdmY5dG1WMEc5S3pkOVUwS3FaakhTWnpBS2lKUmtaMVU4YzNFeE1FU1FqRmxCdU55aXUvV0JPN3pEK3JpQmZGMnU5ZktjUHUzR0Q2N1JQYWhmaUVrSnpBNjR2RTI5ZUw2WkZIUUdjVjhESkI2V3Yya1VlZjJVMGtGWVJMSDNyMG1ENTAyN2RSclJnTXZ2UnRTdHRCOU96cnd2eVk1bzQ3bkZwdE9kQSs0MGh4YjkyNGJXN0MrckpHRDJhRXNETzN3PT0iLCJzIjoiMSJ9", "maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "3b318c47-c649-4eed-8275-652a5adda9f6", "record_id": "flaws_cloudtrail:0000580:3b318c47-c649-4eed-8275-652a5adda9f6", "row_index": 580, "timestamp": "2019-07-24T19:01:05Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "211.147.47.10", "user_agent": "aws-cli/1.16.200 Python/3.7.4 Darwin/18.2.0 botocore/1.12.190", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1079, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "3b318c47-c649-4eed-8275-652a5adda9f6", "eventTime": "2019-07-24T19:01:05Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "211.147.47.10", "userAgent": "aws-cli/1.16.200 Python/3.7.4 Darwin/18.2.0 botocore/1.12.190", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"nextToken": "eyJ2IjoiMiIsImMiOiJHV3N3NEU1MXZEa0l2Qzc3K0grRHRIOXQydXdiNnAzbUFMZDNpeDhBb3FRNVZqZ2NidVh2UmRhQ0U4cVliRThObWY0YkxuWXRNK0JxYzFkVkZCUjZlOFhQRkxEU0tSYkliVDJ2MmxTVng3clBYaHN0RnMvT0RnQ3I3NjhMWlJ0M2pxUHVWcU5WSmZLUmpvemdlbXFobVdKQzNMWEtYWnhHNWt5b1lIU0pmaGgvVDFMTTduT3pCUnRaVFdhUURSWUNQOGtpTXkzeHkxYTZjUT09IiwicyI6IjEifQ==", "maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "3b318c47-c649-4eed-8275-652a5adda9f6", "record_id": "flaws_cloudtrail:0000581:3b318c47-c649-4eed-8275-652a5adda9f6", "row_index": 581, "timestamp": "2019-07-24T19:01:05Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "211.147.47.10", "user_agent": "aws-cli/1.16.200 Python/3.7.4 Darwin/18.2.0 botocore/1.12.190", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1079, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "3b318c47-c649-4eed-8275-652a5adda9f6", "eventTime": "2019-07-24T19:01:05Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "211.147.47.10", "userAgent": "aws-cli/1.16.200 Python/3.7.4 Darwin/18.2.0 botocore/1.12.190", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"nextToken": "eyJ2IjoiMiIsImMiOiJHV3N3NEU1MXZEa0l2Qzc3K0grRHRIOXQydXdiNnAzbUFMZDNpeDhBb3FRNVZqZ2NidVh2UmRhQ0U4cVliRThObWY0YkxuWXRNK0JxYzFkVkZCUjZlOFhQRkxEU0tSYkliVDJ2MmxTVng3clBYaHN0RnMvT0RnQ3I3NjhMWlJ0M2pxUHVWcU5WSmZLUmpvemdlbXFobVdKQzNMWEtYWnhHNWt5b1lIU0pmaGgvVDFMTTduT3pCUnRaVFdhUURSWUNQOGtpTXkzeHkxYTZjUT09IiwicyI6IjEifQ==", "maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "61966ca5-4d35-4472-8f51-799ddc658a97", "record_id": "flaws_cloudtrail:0000582:61966ca5-4d35-4472-8f51-799ddc658a97", "row_index": 582, "timestamp": "2019-07-24T19:01:09Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "211.147.47.10", "user_agent": "aws-cli/1.16.200 Python/3.7.4 Darwin/18.2.0 botocore/1.12.190", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1079, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "61966ca5-4d35-4472-8f51-799ddc658a97", "eventTime": "2019-07-24T19:01:09Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "211.147.47.10", "userAgent": "aws-cli/1.16.200 Python/3.7.4 Darwin/18.2.0 botocore/1.12.190", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"nextToken": "eyJ2IjoiMiIsImMiOiJObXNkczVmdGlJL21XVDErMmw2UzNZOTNkU05nUGcwNzgvUE8vSWFrb3FXR0lwVjh4ODdYZi9HcGpTY3lFN1MveXVKMUVQQllldEloY0N2K1Nvc2RpbTBXMjZrMjZYSWRBV3VXSi9LRmwyNFBYTCtpUGJPRXZvdXNXNW8rTDVCMTBrMDJGdzFXRkRVVVJ6WkZRMmdZRjEyOStQTzBJMGg2TS9JVW53OWJ1MU5rTS92UHdyV3lxV1BlSkYrbmdVS2RqdXQ0L1dLaGV1NEFuUT09IiwicyI6IjEifQ==", "maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "61966ca5-4d35-4472-8f51-799ddc658a97", "record_id": "flaws_cloudtrail:0000583:61966ca5-4d35-4472-8f51-799ddc658a97", "row_index": 