Task: attack_reconstruction (flaws_cloudtrail)
Prompt: An IAM principal appears to confirm who they are, survey the account’s audit-trail configuration, and then take action to reduce CloudTrail visibility. Identify the responsible principal, the applicable MITRE ATT&CK technique, the supporting CloudTrail record_ids for each phase of the chain, and the impacted AWS assets. Return a JSON object matching the AttackReconstructionAnswer schema. Use principal.arn for primary_actor, the MITRE ATT&CK ID (e.g. T1530) for technique, and group the supporting CloudTrail record_ids by attack phase. List the AWS asset identifiers (bucket names, role/user names, trail names, ARNs) the attack acted on as impacted_assets.
Answer schema: attack_reconstruction_answer

CloudTrail records:
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "3fcf21db-0487-499d-911a-87c34540d61e", "record_id": "flaws_cloudtrail:0000000:3fcf21db-0487-499d-911a-87c34540d61e", "row_index": 0, "timestamp": "2017-05-27T04:45:14Z", "event_type": "ListCertificates", "event_source": "acm.amazonaws.com", "principal": {"type": "AssumedRole", "arn": "arn:aws:sts::811596193553:assumed-role/SecurityMonkey/secmonkey", "account_id": "811596193553", "principal_id": "AROAUB2AA5FQRGAHITW4A:secmonkey", "user_name": null, "access_key_id": "ASIAGLVGLCZJ7VJNBP1G", "session_issuer_arn": "arn:aws:iam::811596193553:role/SecurityMonkey", "session_issuer_user_name": "SecurityMonkey"}, "network": {"source_ip": "255.253.125.115", "user_agent": "Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56", "aws_region": "us-west-1"}, "resource_arns": [], "raw_record_size_bytes": 970, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "3fcf21db-0487-499d-911a-87c34540d61e", "eventTime": "2017-05-27T04:45:14Z", "eventName": "ListCertificates", "eventSource": "acm.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.253.125.115", "userAgent": "Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56", "awsRegion": "us-west-1", "userIdentity": {"type": "AssumedRole", "principalId": "AROAUB2AA5FQRGAHITW4A:secmonkey", "arn": "arn:aws:sts::811596193553:assumed-role/SecurityMonkey/secmonkey", "accountId": "811596193553", "accessKeyId": "ASIAGLVGLCZJ7VJNBP1G", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2017-05-27T04:45:14Z"}, "sessionIssuer": {"type": "Role", "principalId": "AROAUB2AA5FQRGAHITW4A", "arn": "arn:aws:iam::811596193553:role/SecurityMonkey", "accountId": "811596193553", "userName": "SecurityMonkey"}}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "fa650fa5-8f1c-45fd-995b-0f6a9ee4bede", "record_id": "flaws_cloudtrail:0000001:fa650fa5-8f1c-45fd-995b-0f6a9ee4bede", "row_index": 1, "timestamp": "2017-05-27T04:45:15Z", "event_type": "GetBucketLocation", "event_source": "s3.amazonaws.com", "principal": {"type": "AssumedRole", "arn": "arn:aws:sts::811596193553:assumed-role/SecurityMonkey/cloudaux", "account_id": "811596193553", "principal_id": "AROAUB2AA5FQRGAHITW4A:cloudaux", "user_name": null, "access_key_id": "ASIAWWGE8SBRJDRN2KLG", "session_issuer_arn": "arn:aws:iam::811596193553:role/SecurityMonkey", "session_issuer_user_name": "SecurityMonkey"}, "network": {"source_ip": "255.253.125.115", "user_agent": "[Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56]", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 1032, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "fa650fa5-8f1c-45fd-995b-0f6a9ee4bede", "eventTime": "2017-05-27T04:45:15Z", "eventName": "GetBucketLocation", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.253.125.115", "userAgent": "[Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56]", "awsRegion": "us-east-1", "userIdentity": {"type": "AssumedRole", "principalId": "AROAUB2AA5FQRGAHITW4A:cloudaux", "arn": "arn:aws:sts::811596193553:assumed-role/SecurityMonkey/cloudaux", "accountId": "811596193553", "accessKeyId": "ASIAWWGE8SBRJDRN2KLG", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2017-05-27T04:15:23Z"}, "sessionIssuer": {"type": "Role", "principalId": "AROAUB2AA5FQRGAHITW4A", "arn": "arn:aws:iam::811596193553:role/SecurityMonkey", "accountId": "811596193553", "userName": "SecurityMonkey"}}}, "requestParameters": {"bucketName": "b5677c799b465420d8e7b0a6689a0bb0c4afbc9e.flaws.cloud", "location": [""]}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "dc797c4f-fe97-49de-8e16-81db699a90bd", "record_id": "flaws_cloudtrail:0000002:dc797c4f-fe97-49de-8e16-81db699a90bd", "row_index": 2, "timestamp": "2017-05-27T04:45:15Z", "event_type": "ListBuckets", "event_source": "s3.amazonaws.com", "principal": {"type": "AssumedRole", "arn": "arn:aws:sts::811596193553:assumed-role/SecurityMonkey/cloudaux", "account_id": "811596193553", "principal_id": "AROAUB2AA5FQRGAHITW4A:cloudaux", "user_name": null, "access_key_id": "ASIAWWGE8SBRJDRN2KLG", "session_issuer_arn": "arn:aws:iam::811596193553:role/SecurityMonkey", "session_issuer_user_name": "SecurityMonkey"}, "network": {"source_ip": "255.253.125.115", "user_agent": "[Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56]", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 946, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "dc797c4f-fe97-49de-8e16-81db699a90bd", "eventTime": "2017-05-27T04:45:15Z", "eventName": "ListBuckets", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.253.125.115", "userAgent": "[Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56]", "awsRegion": "us-east-1", "userIdentity": {"type": "AssumedRole", "principalId": "AROAUB2AA5FQRGAHITW4A:cloudaux", "arn": "arn:aws:sts::811596193553:assumed-role/SecurityMonkey/cloudaux", "accountId": "811596193553", "accessKeyId": "ASIAWWGE8SBRJDRN2KLG", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2017-05-27T04:15:23Z"}, "sessionIssuer": {"type": "Role", "principalId": "AROAUB2AA5FQRGAHITW4A", "arn": "arn:aws:iam::811596193553:role/SecurityMonkey", "accountId": "811596193553", "userName": "SecurityMonkey"}}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "f56f05e1-e61d-45ec-aecf-d093a2398ca4", "record_id": "flaws_cloudtrail:0000003:f56f05e1-e61d-45ec-aecf-d093a2398ca4", "row_index": 3, "timestamp": "2017-05-27T04:45:15Z", "event_type": "AssumeRole", "event_source": "sts.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/SecurityMokey", "account_id": "811596193553", "principal_id": "AIDAQ9SRE1SZZZ4Q4UOJH", "user_name": "SecurityMokey", "access_key_id": "AKIAXJ0III4JBKZDXGXN", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "255.253.125.115", "user_agent": "Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56", "aws_region": "us-east-1"}, "resource_arns": ["arn:aws:iam::811596193553:role/SecurityMonkey"], "raw_record_size_bytes": 1453, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "resources", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "f56f05e1-e61d-45ec-aecf-d093a2398ca4", "eventTime": "2017-05-27T04:45:15Z", "eventName": "AssumeRole", "eventSource": "sts.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.253.125.115", "userAgent": "Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDAQ9SRE1SZZZ4Q4UOJH", "arn": "arn:aws:iam::811596193553:user/SecurityMokey", "accountId": "811596193553", "accessKeyId": "AKIAXJ0III4JBKZDXGXN", "userName": "SecurityMokey"}, "requestParameters": {"roleArn": "arn:aws:iam::811596193553:role/SecurityMonkey", "roleSessionName": "secmonkey"}, "responseElements": {"credentials": {"accessKeyId": "ASIAO2M8JH3DS9CFLRO3", "expiration": "May 27, 2017 5:45:15 AM", "sessionToken": "FQoDYXdzECYaDAWxSbnQThY8PmQLxiLMASGWNHlJdW2+f+DIfqFwrmlAy0TkLDnHHlDeB7Sy44JCFa2LG5qyS1W7XjAx+kS3hXk3jDRFSkZ9ICqMU9uz+Xh3O4ffqcFpLDZ3DRmkG1VpfC49TDGIN7laYEE2gcDdzJcJVugShasZ5CdEEjOMqZaMsJz5KVEAgrnUGPXssGfAQBJK0tbzLPeK/YzfR9hvGcWNahT3yehJ7xaHdkv3EeuKYEmaixlgcBW/nkVexqheKfDGw1QLfsr7cMPeyn0Ae895oBKWqIO+aH+viijbiKTJBQ=="}, "assumedRoleUser": {"assumedRoleId": "AROAUB2AA5FQRGAHITW4A:secmonkey", "arn": "arn:aws:sts::811596193553:assumed-role/SecurityMonkey/secmonkey"}}, "resources": [{"ARN": "arn:aws:iam::811596193553:role/SecurityMonkey", "accountId": "811596193553", "type": "AWS::IAM::Role"}]}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "8ae21c42-e796-4ba8-bb37-657d154ef7dc", "record_id": "flaws_cloudtrail:0000004:8ae21c42-e796-4ba8-bb37-657d154ef7dc", "row_index": 4, "timestamp": "2017-05-27T04:45:15Z", "event_type": "ListCertificates", "event_source": "acm.amazonaws.com", "principal": {"type": "AssumedRole", "arn": "arn:aws:sts::811596193553:assumed-role/SecurityMonkey/secmonkey", "account_id": "811596193553", "principal_id": "AROAUB2AA5FQRGAHITW4A:secmonkey", "user_name": null, "access_key_id": "ASIAO2M8JH3DS9CFLRO3", "session_issuer_arn": "arn:aws:iam::811596193553:role/SecurityMonkey", "session_issuer_user_name": "SecurityMonkey"}, "network": {"source_ip": "255.253.125.115", "user_agent": "Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 972, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "8ae21c42-e796-4ba8-bb37-657d154ef7dc", "eventTime": "2017-05-27T04:45:15Z", "eventName": "ListCertificates", "eventSource": "acm.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.253.125.115", "userAgent": "Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56", "awsRegion": "us-west-2", "userIdentity": {"type": "AssumedRole", "principalId": "AROAUB2AA5FQRGAHITW4A:secmonkey", "arn": "arn:aws:sts::811596193553:assumed-role/SecurityMonkey/secmonkey", "accountId": "811596193553", "accessKeyId": "ASIAO2M8JH3DS9CFLRO3", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2017-05-27T04:45:15Z"}, "sessionIssuer": {"type": "Role", "principalId": "AROAUB2AA5FQRGAHITW4A", "arn": "arn:aws:iam::811596193553:role/SecurityMonkey", "accountId": "811596193553", "userName": "SecurityMonkey"}}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "95d6a89e-dc89-42f5-87ab-de5c901bdd8a", "record_id": "flaws_cloudtrail:0000005:95d6a89e-dc89-42f5-87ab-de5c901bdd8a", "row_index": 5, "timestamp": "2017-05-27T04:45:16Z", "event_type": "GetBucketCors", "event_source": "s3.amazonaws.com", "principal": {"type": "AssumedRole", "arn": "arn:aws:sts::811596193553:assumed-role/SecurityMonkey/cloudaux", "account_id": "811596193553", "principal_id": "AROAUB2AA5FQRGAHITW4A:cloudaux", "user_name": null, "access_key_id": "ASIA1FZDVOXSQD6GDJFL", "session_issuer_arn": "arn:aws:iam::811596193553:role/SecurityMonkey", "session_issuer_user_name": "SecurityMonkey"}, "network": {"source_ip": "255.253.125.115", "user_agent": "[Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56]", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1117, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "95d6a89e-dc89-42f5-87ab-de5c901bdd8a", "eventTime": "2017-05-27T04:45:16Z", "eventName": "GetBucketCors", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.253.125.115", "userAgent": "[Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56]", "awsRegion": "us-west-2", "errorCode": "NoSuchCORSConfiguration", "errorMessage": "The CORS configuration does not exist", "userIdentity": {"type": "AssumedRole", "principalId": "AROAUB2AA5FQRGAHITW4A:cloudaux", "arn": "arn:aws:sts::811596193553:assumed-role/SecurityMonkey/cloudaux", "accountId": "811596193553", "accessKeyId": "ASIA1FZDVOXSQD6GDJFL", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2017-05-27T04:15:19Z"}, "sessionIssuer": {"type": "Role", "principalId": "AROAUB2AA5FQRGAHITW4A", "arn": "arn:aws:iam::811596193553:role/SecurityMonkey", "accountId": "811596193553", "userName": "SecurityMonkey"}}}, "requestParameters": {"bucketName": "b5677c799b465420d8e7b0a6689a0bb0c4afbc9e.flaws.cloud", "cors": [""]}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "17d6606a-212d-44a2-a8f2-010dea2a873a", "record_id": "flaws_cloudtrail:0000006:17d6606a-212d-44a2-a8f2-010dea2a873a", "row_index": 6, "timestamp": "2017-05-27T04:45:16Z", "event_type": "GetBucketNotification", "event_source": "s3.amazonaws.com", "principal": {"type": "AssumedRole", "arn": "arn:aws:sts::811596193553:assumed-role/SecurityMonkey/cloudaux", "account_id": "811596193553", "principal_id": "AROAUB2AA5FQRGAHITW4A:cloudaux", "user_name": null, "access_key_id": "ASIA1FZDVOXSQD6GDJFL", "session_issuer_arn": "arn:aws:iam::811596193553:role/SecurityMonkey", "session_issuer_user_name": "SecurityMonkey"}, "network": {"source_ip": "255.253.125.115", "user_agent": "[Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56]", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1041, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "17d6606a-212d-44a2-a8f2-010dea2a873a", "eventTime": "2017-05-27T04:45:16Z", "eventName": "GetBucketNotification", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.253.125.115", "userAgent": "[Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56]", "awsRegion": "us-west-2", "userIdentity": {"type": "AssumedRole", "principalId": "AROAUB2AA5FQRGAHITW4A:cloudaux", "arn": "arn:aws:sts::811596193553:assumed-role/SecurityMonkey/cloudaux", "accountId": "811596193553", "accessKeyId": "ASIA1FZDVOXSQD6GDJFL", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2017-05-27T04:15:19Z"}, "sessionIssuer": {"type": "Role", "principalId": "AROAUB2AA5FQRGAHITW4A", "arn": "arn:aws:iam::811596193553:role/SecurityMonkey", "accountId": "811596193553", "userName": "SecurityMonkey"}}}, "requestParameters": {"notification": [""], "bucketName": "b5677c799b465420d8e7b0a6689a0bb0c4afbc9e.flaws.cloud"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "306a56e2-e30f-4a78-8549-4229acf39d9a", "record_id": "flaws_cloudtrail:0000007:306a56e2-e30f-4a78-8549-4229acf39d9a", "row_index": 7, "timestamp": "2017-05-27T04:45:16Z", "event_type": "GetBucketReplication", "event_source": "s3.amazonaws.com", "principal": {"type": "AssumedRole", "arn": "arn:aws:sts::811596193553:assumed-role/SecurityMonkey/cloudaux", "account_id": "811596193553", "principal_id": "AROAUB2AA5FQRGAHITW4A:cloudaux", "user_name": null, "access_key_id": "ASIA1FZDVOXSQD6GDJFL", "session_issuer_arn": "arn:aws:iam::811596193553:role/SecurityMonkey", "session_issuer_user_name": "SecurityMonkey"}, "network": {"source_ip": "255.253.125.115", "user_agent": "[Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56]", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1152, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "306a56e2-e30f-4a78-8549-4229acf39d9a", "eventTime": "2017-05-27T04:45:16Z", "eventName": "GetBucketReplication", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.253.125.115", "userAgent": "[Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56]", "awsRegion": "us-west-2", "errorCode": "ReplicationConfigurationNotFoundError", "errorMessage": "The replication configuration was not found", "userIdentity": {"type": "AssumedRole", "principalId": "AROAUB2AA5FQRGAHITW4A:cloudaux", "arn": "arn:aws:sts::811596193553:assumed-role/SecurityMonkey/cloudaux", "accountId": "811596193553", "accessKeyId": "ASIA1FZDVOXSQD6GDJFL", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2017-05-27T04:15:19Z"}, "sessionIssuer": {"type": "Role", "principalId": "AROAUB2AA5FQRGAHITW4A", "arn": "arn:aws:iam::811596193553:role/SecurityMonkey", "accountId": "811596193553", "userName": "SecurityMonkey"}}}, "requestParameters": {"replication": [""], "bucketName": "b5677c799b465420d8e7b0a6689a0bb0c4afbc9e.flaws.cloud"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "1830a34f-b3e7-457a-ac7b-8f50914c097d", "record_id": "flaws_cloudtrail:0000008:1830a34f-b3e7-457a-ac7b-8f50914c097d", "row_index": 8, "timestamp": "2017-05-27T04:45:16Z", "event_type": "GetBucketTagging", "event_source": "s3.amazonaws.com", "principal": {"type": "AssumedRole", "arn": "arn:aws:sts::811596193553:assumed-role/SecurityMonkey/cloudaux", "account_id": "811596193553", "principal_id": "AROAUB2AA5FQRGAHITW4A:cloudaux", "user_name": null, "access_key_id": "ASIA1FZDVOXSQD6GDJFL", "session_issuer_arn": "arn:aws:iam::811596193553:role/SecurityMonkey", "session_issuer_user_name": "SecurityMonkey"}, "network": {"source_ip": "255.253.125.115", "user_agent": "[Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56]", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1101, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "1830a34f-b3e7-457a-ac7b-8f50914c097d", "eventTime": "2017-05-27T04:45:16Z", "eventName": "GetBucketTagging", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.253.125.115", "userAgent": "[Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56]", "awsRegion": "us-west-2", "errorCode": "NoSuchTagSet", "errorMessage": "The TagSet does not exist", "userIdentity": {"type": "AssumedRole", "principalId": "AROAUB2AA5FQRGAHITW4A:cloudaux", "arn": "arn:aws:sts::811596193553:assumed-role/SecurityMonkey/cloudaux", "accountId": "811596193553", "accessKeyId": "ASIA1FZDVOXSQD6GDJFL", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2017-05-27T04:15:19Z"}, "sessionIssuer": {"type": "Role", "principalId": "AROAUB2AA5FQRGAHITW4A", "arn": "arn:aws:iam::811596193553:role/SecurityMonkey", "accountId": "811596193553", "userName": "SecurityMonkey"}}}, "requestParameters": {"tagging": [""], "bucketName": "b5677c799b465420d8e7b0a6689a0bb0c4afbc9e.flaws.cloud"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "cd6f3225-3677-428a-9e7c-8c7f40ea2466", "record_id": "flaws_cloudtrail:0000009:cd6f3225-3677-428a-9e7c-8c7f40ea2466", "row_index": 9, "timestamp": "2017-05-27T04:45:16Z", "event_type": "GetBucketWebsite", "event_source": "s3.amazonaws.com", "principal": {"type": "AssumedRole", "arn": "arn:aws:sts::811596193553:assumed-role/SecurityMonkey/cloudaux", "account_id": "811596193553", "principal_id": "AROAUB2AA5FQRGAHITW4A:cloudaux", "user_name": null, "access_key_id": "ASIA1FZDVOXSQD6GDJFL", "session_issuer_arn": "arn:aws:iam::811596193553:role/SecurityMonkey", "session_issuer_user_name": "SecurityMonkey"}, "network": {"source_ip": "255.253.125.115", "user_agent": "[Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56]", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1031, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "cd6f3225-3677-428a-9e7c-8c7f40ea2466", "eventTime": "2017-05-27T04:45:16Z", "eventName": "GetBucketWebsite", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.253.125.115", "userAgent": "[Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56]", "awsRegion": "us-west-2", "userIdentity": {"type": "AssumedRole", "principalId": "AROAUB2AA5FQRGAHITW4A:cloudaux", "arn": "arn:aws:sts::811596193553:assumed-role/SecurityMonkey/cloudaux", "accountId": "811596193553", "accessKeyId": "ASIA1FZDVOXSQD6GDJFL", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2017-05-27T04:15:19Z"}, "sessionIssuer": {"type": "Role", "principalId": "AROAUB2AA5FQRGAHITW4A", "arn": "arn:aws:iam::811596193553:role/SecurityMonkey", "accountId": "811596193553", "userName": "SecurityMonkey"}}}, "requestParameters": {"bucketName": "b5677c799b465420d8e7b0a6689a0bb0c4afbc9e.flaws.cloud", "website": [""]}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "9a9babcf-b84d-443c-bdbd-00a4a235d999", "record_id": "flaws_cloudtrail:0000010:9a9babcf-b84d-443c-bdbd-00a4a235d999", "row_index": 10, "timestamp": "2017-05-27T04:45:16Z", "event_type": "GetBucketLogging", "event_source": "s3.amazonaws.com", "principal": {"type": "AssumedRole", "arn": "arn:aws:sts::811596193553:assumed-role/SecurityMonkey/cloudaux", "account_id": "811596193553", "principal_id": "AROAUB2AA5FQRGAHITW4A:cloudaux", "user_name": null, "access_key_id": "ASIA1FZDVOXSQD6GDJFL", "session_issuer_arn": "arn:aws:iam::811596193553:role/SecurityMonkey", "session_issuer_user_name": "SecurityMonkey"}, "network": {"source_ip": "255.253.125.115", "user_agent": "[Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56]", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1031, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "9a9babcf-b84d-443c-bdbd-00a4a235d999", "eventTime": "2017-05-27T04:45:16Z", "eventName": "GetBucketLogging", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.253.125.115", "userAgent": "[Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56]", "awsRegion": "us-west-2", "userIdentity": {"type": "AssumedRole", "principalId": "AROAUB2AA5FQRGAHITW4A:cloudaux", "arn": "arn:aws:sts::811596193553:assumed-role/SecurityMonkey/cloudaux", "accountId": "811596193553", "accessKeyId": "ASIA1FZDVOXSQD6GDJFL", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2017-05-27T04:15:19Z"}, "sessionIssuer": {"type": "Role", "principalId": "AROAUB2AA5FQRGAHITW4A", "arn": "arn:aws:iam::811596193553:role/SecurityMonkey", "accountId": "811596193553", "userName": "SecurityMonkey"}}}, "requestParameters": {"logging": [""], "bucketName": "b5677c799b465420d8e7b0a6689a0bb0c4afbc9e.flaws.cloud"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "34e44491-fb59-4108-b7cb-5f94f2eb75f8", "record_id": "flaws_cloudtrail:0000011:34e44491-fb59-4108-b7cb-5f94f2eb75f8", "row_index": 11, "timestamp": "2017-05-27T04:45:16Z", "event_type": "GetBucketPolicy", "event_source": "s3.amazonaws.com", "principal": {"type": "AssumedRole", "arn": "arn:aws:sts::811596193553:assumed-role/SecurityMonkey/cloudaux", "account_id": "811596193553", "principal_id": "AROAUB2AA5FQRGAHITW4A:cloudaux", "user_name": null, "access_key_id": "ASIA1FZDVOXSQD6GDJFL", "session_issuer_arn": "arn:aws:iam::811596193553:role/SecurityMonkey", "session_issuer_user_name": "SecurityMonkey"}, "network": {"source_ip": "255.253.125.115", "user_agent": "[Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56]", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1029, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "34e44491-fb59-4108-b7cb-5f94f2eb75f8", "eventTime": "2017-05-27T04:45:16Z", "eventName": "GetBucketPolicy", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.253.125.115", "userAgent": "[Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56]", "awsRegion": "us-west-2", "userIdentity": {"type": "AssumedRole", "principalId": "AROAUB2AA5FQRGAHITW4A:cloudaux", "arn": "arn:aws:sts::811596193553:assumed-role/SecurityMonkey/cloudaux", "accountId": "811596193553", "accessKeyId": "ASIA1FZDVOXSQD6GDJFL", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2017-05-27T04:15:19Z"}, "sessionIssuer": {"type": "Role", "principalId": "AROAUB2AA5FQRGAHITW4A", "arn": "arn:aws:iam::811596193553:role/SecurityMonkey", "accountId": "811596193553", "userName": "SecurityMonkey"}}}, "requestParameters": {"bucketName": "b5677c799b465420d8e7b0a6689a0bb0c4afbc9e.flaws.cloud", "policy": [""]}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "4d9c918c-6125-455a-87d0-90acd0b36a1d", "record_id": "flaws_cloudtrail:0000012:4d9c918c-6125-455a-87d0-90acd0b36a1d", "row_index": 12, "timestamp": "2017-05-27T04:45:17Z", "event_type": "GetBucketLocation", "event_source": "s3.amazonaws.com", "principal": {"type": "AssumedRole", "arn": "arn:aws:sts::811596193553:assumed-role/SecurityMonkey/cloudaux", "account_id": "811596193553", "principal_id": "AROAUB2AA5FQRGAHITW4A:cloudaux", "user_name": null, "access_key_id": "ASIAWWGE8SBRJDRN2KLG", "session_issuer_arn": "arn:aws:iam::811596193553:role/SecurityMonkey", "session_issuer_user_name": "SecurityMonkey"}, "network": {"source_ip": "255.253.125.115", "user_agent": "[Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56]", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 991, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "4d9c918c-6125-455a-87d0-90acd0b36a1d", "eventTime": "2017-05-27T04:45:17Z", "eventName": "GetBucketLocation", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.253.125.115", "userAgent": "[Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56]", "awsRegion": "us-east-1", "userIdentity": {"type": "AssumedRole", "principalId": "AROAUB2AA5FQRGAHITW4A:cloudaux", "arn": "arn:aws:sts::811596193553:assumed-role/SecurityMonkey/cloudaux", "accountId": "811596193553", "accessKeyId": "ASIAWWGE8SBRJDRN2KLG", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2017-05-27T04:15:23Z"}, "sessionIssuer": {"type": "Role", "principalId": "AROAUB2AA5FQRGAHITW4A", "arn": "arn:aws:iam::811596193553:role/SecurityMonkey", "accountId": "811596193553", "userName": "SecurityMonkey"}}}, "requestParameters": {"bucketName": "flaws-logs", "location": [""]}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "1229fd32-b5a0-4c01-96ca-4d75866e1f95", "record_id": "flaws_cloudtrail:0000013:1229fd32-b5a0-4c01-96ca-4d75866e1f95", "row_index": 13, "timestamp": "2017-05-27T04:45:17Z", "event_type": "GetBucketLogging", "event_source": "s3.amazonaws.com", "principal": {"type": "AssumedRole", "arn": "arn:aws:sts::811596193553:assumed-role/SecurityMonkey/cloudaux", "account_id": "811596193553", "principal_id": "AROAUB2AA5FQRGAHITW4A:cloudaux", "user_name": null, "access_key_id": "ASIA1FZDVOXSQD6GDJFL", "session_issuer_arn": "arn:aws:iam::811596193553:role/SecurityMonkey", "session_issuer_user_name": "SecurityMonkey"}, "network": {"source_ip": "255.253.125.115", "user_agent": "[Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56]", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 989, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "1229fd32-b5a0-4c01-96ca-4d75866e1f95", "eventTime": "2017-05-27T04:45:17Z", "eventName": "GetBucketLogging", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.253.125.115", "userAgent": "[Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56]", "awsRegion": "us-west-2", "userIdentity": {"type": "AssumedRole", "principalId": "AROAUB2AA5FQRGAHITW4A:cloudaux", "arn": "arn:aws:sts::811596193553:assumed-role/SecurityMonkey/cloudaux", "accountId": "811596193553", "accessKeyId": "ASIA1FZDVOXSQD6GDJFL", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2017-05-27T04:15:19Z"}, "sessionIssuer": {"type": "Role", "principalId": "AROAUB2AA5FQRGAHITW4A", "arn": "arn:aws:iam::811596193553:role/SecurityMonkey", "accountId": "811596193553", "userName": "SecurityMonkey"}}}, "requestParameters": {"logging": [""], "bucketName": "flaws-logs"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "dd327902e-c163-482f-9f54-a19642f5691", "record_id": "flaws_cloudtrail:0000014:dd327902e-c163-482f-9f54-a19642f5691", "row_index": 14, "timestamp": "2017-05-27T04:45:17Z", "event_type": "GetBucketReplication", "event_source": "s3.amazonaws.com", "principal": {"type": "AssumedRole", "arn": "arn:aws:sts::811596193553:assumed-role/SecurityMonkey/cloudaux", "account_id": "811596193553", "principal_id": "AROAUB2AA5FQRGAHITW4A:cloudaux", "user_name": null, "access_key_id": "ASIA1FZDVOXSQD6GDJFL", "session_issuer_arn": "arn:aws:iam::811596193553:role/SecurityMonkey", "session_issuer_user_name": "SecurityMonkey"}, "network": {"source_ip": "255.253.125.115", "user_agent": "[Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56]", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1108, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "dd327902e-c163-482f-9f54-a19642f5691", "eventTime": "2017-05-27T04:45:17Z", "eventName": "GetBucketReplication", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.253.125.115", "userAgent": "[Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56]", "awsRegion": "us-west-2", "errorCode": "ReplicationConfigurationNotFoundError", "errorMessage": "The replication configuration was not found", "userIdentity": {"type": "AssumedRole", "principalId": "AROAUB2AA5FQRGAHITW4A:cloudaux", "arn": "arn:aws:sts::811596193553:assumed-role/SecurityMonkey/cloudaux", "accountId": "811596193553", "accessKeyId": "ASIA1FZDVOXSQD6GDJFL", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2017-05-27T04:15:19Z"}, "sessionIssuer": {"type": "Role", "principalId": "AROAUB2AA5FQRGAHITW4A", "arn": "arn:aws:iam::811596193553:role/SecurityMonkey", "accountId": "811596193553", "userName": "SecurityMonkey"}}}, "requestParameters": {"replication": [""], "bucketName": "flaws-logs"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "03dc4229-6352-4923-99e3-da5feca2fce5", "record_id": "flaws_cloudtrail:0000015:03dc4229-6352-4923-99e3-da5feca2fce5", "row_index": 15, "timestamp": "2017-05-27T04:45:17Z", "event_type": "GetBucketCors", "event_source": "s3.amazonaws.com", "principal": {"type": "AssumedRole", "arn": "arn:aws:sts::811596193553:assumed-role/SecurityMonkey/cloudaux", "account_id": "811596193553", "principal_id": "AROAUB2AA5FQRGAHITW4A:cloudaux", "user_name": null, "access_key_id": "ASIA1FZDVOXSQD6GDJFL", "session_issuer_arn": "arn:aws:iam::811596193553:role/SecurityMonkey", "session_issuer_user_name": "SecurityMonkey"}, "network": {"source_ip": "255.253.125.115", "user_agent": "[Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56]", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1071, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "03dc4229-6352-4923-99e3-da5feca2fce5", "eventTime": "2017-05-27T04:45:17Z", "eventName": "GetBucketCors", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.253.125.115", "userAgent": "[Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56]", "awsRegion": "us-west-2", "errorCode": "NoSuchCORSConfiguration", "errorMessage": "The CORS configuration does not exist", "userIdentity": {"type": "AssumedRole", "principalId": "AROAUB2AA5FQRGAHITW4A:cloudaux", "arn": "arn:aws:sts::811596193553:assumed-role/SecurityMonkey/cloudaux", "accountId": "811596193553", "accessKeyId": "ASIA1FZDVOXSQD6GDJFL", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2017-05-27T04:15:19Z"}, "sessionIssuer": {"type": "Role", "principalId": "AROAUB2AA5FQRGAHITW4A", "arn": "arn:aws:iam::811596193553:role/SecurityMonkey", "accountId": "811596193553", "userName": "SecurityMonkey"}}}, "requestParameters": {"bucketName": "flaws-logs", "cors": [""]}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "b558cfe2-f3e7-4123-90c0-303037c6c2af8", "record_id": "flaws_cloudtrail:0000016:b558cfe2-f3e7-4123-90c0-303037c6c2af8", "row_index": 16, "timestamp": "2017-05-27T04:45:17Z", "event_type": "GetBucketPolicy", "event_source": "s3.amazonaws.com", "principal": {"type": "AssumedRole", "arn": "arn:aws:sts::811596193553:assumed-role/SecurityMonkey/cloudaux", "account_id": "811596193553", "principal_id": "AROAUB2AA5FQRGAHITW4A:cloudaux", "user_name": null, "access_key_id": "ASIA1FZDVOXSQD6GDJFL", "session_issuer_arn": "arn:aws:iam::811596193553:role/SecurityMonkey", "session_issuer_user_name": "SecurityMonkey"}, "network": {"source_ip": "255.253.125.115", "user_agent": "[Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56]", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 988, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "b558cfe2-f3e7-4123-90c0-303037c6c2af8", "eventTime": "2017-05-27T04:45:17Z", "eventName": "GetBucketPolicy", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.253.125.115", "userAgent": "[Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56]", "awsRegion": "us-west-2", "userIdentity": {"type": "AssumedRole", "principalId": "AROAUB2AA5FQRGAHITW4A:cloudaux", "arn": "arn:aws:sts::811596193553:assumed-role/SecurityMonkey/cloudaux", "accountId": "811596193553", "accessKeyId": "ASIA1FZDVOXSQD6GDJFL", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2017-05-27T04:15:19Z"}, "sessionIssuer": {"type": "Role", "principalId": "AROAUB2AA5FQRGAHITW4A", "arn": "arn:aws:iam::811596193553:role/SecurityMonkey", "accountId": "811596193553", "userName": "SecurityMonkey"}}}, "requestParameters": {"bucketName": "flaws-logs", "policy": [""]}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "7bbd337c-b549-43b7-9829-ce77132ebca0", "record_id": "flaws_cloudtrail:0000017:7bbd337c-b549-43b7-9829-ce77132ebca0", "row_index": 17, "timestamp": "2017-05-27T04:45:17Z", "event_type": "GetBucketVersioning", "event_source": "s3.amazonaws.com", "principal": {"type": "AssumedRole", "arn": "arn:aws:sts::811596193553:assumed-role/SecurityMonkey/cloudaux", "account_id": "811596193553", "principal_id": "AROAUB2AA5FQRGAHITW4A:cloudaux", "user_name": null, "access_key_id": "ASIA1FZDVOXSQD6GDJFL", "session_issuer_arn": "arn:aws:iam::811596193553:role/SecurityMonkey", "session_issuer_user_name": "SecurityMonkey"}, "network": {"source_ip": "255.253.125.115", "user_agent": "[Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56]", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1037, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "7bbd337c-b549-43b7-9829-ce77132ebca0", "eventTime": "2017-05-27T04:45:17Z", "eventName": "GetBucketVersioning", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.253.125.115", "userAgent": "[Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56]", "awsRegion": "us-west-2", "userIdentity": {"type": "AssumedRole", "principalId": "AROAUB2AA5FQRGAHITW4A:cloudaux", "arn": "arn:aws:sts::811596193553:assumed-role/SecurityMonkey/cloudaux", "accountId": "811596193553", "accessKeyId": "ASIA1FZDVOXSQD6GDJFL", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2017-05-27T04:15:19Z"}, "sessionIssuer": {"type": "Role", "principalId": "AROAUB2AA5FQRGAHITW4A", "arn": "arn:aws:iam::811596193553:role/SecurityMonkey", "accountId": "811596193553", "userName": "SecurityMonkey"}}}, "requestParameters": {"bucketName": "b5677c799b465420d8e7b0a6689a0bb0c4afbc9e.flaws.cloud", "versioning": [""]}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "a9cc17a2-5b8a-45ed-a9b1-425436e6ad", "record_id": "flaws_cloudtrail:0000018:a9cc17a2-5b8a-45ed-a9b1-425436e6ad", "row_index": 18, "timestamp": "2017-05-27T04:45:17Z", "event_type": "GetBucketLifecycle", "event_source": "s3.amazonaws.com", "principal": {"type": "AssumedRole", "arn": "arn:aws:sts::811596193553:assumed-role/SecurityMonkey/cloudaux", "account_id": "811596193553", "principal_id": "AROAUB2AA5FQRGAHITW4A:cloudaux", "user_name": null, "access_key_id": "ASIA1FZDVOXSQD6GDJFL", "session_issuer_arn": "arn:aws:iam::811596193553:role/SecurityMonkey", "session_issuer_user_name": "SecurityMonkey"}, "network": {"source_ip": "255.253.125.115", "user_agent": "[Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56]", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1136, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "a9cc17a2-5b8a-45ed-a9b1-425436e6ad", "eventTime": "2017-05-27T04:45:17Z", "eventName": "GetBucketLifecycle", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.253.125.115", "userAgent": "[Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56]", "awsRegion": "us-west-2", "errorCode": "NoSuchLifecycleConfiguration", "errorMessage": "The lifecycle configuration does not exist", "userIdentity": {"type": "AssumedRole", "principalId": "AROAUB2AA5FQRGAHITW4A:cloudaux", "arn": "arn:aws:sts::811596193553:assumed-role/SecurityMonkey/cloudaux", "accountId": "811596193553", "accessKeyId": "ASIA1FZDVOXSQD6GDJFL", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2017-05-27T04:15:19Z"}, "sessionIssuer": {"type": "Role", "principalId": "AROAUB2AA5FQRGAHITW4A", "arn": "arn:aws:iam::811596193553:role/SecurityMonkey", "accountId": "811596193553", "userName": "SecurityMonkey"}}}, "requestParameters": {"lifecycle": [""], "bucketName": "b5677c799b465420d8e7b0a6689a0bb0c4afbc9e.flaws.cloud"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "22b70aaa-5105-402d-bf5b-b1a58ac8db15", "record_id": "flaws_cloudtrail:0000019:22b70aaa-5105-402d-bf5b-b1a58ac8db15", "row_index": 19, "timestamp": "2017-05-27T04:45:17Z", "event_type": "GetBucketAcl", "event_source": "s3.amazonaws.com", "principal": {"type": "AssumedRole", "arn": "arn:aws:sts::811596193553:assumed-role/SecurityMonkey/cloudaux", "account_id": "811596193553", "principal_id": "AROAUB2AA5FQRGAHITW4A:cloudaux", "user_name": null, "access_key_id": "ASIA1FZDVOXSQD6GDJFL", "session_issuer_arn": "arn:aws:iam::811596193553:role/SecurityMonkey", "session_issuer_user_name": "SecurityMonkey"}, "network": {"source_ip": "255.253.125.115", "user_agent": "[Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56]", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1022, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "22b70aaa-5105-402d-bf5b-b1a58ac8db15", "eventTime": "2017-05-27T04:45:17Z", "eventName": "GetBucketAcl", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.253.125.115", "userAgent": "[Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56]", "awsRegion": "us-west-2", "userIdentity": {"type": "AssumedRole", "principalId": "AROAUB2AA5FQRGAHITW4A:cloudaux", "arn": "arn:aws:sts::811596193553:assumed-role/SecurityMonkey/cloudaux", "accountId": "811596193553", "accessKeyId": "ASIA1FZDVOXSQD6GDJFL", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2017-05-27T04:15:19Z"}, "sessionIssuer": {"type": "Role", "principalId": "AROAUB2AA5FQRGAHITW4A", "arn": "arn:aws:iam::811596193553:role/SecurityMonkey", "accountId": "811596193553", "userName": "SecurityMonkey"}}}, "requestParameters": {"bucketName": "b5677c799b465420d8e7b0a6689a0bb0c4afbc9e.flaws.cloud", "acl": [""]}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "bc7ccd37-e59a-4b83-9b3b-64d9057a7af6", "record_id": "flaws_cloudtrail:0000020:bc7ccd37-e59a-4b83-9b3b-64d9057a7af6", "row_index": 20, "timestamp": "2017-05-27T04:45:17Z", "event_type": "GetBucketWebsite", "event_source": "s3.amazonaws.com", "principal": {"type": "AssumedRole", "arn": "arn:aws:sts::811596193553:assumed-role/SecurityMonkey/cloudaux", "account_id": "811596193553", "principal_id": "AROAUB2AA5FQRGAHITW4A:cloudaux", "user_name": null, "access_key_id": "ASIA1FZDVOXSQD6GDJFL", "session_issuer_arn": "arn:aws:iam::811596193553:role/SecurityMonkey", "session_issuer_user_name": "SecurityMonkey"}, "network": {"source_ip": "255.253.125.115", "user_agent": "[Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56]", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1107, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "bc7ccd37-e59a-4b83-9b3b-64d9057a7af6", "eventTime": "2017-05-27T04:45:17Z", "eventName": "GetBucketWebsite", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.253.125.115", "userAgent": "[Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56]", "awsRegion": "us-west-2", "errorCode": "NoSuchWebsiteConfiguration", "errorMessage": "The specified bucket does not have a website configuration", "userIdentity": {"type": "AssumedRole", "principalId": "AROAUB2AA5FQRGAHITW4A:cloudaux", "arn": "arn:aws:sts::811596193553:assumed-role/SecurityMonkey/cloudaux", "accountId": "811596193553", "accessKeyId": "ASIA1FZDVOXSQD6GDJFL", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2017-05-27T04:15:19Z"}, "sessionIssuer": {"type": "Role", "principalId": "AROAUB2AA5FQRGAHITW4A", "arn": "arn:aws:iam::811596193553:role/SecurityMonkey", "accountId": "811596193553", "userName": "SecurityMonkey"}}}, "requestParameters": {"bucketName": "flaws-logs", "website": [""]}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "fbd404d9-0517-4144-a9b1-83e956cc2195", "record_id": "flaws_cloudtrail:0000021:fbd404d9-0517-4144-a9b1-83e956cc2195", "row_index": 21, "timestamp": "2017-05-27T04:45:18Z", "event_type": "GetBucketLifecycle", "event_source": "s3.amazonaws.com", "principal": {"type": "AssumedRole", "arn": "arn:aws:sts::811596193553:assumed-role/SecurityMonkey/cloudaux", "account_id": "811596193553", "principal_id": "AROAUB2AA5FQRGAHITW4A:cloudaux", "user_name": null, "access_key_id": "ASIA1FZDVOXSQD6GDJFL", "session_issuer_arn": "arn:aws:iam::811596193553:role/SecurityMonkey", "session_issuer_user_name": "SecurityMonkey"}, "network": {"source_ip": "255.253.125.115", "user_agent": "[Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56]", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1096, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "fbd404d9-0517-4144-a9b1-83e956cc2195", "eventTime": "2017-05-27T04:45:18Z", "eventName": "GetBucketLifecycle", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.253.125.115", "userAgent": "[Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56]", "awsRegion": "us-west-2", "errorCode": "NoSuchLifecycleConfiguration", "errorMessage": "The lifecycle configuration does not exist", "userIdentity": {"type": "AssumedRole", "principalId": "AROAUB2AA5FQRGAHITW4A:cloudaux", "arn": "arn:aws:sts::811596193553:assumed-role/SecurityMonkey/cloudaux", "accountId": "811596193553", "accessKeyId": "ASIA1FZDVOXSQD6GDJFL", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2017-05-27T04:15:19Z"}, "sessionIssuer": {"type": "Role", "principalId": "AROAUB2AA5FQRGAHITW4A", "arn": "arn:aws:iam::811596193553:role/SecurityMonkey", "accountId": "811596193553", "userName": "SecurityMonkey"}}}, "requestParameters": {"lifecycle": [""], "bucketName": "flaws-logs"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "b0ab4c5e-f107-49e9-8a6a-539ed88e6095", "record_id": "flaws_cloudtrail:0000022:b0ab4c5e-f107-49e9-8a6a-539ed88e6095", "row_index": 22, "timestamp": "2017-05-27T04:45:18Z", "event_type": "GetBucketTagging", "event_source": "s3.amazonaws.com", "principal": {"type": "AssumedRole", "arn": "arn:aws:sts::811596193553:assumed-role/SecurityMonkey/cloudaux", "account_id": "811596193553", "principal_id": "AROAUB2AA5FQRGAHITW4A:cloudaux", "user_name": null, "access_key_id": "ASIA1FZDVOXSQD6GDJFL", "session_issuer_arn": "arn:aws:iam::811596193553:role/SecurityMonkey", "session_issuer_user_name": "SecurityMonkey"}, "network": {"source_ip": "255.253.125.115", "user_agent": "[Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56]", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1059, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "b0ab4c5e-f107-49e9-8a6a-539ed88e6095", "eventTime": "2017-05-27T04:45:18Z", "eventName": "GetBucketTagging", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.253.125.115", "userAgent": "[Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56]", "awsRegion": "us-west-2", "errorCode": "NoSuchTagSet", "errorMessage": "The TagSet does not exist", "userIdentity": {"type": "AssumedRole", "principalId": "AROAUB2AA5FQRGAHITW4A:cloudaux", "arn": "arn:aws:sts::811596193553:assumed-role/SecurityMonkey/cloudaux", "accountId": "811596193553", "accessKeyId": "ASIA1FZDVOXSQD6GDJFL", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2017-05-27T04:15:19Z"}, "sessionIssuer": {"type": "Role", "principalId": "AROAUB2AA5FQRGAHITW4A", "arn": "arn:aws:iam::811596193553:role/SecurityMonkey", "accountId": "811596193553", "userName": "SecurityMonkey"}}}, "requestParameters": {"tagging": [""], "bucketName": "flaws-logs"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "909be3a7-0eb3-4140-af68-fad2c9a07f63", "record_id": "flaws_cloudtrail:0000023:909be3a7-0eb3-4140-af68-fad2c9a07f63", "row_index": 23, "timestamp": "2017-05-27T04:45:18Z", "event_type": "GetBucketVersioning", "event_source": "s3.amazonaws.com", "principal": {"type": "AssumedRole", "arn": "arn:aws:sts::811596193553:assumed-role/SecurityMonkey/cloudaux", "account_id": "811596193553", "principal_id": "AROAUB2AA5FQRGAHITW4A:cloudaux", "user_name": null, "access_key_id": "ASIA1FZDVOXSQD6GDJFL", "session_issuer_arn": "arn:aws:iam::811596193553:role/SecurityMonkey", "session_issuer_user_name": "SecurityMonkey"}, "network": {"source_ip": "255.253.125.115", "user_agent": "[Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56]", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 995, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "909be3a7-0eb3-4140-af68-fad2c9a07f63", "eventTime": "2017-05-27T04:45:18Z", "eventName": "GetBucketVersioning", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.253.125.115", "userAgent": "[Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56]", "awsRegion": "us-west-2", "userIdentity": {"type": "AssumedRole", "principalId": "AROAUB2AA5FQRGAHITW4A:cloudaux", "arn": "arn:aws:sts::811596193553:assumed-role/SecurityMonkey/cloudaux", "accountId": "811596193553", "accessKeyId": "ASIA1FZDVOXSQD6GDJFL", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2017-05-27T04:15:19Z"}, "sessionIssuer": {"type": "Role", "principalId": "AROAUB2AA5FQRGAHITW4A", "arn": "arn:aws:iam::811596193553:role/SecurityMonkey", "accountId": "811596193553", "userName": "SecurityMonkey"}}}, "requestParameters": {"bucketName": "flaws-logs", "versioning": [""]}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "52181a-1dd5-422b-ac8f-5bb195f410c4", "record_id": "flaws_cloudtrail:0000024:52181a-1dd5-422b-ac8f-5bb195f410c4", "row_index": 24, "timestamp": "2017-05-27T04:45:18Z", "event_type": "GetBucketAcl", "event_source": "s3.amazonaws.com", "principal": {"type": "AssumedRole", "arn": "arn:aws:sts::811596193553:assumed-role/SecurityMonkey/cloudaux", "account_id": "811596193553", "principal_id": "AROAUB2AA5FQRGAHITW4A:cloudaux", "user_name": null, "access_key_id": "ASIA1FZDVOXSQD6GDJFL", "session_issuer_arn": "arn:aws:iam::811596193553:role/SecurityMonkey", "session_issuer_user_name": "SecurityMonkey"}, "network": {"source_ip": "255.253.125.115", "user_agent": "[Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56]", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 979, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "52181a-1dd5-422b-ac8f-5bb195f410c4", "eventTime": "2017-05-27T04:45:18Z", "eventName": "GetBucketAcl", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.253.125.115", "userAgent": "[Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56]", "awsRegion": "us-west-2", "userIdentity": {"type": "AssumedRole", "principalId": "AROAUB2AA5FQRGAHITW4A:cloudaux", "arn": "arn:aws:sts::811596193553:assumed-role/SecurityMonkey/cloudaux", "accountId": "811596193553", "accessKeyId": "ASIA1FZDVOXSQD6GDJFL", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2017-05-27T04:15:19Z"}, "sessionIssuer": {"type": "Role", "principalId": "AROAUB2AA5FQRGAHITW4A", "arn": "arn:aws:iam::811596193553:role/SecurityMonkey", "accountId": "811596193553", "userName": "SecurityMonkey"}}}, "requestParameters": {"bucketName": "flaws-logs", "acl": [""]}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "871e15b0-f663-44a7-a5fe-7dc6a582e3ea", "record_id": "flaws_cloudtrail:0000025:871e15b0-f663-44a7-a5fe-7dc6a582e3ea", "row_index": 