583, "timestamp": "2019-07-24T19:01:09Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "211.147.47.10", "user_agent": "aws-cli/1.16.200 Python/3.7.4 Darwin/18.2.0 botocore/1.12.190", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1079, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "61966ca5-4d35-4472-8f51-799ddc658a97", "eventTime": "2019-07-24T19:01:09Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "211.147.47.10", "userAgent": "aws-cli/1.16.200 Python/3.7.4 Darwin/18.2.0 botocore/1.12.190", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"nextToken": "eyJ2IjoiMiIsImMiOiJObXNkczVmdGlJL21XVDErMmw2UzNZOTNkU05nUGcwNzgvUE8vSWFrb3FXR0lwVjh4ODdYZi9HcGpTY3lFN1MveXVKMUVQQllldEloY0N2K1Nvc2RpbTBXMjZrMjZYSWRBV3VXSi9LRmwyNFBYTCtpUGJPRXZvdXNXNW8rTDVCMTBrMDJGdzFXRkRVVVJ6WkZRMmdZRjEyOStQTzBJMGg2TS9JVW53OWJ1MU5rTS92UHdyV3lxV1BlSkYrbmdVS2RqdXQ0L1dLaGV1NEFuUT09IiwicyI6IjEifQ==", "maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "d60522d-7d42-4111-a0b5-441422bcb2545", "record_id": "flaws_cloudtrail:0000584:d60522d-7d42-4111-a0b5-441422bcb2545", "row_index": 584, "timestamp": "2019-07-24T19:01:13Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "211.147.47.10", "user_agent": "aws-cli/1.16.200 Python/3.7.4 Darwin/18.2.0 botocore/1.12.190", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1071, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "d60522d-7d42-4111-a0b5-441422bcb2545", "eventTime": "2019-07-24T19:01:13Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "211.147.47.10", "userAgent": "aws-cli/1.16.200 Python/3.7.4 Darwin/18.2.0 botocore/1.12.190", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"nextToken": "eyJ2IjoiMiIsImMiOiJDbStJdzFVdmprbXZCbkR5UC9TNjRSaWppR1YyaXJVRGZGOFlqQU10OVhEdDEzSXp4NGYxKzhOQWZ0NHpRRUwvek0wQ1RiV0NMOW9KdUJKcWlSL21JYlQ5OVcwREhabVhBWVljVGRCRUJXQzBtSlFPQ1BvKzI3TDVHbHl2K01qSHhlOUIrdEhPQzFNS2FBRnM1UFEzOHh0NG9KcXA1eDFWK2YvekgxSUtNWWlqNkI2czUyRjZQcFVuNmMxTG5GWExWV2FsQ0VKNEZyaz0iLCJzIjoiMSJ9", "maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "d60522d-7d42-4111-a0b5-441422bcb2545", "record_id": "flaws_cloudtrail:0000585:d60522d-7d42-4111-a0b5-441422bcb2545", "row_index": 585, "timestamp": "2019-07-24T19:01:13Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "211.147.47.10", "user_agent": "aws-cli/1.16.200 Python/3.7.4 Darwin/18.2.0 botocore/1.12.190", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1071, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "d60522d-7d42-4111-a0b5-441422bcb2545", "eventTime": "2019-07-24T19:01:13Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "211.147.47.10", "userAgent": "aws-cli/1.16.200 Python/3.7.4 Darwin/18.2.0 botocore/1.12.190", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"nextToken": "eyJ2IjoiMiIsImMiOiJDbStJdzFVdmprbXZCbkR5UC9TNjRSaWppR1YyaXJVRGZGOFlqQU10OVhEdDEzSXp4NGYxKzhOQWZ0NHpRRUwvek0wQ1RiV0NMOW9KdUJKcWlSL21JYlQ5OVcwREhabVhBWVljVGRCRUJXQzBtSlFPQ1BvKzI3TDVHbHl2K01qSHhlOUIrdEhPQzFNS2FBRnM1UFEzOHh0NG9KcXA1eDFWK2YvekgxSUtNWWlqNkI2czUyRjZQcFVuNmMxTG5GWExWV2FsQ0VKNEZyaz0iLCJzIjoiMSJ9", "maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "ebe4d97c-4b64-42ce-9c2b-b7103d9a01ff", "record_id": "flaws_cloudtrail:0000586:ebe4d97c-4b64-42ce-9c2b-b7103d9a01ff", "row_index": 586, "timestamp": "2019-07-24T19:01:17Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "211.147.47.10", "user_agent": "aws-cli/1.16.200 Python/3.7.4 Darwin/18.2.0 botocore/1.12.190", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1079, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "ebe4d97c-4b64-42ce-9c2b-b7103d9a01ff", "eventTime": "2019-07-24T19:01:17Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "211.147.47.10", "userAgent": "aws-cli/1.16.200 Python/3.7.4 Darwin/18.2.0 botocore/1.12.190", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"nextToken": "eyJ2IjoiMiIsImMiOiJ6Z3RuUHdHbnVZZDgwZW9uN1MwM2hVNjhDbFlMZDNqdkR6WnNDb2Y1ZC9hL2xsNFY0d3RXakFRODF2SEYyVEV3RVZ1UnBDbFNpZmpzWEFLUzJlSG4zWlE3RklEWDJZL0VPR3RDZ2dMUm9RcnM1SjZVYXdTeng1eTZ4T3ptK0lrMTcxdjNzTDZWNFYvek5BRmpOc2hhYXlrRjc1ajhPcFdveDU2NzVsSjk1RnZhTUtvUVgxQXZDcVk0L0sxSUViT3daS1Q3dzk4Q2o4Skl5Zz09IiwicyI6IjEifQ==", "maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "ebe4d97c-4b64-42ce-9c2b-b7103d9a01ff", "record_id": "flaws_cloudtrail:0000587:ebe4d97c-4b64-42ce-9c2b-b7103d9a01ff", "row_index": 587, "timestamp": "2019-07-24T19:01:17Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "211.147.47.10", "user_agent": "aws-cli/1.16.200 Python/3.7.4 Darwin/18.2.0 botocore/1.12.190", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1079, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "ebe4d97c-4b64-42ce-9c2b-b7103d9a01ff", "eventTime": "2019-07-24T19:01:17Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "211.147.47.10", "userAgent": "aws-cli/1.16.200 Python/3.7.4 Darwin/18.2.0 botocore/1.12.190", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"nextToken": "eyJ2IjoiMiIsImMiOiJ6Z3RuUHdHbnVZZDgwZW9uN1MwM2hVNjhDbFlMZDNqdkR6WnNDb2Y1ZC9hL2xsNFY0d3RXakFRODF2SEYyVEV3RVZ1UnBDbFNpZmpzWEFLUzJlSG4zWlE3RklEWDJZL0VPR3RDZ2dMUm9RcnM1SjZVYXdTeng1eTZ4T3ptK0lrMTcxdjNzTDZWNFYvek5BRmpOc2hhYXlrRjc1ajhPcFdveDU2NzVsSjk1RnZhTUtvUVgxQXZDcVk0L0sxSUViT3daS1Q3dzk4Q2o4Skl5Zz09IiwicyI6IjEifQ==", "maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "1d778dea-f644-46a7-97d9-a053618a1d", "record_id": "flaws_cloudtrail:0000588:1d778dea-f644-46a7-97d9-a053618a1d", "row_index": 588, "timestamp": "2019-07-24T19:01:21Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "211.147.47.10", "user_agent": "aws-cli/1.16.200 Python/3.7.4 Darwin/18.2.0 botocore/1.12.190", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1069, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "1d778dea-f644-46a7-97d9-a053618a1d", "eventTime": "2019-07-24T19:01:21Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "211.147.47.10", "userAgent": "aws-cli/1.16.200 Python/3.7.4 Darwin/18.2.0 botocore/1.12.190", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"nextToken": "eyJ2IjoiMiIsImMiOiJMdEM4Wi80M3h3aHBlVjlndXRBQUtBa0xNRUxsSW1JdjlzcFFJbUJUVlVmNCtIcHF0bytrR1YyWTJNUjEvVS84My8yUWl6RFBWS2NnUjk1ZGpKTWhzUjVsMHhYV0VXRGc0dXNsajhBN3lienhpQTVlSGViMlZoODQ1cHl0TzdsOWkrYjU3eC9wMHY3aUQwenJhZ21BOXRzN3lmZzFiRk9nNldWWHMxUnFaUER2RjJJSmYrdHV0RXNZM043VGJ5ajVNdVFyZ3JheEFBPT0iLCJzIjoiMSJ9", "maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "1d778dea-f644-46a7-97d9-a053618a1d", "record_id": "flaws_cloudtrail:0000589:1d778dea-f644-46a7-97d9-a053618a1d", "row_index": 589, "timestamp": "2019-07-24T19:01:21Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "211.147.47.10", "user_agent": "aws-cli/1.16.200 