25, "timestamp": "2017-05-27T04:45:18Z", "event_type": "GetBucketNotification", "event_source": "s3.amazonaws.com", "principal": {"type": "AssumedRole", "arn": "arn:aws:sts::811596193553:assumed-role/SecurityMonkey/cloudaux", "account_id": "811596193553", "principal_id": "AROAUB2AA5FQRGAHITW4A:cloudaux", "user_name": null, "access_key_id": "ASIA1FZDVOXSQD6GDJFL", "session_issuer_arn": "arn:aws:iam::811596193553:role/SecurityMonkey", "session_issuer_user_name": "SecurityMonkey"}, "network": {"source_ip": "255.253.125.115", "user_agent": "[Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56]", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 999, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "871e15b0-f663-44a7-a5fe-7dc6a582e3ea", "eventTime": "2017-05-27T04:45:18Z", "eventName": "GetBucketNotification", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.253.125.115", "userAgent": "[Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56]", "awsRegion": "us-west-2", "userIdentity": {"type": "AssumedRole", "principalId": "AROAUB2AA5FQRGAHITW4A:cloudaux", "arn": "arn:aws:sts::811596193553:assumed-role/SecurityMonkey/cloudaux", "accountId": "811596193553", "accessKeyId": "ASIA1FZDVOXSQD6GDJFL", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2017-05-27T04:15:19Z"}, "sessionIssuer": {"type": "Role", "principalId": "AROAUB2AA5FQRGAHITW4A", "arn": "arn:aws:iam::811596193553:role/SecurityMonkey", "accountId": "811596193553", "userName": "SecurityMonkey"}}}, "requestParameters": {"notification": [""], "bucketName": "flaws-logs"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "30a9fa5c-32a9-457a-a451-292dd65d2776", "record_id": "flaws_cloudtrail:0000026:30a9fa5c-32a9-457a-a451-292dd65d2776", "row_index": 26, "timestamp": "2017-05-27T04:45:19Z", "event_type": "GetBucketLocation", "event_source": "s3.amazonaws.com", "principal": {"type": "AssumedRole", "arn": "arn:aws:sts::811596193553:assumed-role/SecurityMonkey/cloudaux", "account_id": "811596193553", "principal_id": "AROAUB2AA5FQRGAHITW4A:cloudaux", "user_name": null, "access_key_id": "ASIAWWGE8SBRJDRN2KLG", "session_issuer_arn": "arn:aws:iam::811596193553:role/SecurityMonkey", "session_issuer_user_name": "SecurityMonkey"}, "network": {"source_ip": "255.253.125.115", "user_agent": "[Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56]", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 992, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "30a9fa5c-32a9-457a-a451-292dd65d2776", "eventTime": "2017-05-27T04:45:19Z", "eventName": "GetBucketLocation", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.253.125.115", "userAgent": "[Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56]", "awsRegion": "us-east-1", "userIdentity": {"type": "AssumedRole", "principalId": "AROAUB2AA5FQRGAHITW4A:cloudaux", "arn": "arn:aws:sts::811596193553:assumed-role/SecurityMonkey/cloudaux", "accountId": "811596193553", "accessKeyId": "ASIAWWGE8SBRJDRN2KLG", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2017-05-27T04:15:23Z"}, "sessionIssuer": {"type": "Role", "principalId": "AROAUB2AA5FQRGAHITW4A", "arn": "arn:aws:iam::811596193553:role/SecurityMonkey", "accountId": "811596193553", "userName": "SecurityMonkey"}}}, "requestParameters": {"bucketName": "flaws.cloud", "location": [""]}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "bdde30e2-2c27-40a0-b81d-39ab4939fb0d", "record_id": "flaws_cloudtrail:0000027:bdde30e2-2c27-40a0-b81d-39ab4939fb0d", "row_index": 27, "timestamp": "2017-05-27T04:45:19Z", "event_type": "GetBucketCors", "event_source": "s3.amazonaws.com", "principal": {"type": "AssumedRole", "arn": "arn:aws:sts::811596193553:assumed-role/SecurityMonkey/cloudaux", "account_id": "811596193553", "principal_id": "AROAUB2AA5FQRGAHITW4A:cloudaux", "user_name": null, "access_key_id": "ASIA1FZDVOXSQD6GDJFL", "session_issuer_arn": "arn:aws:iam::811596193553:role/SecurityMonkey", "session_issuer_user_name": "SecurityMonkey"}, "network": {"source_ip": "255.253.125.115", "user_agent": "[Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56]", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1077, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "bdde30e2-2c27-40a0-b81d-39ab4939fb0d", "eventTime": "2017-05-27T04:45:19Z", "eventName": "GetBucketCors", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.253.125.115", "userAgent": "[Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56]", "awsRegion": "us-west-2", "errorCode": "NoSuchCORSConfiguration", "errorMessage": "The CORS configuration does not exist", "userIdentity": {"type": "AssumedRole", "principalId": "AROAUB2AA5FQRGAHITW4A:cloudaux", "arn": "arn:aws:sts::811596193553:assumed-role/SecurityMonkey/cloudaux", "accountId": "811596193553", "accessKeyId": "ASIA1FZDVOXSQD6GDJFL", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2017-05-27T04:15:19Z"}, "sessionIssuer": {"type": "Role", "principalId": "AROAUB2AA5FQRGAHITW4A", "arn": "arn:aws:iam::811596193553:role/SecurityMonkey", "accountId": "811596193553", "userName": "SecurityMonkey"}}}, "requestParameters": {"bucketName": "flaws.cloud", "cors": [""]}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "acb654ea-dd98-4f44-8e31-a0bebff091de", "record_id": "flaws_cloudtrail:0000028:acb654ea-dd98-4f44-8e31-a0bebff091de", "row_index": 28, "timestamp": "2017-05-27T04:45:19Z", "event_type": "GetBucketWebsite", "event_source": "s3.amazonaws.com", "principal": {"type": "AssumedRole", "arn": "arn:aws:sts::811596193553:assumed-role/SecurityMonkey/cloudaux", "account_id": "811596193553", "principal_id": "AROAUB2AA5FQRGAHITW4A:cloudaux", "user_name": null, "access_key_id": "ASIA1FZDVOXSQD6GDJFL", "session_issuer_arn": "arn:aws:iam::811596193553:role/SecurityMonkey", "session_issuer_user_name": "SecurityMonkey"}, "network": {"source_ip": "255.253.125.115", "user_agent": "[Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56]", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 990, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "acb654ea-dd98-4f44-8e31-a0bebff091de", "eventTime": "2017-05-27T04:45:19Z", "eventName": "GetBucketWebsite", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.253.125.115", "userAgent": "[Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56]", "awsRegion": "us-west-2", "userIdentity": {"type": "AssumedRole", "principalId": "AROAUB2AA5FQRGAHITW4A:cloudaux", "arn": "arn:aws:sts::811596193553:assumed-role/SecurityMonkey/cloudaux", "accountId": "811596193553", "accessKeyId": "ASIA1FZDVOXSQD6GDJFL", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2017-05-27T04:15:19Z"}, "sessionIssuer": {"type": "Role", "principalId": "AROAUB2AA5FQRGAHITW4A", "arn": "arn:aws:iam::811596193553:role/SecurityMonkey", "accountId": "811596193553", "userName": "SecurityMonkey"}}}, "requestParameters": {"bucketName": "flaws.cloud", "website": [""]}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "a98e22f2-7cad-49e3-87d6-eafdf08eded5", "record_id": "flaws_cloudtrail:0000029:a98e22f2-7cad-49e3-87d6-eafdf08eded5", "row_index": 29, "timestamp": "2017-05-27T04:45:19Z", "event_type": "GetBucketReplication", "event_source": "s3.amazonaws.com", "principal": {"type": "AssumedRole", "arn": "arn:aws:sts::811596193553:assumed-role/SecurityMonkey/cloudaux", "account_id": "811596193553", "principal_id": "AROAUB2AA5FQRGAHITW4A:cloudaux", "user_name": null, "access_key_id": "ASIA1FZDVOXSQD6GDJFL", "session_issuer_arn": "arn:aws:iam::811596193553:role/SecurityMonkey", "session_issuer_user_name": "SecurityMonkey"}, "network": {"source_ip": "255.253.125.115", "user_agent": "[Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56]", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1111, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "a98e22f2-7cad-49e3-87d6-eafdf08eded5", "eventTime": "2017-05-27T04:45:19Z", "eventName": "GetBucketReplication", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.253.125.115", "userAgent": "[Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56]", "awsRegion": "us-west-2", "errorCode": "ReplicationConfigurationNotFoundError", "errorMessage": "The replication configuration was not found", "userIdentity": {"type": "AssumedRole", "principalId": "AROAUB2AA5FQRGAHITW4A:cloudaux", "arn": "arn:aws:sts::811596193553:assumed-role/SecurityMonkey/cloudaux", "accountId": "811596193553", "accessKeyId": "ASIA1FZDVOXSQD6GDJFL", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2017-05-27T04:15:19Z"}, "sessionIssuer": {"type": "Role", "principalId": "AROAUB2AA5FQRGAHITW4A", "arn": "arn:aws:iam::811596193553:role/SecurityMonkey", "accountId": "811596193553", "userName": "SecurityMonkey"}}}, "requestParameters": {"replication": [""], "bucketName": "flaws.cloud"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "ae05fa1e-2c2a-4c70-9050-e3c146dbf2cf", "record_id": "flaws_cloudtrail:0000030:ae05fa1e-2c2a-4c70-9050-e3c146dbf2cf", "row_index": 30, "timestamp": "2017-05-27T04:45:19Z", "event_type": "GetBucketTagging", "event_source": "s3.amazonaws.com", "principal": {"type": "AssumedRole", "arn": "arn:aws:sts::811596193553:assumed-role/SecurityMonkey/cloudaux", "account_id": "811596193553", "principal_id": "AROAUB2AA5FQRGAHITW4A:cloudaux", "user_name": null, "access_key_id": "ASIA1FZDVOXSQD6GDJFL", "session_issuer_arn": "arn:aws:iam::811596193553:role/SecurityMonkey", "session_issuer_user_name": "SecurityMonkey"}, "network": {"source_ip": "255.253.125.115", "user_agent": "[Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56]", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1058, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "ae05fa1e-2c2a-4c70-9050-e3c146dbf2cf", "eventTime": "2017-05-27T04:45:19Z", "eventName": "GetBucketTagging", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.253.125.115", "userAgent": "[Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56]", "awsRegion": "us-west-2", "errorCode": "NoSuchTagSet", "errorMessage": "The TagSet does not exist", "userIdentity": {"type": "AssumedRole", "principalId": "AROAUB2AA5FQRGAHITW4A:cloudaux", "arn": "arn:aws:sts::811596193553:assumed-role/SecurityMonkey/cloudaux", "accountId": "811596193553", "accessKeyId": "ASIA1FZDVOXSQD6GDJFL", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2017-05-27T04:15:19Z"}, "sessionIssuer": {"type": "Role", "principalId": "AROAUB2AA5FQRGAHITW4A", "arn": "arn:aws:iam::811596193553:role/SecurityMonkey", "accountId": "811596193553", "userName": "SecurityMonkey"}}}, "requestParameters": {"tagging": [""], "bucketName": "flaws.cloud"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "45181f1b-0938-4912-b259-ab0dc432cd90", "record_id": "flaws_cloudtrail:0000031:45181f1b-0938-4912-b259-ab0dc432cd90", "row_index": 31, "timestamp": "2017-05-27T04:45:19Z", "event_type": "GetBucketLogging", "event_source": "s3.amazonaws.com", "principal": {"type": "AssumedRole", "arn": "arn:aws:sts::811596193553:assumed-role/SecurityMonkey/cloudaux", "account_id": "811596193553", "principal_id": "AROAUB2AA5FQRGAHITW4A:cloudaux", "user_name": null, "access_key_id": "ASIA1FZDVOXSQD6GDJFL", "session_issuer_arn": "arn:aws:iam::811596193553:role/SecurityMonkey", "session_issuer_user_name": "SecurityMonkey"}, "network": {"source_ip": "255.253.125.115", "user_agent": "[Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56]", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 990, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "45181f1b-0938-4912-b259-ab0dc432cd90", "eventTime": "2017-05-27T04:45:19Z", "eventName": "GetBucketLogging", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.253.125.115", "userAgent": "[Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56]", "awsRegion": "us-west-2", "userIdentity": {"type": "AssumedRole", "principalId": "AROAUB2AA5FQRGAHITW4A:cloudaux", "arn": "arn:aws:sts::811596193553:assumed-role/SecurityMonkey/cloudaux", "accountId": "811596193553", "accessKeyId": "ASIA1FZDVOXSQD6GDJFL", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2017-05-27T04:15:19Z"}, "sessionIssuer": {"type": "Role", "principalId": "AROAUB2AA5FQRGAHITW4A", "arn": "arn:aws:iam::811596193553:role/SecurityMonkey", "accountId": "811596193553", "userName": "SecurityMonkey"}}}, "requestParameters": {"logging": [""], "bucketName": "flaws.cloud"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "576a67d4-b397-4c11-8a21-2d190b4e73e8", "record_id": "flaws_cloudtrail:0000032:576a67d4-b397-4c11-8a21-2d190b4e73e8", "row_index": 32, "timestamp": "2017-05-27T04:45:19Z", "event_type": "GetBucketVersioning", "event_source": "s3.amazonaws.com", "principal": {"type": "AssumedRole", "arn": "arn:aws:sts::811596193553:assumed-role/SecurityMonkey/cloudaux", "account_id": "811596193553", "principal_id": "AROAUB2AA5FQRGAHITW4A:cloudaux", "user_name": null, "access_key_id": "ASIA1FZDVOXSQD6GDJFL", "session_issuer_arn": "arn:aws:iam::811596193553:role/SecurityMonkey", "session_issuer_user_name": "SecurityMonkey"}, "network": {"source_ip": "255.253.125.115", "user_agent": "[Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56]", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 996, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "576a67d4-b397-4c11-8a21-2d190b4e73e8", "eventTime": "2017-05-27T04:45:19Z", "eventName": "GetBucketVersioning", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.253.125.115", "userAgent": "[Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56]", "awsRegion": "us-west-2", "userIdentity": {"type": "AssumedRole", "principalId": "AROAUB2AA5FQRGAHITW4A:cloudaux", "arn": "arn:aws:sts::811596193553:assumed-role/SecurityMonkey/cloudaux", "accountId": "811596193553", "accessKeyId": "ASIA1FZDVOXSQD6GDJFL", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2017-05-27T04:15:19Z"}, "sessionIssuer": {"type": "Role", "principalId": "AROAUB2AA5FQRGAHITW4A", "arn": "arn:aws:iam::811596193553:role/SecurityMonkey", "accountId": "811596193553", "userName": "SecurityMonkey"}}}, "requestParameters": {"bucketName": "flaws.cloud", "versioning": [""]}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "61cc9577-b433-4157-baeb-7e00c9d8be92", "record_id": "flaws_cloudtrail:0000033:61cc9577-b433-4157-baeb-7e00c9d8be92", "row_index": 33, "timestamp": "2017-05-27T04:45:19Z", "event_type": "GetBucketLifecycle", "event_source": "s3.amazonaws.com", "principal": {"type": "AssumedRole", "arn": "arn:aws:sts::811596193553:assumed-role/SecurityMonkey/cloudaux", "account_id": "811596193553", "principal_id": "AROAUB2AA5FQRGAHITW4A:cloudaux", "user_name": null, "access_key_id": "ASIA1FZDVOXSQD6GDJFL", "session_issuer_arn": "arn:aws:iam::811596193553:role/SecurityMonkey", "session_issuer_user_name": "SecurityMonkey"}, "network": {"source_ip": "255.253.125.115", "user_agent": "[Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56]", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1095, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "61cc9577-b433-4157-baeb-7e00c9d8be92", "eventTime": "2017-05-27T04:45:19Z", "eventName": "GetBucketLifecycle", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.253.125.115", "userAgent": "[Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56]", "awsRegion": "us-west-2", "errorCode": "NoSuchLifecycleConfiguration", "errorMessage": "The lifecycle configuration does not exist", "userIdentity": {"type": "AssumedRole", "principalId": "AROAUB2AA5FQRGAHITW4A:cloudaux", "arn": "arn:aws:sts::811596193553:assumed-role/SecurityMonkey/cloudaux", "accountId": "811596193553", "accessKeyId": "ASIA1FZDVOXSQD6GDJFL", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2017-05-27T04:15:19Z"}, "sessionIssuer": {"type": "Role", "principalId": "AROAUB2AA5FQRGAHITW4A", "arn": "arn:aws:iam::811596193553:role/SecurityMonkey", "accountId": "811596193553", "userName": "SecurityMonkey"}}}, "requestParameters": {"lifecycle": [""], "bucketName": "flaws.cloud"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "c4d49e65-37af-416d-97be-a5b21a8b1e06", "record_id": "flaws_cloudtrail:0000034:c4d49e65-37af-416d-97be-a5b21a8b1e06", "row_index": 34, "timestamp": "2017-05-27T04:45:19Z", "event_type": "GetBucketNotification", "event_source": "s3.amazonaws.com", "principal": {"type": "AssumedRole", "arn": "arn:aws:sts::811596193553:assumed-role/SecurityMonkey/cloudaux", "account_id": "811596193553", "principal_id": "AROAUB2AA5FQRGAHITW4A:cloudaux", "user_name": null, "access_key_id": "ASIA1FZDVOXSQD6GDJFL", "session_issuer_arn": "arn:aws:iam::811596193553:role/SecurityMonkey", "session_issuer_user_name": "SecurityMonkey"}, "network": {"source_ip": "255.253.125.115", "user_agent": "[Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56]", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1000, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "c4d49e65-37af-416d-97be-a5b21a8b1e06", "eventTime": "2017-05-27T04:45:19Z", "eventName": "GetBucketNotification", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.253.125.115", "userAgent": "[Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56]", "awsRegion": "us-west-2", "userIdentity": {"type": "AssumedRole", "principalId": "AROAUB2AA5FQRGAHITW4A:cloudaux", "arn": "arn:aws:sts::811596193553:assumed-role/SecurityMonkey/cloudaux", "accountId": "811596193553", "accessKeyId": "ASIA1FZDVOXSQD6GDJFL", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2017-05-27T04:15:19Z"}, "sessionIssuer": {"type": "Role", "principalId": "AROAUB2AA5FQRGAHITW4A", "arn": "arn:aws:iam::811596193553:role/SecurityMonkey", "accountId": "811596193553", "userName": "SecurityMonkey"}}}, "requestParameters": {"notification": [""], "bucketName": "flaws.cloud"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "339898a-70f8-4fde-9910-240fcfd2b950", "record_id": "flaws_cloudtrail:0000035:339898a-70f8-4fde-9910-240fcfd2b950", "row_index": 35, "timestamp": "2017-05-27T04:45:19Z", "event_type": "GetBucketPolicy", "event_source": "s3.amazonaws.com", "principal": {"type": "AssumedRole", "arn": "arn:aws:sts::811596193553:assumed-role/SecurityMonkey/cloudaux", "account_id": "811596193553", "principal_id": "AROAUB2AA5FQRGAHITW4A:cloudaux", "user_name": null, "access_key_id": "ASIA1FZDVOXSQD6GDJFL", "session_issuer_arn": "arn:aws:iam::811596193553:role/SecurityMonkey", "session_issuer_user_name": "SecurityMonkey"}, "network": {"source_ip": "255.253.125.115", "user_agent": "[Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56]", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 986, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "339898a-70f8-4fde-9910-240fcfd2b950", "eventTime": "2017-05-27T04:45:19Z", "eventName": "GetBucketPolicy", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.253.125.115", "userAgent": "[Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56]", "awsRegion": "us-west-2", "userIdentity": {"type": "AssumedRole", "principalId": "AROAUB2AA5FQRGAHITW4A:cloudaux", "arn": "arn:aws:sts::811596193553:assumed-role/SecurityMonkey/cloudaux", "accountId": "811596193553", "accessKeyId": "ASIA1FZDVOXSQD6GDJFL", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2017-05-27T04:15:19Z"}, "sessionIssuer": {"type": "Role", "principalId": "AROAUB2AA5FQRGAHITW4A", "arn": "arn:aws:iam::811596193553:role/SecurityMonkey", "accountId": "811596193553", "userName": "SecurityMonkey"}}}, "requestParameters": {"bucketName": "flaws.cloud", "policy": [""]}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "023ba65d-ceb7-4b0a-96c6-55089f8e5", "record_id": "flaws_cloudtrail:0000036:023ba65d-ceb7-4b0a-96c6-55089f8e5", "row_index": 36, "timestamp": "2017-05-27T04:45:19Z", "event_type": "GetBucketAcl", "event_source": "s3.amazonaws.com", "principal": {"type": "AssumedRole", "arn": "arn:aws:sts::811596193553:assumed-role/SecurityMonkey/cloudaux", "account_id": "811596193553", "principal_id": "AROAUB2AA5FQRGAHITW4A:cloudaux", "user_name": null, "access_key_id": "ASIA1FZDVOXSQD6GDJFL", "session_issuer_arn": "arn:aws:iam::811596193553:role/SecurityMonkey", "session_issuer_user_name": "SecurityMonkey"}, "network": {"source_ip": "255.253.125.115", "user_agent": "[Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56]", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 979, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "023ba65d-ceb7-4b0a-96c6-55089f8e5", "eventTime": "2017-05-27T04:45:19Z", "eventName": "GetBucketAcl", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.253.125.115", "userAgent": "[Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56]", "awsRegion": "us-west-2", "userIdentity": {"type": "AssumedRole", "principalId": "AROAUB2AA5FQRGAHITW4A:cloudaux", "arn": "arn:aws:sts::811596193553:assumed-role/SecurityMonkey/cloudaux", "accountId": "811596193553", "accessKeyId": "ASIA1FZDVOXSQD6GDJFL", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2017-05-27T04:15:19Z"}, "sessionIssuer": {"type": "Role", "principalId": "AROAUB2AA5FQRGAHITW4A", "arn": "arn:aws:iam::811596193553:role/SecurityMonkey", "accountId": "811596193553", "userName": "SecurityMonkey"}}}, "requestParameters": {"bucketName": "flaws.cloud", "acl": [""]}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "d7aabace-a00c-4a0b-a3c8-46bd12cdd7af", "record_id": "flaws_cloudtrail:0000037:d7aabace-a00c-4a0b-a3c8-46bd12cdd7af", "row_index": 37, "timestamp": "2017-05-27T04:45:20Z", "event_type": "GetBucketLocation", "event_source": "s3.amazonaws.com", "principal": {"type": "AssumedRole", "arn": "arn:aws:sts::811596193553:assumed-role/SecurityMonkey/cloudaux", "account_id": "811596193553", "principal_id": "AROAUB2AA5FQRGAHITW4A:cloudaux", "user_name": null, "access_key_id": "ASIAWWGE8SBRJDRN2KLG", "session_issuer_arn": "arn:aws:iam::811596193553:role/SecurityMonkey", "session_issuer_user_name": "SecurityMonkey"}, "network": {"source_ip": "255.253.125.115", "user_agent": "[Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56]", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 1032, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "d7aabace-a00c-4a0b-a3c8-46bd12cdd7af", "eventTime": "2017-05-27T04:45:20Z", "eventName": "GetBucketLocation", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.253.125.115", "userAgent": "[Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56]", "awsRegion": "us-east-1", "userIdentity": {"type": "AssumedRole", "principalId": "AROAUB2AA5FQRGAHITW4A:cloudaux", "arn": "arn:aws:sts::811596193553:assumed-role/SecurityMonkey/cloudaux", "accountId": "811596193553", "accessKeyId": "ASIAWWGE8SBRJDRN2KLG", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2017-05-27T04:15:23Z"}, "sessionIssuer": {"type": "Role", "principalId": "AROAUB2AA5FQRGAHITW4A", "arn": "arn:aws:iam::811596193553:role/SecurityMonkey", "accountId": "811596193553", "userName": "SecurityMonkey"}}}, "requestParameters": {"bucketName": "level2-295510a051f3fcd006ae345973478972.flaws.cloud", "location": [""]}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "4daec8c2-95fd-45d1-a9c2-889107aedbd67", "record_id": "flaws_cloudtrail:0000038:4daec8c2-95fd-45d1-a9c2-889107aedbd67", "row_index": 38, "timestamp": "2017-05-27T04:45:20Z", "event_type": "GetBucketCors", "event_source": "s3.amazonaws.com", "principal": {"type": "AssumedRole", "arn": "arn:aws:sts::811596193553:assumed-role/SecurityMonkey/cloudaux", "account_id": "811596193553", "principal_id": "AROAUB2AA5FQRGAHITW4A:cloudaux", "user_name": null, "access_key_id": "ASIA1FZDVOXSQD6GDJFL", "session_issuer_arn": "arn:aws:iam::811596193553:role/SecurityMonkey", "session_issuer_user_name": "SecurityMonkey"}, "network": {"source_ip": "255.253.125.115", "user_agent": "[Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56]", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1117, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "4daec8c2-95fd-45d1-a9c2-889107aedbd67", "eventTime": "2017-05-27T04:45:20Z", "eventName": "GetBucketCors", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.253.125.115", "userAgent": "[Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56]", "awsRegion": "us-west-2", "errorCode": "NoSuchCORSConfiguration", "errorMessage": "The CORS configuration does not exist", "userIdentity": {"type": "AssumedRole", "principalId": "AROAUB2AA5FQRGAHITW4A:cloudaux", "arn": "arn:aws:sts::811596193553:assumed-role/SecurityMonkey/cloudaux", "accountId": "811596193553", "accessKeyId": "ASIA1FZDVOXSQD6GDJFL", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2017-05-27T04:15:19Z"}, "sessionIssuer": {"type": "Role", "principalId": "AROAUB2AA5FQRGAHITW4A", "arn": "arn:aws:iam::811596193553:role/SecurityMonkey", "accountId": "811596193553", "userName": "SecurityMonkey"}}}, "requestParameters": {"bucketName": "level2-295510a051f3fcd006ae345973478972.flaws.cloud", "cors": [""]}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "344942-f13f-442e-be82-50a815568bd80", "record_id": "flaws_cloudtrail:0000039:344942-f13f-442e-be82-50a815568bd80", "row_index": 39, "timestamp": "2017-05-27T04:45:20Z", "event_type": "GetBucketPolicy", "event_source": "s3.amazonaws.com", "principal": {"type": "AssumedRole", "arn": "arn:aws:sts::811596193553:assumed-role/SecurityMonkey/cloudaux", "account_id": "811596193553", "principal_id": "AROAUB2AA5FQRGAHITW4A:cloudaux", "user_name": null, "access_key_id": "ASIA1FZDVOXSQD6GDJFL", "session_issuer_arn": "arn:aws:iam::811596193553:role/SecurityMonkey", "session_issuer_user_name": "SecurityMonkey"}, "network": {"source_ip": "255.253.125.115", "user_agent": "[Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56]", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1027, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "344942-f13f-442e-be82-50a815568bd80", "eventTime": "2017-05-27T04:45:20Z", "eventName": "GetBucketPolicy", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.253.125.115", "userAgent": "[Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56]", "awsRegion": "us-west-2", "userIdentity": {"type": "AssumedRole", "principalId": "AROAUB2AA5FQRGAHITW4A:cloudaux", "arn": "arn:aws:sts::811596193553:assumed-role/SecurityMonkey/cloudaux", "accountId": "811596193553", "accessKeyId": "ASIA1FZDVOXSQD6GDJFL", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2017-05-27T04:15:19Z"}, "sessionIssuer": {"type": "Role", "principalId": "AROAUB2AA5FQRGAHITW4A", "arn": "arn:aws:iam::811596193553:role/SecurityMonkey", "accountId": "811596193553", "userName": "SecurityMonkey"}}}, "requestParameters": {"bucketName": "level2-295510a051f3fcd006ae345973478972.flaws.cloud", "policy": [""]}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "2a4b5891-afc8-4b12-a22f-2cf4c89da3bc", "record_id": "flaws_cloudtrail:0000040:2a4b5891-afc8-4b12-a22f-2cf4c89da3bc", "row_index": 40, "timestamp": "2017-05-27T04:45:20Z", "event_type": "GetBucketReplication", "event_source": "s3.amazonaws.com", "principal": {"type": "AssumedRole", "arn": "arn:aws:sts::811596193553:assumed-role/SecurityMonkey/cloudaux", "account_id": "811596193553", "principal_id": "AROAUB2AA5FQRGAHITW4A:cloudaux", "user_name": null, "access_key_id": "ASIA1FZDVOXSQD6GDJFL", "session_issuer_arn": "arn:aws:iam::811596193553:role/SecurityMonkey", "session_issuer_user_name": "SecurityMonkey"}, "network": {"source_ip": "255.253.125.115", "user_agent": "[Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56]", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1149, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "2a4b5891-afc8-4b12-a22f-2cf4c89da3bc", "eventTime": "2017-05-27T04:45:20Z", "eventName": "GetBucketReplication", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.253.125.115", "userAgent": "[Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56]", "awsRegion": "us-west-2", "errorCode": "ReplicationConfigurationNotFoundError", "errorMessage": "The replication configuration was not found", "userIdentity": {"type": "AssumedRole", "principalId": "AROAUB2AA5FQRGAHITW4A:cloudaux", "arn": "arn:aws:sts::811596193553:assumed-role/SecurityMonkey/cloudaux", "accountId": "811596193553", "accessKeyId": "ASIA1FZDVOXSQD6GDJFL", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2017-05-27T04:15:19Z"}, "sessionIssuer": {"type": "Role", "principalId": "AROAUB2AA5FQRGAHITW4A", "arn": "arn:aws:iam::811596193553:role/SecurityMonkey", "accountId": "811596193553", "userName": "SecurityMonkey"}}}, "requestParameters": {"replication": [""], "bucketName": "level2-295510a051f3fcd006ae345973478972.flaws.cloud"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "e77da590-dded-4f08-88a1-c74351d23448", "record_id": "flaws_cloudtrail:0000041:e77da590-dded-4f08-88a1-c74351d23448", "row_index": 41, "timestamp": "2017-05-27T04:45:20Z", "event_type": "GetBucketVersioning", "event_source": "s3.amazonaws.com", "principal": {"type": "AssumedRole", "arn": "arn:aws:sts::811596193553:assumed-role/SecurityMonkey/cloudaux", "account_id": "811596193553", "principal_id": "AROAUB2AA5FQRGAHITW4A:cloudaux", "user_name": null, "access_key_id": "ASIA1FZDVOXSQD6GDJFL", "session_issuer_arn": "arn:aws:iam::811596193553:role/SecurityMonkey", "session_issuer_user_name": "SecurityMonkey"}, "network": {"source_ip": "255.253.125.115", "user_agent": "[Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56]", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1036, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "e77da590-dded-4f08-88a1-c74351d23448", "eventTime": "2017-05-27T04:45:20Z", "eventName": "GetBucketVersioning", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.253.125.115", "userAgent": "[Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56]", "awsRegion": "us-west-2", "userIdentity": {"type": "AssumedRole", "principalId": "AROAUB2AA5FQRGAHITW4A:cloudaux", "arn": "arn:aws:sts::811596193553:assumed-role/SecurityMonkey/cloudaux", "accountId": "811596193553", "accessKeyId": "ASIA1FZDVOXSQD6GDJFL", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2017-05-27T04:15:19Z"}, "sessionIssuer": {"type": "Role", "principalId": "AROAUB2AA5FQRGAHITW4A", "arn": "arn:aws:iam::811596193553:role/SecurityMonkey", "accountId": "811596193553", "userName": "SecurityMonkey"}}}, "requestParameters": {"bucketName": "level2-295510a051f3fcd006ae345973478972.flaws.cloud", "versioning": [""]}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "0a1f046c-b0a8-4418-ace1-31f12f3f7329", "record_id": "flaws_cloudtrail:0000042:0a1f046c-b0a8-4418-ace1-31f12f3f7329", "row_index": 42, "timestamp": "2017-05-27T04:45:20Z", "event_type": "GetBucketNotification", "event_source": "s3.amazonaws.com", "principal": {"type": "AssumedRole", "arn": "arn:aws:sts::811596193553:assumed-role/SecurityMonkey/cloudaux", "account_id": "811596193553", "principal_id": "AROAUB2AA5FQRGAHITW4A:cloudaux", "user_name": null, "access_key_id": "ASIA1FZDVOXSQD6GDJFL", "session_issuer_arn": "arn:aws:iam::811596193553:role/SecurityMonkey", "session_issuer_user_name": "SecurityMonkey"}, "network": {"source_ip": "255.253.125.115", "user_agent": "[Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56]", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1040, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "0a1f046c-b0a8-4418-ace1-31f12f3f7329", "eventTime": "2017-05-27T04:45:20Z", "eventName": "GetBucketNotification", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.253.125.115", "userAgent": "[Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56]", "awsRegion": "us-west-2", "userIdentity": {"type": "AssumedRole", "principalId": "AROAUB2AA5FQRGAHITW4A:cloudaux", "arn": "arn:aws:sts::811596193553:assumed-role/SecurityMonkey/cloudaux", "accountId": "811596193553", "accessKeyId": "ASIA1FZDVOXSQD6GDJFL", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2017-05-27T04:15:19Z"}, "sessionIssuer": {"type": "Role", "principalId": "AROAUB2AA5FQRGAHITW4A", "arn": "arn:aws:iam::811596193553:role/SecurityMonkey", "accountId": "811596193553", "userName": "SecurityMonkey"}}}, "requestParameters": {"notification": [""], "bucketName": "level2-295510a051f3fcd006ae345973478972.flaws.cloud"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "1d70cad3-70d9-48c8-a8a7-c15e01d3808a", "record_id": "flaws_cloudtrail:0000043:1d70cad3-70d9-48c8-a8a7-c15e01d3808a", "row_index": 43, "timestamp": "2017-05-27T04:45:20Z", "event_type": "GetBucketLogging", "event_source": "s3.amazonaws.com", "principal": {"type": "AssumedRole", "arn": "arn:aws:sts::811596193553:assumed-role/SecurityMonkey/cloudaux", "account_id": "811596193553", "principal_id": "AROAUB2AA5FQRGAHITW4A:cloudaux", "user_name": null, "access_key_id": "ASIA1FZDVOXSQD6GDJFL", "session_issuer_arn": "arn:aws:iam::811596193553:role/SecurityMonkey", "session_issuer_user_name": "SecurityMonkey"}, "network": {"source_ip": "255.253.125.115", "user_agent": "[Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56]", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1031, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "1d70cad3-70d9-48c8-a8a7-c15e01d3808a", "eventTime": "2017-05-27T04:45:20Z", "eventName": "GetBucketLogging", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.253.125.115", "userAgent": "[Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56]", "awsRegion": "us-west-2", "userIdentity": {"type": "AssumedRole", "principalId": "AROAUB2AA5FQRGAHITW4A:cloudaux", "arn": "arn:aws:sts::811596193553:assumed-role/SecurityMonkey/cloudaux", "accountId": "811596193553", "accessKeyId": "ASIA1FZDVOXSQD6GDJFL", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2017-05-27T04:15:19Z"}, "sessionIssuer": {"type": "Role", "principalId": "AROAUB2AA5FQRGAHITW4A", "arn": "arn:aws:iam::811596193553:role/SecurityMonkey", "accountId": "811596193553", "userName": "SecurityMonkey"}}}, "requestParameters": {"logging": [""], "bucketName": "level2-295510a051f3fcd006ae345973478972.flaws.cloud"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "06e2ebc6-6faa-40d2-8e47-5ab5120fb0f2", "record_id": "flaws_cloudtrail:0000044:06e2ebc6-6faa-40d2-8e47-5ab5120fb0f2", "row_index": 44, "timestamp": "2017-05-27T04:45:20Z", "event_type": "GetBucketAcl", "event_source": "s3.amazonaws.com", "principal": {"type": "AssumedRole", "arn": "arn:aws:sts::811596193553:assumed-role/SecurityMonkey/cloudaux", "account_id": "811596193553", "principal_id": "AROAUB2AA5FQRGAHITW4A:cloudaux", "user_name": null, "access_key_id": "ASIA1FZDVOXSQD6GDJFL", "session_issuer_arn": "arn:aws:iam::811596193553:role/SecurityMonkey", "session_issuer_user_name": "SecurityMonkey"}, "network": {"source_ip": "255.253.125.115", "user_agent": "[Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56]", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1022, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "06e2ebc6-6faa-40d2-8e47-5ab5120fb0f2", "eventTime": "2017-05-27T04:45:20Z", "eventName": "GetBucketAcl", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.253.125.115", "userAgent": "[Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56]", "awsRegion": "us-west-2", "userIdentity": {"type": "AssumedRole", "principalId": "AROAUB2AA5FQRGAHITW4A:cloudaux", "arn": "arn:aws:sts::811596193553:assumed-role/SecurityMonkey/cloudaux", "accountId": "811596193553", "accessKeyId": "ASIA1FZDVOXSQD6GDJFL", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2017-05-27T04:15:19Z"}, "sessionIssuer": {"type": "Role", "principalId": "AROAUB2AA5FQRGAHITW4A", "arn": "arn:aws:iam::811596193553:role/SecurityMonkey", "accountId": "811596193553", "userName": "SecurityMonkey"}}}, "requestParameters": {"bucketName": "level2-295510a051f3fcd006ae345973478972.flaws.cloud", "acl": [""]}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "7ba8b6bd-cf1e-4613-8ff5-c75914d9ba3", "record_id": "flaws_cloudtrail:0000045:7ba8b6bd-cf1e-4613-8ff5-c75914d9ba3", "row_index": 45, "timestamp": "2017-05-27T04:45:20Z", "event_type": "GetBucketTagging", "event_source": "s3.amazonaws.com", "principal": {"type": "AssumedRole", "arn": "arn:aws:sts::811596193553:assumed-role/SecurityMonkey/cloudaux", "account_id": "811596193553", "principal_id": "AROAUB2AA5FQRGAHITW4A:cloudaux", "user_name": null, "access_key_id": "ASIA1FZDVOXSQD6GDJFL", "session_issuer_arn": "arn:aws:iam::811596193553:role/SecurityMonkey", "session_issuer_user_name": "SecurityMonkey"}, "network": {"source_ip": "255.253.125.115", "user_agent": "[Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56]", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1099, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "7ba8b6bd-cf1e-4613-8ff5-c75914d9ba3", "eventTime": "2017-05-27T04:45:20Z", "eventName": "GetBucketTagging", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.253.125.115", "userAgent": "[Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56]", "awsRegion": "us-west-2", "errorCode": "NoSuchTagSet", "errorMessage": "The TagSet does not exist", "userIdentity": {"type": "AssumedRole", "principalId": "AROAUB2AA5FQRGAHITW4A:cloudaux", "arn": "arn:aws:sts::811596193553:assumed-role/SecurityMonkey/cloudaux", "accountId": "811596193553", "accessKeyId": "ASIA1FZDVOXSQD6GDJFL", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2017-05-27T04:15:19Z"}, "sessionIssuer": {"type": "Role", "principalId": "AROAUB2AA5FQRGAHITW4A", "arn": "arn:aws:iam::811596193553:role/SecurityMonkey", "accountId": "811596193553", "userName": "SecurityMonkey"}}}, "requestParameters": {"tagging": [""], "bucketName": "level2-295510a051f3fcd006ae345973478972.flaws.cloud"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "5a80e6d2-94ba-4018-80ed-822239b16377", "record_id": "flaws_cloudtrail:0000046:5a80e6d2-94ba-4018-80ed-822239b16377", "row_index": 46, "timestamp": "2017-05-27T04:45:20Z", "event_type": "GetBucketWebsite", "event_source": "s3.amazonaws.com", "principal": {"type": "AssumedRole", "arn": "arn:aws:sts::811596193553:assumed-role/SecurityMonkey/cloudaux", "account_id": "811596193553", "principal_id": "AROAUB2AA5FQRGAHITW4A:cloudaux", "user_name": null, "access_key_id": "ASIA1FZDVOXSQD6GDJFL", "session_issuer_arn": "arn:aws:iam::811596193553:role/SecurityMonkey", "session_issuer_user_name": "SecurityMonkey"}, "network": {"source_ip": "255.253.125.115", "user_agent": "[Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56]", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1030, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "5a80e6d2-94ba-4018-80ed-822239b16377", "eventTime": "2017-05-27T04:45:20Z", "eventName": "GetBucketWebsite", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.253.125.115", "userAgent": "[Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56]", "awsRegion": "us-west-2", "userIdentity": {"type": "AssumedRole", "principalId": "AROAUB2AA5FQRGAHITW4A:cloudaux", "arn": "arn:aws:sts::811596193553:assumed-role/SecurityMonkey/cloudaux", "accountId": "811596193553", "accessKeyId": "ASIA1FZDVOXSQD6GDJFL", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2017-05-27T04:15:19Z"}, "sessionIssuer": {"type": "Role", "principalId": "AROAUB2AA5FQRGAHITW4A", "arn": "arn:aws:iam::811596193553:role/SecurityMonkey", "accountId": "811596193553", "userName": "SecurityMonkey"}}}, "requestParameters": {"bucketName": "level2-295510a051f3fcd006ae345973478972.flaws.cloud", "website": [""]}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "e693fe58-6eac-4506-b278-0b1d3d0d36b7", "record_id": "flaws_cloudtrail:0000047:e693fe58-6eac-4506-b278-0b1d3d0d36b7", "row_index": 47, "timestamp": "2017-05-27T04:45:21Z", "event_type": "GetBucketLocation", "event_source": "s3.amazonaws.com", "principal": {"type": "AssumedRole", "arn": "arn:aws:sts::811596193553:assumed-role/SecurityMonkey/cloudaux", "account_id": "811596193553", "principal_id": "AROAUB2AA5FQRGAHITW4A:cloudaux", "user_name": null, "access_key_id": "ASIAWWGE8SBRJDRN2KLG", "session_issuer_arn": "arn:aws:iam::811596193553:role/SecurityMonkey", "session_issuer_user_name": "SecurityMonkey"}, "network": {"source_ip": "255.253.125.115", "user_agent": "[Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56]", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 1032, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "e693fe58-6eac-4506-b278-0b1d3d0d36b7", "eventTime": "2017-05-27T04:45:21Z", "eventName": "GetBucketLocation", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.253.125.115", "userAgent": "[Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56]", "awsRegion": "us-east-1", "userIdentity": {"type": "AssumedRole", "principalId": "AROAUB2AA5FQRGAHITW4A:cloudaux", "arn": "arn:aws:sts::811596193553:assumed-role/SecurityMonkey/cloudaux", "accountId": "811596193553", "accessKeyId": "ASIAWWGE8SBRJDRN2KLG", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2017-05-27T04:15:23Z"}, "sessionIssuer": {"type": "Role", "principalId": "AROAUB2AA5FQRGAHITW4A", "arn": "arn:aws:iam::811596193553:role/SecurityMonkey", "accountId": "811596193553", "userName": "SecurityMonkey"}}}, "requestParameters": {"bucketName": "level3-2644b9e749c3d14e400f847199800c14.flaws.cloud", "location": [""]}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "039a946f-da43-42a9-98f1-91e998ea8d62", "record_id": "flaws_cloudtrail:0000048:039a946f-da43-42a9-98f1-91e998ea8d62", "row_index": 48, "timestamp": "2017-05-27T04:45:21Z", "event_type": "GetBucketNotification", "event_source": "s3.amazonaws.com", "principal": {"type": "AssumedRole", "arn": "arn:aws:sts::811596193553:assumed-role/SecurityMonkey/cloudaux", "account_id": "811596193553", "principal_id": "AROAUB2AA5FQRGAHITW4A:cloudaux", "user_name": null, "access_key_id": "ASIA1FZDVOXSQD6GDJFL", "session_issuer_arn": "arn:aws:iam::811596193553:role/SecurityMonkey", "session_issuer_user_name": "SecurityMonkey"}, "network": {"source_ip": "255.253.125.115", "user_agent": "[Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56]", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1040, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "039a946f-da43-42a9-98f1-91e998ea8d62", "eventTime": "2017-05-27T04:45:21Z", "eventName": "GetBucketNotification", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.253.125.115", "userAgent": "[Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56]", "awsRegion": "us-west-2", "userIdentity": {"type": "AssumedRole", "principalId": "AROAUB2AA5FQRGAHITW4A:cloudaux", "arn": "arn:aws:sts::811596193553:assumed-role/SecurityMonkey/cloudaux", "accountId": "811596193553", "accessKeyId": "ASIA1FZDVOXSQD6GDJFL", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2017-05-27T04:15:19Z"}, "sessionIssuer": {"type": "Role", "principalId": "AROAUB2AA5FQRGAHITW4A", "arn": "arn:aws:iam::811596193553:role/SecurityMonkey", "accountId": "811596193553", "userName": "SecurityMonkey"}}}, "requestParameters": {"notification": [""], "bucketName": "level3-2644b9e749c3d14e400f847199800c14.flaws.cloud"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "d450b519-45f4-49f7-9e76-235697ff03b6", "record_id": "flaws_cloudtrail:0000049:d450b519-45f4-49f7-9e76-235697ff03b6", "row_index": 49, "timestamp": "2017-05-27T04:45:21Z", "event_type": "GetBucketTagging", "event_source": "s3.amazonaws.com", "principal": {"type": "AssumedRole", "arn": "arn:aws:sts::811596193553:assumed-role/SecurityMonkey/cloudaux", "account_id": "811596193553", "principal_id": "AROAUB2AA5FQRGAHITW4A:cloudaux", "user_name": null, "access_key_id": "ASIA1FZDVOXSQD6GDJFL", "session_issuer_arn": "arn:aws:iam::811596193553:role/SecurityMonkey", "session_issuer_user_name": "SecurityMonkey"}, "network": {"source_ip": "255.253.125.115", "user_agent": "[Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56]", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1100, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "d450b519-45f4-49f7-9e76-235697ff03b6", "eventTime": "2017-05-27T04:45:21Z", "eventName": "GetBucketTagging", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.253.125.115", "userAgent": "[Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56]", "awsRegion": "us-west-2", "errorCode": "NoSuchTagSet", "errorMessage": "The TagSet does not exist", "userIdentity": {"type": "AssumedRole", "principalId": "AROAUB2AA5FQRGAHITW4A:cloudaux", "arn": "arn:aws:sts::811596193553:assumed-role/SecurityMonkey/cloudaux", "accountId": "811596193553", "accessKeyId": "ASIA1FZDVOXSQD6GDJFL", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2017-05-27T04:15:19Z"}, "sessionIssuer": {"type": "Role", "principalId": "AROAUB2AA5FQRGAHITW4A", "arn": "arn:aws:iam::811596193553:role/SecurityMonkey", "accountId": "811596193553", "userName": "SecurityMonkey"}}}, "requestParameters": {"tagging": [""], "bucketName": "level3-2644b9e749c3d14e400f847199800c14.flaws.cloud"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "640139a6-7e10-4930-b1dd-731a3d50c222", "record_id": "flaws_cloudtrail:0000050:640139a6-7e10-4930-b1dd-731a3d50c222", "row_index": 50, "timestamp": "2017-05-27T04:45:21Z", "event_type": "GetBucketPolicy", "event_source": "s3.amazonaws.com", "principal": {"type": "AssumedRole", "arn": "arn:aws:sts::811596193553:assumed-role/SecurityMonkey/cloudaux", "account_id": "811596193553", "principal_id": "AROAUB2AA5FQRGAHITW4A:cloudaux", "user_name": null, "access_key_id": "ASIA1FZDVOXSQD6GDJFL", "session_issuer_arn": "arn:aws:iam::811596193553:role/SecurityMonkey", "session_issuer_user_name": "SecurityMonkey"}, "network": {"source_ip": "255.253.125.115", "user_agent": "[Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56]", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1028, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "640139a6-7e10-4930-b1dd-731a3d50c222", "eventTime": "2017-05-27T04:45:21Z", "eventName": "GetBucketPolicy", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.253.125.115", "userAgent": "[Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56]", "awsRegion": "us-west-2", "userIdentity": {"type": "AssumedRole", "principalId": "AROAUB2AA5FQRGAHITW4A:cloudaux", "arn": "arn:aws:sts::811596193553:assumed-role/SecurityMonkey/cloudaux", "accountId": "811596193553", "accessKeyId": "ASIA1FZDVOXSQD6GDJFL", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2017-05-27T04:15:19Z"}, "sessionIssuer": {"type": "Role", "principalId": "AROAUB2AA5FQRGAHITW4A", "arn": "arn:aws:iam::811596193553:role/SecurityMonkey", "accountId": "811596193553", "userName": "SecurityMonkey"}}}, "requestParameters": {"bucketName": "level3-2644b9e749c3d14e400f847199800c14.flaws.cloud", "policy": [""]}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "56faf166-2456-404a-bd94-1c85a2f5ed1c", "record_id": "flaws_cloudtrail:0000051:56faf166-2456-404a-bd94-1c85a2f5ed1c", "row_index": 