Python/3.7.4 Darwin/18.2.0 botocore/1.12.190", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1069, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "1d778dea-f644-46a7-97d9-a053618a1d", "eventTime": "2019-07-24T19:01:21Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "211.147.47.10", "userAgent": "aws-cli/1.16.200 Python/3.7.4 Darwin/18.2.0 botocore/1.12.190", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"nextToken": "eyJ2IjoiMiIsImMiOiJMdEM4Wi80M3h3aHBlVjlndXRBQUtBa0xNRUxsSW1JdjlzcFFJbUJUVlVmNCtIcHF0bytrR1YyWTJNUjEvVS84My8yUWl6RFBWS2NnUjk1ZGpKTWhzUjVsMHhYV0VXRGc0dXNsajhBN3lienhpQTVlSGViMlZoODQ1cHl0TzdsOWkrYjU3eC9wMHY3aUQwenJhZ21BOXRzN3lmZzFiRk9nNldWWHMxUnFaUER2RjJJSmYrdHV0RXNZM043VGJ5ajVNdVFyZ3JheEFBPT0iLCJzIjoiMSJ9", "maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "0e1eeca9-bda1-4087-bb10-d732ca858d38", "record_id": "flaws_cloudtrail:0000590:0e1eeca9-bda1-4087-bb10-d732ca858d38", "row_index": 590, "timestamp": "2019-07-24T19:01:24Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "211.147.47.10", "user_agent": "aws-cli/1.16.200 Python/3.7.4 Darwin/18.2.0 botocore/1.12.190", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1079, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "0e1eeca9-bda1-4087-bb10-d732ca858d38", "eventTime": "2019-07-24T19:01:24Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "211.147.47.10", "userAgent": "aws-cli/1.16.200 Python/3.7.4 Darwin/18.2.0 botocore/1.12.190", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"nextToken": "eyJ2IjoiMiIsImMiOiJINzVUalNWR1ZYbk9SYmRpcGhlMUhLZ1dMQ0V4dDRsa0QrdnhmZVNFV3NIRHlpYnZad3M0ZUJwWlhsQXhZZkRrbEFFM1F4NG5Hbm9HdWxOTGxnbWJKVTdKME81Znh0bWUxVlEyUXdUZG02M0RuWDh2Y2JRMStRZk5zbVZQS2RhdjNWekI3N0tva3o1V05OajhsTnFmUXh6b3NJNEllZGdmYmNMakpHeDhxcGREZjVpYjNpYm5XeitJY00zdUtwdkdCN2ZiZ2xuR2FybkhnZz09IiwicyI6IjEifQ==", "maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "0e1eeca9-bda1-4087-bb10-d732ca858d38", "record_id": "flaws_cloudtrail:0000591:0e1eeca9-bda1-4087-bb10-d732ca858d38", "row_index": 591, "timestamp": "2019-07-24T19:01:24Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "211.147.47.10", "user_agent": "aws-cli/1.16.200 Python/3.7.4 Darwin/18.2.0 botocore/1.12.190", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1079, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "0e1eeca9-bda1-4087-bb10-d732ca858d38", "eventTime": "2019-07-24T19:01:24Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "211.147.47.10", "userAgent": "aws-cli/1.16.200 Python/3.7.4 Darwin/18.2.0 botocore/1.12.190", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"nextToken": "eyJ2IjoiMiIsImMiOiJINzVUalNWR1ZYbk9SYmRpcGhlMUhLZ1dMQ0V4dDRsa0QrdnhmZVNFV3NIRHlpYnZad3M0ZUJwWlhsQXhZZkRrbEFFM1F4NG5Hbm9HdWxOTGxnbWJKVTdKME81Znh0bWUxVlEyUXdUZG02M0RuWDh2Y2JRMStRZk5zbVZQS2RhdjNWekI3N0tva3o1V05OajhsTnFmUXh6b3NJNEllZGdmYmNMakpHeDhxcGREZjVpYjNpYm5XeitJY00zdUtwdkdCN2ZiZ2xuR2FybkhnZz09IiwicyI6IjEifQ==", "maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "4cc4605f-7f42-4e4f-97ed-cd5e055bec4b", "record_id": "flaws_cloudtrail:0000592:4cc4605f-7f42-4e4f-97ed-cd5e055bec4b", "row_index": 592, "timestamp": "2019-07-24T19:01:27Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "211.147.47.10", "user_agent": "aws-cli/1.16.200 Python/3.7.4 Darwin/18.2.0 botocore/1.12.190", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1080, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "4cc4605f-7f42-4e4f-97ed-cd5e055bec4b", "eventTime": "2019-07-24T19:01:27Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "211.147.47.10", "userAgent": "aws-cli/1.16.200 Python/3.7.4 Darwin/18.2.0 botocore/1.12.190", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"nextToken": "eyJ2IjoiMiIsImMiOiJQbkhOcFNTMUt0OHpUb0c1bFNHeGViVzNaMzlsZnFiWXRrODNtVngyZDF1MC9FZzFXMllPUTFVT1B5OXlZOWpTUE5JTGVUSVpmZ3cyakcyL2xRcUxyTUxXZDQ5VVBRMUd6Q25oK2VwY2J4NTUrWU40WktTd0lpVUs4V2lpZTh3QUZLN20yOHFvVzl5QmNLa3grNmp5K0NOWitPS0xiMFlxUWVYTURjNm1naVNmYVo4WnVFMXoydTdZekxBOVlmVDNadjNxa1VDMDU4Sksxdz09IiwicyI6IjEifQ==", "maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "4cc4605f-7f42-4e4f-97ed-cd5e055bec4b", "record_id": "flaws_cloudtrail:0000593:4cc4605f-7f42-4e4f-97ed-cd5e055bec4b", "row_index": 593, "timestamp": "2019-07-24T19:01:27Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "211.147.47.10", "user_agent": "aws-cli/1.16.200 Python/3.7.4 Darwin/18.2.0 botocore/1.12.190", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1080, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "4cc4605f-7f42-4e4f-97ed-cd5e055bec4b", "eventTime": "2019-07-24T19:01:27Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "211.147.47.10", "userAgent": "aws-cli/1.16.200 Python/3.7.4 Darwin/18.2.0 botocore/1.12.190", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"nextToken": "eyJ2IjoiMiIsImMiOiJQbkhOcFNTMUt0OHpUb0c1bFNHeGViVzNaMzlsZnFiWXRrODNtVngyZDF1MC9FZzFXMllPUTFVT1B5OXlZOWpTUE5JTGVUSVpmZ3cyakcyL2xRcUxyTUxXZDQ5VVBRMUd6Q25oK2VwY2J4NTUrWU40WktTd0lpVUs4V2lpZTh3QUZLN20yOHFvVzl5QmNLa3grNmp5K0NOWitPS0xiMFlxUWVYTURjNm1naVNmYVo4WnVFMXoydTdZekxBOVlmVDNadjNxa1VDMDU4Sksxdz09IiwicyI6IjEifQ==", "maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "01c08ba8-2521-4c0b-984f-de5093264a70", "record_id": "flaws_cloudtrail:0000594:01c08ba8-2521-4c0b-984f-de5093264a70", "row_index": 594, "timestamp": "2019-07-24T19:01:30Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "211.147.47.10", "user_agent": "aws-cli/1.16.200 Python/3.7.4 Darwin/18.2.0 botocore/1.12.190", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1071, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "01c08ba8-2521-4c0b-984f-de5093264a70", "eventTime": "2019-07-24T19:01:30Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "211.147.47.10", "userAgent": "aws-cli/1.16.200 Python/3.7.4 Darwin/18.2.0 botocore/1.12.190", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"nextToken": "eyJ2IjoiMiIsImMiOiJGNnFNaXBsbXdQWjlXcWV4NUxqalJlY3NPTjgvTU5RMnB2Tmk5YkEyYm95b3hwVy8yS1FjNktZMks4WGRtQVNkVC9MVXFkQmJudzJiRWdDSFJuNEhNWmNGMERjYi9EMWszZXNHaHVUeGxEakhaMnFjRkROSmVZcmdqVGJibm9jMklXcUM5UWJEWUJWMmhTNDZIOE42SFNsa3hIbTYvTnZsNVQzZXhEVUJXbEZTbGVFTWZtNUJKWGdRRWtxVE5kRDJYQjdwbitYRHpJaz0iLCJzIjoiMSJ9", "maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "01c08ba8-2521-4c0b-984f-de5093264a70", "record_id": "flaws_cloudtrail:0000595:01c08ba8-2521-4c0b-984f-de5093264a70", "row_index": 595, "timestamp": "2019-07-24T19:01:30Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "211.147.47.10", "user_agent": "aws-cli/1.16.200 Python/3.7.4 Darwin/18.2.0 botocore/1.12.190", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1071, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "01c08ba8-2521-4c0b-984f-de5093264a70", "eventTime": "2019-07-24T19:01:30Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "211.147.47.10", "userAgent": "aws-cli/1.16.200 