51, "timestamp": "2017-05-27T04:45:21Z", "event_type": "GetBucketWebsite", "event_source": "s3.amazonaws.com", "principal": {"type": "AssumedRole", "arn": "arn:aws:sts::811596193553:assumed-role/SecurityMonkey/cloudaux", "account_id": "811596193553", "principal_id": "AROAUB2AA5FQRGAHITW4A:cloudaux", "user_name": null, "access_key_id": "ASIA1FZDVOXSQD6GDJFL", "session_issuer_arn": "arn:aws:iam::811596193553:role/SecurityMonkey", "session_issuer_user_name": "SecurityMonkey"}, "network": {"source_ip": "255.253.125.115", "user_agent": "[Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56]", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1030, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "56faf166-2456-404a-bd94-1c85a2f5ed1c", "eventTime": "2017-05-27T04:45:21Z", "eventName": "GetBucketWebsite", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.253.125.115", "userAgent": "[Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56]", "awsRegion": "us-west-2", "userIdentity": {"type": "AssumedRole", "principalId": "AROAUB2AA5FQRGAHITW4A:cloudaux", "arn": "arn:aws:sts::811596193553:assumed-role/SecurityMonkey/cloudaux", "accountId": "811596193553", "accessKeyId": "ASIA1FZDVOXSQD6GDJFL", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2017-05-27T04:15:19Z"}, "sessionIssuer": {"type": "Role", "principalId": "AROAUB2AA5FQRGAHITW4A", "arn": "arn:aws:iam::811596193553:role/SecurityMonkey", "accountId": "811596193553", "userName": "SecurityMonkey"}}}, "requestParameters": {"bucketName": "level3-2644b9e749c3d14e400f847199800c14.flaws.cloud", "website": [""]}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "6c303e8f-5a2b-41a0-aff8-a4b0ab22c4d6", "record_id": "flaws_cloudtrail:0000052:6c303e8f-5a2b-41a0-aff8-a4b0ab22c4d6", "row_index": 52, "timestamp": "2017-05-27T04:45:21Z", "event_type": "GetBucketLifecycle", "event_source": "s3.amazonaws.com", "principal": {"type": "AssumedRole", "arn": "arn:aws:sts::811596193553:assumed-role/SecurityMonkey/cloudaux", "account_id": "811596193553", "principal_id": "AROAUB2AA5FQRGAHITW4A:cloudaux", "user_name": null, "access_key_id": "ASIA1FZDVOXSQD6GDJFL", "session_issuer_arn": "arn:aws:iam::811596193553:role/SecurityMonkey", "session_issuer_user_name": "SecurityMonkey"}, "network": {"source_ip": "255.253.125.115", "user_agent": "[Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56]", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1136, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "6c303e8f-5a2b-41a0-aff8-a4b0ab22c4d6", "eventTime": "2017-05-27T04:45:21Z", "eventName": "GetBucketLifecycle", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.253.125.115", "userAgent": "[Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56]", "awsRegion": "us-west-2", "errorCode": "NoSuchLifecycleConfiguration", "errorMessage": "The lifecycle configuration does not exist", "userIdentity": {"type": "AssumedRole", "principalId": "AROAUB2AA5FQRGAHITW4A:cloudaux", "arn": "arn:aws:sts::811596193553:assumed-role/SecurityMonkey/cloudaux", "accountId": "811596193553", "accessKeyId": "ASIA1FZDVOXSQD6GDJFL", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2017-05-27T04:15:19Z"}, "sessionIssuer": {"type": "Role", "principalId": "AROAUB2AA5FQRGAHITW4A", "arn": "arn:aws:iam::811596193553:role/SecurityMonkey", "accountId": "811596193553", "userName": "SecurityMonkey"}}}, "requestParameters": {"lifecycle": [""], "bucketName": "level2-295510a051f3fcd006ae345973478972.flaws.cloud"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "4b8e6975-f973-40da-976f-72668d2b195b", "record_id": "flaws_cloudtrail:0000053:4b8e6975-f973-40da-976f-72668d2b195b", "row_index": 53, "timestamp": "2017-05-27T04:45:21Z", "event_type": "GetBucketReplication", "event_source": "s3.amazonaws.com", "principal": {"type": "AssumedRole", "arn": "arn:aws:sts::811596193553:assumed-role/SecurityMonkey/cloudaux", "account_id": "811596193553", "principal_id": "AROAUB2AA5FQRGAHITW4A:cloudaux", "user_name": null, "access_key_id": "ASIA1FZDVOXSQD6GDJFL", "session_issuer_arn": "arn:aws:iam::811596193553:role/SecurityMonkey", "session_issuer_user_name": "SecurityMonkey"}, "network": {"source_ip": "255.253.125.115", "user_agent": "[Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56]", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1151, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "4b8e6975-f973-40da-976f-72668d2b195b", "eventTime": "2017-05-27T04:45:21Z", "eventName": "GetBucketReplication", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.253.125.115", "userAgent": "[Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56]", "awsRegion": "us-west-2", "errorCode": "ReplicationConfigurationNotFoundError", "errorMessage": "The replication configuration was not found", "userIdentity": {"type": "AssumedRole", "principalId": "AROAUB2AA5FQRGAHITW4A:cloudaux", "arn": "arn:aws:sts::811596193553:assumed-role/SecurityMonkey/cloudaux", "accountId": "811596193553", "accessKeyId": "ASIA1FZDVOXSQD6GDJFL", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2017-05-27T04:15:19Z"}, "sessionIssuer": {"type": "Role", "principalId": "AROAUB2AA5FQRGAHITW4A", "arn": "arn:aws:iam::811596193553:role/SecurityMonkey", "accountId": "811596193553", "userName": "SecurityMonkey"}}}, "requestParameters": {"replication": [""], "bucketName": "level3-2644b9e749c3d14e400f847199800c14.flaws.cloud"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "c15fcffd-b57e-4c02-ab14-54a4de016f9e", "record_id": "flaws_cloudtrail:0000054:c15fcffd-b57e-4c02-ab14-54a4de016f9e", "row_index": 54, "timestamp": "2017-05-27T04:45:21Z", "event_type": "GetBucketCors", "event_source": "s3.amazonaws.com", "principal": {"type": "AssumedRole", "arn": "arn:aws:sts::811596193553:assumed-role/SecurityMonkey/cloudaux", "account_id": "811596193553", "principal_id": "AROAUB2AA5FQRGAHITW4A:cloudaux", "user_name": null, "access_key_id": "ASIA1FZDVOXSQD6GDJFL", "session_issuer_arn": "arn:aws:iam::811596193553:role/SecurityMonkey", "session_issuer_user_name": "SecurityMonkey"}, "network": {"source_ip": "255.253.125.115", "user_agent": "[Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56]", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1117, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "c15fcffd-b57e-4c02-ab14-54a4de016f9e", "eventTime": "2017-05-27T04:45:21Z", "eventName": "GetBucketCors", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.253.125.115", "userAgent": "[Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56]", "awsRegion": "us-west-2", "errorCode": "NoSuchCORSConfiguration", "errorMessage": "The CORS configuration does not exist", "userIdentity": {"type": "AssumedRole", "principalId": "AROAUB2AA5FQRGAHITW4A:cloudaux", "arn": "arn:aws:sts::811596193553:assumed-role/SecurityMonkey/cloudaux", "accountId": "811596193553", "accessKeyId": "ASIA1FZDVOXSQD6GDJFL", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2017-05-27T04:15:19Z"}, "sessionIssuer": {"type": "Role", "principalId": "AROAUB2AA5FQRGAHITW4A", "arn": "arn:aws:iam::811596193553:role/SecurityMonkey", "accountId": "811596193553", "userName": "SecurityMonkey"}}}, "requestParameters": {"bucketName": "level3-2644b9e749c3d14e400f847199800c14.flaws.cloud", "cors": [""]}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "0db6e185-b42c-4fb5-b002-98304f9e5524", "record_id": "flaws_cloudtrail:0000055:0db6e185-b42c-4fb5-b002-98304f9e5524", "row_index": 55, "timestamp": "2017-05-27T04:45:21Z", "event_type": "GetBucketLogging", "event_source": "s3.amazonaws.com", "principal": {"type": "AssumedRole", "arn": "arn:aws:sts::811596193553:assumed-role/SecurityMonkey/cloudaux", "account_id": "811596193553", "principal_id": "AROAUB2AA5FQRGAHITW4A:cloudaux", "user_name": null, "access_key_id": "ASIA1FZDVOXSQD6GDJFL", "session_issuer_arn": "arn:aws:iam::811596193553:role/SecurityMonkey", "session_issuer_user_name": "SecurityMonkey"}, "network": {"source_ip": "255.253.125.115", "user_agent": "[Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56]", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1030, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "0db6e185-b42c-4fb5-b002-98304f9e5524", "eventTime": "2017-05-27T04:45:21Z", "eventName": "GetBucketLogging", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.253.125.115", "userAgent": "[Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56]", "awsRegion": "us-west-2", "userIdentity": {"type": "AssumedRole", "principalId": "AROAUB2AA5FQRGAHITW4A:cloudaux", "arn": "arn:aws:sts::811596193553:assumed-role/SecurityMonkey/cloudaux", "accountId": "811596193553", "accessKeyId": "ASIA1FZDVOXSQD6GDJFL", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2017-05-27T04:15:19Z"}, "sessionIssuer": {"type": "Role", "principalId": "AROAUB2AA5FQRGAHITW4A", "arn": "arn:aws:iam::811596193553:role/SecurityMonkey", "accountId": "811596193553", "userName": "SecurityMonkey"}}}, "requestParameters": {"logging": [""], "bucketName": "level3-2644b9e749c3d14e400f847199800c14.flaws.cloud"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "f376b5a4-4a19-4be7-8ae1-24a0587ccb03", "record_id": "flaws_cloudtrail:0000056:f376b5a4-4a19-4be7-8ae1-24a0587ccb03", "row_index": 56, "timestamp": "2017-05-27T04:45:21Z", "event_type": "GetBucketAcl", "event_source": "s3.amazonaws.com", "principal": {"type": "AssumedRole", "arn": "arn:aws:sts::811596193553:assumed-role/SecurityMonkey/cloudaux", "account_id": "811596193553", "principal_id": "AROAUB2AA5FQRGAHITW4A:cloudaux", "user_name": null, "access_key_id": "ASIA1FZDVOXSQD6GDJFL", "session_issuer_arn": "arn:aws:iam::811596193553:role/SecurityMonkey", "session_issuer_user_name": "SecurityMonkey"}, "network": {"source_ip": "255.253.125.115", "user_agent": "[Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56]", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1019, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "f376b5a4-4a19-4be7-8ae1-24a0587ccb03", "eventTime": "2017-05-27T04:45:21Z", "eventName": "GetBucketAcl", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.253.125.115", "userAgent": "[Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56]", "awsRegion": "us-west-2", "userIdentity": {"type": "AssumedRole", "principalId": "AROAUB2AA5FQRGAHITW4A:cloudaux", "arn": "arn:aws:sts::811596193553:assumed-role/SecurityMonkey/cloudaux", "accountId": "811596193553", "accessKeyId": "ASIA1FZDVOXSQD6GDJFL", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2017-05-27T04:15:19Z"}, "sessionIssuer": {"type": "Role", "principalId": "AROAUB2AA5FQRGAHITW4A", "arn": "arn:aws:iam::811596193553:role/SecurityMonkey", "accountId": "811596193553", "userName": "SecurityMonkey"}}}, "requestParameters": {"bucketName": "level3-2644b9e749c3d14e400f847199800c14.flaws.cloud", "acl": [""]}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "530b37f5-0249-46d5-ba7e-f6eed6bbd3ce", "record_id": "flaws_cloudtrail:0000057:530b37f5-0249-46d5-ba7e-f6eed6bbd3ce", "row_index": 57, "timestamp": "2017-05-27T04:45:22Z", "event_type": "GetBucketLocation", "event_source": "s3.amazonaws.com", "principal": {"type": "AssumedRole", "arn": "arn:aws:sts::811596193553:assumed-role/SecurityMonkey/cloudaux", "account_id": "811596193553", "principal_id": "AROAUB2AA5FQRGAHITW4A:cloudaux", "user_name": null, "access_key_id": "ASIAWWGE8SBRJDRN2KLG", "session_issuer_arn": "arn:aws:iam::811596193553:role/SecurityMonkey", "session_issuer_user_name": "SecurityMonkey"}, "network": {"source_ip": "255.253.125.115", "user_agent": "[Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56]", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 1032, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "530b37f5-0249-46d5-ba7e-f6eed6bbd3ce", "eventTime": "2017-05-27T04:45:22Z", "eventName": "GetBucketLocation", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.253.125.115", "userAgent": "[Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56]", "awsRegion": "us-east-1", "userIdentity": {"type": "AssumedRole", "principalId": "AROAUB2AA5FQRGAHITW4A:cloudaux", "arn": "arn:aws:sts::811596193553:assumed-role/SecurityMonkey/cloudaux", "accountId": "811596193553", "accessKeyId": "ASIAWWGE8SBRJDRN2KLG", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2017-05-27T04:15:23Z"}, "sessionIssuer": {"type": "Role", "principalId": "AROAUB2AA5FQRGAHITW4A", "arn": "arn:aws:iam::811596193553:role/SecurityMonkey", "accountId": "811596193553", "userName": "SecurityMonkey"}}}, "requestParameters": {"bucketName": "level4-974134b52e7c35aebcc4b45f19113936.flaws.cloud", "location": [""]}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "b06a8ed2-269b-405b-be67-a9b50416d02", "record_id": "flaws_cloudtrail:0000058:b06a8ed2-269b-405b-be67-a9b50416d02", "row_index": 58, "timestamp": "2017-05-27T04:45:22Z", "event_type": "GetBucketNotification", "event_source": "s3.amazonaws.com", "principal": {"type": "AssumedRole", "arn": "arn:aws:sts::811596193553:assumed-role/SecurityMonkey/cloudaux", "account_id": "811596193553", "principal_id": "AROAUB2AA5FQRGAHITW4A:cloudaux", "user_name": null, "access_key_id": "ASIA1FZDVOXSQD6GDJFL", "session_issuer_arn": "arn:aws:iam::811596193553:role/SecurityMonkey", "session_issuer_user_name": "SecurityMonkey"}, "network": {"source_ip": "255.253.125.115", "user_agent": "[Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56]", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1039, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "b06a8ed2-269b-405b-be67-a9b50416d02", "eventTime": "2017-05-27T04:45:22Z", "eventName": "GetBucketNotification", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.253.125.115", "userAgent": "[Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56]", "awsRegion": "us-west-2", "userIdentity": {"type": "AssumedRole", "principalId": "AROAUB2AA5FQRGAHITW4A:cloudaux", "arn": "arn:aws:sts::811596193553:assumed-role/SecurityMonkey/cloudaux", "accountId": "811596193553", "accessKeyId": "ASIA1FZDVOXSQD6GDJFL", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2017-05-27T04:15:19Z"}, "sessionIssuer": {"type": "Role", "principalId": "AROAUB2AA5FQRGAHITW4A", "arn": "arn:aws:iam::811596193553:role/SecurityMonkey", "accountId": "811596193553", "userName": "SecurityMonkey"}}}, "requestParameters": {"notification": [""], "bucketName": "level4-974134b52e7c35aebcc4b45f19113936.flaws.cloud"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "6b0b3865-cab0-4871-bb3f-08233433d3f4", "record_id": "flaws_cloudtrail:0000059:6b0b3865-cab0-4871-bb3f-08233433d3f4", "row_index": 59, "timestamp": "2017-05-27T04:45:22Z", "event_type": "GetBucketReplication", "event_source": "s3.amazonaws.com", "principal": {"type": "AssumedRole", "arn": "arn:aws:sts::811596193553:assumed-role/SecurityMonkey/cloudaux", "account_id": "811596193553", "principal_id": "AROAUB2AA5FQRGAHITW4A:cloudaux", "user_name": null, "access_key_id": "ASIA1FZDVOXSQD6GDJFL", "session_issuer_arn": "arn:aws:iam::811596193553:role/SecurityMonkey", "session_issuer_user_name": "SecurityMonkey"}, "network": {"source_ip": "255.253.125.115", "user_agent": "[Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56]", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1151, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "6b0b3865-cab0-4871-bb3f-08233433d3f4", "eventTime": "2017-05-27T04:45:22Z", "eventName": "GetBucketReplication", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.253.125.115", "userAgent": "[Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56]", "awsRegion": "us-west-2", "errorCode": "ReplicationConfigurationNotFoundError", "errorMessage": "The replication configuration was not found", "userIdentity": {"type": "AssumedRole", "principalId": "AROAUB2AA5FQRGAHITW4A:cloudaux", "arn": "arn:aws:sts::811596193553:assumed-role/SecurityMonkey/cloudaux", "accountId": "811596193553", "accessKeyId": "ASIA1FZDVOXSQD6GDJFL", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2017-05-27T04:15:19Z"}, "sessionIssuer": {"type": "Role", "principalId": "AROAUB2AA5FQRGAHITW4A", "arn": "arn:aws:iam::811596193553:role/SecurityMonkey", "accountId": "811596193553", "userName": "SecurityMonkey"}}}, "requestParameters": {"replication": [""], "bucketName": "level4-974134b52e7c35aebcc4b45f19113936.flaws.cloud"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "861d1e1f-b7f2-4907-940d-d3e95514e620", "record_id": "flaws_cloudtrail:0000060:861d1e1f-b7f2-4907-940d-d3e95514e620", "row_index": 60, "timestamp": "2017-05-27T04:45:22Z", "event_type": "GetBucketLifecycle", "event_source": "s3.amazonaws.com", "principal": {"type": "AssumedRole", "arn": "arn:aws:sts::811596193553:assumed-role/SecurityMonkey/cloudaux", "account_id": "811596193553", "principal_id": "AROAUB2AA5FQRGAHITW4A:cloudaux", "user_name": null, "access_key_id": "ASIA1FZDVOXSQD6GDJFL", "session_issuer_arn": "arn:aws:iam::811596193553:role/SecurityMonkey", "session_issuer_user_name": "SecurityMonkey"}, "network": {"source_ip": "255.253.125.115", "user_agent": "[Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56]", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1137, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "861d1e1f-b7f2-4907-940d-d3e95514e620", "eventTime": "2017-05-27T04:45:22Z", "eventName": "GetBucketLifecycle", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.253.125.115", "userAgent": "[Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56]", "awsRegion": "us-west-2", "errorCode": "NoSuchLifecycleConfiguration", "errorMessage": "The lifecycle configuration does not exist", "userIdentity": {"type": "AssumedRole", "principalId": "AROAUB2AA5FQRGAHITW4A:cloudaux", "arn": "arn:aws:sts::811596193553:assumed-role/SecurityMonkey/cloudaux", "accountId": "811596193553", "accessKeyId": "ASIA1FZDVOXSQD6GDJFL", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2017-05-27T04:15:19Z"}, "sessionIssuer": {"type": "Role", "principalId": "AROAUB2AA5FQRGAHITW4A", "arn": "arn:aws:iam::811596193553:role/SecurityMonkey", "accountId": "811596193553", "userName": "SecurityMonkey"}}}, "requestParameters": {"lifecycle": [""], "bucketName": "level3-2644b9e749c3d14e400f847199800c14.flaws.cloud"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "254a649c-eba7-4ca8-9cc0-afb9e2580e50", "record_id": "flaws_cloudtrail:0000061:254a649c-eba7-4ca8-9cc0-afb9e2580e50", "row_index": 61, "timestamp": "2017-05-27T04:45:22Z", "event_type": "GetBucketWebsite", "event_source": "s3.amazonaws.com", "principal": {"type": "AssumedRole", "arn": "arn:aws:sts::811596193553:assumed-role/SecurityMonkey/cloudaux", "account_id": "811596193553", "principal_id": "AROAUB2AA5FQRGAHITW4A:cloudaux", "user_name": null, "access_key_id": "ASIA1FZDVOXSQD6GDJFL", "session_issuer_arn": "arn:aws:iam::811596193553:role/SecurityMonkey", "session_issuer_user_name": "SecurityMonkey"}, "network": {"source_ip": "255.253.125.115", "user_agent": "[Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56]", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1030, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "254a649c-eba7-4ca8-9cc0-afb9e2580e50", "eventTime": "2017-05-27T04:45:22Z", "eventName": "GetBucketWebsite", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.253.125.115", "userAgent": "[Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56]", "awsRegion": "us-west-2", "userIdentity": {"type": "AssumedRole", "principalId": "AROAUB2AA5FQRGAHITW4A:cloudaux", "arn": "arn:aws:sts::811596193553:assumed-role/SecurityMonkey/cloudaux", "accountId": "811596193553", "accessKeyId": "ASIA1FZDVOXSQD6GDJFL", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2017-05-27T04:15:19Z"}, "sessionIssuer": {"type": "Role", "principalId": "AROAUB2AA5FQRGAHITW4A", "arn": "arn:aws:iam::811596193553:role/SecurityMonkey", "accountId": "811596193553", "userName": "SecurityMonkey"}}}, "requestParameters": {"bucketName": "level4-974134b52e7c35aebcc4b45f19113936.flaws.cloud", "website": [""]}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "1491d450-832c-4a2f-b7a4-2cd2d540a1e7", "record_id": "flaws_cloudtrail:0000062:1491d450-832c-4a2f-b7a4-2cd2d540a1e7", "row_index": 62, "timestamp": "2017-05-27T04:45:22Z", "event_type": "GetBucketVersioning", "event_source": "s3.amazonaws.com", "principal": {"type": "AssumedRole", "arn": "arn:aws:sts::811596193553:assumed-role/SecurityMonkey/cloudaux", "account_id": "811596193553", "principal_id": "AROAUB2AA5FQRGAHITW4A:cloudaux", "user_name": null, "access_key_id": "ASIA1FZDVOXSQD6GDJFL", "session_issuer_arn": "arn:aws:iam::811596193553:role/SecurityMonkey", "session_issuer_user_name": "SecurityMonkey"}, "network": {"source_ip": "255.253.125.115", "user_agent": "[Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56]", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1034, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "1491d450-832c-4a2f-b7a4-2cd2d540a1e7", "eventTime": "2017-05-27T04:45:22Z", "eventName": "GetBucketVersioning", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.253.125.115", "userAgent": "[Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56]", "awsRegion": "us-west-2", "userIdentity": {"type": "AssumedRole", "principalId": "AROAUB2AA5FQRGAHITW4A:cloudaux", "arn": "arn:aws:sts::811596193553:assumed-role/SecurityMonkey/cloudaux", "accountId": "811596193553", "accessKeyId": "ASIA1FZDVOXSQD6GDJFL", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2017-05-27T04:15:19Z"}, "sessionIssuer": {"type": "Role", "principalId": "AROAUB2AA5FQRGAHITW4A", "arn": "arn:aws:iam::811596193553:role/SecurityMonkey", "accountId": "811596193553", "userName": "SecurityMonkey"}}}, "requestParameters": {"bucketName": "level3-2644b9e749c3d14e400f847199800c14.flaws.cloud", "versioning": [""]}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "7fe06c1c-5a09-4d7f-8747-e8fb204c6420", "record_id": "flaws_cloudtrail:0000063:7fe06c1c-5a09-4d7f-8747-e8fb204c6420", "row_index": 63, "timestamp": "2017-05-27T04:45:22Z", "event_type": "GetBucketTagging", "event_source": "s3.amazonaws.com", "principal": {"type": "AssumedRole", "arn": "arn:aws:sts::811596193553:assumed-role/SecurityMonkey/cloudaux", "account_id": "811596193553", "principal_id": "AROAUB2AA5FQRGAHITW4A:cloudaux", "user_name": null, "access_key_id": "ASIA1FZDVOXSQD6GDJFL", "session_issuer_arn": "arn:aws:iam::811596193553:role/SecurityMonkey", "session_issuer_user_name": "SecurityMonkey"}, "network": {"source_ip": "255.253.125.115", "user_agent": "[Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56]", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1100, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "7fe06c1c-5a09-4d7f-8747-e8fb204c6420", "eventTime": "2017-05-27T04:45:22Z", "eventName": "GetBucketTagging", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.253.125.115", "userAgent": "[Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56]", "awsRegion": "us-west-2", "errorCode": "NoSuchTagSet", "errorMessage": "The TagSet does not exist", "userIdentity": {"type": "AssumedRole", "principalId": "AROAUB2AA5FQRGAHITW4A:cloudaux", "arn": "arn:aws:sts::811596193553:assumed-role/SecurityMonkey/cloudaux", "accountId": "811596193553", "accessKeyId": "ASIA1FZDVOXSQD6GDJFL", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2017-05-27T04:15:19Z"}, "sessionIssuer": {"type": "Role", "principalId": "AROAUB2AA5FQRGAHITW4A", "arn": "arn:aws:iam::811596193553:role/SecurityMonkey", "accountId": "811596193553", "userName": "SecurityMonkey"}}}, "requestParameters": {"tagging": [""], "bucketName": "level4-974134b52e7c35aebcc4b45f19113936.flaws.cloud"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "49f68a44-b2d3-494f-abec-bb853162f917", "record_id": "flaws_cloudtrail:0000064:49f68a44-b2d3-494f-abec-bb853162f917", "row_index": 64, "timestamp": "2017-05-27T04:45:22Z", "event_type": "GetBucketPolicy", "event_source": "s3.amazonaws.com", "principal": {"type": "AssumedRole", "arn": "arn:aws:sts::811596193553:assumed-role/SecurityMonkey/cloudaux", "account_id": "811596193553", "principal_id": "AROAUB2AA5FQRGAHITW4A:cloudaux", "user_name": null, "access_key_id": "ASIA1FZDVOXSQD6GDJFL", "session_issuer_arn": "arn:aws:iam::811596193553:role/SecurityMonkey", "session_issuer_user_name": "SecurityMonkey"}, "network": {"source_ip": "255.253.125.115", "user_agent": "[Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56]", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1025, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "49f68a44-b2d3-494f-abec-bb853162f917", "eventTime": "2017-05-27T04:45:22Z", "eventName": "GetBucketPolicy", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.253.125.115", "userAgent": "[Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56]", "awsRegion": "us-west-2", "userIdentity": {"type": "AssumedRole", "principalId": "AROAUB2AA5FQRGAHITW4A:cloudaux", "arn": "arn:aws:sts::811596193553:assumed-role/SecurityMonkey/cloudaux", "accountId": "811596193553", "accessKeyId": "ASIA1FZDVOXSQD6GDJFL", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2017-05-27T04:15:19Z"}, "sessionIssuer": {"type": "Role", "principalId": "AROAUB2AA5FQRGAHITW4A", "arn": "arn:aws:iam::811596193553:role/SecurityMonkey", "accountId": "811596193553", "userName": "SecurityMonkey"}}}, "requestParameters": {"bucketName": "level4-974134b52e7c35aebcc4b45f19113936.flaws.cloud", "policy": [""]}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "7d9dd358-536c-4c8a-88e1-c85f3cf9baf6", "record_id": "flaws_cloudtrail:0000065:7d9dd358-536c-4c8a-88e1-c85f3cf9baf6", "row_index": 65, "timestamp": "2017-05-27T04:45:22Z", "event_type": "GetBucketAcl", "event_source": "s3.amazonaws.com", "principal": {"type": "AssumedRole", "arn": "arn:aws:sts::811596193553:assumed-role/SecurityMonkey/cloudaux", "account_id": "811596193553", "principal_id": "AROAUB2AA5FQRGAHITW4A:cloudaux", "user_name": null, "access_key_id": "ASIA1FZDVOXSQD6GDJFL", "session_issuer_arn": "arn:aws:iam::811596193553:role/SecurityMonkey", "session_issuer_user_name": "SecurityMonkey"}, "network": {"source_ip": "255.253.125.115", "user_agent": "[Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56]", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1021, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "7d9dd358-536c-4c8a-88e1-c85f3cf9baf6", "eventTime": "2017-05-27T04:45:22Z", "eventName": "GetBucketAcl", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.253.125.115", "userAgent": "[Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56]", "awsRegion": "us-west-2", "userIdentity": {"type": "AssumedRole", "principalId": "AROAUB2AA5FQRGAHITW4A:cloudaux", "arn": "arn:aws:sts::811596193553:assumed-role/SecurityMonkey/cloudaux", "accountId": "811596193553", "accessKeyId": "ASIA1FZDVOXSQD6GDJFL", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2017-05-27T04:15:19Z"}, "sessionIssuer": {"type": "Role", "principalId": "AROAUB2AA5FQRGAHITW4A", "arn": "arn:aws:iam::811596193553:role/SecurityMonkey", "accountId": "811596193553", "userName": "SecurityMonkey"}}}, "requestParameters": {"bucketName": "level4-974134b52e7c35aebcc4b45f19113936.flaws.cloud", "acl": [""]}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "b8607c2d-77b4-44a3-87f5-2e133a3c7202", "record_id": "flaws_cloudtrail:0000066:b8607c2d-77b4-44a3-87f5-2e133a3c7202", "row_index": 66, "timestamp": "2017-05-27T04:45:22Z", "event_type": "GetBucketLogging", "event_source": "s3.amazonaws.com", "principal": {"type": "AssumedRole", "arn": "arn:aws:sts::811596193553:assumed-role/SecurityMonkey/cloudaux", "account_id": "811596193553", "principal_id": "AROAUB2AA5FQRGAHITW4A:cloudaux", "user_name": null, "access_key_id": "ASIA1FZDVOXSQD6GDJFL", "session_issuer_arn": "arn:aws:iam::811596193553:role/SecurityMonkey", "session_issuer_user_name": "SecurityMonkey"}, "network": {"source_ip": "255.253.125.115", "user_agent": "[Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56]", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1030, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "b8607c2d-77b4-44a3-87f5-2e133a3c7202", "eventTime": "2017-05-27T04:45:22Z", "eventName": "GetBucketLogging", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.253.125.115", "userAgent": "[Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56]", "awsRegion": "us-west-2", "userIdentity": {"type": "AssumedRole", "principalId": "AROAUB2AA5FQRGAHITW4A:cloudaux", "arn": "arn:aws:sts::811596193553:assumed-role/SecurityMonkey/cloudaux", "accountId": "811596193553", "accessKeyId": "ASIA1FZDVOXSQD6GDJFL", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2017-05-27T04:15:19Z"}, "sessionIssuer": {"type": "Role", "principalId": "AROAUB2AA5FQRGAHITW4A", "arn": "arn:aws:iam::811596193553:role/SecurityMonkey", "accountId": "811596193553", "userName": "SecurityMonkey"}}}, "requestParameters": {"logging": [""], "bucketName": "level4-974134b52e7c35aebcc4b45f19113936.flaws.cloud"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "d98f0902-2eb9-4f8f-8647-7cb8bf1f6bf8", "record_id": "flaws_cloudtrail:0000067:d98f0902-2eb9-4f8f-8647-7cb8bf1f6bf8", "row_index": 67, "timestamp": "2017-05-27T04:45:22Z", "event_type": "GetBucketCors", "event_source": "s3.amazonaws.com", "principal": {"type": "AssumedRole", "arn": "arn:aws:sts::811596193553:assumed-role/SecurityMonkey/cloudaux", "account_id": "811596193553", "principal_id": "AROAUB2AA5FQRGAHITW4A:cloudaux", "user_name": null, "access_key_id": "ASIA1FZDVOXSQD6GDJFL", "session_issuer_arn": "arn:aws:iam::811596193553:role/SecurityMonkey", "session_issuer_user_name": "SecurityMonkey"}, "network": {"source_ip": "255.253.125.115", "user_agent": "[Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56]", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1117, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "d98f0902-2eb9-4f8f-8647-7cb8bf1f6bf8", "eventTime": "2017-05-27T04:45:22Z", "eventName": "GetBucketCors", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.253.125.115", "userAgent": "[Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56]", "awsRegion": "us-west-2", "errorCode": "NoSuchCORSConfiguration", "errorMessage": "The CORS configuration does not exist", "userIdentity": {"type": "AssumedRole", "principalId": "AROAUB2AA5FQRGAHITW4A:cloudaux", "arn": "arn:aws:sts::811596193553:assumed-role/SecurityMonkey/cloudaux", "accountId": "811596193553", "accessKeyId": "ASIA1FZDVOXSQD6GDJFL", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2017-05-27T04:15:19Z"}, "sessionIssuer": {"type": "Role", "principalId": "AROAUB2AA5FQRGAHITW4A", "arn": "arn:aws:iam::811596193553:role/SecurityMonkey", "accountId": "811596193553", "userName": "SecurityMonkey"}}}, "requestParameters": {"bucketName": "level4-974134b52e7c35aebcc4b45f19113936.flaws.cloud", "cors": [""]}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "9b2da14f-2285-44aa-a3cf-2bc6e909ff6e", "record_id": "flaws_cloudtrail:0000068:9b2da14f-2285-44aa-a3cf-2bc6e909ff6e", "row_index": 68, "timestamp": "2017-05-27T04:45:23Z", "event_type": "GetBucketLocation", "event_source": "s3.amazonaws.com", "principal": {"type": "AssumedRole", "arn": "arn:aws:sts::811596193553:assumed-role/SecurityMonkey/cloudaux", "account_id": "811596193553", "principal_id": "AROAUB2AA5FQRGAHITW4A:cloudaux", "user_name": null, "access_key_id": "ASIAWWGE8SBRJDRN2KLG", "session_issuer_arn": "arn:aws:iam::811596193553:role/SecurityMonkey", "session_issuer_user_name": "SecurityMonkey"}, "network": {"source_ip": "255.253.125.115", "user_agent": "[Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56]", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 1033, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "9b2da14f-2285-44aa-a3cf-2bc6e909ff6e", "eventTime": "2017-05-27T04:45:23Z", "eventName": "GetBucketLocation", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.253.125.115", "userAgent": "[Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56]", "awsRegion": "us-east-1", "userIdentity": {"type": "AssumedRole", "principalId": "AROAUB2AA5FQRGAHITW4A:cloudaux", "arn": "arn:aws:sts::811596193553:assumed-role/SecurityMonkey/cloudaux", "accountId": "811596193553", "accessKeyId": "ASIAWWGE8SBRJDRN2KLG", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2017-05-27T04:15:23Z"}, "sessionIssuer": {"type": "Role", "principalId": "AROAUB2AA5FQRGAHITW4A", "arn": "arn:aws:iam::811596193553:role/SecurityMonkey", "accountId": "811596193553", "userName": "SecurityMonkey"}}}, "requestParameters": {"bucketName": "level5-8dbc21dbbd6129208d054061ef063f04.flaws.cloud", "location": [""]}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "24db79c7-4939-4688-9de6-0e2fd11992", "record_id": "flaws_cloudtrail:0000069:24db79c7-4939-4688-9de6-0e2fd11992", "row_index": 69, "timestamp": "2017-05-27T04:45:23Z", "event_type": "GetBucketReplication", "event_source": "s3.amazonaws.com", "principal": {"type": "AssumedRole", "arn": "arn:aws:sts::811596193553:assumed-role/SecurityMonkey/cloudaux", "account_id": "811596193553", "principal_id": "AROAUB2AA5FQRGAHITW4A:cloudaux", "user_name": null, "access_key_id": "ASIA1FZDVOXSQD6GDJFL", "session_issuer_arn": "arn:aws:iam::811596193553:role/SecurityMonkey", "session_issuer_user_name": "SecurityMonkey"}, "network": {"source_ip": "255.253.125.115", "user_agent": "[Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56]", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1150, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "24db79c7-4939-4688-9de6-0e2fd11992", "eventTime": "2017-05-27T04:45:23Z", "eventName": "GetBucketReplication", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.253.125.115", "userAgent": "[Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56]", "awsRegion": "us-west-2", "errorCode": "ReplicationConfigurationNotFoundError", "errorMessage": "The replication configuration was not found", "userIdentity": {"type": "AssumedRole", "principalId": "AROAUB2AA5FQRGAHITW4A:cloudaux", "arn": "arn:aws:sts::811596193553:assumed-role/SecurityMonkey/cloudaux", "accountId": "811596193553", "accessKeyId": "ASIA1FZDVOXSQD6GDJFL", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2017-05-27T04:15:19Z"}, "sessionIssuer": {"type": "Role", "principalId": "AROAUB2AA5FQRGAHITW4A", "arn": "arn:aws:iam::811596193553:role/SecurityMonkey", "accountId": "811596193553", "userName": "SecurityMonkey"}}}, "requestParameters": {"replication": [""], "bucketName": "level5-8dbc21dbbd6129208d054061ef063f04.flaws.cloud"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "89c52e19-1a15-42eb-b45d-79cfc938327b", "record_id": "flaws_cloudtrail:0000070:89c52e19-1a15-42eb-b45d-79cfc938327b", "row_index": 70, "timestamp": "2017-05-27T04:45:23Z", "event_type": "GetBucketCors", "event_source": "s3.amazonaws.com", "principal": {"type": "AssumedRole", "arn": "arn:aws:sts::811596193553:assumed-role/SecurityMonkey/cloudaux", "account_id": "811596193553", "principal_id": "AROAUB2AA5FQRGAHITW4A:cloudaux", "user_name": null, "access_key_id": "ASIA1FZDVOXSQD6GDJFL", "session_issuer_arn": "arn:aws:iam::811596193553:role/SecurityMonkey", "session_issuer_user_name": "SecurityMonkey"}, "network": {"source_ip": "255.253.125.115", "user_agent": "[Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56]", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1117, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "89c52e19-1a15-42eb-b45d-79cfc938327b", "eventTime": "2017-05-27T04:45:23Z", "eventName": "GetBucketCors", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.253.125.115", "userAgent": "[Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56]", "awsRegion": "us-west-2", "errorCode": "NoSuchCORSConfiguration", "errorMessage": "The CORS configuration does not exist", "userIdentity": {"type": "AssumedRole", "principalId": "AROAUB2AA5FQRGAHITW4A:cloudaux", "arn": "arn:aws:sts::811596193553:assumed-role/SecurityMonkey/cloudaux", "accountId": "811596193553", "accessKeyId": "ASIA1FZDVOXSQD6GDJFL", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2017-05-27T04:15:19Z"}, "sessionIssuer": {"type": "Role", "principalId": "AROAUB2AA5FQRGAHITW4A", "arn": "arn:aws:iam::811596193553:role/SecurityMonkey", "accountId": "811596193553", "userName": "SecurityMonkey"}}}, "requestParameters": {"bucketName": "level5-8dbc21dbbd6129208d054061ef063f04.flaws.cloud", "cors": [""]}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "c1744f6b-367e-4078-b539-e8f128234d45", "record_id": "flaws_cloudtrail:0000071:c1744f6b-367e-4078-b539-e8f128234d45", "row_index": 71, "timestamp": "2017-05-27T04:45:23Z", "event_type": "GetBucketNotification", "event_source": "s3.amazonaws.com", "principal": {"type": "AssumedRole", "arn": "arn:aws:sts::811596193553:assumed-role/SecurityMonkey/cloudaux", "account_id": "811596193553", "principal_id": "AROAUB2AA5FQRGAHITW4A:cloudaux", "user_name": null, "access_key_id": "ASIA1FZDVOXSQD6GDJFL", "session_issuer_arn": "arn:aws:iam::811596193553:role/SecurityMonkey", "session_issuer_user_name": "SecurityMonkey"}, "network": {"source_ip": "255.253.125.115", "user_agent": "[Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56]", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1040, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "c1744f6b-367e-4078-b539-e8f128234d45", "eventTime": "2017-05-27T04:45:23Z", "eventName": "GetBucketNotification", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.253.125.115", "userAgent": "[Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56]", "awsRegion": "us-west-2", "userIdentity": {"type": "AssumedRole", "principalId": "AROAUB2AA5FQRGAHITW4A:cloudaux", "arn": "arn:aws:sts::811596193553:assumed-role/SecurityMonkey/cloudaux", "accountId": "811596193553", "accessKeyId": "ASIA1FZDVOXSQD6GDJFL", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2017-05-27T04:15:19Z"}, "sessionIssuer": {"type": "Role", "principalId": "AROAUB2AA5FQRGAHITW4A", "arn": "arn:aws:iam::811596193553:role/SecurityMonkey", "accountId": "811596193553", "userName": "SecurityMonkey"}}}, "requestParameters": {"notification": [""], "bucketName": "level5-8dbc21dbbd6129208d054061ef063f04.flaws.cloud"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "70bc938e-01c7-4ee1-ad80-c01c5e45c511", "record_id": "flaws_cloudtrail:0000072:70bc938e-01c7-4ee1-ad80-c01c5e45c511", "row_index": 72, "timestamp": "2017-05-27T04:45:23Z", "event_type": "GetBucketAcl", "event_source": "s3.amazonaws.com", "principal": {"type": "AssumedRole", "arn": "arn:aws:sts::811596193553:assumed-role/SecurityMonkey/cloudaux", "account_id": "811596193553", "principal_id": "AROAUB2AA5FQRGAHITW4A:cloudaux", "user_name": null, "access_key_id": "ASIA1FZDVOXSQD6GDJFL", "session_issuer_arn": "arn:aws:iam::811596193553:role/SecurityMonkey", "session_issuer_user_name": "SecurityMonkey"}, "network": {"source_ip": "255.253.125.115", "user_agent": "[Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56]", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1023, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "70bc938e-01c7-4ee1-ad80-c01c5e45c511", "eventTime": "2017-05-27T04:45:23Z", "eventName": "GetBucketAcl", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.253.125.115", "userAgent": "[Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56]", "awsRegion": "us-west-2", "userIdentity": {"type": "AssumedRole", "principalId": "AROAUB2AA5FQRGAHITW4A:cloudaux", "arn": "arn:aws:sts::811596193553:assumed-role/SecurityMonkey/cloudaux", "accountId": "811596193553", "accessKeyId": "ASIA1FZDVOXSQD6GDJFL", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2017-05-27T04:15:19Z"}, "sessionIssuer": {"type": "Role", "principalId": "AROAUB2AA5FQRGAHITW4A", "arn": "arn:aws:iam::811596193553:role/SecurityMonkey", "accountId": "811596193553", "userName": "SecurityMonkey"}}}, "requestParameters": {"bucketName": "level5-8dbc21dbbd6129208d054061ef063f04.flaws.cloud", "acl": [""]}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "ace29786-c5fa-4217-99c8-96aa92395", "record_id": "flaws_cloudtrail:0000073:ace29786-c5fa-4217-99c8-96aa92395", "row_index": 73, "timestamp": "2017-05-27T04:45:23Z", "event_type": "GetBucketLifecycle", "event_source": "s3.amazonaws.com", "principal": {"type": "AssumedRole", "arn": "arn:aws:sts::811596193553:assumed-role/SecurityMonkey/cloudaux", "account_id": "811596193553", "principal_id": "AROAUB2AA5FQRGAHITW4A:cloudaux", "user_name": null, "access_key_id": "ASIA1FZDVOXSQD6GDJFL", "session_issuer_arn": "arn:aws:iam::811596193553:role/SecurityMonkey", "session_issuer_user_name": "SecurityMonkey"}, "network": {"source_ip": "255.253.125.115", "user_agent": "[Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56]", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1134, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "ace29786-c5fa-4217-99c8-96aa92395", "eventTime": "2017-05-27T04:45:23Z", "eventName": "GetBucketLifecycle", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.253.125.115", "userAgent": "[Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56]", "awsRegion": "us-west-2", "errorCode": "NoSuchLifecycleConfiguration", "errorMessage": "The lifecycle configuration does not exist", "userIdentity": {"type": "AssumedRole", "principalId": "AROAUB2AA5FQRGAHITW4A:cloudaux", "arn": "arn:aws:sts::811596193553:assumed-role/SecurityMonkey/cloudaux", "accountId": "811596193553", "accessKeyId": "ASIA1FZDVOXSQD6GDJFL", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2017-05-27T04:15:19Z"}, "sessionIssuer": {"type": "Role", "principalId": "AROAUB2AA5FQRGAHITW4A", "arn": "arn:aws:iam::811596193553:role/SecurityMonkey", "accountId": "811596193553", "userName": "SecurityMonkey"}}}, "requestParameters": {"lifecycle": [""], "bucketName": "level4-974134b52e7c35aebcc4b45f19113936.flaws.cloud"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "2214c81c-82d5-42a7-bb6f-f523e1955825", "record_id": "flaws_cloudtrail:0000074:2214c81c-82d5-42a7-bb6f-f523e1955825", "row_index": 74, "timestamp": "2017-05-27T04:45:23Z", "event_type": "GetBucketPolicy", "event_source": "s3.amazonaws.com", "principal": {"type": "AssumedRole", "arn": "arn:aws:sts::811596193553:assumed-role/SecurityMonkey/cloudaux", "account_id": "811596193553", "principal_id": "AROAUB2AA5FQRGAHITW4A:cloudaux", "user_name": null, "access_key_id": "ASIA1FZDVOXSQD6GDJFL", "session_issuer_arn": "arn:aws:iam::811596193553:role/SecurityMonkey", "session_issuer_user_name": "SecurityMonkey"}, "network": {"source_ip": "255.253.125.115", "user_agent": "[Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56]", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1029, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "2214c81c-82d5-42a7-bb6f-f523e1955825", "eventTime": "2017-05-27T04:45:23Z", "eventName": "GetBucketPolicy", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.253.125.115", "userAgent": "[Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56]", "awsRegion": "us-west-2", "userIdentity": {"type": "AssumedRole", "principalId": "AROAUB2AA5FQRGAHITW4A:cloudaux", "arn": "arn:aws:sts::811596193553:assumed-role/SecurityMonkey/cloudaux", "accountId": "811596193553", "accessKeyId": "ASIA1FZDVOXSQD6GDJFL", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2017-05-27T04:15:19Z"}, "sessionIssuer": {"type": "Role", "principalId": "AROAUB2AA5FQRGAHITW4A", "arn": "arn:aws:iam::811596193553:role/SecurityMonkey", "accountId": "811596193553", "userName": "SecurityMonkey"}}}, "requestParameters": {"bucketName": "level5-8dbc21dbbd6129208d054061ef063f04.flaws.cloud", "policy": [""]}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "be88c80e-d127-4918-bbae-bd9c7cffd609", "record_id": "flaws_cloudtrail:0000075:be88c80e-d127-4918-bbae-bd9c7cffd609", "row_index": 75, "timestamp": "2017-05-27T04:45:23Z", "event_type": "GetBucketLogging", "event_source": "s3.amazonaws.com", "principal": {"type": "AssumedRole", "arn": "arn:aws:sts::811596193553:assumed-role/SecurityMonkey/cloudaux", "account_id": "811596193553", "principal_id": "AROAUB2AA5FQRGAHITW4A:cloudaux", "user_name": null, "access_key_id": "ASIA1FZDVOXSQD6GDJFL", "session_issuer_arn": "arn:aws:iam::811596193553:role/SecurityMonkey", "session_issuer_user_name": "SecurityMonkey"}, "network": {"source_ip": "255.253.125.115", "user_agent": "[Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56]", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1030, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "be88c80e-d127-4918-bbae-bd9c7cffd609", "eventTime": "2017-05-27T04:45:23Z", "eventName": "GetBucketLogging", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.253.125.115", "userAgent": "[Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56]", "awsRegion": "us-west-2", "userIdentity": {"type": "AssumedRole", "principalId": "AROAUB2AA5FQRGAHITW4A:cloudaux", "arn": "arn:aws:sts::811596193553:assumed-role/SecurityMonkey/cloudaux", "accountId": "811596193553", "accessKeyId": "ASIA1FZDVOXSQD6GDJFL", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2017-05-27T04:15:19Z"}, "sessionIssuer": {"type": "Role", "principalId": "AROAUB2AA5FQRGAHITW4A", "arn": "arn:aws:iam::811596193553:role/SecurityMonkey", "accountId": "811596193553", "userName": "SecurityMonkey"}}}, "requestParameters": {"logging": [""], "bucketName": "level5-8dbc21dbbd6129208d054061ef063f04.flaws.cloud"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "f8d25a38-c4ff-4b7d-973e-fa4834e3a2ef", "record_id": "flaws_cloudtrail:0000076:f8d25a38-c4ff-4b7d-973e-fa4834e3a2ef", "row_index": 