Python/3.7.4 Darwin/18.2.0 botocore/1.12.190", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"nextToken": "eyJ2IjoiMiIsImMiOiJGNnFNaXBsbXdQWjlXcWV4NUxqalJlY3NPTjgvTU5RMnB2Tmk5YkEyYm95b3hwVy8yS1FjNktZMks4WGRtQVNkVC9MVXFkQmJudzJiRWdDSFJuNEhNWmNGMERjYi9EMWszZXNHaHVUeGxEakhaMnFjRkROSmVZcmdqVGJibm9jMklXcUM5UWJEWUJWMmhTNDZIOE42SFNsa3hIbTYvTnZsNVQzZXhEVUJXbEZTbGVFTWZtNUJKWGdRRWtxVE5kRDJYQjdwbitYRHpJaz0iLCJzIjoiMSJ9", "maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "816488d15-52a0-47e0-bf90-b98320", "record_id": "flaws_cloudtrail:0000596:816488d15-52a0-47e0-bf90-b98320", "row_index": 596, "timestamp": "2019-07-24T19:01:34Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "211.147.47.10", "user_agent": "aws-cli/1.16.200 Python/3.7.4 Darwin/18.2.0 botocore/1.12.190", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1066, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "816488d15-52a0-47e0-bf90-b98320", "eventTime": "2019-07-24T19:01:34Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "211.147.47.10", "userAgent": "aws-cli/1.16.200 Python/3.7.4 Darwin/18.2.0 botocore/1.12.190", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"nextToken": "eyJ2IjoiMiIsImMiOiJjUGYvWDNYeHZHK2JrVHRHR3IyQzUrRXlINjVNS01Dc3lBY1V2d2NhOHZKQWpCcDI0eE8zM2YvK1pJUk44YUVneXFEd3hDMWF2NEZCNWpKVVVSQ1NmS3JCTzFxQmkyV3N6dzhpUlJKdVE4Y0hFSUZyeWx3MGoweUZwcklES1d1U3NJSFRzdW1adm1VQk9USDliVU5nelN4c2Y1bXZUMjJ5WVRyRTNyZUhOb2hXY0h0ci9HendaSnVCd3krM1p2U0xwNzZ5K2FPVU43WT0iLCJzIjoiMSJ9", "maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "816488d15-52a0-47e0-bf90-b98320", "record_id": "flaws_cloudtrail:0000597:816488d15-52a0-47e0-bf90-b98320", "row_index": 597, "timestamp": "2019-07-24T19:01:34Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "211.147.47.10", "user_agent": "aws-cli/1.16.200 Python/3.7.4 Darwin/18.2.0 botocore/1.12.190", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1066, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "816488d15-52a0-47e0-bf90-b98320", "eventTime": "2019-07-24T19:01:34Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "211.147.47.10", "userAgent": "aws-cli/1.16.200 Python/3.7.4 Darwin/18.2.0 botocore/1.12.190", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"nextToken": "eyJ2IjoiMiIsImMiOiJjUGYvWDNYeHZHK2JrVHRHR3IyQzUrRXlINjVNS01Dc3lBY1V2d2NhOHZKQWpCcDI0eE8zM2YvK1pJUk44YUVneXFEd3hDMWF2NEZCNWpKVVVSQ1NmS3JCTzFxQmkyV3N6dzhpUlJKdVE4Y0hFSUZyeWx3MGoweUZwcklES1d1U3NJSFRzdW1adm1VQk9USDliVU5nelN4c2Y1bXZUMjJ5WVRyRTNyZUhOb2hXY0h0ci9HendaSnVCd3krM1p2U0xwNzZ5K2FPVU43WT0iLCJzIjoiMSJ9", "maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "e285dffe-7c1c-4486-8227-eb4d8081a099", "record_id": "flaws_cloudtrail:0000598:e285dffe-7c1c-4486-8227-eb4d8081a099", "row_index": 598, "timestamp": "2019-07-24T19:01:36Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "211.147.47.10", "user_agent": "aws-cli/1.16.200 Python/3.7.4 Darwin/18.2.0 botocore/1.12.190", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1097, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "e285dffe-7c1c-4486-8227-eb4d8081a099", "eventTime": "2019-07-24T19:01:36Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "211.147.47.10", "userAgent": "aws-cli/1.16.200 Python/3.7.4 Darwin/18.2.0 botocore/1.12.190", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"nextToken": "eyJ2IjoiMiIsImMiOiJDODdBRUowQ2RXeE9RSjNvODk5d2FWT3dYb3UrTEtoSERhdWlMOUwrMWs4OVI3dUVQNDhqblQ5eVZKVC9OODBRS01WNmFIZ1grYjYrM2cvSXQzT1BwemZtSHg3VUhEaW43aWFuYmV1c1pyUkZnV005T3VNSHZpbXJmcmpEUmpnQ24xbnVvUGtZeW1EZTZjMG9hNEFwb0NTS1JVNUNUaTRZNUc4L3FxZWR6ZVJ1SHBwck9zcGwrQUYyT243YUdhYU5xOE01WGswYjdzMUNjM2kzOWNMZzZFSHBDc1MrdDBFPSIsInMiOiIxIn0=", "maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "e285dffe-7c1c-4486-8227-eb4d8081a099", "record_id": "flaws_cloudtrail:0000599:e285dffe-7c1c-4486-8227-eb4d8081a099", "row_index": 599, "timestamp": "2019-07-24T19:01:36Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "211.147.47.10", "user_agent": "aws-cli/1.16.200 Python/3.7.4 Darwin/18.2.0 botocore/1.12.190", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1097, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "e285dffe-7c1c-4486-8227-eb4d8081a099", "eventTime": "2019-07-24T19:01:36Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "211.147.47.10", "userAgent": "aws-cli/1.16.200 Python/3.7.4 Darwin/18.2.0 botocore/1.12.190", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"nextToken": "eyJ2IjoiMiIsImMiOiJDODdBRUowQ2RXeE9RSjNvODk5d2FWT3dYb3UrTEtoSERhdWlMOUwrMWs4OVI3dUVQNDhqblQ5eVZKVC9OODBRS01WNmFIZ1grYjYrM2cvSXQzT1BwemZtSHg3VUhEaW43aWFuYmV1c1pyUkZnV005T3VNSHZpbXJmcmpEUmpnQ24xbnVvUGtZeW1EZTZjMG9hNEFwb0NTS1JVNUNUaTRZNUc4L3FxZWR6ZVJ1SHBwck9zcGwrQUYyT243YUdhYU5xOE01WGswYjdzMUNjM2kzOWNMZzZFSHBDc1MrdDBFPSIsInMiOiIxIn0=", "maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "318770d6-9631-4881-97c8-250d6606f569", "record_id": "flaws_cloudtrail:0000600:318770d6-9631-4881-97c8-250d6606f569", "row_index": 600, "timestamp": "2019-07-24T19:01:39Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "211.147.47.10", "user_agent": "aws-cli/1.16.200 Python/3.7.4 Darwin/18.2.0 botocore/1.12.190", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1087, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "318770d6-9631-4881-97c8-250d6606f569", "eventTime": "2019-07-24T19:01:39Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "211.147.47.10", "userAgent": "aws-cli/1.16.200 Python/3.7.4 Darwin/18.2.0 botocore/1.12.190", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"nextToken": "eyJ2IjoiMiIsImMiOiJVRmdGS0tWWmJBbyt3MFM0UTlIQ05xRVRsMmRoZmtBSFBYaWN2QllrVDBYRUtidFpna1RRSmNFZWY2djdrRk8vVzNmYWdidEZSdklMZi90NWNuUm52VWNXNG9SaXZtZ2ZSb25Ydkd1K3ZZOXBjcXBTMExaMkFEVXgrWm1idGJGbER5OW1RNXZWZmtPeXdIRkJ2Y0luUHRqYThIdmc5V0orRjVtWG1VZjZOcEZwZ2FLN2RIaURiU3JWM1F6Q2RhR0pFT0RnN0xTV3NFcVZVMjVjTWI4NEp3PT0iLCJzIjoiMSJ9", "maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "318770d6-9631-4881-97c8-250d6606f569", "record_id": "flaws_cloudtrail:0000601:318770d6-9631-4881-97c8-250d6606f569", "row_index": 601, "timestamp": "2019-07-24T19:01:39Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "211.147.47.10", "user_agent": "aws-cli/1.16.200 Python/3.7.4 Darwin/18.2.0 botocore/1.12.190", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1087, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "318770d6-9631-4881-97c8-250d6606f569", "eventTime": "2019-07-24T19:01:39Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "211.147.47.10", "userAgent": "aws-cli/1.16.200 Python/3.7.4 Darwin/18.2.0 botocore/1.12.190", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"nextToken": "eyJ2IjoiMiIsImMiOiJVRmdGS0tWWmJBbyt3MFM0UTlIQ05xRVRsMmRoZmtBSFBYaWN2QllrVDBYRUtidFpna1RRSmNFZWY2djdrRk8vVzNmYWdidEZSdklMZi90NWNuUm52VWNXNG9SaXZtZ2ZSb25Ydkd1K3ZZOXBjcXBTMExaMkFEVXgrWm1idGJGbER5OW1RNXZWZmtPeXdIRkJ2Y0luUHRqYThIdmc5V0orRjVtWG1VZjZOcEZwZ2FLN2RIaURiU3JWM1F6Q2RhR0pFT0RnN0xTV3NFcVZVMjVjTWI4NEp3PT0iLCJzIjoiMSJ9", "maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "4d139d66-2bfa-44a4-b98f-4d052f199265", "record_id": "flaws_cloudtrail:0000602:4d139d66-2bfa-44a4-b98f-4d052f199265", "row_index": 