76, "timestamp": "2017-05-27T04:45:23Z", "event_type": "GetBucketWebsite", "event_source": "s3.amazonaws.com", "principal": {"type": "AssumedRole", "arn": "arn:aws:sts::811596193553:assumed-role/SecurityMonkey/cloudaux", "account_id": "811596193553", "principal_id": "AROAUB2AA5FQRGAHITW4A:cloudaux", "user_name": null, "access_key_id": "ASIA1FZDVOXSQD6GDJFL", "session_issuer_arn": "arn:aws:iam::811596193553:role/SecurityMonkey", "session_issuer_user_name": "SecurityMonkey"}, "network": {"source_ip": "255.253.125.115", "user_agent": "[Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56]", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1030, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "f8d25a38-c4ff-4b7d-973e-fa4834e3a2ef", "eventTime": "2017-05-27T04:45:23Z", "eventName": "GetBucketWebsite", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.253.125.115", "userAgent": "[Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56]", "awsRegion": "us-west-2", "userIdentity": {"type": "AssumedRole", "principalId": "AROAUB2AA5FQRGAHITW4A:cloudaux", "arn": "arn:aws:sts::811596193553:assumed-role/SecurityMonkey/cloudaux", "accountId": "811596193553", "accessKeyId": "ASIA1FZDVOXSQD6GDJFL", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2017-05-27T04:15:19Z"}, "sessionIssuer": {"type": "Role", "principalId": "AROAUB2AA5FQRGAHITW4A", "arn": "arn:aws:iam::811596193553:role/SecurityMonkey", "accountId": "811596193553", "userName": "SecurityMonkey"}}}, "requestParameters": {"bucketName": "level5-8dbc21dbbd6129208d054061ef063f04.flaws.cloud", "website": [""]}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "4d7f4d13-ce53-47e5-8985-3bbd428be1fd", "record_id": "flaws_cloudtrail:0000077:4d7f4d13-ce53-47e5-8985-3bbd428be1fd", "row_index": 77, "timestamp": "2017-05-27T04:45:23Z", "event_type": "GetBucketVersioning", "event_source": "s3.amazonaws.com", "principal": {"type": "AssumedRole", "arn": "arn:aws:sts::811596193553:assumed-role/SecurityMonkey/cloudaux", "account_id": "811596193553", "principal_id": "AROAUB2AA5FQRGAHITW4A:cloudaux", "user_name": null, "access_key_id": "ASIA1FZDVOXSQD6GDJFL", "session_issuer_arn": "arn:aws:iam::811596193553:role/SecurityMonkey", "session_issuer_user_name": "SecurityMonkey"}, "network": {"source_ip": "255.253.125.115", "user_agent": "[Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56]", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1035, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "4d7f4d13-ce53-47e5-8985-3bbd428be1fd", "eventTime": "2017-05-27T04:45:23Z", "eventName": "GetBucketVersioning", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.253.125.115", "userAgent": "[Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56]", "awsRegion": "us-west-2", "userIdentity": {"type": "AssumedRole", "principalId": "AROAUB2AA5FQRGAHITW4A:cloudaux", "arn": "arn:aws:sts::811596193553:assumed-role/SecurityMonkey/cloudaux", "accountId": "811596193553", "accessKeyId": "ASIA1FZDVOXSQD6GDJFL", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2017-05-27T04:15:19Z"}, "sessionIssuer": {"type": "Role", "principalId": "AROAUB2AA5FQRGAHITW4A", "arn": "arn:aws:iam::811596193553:role/SecurityMonkey", "accountId": "811596193553", "userName": "SecurityMonkey"}}}, "requestParameters": {"bucketName": "level4-974134b52e7c35aebcc4b45f19113936.flaws.cloud", "versioning": [""]}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "7de2c4e4-eaa9-49e6-b8da-b53da265354f", "record_id": "flaws_cloudtrail:0000078:7de2c4e4-eaa9-49e6-b8da-b53da265354f", "row_index": 78, "timestamp": "2017-05-27T04:45:23Z", "event_type": "GetBucketTagging", "event_source": "s3.amazonaws.com", "principal": {"type": "AssumedRole", "arn": "arn:aws:sts::811596193553:assumed-role/SecurityMonkey/cloudaux", "account_id": "811596193553", "principal_id": "AROAUB2AA5FQRGAHITW4A:cloudaux", "user_name": null, "access_key_id": "ASIA1FZDVOXSQD6GDJFL", "session_issuer_arn": "arn:aws:iam::811596193553:role/SecurityMonkey", "session_issuer_user_name": "SecurityMonkey"}, "network": {"source_ip": "255.253.125.115", "user_agent": "[Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56]", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1101, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "7de2c4e4-eaa9-49e6-b8da-b53da265354f", "eventTime": "2017-05-27T04:45:23Z", "eventName": "GetBucketTagging", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.253.125.115", "userAgent": "[Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56]", "awsRegion": "us-west-2", "errorCode": "NoSuchTagSet", "errorMessage": "The TagSet does not exist", "userIdentity": {"type": "AssumedRole", "principalId": "AROAUB2AA5FQRGAHITW4A:cloudaux", "arn": "arn:aws:sts::811596193553:assumed-role/SecurityMonkey/cloudaux", "accountId": "811596193553", "accessKeyId": "ASIA1FZDVOXSQD6GDJFL", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2017-05-27T04:15:19Z"}, "sessionIssuer": {"type": "Role", "principalId": "AROAUB2AA5FQRGAHITW4A", "arn": "arn:aws:iam::811596193553:role/SecurityMonkey", "accountId": "811596193553", "userName": "SecurityMonkey"}}}, "requestParameters": {"tagging": [""], "bucketName": "level5-8dbc21dbbd6129208d054061ef063f04.flaws.cloud"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "3b90cc55-0e1f-4bbe-8847-358ba16f6432", "record_id": "flaws_cloudtrail:0000079:3b90cc55-0e1f-4bbe-8847-358ba16f6432", "row_index": 79, "timestamp": "2017-05-27T04:45:24Z", "event_type": "GetBucketLocation", "event_source": "s3.amazonaws.com", "principal": {"type": "AssumedRole", "arn": "arn:aws:sts::811596193553:assumed-role/SecurityMonkey/cloudaux", "account_id": "811596193553", "principal_id": "AROAUB2AA5FQRGAHITW4A:cloudaux", "user_name": null, "access_key_id": "ASIAWWGE8SBRJDRN2KLG", "session_issuer_arn": "arn:aws:iam::811596193553:role/SecurityMonkey", "session_issuer_user_name": "SecurityMonkey"}, "network": {"source_ip": "255.253.125.115", "user_agent": "[Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56]", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 1032, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "3b90cc55-0e1f-4bbe-8847-358ba16f6432", "eventTime": "2017-05-27T04:45:24Z", "eventName": "GetBucketLocation", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.253.125.115", "userAgent": "[Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56]", "awsRegion": "us-east-1", "userIdentity": {"type": "AssumedRole", "principalId": "AROAUB2AA5FQRGAHITW4A:cloudaux", "arn": "arn:aws:sts::811596193553:assumed-role/SecurityMonkey/cloudaux", "accountId": "811596193553", "accessKeyId": "ASIAWWGE8SBRJDRN2KLG", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2017-05-27T04:15:23Z"}, "sessionIssuer": {"type": "Role", "principalId": "AROAUB2AA5FQRGAHITW4A", "arn": "arn:aws:iam::811596193553:role/SecurityMonkey", "accountId": "811596193553", "userName": "SecurityMonkey"}}}, "requestParameters": {"bucketName": "level6-588e81908c84e62a6dd8202d535469dd.flaws.cloud", "location": [""]}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "a3eea6f5-bf02-4f33-81db-5996e71ecc38", "record_id": "flaws_cloudtrail:0000080:a3eea6f5-bf02-4f33-81db-5996e71ecc38", "row_index": 80, "timestamp": "2017-05-27T04:45:24Z", "event_type": "GetBucketLogging", "event_source": "s3.amazonaws.com", "principal": {"type": "AssumedRole", "arn": "arn:aws:sts::811596193553:assumed-role/SecurityMonkey/cloudaux", "account_id": "811596193553", "principal_id": "AROAUB2AA5FQRGAHITW4A:cloudaux", "user_name": null, "access_key_id": "ASIA1FZDVOXSQD6GDJFL", "session_issuer_arn": "arn:aws:iam::811596193553:role/SecurityMonkey", "session_issuer_user_name": "SecurityMonkey"}, "network": {"source_ip": "255.253.125.115", "user_agent": "[Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56]", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1031, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "a3eea6f5-bf02-4f33-81db-5996e71ecc38", "eventTime": "2017-05-27T04:45:24Z", "eventName": "GetBucketLogging", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.253.125.115", "userAgent": "[Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56]", "awsRegion": "us-west-2", "userIdentity": {"type": "AssumedRole", "principalId": "AROAUB2AA5FQRGAHITW4A:cloudaux", "arn": "arn:aws:sts::811596193553:assumed-role/SecurityMonkey/cloudaux", "accountId": "811596193553", "accessKeyId": "ASIA1FZDVOXSQD6GDJFL", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2017-05-27T04:15:19Z"}, "sessionIssuer": {"type": "Role", "principalId": "AROAUB2AA5FQRGAHITW4A", "arn": "arn:aws:iam::811596193553:role/SecurityMonkey", "accountId": "811596193553", "userName": "SecurityMonkey"}}}, "requestParameters": {"logging": [""], "bucketName": "level6-588e81908c84e62a6dd8202d535469dd.flaws.cloud"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "10e58b4e-4285-4511-8083-509f288840e", "record_id": "flaws_cloudtrail:0000081:10e58b4e-4285-4511-8083-509f288840e", "row_index": 81, "timestamp": "2017-05-27T04:45:24Z", "event_type": "GetBucketReplication", "event_source": "s3.amazonaws.com", "principal": {"type": "AssumedRole", "arn": "arn:aws:sts::811596193553:assumed-role/SecurityMonkey/cloudaux", "account_id": "811596193553", "principal_id": "AROAUB2AA5FQRGAHITW4A:cloudaux", "user_name": null, "access_key_id": "ASIA1FZDVOXSQD6GDJFL", "session_issuer_arn": "arn:aws:iam::811596193553:role/SecurityMonkey", "session_issuer_user_name": "SecurityMonkey"}, "network": {"source_ip": "255.253.125.115", "user_agent": "[Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56]", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1150, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "10e58b4e-4285-4511-8083-509f288840e", "eventTime": "2017-05-27T04:45:24Z", "eventName": "GetBucketReplication", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.253.125.115", "userAgent": "[Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56]", "awsRegion": "us-west-2", "errorCode": "ReplicationConfigurationNotFoundError", "errorMessage": "The replication configuration was not found", "userIdentity": {"type": "AssumedRole", "principalId": "AROAUB2AA5FQRGAHITW4A:cloudaux", "arn": "arn:aws:sts::811596193553:assumed-role/SecurityMonkey/cloudaux", "accountId": "811596193553", "accessKeyId": "ASIA1FZDVOXSQD6GDJFL", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2017-05-27T04:15:19Z"}, "sessionIssuer": {"type": "Role", "principalId": "AROAUB2AA5FQRGAHITW4A", "arn": "arn:aws:iam::811596193553:role/SecurityMonkey", "accountId": "811596193553", "userName": "SecurityMonkey"}}}, "requestParameters": {"replication": [""], "bucketName": "level6-588e81908c84e62a6dd8202d535469dd.flaws.cloud"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "0b31ae8a-05d5-47cf-a54d-3d3b0546f4b5", "record_id": "flaws_cloudtrail:0000082:0b31ae8a-05d5-47cf-a54d-3d3b0546f4b5", "row_index": 82, "timestamp": "2017-05-27T04:45:24Z", "event_type": "GetBucketAcl", "event_source": "s3.amazonaws.com", "principal": {"type": "AssumedRole", "arn": "arn:aws:sts::811596193553:assumed-role/SecurityMonkey/cloudaux", "account_id": "811596193553", "principal_id": "AROAUB2AA5FQRGAHITW4A:cloudaux", "user_name": null, "access_key_id": "ASIA1FZDVOXSQD6GDJFL", "session_issuer_arn": "arn:aws:iam::811596193553:role/SecurityMonkey", "session_issuer_user_name": "SecurityMonkey"}, "network": {"source_ip": "255.253.125.115", "user_agent": "[Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56]", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1021, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "0b31ae8a-05d5-47cf-a54d-3d3b0546f4b5", "eventTime": "2017-05-27T04:45:24Z", "eventName": "GetBucketAcl", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.253.125.115", "userAgent": "[Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56]", "awsRegion": "us-west-2", "userIdentity": {"type": "AssumedRole", "principalId": "AROAUB2AA5FQRGAHITW4A:cloudaux", "arn": "arn:aws:sts::811596193553:assumed-role/SecurityMonkey/cloudaux", "accountId": "811596193553", "accessKeyId": "ASIA1FZDVOXSQD6GDJFL", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2017-05-27T04:15:19Z"}, "sessionIssuer": {"type": "Role", "principalId": "AROAUB2AA5FQRGAHITW4A", "arn": "arn:aws:iam::811596193553:role/SecurityMonkey", "accountId": "811596193553", "userName": "SecurityMonkey"}}}, "requestParameters": {"bucketName": "level6-588e81908c84e62a6dd8202d535469dd.flaws.cloud", "acl": [""]}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "53dbb87a-a11c-4982-9a46-fe859a3eac4b", "record_id": "flaws_cloudtrail:0000083:53dbb87a-a11c-4982-9a46-fe859a3eac4b", "row_index": 83, "timestamp": "2017-05-27T04:45:24Z", "event_type": "GetBucketNotification", "event_source": "s3.amazonaws.com", "principal": {"type": "AssumedRole", "arn": "arn:aws:sts::811596193553:assumed-role/SecurityMonkey/cloudaux", "account_id": "811596193553", "principal_id": "AROAUB2AA5FQRGAHITW4A:cloudaux", "user_name": null, "access_key_id": "ASIA1FZDVOXSQD6GDJFL", "session_issuer_arn": "arn:aws:iam::811596193553:role/SecurityMonkey", "session_issuer_user_name": "SecurityMonkey"}, "network": {"source_ip": "255.253.125.115", "user_agent": "[Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56]", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1040, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "53dbb87a-a11c-4982-9a46-fe859a3eac4b", "eventTime": "2017-05-27T04:45:24Z", "eventName": "GetBucketNotification", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.253.125.115", "userAgent": "[Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56]", "awsRegion": "us-west-2", "userIdentity": {"type": "AssumedRole", "principalId": "AROAUB2AA5FQRGAHITW4A:cloudaux", "arn": "arn:aws:sts::811596193553:assumed-role/SecurityMonkey/cloudaux", "accountId": "811596193553", "accessKeyId": "ASIA1FZDVOXSQD6GDJFL", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2017-05-27T04:15:19Z"}, "sessionIssuer": {"type": "Role", "principalId": "AROAUB2AA5FQRGAHITW4A", "arn": "arn:aws:iam::811596193553:role/SecurityMonkey", "accountId": "811596193553", "userName": "SecurityMonkey"}}}, "requestParameters": {"notification": [""], "bucketName": "level6-588e81908c84e62a6dd8202d535469dd.flaws.cloud"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "3eb24b4f-64d5-4650-955a-72819ff0f259", "record_id": "flaws_cloudtrail:0000084:3eb24b4f-64d5-4650-955a-72819ff0f259", "row_index": 84, "timestamp": "2017-05-27T04:45:24Z", "event_type": "GetBucketPolicy", "event_source": "s3.amazonaws.com", "principal": {"type": "AssumedRole", "arn": "arn:aws:sts::811596193553:assumed-role/SecurityMonkey/cloudaux", "account_id": "811596193553", "principal_id": "AROAUB2AA5FQRGAHITW4A:cloudaux", "user_name": null, "access_key_id": "ASIA1FZDVOXSQD6GDJFL", "session_issuer_arn": "arn:aws:iam::811596193553:role/SecurityMonkey", "session_issuer_user_name": "SecurityMonkey"}, "network": {"source_ip": "255.253.125.115", "user_agent": "[Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56]", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1026, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "3eb24b4f-64d5-4650-955a-72819ff0f259", "eventTime": "2017-05-27T04:45:24Z", "eventName": "GetBucketPolicy", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.253.125.115", "userAgent": "[Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56]", "awsRegion": "us-west-2", "userIdentity": {"type": "AssumedRole", "principalId": "AROAUB2AA5FQRGAHITW4A:cloudaux", "arn": "arn:aws:sts::811596193553:assumed-role/SecurityMonkey/cloudaux", "accountId": "811596193553", "accessKeyId": "ASIA1FZDVOXSQD6GDJFL", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2017-05-27T04:15:19Z"}, "sessionIssuer": {"type": "Role", "principalId": "AROAUB2AA5FQRGAHITW4A", "arn": "arn:aws:iam::811596193553:role/SecurityMonkey", "accountId": "811596193553", "userName": "SecurityMonkey"}}}, "requestParameters": {"bucketName": "level6-588e81908c84e62a6dd8202d535469dd.flaws.cloud", "policy": [""]}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "514daa1a-b757-4667-bac2-3f4b79325d", "record_id": "flaws_cloudtrail:0000085:514daa1a-b757-4667-bac2-3f4b79325d", "row_index": 85, "timestamp": "2017-05-27T04:45:24Z", "event_type": "GetBucketWebsite", "event_source": "s3.amazonaws.com", "principal": {"type": "AssumedRole", "arn": "arn:aws:sts::811596193553:assumed-role/SecurityMonkey/cloudaux", "account_id": "811596193553", "principal_id": "AROAUB2AA5FQRGAHITW4A:cloudaux", "user_name": null, "access_key_id": "ASIA1FZDVOXSQD6GDJFL", "session_issuer_arn": "arn:aws:iam::811596193553:role/SecurityMonkey", "session_issuer_user_name": "SecurityMonkey"}, "network": {"source_ip": "255.253.125.115", "user_agent": "[Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56]", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1029, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "514daa1a-b757-4667-bac2-3f4b79325d", "eventTime": "2017-05-27T04:45:24Z", "eventName": "GetBucketWebsite", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.253.125.115", "userAgent": "[Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56]", "awsRegion": "us-west-2", "userIdentity": {"type": "AssumedRole", "principalId": "AROAUB2AA5FQRGAHITW4A:cloudaux", "arn": "arn:aws:sts::811596193553:assumed-role/SecurityMonkey/cloudaux", "accountId": "811596193553", "accessKeyId": "ASIA1FZDVOXSQD6GDJFL", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2017-05-27T04:15:19Z"}, "sessionIssuer": {"type": "Role", "principalId": "AROAUB2AA5FQRGAHITW4A", "arn": "arn:aws:iam::811596193553:role/SecurityMonkey", "accountId": "811596193553", "userName": "SecurityMonkey"}}}, "requestParameters": {"bucketName": "level6-588e81908c84e62a6dd8202d535469dd.flaws.cloud", "website": [""]}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "f551dbbd-58e0-42f0-b675-e65b2e52e2af", "record_id": "flaws_cloudtrail:0000086:f551dbbd-58e0-42f0-b675-e65b2e52e2af", "row_index": 86, "timestamp": "2017-05-27T04:45:24Z", "event_type": "GetBucketCors", "event_source": "s3.amazonaws.com", "principal": {"type": "AssumedRole", "arn": "arn:aws:sts::811596193553:assumed-role/SecurityMonkey/cloudaux", "account_id": "811596193553", "principal_id": "AROAUB2AA5FQRGAHITW4A:cloudaux", "user_name": null, "access_key_id": "ASIA1FZDVOXSQD6GDJFL", "session_issuer_arn": "arn:aws:iam::811596193553:role/SecurityMonkey", "session_issuer_user_name": "SecurityMonkey"}, "network": {"source_ip": "255.253.125.115", "user_agent": "[Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56]", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1117, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "f551dbbd-58e0-42f0-b675-e65b2e52e2af", "eventTime": "2017-05-27T04:45:24Z", "eventName": "GetBucketCors", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.253.125.115", "userAgent": "[Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56]", "awsRegion": "us-west-2", "errorCode": "NoSuchCORSConfiguration", "errorMessage": "The CORS configuration does not exist", "userIdentity": {"type": "AssumedRole", "principalId": "AROAUB2AA5FQRGAHITW4A:cloudaux", "arn": "arn:aws:sts::811596193553:assumed-role/SecurityMonkey/cloudaux", "accountId": "811596193553", "accessKeyId": "ASIA1FZDVOXSQD6GDJFL", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2017-05-27T04:15:19Z"}, "sessionIssuer": {"type": "Role", "principalId": "AROAUB2AA5FQRGAHITW4A", "arn": "arn:aws:iam::811596193553:role/SecurityMonkey", "accountId": "811596193553", "userName": "SecurityMonkey"}}}, "requestParameters": {"bucketName": "level6-588e81908c84e62a6dd8202d535469dd.flaws.cloud", "cors": [""]}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "9c6ac9e9-9b75-4b8b-8fea-786966e71819", "record_id": "flaws_cloudtrail:0000087:9c6ac9e9-9b75-4b8b-8fea-786966e71819", "row_index": 87, "timestamp": "2017-05-27T04:45:24Z", "event_type": "GetBucketLifecycle", "event_source": "s3.amazonaws.com", "principal": {"type": "AssumedRole", "arn": "arn:aws:sts::811596193553:assumed-role/SecurityMonkey/cloudaux", "account_id": "811596193553", "principal_id": "AROAUB2AA5FQRGAHITW4A:cloudaux", "user_name": null, "access_key_id": "ASIA1FZDVOXSQD6GDJFL", "session_issuer_arn": "arn:aws:iam::811596193553:role/SecurityMonkey", "session_issuer_user_name": "SecurityMonkey"}, "network": {"source_ip": "255.253.125.115", "user_agent": "[Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56]", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1137, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "9c6ac9e9-9b75-4b8b-8fea-786966e71819", "eventTime": "2017-05-27T04:45:24Z", "eventName": "GetBucketLifecycle", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.253.125.115", "userAgent": "[Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56]", "awsRegion": "us-west-2", "errorCode": "NoSuchLifecycleConfiguration", "errorMessage": "The lifecycle configuration does not exist", "userIdentity": {"type": "AssumedRole", "principalId": "AROAUB2AA5FQRGAHITW4A:cloudaux", "arn": "arn:aws:sts::811596193553:assumed-role/SecurityMonkey/cloudaux", "accountId": "811596193553", "accessKeyId": "ASIA1FZDVOXSQD6GDJFL", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2017-05-27T04:15:19Z"}, "sessionIssuer": {"type": "Role", "principalId": "AROAUB2AA5FQRGAHITW4A", "arn": "arn:aws:iam::811596193553:role/SecurityMonkey", "accountId": "811596193553", "userName": "SecurityMonkey"}}}, "requestParameters": {"lifecycle": [""], "bucketName": "level5-8dbc21dbbd6129208d054061ef063f04.flaws.cloud"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "cabfca68-1aa2-4899-b892-360e5e547965b", "record_id": "flaws_cloudtrail:0000088:cabfca68-1aa2-4899-b892-360e5e547965b", "row_index": 88, "timestamp": "2017-05-27T04:45:24Z", "event_type": "GetBucketTagging", "event_source": "s3.amazonaws.com", "principal": {"type": "AssumedRole", "arn": "arn:aws:sts::811596193553:assumed-role/SecurityMonkey/cloudaux", "account_id": "811596193553", "principal_id": "AROAUB2AA5FQRGAHITW4A:cloudaux", "user_name": null, "access_key_id": "ASIA1FZDVOXSQD6GDJFL", "session_issuer_arn": "arn:aws:iam::811596193553:role/SecurityMonkey", "session_issuer_user_name": "SecurityMonkey"}, "network": {"source_ip": "255.253.125.115", "user_agent": "[Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56]", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1101, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "cabfca68-1aa2-4899-b892-360e5e547965b", "eventTime": "2017-05-27T04:45:24Z", "eventName": "GetBucketTagging", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.253.125.115", "userAgent": "[Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56]", "awsRegion": "us-west-2", "errorCode": "NoSuchTagSet", "errorMessage": "The TagSet does not exist", "userIdentity": {"type": "AssumedRole", "principalId": "AROAUB2AA5FQRGAHITW4A:cloudaux", "arn": "arn:aws:sts::811596193553:assumed-role/SecurityMonkey/cloudaux", "accountId": "811596193553", "accessKeyId": "ASIA1FZDVOXSQD6GDJFL", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2017-05-27T04:15:19Z"}, "sessionIssuer": {"type": "Role", "principalId": "AROAUB2AA5FQRGAHITW4A", "arn": "arn:aws:iam::811596193553:role/SecurityMonkey", "accountId": "811596193553", "userName": "SecurityMonkey"}}}, "requestParameters": {"tagging": [""], "bucketName": "level6-588e81908c84e62a6dd8202d535469dd.flaws.cloud"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "80f03933-9a66-4830-99b1-7120bec5879b", "record_id": "flaws_cloudtrail:0000089:80f03933-9a66-4830-99b1-7120bec5879b", "row_index": 89, "timestamp": "2017-05-27T04:45:24Z", "event_type": "GetBucketVersioning", "event_source": "s3.amazonaws.com", "principal": {"type": "AssumedRole", "arn": "arn:aws:sts::811596193553:assumed-role/SecurityMonkey/cloudaux", "account_id": "811596193553", "principal_id": "AROAUB2AA5FQRGAHITW4A:cloudaux", "user_name": null, "access_key_id": "ASIA1FZDVOXSQD6GDJFL", "session_issuer_arn": "arn:aws:iam::811596193553:role/SecurityMonkey", "session_issuer_user_name": "SecurityMonkey"}, "network": {"source_ip": "255.253.125.115", "user_agent": "[Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56]", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1036, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "80f03933-9a66-4830-99b1-7120bec5879b", "eventTime": "2017-05-27T04:45:24Z", "eventName": "GetBucketVersioning", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.253.125.115", "userAgent": "[Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56]", "awsRegion": "us-west-2", "userIdentity": {"type": "AssumedRole", "principalId": "AROAUB2AA5FQRGAHITW4A:cloudaux", "arn": "arn:aws:sts::811596193553:assumed-role/SecurityMonkey/cloudaux", "accountId": "811596193553", "accessKeyId": "ASIA1FZDVOXSQD6GDJFL", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2017-05-27T04:15:19Z"}, "sessionIssuer": {"type": "Role", "principalId": "AROAUB2AA5FQRGAHITW4A", "arn": "arn:aws:iam::811596193553:role/SecurityMonkey", "accountId": "811596193553", "userName": "SecurityMonkey"}}}, "requestParameters": {"bucketName": "level5-8dbc21dbbd6129208d054061ef063f04.flaws.cloud", "versioning": [""]}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "d64cc5ff-f7a8-40ce-ab51-2f5e215e9e17", "record_id": "flaws_cloudtrail:0000090:d64cc5ff-f7a8-40ce-ab51-2f5e215e9e17", "row_index": 90, "timestamp": "2017-05-27T04:45:25Z", "event_type": "GetBucketLocation", "event_source": "s3.amazonaws.com", "principal": {"type": "AssumedRole", "arn": "arn:aws:sts::811596193553:assumed-role/SecurityMonkey/cloudaux", "account_id": "811596193553", "principal_id": "AROAUB2AA5FQRGAHITW4A:cloudaux", "user_name": null, "access_key_id": "ASIAWWGE8SBRJDRN2KLG", "session_issuer_arn": "arn:aws:iam::811596193553:role/SecurityMonkey", "session_issuer_user_name": "SecurityMonkey"}, "network": {"source_ip": "255.253.125.115", "user_agent": "[Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56]", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 1033, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "d64cc5ff-f7a8-40ce-ab51-2f5e215e9e17", "eventTime": "2017-05-27T04:45:25Z", "eventName": "GetBucketLocation", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.253.125.115", "userAgent": "[Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56]", "awsRegion": "us-east-1", "userIdentity": {"type": "AssumedRole", "principalId": "AROAUB2AA5FQRGAHITW4A:cloudaux", "arn": "arn:aws:sts::811596193553:assumed-role/SecurityMonkey/cloudaux", "accountId": "811596193553", "accessKeyId": "ASIAWWGE8SBRJDRN2KLG", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2017-05-27T04:15:23Z"}, "sessionIssuer": {"type": "Role", "principalId": "AROAUB2AA5FQRGAHITW4A", "arn": "arn:aws:iam::811596193553:role/SecurityMonkey", "accountId": "811596193553", "userName": "SecurityMonkey"}}}, "requestParameters": {"bucketName": "theend-c1aad500c62e2a57cf12cebf93b282cf.flaws.cloud", "location": [""]}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "24da4022-80ca-4a5a-9fd1-97b4145b77d2", "record_id": "flaws_cloudtrail:0000091:24da4022-80ca-4a5a-9fd1-97b4145b77d2", "row_index": 91, "timestamp": "2017-05-27T04:45:25Z", "event_type": "GetBucketLifecycle", "event_source": "s3.amazonaws.com", "principal": {"type": "AssumedRole", "arn": "arn:aws:sts::811596193553:assumed-role/SecurityMonkey/cloudaux", "account_id": "811596193553", "principal_id": "AROAUB2AA5FQRGAHITW4A:cloudaux", "user_name": null, "access_key_id": "ASIA1FZDVOXSQD6GDJFL", "session_issuer_arn": "arn:aws:iam::811596193553:role/SecurityMonkey", "session_issuer_user_name": "SecurityMonkey"}, "network": {"source_ip": "255.253.125.115", "user_agent": "[Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56]", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1137, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "24da4022-80ca-4a5a-9fd1-97b4145b77d2", "eventTime": "2017-05-27T04:45:25Z", "eventName": "GetBucketLifecycle", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.253.125.115", "userAgent": "[Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56]", "awsRegion": "us-west-2", "errorCode": "NoSuchLifecycleConfiguration", "errorMessage": "The lifecycle configuration does not exist", "userIdentity": {"type": "AssumedRole", "principalId": "AROAUB2AA5FQRGAHITW4A:cloudaux", "arn": "arn:aws:sts::811596193553:assumed-role/SecurityMonkey/cloudaux", "accountId": "811596193553", "accessKeyId": "ASIA1FZDVOXSQD6GDJFL", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2017-05-27T04:15:19Z"}, "sessionIssuer": {"type": "Role", "principalId": "AROAUB2AA5FQRGAHITW4A", "arn": "arn:aws:iam::811596193553:role/SecurityMonkey", "accountId": "811596193553", "userName": "SecurityMonkey"}}}, "requestParameters": {"lifecycle": [""], "bucketName": "level6-588e81908c84e62a6dd8202d535469dd.flaws.cloud"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "a5ad70c3-04f1-4367-9a0b-50ba6a94f1d1", "record_id": "flaws_cloudtrail:0000092:a5ad70c3-04f1-4367-9a0b-50ba6a94f1d1", "row_index": 92, "timestamp": "2017-05-27T04:45:25Z", "event_type": "GetBucketLogging", "event_source": "s3.amazonaws.com", "principal": {"type": "AssumedRole", "arn": "arn:aws:sts::811596193553:assumed-role/SecurityMonkey/cloudaux", "account_id": "811596193553", "principal_id": "AROAUB2AA5FQRGAHITW4A:cloudaux", "user_name": null, "access_key_id": "ASIA1FZDVOXSQD6GDJFL", "session_issuer_arn": "arn:aws:iam::811596193553:role/SecurityMonkey", "session_issuer_user_name": "SecurityMonkey"}, "network": {"source_ip": "255.253.125.115", "user_agent": "[Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56]", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1030, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "a5ad70c3-04f1-4367-9a0b-50ba6a94f1d1", "eventTime": "2017-05-27T04:45:25Z", "eventName": "GetBucketLogging", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.253.125.115", "userAgent": "[Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56]", "awsRegion": "us-west-2", "userIdentity": {"type": "AssumedRole", "principalId": "AROAUB2AA5FQRGAHITW4A:cloudaux", "arn": "arn:aws:sts::811596193553:assumed-role/SecurityMonkey/cloudaux", "accountId": "811596193553", "accessKeyId": "ASIA1FZDVOXSQD6GDJFL", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2017-05-27T04:15:19Z"}, "sessionIssuer": {"type": "Role", "principalId": "AROAUB2AA5FQRGAHITW4A", "arn": "arn:aws:iam::811596193553:role/SecurityMonkey", "accountId": "811596193553", "userName": "SecurityMonkey"}}}, "requestParameters": {"logging": [""], "bucketName": "theend-c1aad500c62e2a57cf12cebf93b282cf.flaws.cloud"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "f0de365b-fb99-4522-8e07-4f967b6fd7f6", "record_id": "flaws_cloudtrail:0000093:f0de365b-fb99-4522-8e07-4f967b6fd7f6", "row_index": 93, "timestamp": "2017-05-27T04:45:25Z", "event_type": "GetBucketWebsite", "event_source": "s3.amazonaws.com", "principal": {"type": "AssumedRole", "arn": "arn:aws:sts::811596193553:assumed-role/SecurityMonkey/cloudaux", "account_id": "811596193553", "principal_id": "AROAUB2AA5FQRGAHITW4A:cloudaux", "user_name": null, "access_key_id": "ASIA1FZDVOXSQD6GDJFL", "session_issuer_arn": "arn:aws:iam::811596193553:role/SecurityMonkey", "session_issuer_user_name": "SecurityMonkey"}, "network": {"source_ip": "255.253.125.115", "user_agent": "[Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56]", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1030, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "f0de365b-fb99-4522-8e07-4f967b6fd7f6", "eventTime": "2017-05-27T04:45:25Z", "eventName": "GetBucketWebsite", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.253.125.115", "userAgent": "[Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56]", "awsRegion": "us-west-2", "userIdentity": {"type": "AssumedRole", "principalId": "AROAUB2AA5FQRGAHITW4A:cloudaux", "arn": "arn:aws:sts::811596193553:assumed-role/SecurityMonkey/cloudaux", "accountId": "811596193553", "accessKeyId": "ASIA1FZDVOXSQD6GDJFL", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2017-05-27T04:15:19Z"}, "sessionIssuer": {"type": "Role", "principalId": "AROAUB2AA5FQRGAHITW4A", "arn": "arn:aws:iam::811596193553:role/SecurityMonkey", "accountId": "811596193553", "userName": "SecurityMonkey"}}}, "requestParameters": {"bucketName": "theend-c1aad500c62e2a57cf12cebf93b282cf.flaws.cloud", "website": [""]}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "eac9cdd9-6f34-4d25-853c-de3dde2d72a1", "record_id": "flaws_cloudtrail:0000094:eac9cdd9-6f34-4d25-853c-de3dde2d72a1", "row_index": 94, "timestamp": "2017-05-27T04:45:25Z", "event_type": "GetBucketPolicy", "event_source": "s3.amazonaws.com", "principal": {"type": "AssumedRole", "arn": "arn:aws:sts::811596193553:assumed-role/SecurityMonkey/cloudaux", "account_id": "811596193553", "principal_id": "AROAUB2AA5FQRGAHITW4A:cloudaux", "user_name": null, "access_key_id": "ASIA1FZDVOXSQD6GDJFL", "session_issuer_arn": "arn:aws:iam::811596193553:role/SecurityMonkey", "session_issuer_user_name": "SecurityMonkey"}, "network": {"source_ip": "255.253.125.115", "user_agent": "[Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56]", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1028, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "eac9cdd9-6f34-4d25-853c-de3dde2d72a1", "eventTime": "2017-05-27T04:45:25Z", "eventName": "GetBucketPolicy", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.253.125.115", "userAgent": "[Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56]", "awsRegion": "us-west-2", "userIdentity": {"type": "AssumedRole", "principalId": "AROAUB2AA5FQRGAHITW4A:cloudaux", "arn": "arn:aws:sts::811596193553:assumed-role/SecurityMonkey/cloudaux", "accountId": "811596193553", "accessKeyId": "ASIA1FZDVOXSQD6GDJFL", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2017-05-27T04:15:19Z"}, "sessionIssuer": {"type": "Role", "principalId": "AROAUB2AA5FQRGAHITW4A", "arn": "arn:aws:iam::811596193553:role/SecurityMonkey", "accountId": "811596193553", "userName": "SecurityMonkey"}}}, "requestParameters": {"bucketName": "theend-c1aad500c62e2a57cf12cebf93b282cf.flaws.cloud", "policy": [""]}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "bf5ea17d-d21d-4c2b-9f79-ae79ce4d51bb", "record_id": "flaws_cloudtrail:0000095:bf5ea17d-d21d-4c2b-9f79-ae79ce4d51bb", "row_index": 95, "timestamp": "2017-05-27T04:45:25Z", "event_type": "GetBucketReplication", "event_source": "s3.amazonaws.com", "principal": {"type": "AssumedRole", "arn": "arn:aws:sts::811596193553:assumed-role/SecurityMonkey/cloudaux", "account_id": "811596193553", "principal_id": "AROAUB2AA5FQRGAHITW4A:cloudaux", "user_name": null, "access_key_id": "ASIA1FZDVOXSQD6GDJFL", "session_issuer_arn": "arn:aws:iam::811596193553:role/SecurityMonkey", "session_issuer_user_name": "SecurityMonkey"}, "network": {"source_ip": "255.253.125.115", "user_agent": "[Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56]", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1151, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "bf5ea17d-d21d-4c2b-9f79-ae79ce4d51bb", "eventTime": "2017-05-27T04:45:25Z", "eventName": "GetBucketReplication", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.253.125.115", "userAgent": "[Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56]", "awsRegion": "us-west-2", "errorCode": "ReplicationConfigurationNotFoundError", "errorMessage": "The replication configuration was not found", "userIdentity": {"type": "AssumedRole", "principalId": "AROAUB2AA5FQRGAHITW4A:cloudaux", "arn": "arn:aws:sts::811596193553:assumed-role/SecurityMonkey/cloudaux", "accountId": "811596193553", "accessKeyId": "ASIA1FZDVOXSQD6GDJFL", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2017-05-27T04:15:19Z"}, "sessionIssuer": {"type": "Role", "principalId": "AROAUB2AA5FQRGAHITW4A", "arn": "arn:aws:iam::811596193553:role/SecurityMonkey", "accountId": "811596193553", "userName": "SecurityMonkey"}}}, "requestParameters": {"replication": [""], "bucketName": "theend-c1aad500c62e2a57cf12cebf93b282cf.flaws.cloud"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "973d7d1b-75e6-41a8-9935-59d2055c8ce8", "record_id": "flaws_cloudtrail:0000096:973d7d1b-75e6-41a8-9935-59d2055c8ce8", "row_index": 96, "timestamp": "2017-05-27T04:45:25Z", "event_type": "GetBucketCors", "event_source": "s3.amazonaws.com", "principal": {"type": "AssumedRole", "arn": "arn:aws:sts::811596193553:assumed-role/SecurityMonkey/cloudaux", "account_id": "811596193553", "principal_id": "AROAUB2AA5FQRGAHITW4A:cloudaux", "user_name": null, "access_key_id": "ASIA1FZDVOXSQD6GDJFL", "session_issuer_arn": "arn:aws:iam::811596193553:role/SecurityMonkey", "session_issuer_user_name": "SecurityMonkey"}, "network": {"source_ip": "255.253.125.115", "user_agent": "[Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56]", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1118, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "973d7d1b-75e6-41a8-9935-59d2055c8ce8", "eventTime": "2017-05-27T04:45:25Z", "eventName": "GetBucketCors", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.253.125.115", "userAgent": "[Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56]", "awsRegion": "us-west-2", "errorCode": "NoSuchCORSConfiguration", "errorMessage": "The CORS configuration does not exist", "userIdentity": {"type": "AssumedRole", "principalId": "AROAUB2AA5FQRGAHITW4A:cloudaux", "arn": "arn:aws:sts::811596193553:assumed-role/SecurityMonkey/cloudaux", "accountId": "811596193553", "accessKeyId": "ASIA1FZDVOXSQD6GDJFL", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2017-05-27T04:15:19Z"}, "sessionIssuer": {"type": "Role", "principalId": "AROAUB2AA5FQRGAHITW4A", "arn": "arn:aws:iam::811596193553:role/SecurityMonkey", "accountId": "811596193553", "userName": "SecurityMonkey"}}}, "requestParameters": {"bucketName": "theend-c1aad500c62e2a57cf12cebf93b282cf.flaws.cloud", "cors": [""]}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "6ef970b1-1cd1-4a0e-9fd6-22d8190e4cfc", "record_id": "flaws_cloudtrail:0000097:6ef970b1-1cd1-4a0e-9fd6-22d8190e4cfc", "row_index": 97, "timestamp": "2017-05-27T04:45:25Z", "event_type": "GetBucketVersioning", "event_source": "s3.amazonaws.com", "principal": {"type": "AssumedRole", "arn": "arn:aws:sts::811596193553:assumed-role/SecurityMonkey/cloudaux", "account_id": "811596193553", "principal_id": "AROAUB2AA5FQRGAHITW4A:cloudaux", "user_name": null, "access_key_id": "ASIA1FZDVOXSQD6GDJFL", "session_issuer_arn": "arn:aws:iam::811596193553:role/SecurityMonkey", "session_issuer_user_name": "SecurityMonkey"}, "network": {"source_ip": "255.253.125.115", "user_agent": "[Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56]", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1036, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "6ef970b1-1cd1-4a0e-9fd6-22d8190e4cfc", "eventTime": "2017-05-27T04:45:25Z", "eventName": "GetBucketVersioning", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.253.125.115", "userAgent": "[Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56]", "awsRegion": "us-west-2", "userIdentity": {"type": "AssumedRole", "principalId": "AROAUB2AA5FQRGAHITW4A:cloudaux", "arn": "arn:aws:sts::811596193553:assumed-role/SecurityMonkey/cloudaux", "accountId": "811596193553", "accessKeyId": "ASIA1FZDVOXSQD6GDJFL", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2017-05-27T04:15:19Z"}, "sessionIssuer": {"type": "Role", "principalId": "AROAUB2AA5FQRGAHITW4A", "arn": "arn:aws:iam::811596193553:role/SecurityMonkey", "accountId": "811596193553", "userName": "SecurityMonkey"}}}, "requestParameters": {"bucketName": "level6-588e81908c84e62a6dd8202d535469dd.flaws.cloud", "versioning": [""]}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "4bd7c7bf-afb9-402a-b4c7-d53b79bbf0d7", "record_id": "flaws_cloudtrail:0000098:4bd7c7bf-afb9-402a-b4c7-d53b79bbf0d7", "row_index": 98, "timestamp": "2017-05-27T04:45:26Z", "event_type": "GetBucketVersioning", "event_source": "s3.amazonaws.com", "principal": {"type": "AssumedRole", "arn": "arn:aws:sts::811596193553:assumed-role/SecurityMonkey/cloudaux", "account_id": "811596193553", "principal_id": "AROAUB2AA5FQRGAHITW4A:cloudaux", "user_name": null, "access_key_id": "ASIA1FZDVOXSQD6GDJFL", "session_issuer_arn": "arn:aws:iam::811596193553:role/SecurityMonkey", "session_issuer_user_name": "SecurityMonkey"}, "network": {"source_ip": "255.253.125.115", "user_agent": "[Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56]", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1036, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "4bd7c7bf-afb9-402a-b4c7-d53b79bbf0d7", "eventTime": "2017-05-27T04:45:26Z", "eventName": "GetBucketVersioning", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.253.125.115", "userAgent": "[Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56]", "awsRegion": "us-west-2", "userIdentity": {"type": "AssumedRole", "principalId": "AROAUB2AA5FQRGAHITW4A:cloudaux", "arn": "arn:aws:sts::811596193553:assumed-role/SecurityMonkey/cloudaux", "accountId": "811596193553", "accessKeyId": "ASIA1FZDVOXSQD6GDJFL", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2017-05-27T04:15:19Z"}, "sessionIssuer": {"type": "Role", "principalId": "AROAUB2AA5FQRGAHITW4A", "arn": "arn:aws:iam::811596193553:role/SecurityMonkey", "accountId": "811596193553", "userName": "SecurityMonkey"}}}, "requestParameters": {"bucketName": "theend-c1aad500c62e2a57cf12cebf93b282cf.flaws.cloud", "versioning": [""]}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "f90391cc-6d2a-4359-aeb1-770801b6212be", "record_id": "flaws_cloudtrail:0000099:f90391cc-6d2a-4359-aeb1-770801b6212be", "row_index": 99, "timestamp": "2017-05-27T04:45:26Z", "event_type": "GetBucketNotification", "event_source": "s3.amazonaws.com", "principal": {"type": "AssumedRole", "arn": "arn:aws:sts::811596193553:assumed-role/SecurityMonkey/cloudaux", "account_id": "811596193553", "principal_id": "AROAUB2AA5FQRGAHITW4A:cloudaux", "user_name": null, "access_key_id": "ASIA1FZDVOXSQD6GDJFL", "session_issuer_arn": "arn:aws:iam::811596193553:role/SecurityMonkey", "session_issuer_user_name": "SecurityMonkey"}, "network": {"source_ip": "255.253.125.115", "user_agent": "[Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56]", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1038, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "f90391cc-6d2a-4359-aeb1-770801b6212be", "eventTime": "2017-05-27T04:45:26Z", "eventName": "GetBucketNotification", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.253.125.115", "userAgent": "[Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56]", "awsRegion": "us-west-2", "userIdentity": {"type": "AssumedRole", "principalId": "AROAUB2AA5FQRGAHITW4A:cloudaux", "arn": "arn:aws:sts::811596193553:assumed-role/SecurityMonkey/cloudaux", "accountId": "811596193553", "accessKeyId": "ASIA1FZDVOXSQD6GDJFL", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2017-05-27T04:15:19Z"}, "sessionIssuer": {"type": "Role", "principalId": "AROAUB2AA5FQRGAHITW4A", "arn": "arn:aws:iam::811596193553:role/SecurityMonkey", "accountId": "811596193553", "userName": "SecurityMonkey"}}}, "requestParameters": {"notification": [""], "bucketName": "theend-c1aad500c62e2a57cf12cebf93b282cf.flaws.cloud"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "11178-3839-49db-a1b0-00d25160f93", "record_id": "flaws_cloudtrail:0000100:11178-3839-49db-a1b0-00d25160f93", "row_index": 100, "timestamp": "2017-05-27T04:45:26Z", "event_type": "GetBucketTagging", "event_source": "s3.amazonaws.com", "principal": {"type": "AssumedRole", "arn": "arn:aws:sts::811596193553:assumed-role/SecurityMonkey/cloudaux", "account_id": "811596193553", "principal_id": "AROAUB2AA5FQRGAHITW4A:cloudaux", "user_name": null, "access_key_id": "ASIA1FZDVOXSQD6GDJFL", "session_issuer_arn": "arn:aws:iam::811596193553:role/SecurityMonkey", "session_issuer_user_name": "SecurityMonkey"}, "network": {"source_ip": "255.253.125.115", "user_agent": "[Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56]", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1096, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "11178-3839-49db-a1b0-00d25160f93", "eventTime": "2017-05-27T04:45:26Z", "eventName": "GetBucketTagging", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.253.125.115", "userAgent": "[Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56]", "awsRegion": "us-west-2", "errorCode": "NoSuchTagSet", "errorMessage": "The TagSet does not exist", "userIdentity": {"type": "AssumedRole", "principalId": "AROAUB2AA5FQRGAHITW4A:cloudaux", "arn": "arn:aws:sts::811596193553:assumed-role/SecurityMonkey/cloudaux", "accountId": "811596193553", "accessKeyId": "ASIA1FZDVOXSQD6GDJFL", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2017-05-27T04:15:19Z"}, "sessionIssuer": {"type": "Role", "principalId": "AROAUB2AA5FQRGAHITW4A", "arn": "arn:aws:iam::811596193553:role/SecurityMonkey", "accountId": "811596193553", "userName": "SecurityMonkey"}}}, "requestParameters": {"tagging": [""], "bucketName": "theend-c1aad500c62e2a57cf12cebf93b282cf.flaws.cloud"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "7423c9d1-dafa-454b-b395-c351db82cbcb", "record_id": "flaws_cloudtrail:0000101:7423c9d1-dafa-454b-b395-c351db82cbcb", "row_index": 101, "timestamp": "2017-05-27T04:45:26Z", "event_type": "GetBucketAcl", "event_source": "s3.amazonaws.com", "principal": {"type": "AssumedRole", "arn": "arn:aws:sts::811596193553:assumed-role/SecurityMonkey/cloudaux", "account_id": "811596193553", "principal_id": "AROAUB2AA5FQRGAHITW4A:cloudaux", "user_name": null, "access_key_id": "ASIA1FZDVOXSQD6GDJFL", "session_issuer_arn": "arn:aws:iam::811596193553:role/SecurityMonkey", "session_issuer_user_name": "SecurityMonkey"}, "network": {"source_ip": "255.253.125.115", "user_agent": "[Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56]", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1022, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "7423c9d1-dafa-454b-b395-c351db82cbcb", "eventTime": "2017-05-27T04:45:26Z", "eventName": "GetBucketAcl", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.253.125.115", "userAgent": "[Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56]", "awsRegion": "us-west-2", "userIdentity": {"type": "AssumedRole", "principalId": "AROAUB2AA5FQRGAHITW4A:cloudaux", "arn": "arn:aws:sts::811596193553:assumed-role/SecurityMonkey/cloudaux", "accountId": "811596193553", "accessKeyId": "ASIA1FZDVOXSQD6GDJFL", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2017-05-27T04:15:19Z"}, "sessionIssuer": {"type": "Role", "principalId": "AROAUB2AA5FQRGAHITW4A", "arn": "arn:aws:iam::811596193553:role/SecurityMonkey", "accountId": "811596193553", "userName": "SecurityMonkey"}}}, "requestParameters": {"bucketName": "theend-c1aad500c62e2a57cf12cebf93b282cf.flaws.cloud", "acl": [""]}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "a49a5b4d-fb66-4f18-b515-1f4b3f1311f2", "record_id": "flaws_cloudtrail:0000102:a49a5b4d-fb66-4f18-b515-1f4b3f1311f2", "row_index": 102, "timestamp": "2017-05-27T04:45:26Z", "event_type": "GetBucketLifecycle", "event_source": "s3.amazonaws.com", "principal": {"type": "AssumedRole", "arn": "arn:aws:sts::811596193553:assumed-role/SecurityMonkey/cloudaux", "account_id": "811596193553", "principal_id": "AROAUB2AA5FQRGAHITW4A:cloudaux", "user_name": null, "access_key_id": "ASIA1FZDVOXSQD6GDJFL", "session_issuer_arn": "arn:aws:iam::811596193553:role/SecurityMonkey", "session_issuer_user_name": "SecurityMonkey"}, "network": {"source_ip": "255.253.125.115", "user_agent": "[Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56]", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1136, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "a49a5b4d-fb66-4f18-b515-1f4b3f1311f2", "eventTime": "2017-05-27T04:45:26Z", "eventName": "GetBucketLifecycle", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.253.125.115", "userAgent": "[Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56]", "awsRegion": "us-west-2", "errorCode": "NoSuchLifecycleConfiguration", "errorMessage": "The lifecycle configuration does not exist", "userIdentity": {"type": "AssumedRole", "principalId": "AROAUB2AA5FQRGAHITW4A:cloudaux", "arn": "arn:aws:sts::811596193553:assumed-role/SecurityMonkey/cloudaux", "accountId": "811596193553", "accessKeyId": "ASIA1FZDVOXSQD6GDJFL", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2017-05-27T04:15:19Z"}, "sessionIssuer": {"type": "Role", "principalId": "AROAUB2AA5FQRGAHITW4A", "arn": "arn:aws:iam::811596193553:role/SecurityMonkey", "accountId": "811596193553", "userName": "SecurityMonkey"}}}, "requestParameters": {"lifecycle": [""], "bucketName": "theend-c1aad500c62e2a57cf12cebf93b282cf.flaws.cloud"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "01598780-25de-45d7-827e-5116e3050405", "record_id": "flaws_cloudtrail:0000103:01598780-25de-45d7-827e-5116e3050405", "row_index": 103, "timestamp": "2017-05-27T04:53:25Z", "event_type": "GetCallerIdentity", "event_source": "sts.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/SecurityMokey", "account_id": "811596193553", "principal_id": "AIDAQ9SRE1SZZZ4Q4UOJH", "user_name": "SecurityMokey", "access_key_id": "AKIAXIEAJL3OUPLFQ7PJ", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "220.194.13.61", "user_agent": "aws-cli/2.1.24 Python/3.7.3 Linux/4.14.225 botocore/2.0.0dev45", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 527, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "01598780-25de-45d7-827e-5116e3050405", "eventTime": "2017-05-27T04:53:25Z", "eventName": "GetCallerIdentity", "eventSource": "sts.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "220.194.13.61", "userAgent": "aws-cli/2.1.24 Python/3.7.3 Linux/4.14.225 botocore/2.0.0dev45", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDAQ9SRE1SZZZ4Q4UOJH", "arn": "arn:aws:iam::811596193553:user/SecurityMokey", "accountId": "811596193553", "accessKeyId": "AKIAXIEAJL3OUPLFQ7PJ", "userName": "SecurityMokey"}}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "09a1f5e0-96db-4ca7-92b3-6c11f57a02e4", "record_id": "flaws_cloudtrail:0000104:09a1f5e0-96db-4ca7-92b3-6c11f57a02e4", "row_index": 104, "timestamp": "2017-05-27T04:54:53Z", "event_type": "DescribeTrails", "event_source": "cloudtrail.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/SecurityMokey", "account_id": "811596193553", "principal_id": "AIDAQ9SRE1SZZZ4Q4UOJH", "user_name": "SecurityMokey", "access_key_id": "AKIAXIEAJL3OUPLFQ7PJ", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "220.194.13.61", "user_agent": "aws-cli/2.1.24 Python/3.7.3 Linux/4.14.225 botocore/2.0.0dev45", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 531, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "09a1f5e0-96db-4ca7-92b3-6c11f57a02e4", "eventTime": "2017-05-27T04:54:53Z", "eventName": "DescribeTrails", "eventSource": "cloudtrail.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "220.194.13.61", "userAgent": "aws-cli/2.1.24 Python/3.7.3 Linux/4.14.225 botocore/2.0.0dev45", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDAQ9SRE1SZZZ4Q4UOJH", "arn": "arn:aws:iam::811596193553:user/SecurityMokey", "accountId": "811596193553", "accessKeyId": "AKIAXIEAJL3OUPLFQ7PJ", "userName": "SecurityMokey"}}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "5d4aa878-bd79-41e1-8b6c-efbcf76b98a5", "record_id": "flaws_cloudtrail:0000105:5d4aa878-bd79-41e1-8b6c-efbcf76b98a5", "row_index": 105, "timestamp": "2017-05-27T04:56:26Z", "event_type": "GetTrailStatus", "event_source": "cloudtrail.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/SecurityMokey", "account_id": "811596193553", "principal_id": "AIDAQ9SRE1SZZZ4Q4UOJH", "user_name": "SecurityMokey", "access_key_id": "AKIAXIEAJL3OUPLFQ7PJ", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "220.194.13.61", "user_agent": "aws-cli/2.1.24 Python/3.7.3 Linux/4.14.225 botocore/2.0.0dev45", "aws_region": "us-east-1"}, "resource_arns": ["arn:aws:cloudtrail:us-east-1:811596193553:trail/trail-5408"], "raw_record_size_bytes": 656, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "requestParameters", "resources", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "5d4aa878-bd79-41e1-8b6c-efbcf76b98a5", "eventTime": "2017-05-27T04:56:26Z", "eventName": "GetTrailStatus", "eventSource": "cloudtrail.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "220.194.13.61", "userAgent": "aws-cli/2.1.24 Python/3.7.3 Linux/4.14.225 botocore/2.0.0dev45", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDAQ9SRE1SZZZ4Q4UOJH", "arn": "arn:aws:iam::811596193553:user/SecurityMokey", "accountId": "811596193553", "accessKeyId": "AKIAXIEAJL3OUPLFQ7PJ", "userName": "SecurityMokey"}, "requestParameters": {"name": "trail-5408"}, "resources": [{"ARN": "arn:aws:cloudtrail:us-east-1:811596193553:trail/trail-5408"}]}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "7e92eb4d-d6ae-49d1-b010-b3ebde927670", "record_id": "flaws_cloudtrail:0000106:7e92eb4d-d6ae-49d1-b010-b3ebde927670", "row_index": 106, "timestamp": "2017-05-27T04:57:35Z", "event_type": "StopLogging", "event_source": "cloudtrail.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/SecurityMokey", "account_id": "811596193553", "principal_id": "AIDAQ9SRE1SZZZ4Q4UOJH", "user_name": "SecurityMokey", "access_key_id": "AKIAXIEAJL3OUPLFQ7PJ", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "220.194.13.61", "user_agent": "aws-cli/2.1.24 Python/3.7.3 Linux/4.14.225 botocore/2.0.0dev45", "aws_region": "us-east-1"}, "resource_arns": ["arn:aws:cloudtrail:us-east-1:811596193553:trail/trail-5408"], "raw_record_size_bytes": 653, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "requestParameters", "resources", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "7e92eb4d-d6ae-49d1-b010-b3ebde927670", "eventTime": "2017-05-27T04:57:35Z", "eventName": "StopLogging", "eventSource": "cloudtrail.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "220.194.13.61", "userAgent": "aws-cli/2.1.24 Python/3.7.3 Linux/4.14.225 botocore/2.0.0dev45", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDAQ9SRE1SZZZ4Q4UOJH", "arn": "arn:aws:iam::811596193553:user/SecurityMokey", "accountId": "811596193553", "accessKeyId": "AKIAXIEAJL3OUPLFQ7PJ", "userName": "SecurityMokey"}, "requestParameters": {"name": "trail-5408"}, "resources": [{"ARN": "arn:aws:cloudtrail:us-east-1:811596193553:trail/trail-5408"}]}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "1387ff7b-4bdc-44f9-8b0f-d0a94febeec7", "record_id": "flaws_cloudtrail:0000107:1387ff7b-4bdc-44f9-8b0f-d0a94febeec7", "row_index": 107, "timestamp": "2017-05-27T04:58:22Z", "event_type": "UpdateTrail", "event_source": "cloudtrail.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/SecurityMokey", "account_id": "811596193553", "principal_id": "AIDAQ9SRE1SZZZ4Q4UOJH", "user_name": "SecurityMokey", "access_key_id": "AKIAXIEAJL3OUPLFQ7PJ", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "220.194.13.61", "user_agent": "aws-cli/2.1.24 Python/3.7.3 Linux/4.14.225 botocore/2.0.0dev45", "aws_region": "us-east-1"}, "resource_arns": ["arn:aws:cloudtrail:us-east-1:811596193553:trail/trail-5408"], "raw_record_size_bytes": 712, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "requestParameters", "resources", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "1387ff7b-4bdc-44f9-8b0f-d0a94febeec7", "eventTime": "2017-05-27T04:58:22Z", "eventName": "UpdateTrail", "eventSource": "cloudtrail.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "220.194.13.61", "userAgent": "aws-cli/2.1.24 Python/3.7.3 Linux/4.14.225 botocore/2.0.0dev45", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDAQ9SRE1SZZZ4Q4UOJH", "arn": "arn:aws:iam::811596193553:user/SecurityMokey", "accountId": "811596193553", "accessKeyId": "AKIAXIEAJL3OUPLFQ7PJ", "userName": "SecurityMokey"}, "requestParameters": {"name": "trail-5408", "isMultiRegionTrail": false, "enableLogFileValidation": false}, "resources": [{"ARN": "arn:aws:cloudtrail:us-east-1:811596193553:trail/trail-5408"}]}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "133245e51-6495-4d59-8d78-5738f722ffe0", "record_id": "flaws_cloudtrail:0000108:133245e51-6495-4d59-8d78-5738f722ffe0", "row_index": 108, "timestamp": "2017-05-27T04:59:28Z", "event_type": "AssumeRole", "event_source": "sts.amazonaws.com", "principal": {"type": "AWSService", "arn": null, "account_id": null, "principal_id": null, "user_name": null, "access_key_id": null, "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "ec2.amazonaws.com", "user_agent": "ec2.amazonaws.com", "aws_region": "us-west-2"}, "resource_arns": ["arn:aws:iam::811596193553:role/flaws"], "raw_record_size_bytes": 1480, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "resources", "responseElements", "sharedEventID", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "133245e51-6495-4d59-8d78-5738f722ffe0", "eventTime": "2017-05-27T04:59:28Z", "eventName": "AssumeRole", "eventSource": "sts.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "ec2.amazonaws.com", "userAgent": "ec2.amazonaws.com", "awsRegion": "us-west-2", "userIdentity": {"type": "AWSService", "invokedBy": "ec2.amazonaws.com"}, "requestParameters": {"roleSessionName": "i-aa2d3b42e5c6e801a", "roleArn": "arn:aws:iam::811596193553:role/flaws"}, "responseElements": {"credentials": {"accessKeyId": "ASIAMVF1BDIF845OIL6V", "expiration": "May 27, 2017 11:20:08 AM", "sessionToken": "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"}}, "resources": [{"ARN": "arn:aws:iam::811596193553:role/flaws", "accountId": "811596193553", "type": "AWS::IAM::Role"}]}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "100216-105f-4a0e-8292-b53d6169c311", "record_id": "flaws_cloudtrail:0000109:100216-105f-4a0e-8292-b53d6169c311", "row_index": 109, "timestamp": "2017-05-27T04:59:38Z", "event_type": "AssumeRole", "event_source": "sts.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/SecurityMokey", "account_id": "811596193553", "principal_id": "AIDAQ9SRE1SZZZ4Q4UOJH", "user_name": "SecurityMokey", "access_key_id": "AKIAXJ0III4JBKZDXGXN", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "255.253.125.115", "user_agent": "Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56", "aws_region": "us-east-1"}, "resource_arns": ["arn:aws:iam::811596193553:role/SecurityMonkey"], "raw_record_size_bytes": 1446, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "resources", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "100216-105f-4a0e-8292-b53d6169c311", "eventTime": "2017-05-27T04:59:38Z", "eventName": "AssumeRole", "eventSource": "sts.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.253.125.115", "userAgent": "Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDAQ9SRE1SZZZ4Q4UOJH", "arn": "arn:aws:iam::811596193553:user/SecurityMokey", "accountId": "811596193553", "accessKeyId": "AKIAXJ0III4JBKZDXGXN", "userName": "SecurityMokey"}, "requestParameters": {"roleArn": "arn:aws:iam::811596193553:role/SecurityMonkey", "roleSessionName": "secmonkey"}, "responseElements": {"credentials": {"accessKeyId": "ASIA870BTPEB1LR6H8JI", "expiration": "May 27, 2017 5:59:38 AM", "sessionToken": "FQoDYXdzECYaDMvvw/I59StIVEp5PCLMAcJRNVJrWWksF0Lx/YcEji71XQort7MGaMqasa2hFesdFRFXCyVse9kvuZJO5quTW7ynjorJCNWHSgaPqgPmTttkloAASsPK3XjBy6hYI4jIHrkqQFFl0IukCOYCHSEsITu/W79NfXTIdZJajXo0rVaFkB3qf1ENAxhIYSePe+28/8wyifbVywbPqZ81K32p+iar09ddc+YIUoM8ECyreGPcp+6xXpv51Fh4BiHKxNDaPas/BN2GkikMMWcM9CnHbl921rW1Haqlal958yi6j6TJBQ=="}, "assumedRoleUser": {"assumedRoleId": "AROAUB2AA5FQRGAHITW4A:secmonkey", "arn": "arn:aws:sts::811596193553:assumed-role/SecurityMonkey/secmonkey"}}, "resources": [{"ARN": "arn:aws:iam::811596193553:role/SecurityMonkey", "accountId": "811596193553", "type": "AWS::IAM::Role"}]}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "d22fea1b-4057-4dc2-a6cb-3c47c5c9ebce", "record_id": "flaws_cloudtrail:0000110:d22fea1b-4057-4dc2-a6cb-3c47c5c9ebce", "row_index": 110, "timestamp": "2017-05-27T04:59:38Z", "event_type": "AssumeRole", "event_source": "sts.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/SecurityMokey", "account_id": "811596193553", "principal_id": "AIDAQ9SRE1SZZZ4Q4UOJH", "user_name": "SecurityMokey", "access_key_id": "AKIAXJ0III4JBKZDXGXN", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "255.253.125.115", "user_agent": "Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56", "aws_region": "us-east-1"}, "resource_arns": ["arn:aws:iam::811596193553:role/SecurityMonkey"], "raw_record_size_bytes": 1455, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "resources", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "d22fea1b-4057-4dc2-a6cb-3c47c5c9ebce", "eventTime": "2017-05-27T04:59:38Z", "eventName": "AssumeRole", "eventSource": "sts.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.253.125.115", "userAgent": "Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDAQ9SRE1SZZZ4Q4UOJH", "arn": "arn:aws:iam::811596193553:user/SecurityMokey", "accountId": "811596193553", "accessKeyId": "AKIAXJ0III4JBKZDXGXN", "userName": "SecurityMokey"}, "requestParameters": {"roleArn": "arn:aws:iam::811596193553:role/SecurityMonkey", "roleSessionName": "secmonkey"}, "responseElements": {"credentials": {"accessKeyId": "ASIAI9QHHRMC9F6XQJXN", "expiration": "May 27, 2017 5:59:38 AM", "sessionToken": "FQoDYXdzECYaDOAegb5Kv3oXy4jU5SLMAe9a+nfrhBGsrayPdsOBMKcolwsrSU/dvJlD3fOjS1PQEZH3uS1suhn/LdMWC4B8QjqJLReeW8iFklfw66HnV64PFr2FLiojG/4hbnfYMJcZFZfkdSWgUCkpkdWPBrPSrzJl+woWV5asxzSeufUIatIvpXixipjpKM4YF7NFea4hsr/FJsQoKzCO6NE1qNLXPs0DiirVviGEJA6RKK586QilKMdg3d5hV5bITXGtBIyjlq/3eQOE+4jNGQEXr4RwHlrKcrJA6vZB+IrnkCi6j6TJBQ=="}, "assumedRoleUser": {"assumedRoleId": "AROAUB2AA5FQRGAHITW4A:secmonkey", "arn": "arn:aws:sts::811596193553:assumed-role/SecurityMonkey/secmonkey"}}, "resources": [{"ARN": "arn:aws:iam::811596193553:role/SecurityMonkey", "accountId": "811596193553", "type": "AWS::IAM::Role"}]}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "896728d6-7deb-4cc2-a0d2-411306a59337a", "record_id": "flaws_cloudtrail:0000111:896728d6-7deb-4cc2-a0d2-411306a59337a", "row_index": 111, "timestamp": "2017-05-27T04:59:39Z", "event_type": "AssumeRole", "event_source": "sts.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/SecurityMokey", "account_id": "811596193553", "principal_id": "AIDAQ9SRE1SZZZ4Q4UOJH", "user_name": "SecurityMokey", "access_key_id": "AKIAXJ0III4JBKZDXGXN", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "255.253.125.115", "user_agent": "Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56", "aws_region": "us-east-1"}, "resource_arns": ["arn:aws:iam::811596193553:role/SecurityMonkey"], "raw_record_size_bytes": 1454, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "resources", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "896728d6-7deb-4cc2-a0d2-411306a59337a", "eventTime": "2017-05-27T04:59:39Z", "eventName": "AssumeRole", "eventSource": "sts.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.253.125.115", "userAgent": "Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDAQ9SRE1SZZZ4Q4UOJH", "arn": "arn:aws:iam::811596193553:user/SecurityMokey", "accountId": "811596193553", "accessKeyId": "AKIAXJ0III4JBKZDXGXN", "userName": "SecurityMokey"}, "requestParameters": {"roleArn": "arn:aws:iam::811596193553:role/SecurityMonkey", "roleSessionName": "secmonkey"}, "responseElements": {"credentials": {"accessKeyId": "ASIACKJDCBP4PN08U47Q", "expiration": "May 27, 2017 5:59:39 AM", "sessionToken": "FQoDYXdzECYaDNKxa+iK2efxdgR4tyLMAbT7FdRABObKPh0G4WwKAc84sIG2QgzR8GlKBrs1JzRFW9qNs3dDjSvr7LwnIF6u0ukjmZIHvnSv+iastuqoRYwf2zbVG+/RtqwWMoWRMbR7zAWPAn41/55TQp6DJ7XmfC9DE7fLBivs89VVkmOwyWEAHd1YkXpVhx5r6gT3gH0/iKcrSB9EVVRmWz9nEaH3pn6DS2x4ksqVB73U6bj683JDVDQEr+4W+jcT+rsh0He717WvS4AObfAwCJWW8LqHa1qqCY+URghM87OOrSi7j6TJBQ=="}, "assumedRoleUser": {"assumedRoleId": "AROAUB2AA5FQRGAHITW4A:secmonkey", "arn": "arn:aws:sts::811596193553:assumed-role/SecurityMonkey/secmonkey"}}, "resources": [{"ARN": "arn:aws:iam::811596193553:role/SecurityMonkey", "accountId": "811596193553", "type": "AWS::IAM::Role"}]}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "dbf652666-a3a6-4903-ab3b-79c18895feb1", "record_id": "flaws_cloudtrail:0000112:dbf652666-a3a6-4903-ab3b-79c18895feb1", "row_index": 112, "timestamp": "2017-05-27T04:59:39Z", "event_type": "ListPolicies", "event_source": "iam.amazonaws.com", "principal": {"type": "AssumedRole", "arn": "arn:aws:sts::811596193553:assumed-role/SecurityMonkey/secmonkey", "account_id": "811596193553", "principal_id": "AROAUB2AA5FQRGAHITW4A:secmonkey", "user_name": null, "access_key_id": "ASIAI9QHHRMC9F6XQJXN", "session_issuer_arn": "arn:aws:iam::811596193553:role/SecurityMonkey", "session_issuer_user_name": "SecurityMonkey"}, "network": {"source_ip": "255.253.125.115", "user_agent": "Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56 Resource", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 996, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "dbf652666-a3a6-4903-ab3b-79c18895feb1", "eventTime": "2017-05-27T04:59:39Z", "eventName": "ListPolicies", "eventSource": "iam.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.253.125.115", "userAgent": "Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56 Resource", "awsRegion": "us-east-1", "userIdentity": {"type": "AssumedRole", "principalId": "AROAUB2AA5FQRGAHITW4A:secmonkey", "arn": "arn:aws:sts::811596193553:assumed-role/SecurityMonkey/secmonkey", "accountId": "811596193553", "accessKeyId": "ASIAI9QHHRMC9F6XQJXN", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2017-05-27T04:59:38Z"}, "sessionIssuer": {"type": "Role", "principalId": "AROAUB2AA5FQRGAHITW4A", "arn": "arn:aws:iam::811596193553:role/SecurityMonkey", "accountId": "811596193553", "userName": "SecurityMonkey"}}}, "requestParameters": {"onlyAttached": false}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "6fbe2fff-3b93-463c-822b-73f10d585212", "record_id": "flaws_cloudtrail:0000113:6fbe2fff-3b93-463c-822b-73f10d585212", "row_index": 113, "timestamp": "2017-05-27T04:59:39Z", "event_type": "ListPolicies", "event_source": "iam.amazonaws.com", "principal": {"type": "AssumedRole", "arn": "arn:aws:sts::811596193553:assumed-role/SecurityMonkey/secmonkey", "account_id": "811596193553", "principal_id": "AROAUB2AA5FQRGAHITW4A:secmonkey", "user_name": null, "access_key_id": "ASIAI9QHHRMC9F6XQJXN", "session_issuer_arn": "arn:aws:iam::811596193553:role/SecurityMonkey", "session_issuer_user_name": "SecurityMonkey"}, "network": {"source_ip": "255.253.125.115", "user_agent": "Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56 Resource", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 1119, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "6fbe2fff-3b93-463c-822b-73f10d585212", "eventTime": "2017-05-27T04:59:39Z", "eventName": "ListPolicies", "eventSource": "iam.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.253.125.115", "userAgent": "Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56 Resource", "awsRegion": "us-east-1", "userIdentity": {"type": "AssumedRole", "principalId": "AROAUB2AA5FQRGAHITW4A:secmonkey", "arn": "arn:aws:sts::811596193553:assumed-role/SecurityMonkey/secmonkey", "accountId": "811596193553", "accessKeyId": "ASIAI9QHHRMC9F6XQJXN", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2017-05-27T04:59:38Z"}, "sessionIssuer": {"type": "Role", "principalId": "AROAUB2AA5FQRGAHITW4A", "arn": "arn:aws:iam::811596193553:role/SecurityMonkey", "accountId": "811596193553", "userName": "SecurityMonkey"}}}, "requestParameters": {"marker": "ACI6JLSZw5TWnrPCMgmjO1gufMZuhJGM7sXj+Xq354lZmUoBjzxE4dJg9U/DOe6HbmPNwsSuT6zyQwWcZwipd/EYV8YAhjO8kqkIvREka44xtA==", "onlyAttached": false}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "47ce5c2f-dd69-4af7-9143-35a364bfe4f9", "record_id": "flaws_cloudtrail:0000114:47ce5c2f-dd69-4af7-9143-35a364bfe4f9", "row_index": 114, "timestamp": "2017-05-27T04:59:39Z", "event_type": "DescribeTrails", "event_source": "cloudtrail.amazonaws.com", "principal": {"type": "AssumedRole", "arn": "arn:aws:sts::811596193553:assumed-role/SecurityMonkey/secmonkey", "account_id": "811596193553", "principal_id": "AROAUB2AA5FQRGAHITW4A:secmonkey", "user_name": null, "access_key_id": "ASIA870BTPEB1LR6H8JI", "session_issuer_arn": "arn:aws:iam::811596193553:role/SecurityMonkey", "session_issuer_user_name": "SecurityMonkey"}, "network": {"source_ip": "255.253.125.115", "user_agent": "Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56", "aws_region": "us-west-1"}, "resource_arns": [], "raw_record_size_bytes": 977, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "47ce5c2f-dd69-4af7-9143-35a364bfe4f9", "eventTime": "2017-05-27T04:59:39Z", "eventName": "DescribeTrails", "eventSource": "cloudtrail.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.253.125.115", "userAgent": "Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56", "awsRegion": "us-west-1", "userIdentity": {"type": "AssumedRole", "principalId": "AROAUB2AA5FQRGAHITW4A:secmonkey", "arn": "arn:aws:sts::811596193553:assumed-role/SecurityMonkey/secmonkey", "accountId": "811596193553", "accessKeyId": "ASIA870BTPEB1LR6H8JI", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2017-05-27T04:59:38Z"}, "sessionIssuer": {"type": "Role", "principalId": "AROAUB2AA5FQRGAHITW4A", "arn": "arn:aws:iam::811596193553:role/SecurityMonkey", "accountId": "811596193553", "userName": "SecurityMonkey"}}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "262310b4-d64c-406d-98e9-72aa7d5e31b7", "record_id": "flaws_cloudtrail:0000115:262310b4-d64c-406d-98e9-72aa7d5e31b7", "row_index": 115, "timestamp": "2017-05-27T04:59:39Z", "event_type": "GetTrailStatus", "event_source": "cloudtrail.amazonaws.com", "principal": {"type": "AssumedRole", "arn": "arn:aws:sts::811596193553:assumed-role/SecurityMonkey/secmonkey", "account_id": "811596193553", "principal_id": "AROAUB2AA5FQRGAHITW4A:secmonkey", "user_name": null, "access_key_id": "ASIA870BTPEB1LR6H8JI", "session_issuer_arn": "arn:aws:iam::811596193553:role/SecurityMonkey", "session_issuer_user_name": "SecurityMonkey"}, "network": {"source_ip": "255.253.125.115", "user_agent": "Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56", "aws_region": "us-west-1"}, "resource_arns": [], "raw_record_size_bytes": 1043, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "262310b4-d64c-406d-98e9-72aa7d5e31b7", "eventTime": "2017-05-27T04:59:39Z", "eventName": "GetTrailStatus", "eventSource": "cloudtrail.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.253.125.115", "userAgent": "Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56", "awsRegion": "us-west-1", "userIdentity": {"type": "AssumedRole", "principalId": "AROAUB2AA5FQRGAHITW4A:secmonkey", "arn": "arn:aws:sts::811596193553:assumed-role/SecurityMonkey/secmonkey", "accountId": "811596193553", "accessKeyId": "ASIA870BTPEB1LR6H8JI", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2017-05-27T04:59:38Z"}, "sessionIssuer": {"type": "Role", "principalId": "AROAUB2AA5FQRGAHITW4A", "arn": "arn:aws:iam::811596193553:role/SecurityMonkey", "accountId": "811596193553", "userName": "SecurityMonkey"}}}, "requestParameters": {"name": "arn:aws:cloudtrail:us-west-2:811596193553:trail/cloudtrail"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "ba817a25-410b-4676-9cde-23c5a2021a04", "record_id": "flaws_cloudtrail:0000116:ba817a25-410b-4676-9cde-23c5a2021a04", "row_index": 116, "timestamp": "2017-05-27T04:59:40Z", "event_type": "GetTrailStatus", "event_source": "cloudtrail.amazonaws.com", "principal": {"type": "AssumedRole", "arn": "arn:aws:sts::811596193553:assumed-role/SecurityMonkey/secmonkey", "account_id": "811596193553", "principal_id": "AROAUB2AA5FQRGAHITW4A:secmonkey", "user_name": null, "access_key_id": "ASIACKJDCBP4PN08U47Q", "session_issuer_arn": "arn:aws:iam::811596193553:role/SecurityMonkey", "session_issuer_user_name": "SecurityMonkey"}, "network": {"source_ip": "255.253.125.115", "user_agent": "Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 1042, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "ba817a25-410b-4676-9cde-23c5a2021a04", "eventTime": "2017-05-27T04:59:40Z", "eventName": "GetTrailStatus", "eventSource": "cloudtrail.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.253.125.115", "userAgent": "Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56", "awsRegion": "us-east-1", "userIdentity": {"type": "AssumedRole", "principalId": "AROAUB2AA5FQRGAHITW4A:secmonkey", "arn": "arn:aws:sts::811596193553:assumed-role/SecurityMonkey/secmonkey", "accountId": "811596193553", "accessKeyId": "ASIACKJDCBP4PN08U47Q", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2017-05-27T04:59:39Z"}, "sessionIssuer": {"type": "Role", "principalId": "AROAUB2AA5FQRGAHITW4A", "arn": "arn:aws:iam::811596193553:role/SecurityMonkey", "accountId": "811596193553", "userName": "SecurityMonkey"}}}, "requestParameters": {"name": "arn:aws:cloudtrail:us-west-2:811596193553:trail/cloudtrail"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "cd7e448e-5ff3-4497-8863-a6342c97cbc8", "record_id": "flaws_cloudtrail:0000117:cd7e448e-5ff3-4497-8863-a6342c97cbc8", "row_index": 117, "timestamp": "2017-05-27T04:59:40Z", "event_type": "DescribeTrails", "event_source": "cloudtrail.amazonaws.com", "principal": {"type": "AssumedRole", "arn": "arn:aws:sts::811596193553:assumed-role/SecurityMonkey/secmonkey", "account_id": "811596193553", "principal_id": "AROAUB2AA5FQRGAHITW4A:secmonkey", "user_name": null, "access_key_id": "ASIACKJDCBP4PN08U47Q", "session_issuer_arn": "arn:aws:iam::811596193553:role/SecurityMonkey", "session_issuer_user_name": "SecurityMonkey"}, "network": {"source_ip": "255.253.125.115", "user_agent": "Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 977, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "cd7e448e-5ff3-4497-8863-a6342c97cbc8", "eventTime": "2017-05-27T04:59:40Z", "eventName": "DescribeTrails", "eventSource": "cloudtrail.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.253.125.115", "userAgent": "Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56", "awsRegion": "us-east-1", "userIdentity": {"type": "AssumedRole", "principalId": "AROAUB2AA5FQRGAHITW4A:secmonkey", "arn": "arn:aws:sts::811596193553:assumed-role/SecurityMonkey/secmonkey", "accountId": "811596193553", "accessKeyId": "ASIACKJDCBP4PN08U47Q", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2017-05-27T04:59:39Z"}, "sessionIssuer": {"type": "Role", "principalId": "AROAUB2AA5FQRGAHITW4A", "arn": "arn:aws:iam::811596193553:role/SecurityMonkey", "accountId": "811596193553", "userName": "SecurityMonkey"}}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "1b6128ee-6137-4f70-a87f-2a0129d1ee0e", "record_id": "flaws_cloudtrail:0000118:1b6128ee-6137-4f70-a87f-2a0129d1ee0e", "row_index": 118, "timestamp": "2017-05-27T04:59:40Z", "event_type": "AssumeRole", "event_source": "sts.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/SecurityMokey", "account_id": "811596193553", "principal_id": "AIDAQ9SRE1SZZZ4Q4UOJH", "user_name": "SecurityMokey", "access_key_id": "AKIAXJ0III4JBKZDXGXN", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "255.253.125.115", "user_agent": "Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56", "aws_region": "us-east-1"}, "resource_arns": ["arn:aws:iam::811596193553:role/SecurityMonkey"], "raw_record_size_bytes": 1454, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "resources", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "1b6128ee-6137-4f70-a87f-2a0129d1ee0e", "eventTime": "2017-05-27T04:59:40Z", "eventName": "AssumeRole", "eventSource": "sts.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.253.125.115", "userAgent": "Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDAQ9SRE1SZZZ4Q4UOJH", "arn": "arn:aws:iam::811596193553:user/SecurityMokey", "accountId": "811596193553", "accessKeyId": "AKIAXJ0III4JBKZDXGXN", "userName": "SecurityMokey"}, "requestParameters": {"roleArn": "arn:aws:iam::811596193553:role/SecurityMonkey", "roleSessionName": "secmonkey"}, "responseElements": {"credentials": {"accessKeyId": "ASIAQNYWSW8OTF2DA92N", "expiration": "May 27, 2017 5:59:40 AM", "sessionToken": "FQoDYXdzECYaDP6GLK8bJl1d8E3NQSLMAVGbMaNmyVADJqXiZnuSsVG4DSzIr+Lmvl/sfXYFr59f3mqh2ZxHeRA8BwppExWKkpKffVSlZfTs+QbGm/xoZQL8v/MZi4yBVW3YrkyPf/teNfFihiZsIUvSc6/OyiCxlkiWdfSSRfnSPK1ORxeI3Pe/1G43hOesqaczzaAn+uKvt/vdsnquiBG5COervFL9jp6GvqM0ilUdUzTBOCctL7bLUQpd1gkjtah0q/f5TJw0G6TyolbE+CQo0nyxOlC7EPuLomYI1l7qgkOgnii8j6TJBQ=="}, "assumedRoleUser": {"assumedRoleId": "AROAUB2AA5FQRGAHITW4A:secmonkey", "arn": "arn:aws:sts::811596193553:assumed-role/SecurityMonkey/secmonkey"}}, "resources": [{"ARN": "arn:aws:iam::811596193553:role/SecurityMonkey", "accountId": "811596193553", "type": "AWS::IAM::Role"}]}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "31deeaf5-1296-4336-9f8e-1f5579efff71", "record_id": "flaws_cloudtrail:0000119:31deeaf5-1296-4336-9f8e-1f5579efff71", "row_index": 119, "timestamp": "2017-05-27T04:59:40Z", "event_type": "ListPolicies", "event_source": "iam.amazonaws.com", "principal": {"type": "AssumedRole", "arn": "arn:aws:sts::811596193553:assumed-role/SecurityMonkey/secmonkey", "account_id": "811596193553", "principal_id": "AROAUB2AA5FQRGAHITW4A:secmonkey", "user_name": null, "access_key_id": "ASIAI9QHHRMC9F6XQJXN", "session_issuer_arn": "arn:aws:iam::811596193553:role/SecurityMonkey", "session_issuer_user_name": "SecurityMonkey"}, "network": {"source_ip": "255.253.125.115", "user_agent": "Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56 Resource", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 1119, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "31deeaf5-1296-4336-9f8e-1f5579efff71", "eventTime": "2017-05-27T04:59:40Z", "eventName": "ListPolicies", "eventSource": "iam.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.253.125.115", "userAgent": "Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56 Resource", "awsRegion": "us-east-1", "userIdentity": {"type": "AssumedRole", "principalId": "AROAUB2AA5FQRGAHITW4A:secmonkey", "arn": "arn:aws:sts::811596193553:assumed-role/SecurityMonkey/secmonkey", "accountId": "811596193553", "accessKeyId": "ASIAI9QHHRMC9F6XQJXN", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2017-05-27T04:59:38Z"}, "sessionIssuer": {"type": "Role", "principalId": "AROAUB2AA5FQRGAHITW4A", "arn": "arn:aws:iam::811596193553:role/SecurityMonkey", "accountId": "811596193553", "userName": "SecurityMonkey"}}}, "requestParameters": {"marker": "ABy+hkCgeW7N9NNVOXADBji6lgkSbws/06dy4aiB3BAAKpzY3yT+OW8uhfXLwZd8LYnNzO/k2R3EpAwoQX/5WnY11agBpBPpT1NTJiEXGe8m9A==", "onlyAttached": false}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "ad780d01-74ed-4681-97d1-c0bac2975da9", "record_id": "flaws_cloudtrail:0000120:ad780d01-74ed-4681-97d1-c0bac2975da9", "row_index": 120, "timestamp": "2017-05-27T04:59:40Z", "event_type": "GetPolicyVersion", "event_source": "iam.amazonaws.com", "principal": {"type": "AssumedRole", "arn": "arn:aws:sts::811596193553:assumed-role/SecurityMonkey/secmonkey", "account_id": "811596193553", "principal_id": "AROAUB2AA5FQRGAHITW4A:secmonkey", "user_name": null, "access_key_id": "ASIAI9QHHRMC9F6XQJXN", "session_issuer_arn": "arn:aws:iam::811596193553:role/SecurityMonkey", "session_issuer_user_name": "SecurityMonkey"}, "network": {"source_ip": "255.253.125.115", "user_agent": "Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56 Resource", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 1120, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "ad780d01-74ed-4681-97d1-c0bac2975da9", "eventTime": "2017-05-27T04:59:40Z", "eventName": "GetPolicyVersion", "eventSource": "iam.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.253.125.115", "userAgent": "Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56 Resource", "awsRegion": "us-east-1", "userIdentity": {"type": "AssumedRole", "principalId": "AROAUB2AA5FQRGAHITW4A:secmonkey", "arn": "arn:aws:sts::811596193553:assumed-role/SecurityMonkey/secmonkey", "accountId": "811596193553", "accessKeyId": "ASIAI9QHHRMC9F6XQJXN", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2017-05-27T04:59:38Z"}, "sessionIssuer": {"type": "Role", "principalId": "AROAUB2AA5FQRGAHITW4A", "arn": "arn:aws:iam::811596193553:role/SecurityMonkey", "accountId": "811596193553", "userName": "SecurityMonkey"}}}, "requestParameters": {"policyArn": "arn:aws:iam::811596193553:policy/service-role/AWSLambdaBasicExecutionRole-b6ab3a24-1aa4-4855-94d4-40cdef59ec5b", "versionId": "v1"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "ee367af7-6a41-4a34-8cff-ac5bc5a8ee9d", "record_id": "flaws_cloudtrail:0000121:ee367af7-6a41-4a34-8cff-ac5bc5a8ee9d", "row_index": 121, "timestamp": "2017-05-27T04:59:40Z", "event_type": "ListEntitiesForPolicy", "event_source": "iam.amazonaws.com", "principal": {"type": "AssumedRole", "arn": "arn:aws:sts::811596193553:assumed-role/SecurityMonkey/secmonkey", "account_id": "811596193553", "principal_id": "AROAUB2AA5FQRGAHITW4A:secmonkey", "user_name": null, "access_key_id": "ASIAI9QHHRMC9F6XQJXN", "session_issuer_arn": "arn:aws:iam::811596193553:role/SecurityMonkey", "session_issuer_user_name": "SecurityMonkey"}, "network": {"source_ip": "255.253.125.115", "user_agent": "Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56 Resource", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 1130, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "ee367af7-6a41-4a34-8cff-ac5bc5a8ee9d", "eventTime": "2017-05-27T04:59:40Z", "eventName": "ListEntitiesForPolicy", "eventSource": "iam.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.253.125.115", "userAgent": "Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56 Resource", "awsRegion": "us-east-1", "userIdentity": {"type": "AssumedRole", "principalId": "AROAUB2AA5FQRGAHITW4A:secmonkey", "arn": "arn:aws:sts::811596193553:assumed-role/SecurityMonkey/secmonkey", "accountId": "811596193553", "accessKeyId": "ASIAI9QHHRMC9F6XQJXN", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2017-05-27T04:59:38Z"}, "sessionIssuer": {"type": "Role", "principalId": "AROAUB2AA5FQRGAHITW4A", "arn": "arn:aws:iam::811596193553:role/SecurityMonkey", "accountId": "811596193553", "userName": "SecurityMonkey"}}}, "requestParameters": {"entityFilter": "User", "policyArn": "arn:aws:iam::811596193553:policy/service-role/AWSLambdaBasicExecutionRole-d306bccd-4ecb-4557-a96f-9dbc7460dddc"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "571418-2746-46a4-994c-f6081a405245", "record_id": "flaws_cloudtrail:0000122:571418-2746-46a4-994c-f6081a405245", "row_index": 122, "timestamp": "2017-05-27T04:59:40Z", "event_type": "ListEntitiesForPolicy", "event_source": "iam.amazonaws.com", "principal": {"type": "AssumedRole", "arn": "arn:aws:sts::811596193553:assumed-role/SecurityMonkey/secmonkey", "account_id": "811596193553", "principal_id": "AROAUB2AA5FQRGAHITW4A:secmonkey", "user_name": null, "access_key_id": "ASIAI9QHHRMC9F6XQJXN", "session_issuer_arn": "arn:aws:iam::811596193553:role/SecurityMonkey", "session_issuer_user_name": "SecurityMonkey"}, "network": {"source_ip": "255.253.125.115", "user_agent": "Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56 Resource", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 1128, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "571418-2746-46a4-994c-f6081a405245", "eventTime": "2017-05-27T04:59:40Z", "eventName": "ListEntitiesForPolicy", "eventSource": "iam.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.253.125.115", "userAgent": "Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56 Resource", "awsRegion": "us-east-1", "userIdentity": {"type": "AssumedRole", "principalId": "AROAUB2AA5FQRGAHITW4A:secmonkey", "arn": "arn:aws:sts::811596193553:assumed-role/SecurityMonkey/secmonkey", "accountId": "811596193553", "accessKeyId": "ASIAI9QHHRMC9F6XQJXN", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2017-05-27T04:59:38Z"}, "sessionIssuer": {"type": "Role", "principalId": "AROAUB2AA5FQRGAHITW4A", "arn": "arn:aws:iam::811596193553:role/SecurityMonkey", "accountId": "811596193553", "userName": "SecurityMonkey"}}}, "requestParameters": {"entityFilter": "Role", "policyArn": "arn:aws:iam::811596193553:policy/service-role/AWSLambdaBasicExecutionRole-d306bccd-4ecb-4557-a96f-9dbc7460dddc"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "b24e597a-4034-4bee-bd24-139099ea2a3ad", "record_id": "flaws_cloudtrail:0000123:b24e597a-4034-4bee-bd24-139099ea2a3ad", "row_index": 123, "timestamp": "2017-05-27T04:59:40Z", "event_type": "GetRole", "event_source": "iam.amazonaws.com", "principal": {"type": "AssumedRole", "arn": "arn:aws:sts::811596193553:assumed-role/SecurityMonkey/secmonkey", "account_id": "811596193553", "principal_id": "AROAUB2AA5FQRGAHITW4A:secmonkey", "user_name": null, "access_key_id": "ASIAI9QHHRMC9F6XQJXN", "session_issuer_arn": "arn:aws:iam::811596193553:role/SecurityMonkey", "session_issuer_user_name": "SecurityMonkey"}, "network": {"source_ip": "255.253.125.115", "user_agent": "Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56 Resource", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 990, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "b24e597a-4034-4bee-bd24-139099ea2a3ad", "eventTime": "2017-05-27T04:59:40Z", "eventName": "GetRole", "eventSource": "iam.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.253.125.115", "userAgent": "Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56 Resource", "awsRegion": "us-east-1", "userIdentity": {"type": "AssumedRole", "principalId": "AROAUB2AA5FQRGAHITW4A:secmonkey", "arn": "arn:aws:sts::811596193553:assumed-role/SecurityMonkey/secmonkey", "accountId": "811596193553", "accessKeyId": "ASIAI9QHHRMC9F6XQJXN", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2017-05-27T04:59:38Z"}, "sessionIssuer": {"type": "Role", "principalId": "AROAUB2AA5FQRGAHITW4A", "arn": "arn:aws:iam::811596193553:role/SecurityMonkey", "accountId": "811596193553", "userName": "SecurityMonkey"}}}, "requestParameters": {"roleName": "Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "a3c59313-6989-4618-897b-caa1e96d1619", "record_id": "flaws_cloudtrail:0000124:a3c59313-6989-4618-897b-caa1e96d1619", "row_index": 124, "timestamp": "2017-05-27T04:59:40Z", "event_type": "ListEntitiesForPolicy", "event_source": "iam.amazonaws.com", "principal": {"type": "AssumedRole", "arn": "arn:aws:sts::811596193553:assumed-role/SecurityMonkey/secmonkey", "account_id": "811596193553", "principal_id": "AROAUB2AA5FQRGAHITW4A:secmonkey", "user_name": null, "access_key_id": "ASIAI9QHHRMC9F6XQJXN", "session_issuer_arn": "arn:aws:iam::811596193553:role/SecurityMonkey", "session_issuer_user_name": "SecurityMonkey"}, "network": {"source_ip": "255.253.125.115", "user_agent": "Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56 Resource", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 1131, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "a3c59313-6989-4618-897b-caa1e96d1619", "eventTime": "2017-05-27T04:59:40Z", "eventName": "ListEntitiesForPolicy", "eventSource": "iam.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.253.125.115", "userAgent": "Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56 Resource", "awsRegion": "us-east-1", "userIdentity": {"type": "AssumedRole", "principalId": "AROAUB2AA5FQRGAHITW4A:secmonkey", "arn": "arn:aws:sts::811596193553:assumed-role/SecurityMonkey/secmonkey", "accountId": "811596193553", "accessKeyId": "ASIAI9QHHRMC9F6XQJXN", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2017-05-27T04:59:38Z"}, "sessionIssuer": {"type": "Role", "principalId": "AROAUB2AA5FQRGAHITW4A", "arn": "arn:aws:iam::811596193553:role/SecurityMonkey", "accountId": "811596193553", "userName": "SecurityMonkey"}}}, "requestParameters": {"entityFilter": "Group", "policyArn": "arn:aws:iam::811596193553:policy/service-role/AWSLambdaBasicExecutionRole-d306bccd-4ecb-4557-a96f-9dbc7460dddc"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "b7634f53-023c-4496-988f-c5f170a5f59a", "record_id": "flaws_cloudtrail:0000125:b7634f53-023c-4496-988f-c5f170a5f59a", "row_index": 125, "timestamp": "2017-05-27T04:59:40Z", "event_type": "GetPolicyVersion", "event_source": "iam.amazonaws.com", "principal": {"type": "AssumedRole", "arn": "arn:aws:sts::811596193553:assumed-role/SecurityMonkey/secmonkey", "account_id": "811596193553", "principal_id": "AROAUB2AA5FQRGAHITW4A:secmonkey", "user_name": null, "access_key_id": "ASIAI9QHHRMC9F6XQJXN", "session_issuer_arn": "arn:aws:iam::811596193553:role/SecurityMonkey", "session_issuer_user_name": "SecurityMonkey"}, "network": {"source_ip": "255.253.125.115", "user_agent": "Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56 Resource", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 1120, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "b7634f53-023c-4496-988f-c5f170a5f59a", "eventTime": "2017-05-27T04:59:40Z", "eventName": "GetPolicyVersion", "eventSource": "iam.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.253.125.115", "userAgent": "Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56 Resource", "awsRegion": "us-east-1", "userIdentity": {"type": "AssumedRole", "principalId": "AROAUB2AA5FQRGAHITW4A:secmonkey", "arn": "arn:aws:sts::811596193553:assumed-role/SecurityMonkey/secmonkey", "accountId": "811596193553", "accessKeyId": "ASIAI9QHHRMC9F6XQJXN", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2017-05-27T04:59:38Z"}, "sessionIssuer": {"type": "Role", "principalId": "AROAUB2AA5FQRGAHITW4A", "arn": "arn:aws:iam::811596193553:role/SecurityMonkey", "accountId": "811596193553", "userName": "SecurityMonkey"}}}, "requestParameters": {"policyArn": "arn:aws:iam::811596193553:policy/service-role/AWSLambdaBasicExecutionRole-d306bccd-4ecb-4557-a96f-9dbc7460dddc", "versionId": "v1"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "805b38fa-0d55-4d65-86ed-382bd121cb98", "record_id": "flaws_cloudtrail:0000126:805b38fa-0d55-4d65-86ed-382bd121cb98", "row_index": 126, "timestamp": "2017-05-27T04:59:41Z", "event_type": "DescribeTrails", "event_source": "cloudtrail.amazonaws.com", "principal": {"type": "AssumedRole", "arn": "arn:aws:sts::811596193553:assumed-role/SecurityMonkey/secmonkey", "account_id": "811596193553", "principal_id": "AROAUB2AA5FQRGAHITW4A:secmonkey", "user_name": null, "access_key_id": "ASIAQNYWSW8OTF2DA92N", "session_issuer_arn": "arn:aws:iam::811596193553:role/SecurityMonkey", "session_issuer_user_name": "SecurityMonkey"}, "network": {"source_ip": "255.253.125.115", "user_agent": "Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56", "aws_region": "ap-northeast-1"}, "resource_arns": [], "raw_record_size_bytes": 982, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "805b38fa-0d55-4d65-86ed-382bd121cb98", "eventTime": "2017-05-27T04:59:41Z", "eventName": "DescribeTrails", "eventSource": "cloudtrail.