602, "timestamp": "2019-07-24T19:01:40Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "211.147.47.10", "user_agent": "aws-cli/1.16.200 Python/3.7.4 Darwin/18.2.0 botocore/1.12.190", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1099, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "4d139d66-2bfa-44a4-b98f-4d052f199265", "eventTime": "2019-07-24T19:01:40Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "211.147.47.10", "userAgent": "aws-cli/1.16.200 Python/3.7.4 Darwin/18.2.0 botocore/1.12.190", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"nextToken": "eyJ2IjoiMiIsImMiOiJrVFVBVG5JTUxPbmJtZFBtbnBLMlV2ejJ6L054SXl1aEZqbU5PRDNYYmdWN0RzSUtPQzRrZ20xelhDMVpqeEVDc285UkNhRUxXd2hZL2NjbmJDQ25tbXFMeHNGbHR6T0xtYWVIcFZSZ1owOFkyK0RId3FPSHhTbWhJcUREazJiSVRwbXd5d0ZaeHpubVlNOU1kOXRreUN3ZnZCb1JaT204c1VxaGViQ01xTlZjdVVEaGo5UlF3UkdJWDZyNXRNS1hVK0R6aTQ1ZGZ6RGw1ZWlFUTBqZDNoMmI1clNVWWZRPSIsInMiOiIxIn0=", "maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "4d139d66-2bfa-44a4-b98f-4d052f199265", "record_id": "flaws_cloudtrail:0000603:4d139d66-2bfa-44a4-b98f-4d052f199265", "row_index": 603, "timestamp": "2019-07-24T19:01:40Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "211.147.47.10", "user_agent": "aws-cli/1.16.200 Python/3.7.4 Darwin/18.2.0 botocore/1.12.190", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1099, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "4d139d66-2bfa-44a4-b98f-4d052f199265", "eventTime": "2019-07-24T19:01:40Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "211.147.47.10", "userAgent": "aws-cli/1.16.200 Python/3.7.4 Darwin/18.2.0 botocore/1.12.190", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"nextToken": "eyJ2IjoiMiIsImMiOiJrVFVBVG5JTUxPbmJtZFBtbnBLMlV2ejJ6L054SXl1aEZqbU5PRDNYYmdWN0RzSUtPQzRrZ20xelhDMVpqeEVDc285UkNhRUxXd2hZL2NjbmJDQ25tbXFMeHNGbHR6T0xtYWVIcFZSZ1owOFkyK0RId3FPSHhTbWhJcUREazJiSVRwbXd5d0ZaeHpubVlNOU1kOXRreUN3ZnZCb1JaT204c1VxaGViQ01xTlZjdVVEaGo5UlF3UkdJWDZyNXRNS1hVK0R6aTQ1ZGZ6RGw1ZWlFUTBqZDNoMmI1clNVWWZRPSIsInMiOiIxIn0=", "maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "ae9d6943-dfd1-4d29-a780-18840aa6", "record_id": "flaws_cloudtrail:0000604:ae9d6943-dfd1-4d29-a780-18840aa6", "row_index": 604, "timestamp": "2019-07-24T19:01:43Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "211.147.47.10", "user_agent": "aws-cli/1.16.200 Python/3.7.4 Darwin/18.2.0 botocore/1.12.190", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1050, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "ae9d6943-dfd1-4d29-a780-18840aa6", "eventTime": "2019-07-24T19:01:43Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "211.147.47.10", "userAgent": "aws-cli/1.16.200 Python/3.7.4 Darwin/18.2.0 botocore/1.12.190", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"nextToken": "eyJ2IjoiMiIsImMiOiI5aDhncXlCcnNlMFByVEc5MXRHNlZBcnNOVE5sV3ZJaHJPanZMM0lBdG5wUG5OUmlWK0ZweElZWkxabWZyR2w5RW5qOTBBWThUbXcyOE16Lzg0L1JRZjhDMXlrektienFVclRyc2RZcDk2YWZYNmNQb1AzT2tyMVduKzcveXF1S1laMTZ4M2dXTHdBOWJqdzlzTnFjRnlScEltejlzRzMxV3hyRG9sL0F0YU5DdlpmYmplNEU2cTdSTHJRckd1ND0iLCJzIjoiMSJ9", "maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}