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.253.125.115", "userAgent": "Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56", "awsRegion": "ap-northeast-1", "userIdentity": {"type": "AssumedRole", "principalId": "AROAUB2AA5FQRGAHITW4A:secmonkey", "arn": "arn:aws:sts::811596193553:assumed-role/SecurityMonkey/secmonkey", "accountId": "811596193553", "accessKeyId": "ASIAQNYWSW8OTF2DA92N", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2017-05-27T04:59:40Z"}, "sessionIssuer": {"type": "Role", "principalId": "AROAUB2AA5FQRGAHITW4A", "arn": "arn:aws:iam::811596193553:role/SecurityMonkey", "accountId": "811596193553", "userName": "SecurityMonkey"}}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "61bd4374-2324-4c95-97ef-ed2a79d2cde4", "record_id": "flaws_cloudtrail:0000127:61bd4374-2324-4c95-97ef-ed2a79d2cde4", "row_index": 127, "timestamp": "2017-05-27T04:59:41Z", "event_type": "GetTrailStatus", "event_source": "cloudtrail.amazonaws.com", "principal": {"type": "AssumedRole", "arn": "arn:aws:sts::811596193553:assumed-role/SecurityMonkey/secmonkey", "account_id": "811596193553", "principal_id": "AROAUB2AA5FQRGAHITW4A:secmonkey", "user_name": null, "access_key_id": "ASIAQNYWSW8OTF2DA92N", "session_issuer_arn": "arn:aws:iam::811596193553:role/SecurityMonkey", "session_issuer_user_name": "SecurityMonkey"}, "network": {"source_ip": "255.253.125.115", "user_agent": "Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56", "aws_region": "ap-northeast-1"}, "resource_arns": [], "raw_record_size_bytes": 1047, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "61bd4374-2324-4c95-97ef-ed2a79d2cde4", "eventTime": "2017-05-27T04:59:41Z", "eventName": "GetTrailStatus", "eventSource": "cloudtrail.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.253.125.115", "userAgent": "Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56", "awsRegion": "ap-northeast-1", "userIdentity": {"type": "AssumedRole", "principalId": "AROAUB2AA5FQRGAHITW4A:secmonkey", "arn": "arn:aws:sts::811596193553:assumed-role/SecurityMonkey/secmonkey", "accountId": "811596193553", "accessKeyId": "ASIAQNYWSW8OTF2DA92N", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2017-05-27T04:59:40Z"}, "sessionIssuer": {"type": "Role", "principalId": "AROAUB2AA5FQRGAHITW4A", "arn": "arn:aws:iam::811596193553:role/SecurityMonkey", "accountId": "811596193553", "userName": "SecurityMonkey"}}}, "requestParameters": {"name": "arn:aws:cloudtrail:us-west-2:811596193553:trail/cloudtrail"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "d5d548637-6e73-43fa-9ded-0469ee028551", "record_id": "flaws_cloudtrail:0000128:d5d548637-6e73-43fa-9ded-0469ee028551", "row_index": 128, "timestamp": "2017-05-27T04:59:41Z", "event_type": "AssumeRole", "event_source": "sts.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/SecurityMokey", "account_id": "811596193553", "principal_id": "AIDAQ9SRE1SZZZ4Q4UOJH", "user_name": "SecurityMokey", "access_key_id": "AKIAXJ0III4JBKZDXGXN", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "255.253.125.115", "user_agent": "Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56", "aws_region": "us-east-1"}, "resource_arns": ["arn:aws:iam::811596193553:role/SecurityMonkey"], "raw_record_size_bytes": 1454, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "resources", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "d5d548637-6e73-43fa-9ded-0469ee028551", "eventTime": "2017-05-27T04:59:41Z", "eventName": "AssumeRole", "eventSource": "sts.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.253.125.115", "userAgent": "Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDAQ9SRE1SZZZ4Q4UOJH", "arn": "arn:aws:iam::811596193553:user/SecurityMokey", "accountId": "811596193553", "accessKeyId": "AKIAXJ0III4JBKZDXGXN", "userName": "SecurityMokey"}, "requestParameters": {"roleArn": "arn:aws:iam::811596193553:role/SecurityMonkey", "roleSessionName": "secmonkey"}, "responseElements": {"credentials": {"accessKeyId": "ASIA0OZ0A6DB7FU1PTRU", "expiration": "May 27, 2017 5:59:41 AM", "sessionToken": "FQoDYXdzECYaDMnAVa1WApvmDCG2IyLMAYICFFewSEHvHm00Ibb4+n5zF45Xn3SkfiFeCGBqDr7/MrSwoS/XevzBXfdRqR9hpeABcQJzBLhH1AJIa6f7dlHcwNxCrHIj7qRXJKZBLH42sLpHZCTH/SmfqANlfk+pblsXrH5GENpNti1w52B/Pebi4IXzYUD9ZpjjSbRHndpFYNB3mlRFjsKa/OlTvm4KK64/7/zT+yPqz57N+irQATqV/pVGkh6dkg+BaxKuXJ4c2Ooxyp9G3W7SpXrOWHZdDzHIEOPdKGMys9fBYyi9j6TJBQ=="}, "assumedRoleUser": {"assumedRoleId": "AROAUB2AA5FQRGAHITW4A:secmonkey", "arn": "arn:aws:sts::811596193553:assumed-role/SecurityMonkey/secmonkey"}}, "resources": [{"ARN": "arn:aws:iam::811596193553:role/SecurityMonkey", "accountId": "811596193553", "type": "AWS::IAM::Role"}]}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "13f1297c-d23a-4264-a41a-5ced70f4c699", "record_id": "flaws_cloudtrail:0000129:13f1297c-d23a-4264-a41a-5ced70f4c699", "row_index": 129, "timestamp": "2017-05-27T04:59:41Z", "event_type": "ListEntitiesForPolicy", "event_source": "iam.amazonaws.com", "principal": {"type": "AssumedRole", "arn": "arn:aws:sts::811596193553:assumed-role/SecurityMonkey/secmonkey", "account_id": "811596193553", "principal_id": "AROAUB2AA5FQRGAHITW4A:secmonkey", "user_name": null, "access_key_id": "ASIAI9QHHRMC9F6XQJXN", "session_issuer_arn": "arn:aws:iam::811596193553:role/SecurityMonkey", "session_issuer_user_name": "SecurityMonkey"}, "network": {"source_ip": "255.253.125.115", "user_agent": "Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56 Resource", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 1060, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "13f1297c-d23a-4264-a41a-5ced70f4c699", "eventTime": "2017-05-27T04:59:41Z", "eventName": "ListEntitiesForPolicy", "eventSource": "iam.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.253.125.115", "userAgent": "Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56 Resource", "awsRegion": "us-east-1", "userIdentity": {"type": "AssumedRole", "principalId": "AROAUB2AA5FQRGAHITW4A:secmonkey", "arn": "arn:aws:sts::811596193553:assumed-role/SecurityMonkey/secmonkey", "accountId": "811596193553", "accessKeyId": "ASIAI9QHHRMC9F6XQJXN", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2017-05-27T04:59:38Z"}, "sessionIssuer": {"type": "Role", "principalId": "AROAUB2AA5FQRGAHITW4A", "arn": "arn:aws:iam::811596193553:role/SecurityMonkey", "accountId": "811596193553", "userName": "SecurityMonkey"}}}, "requestParameters": {"entityFilter": "Group", "policyArn": "arn:aws:iam::811596193553:policy/Level3"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "b55a1bff-392f-49fc-b708-ba514607a", "record_id": "flaws_cloudtrail:0000130:b55a1bff-392f-49fc-b708-ba514607a", "row_index": 130, "timestamp": "2017-05-27T04:59:41Z", "event_type": "GetPolicyVersion", "event_source": "iam.amazonaws.com", "principal": {"type": "AssumedRole", "arn": "arn:aws:sts::811596193553:assumed-role/SecurityMonkey/secmonkey", "account_id": "811596193553", "principal_id": "AROAUB2AA5FQRGAHITW4A:secmonkey", "user_name": null, "access_key_id": "ASIAI9QHHRMC9F6XQJXN", "session_issuer_arn": "arn:aws:iam::811596193553:role/SecurityMonkey", "session_issuer_user_name": "SecurityMonkey"}, "network": {"source_ip": "255.253.125.115", "user_agent": "Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56 Resource", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 1056, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "b55a1bff-392f-49fc-b708-ba514607a", "eventTime": "2017-05-27T04:59:41Z", "eventName": "GetPolicyVersion", "eventSource": "iam.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.253.125.115", "userAgent": "Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56 Resource", "awsRegion": "us-east-1", "userIdentity": {"type": "AssumedRole", "principalId": "AROAUB2AA5FQRGAHITW4A:secmonkey", "arn": "arn:aws:sts::811596193553:assumed-role/SecurityMonkey/secmonkey", "accountId": "811596193553", "accessKeyId": "ASIAI9QHHRMC9F6XQJXN", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2017-05-27T04:59:38Z"}, "sessionIssuer": {"type": "Role", "principalId": "AROAUB2AA5FQRGAHITW4A", "arn": "arn:aws:iam::811596193553:role/SecurityMonkey", "accountId": "811596193553", "userName": "SecurityMonkey"}}}, "requestParameters": {"policyArn": "arn:aws:iam::811596193553:policy/list_apigateways", "versionId": "v4"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "fe327913-b3ef-4106-b0cd-db1bac5543d9", "record_id": "flaws_cloudtrail:0000131:fe327913-b3ef-4106-b0cd-db1bac5543d9", "row_index": 131, "timestamp": "2017-05-27T04:59:41Z", "event_type": "ListEntitiesForPolicy", "event_source": "iam.amazonaws.com", "principal": {"type": "AssumedRole", "arn": "arn:aws:sts::811596193553:assumed-role/SecurityMonkey/secmonkey", "account_id": "811596193553", "principal_id": "AROAUB2AA5FQRGAHITW4A:secmonkey", "user_name": null, "access_key_id": "ASIAI9QHHRMC9F6XQJXN", "session_issuer_arn": "arn:aws:iam::811596193553:role/SecurityMonkey", "session_issuer_user_name": "SecurityMonkey"}, "network": {"source_ip": "255.253.125.115", "user_agent": "Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56 Resource", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 1067, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "fe327913-b3ef-4106-b0cd-db1bac5543d9", "eventTime": "2017-05-27T04:59:41Z", "eventName": "ListEntitiesForPolicy", "eventSource": "iam.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.253.125.115", "userAgent": "Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56 Resource", "awsRegion": "us-east-1", "userIdentity": {"type": "AssumedRole", "principalId": "AROAUB2AA5FQRGAHITW4A:secmonkey", "arn": "arn:aws:sts::811596193553:assumed-role/SecurityMonkey/secmonkey", "accountId": "811596193553", "accessKeyId": "ASIAI9QHHRMC9F6XQJXN", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2017-05-27T04:59:38Z"}, "sessionIssuer": {"type": "Role", "principalId": "AROAUB2AA5FQRGAHITW4A", "arn": "arn:aws:iam::811596193553:role/SecurityMonkey", "accountId": "811596193553", "userName": "SecurityMonkey"}}}, "requestParameters": {"entityFilter": "User", "policyArn": "arn:aws:iam::811596193553:policy/SecurityMonkey"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "206e4d21-481d-4ed4-a942-7b8e3c01ca73", "record_id": "flaws_cloudtrail:0000132:206e4d21-481d-4ed4-a942-7b8e3c01ca73", "row_index": 132, "timestamp": "2017-05-27T04:59:41Z", "event_type": "ListEntitiesForPolicy", "event_source": "iam.amazonaws.com", "principal": {"type": "AssumedRole", "arn": "arn:aws:sts::811596193553:assumed-role/SecurityMonkey/secmonkey", "account_id": "811596193553", "principal_id": "AROAUB2AA5FQRGAHITW4A:secmonkey", "user_name": null, "access_key_id": "ASIAI9QHHRMC9F6XQJXN", "session_issuer_arn": "arn:aws:iam::811596193553:role/SecurityMonkey", "session_issuer_user_name": "SecurityMonkey"}, "network": {"source_ip": "255.253.125.115", "user_agent": "Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56 Resource", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 1069, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "206e4d21-481d-4ed4-a942-7b8e3c01ca73", "eventTime": "2017-05-27T04:59:41Z", "eventName": "ListEntitiesForPolicy", "eventSource": "iam.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.253.125.115", "userAgent": "Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56 Resource", "awsRegion": "us-east-1", "userIdentity": {"type": "AssumedRole", "principalId": "AROAUB2AA5FQRGAHITW4A:secmonkey", "arn": "arn:aws:sts::811596193553:assumed-role/SecurityMonkey/secmonkey", "accountId": "811596193553", "accessKeyId": "ASIAI9QHHRMC9F6XQJXN", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2017-05-27T04:59:38Z"}, "sessionIssuer": {"type": "Role", "principalId": "AROAUB2AA5FQRGAHITW4A", "arn": "arn:aws:iam::811596193553:role/SecurityMonkey", "accountId": "811596193553", "userName": "SecurityMonkey"}}}, "requestParameters": {"entityFilter": "Role", "policyArn": "arn:aws:iam::811596193553:policy/list_apigateways"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "67f72e7e-5c0c-42a2-bc7c-3b88caa9ed5f", "record_id": "flaws_cloudtrail:0000133:67f72e7e-5c0c-42a2-bc7c-3b88caa9ed5f", "row_index": 133, "timestamp": "2017-05-27T04:59:41Z", "event_type": "GetPolicyVersion", "event_source": "iam.amazonaws.com", "principal": {"type": "AssumedRole", "arn": "arn:aws:sts::811596193553:assumed-role/SecurityMonkey/secmonkey", "account_id": "811596193553", "principal_id": "AROAUB2AA5FQRGAHITW4A:secmonkey", "user_name": null, "access_key_id": "ASIAI9QHHRMC9F6XQJXN", "session_issuer_arn": "arn:aws:iam::811596193553:role/SecurityMonkey", "session_issuer_user_name": "SecurityMonkey"}, "network": {"source_ip": "255.253.125.115", "user_agent": "Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56 Resource", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 1051, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "67f72e7e-5c0c-42a2-bc7c-3b88caa9ed5f", "eventTime": "2017-05-27T04:59:41Z", "eventName": "GetPolicyVersion", "eventSource": "iam.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.253.125.115", "userAgent": "Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56 Resource", "awsRegion": "us-east-1", "userIdentity": {"type": "AssumedRole", "principalId": "AROAUB2AA5FQRGAHITW4A:secmonkey", "arn": "arn:aws:sts::811596193553:assumed-role/SecurityMonkey/secmonkey", "accountId": "811596193553", "accessKeyId": "ASIAI9QHHRMC9F6XQJXN", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2017-05-27T04:59:38Z"}, "sessionIssuer": {"type": "Role", "principalId": "AROAUB2AA5FQRGAHITW4A", "arn": "arn:aws:iam::811596193553:role/SecurityMonkey", "accountId": "811596193553", "userName": "SecurityMonkey"}}}, "requestParameters": {"policyArn": "arn:aws:iam::811596193553:policy/Level3", "versionId": "v10"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "fddd8407-2732-41ac-845e-958302f83818", "record_id": "flaws_cloudtrail:0000134:fddd8407-2732-41ac-845e-958302f83818", "row_index": 134, "timestamp": "2017-05-27T04:59:41Z", "event_type": "ListEntitiesForPolicy", "event_source": "iam.amazonaws.com", "principal": {"type": "AssumedRole", "arn": "arn:aws:sts::811596193553:assumed-role/SecurityMonkey/secmonkey", "account_id": "811596193553", "principal_id": "AROAUB2AA5FQRGAHITW4A:secmonkey", "user_name": null, "access_key_id": "ASIAI9QHHRMC9F6XQJXN", "session_issuer_arn": "arn:aws:iam::811596193553:role/SecurityMonkey", "session_issuer_user_name": "SecurityMonkey"}, "network": {"source_ip": "255.253.125.115", "user_agent": "Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56 Resource", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 1059, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "fddd8407-2732-41ac-845e-958302f83818", "eventTime": "2017-05-27T04:59:41Z", "eventName": "ListEntitiesForPolicy", "eventSource": "iam.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.253.125.115", "userAgent": "Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56 Resource", "awsRegion": "us-east-1", "userIdentity": {"type": "AssumedRole", "principalId": "AROAUB2AA5FQRGAHITW4A:secmonkey", "arn": "arn:aws:sts::811596193553:assumed-role/SecurityMonkey/secmonkey", "accountId": "811596193553", "accessKeyId": "ASIAI9QHHRMC9F6XQJXN", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2017-05-27T04:59:38Z"}, "sessionIssuer": {"type": "Role", "principalId": "AROAUB2AA5FQRGAHITW4A", "arn": "arn:aws:iam::811596193553:role/SecurityMonkey", "accountId": "811596193553", "userName": "SecurityMonkey"}}}, "requestParameters": {"entityFilter": "Role", "policyArn": "arn:aws:iam::811596193553:policy/Level3"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "aa57a3fb-cbe2-418a-8611-d508e88fe22c", "record_id": "flaws_cloudtrail:0000135:aa57a3fb-cbe2-418a-8611-d508e88fe22c", "row_index": 135, "timestamp": "2017-05-27T04:59:41Z", "event_type": "ListEntitiesForPolicy", "event_source": "iam.amazonaws.com", "principal": {"type": "AssumedRole", "arn": "arn:aws:sts::811596193553:assumed-role/SecurityMonkey/secmonkey", "account_id": "811596193553", "principal_id": "AROAUB2AA5FQRGAHITW4A:secmonkey", "user_name": null, "access_key_id": "ASIAI9QHHRMC9F6XQJXN", "session_issuer_arn": "arn:aws:iam::811596193553:role/SecurityMonkey", "session_issuer_user_name": "SecurityMonkey"}, "network": {"source_ip": "255.253.125.115", "user_agent": "Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56 Resource", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 1069, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "aa57a3fb-cbe2-418a-8611-d508e88fe22c", "eventTime": "2017-05-27T04:59:41Z", "eventName": "ListEntitiesForPolicy", "eventSource": "iam.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.253.125.115", "userAgent": "Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56 Resource", "awsRegion": "us-east-1", "userIdentity": {"type": "AssumedRole", "principalId": "AROAUB2AA5FQRGAHITW4A:secmonkey", "arn": "arn:aws:sts::811596193553:assumed-role/SecurityMonkey/secmonkey", "accountId": "811596193553", "accessKeyId": "ASIAI9QHHRMC9F6XQJXN", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2017-05-27T04:59:38Z"}, "sessionIssuer": {"type": "Role", "principalId": "AROAUB2AA5FQRGAHITW4A", "arn": "arn:aws:iam::811596193553:role/SecurityMonkey", "accountId": "811596193553", "userName": "SecurityMonkey"}}}, "requestParameters": {"entityFilter": "User", "policyArn": "arn:aws:iam::811596193553:policy/list_apigateways"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "cdc31763-3d3b-4279-a04e-d9c2f3e10fa7", "record_id": "flaws_cloudtrail:0000136:cdc31763-3d3b-4279-a04e-d9c2f3e10fa7", "row_index": 136, "timestamp": "2017-05-27T04:59:41Z", "event_type": "ListEntitiesForPolicy", "event_source": "iam.amazonaws.com", "principal": {"type": "AssumedRole", "arn": "arn:aws:sts::811596193553:assumed-role/SecurityMonkey/secmonkey", "account_id": "811596193553", "principal_id": "AROAUB2AA5FQRGAHITW4A:secmonkey", "user_name": null, "access_key_id": "ASIAI9QHHRMC9F6XQJXN", "session_issuer_arn": "arn:aws:iam::811596193553:role/SecurityMonkey", "session_issuer_user_name": "SecurityMonkey"}, "network": {"source_ip": "255.253.125.115", "user_agent": "Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56 Resource", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 1070, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "cdc31763-3d3b-4279-a04e-d9c2f3e10fa7", "eventTime": "2017-05-27T04:59:41Z", "eventName": "ListEntitiesForPolicy", "eventSource": "iam.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.253.125.115", "userAgent": "Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56 Resource", "awsRegion": "us-east-1", "userIdentity": {"type": "AssumedRole", "principalId": "AROAUB2AA5FQRGAHITW4A:secmonkey", "arn": "arn:aws:sts::811596193553:assumed-role/SecurityMonkey/secmonkey", "accountId": "811596193553", "accessKeyId": "ASIAI9QHHRMC9F6XQJXN", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2017-05-27T04:59:38Z"}, "sessionIssuer": {"type": "Role", "principalId": "AROAUB2AA5FQRGAHITW4A", "arn": "arn:aws:iam::811596193553:role/SecurityMonkey", "accountId": "811596193553", "userName": "SecurityMonkey"}}}, "requestParameters": {"entityFilter": "Group", "policyArn": "arn:aws:iam::811596193553:policy/list_apigateways"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "9e4bb60c-9e11-48d9-9096-eb252a86b56a", "record_id": "flaws_cloudtrail:0000137:9e4bb60c-9e11-48d9-9096-eb252a86b56a", "row_index": 137, "timestamp": "2017-05-27T04:59:41Z", "event_type": "GetPolicyVersion", "event_source": "iam.amazonaws.com", "principal": {"type": "AssumedRole", "arn": "arn:aws:sts::811596193553:assumed-role/SecurityMonkey/secmonkey", "account_id": "811596193553", "principal_id": "AROAUB2AA5FQRGAHITW4A:secmonkey", "user_name": null, "access_key_id": "ASIAI9QHHRMC9F6XQJXN", "session_issuer_arn": "arn:aws:iam::811596193553:role/SecurityMonkey", "session_issuer_user_name": "SecurityMonkey"}, "network": {"source_ip": "255.253.125.115", "user_agent": "Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56 Resource", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 1120, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "9e4bb60c-9e11-48d9-9096-eb252a86b56a", "eventTime": "2017-05-27T04:59:41Z", "eventName": "GetPolicyVersion", "eventSource": "iam.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.253.125.115", "userAgent": "Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56 Resource", "awsRegion": "us-east-1", "userIdentity": {"type": "AssumedRole", "principalId": "AROAUB2AA5FQRGAHITW4A:secmonkey", "arn": "arn:aws:sts::811596193553:assumed-role/SecurityMonkey/secmonkey", "accountId": "811596193553", "accessKeyId": "ASIAI9QHHRMC9F6XQJXN", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2017-05-27T04:59:38Z"}, "sessionIssuer": {"type": "Role", "principalId": "AROAUB2AA5FQRGAHITW4A", "arn": "arn:aws:iam::811596193553:role/SecurityMonkey", "accountId": "811596193553", "userName": "SecurityMonkey"}}}, "requestParameters": {"policyArn": "arn:aws:iam::811596193553:policy/service-role/AWSLambdaBasicExecutionRole-4e23caa8-1f82-45b5-9068-3200fb1a0c7a", "versionId": "v1"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "79ec1d24-a394-471a-bb87-14db29da5f1f", "record_id": "flaws_cloudtrail:0000138:79ec1d24-a394-471a-bb87-14db29da5f1f", "row_index": 138, "timestamp": "2017-05-27T04:59:41Z", "event_type": "GetUser", "event_source": "iam.amazonaws.com", "principal": {"type": "AssumedRole", "arn": "arn:aws:sts::811596193553:assumed-role/SecurityMonkey/secmonkey", "account_id": "811596193553", "principal_id": "AROAUB2AA5FQRGAHITW4A:secmonkey", "user_name": null, "access_key_id": "ASIAI9QHHRMC9F6XQJXN", "session_issuer_arn": "arn:aws:iam::811596193553:role/SecurityMonkey", "session_issuer_user_name": "SecurityMonkey"}, "network": {"source_ip": "255.253.125.115", "user_agent": "Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56 Resource", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 990, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "79ec1d24-a394-471a-bb87-14db29da5f1f", "eventTime": "2017-05-27T04:59:41Z", "eventName": "GetUser", "eventSource": "iam.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.253.125.115", "userAgent": "Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56 Resource", "awsRegion": "us-east-1", "userIdentity": {"type": "AssumedRole", "principalId": "AROAUB2AA5FQRGAHITW4A:secmonkey", "arn": "arn:aws:sts::811596193553:assumed-role/SecurityMonkey/secmonkey", "accountId": "811596193553", "accessKeyId": "ASIAI9QHHRMC9F6XQJXN", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2017-05-27T04:59:38Z"}, "sessionIssuer": {"type": "Role", "principalId": "AROAUB2AA5FQRGAHITW4A", "arn": "arn:aws:iam::811596193553:role/SecurityMonkey", "accountId": "811596193553", "userName": "SecurityMonkey"}}}, "requestParameters": {"userName": "Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "7997f8d6-4d3d-4d0f-80c9-2a6ec88579d", "record_id": "flaws_cloudtrail:0000139:7997f8d6-4d3d-4d0f-80c9-2a6ec88579d", "row_index": 139, "timestamp": "2017-05-27T04:59:41Z", "event_type": "ListEntitiesForPolicy", "event_source": "iam.amazonaws.com", "principal": {"type": "AssumedRole", "arn": "arn:aws:sts::811596193553:assumed-role/SecurityMonkey/secmonkey", "account_id": "811596193553", "principal_id": "AROAUB2AA5FQRGAHITW4A:secmonkey", "user_name": null, "access_key_id": "ASIAI9QHHRMC9F6XQJXN", "session_issuer_arn": "arn:aws:iam::811596193553:role/SecurityMonkey", "session_issuer_user_name": "SecurityMonkey"}, "network": {"source_ip": "255.253.125.115", "user_agent": "Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56 Resource", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 1058, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "7997f8d6-4d3d-4d0f-80c9-2a6ec88579d", "eventTime": "2017-05-27T04:59:41Z", "eventName": "ListEntitiesForPolicy", "eventSource": "iam.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.253.125.115", "userAgent": "Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56 Resource", "awsRegion": "us-east-1", "userIdentity": {"type": "AssumedRole", "principalId": "AROAUB2AA5FQRGAHITW4A:secmonkey", "arn": "arn:aws:sts::811596193553:assumed-role/SecurityMonkey/secmonkey", "accountId": "811596193553", "accessKeyId": "ASIAI9QHHRMC9F6XQJXN", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2017-05-27T04:59:38Z"}, "sessionIssuer": {"type": "Role", "principalId": "AROAUB2AA5FQRGAHITW4A", "arn": "arn:aws:iam::811596193553:role/SecurityMonkey", "accountId": "811596193553", "userName": "SecurityMonkey"}}}, "requestParameters": {"entityFilter": "User", "policyArn": "arn:aws:iam::811596193553:policy/Level3"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "31aaccd5-8154-4db8-b513-8dd592baa6c7", "record_id": "flaws_cloudtrail:0000140:31aaccd5-8154-4db8-b513-8dd592baa6c7", "row_index": 140, "timestamp": "2017-05-27T04:59:41Z", "event_type": "GetUser", "event_source": "iam.amazonaws.com", "principal": {"type": "AssumedRole", "arn": "arn:aws:sts::811596193553:assumed-role/SecurityMonkey/secmonkey", "account_id": "811596193553", "principal_id": "AROAUB2AA5FQRGAHITW4A:secmonkey", "user_name": null, "access_key_id": "ASIAI9QHHRMC9F6XQJXN", "session_issuer_arn": "arn:aws:iam::811596193553:role/SecurityMonkey", "session_issuer_user_name": "SecurityMonkey"}, "network": {"source_ip": "255.253.125.115", "user_agent": "Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56 Resource", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 989, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "31aaccd5-8154-4db8-b513-8dd592baa6c7", "eventTime": "2017-05-27T04:59:41Z", "eventName": "GetUser", "eventSource": "iam.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.253.125.115", "userAgent": "Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56 Resource", "awsRegion": "us-east-1", "userIdentity": {"type": "AssumedRole", "principalId": "AROAUB2AA5FQRGAHITW4A:secmonkey", "arn": "arn:aws:sts::811596193553:assumed-role/SecurityMonkey/secmonkey", "accountId": "811596193553", "accessKeyId": "ASIAI9QHHRMC9F6XQJXN", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2017-05-27T04:59:38Z"}, "sessionIssuer": {"type": "Role", "principalId": "AROAUB2AA5FQRGAHITW4A", "arn": "arn:aws:iam::811596193553:role/SecurityMonkey", "accountId": "811596193553", "userName": "SecurityMonkey"}}}, "requestParameters": {"userName": "backup"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "919d89a1-58af-41e4-93c6-b38b92cde3a1", "record_id": "flaws_cloudtrail:0000141:919d89a1-58af-41e4-93c6-b38b92cde3a1", "row_index": 141, "timestamp": "2017-05-27T04:59:42Z", "event_type": "DescribeTrails", "event_source": "cloudtrail.amazonaws.com", "principal": {"type": "AssumedRole", "arn": "arn:aws:sts::811596193553:assumed-role/SecurityMonkey/secmonkey", "account_id": "811596193553", "principal_id": "AROAUB2AA5FQRGAHITW4A:secmonkey", "user_name": null, "access_key_id": "ASIA0OZ0A6DB7FU1PTRU", "session_issuer_arn": "arn:aws:iam::811596193553:role/SecurityMonkey", "session_issuer_user_name": "SecurityMonkey"}, "network": {"source_ip": "255.253.125.115", "user_agent": "Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56", "aws_region": "ap-southeast-2"}, "resource_arns": [], "raw_record_size_bytes": 982, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "919d89a1-58af-41e4-93c6-b38b92cde3a1", "eventTime": "2017-05-27T04:59:42Z", "eventName": "DescribeTrails", "eventSource": "cloudtrail.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.253.125.115", "userAgent": "Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56", "awsRegion": "ap-southeast-2", "userIdentity": {"type": "AssumedRole", "principalId": "AROAUB2AA5FQRGAHITW4A:secmonkey", "arn": "arn:aws:sts::811596193553:assumed-role/SecurityMonkey/secmonkey", "accountId": "811596193553", "accessKeyId": "ASIA0OZ0A6DB7FU1PTRU", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2017-05-27T04:59:41Z"}, "sessionIssuer": {"type": "Role", "principalId": "AROAUB2AA5FQRGAHITW4A", "arn": "arn:aws:iam::811596193553:role/SecurityMonkey", "accountId": "811596193553", "userName": "SecurityMonkey"}}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "68b949134-60f0-4c8a-ac4b-d49ade30282d", "record_id": "flaws_cloudtrail:0000142:68b949134-60f0-4c8a-ac4b-d49ade30282d", "row_index": 142, "timestamp": "2017-05-27T04:59:42Z", "event_type": "GetUser", "event_source": "iam.amazonaws.com", "principal": {"type": "AssumedRole", "arn": "arn:aws:sts::811596193553:assumed-role/SecurityMonkey/secmonkey", "account_id": "811596193553", "principal_id": "AROAUB2AA5FQRGAHITW4A:secmonkey", "user_name": null, "access_key_id": "ASIAI9QHHRMC9F6XQJXN", "session_issuer_arn": "arn:aws:iam::811596193553:role/SecurityMonkey", "session_issuer_user_name": "SecurityMonkey"}, "network": {"source_ip": "255.253.125.115", "user_agent": "Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56 Resource", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 997, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "68b949134-60f0-4c8a-ac4b-d49ade30282d", "eventTime": "2017-05-27T04:59:42Z", "eventName": "GetUser", "eventSource": "iam.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.253.125.115", "userAgent": "Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56 Resource", "awsRegion": "us-east-1", "userIdentity": {"type": "AssumedRole", "principalId": "AROAUB2AA5FQRGAHITW4A:secmonkey", "arn": "arn:aws:sts::811596193553:assumed-role/SecurityMonkey/secmonkey", "accountId": "811596193553", "accessKeyId": "ASIAI9QHHRMC9F6XQJXN", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2017-05-27T04:59:38Z"}, "sessionIssuer": {"type": "Role", "principalId": "AROAUB2AA5FQRGAHITW4A", "arn": "arn:aws:iam::811596193553:role/SecurityMonkey", "accountId": "811596193553", "userName": "SecurityMonkey"}}}, "requestParameters": {"userName": "SecurityMokey"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "4ad2dd95-41cf-4c8c-a70f-1e6a8289bb53", "record_id": "flaws_cloudtrail:0000143:4ad2dd95-41cf-4c8c-a70f-1e6a8289bb53", "row_index": 143, "timestamp": "2017-05-27T04:59:42Z", "event_type": "GetRole", "event_source": "iam.amazonaws.com", "principal": {"type": "AssumedRole", "arn": "arn:aws:sts::811596193553:assumed-role/SecurityMonkey/secmonkey", "account_id": "811596193553", "principal_id": "AROAUB2AA5FQRGAHITW4A:secmonkey", "user_name": null, "access_key_id": "ASIAI9QHHRMC9F6XQJXN", "session_issuer_arn": "arn:aws:iam::811596193553:role/SecurityMonkey", "session_issuer_user_name": "SecurityMonkey"}, "network": {"source_ip": "255.253.125.115", "user_agent": "Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56 Resource", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 997, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "4ad2dd95-41cf-4c8c-a70f-1e6a8289bb53", "eventTime": "2017-05-27T04:59:42Z", "eventName": "GetRole", "eventSource": "iam.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.253.125.115", "userAgent": "Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56 Resource", "awsRegion": "us-east-1", "userIdentity": {"type": "AssumedRole", "principalId": "AROAUB2AA5FQRGAHITW4A:secmonkey", "arn": "arn:aws:sts::811596193553:assumed-role/SecurityMonkey/secmonkey", "accountId": "811596193553", "accessKeyId": "ASIAI9QHHRMC9F6XQJXN", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2017-05-27T04:59:38Z"}, "sessionIssuer": {"type": "Role", "principalId": "AROAUB2AA5FQRGAHITW4A", "arn": "arn:aws:iam::811596193553:role/SecurityMonkey", "accountId": "811596193553", "userName": "SecurityMonkey"}}}, "requestParameters": {"roleName": "SecurityMonkey"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "0d0afc48-3b0c-4c5c-9c78-b4647a594b89", "record_id": "flaws_cloudtrail:0000144:0d0afc48-3b0c-4c5c-9c78-b4647a594b89", "row_index": 144, "timestamp": "2017-05-27T04:59:42Z", "event_type": "ListEntitiesForPolicy", "event_source": "iam.amazonaws.com", "principal": {"type": "AssumedRole", "arn": "arn:aws:sts::811596193553:assumed-role/SecurityMonkey/secmonkey", "account_id": "811596193553", "principal_id": "AROAUB2AA5FQRGAHITW4A:secmonkey", "user_name": null, "access_key_id": "ASIAI9QHHRMC9F6XQJXN", "session_issuer_arn": "arn:aws:iam::811596193553:role/SecurityMonkey", "session_issuer_user_name": "SecurityMonkey"}, "network": {"source_ip": "255.253.125.115", "user_agent": "Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56 Resource", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 1067, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "0d0afc48-3b0c-4c5c-9c78-b4647a594b89", "eventTime": "2017-05-27T04:59:42Z", "eventName": "ListEntitiesForPolicy", "eventSource": "iam.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.253.125.115", "userAgent": "Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56 Resource", "awsRegion": "us-east-1", "userIdentity": {"type": "AssumedRole", "principalId": "AROAUB2AA5FQRGAHITW4A:secmonkey", "arn": "arn:aws:sts::811596193553:assumed-role/SecurityMonkey/secmonkey", "accountId": "811596193553", "accessKeyId": "ASIAI9QHHRMC9F6XQJXN", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2017-05-27T04:59:38Z"}, "sessionIssuer": {"type": "Role", "principalId": "AROAUB2AA5FQRGAHITW4A", "arn": "arn:aws:iam::811596193553:role/SecurityMonkey", "accountId": "811596193553", "userName": "SecurityMonkey"}}}, "requestParameters": {"entityFilter": "Role", "policyArn": "arn:aws:iam::811596193553:policy/SecurityMonkey"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "f57caeb6-e604-448e-a81c-70ea7cab2117", "record_id": "flaws_cloudtrail:0000145:f57caeb6-e604-448e-a81c-70ea7cab2117", "row_index": 145, "timestamp": "2017-05-27T04:59:42Z", "event_type": "GetPolicyVersion", "event_source": "iam.amazonaws.com", "principal": {"type": "AssumedRole", "arn": "arn:aws:sts::811596193553:assumed-role/SecurityMonkey/secmonkey", "account_id": "811596193553", "principal_id": "AROAUB2AA5FQRGAHITW4A:secmonkey", "user_name": null, "access_key_id": "ASIAI9QHHRMC9F6XQJXN", "session_issuer_arn": "arn:aws:iam::811596193553:role/SecurityMonkey", "session_issuer_user_name": "SecurityMonkey"}, "network": {"source_ip": "255.253.125.115", "user_agent": "Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56 Resource", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 1064, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "f57caeb6-e604-448e-a81c-70ea7cab2117", "eventTime": "2017-05-27T04:59:42Z", "eventName": "GetPolicyVersion", "eventSource": "iam.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.253.125.115", "userAgent": "Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56 Resource", "awsRegion": "us-east-1", "userIdentity": {"type": "AssumedRole", "principalId": "AROAUB2AA5FQRGAHITW4A:secmonkey", "arn": "arn:aws:sts::811596193553:assumed-role/SecurityMonkey/secmonkey", "accountId": "811596193553", "accessKeyId": "ASIAI9QHHRMC9F6XQJXN", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2017-05-27T04:59:38Z"}, "sessionIssuer": {"type": "Role", "principalId": "AROAUB2AA5FQRGAHITW4A", "arn": "arn:aws:iam::811596193553:role/SecurityMonkey", "accountId": "811596193553", "userName": "SecurityMonkey"}}}, "requestParameters": {"policyArn": "arn:aws:iam::aws:policy/AWSDirectConnectReadOnlyAccess", "versionId": "v1"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "241487d-8a04-4bfc-ad6c-9f8ee28db773", "record_id": "flaws_cloudtrail:0000146:241487d-8a04-4bfc-ad6c-9f8ee28db773", "row_index": 146, "timestamp": "2017-05-27T04:59:42Z", "event_type": "ListEntitiesForPolicy", "event_source": "iam.amazonaws.com", "principal": {"type": "AssumedRole", "arn": "arn:aws:sts::811596193553:assumed-role/SecurityMonkey/secmonkey", "account_id": "811596193553", "principal_id": "AROAUB2AA5FQRGAHITW4A:secmonkey", "user_name": null, "access_key_id": "ASIAI9QHHRMC9F6XQJXN", "session_issuer_arn": "arn:aws:iam::811596193553:role/SecurityMonkey", "session_issuer_user_name": "SecurityMonkey"}, "network": {"source_ip": "255.253.125.115", "user_agent": "Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56 Resource", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 1067, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "241487d-8a04-4bfc-ad6c-9f8ee28db773", "eventTime": "2017-05-27T04:59:42Z", "eventName": "ListEntitiesForPolicy", "eventSource": "iam.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.253.125.115", "userAgent": "Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56 Resource", "awsRegion": "us-east-1", "userIdentity": {"type": "AssumedRole", "principalId": "AROAUB2AA5FQRGAHITW4A:secmonkey", "arn": "arn:aws:sts::811596193553:assumed-role/SecurityMonkey/secmonkey", "accountId": "811596193553", "accessKeyId": "ASIAI9QHHRMC9F6XQJXN", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2017-05-27T04:59:38Z"}, "sessionIssuer": {"type": "Role", "principalId": "AROAUB2AA5FQRGAHITW4A", "arn": "arn:aws:iam::811596193553:role/SecurityMonkey", "accountId": "811596193553", "userName": "SecurityMonkey"}}}, "requestParameters": {"entityFilter": "Group", "policyArn": "arn:aws:iam::811596193553:policy/SecurityMonkey"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "c8463ead-ec83-4a4a-94cf-351e246b925d", "record_id": "flaws_cloudtrail:0000147:c8463ead-ec83-4a4a-94cf-351e246b925d", "row_index": 147, "timestamp": "2017-05-27T04:59:42Z", "event_type": "ListEntitiesForPolicy", "event_source": "iam.amazonaws.com", "principal": {"type": "AssumedRole", "arn": "arn:aws:sts::811596193553:assumed-role/SecurityMonkey/secmonkey", "account_id": "811596193553", "principal_id": "AROAUB2AA5FQRGAHITW4A:secmonkey", "user_name": null, "access_key_id": "ASIAI9QHHRMC9F6XQJXN", "session_issuer_arn": "arn:aws:iam::811596193553:role/SecurityMonkey", "session_issuer_user_name": "SecurityMonkey"}, "network": {"source_ip": "255.253.125.115", "user_agent": "Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56 Resource", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 1072, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "c8463ead-ec83-4a4a-94cf-351e246b925d", "eventTime": "2017-05-27T04:59:42Z", "eventName": "ListEntitiesForPolicy", "eventSource": "iam.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.253.125.115", "userAgent": "Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56 Resource", "awsRegion": "us-east-1", "userIdentity": {"type": "AssumedRole", "principalId": "AROAUB2AA5FQRGAHITW4A:secmonkey", "arn": "arn:aws:sts::811596193553:assumed-role/SecurityMonkey/secmonkey", "accountId": "811596193553", "accessKeyId": "ASIAI9QHHRMC9F6XQJXN", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2017-05-27T04:59:38Z"}, "sessionIssuer": {"type": "Role", "principalId": "AROAUB2AA5FQRGAHITW4A", "arn": "arn:aws:iam::811596193553:role/SecurityMonkey", "accountId": "811596193553", "userName": "SecurityMonkey"}}}, "requestParameters": {"entityFilter": "User", "policyArn": "arn:aws:iam::811596193553:policy/SecurityMonkeyPerms"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "a39b90e0-ee05-4276-855c-0ed7f7fce8d8", "record_id": "flaws_cloudtrail:0000148:a39b90e0-ee05-4276-855c-0ed7f7fce8d8", "row_index": 148, "timestamp": "2017-05-27T04:59:42Z", "event_type": "GetPolicyVersion", "event_source": "iam.amazonaws.com", "principal": {"type": "AssumedRole", "arn": "arn:aws:sts::811596193553:assumed-role/SecurityMonkey/secmonkey", "account_id": "811596193553", "principal_id": "AROAUB2AA5FQRGAHITW4A:secmonkey", "user_name": null, "access_key_id": "ASIAI9QHHRMC9F6XQJXN", "session_issuer_arn": "arn:aws:iam::811596193553:role/SecurityMonkey", "session_issuer_user_name": "SecurityMonkey"}, "network": {"source_ip": "255.253.125.115", "user_agent": "Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56 Resource", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 1061, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "a39b90e0-ee05-4276-855c-0ed7f7fce8d8", "eventTime": "2017-05-27T04:59:42Z", "eventName": "GetPolicyVersion", "eventSource": "iam.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.253.125.115", "userAgent": "Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56 Resource", "awsRegion": "us-east-1", "userIdentity": {"type": "AssumedRole", "principalId": "AROAUB2AA5FQRGAHITW4A:secmonkey", "arn": "arn:aws:sts::811596193553:assumed-role/SecurityMonkey/secmonkey", "accountId": "811596193553", "accessKeyId": "ASIAI9QHHRMC9F6XQJXN", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2017-05-27T04:59:38Z"}, "sessionIssuer": {"type": "Role", "principalId": "AROAUB2AA5FQRGAHITW4A", "arn": "arn:aws:iam::811596193553:role/SecurityMonkey", "accountId": "811596193553", "userName": "SecurityMonkey"}}}, "requestParameters": {"policyArn": "arn:aws:iam::aws:policy/AmazonGlacierReadOnlyAccess", "versionId": "v2"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "370c3687-f646-4db9-9280-0c0c8e12325c", "record_id": "flaws_cloudtrail:0000149:370c3687-f646-4db9-9280-0c0c8e12325c", "row_index": 149, "timestamp": "2017-05-27T04:59:42Z", "event_type": "GetPolicyVersion", "event_source": "iam.amazonaws.com", "principal": {"type": "AssumedRole", "arn": "arn:aws:sts::811596193553:assumed-role/SecurityMonkey/secmonkey", "account_id": "811596193553", "principal_id": "AROAUB2AA5FQRGAHITW4A:secmonkey", "user_name": null, "access_key_id": "ASIAI9QHHRMC9F6XQJXN", "session_issuer_arn": "arn:aws:iam::811596193553:role/SecurityMonkey", "session_issuer_user_name": "SecurityMonkey"}, "network": {"source_ip": "255.253.125.115", "user_agent": "Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56 Resource", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 1062, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "370c3687-f646-4db9-9280-0c0c8e12325c", "eventTime": "2017-05-27T04:59:42Z", "eventName": "GetPolicyVersion", "eventSource": "iam.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.253.125.115", "userAgent": "Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56 Resource", "awsRegion": "us-east-1", "userIdentity": {"type": "AssumedRole", "principalId": "AROAUB2AA5FQRGAHITW4A:secmonkey", "arn": "arn:aws:sts::811596193553:assumed-role/SecurityMonkey/secmonkey", "accountId": "811596193553", "accessKeyId": "ASIAI9QHHRMC9F6XQJXN", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2017-05-27T04:59:38Z"}, "sessionIssuer": {"type": "Role", "principalId": "AROAUB2AA5FQRGAHITW4A", "arn": "arn:aws:iam::811596193553:role/SecurityMonkey", "accountId": "811596193553", "userName": "SecurityMonkey"}}}, "requestParameters": {"policyArn": "arn:aws:iam::811596193553:policy/SecurityMonkeyPerms", "versionId": "v1"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "c0498a57-9aad-46da-87b8-ba10ea3258a6", "record_id": "flaws_cloudtrail:0000150:c0498a57-9aad-46da-87b8-ba10ea3258a6", "row_index": 150, "timestamp": "2017-05-27T04:59:42Z", "event_type": "ListEntitiesForPolicy", "event_source": "iam.amazonaws.com", "principal": {"type": "AssumedRole", "arn": "arn:aws:sts::811596193553:assumed-role/SecurityMonkey/secmonkey", "account_id": "811596193553", "principal_id": "AROAUB2AA5FQRGAHITW4A:secmonkey", "user_name": null, "access_key_id": "ASIAI9QHHRMC9F6XQJXN", "session_issuer_arn": "arn:aws:iam::811596193553:role/SecurityMonkey", "session_issuer_user_name": "SecurityMonkey"}, "network": {"source_ip": "255.253.125.115", "user_agent": "Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56 Resource", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 1073, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "c0498a57-9aad-46da-87b8-ba10ea3258a6", "eventTime": "2017-05-27T04:59:42Z", "eventName": "ListEntitiesForPolicy", "eventSource": "iam.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.253.125.115", "userAgent": "Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56 Resource", "awsRegion": "us-east-1", "userIdentity": {"type": "AssumedRole", "principalId": "AROAUB2AA5FQRGAHITW4A:secmonkey", "arn": "arn:aws:sts::811596193553:assumed-role/SecurityMonkey/secmonkey", "accountId": "811596193553", "accessKeyId": "ASIAI9QHHRMC9F6XQJXN", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2017-05-27T04:59:38Z"}, "sessionIssuer": {"type": "Role", "principalId": "AROAUB2AA5FQRGAHITW4A", "arn": "arn:aws:iam::811596193553:role/SecurityMonkey", "accountId": "811596193553", "userName": "SecurityMonkey"}}}, "requestParameters": {"entityFilter": "Group", "policyArn": "arn:aws:iam::811596193553:policy/SecurityMonkeyPerms"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "68f54bf6-1e6f-4ec6-ae31-c594ba4b781c", "record_id": "flaws_cloudtrail:0000151:68f54bf6-1e6f-4ec6-ae31-c594ba4b781c", "row_index": 151, "timestamp": "2017-05-27T04:59:42Z", "event_type": "ListEntitiesForPolicy", "event_source": "iam.amazonaws.com", "principal": {"type": "AssumedRole", "arn": "arn:aws:sts::811596193553:assumed-role/SecurityMonkey/secmonkey", "account_id": "811596193553", "principal_id": "AROAUB2AA5FQRGAHITW4A:secmonkey", "user_name": null, "access_key_id": "ASIAI9QHHRMC9F6XQJXN", "session_issuer_arn": "arn:aws:iam::811596193553:role/SecurityMonkey", "session_issuer_user_name": "SecurityMonkey"}, "network": {"source_ip": "255.253.125.115", "user_agent": "Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56 Resource", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 1072, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "68f54bf6-1e6f-4ec6-ae31-c594ba4b781c", "eventTime": "2017-05-27T04:59:42Z", "eventName": "ListEntitiesForPolicy", "eventSource": "iam.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.253.125.115", "userAgent": "Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56 Resource", "awsRegion": "us-east-1", "userIdentity": {"type": "AssumedRole", "principalId": "AROAUB2AA5FQRGAHITW4A:secmonkey", "arn": "arn:aws:sts::811596193553:assumed-role/SecurityMonkey/secmonkey", "accountId": "811596193553", "accessKeyId": "ASIAI9QHHRMC9F6XQJXN", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2017-05-27T04:59:38Z"}, "sessionIssuer": {"type": "Role", "principalId": "AROAUB2AA5FQRGAHITW4A", "arn": "arn:aws:iam::811596193553:role/SecurityMonkey", "accountId": "811596193553", "userName": "SecurityMonkey"}}}, "requestParameters": {"entityFilter": "Role", "policyArn": "arn:aws:iam::811596193553:policy/SecurityMonkeyPerms"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "d5d0a99a-592a-431e-889b-328974cfe530", "record_id": "flaws_cloudtrail:0000152:d5d0a99a-592a-431e-889b-328974cfe530", "row_index": 152, "timestamp": "2017-05-27T04:59:42Z", "event_type": "GetPolicyVersion", "event_source": "iam.amazonaws.com", "principal": {"type": "AssumedRole", "arn": "arn:aws:sts::811596193553:assumed-role/SecurityMonkey/secmonkey", "account_id": "811596193553", "principal_id": "AROAUB2AA5FQRGAHITW4A:secmonkey", "user_name": null, "access_key_id": "ASIAI9QHHRMC9F6XQJXN", "session_issuer_arn": "arn:aws:iam::811596193553:role/SecurityMonkey", "session_issuer_user_name": "SecurityMonkey"}, "network": {"source_ip": "255.253.125.115", "user_agent": "Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56 Resource", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 1057, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "d5d0a99a-592a-431e-889b-328974cfe530", "eventTime": "2017-05-27T04:59:42Z", "eventName": "GetPolicyVersion", "eventSource": "iam.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.253.125.115", "userAgent": "Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56 Resource", "awsRegion": "us-east-1", "userIdentity": {"type": "AssumedRole", "principalId": "AROAUB2AA5FQRGAHITW4A:secmonkey", "arn": "arn:aws:sts::811596193553:assumed-role/SecurityMonkey/secmonkey", "accountId": "811596193553", "accessKeyId": "ASIAI9QHHRMC9F6XQJXN", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2017-05-27T04:59:38Z"}, "sessionIssuer": {"type": "Role", "principalId": "AROAUB2AA5FQRGAHITW4A", "arn": "arn:aws:iam::811596193553:role/SecurityMonkey", "accountId": "811596193553", "userName": "SecurityMonkey"}}}, "requestParameters": {"policyArn": "arn:aws:iam::811596193553:policy/SecurityMonkey", "versionId": "v1"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "e3db0eaa-c6f8-40e1-9bc4-2be907a331dd", "record_id": "flaws_cloudtrail:0000153:e3db0eaa-c6f8-40e1-9bc4-2be907a331dd", "row_index": 153, "timestamp": "2017-05-27T04:59:43Z", "event_type": "GetTrailStatus", "event_source": "cloudtrail.amazonaws.com", "principal": {"type": "AssumedRole", "arn": "arn:aws:sts::811596193553:assumed-role/SecurityMonkey/secmonkey", "account_id": "811596193553", "principal_id": "AROAUB2AA5FQRGAHITW4A:secmonkey", "user_name": null, "access_key_id": "ASIA0OZ0A6DB7FU1PTRU", "session_issuer_arn": "arn:aws:iam::811596193553:role/SecurityMonkey", "session_issuer_user_name": "SecurityMonkey"}, "network": {"source_ip": "255.253.125.115", "user_agent": "Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56", "aws_region": "ap-southeast-2"}, "resource_arns": [], "raw_record_size_bytes": 1047, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "e3db0eaa-c6f8-40e1-9bc4-2be907a331dd", "eventTime": "2017-05-27T04:59:43Z", "eventName": "GetTrailStatus", "eventSource": "cloudtrail.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.253.125.115", "userAgent": "Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56", "awsRegion": "ap-southeast-2", "userIdentity": {"type": "AssumedRole", "principalId": "AROAUB2AA5FQRGAHITW4A:secmonkey", "arn": "arn:aws:sts::811596193553:assumed-role/SecurityMonkey/secmonkey", "accountId": "811596193553", "accessKeyId": "ASIA0OZ0A6DB7FU1PTRU", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2017-05-27T04:59:41Z"}, "sessionIssuer": {"type": "Role", "principalId": "AROAUB2AA5FQRGAHITW4A", "arn": "arn:aws:iam::811596193553:role/SecurityMonkey", "accountId": "811596193553", "userName": "SecurityMonkey"}}}, "requestParameters": {"name": "arn:aws:cloudtrail:us-west-2:811596193553:trail/cloudtrail"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "356978fe8-cc4c-480d-ae76-14d2f237f5ac", "record_id": "flaws_cloudtrail:0000154:356978fe8-cc4c-480d-ae76-14d2f237f5ac", "row_index": 154, "timestamp": "2017-05-27T04:59:43Z", "event_type": "AssumeRole", "event_source": "sts.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/SecurityMokey", "account_id": "811596193553", "principal_id": "AIDAQ9SRE1SZZZ4Q4UOJH", "user_name": "SecurityMokey", "access_key_id": "AKIAXJ0III4JBKZDXGXN", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "255.253.125.115", "user_agent": "Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56", "aws_region": "us-east-1"}, "resource_arns": ["arn:aws:iam::811596193553:role/SecurityMonkey"], "raw_record_size_bytes": 1451, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "resources", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "356978fe8-cc4c-480d-ae76-14d2f237f5ac", "eventTime": "2017-05-27T04:59:43Z", "eventName": "AssumeRole", "eventSource": "sts.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.253.125.115", "userAgent": "Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDAQ9SRE1SZZZ4Q4UOJH", "arn": "arn:aws:iam::811596193553:user/SecurityMokey", "accountId": "811596193553", "accessKeyId": "AKIAXJ0III4JBKZDXGXN", "userName": "SecurityMokey"}, "requestParameters": {"roleArn": "arn:aws:iam::811596193553:role/SecurityMonkey", "roleSessionName": "secmonkey"}, "responseElements": {"credentials": {"accessKeyId": "ASIAB9GBR0Q8GP1SNYIP", "expiration": "May 27, 2017 5:59:43 AM", "sessionToken": "FQoDYXdzECYaDA6JCD+1ke83rMb02CLMAWfN3hE/ciFacb0CiXhE3PNQgKeT3ZyLLvEc+LUuH2E6Noci08ZYX1Uhld1yGHpt1UBZUI3vam/JC7Zw2FX2hZyDprbr7YRXY4PU+eT+/lCYXUq4g021P2eMmbCAIolQPxqSsBCAkmEBUUSwjlP9rzrNDpU4tEsRQihkYbt2W5BORkCmEzv+YOeAUN0yJqHDiBQs4K14qLs/4QAQqW2lfJx1foOanEwyCtIiYUR+zr/zqDZrSeheSXev1ULLGq4DlqV2ErrYA8DR/7N63Si/j6TJBQ=="}, "assumedRoleUser": {"assumedRoleId": "AROAUB2AA5FQRGAHITW4A:secmonkey", "arn": "arn:aws:sts::811596193553:assumed-role/SecurityMonkey/secmonkey"}}, "resources": [{"ARN": "arn:aws:iam::811596193553:role/SecurityMonkey", "accountId": "811596193553", "type": "AWS::IAM::Role"}]}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "a61ab05b-2190-485f-8fd5-8cb8a04fb408", "record_id": "flaws_cloudtrail:0000155:a61ab05b-2190-485f-8fd5-8cb8a04fb408", "row_index": 155, "timestamp": "2017-05-27T04:59:43Z", "event_type": "GetPolicyVersion", "event_source": "iam.amazonaws.com", "principal": {"type": "AssumedRole", "arn": "arn:aws:sts::811596193553:assumed-role/SecurityMonkey/secmonkey", "account_id": "811596193553", "principal_id": "AROAUB2AA5FQRGAHITW4A:secmonkey", "user_name": null, "access_key_id": "ASIAI9QHHRMC9F6XQJXN", "session_issuer_arn": "arn:aws:iam::811596193553:role/SecurityMonkey", "session_issuer_user_name": "SecurityMonkey"}, "network": {"source_ip": "255.253.125.115", "user_agent": "Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56 Resource", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 1058, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "a61ab05b-2190-485f-8fd5-8cb8a04fb408", "eventTime": "2017-05-27T04:59:43Z", "eventName": "GetPolicyVersion", "eventSource": "iam.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.253.125.115", "userAgent": "Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56 Resource", "awsRegion": "us-east-1", "userIdentity": {"type": "AssumedRole", "principalId": "AROAUB2AA5FQRGAHITW4A:secmonkey", "arn": "arn:aws:sts::811596193553:assumed-role/SecurityMonkey/secmonkey", "accountId": "811596193553", "accessKeyId": "ASIAI9QHHRMC9F6XQJXN", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2017-05-27T04:59:38Z"}, "sessionIssuer": {"type": "Role", "principalId": "AROAUB2AA5FQRGAHITW4A", "arn": "arn:aws:iam::811596193553:role/SecurityMonkey", "accountId": "811596193553", "userName": "SecurityMonkey"}}}, "requestParameters": {"policyArn": "arn:aws:iam::aws:policy/AWSMarketplaceFullAccess", "versionId": "v1"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "4d1b4eef-2fc6-4602-ab1a-d513af6ecd6b", "record_id": "flaws_cloudtrail:0000156:4d1b4eef-2fc6-4602-ab1a-d513af6ecd6b", "row_index": 156, "timestamp": "2017-05-27T04:59:43Z", "event_type": "GetPolicyVersion", "event_source": "iam.amazonaws.com", "principal": {"type": "AssumedRole", "arn": "arn:aws:sts::811596193553:assumed-role/SecurityMonkey/secmonkey", "account_id": "811596193553", "principal_id": "AROAUB2AA5FQRGAHITW4A:secmonkey", "user_name": null, "access_key_id": "ASIAI9QHHRMC9F6XQJXN", "session_issuer_arn": "arn:aws:iam::811596193553:role/SecurityMonkey", "session_issuer_user_name": "SecurityMonkey"}, "network": {"source_ip": "255.253.125.115", "user_agent": "Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56 Resource", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 1073, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "4d1b4eef-2fc6-4602-ab1a-d513af6ecd6b", "eventTime": "2017-05-27T04:59:43Z", "eventName": "GetPolicyVersion", "eventSource": "iam.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.253.125.115", "userAgent": "Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56 Resource", "awsRegion": "us-east-1", "userIdentity": {"type": "AssumedRole", "principalId": "AROAUB2AA5FQRGAHITW4A:secmonkey", "arn": "arn:aws:sts::811596193553:assumed-role/SecurityMonkey/secmonkey", "accountId": "811596193553", "accessKeyId": "ASIAI9QHHRMC9F6XQJXN", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2017-05-27T04:59:38Z"}, "sessionIssuer": {"type": "Role", "principalId": "AROAUB2AA5FQRGAHITW4A", "arn": "arn:aws:iam::811596193553:role/SecurityMonkey", "accountId": "811596193553", "userName": "SecurityMonkey"}}}, "requestParameters": {"policyArn": "arn:aws:iam::aws:policy/service-role/AWSQuicksightAthenaAccess", "versionId": "v1"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "3d8df09e-2690-4ce7-affa-2205073c4c80", "record_id": "flaws_cloudtrail:0000157:3d8df09e-2690-4ce7-affa-2205073c4c80", "row_index": 157, "timestamp": "2017-05-27T04:59:43Z", "event_type": "GetPolicyVersion", "event_source": "iam.amazonaws.com", "principal": {"type": "AssumedRole", "arn": "arn:aws:sts::811596193553:assumed-role/SecurityMonkey/secmonkey", "account_id": "811596193553", "principal_id": "AROAUB2AA5FQRGAHITW4A:secmonkey", "user_name": null, "access_key_id": "ASIAI9QHHRMC9F6XQJXN", "session_issuer_arn": "arn:aws:iam::811596193553:role/SecurityMonkey", "session_issuer_user_name": "SecurityMonkey"}, "network": {"source_ip": "255.253.125.115", "user_agent": "Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56 Resource", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 1063, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "3d8df09e-2690-4ce7-affa-2205073c4c80", "eventTime": "2017-05-27T04:59:43Z", "eventName": "GetPolicyVersion", "eventSource": "iam.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.253.125.115", "userAgent": "Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56 Resource", "awsRegion": "us-east-1", "userIdentity": {"type": "AssumedRole", "principalId": "AROAUB2AA5FQRGAHITW4A:secmonkey", "arn": "arn:aws:sts::811596193553:assumed-role/SecurityMonkey/secmonkey", "accountId": "811596193553", "accessKeyId": "ASIAI9QHHRMC9F6XQJXN", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2017-05-27T04:59:38Z"}, "sessionIssuer": {"type": "Role", "principalId": "AROAUB2AA5FQRGAHITW4A", "arn": "arn:aws:iam::811596193553:role/SecurityMonkey", "accountId": "811596193553", "userName": "SecurityMonkey"}}}, "requestParameters": {"policyArn": "arn:aws:iam::aws:policy/AWSCertificateManagerReadOnly", "versionId": "v2"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "123031-a142-403f-8c98-fd8d81574", "record_id": "flaws_cloudtrail:0000158:123031-a142-403f-8c98-fd8d81574", "row_index": 158, "timestamp": "2017-05-27T04:59:43Z", "event_type": "GetPolicyVersion", "event_source": "iam.amazonaws.com", "principal": {"type": "AssumedRole", "arn": "arn:aws:sts::811596193553:assumed-role/SecurityMonkey/secmonkey", "account_id": "811596193553", "principal_id": "AROAUB2AA5FQRGAHITW4A:secmonkey", "user_name": null, "access_key_id": "ASIAI9QHHRMC9F6XQJXN", "session_issuer_arn": "arn:aws:iam::811596193553:role/SecurityMonkey", "session_issuer_user_name": "SecurityMonkey"}, "network": {"source_ip": "255.253.125.115", "user_agent": "Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56 Resource", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 1062, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "123031-a142-403f-8c98-fd8d81574", "eventTime": "2017-05-27T04:59:43Z", "eventName": "GetPolicyVersion", "eventSource": "iam.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.253.125.115", "userAgent": "Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56 Resource", "awsRegion": "us-east-1", "userIdentity": {"type": "AssumedRole", "principalId": "AROAUB2AA5FQRGAHITW4A:secmonkey", "arn": "arn:aws:sts::811596193553:assumed-role/SecurityMonkey/secmonkey", "accountId": "811596193553", "accessKeyId": "ASIAI9QHHRMC9F6XQJXN", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2017-05-27T04:59:38Z"}, "sessionIssuer": {"type": "Role", "principalId": "AROAUB2AA5FQRGAHITW4A", "arn": "arn:aws:iam::811596193553:role/SecurityMonkey", "accountId": "811596193553", "userName": "SecurityMonkey"}}}, "requestParameters": {"policyArn": "arn:aws:iam::aws:policy/AWSElasticBeanstalkReadOnlyAccess", "versionId": "v1"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "fc89451e-61ce-4aec-aff3-e144a2a45e11", "record_id": "flaws_cloudtrail:0000159:fc89451e-61ce-4aec-aff3-e144a2a45e11", "row_index": 159, "timestamp": "2017-05-27T04:59:43Z", "event_type": "GetPolicyVersion", "event_source": "iam.amazonaws.com", "principal": {"type": "AssumedRole", "arn": "arn:aws:sts::811596193553:assumed-role/SecurityMonkey/secmonkey", "account_id": "811596193553", "principal_id": "AROAUB2AA5FQRGAHITW4A:secmonkey", "user_name": null, "access_key_id": "ASIAI9QHHRMC9F6XQJXN", "session_issuer_arn": "arn:aws:iam::811596193553:role/SecurityMonkey", "session_issuer_user_name": "SecurityMonkey"}, "network": {"source_ip": "255.253.125.115", "user_agent": "Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56 Resource", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 1053, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "fc89451e-61ce-4aec-aff3-e144a2a45e11", "eventTime": "2017-05-27T04:59:43Z", "eventName": "GetPolicyVersion", "eventSource": "iam.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.253.125.115", "userAgent": "Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56 Resource", "awsRegion": "us-east-1", "userIdentity": {"type": "AssumedRole", "principalId": "AROAUB2AA5FQRGAHITW4A:secmonkey", "arn": "arn:aws:sts::811596193553:assumed-role/SecurityMonkey/secmonkey", "accountId": "811596193553", "accessKeyId": "ASIAI9QHHRMC9F6XQJXN", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2017-05-27T04:59:38Z"}, "sessionIssuer": {"type": "Role", "principalId": "AROAUB2AA5FQRGAHITW4A", "arn": "arn:aws:iam::811596193553:role/SecurityMonkey", "accountId": "811596193553", "userName": "SecurityMonkey"}}}, "requestParameters": {"policyArn": "arn:aws:iam::aws:policy/AmazonEC2FullAccess", "versionId": "v1"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "55c4672a-4e77-413a-a68a-6c0b59fb801d", "record_id": "flaws_cloudtrail:0000160:55c4672a-4e77-413a-a68a-6c0b59fb801d", "row_index": 160, "timestamp": "2017-05-27T04:59:43Z", "event_type": "GetPolicyVersion", "event_source": "iam.amazonaws.com", "principal": {"type": "AssumedRole", "arn": "arn:aws:sts::811596193553:assumed-role/SecurityMonkey/secmonkey", "account_id": "811596193553", "principal_id": "AROAUB2AA5FQRGAHITW4A:secmonkey", "user_name": null, "access_key_id": "ASIAI9QHHRMC9F6XQJXN", "session_issuer_arn": "arn:aws:iam::811596193553:role/SecurityMonkey", "session_issuer_user_name": "SecurityMonkey"}, "network": {"source_ip": "255.253.125.115", "user_agent": "Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56 Resource", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 1058, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "55c4672a-4e77-413a-a68a-6c0b59fb801d", "eventTime": "2017-05-27T04:59:43Z", "eventName": "GetPolicyVersion", "eventSource": "iam.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.253.125.115", "userAgent": "Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56 Resource", "awsRegion": "us-east-1", "userIdentity": {"type": "AssumedRole", "principalId": "AROAUB2AA5FQRGAHITW4A:secmonkey", "arn": "arn:aws:sts::811596193553:assumed-role/SecurityMonkey/secmonkey", "accountId": "811596193553", "accessKeyId": "ASIAI9QHHRMC9F6XQJXN", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2017-05-27T04:59:38Z"}, "sessionIssuer": {"type": "Role", "principalId": "AROAUB2AA5FQRGAHITW4A", "arn": "arn:aws:iam::811596193553:role/SecurityMonkey", "accountId": "811596193553", "userName": "SecurityMonkey"}}}, "requestParameters": {"policyArn": "arn:aws:iam::aws:policy/job-function/SupportUser", "versionId": "v2"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "9ab2f2ba-bd52-478b-b4e6-49273db4f", "record_id": "flaws_cloudtrail:0000161:9ab2f2ba-bd52-478b-b4e6-49273db4f", "row_index": 161, "timestamp": "2017-05-27T04:59:43Z", "event_type": "GetPolicyVersion", "event_source": "iam.amazonaws.com", "principal": {"type": "AssumedRole", "arn": "arn:aws:sts::811596193553:assumed-role/SecurityMonkey/secmonkey", "account_id": "811596193553", "principal_id": "AROAUB2AA5FQRGAHITW4A:secmonkey", "user_name": null, "access_key_id": "ASIAI9QHHRMC9F6XQJXN", "session_issuer_arn": "arn:aws:iam::811596193553:role/SecurityMonkey", "session_issuer_user_name": "SecurityMonkey"}, "network": {"source_ip": "255.253.125.115", "user_agent": "Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56 Resource", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 1050, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "9ab2f2ba-bd52-478b-b4e6-49273db4f", "eventTime": "2017-05-27T04:59:43Z", "eventName": "GetPolicyVersion", "eventSource": "iam.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.253.125.115", "userAgent": "Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56 Resource", "awsRegion": "us-east-1", "userIdentity": {"type": "AssumedRole", "principalId": "AROAUB2AA5FQRGAHITW4A:secmonkey", "arn": "arn:aws:sts::811596193553:assumed-role/SecurityMonkey/secmonkey", "accountId": "811596193553", "accessKeyId": "ASIAI9QHHRMC9F6XQJXN", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2017-05-27T04:59:38Z"}, "sessionIssuer": {"type": "Role", "principalId": "AROAUB2AA5FQRGAHITW4A", "arn": "arn:aws:iam::811596193553:role/SecurityMonkey", "accountId": "811596193553", "userName": "SecurityMonkey"}}}, "requestParameters": {"policyArn": "arn:aws:iam::aws:policy/AmazonRDSFullAccess", "versionId": "v2"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "ea355fac-5572-4cf5-8df0-1e1be585f2f0", "record_id": "flaws_cloudtrail:0000162:ea355fac-5572-4cf5-8df0-1e1be585f2f0", "row_index": 162, "timestamp": "2017-05-27T04:59:43Z", "event_type": "GetPolicyVersion", "event_source": "iam.amazonaws.com", "principal": {"type": "AssumedRole", "arn": "arn:aws:sts::811596193553:assumed-role/SecurityMonkey/secmonkey", "account_id": "811596193553", "principal_id": "AROAUB2AA5FQRGAHITW4A:secmonkey", "user_name": null, "access_key_id": "ASIAI9QHHRMC9F6XQJXN", "session_issuer_arn": "arn:aws:iam::811596193553:role/SecurityMonkey", "session_issuer_user_name": "SecurityMonkey"}, "network": {"source_ip": "255.253.125.115", "user_agent": "Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56 Resource", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 1053, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "ea355fac-5572-4cf5-8df0-1e1be585f2f0", "eventTime": "2017-05-27T04:59:43Z", "eventName": "GetPolicyVersion", "eventSource": "iam.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.253.125.115", "userAgent": "Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56 Resource", "awsRegion": "us-east-1", "userIdentity": {"type": "AssumedRole", "principalId": "AROAUB2AA5FQRGAHITW4A:secmonkey", "arn": "arn:aws:sts::811596193553:assumed-role/SecurityMonkey/secmonkey", "accountId": "811596193553", "accessKeyId": "ASIAI9QHHRMC9F6XQJXN", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2017-05-27T04:59:38Z"}, "sessionIssuer": {"type": "Role", "principalId": "AROAUB2AA5FQRGAHITW4A", "arn": "arn:aws:iam::811596193553:role/SecurityMonkey", "accountId": "811596193553", "userName": "SecurityMonkey"}}}, "requestParameters": {"policyArn": "arn:aws:iam::aws:policy/AWSHealthFullAccess", "versionId": "v1"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "b1caa935-9447-464c-93d2-7601e89a0eb6", "record_id": "flaws_cloudtrail:0000163:b1caa935-9447-464c-93d2-7601e89a0eb6", "row_index": 163, "timestamp": "2017-05-27T04:59:43Z", "event_type": "GetPolicyVersion", "event_source": "iam.amazonaws.com", "principal": {"type": "AssumedRole", "arn": "arn:aws:sts::811596193553:assumed-role/SecurityMonkey/secmonkey", "account_id": "811596193553", "principal_id": "AROAUB2AA5FQRGAHITW4A:secmonkey", "user_name": null, "access_key_id": "ASIAI9QHHRMC9F6XQJXN", "session_issuer_arn": "arn:aws:iam::811596193553:role/SecurityMonkey", "session_issuer_user_name": "SecurityMonkey"}, "network": {"source_ip": "255.253.125.115", "user_agent": "Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56 Resource", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 1067, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "b1caa935-9447-464c-93d2-7601e89a0eb6", "eventTime": "2017-05-27T04:59:43Z", "eventName": "GetPolicyVersion", "eventSource": "iam.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.253.125.115", "userAgent": "Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56 Resource", "awsRegion": "us-east-1", "userIdentity": {"type": "AssumedRole", "principalId": "AROAUB2AA5FQRGAHITW4A:secmonkey", "arn": "arn:aws:sts::811596193553:assumed-role/SecurityMonkey/secmonkey", "accountId": "811596193553", "accessKeyId": "ASIAI9QHHRMC9F6XQJXN", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2017-05-27T04:59:38Z"}, "sessionIssuer": {"type": "Role", "principalId": "AROAUB2AA5FQRGAHITW4A", "arn": "arn:aws:iam::811596193553:role/SecurityMonkey", "accountId": "811596193553", "userName": "SecurityMonkey"}}}, "requestParameters": {"policyArn": "arn:aws:iam::aws:policy/service-role/AWSQuickSightListIAM", "versionId": "v1"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "6145ca34-03e9-445e-95d7-57c5734da1f3", "record_id": "flaws_cloudtrail:0000164:6145ca34-03e9-445e-95d7-57c5734da1f3", "row_index": 164, "timestamp": "2017-05-27T04:59:43Z", "event_type": "GetPolicyVersion", "event_source": "iam.amazonaws.com", "principal": {"type": "AssumedRole", "arn": "arn:aws:sts::811596193553:assumed-role/SecurityMonkey/secmonkey", "account_id": "811596193553", "principal_id": "AROAUB2AA5FQRGAHITW4A:secmonkey", "user_name": null, "access_key_id": "ASIAI9QHHRMC9F6XQJXN", "session_issuer_arn": "arn:aws:iam::811596193553:role/SecurityMonkey", "session_issuer_user_name": "SecurityMonkey"}, "network": {"source_ip": "255.253.125.115", "user_agent": "Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56 Resource", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 1070, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "6145ca34-03e9-445e-95d7-57c5734da1f3", "eventTime": "2017-05-27T04:59:43Z", "eventName": "GetPolicyVersion", "eventSource": "iam.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.253.125.115", "userAgent": "Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56 Resource", "awsRegion": "us-east-1", "userIdentity": {"type": "AssumedRole", "principalId": "AROAUB2AA5FQRGAHITW4A:secmonkey", "arn": "arn:aws:sts::811596193553:assumed-role/SecurityMonkey/secmonkey", "accountId": "811596193553", "accessKeyId": "ASIAI9QHHRMC9F6XQJXN", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2017-05-27T04:59:38Z"}, "sessionIssuer": {"type": "Role", "principalId": "AROAUB2AA5FQRGAHITW4A", "arn": "arn:aws:iam::811596193553:role/SecurityMonkey", "accountId": "811596193553", "userName": "SecurityMonkey"}}}, "requestParameters": {"policyArn": "arn:aws:iam::aws:policy/service-role/AmazonDMSRedshiftS3Role", "versionId": "v1"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "a56fca47-6d47-4219-ab34-ff5c429517", "record_id": "flaws_cloudtrail:0000165:a56fca47-6d47-4219-ab34-ff5c429517", "row_index": 165, "timestamp": "2017-05-27T04:59:43Z", "event_type": "GetPolicyVersion", "event_source": "iam.amazonaws.com", "principal": {"type": "AssumedRole", "arn": "arn:aws:sts::811596193553:assumed-role/SecurityMonkey/secmonkey", "account_id": "811596193553", "principal_id": "AROAUB2AA5FQRGAHITW4A:secmonkey", "user_name": null, "access_key_id": "ASIAI9QHHRMC9F6XQJXN", "session_issuer_arn": "arn:aws:iam::811596193553:role/SecurityMonkey", "session_issuer_user_name": "SecurityMonkey"}, "network": {"source_ip": "255.253.125.115", "user_agent": "Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56 Resource", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 1064, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "a56fca47-6d47-4219-ab34-ff5c429517", "eventTime": "2017-05-27T04:59:43Z", "eventName": "GetPolicyVersion", "eventSource": "iam.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.253.125.115", "userAgent": "Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56 Resource", "awsRegion": "us-east-1", "userIdentity": {"type": "AssumedRole", "principalId": "AROAUB2AA5FQRGAHITW4A:secmonkey", "arn": "arn:aws:sts::811596193553:assumed-role/SecurityMonkey/secmonkey", "accountId": "811596193553", "accessKeyId": "ASIAI9QHHRMC9F6XQJXN", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2017-05-27T04:59:38Z"}, "sessionIssuer": {"type": "Role", "principalId": "AROAUB2AA5FQRGAHITW4A", "arn": "arn:aws:iam::811596193553:role/SecurityMonkey", "accountId": "811596193553", "userName": "SecurityMonkey"}}}, "requestParameters": {"policyArn": "arn:aws:iam::aws:policy/AutoScalingConsoleReadOnlyAccess", "versionId": "v1"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "81ead40c-d00f-4e3c-9183-fc2269b57e5e", "record_id": "flaws_cloudtrail:0000166:81ead40c-d00f-4e3c-9183-fc2269b57e5e", "row_index": 166, "timestamp": "2017-05-27T04:59:44Z", "event_type": "DescribeTrails", "event_source": "cloudtrail.amazonaws.com", "principal": {"type": "AssumedRole", "arn": "arn:aws:sts::811596193553:assumed-role/SecurityMonkey/secmonkey", "account_id": "811596193553", "principal_id": "AROAUB2AA5FQRGAHITW4A:secmonkey", "user_name": null, "access_key_id": "ASIAB9GBR0Q8GP1SNYIP", "session_issuer_arn": "arn:aws:iam::811596193553:role/SecurityMonkey", "session_issuer_user_name": "SecurityMonkey"}, "network": {"source_ip": "255.253.125.115", "user_agent": "Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56", "aws_region": "sa-east-1"}, "resource_arns": [], "raw_record_size_bytes": 977, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "81ead40c-d00f-4e3c-9183-fc2269b57e5e", "eventTime": "2017-05-27T04:59:44Z", "eventName": "DescribeTrails", "eventSource": "cloudtrail.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.253.125.115", "userAgent": "Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56", "awsRegion": "sa-east-1", "userIdentity": {"type": "AssumedRole", "principalId": "AROAUB2AA5FQRGAHITW4A:secmonkey", "arn": "arn:aws:sts::811596193553:assumed-role/SecurityMonkey/secmonkey", "accountId": "811596193553", "accessKeyId": "ASIAB9GBR0Q8GP1SNYIP", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2017-05-27T04:59:43Z"}, "sessionIssuer": {"type": "Role", "principalId": "AROAUB2AA5FQRGAHITW4A", "arn": "arn:aws:iam::811596193553:role/SecurityMonkey", "accountId": "811596193553", "userName": "SecurityMonkey"}}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "416bbae9-4f04-41b9-bc83-e2ea43e4c475", "record_id": "flaws_cloudtrail:0000167:416bbae9-4f04-41b9-bc83-e2ea43e4c475", "row_index": 167, "timestamp": "2017-05-27T04:59:44Z", "event_type": "GetTrailStatus", "event_source": "cloudtrail.amazonaws.com", "principal": {"type": "AssumedRole", "arn": "arn:aws:sts::811596193553:assumed-role/SecurityMonkey/secmonkey", "account_id": "811596193553", "principal_id": "AROAUB2AA5FQRGAHITW4A:secmonkey", "user_name": null, "access_key_id": "ASIAB9GBR0Q8GP1SNYIP", "session_issuer_arn": "arn:aws:iam::811596193553:role/SecurityMonkey", "session_issuer_user_name": "SecurityMonkey"}, "network": {"source_ip": "255.253.125.115", "user_agent": "Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56", "aws_region": "sa-east-1"}, "resource_arns": [], "raw_record_size_bytes": 1043, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "416bbae9-4f04-41b9-bc83-e2ea43e4c475", "eventTime": "2017-05-27T04:59:44Z", "eventName": "GetTrailStatus", "eventSource": "cloudtrail.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.253.125.115", "userAgent": "Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56", "awsRegion": "sa-east-1", "userIdentity": {"type": "AssumedRole", "principalId": "AROAUB2AA5FQRGAHITW4A:secmonkey", "arn": "arn:aws:sts::811596193553:assumed-role/SecurityMonkey/secmonkey", "accountId": "811596193553", "accessKeyId": "ASIAB9GBR0Q8GP1SNYIP", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2017-05-27T04:59:43Z"}, "sessionIssuer": {"type": "Role", "principalId": "AROAUB2AA5FQRGAHITW4A", "arn": "arn:aws:iam::811596193553:role/SecurityMonkey", "accountId": "811596193553", "userName": "SecurityMonkey"}}}, "requestParameters": {"name": "arn:aws:cloudtrail:us-west-2:811596193553:trail/cloudtrail"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "34e35ffa-dfad-457c-ad66-26b2e1663a5f", "record_id": "flaws_cloudtrail:0000168:34e35ffa-dfad-457c-ad66-26b2e1663a5f", "row_index": 168, "timestamp": "2017-05-27T04:59:44Z", "event_type": "GetPolicyVersion", "event_source": "iam.amazonaws.com", "principal": {"type": "AssumedRole", "arn": "arn:aws:sts::811596193553:assumed-role/SecurityMonkey/secmonkey", "account_id": "811596193553", "principal_id": "AROAUB2AA5FQRGAHITW4A:secmonkey", "user_name": null, "access_key_id": "ASIAI9QHHRMC9F6XQJXN", "session_issuer_arn": "arn:aws:iam::811596193553:role/SecurityMonkey", "session_issuer_user_name": "SecurityMonkey"}, "network": {"source_ip": "255.253.125.115", "user_agent": "Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56 Resource", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 1061, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "34e35ffa-dfad-457c-ad66-26b2e1663a5f", "eventTime": "2017-05-27T04:59:44Z", "eventName": "GetPolicyVersion", "eventSource": "iam.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.253.125.115", "userAgent": "Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56 Resource", "awsRegion": "us-east-1", "userIdentity": {"type": "AssumedRole", "principalId": "AROAUB2AA5FQRGAHITW4A:secmonkey", "arn": "arn:aws:sts::811596193553:assumed-role/SecurityMonkey/secmonkey", "accountId": "811596193553", "accessKeyId": "ASIAI9QHHRMC9F6XQJXN", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2017-05-27T04:59:38Z"}, "sessionIssuer": {"type": "Role", "principalId": "AROAUB2AA5FQRGAHITW4A", "arn": "arn:aws:iam::811596193553:role/SecurityMonkey", "accountId": "811596193553", "userName": "SecurityMonkey"}}}, "requestParameters": {"policyArn": "arn:aws:iam::aws:policy/AmazonElastiCacheFullAccess", "versionId": "v1"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "a71f0a81-cf30-4bf5-b7a6-c796fe787c76", "record_id": "flaws_cloudtrail:0000169:a71f0a81-cf30-4bf5-b7a6-c796fe787c76", "row_index": 169, "timestamp": "2017-05-27T04:59:44Z", "event_type": "GetPolicyVersion", "event_source": "iam.amazonaws.com", "principal": {"type": "AssumedRole", "arn": "arn:aws:sts::811596193553:assumed-role/SecurityMonkey/secmonkey", "account_id": "811596193553", "principal_id": "AROAUB2AA5FQRGAHITW4A:secmonkey", "user_name": null, "access_key_id": "ASIAI9QHHRMC9F6XQJXN", "session_issuer_arn": "arn:aws:iam::811596193553:role/SecurityMonkey", "session_issuer_user_name": "SecurityMonkey"}, "network": {"source_ip": "255.253.125.115", "user_agent": "Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56 Resource", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 1059, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "a71f0a81-cf30-4bf5-b7a6-c796fe787c76", "eventTime": "2017-05-27T04:59:44Z", "eventName": "GetPolicyVersion", "eventSource": "iam.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.253.125.115", "userAgent": "Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56 Resource", "awsRegion": "us-east-1", "userIdentity": {"type": "AssumedRole", "principalId": "AROAUB2AA5FQRGAHITW4A:secmonkey", "arn": "arn:aws:sts::811596193553:assumed-role/SecurityMonkey/secmonkey", "accountId": "811596193553", "accessKeyId": "ASIAI9QHHRMC9F6XQJXN", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2017-05-27T04:59:38Z"}, "sessionIssuer": {"type": "Role", "principalId": "AROAUB2AA5FQRGAHITW4A", "arn": "arn:aws:iam::811596193553:role/SecurityMonkey", "accountId": "811596193553", "userName": "SecurityMonkey"}}}, "requestParameters": {"policyArn": "arn:aws:iam::aws:policy/AmazonInspectorFullAccess", "versionId": "v2"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "f74916b5-b1bc-4299-a245-41602d6201a1", "record_id": "flaws_cloudtrail:0000170:f74916b5-b1bc-4299-a245-41602d6201a1", "row_index": 170, "timestamp": "2017-05-27T04:59:44Z", "event_type": "GetPolicyVersion", "event_source": "iam.amazonaws.com", "principal": {"type": "AssumedRole", "arn": "arn:aws:sts::811596193553:assumed-role/SecurityMonkey/secmonkey", "account_id": "811596193553", "principal_id": "AROAUB2AA5FQRGAHITW4A:secmonkey", "user_name": null, "access_key_id": "ASIAI9QHHRMC9F6XQJXN", "session_issuer_arn": "arn:aws:iam::811596193553:role/SecurityMonkey", "session_issuer_user_name": "SecurityMonkey"}, "network": {"source_ip": "255.253.125.115", "user_agent": "Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56 Resource", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 1047, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "f74916b5-b1bc-4299-a245-41602d6201a1", "eventTime": "2017-05-27T04:59:44Z", "eventName": "GetPolicyVersion", "eventSource": "iam.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.253.125.115", "userAgent": "Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56 Resource", "awsRegion": "us-east-1", "userIdentity": {"type": "AssumedRole", "principalId": "AROAUB2AA5FQRGAHITW4A:secmonkey", "arn": "arn:aws:sts::811596193553:assumed-role/SecurityMonkey/secmonkey", "accountId": "811596193553", "accessKeyId": "ASIAI9QHHRMC9F6XQJXN", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2017-05-27T04:59:38Z"}, "sessionIssuer": {"type": "Role", "principalId": "AROAUB2AA5FQRGAHITW4A", "arn": "arn:aws:iam::811596193553:role/SecurityMonkey", "accountId": "811596193553", "userName": "SecurityMonkey"}}}, "requestParameters": {"policyArn": "arn:aws:iam::aws:policy/IAMFullAccess", "versionId": "v1"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "1e345870-b11e-4259-b11b-8df3ea9a374b", "record_id": "flaws_cloudtrail:0000171:1e345870-b11e-4259-b11b-8df3ea9a374b", "row_index": 171, "timestamp": "2017-05-27T04:59:44Z", "event_type": "GetPolicyVersion", "event_source": "iam.amazonaws.com", "principal": {"type": "AssumedRole", "arn": "arn:aws:sts::811596193553:assumed-role/SecurityMonkey/secmonkey", "account_id": "811596193553", "principal_id": "AROAUB2AA5FQRGAHITW4A:secmonkey", "user_name": null, "access_key_id": "ASIAI9QHHRMC9F6XQJXN", "session_issuer_arn": "arn:aws:iam::811596193553:role/SecurityMonkey", "session_issuer_user_name": "SecurityMonkey"}, "network": {"source_ip": "255.253.125.115", "user_agent": "Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56 Resource", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 1062, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "1e345870-b11e-4259-b11b-8df3ea9a374b", "eventTime": "2017-05-27T04:59:44Z", "eventName": "GetPolicyVersion", "eventSource": "iam.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.253.125.115", "userAgent": "Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56 Resource", "awsRegion": "us-east-1", "userIdentity": {"type": "AssumedRole", "principalId": "AROAUB2AA5FQRGAHITW4A:secmonkey", "arn": "arn:aws:sts::811596193553:assumed-role/SecurityMonkey/secmonkey", "accountId": "811596193553", "accessKeyId": "ASIAI9QHHRMC9F6XQJXN", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2017-05-27T04:59:38Z"}, "sessionIssuer": {"type": "Role", "principalId": "AROAUB2AA5FQRGAHITW4A", "arn": "arn:aws:iam::811596193553:role/SecurityMonkey", "accountId": "811596193553", "userName": "SecurityMonkey"}}}, "requestParameters": {"policyArn": "arn:aws:iam::aws:policy/service-role/AWSCloudHSMRole", "versionId": "v1"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "1d80d81f-eb57-4fae-a39d-4d30b43e4d63", "record_id": "flaws_cloudtrail:0000172:1d80d81f-eb57-4fae-a39d-4d30b43e4d63", "row_index": 172, "timestamp": "2017-05-27T04:59:44Z", "event_type": "GetPolicyVersion", "event_source": "iam.amazonaws.com", "principal": {"type": "AssumedRole", "arn": "arn:aws:sts::811596193553:assumed-role/SecurityMonkey/secmonkey", "account_id": "811596193553", "principal_id": "AROAUB2AA5FQRGAHITW4A:secmonkey", "user_name": null, "access_key_id": "ASIAI9QHHRMC9F6XQJXN", "session_issuer_arn": "arn:aws:iam::811596193553:role/SecurityMonkey", "session_issuer_user_name": "SecurityMonkey"}, "network": {"source_ip": "255.253.125.115", "user_agent": "Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56 Resource", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 1066, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "1d80d81f-eb57-4fae-a39d-4d30b43e4d63", "eventTime": "2017-05-27T04:59:44Z", "eventName": "GetPolicyVersion", "eventSource": "iam.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.253.125.115", "userAgent": "Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56 Resource", "awsRegion": "us-east-1", "userIdentity": {"type": "AssumedRole", "principalId": "AROAUB2AA5FQRGAHITW4A:secmonkey", "arn": "arn:aws:sts::811596193553:assumed-role/SecurityMonkey/secmonkey", "accountId": "811596193553", "accessKeyId": "ASIAI9QHHRMC9F6XQJXN", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2017-05-27T04:59:38Z"}, "sessionIssuer": {"type": "Role", "principalId": "AROAUB2AA5FQRGAHITW4A", "arn": "arn:aws:iam::811596193553:role/SecurityMonkey", "accountId": "811596193553", "userName": "SecurityMonkey"}}}, "requestParameters": {"policyArn": "arn:aws:iam::aws:policy/service-role/AmazonEC2RoleforSSM", "versionId": "v3"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "64fc976e-fdaa-469e-bfd2-1c59a81e4bc9", "record_id": "flaws_cloudtrail:0000173:64fc976e-fdaa-469e-bfd2-1c59a81e4bc9", "row_index": 173, "timestamp": "2017-05-27T04:59:44Z", "event_type": "GetPolicyVersion", "event_source": "iam.amazonaws.com", "principal": {"type": "AssumedRole", "arn": "arn:aws:sts::811596193553:assumed-role/SecurityMonkey/secmonkey", "account_id": "811596193553", "principal_id": "AROAUB2AA5FQRGAHITW4A:secmonkey", "user_name": null, "access_key_id": "ASIAI9QHHRMC9F6XQJXN", "session_issuer_arn": "arn:aws:iam::811596193553:role/SecurityMonkey", "session_issuer_user_name": "SecurityMonkey"}, "network": {"source_ip": "255.253.125.115", "user_agent": "Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56 Resource", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 1060, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "64fc976e-fdaa-469e-bfd2-1c59a81e4bc9", "eventTime": "2017-05-27T04:59:44Z", "eventName": "GetPolicyVersion", "eventSource": "iam.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.253.125.115", "userAgent": "Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56 Resource", "awsRegion": "us-east-1", "userIdentity": {"type": "AssumedRole", "principalId": "AROAUB2AA5FQRGAHITW4A:secmonkey", "arn": "arn:aws:sts::811596193553:assumed-role/SecurityMonkey/secmonkey", "accountId": "811596193553", "accessKeyId": "ASIAI9QHHRMC9F6XQJXN", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2017-05-27T04:59:38Z"}, "sessionIssuer": {"type": "Role", "principalId": "AROAUB2AA5FQRGAHITW4A", "arn": "arn:aws:iam::811596193553:role/SecurityMonkey", "accountId": "811596193553", "userName": "SecurityMonkey"}}}, "requestParameters": {"policyArn": "arn:aws:iam::aws:policy/service-role/AWSIoTLogging", "versionId": "v1"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "875c0664-1c04-4697-bdc0-07fa407a084c", "record_id": "flaws_cloudtrail:0000174:875c0664-1c04-4697-bdc0-07fa407a084c", "row_index": 174, "timestamp": "2017-05-27T04:59:44Z", "event_type": "GetPolicyVersion", "event_source": "iam.amazonaws.com", "principal": {"type": "AssumedRole", "arn": "arn:aws:sts::811596193553:assumed-role/SecurityMonkey/secmonkey", "account_id": "811596193553", "principal_id": "AROAUB2AA5FQRGAHITW4A:secmonkey", "user_name": null, "access_key_id": "ASIAI9QHHRMC9F6XQJXN", "session_issuer_arn": "arn:aws:iam::811596193553:role/SecurityMonkey", "session_issuer_user_name": "SecurityMonkey"}, "network": {"source_ip": "255.253.125.115", "user_agent": "Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56 Resource", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 1053, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "875c0664-1c04-4697-bdc0-07fa407a084c", "eventTime": "2017-05-27T04:59:44Z", "eventName": "GetPolicyVersion", "eventSource": "iam.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.253.125.115", "userAgent": "Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56 Resource", "awsRegion": "us-east-1", "userIdentity": {"type": "AssumedRole", "principalId": "AROAUB2AA5FQRGAHITW4A:secmonkey", "arn": "arn:aws:sts::811596193553:assumed-role/SecurityMonkey/secmonkey", "accountId": "811596193553", "accessKeyId": "ASIAI9QHHRMC9F6XQJXN", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2017-05-27T04:59:38Z"}, "sessionIssuer": {"type": "Role", "principalId": "AROAUB2AA5FQRGAHITW4A", "arn": "arn:aws:iam::811596193553:role/SecurityMonkey", "accountId": "811596193553", "userName": "SecurityMonkey"}}}, "requestParameters": {"policyArn": "arn:aws:iam::aws:policy/AWSLambdaFullAccess", "versionId": "v7"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "53ffb560-3d4c-428a-8b10-a806a5e77f81", "record_id": "flaws_cloudtrail:0000175:53ffb560-3d4c-428a-8b10-a806a5e77f81", "row_index": 175, "timestamp": "2017-05-27T04:59:44Z", "event_type": "GetPolicyVersion", "event_source": "iam.amazonaws.com", "principal": {"type": "AssumedRole", "arn": "arn:aws:sts::811596193553:assumed-role/SecurityMonkey/secmonkey", "account_id": "811596193553", "principal_id": "AROAUB2AA5FQRGAHITW4A:secmonkey", "user_name": null, "access_key_id": "ASIAI9QHHRMC9F6XQJXN", "session_issuer_arn": "arn:aws:iam::811596193553:role/SecurityMonkey", "session_issuer_user_name": "SecurityMonkey"}, "network": {"source_ip": "255.253.125.115", "user_agent": "Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56 Resource", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 1053, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "53ffb560-3d4c-428a-8b10-a806a5e77f81", "eventTime": "2017-05-27T04:59:44Z", "eventName": "GetPolicyVersion", "eventSource": "iam.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.253.125.115", "userAgent": "Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56 Resource", "awsRegion": "us-east-1", "userIdentity": {"type": "AssumedRole", "principalId": "AROAUB2AA5FQRGAHITW4A:secmonkey", "arn": "arn:aws:sts::811596193553:assumed-role/SecurityMonkey/secmonkey", "accountId": "811596193553", "accessKeyId": "ASIAI9QHHRMC9F6XQJXN", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2017-05-27T04:59:38Z"}, "sessionIssuer": {"type": "Role", "principalId": "AROAUB2AA5FQRGAHITW4A", "arn": "arn:aws:iam::811596193553:role/SecurityMonkey", "accountId": "811596193553", "userName": "SecurityMonkey"}}}, "requestParameters": {"policyArn": "arn:aws:iam::aws:policy/AmazonSQSFullAccess", "versionId": "v1"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "6cdf3a06-bcd3-41f0-ac16-d1adb4f5efdf", "record_id": "flaws_cloudtrail:0000176:6cdf3a06-bcd3-41f0-ac16-d1adb4f5efdf", "row_index": 176, "timestamp": "2017-05-27T04:59:44Z", "event_type": "GetPolicyVersion", "event_source": "iam.amazonaws.com", "principal": {"type": "AssumedRole", "arn": "arn:aws:sts::811596193553:assumed-role/SecurityMonkey/secmonkey", "account_id": "811596193553", "principal_id": "AROAUB2AA5FQRGAHITW4A:secmonkey", "user_name": null, "access_key_id": "ASIAI9QHHRMC9F6XQJXN", "session_issuer_arn": "arn:aws:iam::811596193553:role/SecurityMonkey", "session_issuer_user_name": "SecurityMonkey"}, "network": {"source_ip": "255.253.125.115", "user_agent": "Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56 Resource", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 1073, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "6cdf3a06-bcd3-41f0-ac16-d1adb4f5efdf", "eventTime": "2017-05-27T04:59:44Z", "eventName": "GetPolicyVersion", "eventSource": "iam.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.253.125.115", "userAgent": "Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56 Resource", "awsRegion": "us-east-1", "userIdentity": {"type": "AssumedRole", "principalId": "AROAUB2AA5FQRGAHITW4A:secmonkey", "arn": "arn:aws:sts::811596193553:assumed-role/SecurityMonkey/secmonkey", "accountId": "811596193553", "accessKeyId": "ASIAI9QHHRMC9F6XQJXN", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2017-05-27T04:59:38Z"}, "sessionIssuer": {"type": "Role", "principalId": "AROAUB2AA5FQRGAHITW4A", "arn": "arn:aws:iam::811596193553:role/SecurityMonkey", "accountId": "811596193553", "userName": "SecurityMonkey"}}}, "requestParameters": {"policyArn": "arn:aws:iam::aws:policy/IAMSelfManageServiceSpecificCredentials", "versionId": "v1"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "46cdbc2d-6c80-4d14-abeb-7138e90025a3", "record_id": "flaws_cloudtrail:0000177:46cdbc2d-6c80-4d14-abeb-7138e90025a3", "row_index": 177, "timestamp": "2017-05-27T04:59:44Z", "event_type": "GetPolicyVersion", "event_source": "iam.amazonaws.com", "principal": {"type": "AssumedRole", "arn": "arn:aws:sts::811596193553:assumed-role/SecurityMonkey/secmonkey", "account_id": "811596193553", "principal_id": "AROAUB2AA5FQRGAHITW4A:secmonkey", "user_name": null, "access_key_id": "ASIAI9QHHRMC9F6XQJXN", "session_issuer_arn": "arn:aws:iam::811596193553:role/SecurityMonkey", "session_issuer_user_name": "SecurityMonkey"}, "network": {"source_ip": "255.253.125.115", "user_agent": "Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56 Resource", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 1057, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "46cdbc2d-6c80-4d14-abeb-7138e90025a3", "eventTime": "2017-05-27T04:59:44Z", "eventName": "GetPolicyVersion", "eventSource": "iam.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.253.125.115", "userAgent": "Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56 Resource", "awsRegion": "us-east-1", "userIdentity": {"type": "AssumedRole", "principalId": "AROAUB2AA5FQRGAHITW4A:secmonkey", "arn": "arn:aws:sts::811596193553:assumed-role/SecurityMonkey/secmonkey", "accountId": "811596193553", "accessKeyId": "ASIAI9QHHRMC9F6XQJXN", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2017-05-27T04:59:38Z"}, "sessionIssuer": {"type": "Role", "principalId": "AROAUB2AA5FQRGAHITW4A", "arn": "arn:aws:iam::811596193553:role/SecurityMonkey", "accountId": "811596193553", "userName": "SecurityMonkey"}}}, "requestParameters": {"policyArn": "arn:aws:iam::aws:policy/AWSCodeCommitFullAccess", "versionId": "v1"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "77774f5e-f16d-4f87-b7c1-789d6cd6f266", "record_id": "flaws_cloudtrail:0000178:77774f5e-f16d-4f87-b7c1-789d6cd6f266", "row_index": 178, "timestamp": "2017-05-27T04:59:44Z", "event_type": "GetPolicyVersion", "event_source": "iam.amazonaws.com", "principal": {"type": "AssumedRole", "arn": "arn:aws:sts::811596193553:assumed-role/SecurityMonkey/secmonkey", "account_id": "811596193553", "principal_id": "AROAUB2AA5FQRGAHITW4A:secmonkey", "user_name": null, "access_key_id": "ASIAI9QHHRMC9F6XQJXN", "session_issuer_arn": "arn:aws:iam::811596193553:role/SecurityMonkey", "session_issuer_user_name": "SecurityMonkey"}, "network": {"source_ip": "255.253.125.115", "user_agent": "Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56 Resource", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 1055, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "77774f5e-f16d-4f87-b7c1-789d6cd6f266", "eventTime": "2017-05-27T04:59:44Z", "eventName": "GetPolicyVersion", "eventSource": "iam.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.253.125.115", "userAgent": "Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56 Resource", "awsRegion": "us-east-1", "userIdentity": {"type": "AssumedRole", "principalId": "AROAUB2AA5FQRGAHITW4A:secmonkey", "arn": "arn:aws:sts::811596193553:assumed-role/SecurityMonkey/secmonkey", "accountId": "811596193553", "accessKeyId": "ASIAI9QHHRMC9F6XQJXN", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2017-05-27T04:59:38Z"}, "sessionIssuer": {"type": "Role", "principalId": "AROAUB2AA5FQRGAHITW4A", "arn": "arn:aws:iam::811596193553:role/SecurityMonkey", "accountId": "811596193553", "userName": "SecurityMonkey"}}}, "requestParameters": {"policyArn": "arn:aws:iam::aws:policy/AWSCodeCommitPowerUser", "versionId": "v3"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "562dfe80-38e6-4ac9-95ef-44b94e744ac1", "record_id": "flaws_cloudtrail:0000179:562dfe80-38e6-4ac9-95ef-44b94e744ac1", "row_index": 179, "timestamp": "2017-05-27T04:59:45Z", "event_type": "AssumeRole", "event_source": "sts.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/SecurityMokey", "account_id": "811596193553", "principal_id": "AIDAQ9SRE1SZZZ4Q4UOJH", "user_name": "SecurityMokey", "access_key_id": "AKIAXJ0III4JBKZDXGXN", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "255.253.125.115", "user_agent": "Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56", "aws_region": "us-east-1"}, "resource_arns": ["arn:aws:iam::811596193553:role/SecurityMonkey"], "raw_record_size_bytes": 1453, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "resources", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "562dfe80-38e6-4ac9-95ef-44b94e744ac1", "eventTime": "2017-05-27T04:59:45Z", "eventName": "AssumeRole", "eventSource": "sts.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.253.125.115", "userAgent": "Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDAQ9SRE1SZZZ4Q4UOJH", "arn": "arn:aws:iam::811596193553:user/SecurityMokey", "accountId": "811596193553", "accessKeyId": "AKIAXJ0III4JBKZDXGXN", "userName": "SecurityMokey"}, "requestParameters": {"roleArn": "arn:aws:iam::811596193553:role/SecurityMonkey", "roleSessionName": "secmonkey"}, "responseElements": {"credentials": {"accessKeyId": "ASIA3V0HIHGYV00V3F0D", "expiration": "May 27, 2017 5:59:45 AM", "sessionToken": "FQoDYXdzECYaDGFudAo9b1XPk77PpSLMAb/NVVNdKadnbFrz6bp1O5LuZDx9elU0S7TFsPxhyvp7EHzCuYNt2a8DlkwCzqnHyAgusxB1dtXk5AuCjAbdTQ0cVv7OameTov9FARNLvAlKAFO7BiTrl8xqNFUq8HHSrF9e9lMqy3n83asTqBygWe3OYTvK7geLOIkoqh0DDfAjCRMggzv7tMUxjJKU2sd7NNESXNvfg5fRoouHqweDu03beRBYtuhYyFXC+MVf9xW868/kHZmjIsWc2Ag6DpmE3+A7/PcZz7OsoBNygyjBj6TJBQ=="}, "assumedRoleUser": {"assumedRoleId": "AROAUB2AA5FQRGAHITW4A:secmonkey", "arn": "arn:aws:sts::811596193553:assumed-role/SecurityMonkey/secmonkey"}}, "resources": [{"ARN": "arn:aws:iam::811596193553:role/SecurityMonkey", "accountId": "811596193553", "type": "AWS::IAM::Role"}]}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "c111cfd4-6573-48bc-bc94-628e6439b988", "record_id": "flaws_cloudtrail:0000180:c111cfd4-6573-48bc-bc94-628e6439b988", "row_index": 180, "timestamp": "2017-05-27T04:59:45Z", "event_type": "GetPolicyVersion", "event_source": "iam.amazonaws.com", "principal": {"type": "AssumedRole", "arn": "arn:aws:sts::811596193553:assumed-role/SecurityMonkey/secmonkey", "account_id": "811596193553", "principal_id": "AROAUB2AA5FQRGAHITW4A:secmonkey", "user_name": null, "access_key_id": "ASIAI9QHHRMC9F6XQJXN", "session_issuer_arn": "arn:aws:iam::811596193553:role/SecurityMonkey", "session_issuer_user_name": "SecurityMonkey"}, "network": {"source_ip": "255.253.125.115", "user_agent": "Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56 Resource", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 1066, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "c111cfd4-6573-48bc-bc94-628e6439b988", "eventTime": "2017-05-27T04:59:45Z", "eventName": "GetPolicyVersion", "eventSource": "iam.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.253.125.115", "userAgent": "Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56 Resource", "awsRegion": "us-east-1", "userIdentity": {"type": "AssumedRole", "principalId": "AROAUB2AA5FQRGAHITW4A:secmonkey", "arn": "arn:aws:sts::811596193553:assumed-role/SecurityMonkey/secmonkey", "accountId": "811596193553", "accessKeyId": "ASIAI9QHHRMC9F6XQJXN", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2017-05-27T04:59:38Z"}, "sessionIssuer": {"type": "Role", "principalId": "AROAUB2AA5FQRGAHITW4A", "arn": "arn:aws:iam::811596193553:role/SecurityMonkey", "accountId": "811596193553", "userName": "SecurityMonkey"}}}, "requestParameters": {"policyArn": "arn:aws:iam::aws:policy/AWSOpsWorksCMInstanceProfileRole", "versionId": "v1"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "615b3d6a-31bf-4c6e-b228-ceca435f0133", "record_id": "flaws_cloudtrail:0000181:615b3d6a-31bf-4c6e-b228-ceca435f0133", "row_index": 181, "timestamp": "2017-05-27T04:59:45Z", "event_type": "GetPolicyVersion", "event_source": "iam.amazonaws.com", "principal": {"type": "AssumedRole", "arn": "arn:aws:sts::811596193553:assumed-role/SecurityMonkey/secmonkey", "account_id": "811596193553", "principal_id": "AROAUB2AA5FQRGAHITW4A:secmonkey", "user_name": null, "access_key_id": "ASIAI9QHHRMC9F6XQJXN", "session_issuer_arn": "arn:aws:iam::811596193553:role/SecurityMonkey", "session_issuer_user_name": "SecurityMonkey"}, "network": {"source_ip": "255.253.125.115", "user_agent": "Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56 Resource", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 1055, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "615b3d6a-31bf-4c6e-b228-ceca435f0133", "eventTime": "2017-05-27T04:59:45Z", "eventName": "GetPolicyVersion", "eventSource": "iam.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.253.125.115", "userAgent": "Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56 Resource", "awsRegion": "us-east-1", "userIdentity": {"type": "AssumedRole", "principalId": "AROAUB2AA5FQRGAHITW4A:secmonkey", "arn": "arn:aws:sts::811596193553:assumed-role/SecurityMonkey/secmonkey", "accountId": "811596193553", "accessKeyId": "ASIAI9QHHRMC9F6XQJXN", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2017-05-27T04:59:38Z"}, "sessionIssuer": {"type": "Role", "principalId": "AROAUB2AA5FQRGAHITW4A", "arn": "arn:aws:iam::811596193553:role/SecurityMonkey", "accountId": "811596193553", "userName": "SecurityMonkey"}}}, "requestParameters": {"policyArn": "arn:aws:iam::aws:policy/AWSOpsWorksFullAccess", "versionId": "v1"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "ce9bba60-547d-4eaf-9c03-cd2795cd8b44", "record_id": "flaws_cloudtrail:0000182:ce9bba60-547d-4eaf-9c03-cd2795cd8b44", "row_index": 182, "timestamp": "2017-05-27T04:59:45Z", "event_type": "GetPolicyVersion", "event_source": "iam.amazonaws.com", "principal": {"type": "AssumedRole", "arn": "arn:aws:sts::811596193553:assumed-role/SecurityMonkey/secmonkey", "account_id": "811596193553", "principal_id": "AROAUB2AA5FQRGAHITW4A:secmonkey", "user_name": null, "access_key_id": "ASIAI9QHHRMC9F6XQJXN", "session_issuer_arn": "arn:aws:iam::811596193553:role/SecurityMonkey", "session_issuer_user_name": "SecurityMonkey"}, "network": {"source_ip": "255.253.125.115", "user_agent": "Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56 Resource", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 1068, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "ce9bba60-547d-4eaf-9c03-cd2795cd8b44", "eventTime": "2017-05-27T04:59:45Z", "eventName": "GetPolicyVersion", "eventSource": "iam.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.253.125.115", "userAgent": "Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56 Resource", "awsRegion": "us-east-1", "userIdentity": {"type": "AssumedRole", "principalId": "AROAUB2AA5FQRGAHITW4A:secmonkey", "arn": "arn:aws:sts::811596193553:assumed-role/SecurityMonkey/secmonkey", "accountId": "811596193553", "accessKeyId": "ASIAI9QHHRMC9F6XQJXN", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2017-05-27T04:59:38Z"}, "sessionIssuer": {"type": "Role", "principalId": "AROAUB2AA5FQRGAHITW4A", "arn": "arn:aws:iam::811596193553:role/SecurityMonkey", "accountId": "811596193553", "userName": "SecurityMonkey"}}}, "requestParameters": {"policyArn": "arn:aws:iam::aws:policy/AmazonCloudDirectoryReadOnlyAccess", "versionId": "v1"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "972c6a81-6657-4d1c-862a-0b40d931e445", "record_id": "flaws_cloudtrail:0000183:972c6a81-6657-4d1c-862a-0b40d931e445", "row_index": 183, "timestamp": "2017-05-27T04:59:45Z", "event_type": "GetPolicyVersion", "event_source": "iam.amazonaws.com", "principal": {"type": "AssumedRole", "arn": "arn:aws:sts::811596193553:assumed-role/SecurityMonkey/secmonkey", "account_id": "811596193553", "principal_id": "AROAUB2AA5FQRGAHITW4A:secmonkey", "user_name": null, "access_key_id": "ASIAI9QHHRMC9F6XQJXN", "session_issuer_arn": "arn:aws:iam::811596193553:role/SecurityMonkey", "session_issuer_user_name": "SecurityMonkey"}, "network": {"source_ip": "255.253.125.115", "user_agent": "Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56 Resource", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 1091, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "972c6a81-6657-4d1c-862a-0b40d931e445", "eventTime": "2017-05-27T04:59:45Z", "eventName": "GetPolicyVersion", "eventSource": "iam.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.253.125.115", "userAgent": "Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56 Resource", "awsRegion": "us-east-1", "userIdentity": {"type": "AssumedRole", "principalId": "AROAUB2AA5FQRGAHITW4A:secmonkey", "arn": "arn:aws:sts::811596193553:assumed-role/SecurityMonkey/secmonkey", "accountId": "811596193553", "accessKeyId": "ASIAI9QHHRMC9F6XQJXN", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2017-05-27T04:59:38Z"}, "sessionIssuer": {"type": "Role", "principalId": "AROAUB2AA5FQRGAHITW4A", "arn": "arn:aws:iam::811596193553:role/SecurityMonkey", "accountId": "811596193553", "userName": "SecurityMonkey"}}}, "requestParameters": {"policyArn": "arn:aws:iam::aws:policy/service-role/CloudWatchEventsBuiltInTargetExecutionAccess", "versionId": "v1"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "eaae3dea-938e-4ed9-a0ce-0d450ed15a6e", "record_id": "flaws_cloudtrail:0000184:eaae3dea-938e-4ed9-a0ce-0d450ed15a6e", "row_index": 184, "timestamp": "2017-05-27T04:59:45Z", "event_type": "GetPolicyVersion", "event_source": "iam.amazonaws.com", "principal": {"type": "AssumedRole", "arn": "arn:aws:sts::811596193553:assumed-role/SecurityMonkey/secmonkey", "account_id": "811596193553", "principal_id": "AROAUB2AA5FQRGAHITW4A:secmonkey", "user_name": null, "access_key_id": "ASIAI9QHHRMC9F6XQJXN", "session_issuer_arn": "arn:aws:iam::811596193553:role/SecurityMonkey", "session_issuer_user_name": "SecurityMonkey"}, "network": {"source_ip": "255.253.125.115", "user_agent": "Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56 Resource", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 1055, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "eaae3dea-938e-4ed9-a0ce-0d450ed15a6e", "eventTime": "2017-05-27T04:59:45Z", "eventName": "GetPolicyVersion", "eventSource": "iam.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.253.125.115", "userAgent": "Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56 Resource", "awsRegion": "us-east-1", "userIdentity": {"type": "AssumedRole", "principalId": "AROAUB2AA5FQRGAHITW4A:secmonkey", "arn": "arn:aws:sts::811596193553:assumed-role/SecurityMonkey/secmonkey", "accountId": "811596193553", "accessKeyId": "ASIAI9QHHRMC9F6XQJXN", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2017-05-27T04:59:38Z"}, "sessionIssuer": {"type": "Role", "principalId": "AROAUB2AA5FQRGAHITW4A", "arn": "arn:aws:iam::811596193553:role/SecurityMonkey", "accountId": "811596193553", "userName": "SecurityMonkey"}}}, "requestParameters": {"policyArn": "arn:aws:iam::aws:policy/AWSMobileHub_ReadOnly", "versionId": "v6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "d41efc0d-e0cf-4fd3-88e5-8fddc2c801ea", "record_id": "flaws_cloudtrail:0000185:d41efc0d-e0cf-4fd3-88e5-8fddc2c801ea", "row_index": 185, "timestamp": "2017-05-27T04:59:45Z", "event_type": "GetPolicyVersion", "event_source": "iam.amazonaws.com", "principal": {"type": "AssumedRole", "arn": "arn:aws:sts::811596193553:assumed-role/SecurityMonkey/secmonkey", "account_id": "811596193553", "principal_id": "AROAUB2AA5FQRGAHITW4A:secmonkey", "user_name": null, "access_key_id": "ASIAI9QHHRMC9F6XQJXN", "session_issuer_arn": "arn:aws:iam::811596193553:role/SecurityMonkey", "session_issuer_user_name": "SecurityMonkey"}, "network": {"source_ip": "255.253.125.115", "user_agent": "Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56 Resource", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 1076, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "d41efc0d-e0cf-4fd3-88e5-8fddc2c801ea", "eventTime": "2017-05-27T04:59:45Z", "eventName": "GetPolicyVersion", "eventSource": "iam.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.253.125.115", "userAgent": "Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56 Resource", "awsRegion": "us-east-1", "userIdentity": {"type": "AssumedRole", "principalId": "AROAUB2AA5FQRGAHITW4A:secmonkey", "arn": "arn:aws:sts::811596193553:assumed-role/SecurityMonkey/secmonkey", "accountId": "811596193553", "accessKeyId": "ASIAI9QHHRMC9F6XQJXN", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2017-05-27T04:59:38Z"}, "sessionIssuer": {"type": "Role", "principalId": "AROAUB2AA5FQRGAHITW4A", "arn": "arn:aws:iam::811596193553:role/SecurityMonkey", "accountId": "811596193553", "userName": "SecurityMonkey"}}}, "requestParameters": {"policyArn": "arn:aws:iam::aws:policy/service-role/AmazonEC2RoleforAWSCodeDeploy", "versionId": "v2"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "2d36bb9f-8896-4b2b-ad8d-cb5f8ffdace1", "record_id": "flaws_cloudtrail:0000186:2d36bb9f-8896-4b2b-ad8d-cb5f8ffdace1", "row_index": 186, "timestamp": "2017-05-27T04:59:45Z", "event_type": "GetPolicyVersion", "event_source": "iam.amazonaws.com", "principal": {"type": "AssumedRole", "arn": "arn:aws:sts::811596193553:assumed-role/SecurityMonkey/secmonkey", "account_id": "811596193553", "principal_id": "AROAUB2AA5FQRGAHITW4A:secmonkey", "user_name": null, "access_key_id": "ASIAI9QHHRMC9F6XQJXN", "session_issuer_arn": "arn:aws:iam::811596193553:role/SecurityMonkey", "session_issuer_user_name": "SecurityMonkey"}, "network": {"source_ip": "255.253.125.115", "user_agent": "Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56 Resource", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 1055, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "2d36bb9f-8896-4b2b-ad8d-cb5f8ffdace1", "eventTime": "2017-05-27T04:59:45Z", "eventName": "GetPolicyVersion", "eventSource": "iam.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.253.125.115", "userAgent": "Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56 Resource", "awsRegion": "us-east-1", "userIdentity": {"type": "AssumedRole", "principalId": "AROAUB2AA5FQRGAHITW4A:secmonkey", "arn": "arn:aws:sts::811596193553:assumed-role/SecurityMonkey/secmonkey", "accountId": "811596193553", "accessKeyId": "ASIAI9QHHRMC9F6XQJXN", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2017-05-27T04:59:38Z"}, "sessionIssuer": {"type": "Role", "principalId": "AROAUB2AA5FQRGAHITW4A", "arn": "arn:aws:iam::811596193553:role/SecurityMonkey", "accountId": "811596193553", "userName": "SecurityMonkey"}}}, "requestParameters": {"policyArn": "arn:aws:iam::aws:policy/AutoScalingFullAccess", "versionId": "v1"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "99cb7467-d270-4a65-8505-d973268aa43", "record_id": "flaws_cloudtrail:0000187:99cb7467-d270-4a65-8505-d973268aa43", "row_index": 187, "timestamp": "2017-05-27T04:59:45Z", "event_type": "GetPolicyVersion", "event_source": "iam.amazonaws.com", "principal": {"type": "AssumedRole", "arn": "arn:aws:sts::811596193553:assumed-role/SecurityMonkey/secmonkey", "account_id": "811596193553", "principal_id": "AROAUB2AA5FQRGAHITW4A:secmonkey", "user_name": null, "access_key_id": "ASIAI9QHHRMC9F6XQJXN", "session_issuer_arn": "arn:aws:iam::811596193553:role/SecurityMonkey", "session_issuer_user_name": "SecurityMonkey"}, "network": {"source_ip": "255.253.125.115", "user_agent": "Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56 Resource", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 1058, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "99cb7467-d270-4a65-8505-d973268aa43", "eventTime": "2017-05-27T04:59:45Z", "eventName": "GetPolicyVersion", "eventSource": "iam.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.253.125.115", "userAgent": "Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56 Resource", "awsRegion": "us-east-1", "userIdentity": {"type": "AssumedRole", "principalId": "AROAUB2AA5FQRGAHITW4A:secmonkey", "arn": "arn:aws:sts::811596193553:assumed-role/SecurityMonkey/secmonkey", "accountId": "811596193553", "accessKeyId": "ASIAI9QHHRMC9F6XQJXN", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2017-05-27T04:59:38Z"}, "sessionIssuer": {"type": "Role", "principalId": "AROAUB2AA5FQRGAHITW4A", "arn": "arn:aws:iam::811596193553:role/SecurityMonkey", "accountId": "811596193553", "userName": "SecurityMonkey"}}}, "requestParameters": {"policyArn": "arn:aws:iam::aws:policy/AutoScalingReadOnlyAccess", "versionId": "v1"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "167905be-3095-43b2-ab32-29182ceb093b", "record_id": "flaws_cloudtrail:0000188:167905be-3095-43b2-ab32-29182ceb093b", "row_index": 188, "timestamp": "2017-05-27T04:59:45Z", "event_type": "GetPolicyVersion", "event_source": "iam.amazonaws.com", "principal": {"type": "AssumedRole", "arn": "arn:aws:sts::811596193553:assumed-role/SecurityMonkey/secmonkey", "account_id": "811596193553", "principal_id": "AROAUB2AA5FQRGAHITW4A:secmonkey", "user_name": null, "access_key_id": "ASIAI9QHHRMC9F6XQJXN", "session_issuer_arn": "arn:aws:iam::811596193553:role/SecurityMonkey", "session_issuer_user_name": "SecurityMonkey"}, "network": {"source_ip": "255.253.125.115", "user_agent": "Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56 Resource", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 1056, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "167905be-3095-43b2-ab32-29182ceb093b", "eventTime": "2017-05-27T04:59:45Z", "eventName": "GetPolicyVersion", "eventSource": "iam.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.253.125.115", "userAgent": "Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56 Resource", "awsRegion": "us-east-1", "userIdentity": {"type": "AssumedRole", "principalId": "AROAUB2AA5FQRGAHITW4A:secmonkey", "arn": "arn:aws:sts::811596193553:assumed-role/SecurityMonkey/secmonkey", "accountId": "811596193553", "accessKeyId": "ASIAI9QHHRMC9F6XQJXN", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2017-05-27T04:59:38Z"}, "sessionIssuer": {"type": "Role", "principalId": "AROAUB2AA5FQRGAHITW4A", "arn": "arn:aws:iam::811596193553:role/SecurityMonkey", "accountId": "811596193553", "userName": "SecurityMonkey"}}}, "requestParameters": {"policyArn": "arn:aws:iam::aws:policy/AWSXrayWriteOnlyAccess", "versionId": "v1"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "f2439cdd-75f5-4020-a178-589d3980cdec", "record_id": "flaws_cloudtrail:0000189:f2439cdd-75f5-4020-a178-589d3980cdec", "row_index": 189, "timestamp": "2017-05-27T04:59:45Z", "event_type": "GetPolicyVersion", "event_source": "iam.amazonaws.com", "principal": {"type": "AssumedRole", "arn": "arn:aws:sts::811596193553:assumed-role/SecurityMonkey/secmonkey", "account_id": "811596193553", "principal_id": "AROAUB2AA5FQRGAHITW4A:secmonkey", "user_name": null, "access_key_id": "ASIAI9QHHRMC9F6XQJXN", "session_issuer_arn": "arn:aws:iam::811596193553:role/SecurityMonkey", "session_issuer_user_name": "SecurityMonkey"}, "network": {"source_ip": "255.253.125.115", "user_agent": "Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56 Resource", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 1062, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "f2439cdd-75f5-4020-a178-589d3980cdec", "eventTime": "2017-05-27T04:59:45Z", "eventName": "GetPolicyVersion", "eventSource": "iam.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.253.125.115", "userAgent": "Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56 Resource", "awsRegion": "us-east-1", "userIdentity": {"type": "AssumedRole", "principalId": "AROAUB2AA5FQRGAHITW4A:secmonkey", "arn": "arn:aws:sts::811596193553:assumed-role/SecurityMonkey/secmonkey", "accountId": "811596193553", "accessKeyId": "ASIAI9QHHRMC9F6XQJXN", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2017-05-27T04:59:38Z"}, "sessionIssuer": {"type": "Role", "principalId": "AROAUB2AA5FQRGAHITW4A", "arn": "arn:aws:iam::811596193553:role/SecurityMonkey", "accountId": "811596193553", "userName": "SecurityMonkey"}}}, "requestParameters": {"policyArn": "arn:aws:iam::aws:policy/AWSAgentlessDiscoveryService", "versionId": "v1"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "90b3c722-551b-413c-83fd-6af7ddd8d7b4", "record_id": "flaws_cloudtrail:0000190:90b3c722-551b-413c-83fd-6af7ddd8d7b4", "row_index": 190, "timestamp": "2017-05-27T04:59:46Z", "event_type": "GetTrailStatus", "event_source": "cloudtrail.amazonaws.com", "principal": {"type": "AssumedRole", "arn": "arn:aws:sts::811596193553:assumed-role/SecurityMonkey/secmonkey", "account_id": "811596193553", "principal_id": "AROAUB2AA5FQRGAHITW4A:secmonkey", "user_name": null, "access_key_id": "ASIA3V0HIHGYV00V3F0D", "session_issuer_arn": "arn:aws:iam::811596193553:role/SecurityMonkey", "session_issuer_user_name": "SecurityMonkey"}, "network": {"source_ip": "255.253.125.115", "user_agent": "Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56", "aws_region": "ap-northeast-2"}, "resource_arns": [], "raw_record_size_bytes": 1047, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "90b3c722-551b-413c-83fd-6af7ddd8d7b4", "eventTime": "2017-05-27T04:59:46Z", "eventName": "GetTrailStatus", "eventSource": "cloudtrail.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.253.125.115", "userAgent": "Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56", "awsRegion": "ap-northeast-2", "userIdentity": {"type": "AssumedRole", "principalId": "AROAUB2AA5FQRGAHITW4A:secmonkey", "arn": "arn:aws:sts::811596193553:assumed-role/SecurityMonkey/secmonkey", "accountId": "811596193553", "accessKeyId": "ASIA3V0HIHGYV00V3F0D", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2017-05-27T04:59:45Z"}, "sessionIssuer": {"type": "Role", "principalId": "AROAUB2AA5FQRGAHITW4A", "arn": "arn:aws:iam::811596193553:role/SecurityMonkey", "accountId": "811596193553", "userName": "SecurityMonkey"}}}, "requestParameters": {"name": "arn:aws:cloudtrail:us-west-2:811596193553:trail/cloudtrail"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "f522eda5-a678-4e54-9866-281938cb8c3", "record_id": "flaws_cloudtrail:0000191:f522eda5-a678-4e54-9866-281938cb8c3", "row_index": 191, "timestamp": "2017-05-27T04:59:46Z", "event_type": "DescribeTrails", "event_source": "cloudtrail.amazonaws.com", "principal": {"type": "AssumedRole", "arn": "arn:aws:sts::811596193553:assumed-role/SecurityMonkey/secmonkey", "account_id": "811596193553", "principal_id": "AROAUB2AA5FQRGAHITW4A:secmonkey", "user_name": null, "access_key_id": "ASIA3V0HIHGYV00V3F0D", "session_issuer_arn": "arn:aws:iam::811596193553:role/SecurityMonkey", "session_issuer_user_name": "SecurityMonkey"}, "network": {"source_ip": "255.253.125.115", "user_agent": "Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56", "aws_region": "ap-northeast-2"}, "resource_arns": [], "raw_record_size_bytes": 981, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "f522eda5-a678-4e54-9866-281938cb8c3", "eventTime": "2017-05-27T04:59:46Z", "eventName": "DescribeTrails", "eventSource": "cloudtrail.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.253.125.115", "userAgent": "Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56", "awsRegion": "ap-northeast-2", "userIdentity": {"type": "AssumedRole", "principalId": "AROAUB2AA5FQRGAHITW4A:secmonkey", "arn": "arn:aws:sts::811596193553:assumed-role/SecurityMonkey/secmonkey", "accountId": "811596193553", "accessKeyId": "ASIA3V0HIHGYV00V3F0D", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2017-05-27T04:59:45Z"}, "sessionIssuer": {"type": "Role", "principalId": "AROAUB2AA5FQRGAHITW4A", "arn": "arn:aws:iam::811596193553:role/SecurityMonkey", "accountId": "811596193553", "userName": "SecurityMonkey"}}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "9bfa1824-6e41-4f9a-ae98-38798b19527", "record_id": "flaws_cloudtrail:0000192:9bfa1824-6e41-4f9a-ae98-38798b19527", "row_index": 192, "timestamp": "2017-05-27T04:59:46Z", "event_type": "AssumeRole", "event_source": "sts.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/SecurityMokey", "account_id": "811596193553", "principal_id": "AIDAQ9SRE1SZZZ4Q4UOJH", "user_name": "SecurityMokey", "access_key_id": "AKIAXJ0III4JBKZDXGXN", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "255.253.125.115", "user_agent": "Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56", "aws_region": "us-east-1"}, "resource_arns": ["arn:aws:iam::811596193553:role/SecurityMonkey"], "raw_record_size_bytes": 1447, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "resources", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "9bfa1824-6e41-4f9a-ae98-38798b19527", "eventTime": "2017-05-27T04:59:46Z", "eventName": "AssumeRole", "eventSource": "sts.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.253.125.115", "userAgent": "Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDAQ9SRE1SZZZ4Q4UOJH", "arn": "arn:aws:iam::811596193553:user/SecurityMokey", "accountId": "811596193553", "accessKeyId": "AKIAXJ0III4JBKZDXGXN", "userName": "SecurityMokey"}, "requestParameters": {"roleArn": "arn:aws:iam::811596193553:role/SecurityMonkey", "roleSessionName": "secmonkey"}, "responseElements": {"credentials": {"accessKeyId": "ASIADLBXY6L4HR9AO8JK", "expiration": "May 27, 2017 5:59:46 AM", "sessionToken": "FQoDYXdzECYaDCSXTmkJ6b1BDxxMFiLMAeGZ7so1l4x7LXtxHVPwbQaNPv8wbSYm6vfXoH4IYmpbF34TYq0mYc7gRYN5CIBRntSHHkyeT7d9AbNXpFY43/bjWlCbMbvoNIvuZ/kkRrjq/m5U4X/TnYYeG/j4lQs1SbbQ7uPn8+F0mDZfwuXvguh5rHBrST6i6K3ylnCc8Vw0U4e/nnMjSImgjMxFzBDpwjlrLtrlzYz9Kpz30S6EByfya/wPGM35rO642PauPegsL3k9WOgo8V4F7L7AdOnB8mNXB6D6mKa2SzyoGCjCj6TJBQ=="}, "assumedRoleUser": {"assumedRoleId": "AROAUB2AA5FQRGAHITW4A:secmonkey", "arn": "arn:aws:sts::811596193553:assumed-role/SecurityMonkey/secmonkey"}}, "resources": [{"ARN": "arn:aws:iam::811596193553:role/SecurityMonkey", "accountId": "811596193553", "type": "AWS::IAM::Role"}]}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "d7b19c3f-5d25-44f6-a872-6f2ca2bc120d", "record_id": "flaws_cloudtrail:0000193:d7b19c3f-5d25-44f6-a872-6f2ca2bc120d", "row_index": 193, "timestamp": "2017-05-27T04:59:46Z", "event_type": "GetPolicyVersion", "event_source": "iam.amazonaws.com", "principal": {"type": "AssumedRole", "arn": "arn:aws:sts::811596193553:assumed-role/SecurityMonkey/secmonkey", "account_id": "811596193553", "principal_id": "AROAUB2AA5FQRGAHITW4A:secmonkey", "user_name": null, "access_key_id": "ASIAI9QHHRMC9F6XQJXN", "session_issuer_arn": "arn:aws:iam::811596193553:role/SecurityMonkey", "session_issuer_user_name": "SecurityMonkey"}, "network": {"source_ip": "255.253.125.115", "user_agent": "Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56 Resource", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 1070, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "d7b19c3f-5d25-44f6-a872-6f2ca2bc120d", "eventTime": "2017-05-27T04:59:46Z", "eventName": "GetPolicyVersion", "eventSource": "iam.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.253.125.115", "userAgent": "Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56 Resource", "awsRegion": "us-east-1", "userIdentity": {"type": "AssumedRole", "principalId": "AROAUB2AA5FQRGAHITW4A:secmonkey", "arn": "arn:aws:sts::811596193553:assumed-role/SecurityMonkey/secmonkey", "accountId": "811596193553", "accessKeyId": "ASIAI9QHHRMC9F6XQJXN", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2017-05-27T04:59:38Z"}, "sessionIssuer": {"type": "Role", "principalId": "AROAUB2AA5FQRGAHITW4A", "arn": "arn:aws:iam::811596193553:role/SecurityMonkey", "accountId": "811596193553", "userName": "SecurityMonkey"}}}, "requestParameters": {"policyArn": "arn:aws:iam::aws:policy/AmazonEC2ContainerRegistryFullAccess", "versionId": "v1"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "efa1b370-1744-45dc-b200-07f31ad0a3f9", "record_id": "flaws_cloudtrail:0000194:efa1b370-1744-45dc-b200-07f31ad0a3f9", "row_index": 194, "timestamp": "2017-05-27T04:59:46Z", "event_type": "GetPolicyVersion", "event_source": "iam.amazonaws.com", "principal": {"type": "AssumedRole", "arn": "arn:aws:sts::811596193553:assumed-role/SecurityMonkey/secmonkey", "account_id": "811596193553", "principal_id": "AROAUB2AA5FQRGAHITW4A:secmonkey", "user_name": null, "access_key_id": "ASIAI9QHHRMC9F6XQJXN", "session_issuer_arn": "arn:aws:iam::811596193553:role/SecurityMonkey", "session_issuer_user_name": "SecurityMonkey"}, "network": {"source_ip": "255.253.125.115", "user_agent": "Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56 Resource", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 1092, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "efa1b370-1744-45dc-b200-07f31ad0a3f9", "eventTime": "2017-05-27T04:59:46Z", "eventName": "GetPolicyVersion", "eventSource": "iam.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.253.125.115", "userAgent": "Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56 Resource", "awsRegion": "us-east-1", "userIdentity": {"type": "AssumedRole", "principalId": "AROAUB2AA5FQRGAHITW4A:secmonkey", "arn": "arn:aws:sts::811596193553:assumed-role/SecurityMonkey/secmonkey", "accountId": "811596193553", "accessKeyId": "ASIAI9QHHRMC9F6XQJXN", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2017-05-27T04:59:38Z"}, "sessionIssuer": {"type": "Role", "principalId": "AROAUB2AA5FQRGAHITW4A", "arn": "arn:aws:iam::811596193553:role/SecurityMonkey", "accountId": "811596193553", "userName": "SecurityMonkey"}}}, "requestParameters": {"policyArn": "arn:aws:iam::aws:policy/service-role/ApplicationAutoScalingForAmazonAppStreamAccess", "versionId": "v1"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "58059c79-f2f0-4af2-89b1-0318f467f339", "record_id": "flaws_cloudtrail:0000195:58059c79-f2f0-4af2-89b1-0318f467f339", "row_index": 195, "timestamp": "2017-05-27T04:59:46Z", "event_type": "GetPolicyVersion", "event_source": "iam.amazonaws.com", "principal": {"type": "AssumedRole", "arn": "arn:aws:sts::811596193553:assumed-role/SecurityMonkey/secmonkey", "account_id": "811596193553", "principal_id": "AROAUB2AA5FQRGAHITW4A:secmonkey", "user_name": null, "access_key_id": "ASIAI9QHHRMC9F6XQJXN", "session_issuer_arn": "arn:aws:iam::811596193553:role/SecurityMonkey", "session_issuer_user_name": "SecurityMonkey"}, "network": {"source_ip": "255.253.125.115", "user_agent": "Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56 Resource", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 1062, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "58059c79-f2f0-4af2-89b1-0318f467f339", "eventTime": "2017-05-27T04:59:46Z", "eventName": "GetPolicyVersion", "eventSource": "iam.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.253.125.115", "userAgent": "Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56 Resource", "awsRegion": "us-east-1", "userIdentity": {"type": "AssumedRole", "principalId": "AROAUB2AA5FQRGAHITW4A:secmonkey", "arn": "arn:aws:sts::811596193553:assumed-role/SecurityMonkey/secmonkey", "accountId": "811596193553", "accessKeyId": "ASIAI9QHHRMC9F6XQJXN", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2017-05-27T04:59:38Z"}, "sessionIssuer": {"type": "Role", "principalId": "AROAUB2AA5FQRGAHITW4A", "arn": "arn:aws:iam::811596193553:role/SecurityMonkey", "accountId": "811596193553", "userName": "SecurityMonkey"}}}, "requestParameters": {"policyArn": "arn:aws:iam::aws:policy/service-role/AWSOpsWorksRole", "versionId": "v1"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "b276fd23-4364-4708-b0ed-5a46eab4002e", "record_id": "flaws_cloudtrail:0000196:b276fd23-4364-4708-b0ed-5a46eab4002e", "row_index": 196, "timestamp": "2017-05-27T04:59:46Z", "event_type": "GetPolicyVersion", "event_source": "iam.amazonaws.com", "principal": {"type": "AssumedRole", "arn": "arn:aws:sts::811596193553:assumed-role/SecurityMonkey/secmonkey", "account_id": "811596193553", "principal_id": "AROAUB2AA5FQRGAHITW4A:secmonkey", "user_name": null, "access_key_id": "ASIAI9QHHRMC9F6XQJXN", "session_issuer_arn": "arn:aws:iam::811596193553:role/SecurityMonkey", "session_issuer_user_name": "SecurityMonkey"}, "network": {"source_ip": "255.253.125.115", "user_agent": "Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56 Resource", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 1068, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "b276fd23-4364-4708-b0ed-5a46eab4002e", "eventTime": "2017-05-27T04:59:46Z", "eventName": "GetPolicyVersion", "eventSource": "iam.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.253.125.115", "userAgent": "Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56 Resource", "awsRegion": "us-east-1", "userIdentity": {"type": "AssumedRole", "principalId": "AROAUB2AA5FQRGAHITW4A:secmonkey", "arn": "arn:aws:sts::811596193553:assumed-role/SecurityMonkey/secmonkey", "accountId": "811596193553", "accessKeyId": "ASIAI9QHHRMC9F6XQJXN", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2017-05-27T04:59:38Z"}, "sessionIssuer": {"type": "Role", "principalId": "AROAUB2AA5FQRGAHITW4A", "arn": "arn:aws:iam::811596193553:role/SecurityMonkey", "accountId": "811596193553", "userName": "SecurityMonkey"}}}, "requestParameters": {"policyArn": "arn:aws:iam::aws:policy/AmazonRoute53DomainsReadOnlyAccess", "versionId": "v1"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "b90e3733-6c68-449d-8474-95a984c778ef", "record_id": "flaws_cloudtrail:0000197:b90e3733-6c68-449d-8474-95a984c778ef", "row_index": 197, "timestamp": "2017-05-27T04:59:46Z", "event_type": "GetPolicyVersion", "event_source": "iam.amazonaws.com", "principal": {"type": "AssumedRole", "arn": "arn:aws:sts::811596193553:assumed-role/SecurityMonkey/secmonkey", "account_id": "811596193553", "principal_id": "AROAUB2AA5FQRGAHITW4A:secmonkey", "user_name": null, "access_key_id": "ASIAI9QHHRMC9F6XQJXN", "session_issuer_arn": "arn:aws:iam::811596193553:role/SecurityMonkey", "session_issuer_user_name": "SecurityMonkey"}, "network": {"source_ip": "255.253.125.115", "user_agent": "Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56 Resource", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 1073, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "b90e3733-6c68-449d-8474-95a984c778ef", "eventTime": "2017-05-27T04:59:46Z", "eventName": "GetPolicyVersion", "eventSource": "iam.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.253.125.115", "userAgent": "Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56 Resource", "awsRegion": "us-east-1", "userIdentity": {"type": "AssumedRole", "principalId": "AROAUB2AA5FQRGAHITW4A:secmonkey", "arn": "arn:aws:sts::811596193553:assumed-role/SecurityMonkey/secmonkey", "accountId": "811596193553", "accessKeyId": "ASIAI9QHHRMC9F6XQJXN", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2017-05-27T04:59:38Z"}, "sessionIssuer": {"type": "Role", "principalId": "AROAUB2AA5FQRGAHITW4A", "arn": "arn:aws:iam::811596193553:role/SecurityMonkey", "accountId": "811596193553", "userName": "SecurityMonkey"}}}, "requestParameters": {"policyArn": "arn:aws:iam::aws:policy/service-role/AmazonElasticMapReduceRole", "versionId": "v7"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "7684a2bb-d15f-437d-8396-f4f87cd3c01d", "record_id": "flaws_cloudtrail:0000198:7684a2bb-d15f-437d-8396-f4f87cd3c01d", "row_index": 198, "timestamp": "2017-05-27T04:59:46Z", "event_type": "GetPolicyVersion", "event_source": "iam.amazonaws.com", "principal": {"type": "AssumedRole", "arn": "arn:aws:sts::811596193553:assumed-role/SecurityMonkey/secmonkey", "account_id": "811596193553", "principal_id": "AROAUB2AA5FQRGAHITW4A:secmonkey", "user_name": null, "access_key_id": "ASIAI9QHHRMC9F6XQJXN", "session_issuer_arn": "arn:aws:iam::811596193553:role/SecurityMonkey", "session_issuer_user_name": "SecurityMonkey"}, "network": {"source_ip": "255.253.125.115", "user_agent": "Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56 Resource", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 1061, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "7684a2bb-d15f-437d-8396-f4f87cd3c01d", "eventTime": "2017-05-27T04:59:46Z", "eventName": "GetPolicyVersion", "eventSource": "iam.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.253.125.115", "userAgent": "Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56 Resource", "awsRegion": "us-east-1", "userIdentity": {"type": "AssumedRole", "principalId": "AROAUB2AA5FQRGAHITW4A:secmonkey", "arn": "arn:aws:sts::811596193553:assumed-role/SecurityMonkey/secmonkey", "accountId": "811596193553", "accessKeyId": "ASIAI9QHHRMC9F6XQJXN", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2017-05-27T04:59:38Z"}, "sessionIssuer": {"type": "Role", "principalId": "AROAUB2AA5FQRGAHITW4A", "arn": "arn:aws:iam::811596193553:role/SecurityMonkey", "accountId": "811596193553", "userName": "SecurityMonkey"}}}, "requestParameters": {"policyArn": "arn:aws:iam::aws:policy/job-function/ViewOnlyAccess", "versionId": "v2"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "96453eb4-538c-4bfa-801b-ce400a749b3b", "record_id": "flaws_cloudtrail:0000199:96453eb4-538c-4bfa-801b-ce400a749b3b", "row_index": 199, "timestamp": "2017-05-27T04:59:46Z", "event_type": "GetPolicyVersion", "event_source": "iam.amazonaws.com", "principal": {"type": "AssumedRole", "arn": "arn:aws:sts::811596193553:assumed-role/SecurityMonkey/secmonkey", "account_id": "811596193553", "principal_id": "AROAUB2AA5FQRGAHITW4A:secmonkey", "user_name": null, "access_key_id": "ASIAI9QHHRMC9F6XQJXN", "session_issuer_arn": "arn:aws:iam::811596193553:role/SecurityMonkey", "session_issuer_user_name": "SecurityMonkey"}, "network": {"source_ip": "255.253.125.115", "user_agent": "Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56 Resource", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 1058, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "96453eb4-538c-4bfa-801b-ce400a749b3b", "eventTime": "2017-05-27T04:59:46Z", "eventName": "GetPolicyVersion", "eventSource": "iam.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.253.125.115", "userAgent": "Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56 Resource", "awsRegion": "us-east-1", "userIdentity": {"type": "AssumedRole", "principalId": "AROAUB2AA5FQRGAHITW4A:secmonkey", "arn": "arn:aws:sts::811596193553:assumed-role/SecurityMonkey/secmonkey", "accountId": "811596193553", "accessKeyId": "ASIAI9QHHRMC9F6XQJXN", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2017-05-27T04:59:38Z"}, "sessionIssuer": {"type": "Role", "principalId": "AROAUB2AA5FQRGAHITW4A", "arn": "arn:aws:iam::811596193553:role/SecurityMonkey", "accountId": "811596193553", "userName": "SecurityMonkey"}}}, "requestParameters": {"policyArn": "arn:aws:iam::aws:policy/SimpleWorkflowFullAccess", "versionId": "v1"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "49273f3-b5ab-4137-bfe5-bad5fd2f8606", "record_id": "flaws_cloudtrail:0000200:49273f3-b5ab-4137-bfe5-bad5fd2f8606", "row_index": 200, "timestamp": "2017-05-27T04:59:46Z", "event_type": "GetPolicyVersion", "event_source": "iam.amazonaws.com", "principal": {"type": "AssumedRole", "arn": "arn:aws:sts::811596193553:assumed-role/SecurityMonkey/secmonkey", "account_id": "811596193553", "principal_id": "AROAUB2AA5FQRGAHITW4A:secmonkey", "user_name": null, "access_key_id": "ASIAI9QHHRMC9F6XQJXN", "session_issuer_arn": "arn:aws:iam::811596193553:role/SecurityMonkey", "session_issuer_user_name": "SecurityMonkey"}, "network": {"source_ip": "255.253.125.115", "user_agent": "Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56 Resource", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 1067, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "49273f3-b5ab-4137-bfe5-bad5fd2f8606", "eventTime": "2017-05-27T04:59:46Z", "eventName": "GetPolicyVersion", "eventSource": "iam.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.253.125.115", "userAgent": "Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56 Resource", "awsRegion": "us-east-1", "userIdentity": {"type": "AssumedRole", "principalId": "AROAUB2AA5FQRGAHITW4A:secmonkey", "arn": "arn:aws:sts::811596193553:assumed-role/SecurityMonkey/secmonkey", "accountId": "811596193553", "accessKeyId": "ASIAI9QHHRMC9F6XQJXN", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2017-05-27T04:59:38Z"}, "sessionIssuer": {"type": "Role", "principalId": "AROAUB2AA5FQRGAHITW4A", "arn": "arn:aws:iam::811596193553:role/SecurityMonkey", "accountId": "811596193553", "userName": "SecurityMonkey"}}}, "requestParameters": {"policyArn": "arn:aws:iam::aws:policy/AWSApplicationDiscoveryAgentAccess", "versionId": "v1"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "6d10a25b-63a7-433e-8ab9-fdc54a0043bf", "record_id": "flaws_cloudtrail:0000201:6d10a25b-63a7-433e-8ab9-fdc54a0043bf", "row_index": 201, "timestamp": "2017-05-27T04:59:46Z", "event_type": "GetPolicyVersion", "event_source": "iam.amazonaws.com", "principal": {"type": "AssumedRole", "arn": "arn:aws:sts::811596193553:assumed-role/SecurityMonkey/secmonkey", "account_id": "811596193553", "principal_id": "AROAUB2AA5FQRGAHITW4A:secmonkey", "user_name": null, "access_key_id": "ASIAI9QHHRMC9F6XQJXN", "session_issuer_arn": "arn:aws:iam::811596193553:role/SecurityMonkey", "session_issuer_user_name": "SecurityMonkey"}, "network": {"source_ip": "255.253.125.115", "user_agent": "Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56 Resource", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 1063, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "6d10a25b-63a7-433e-8ab9-fdc54a0043bf", "eventTime": "2017-05-27T04:59:46Z", "eventName": "GetPolicyVersion", "eventSource": "iam.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.253.125.115", "userAgent": "Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56 Resource", "awsRegion": "us-east-1", "userIdentity": {"type": "AssumedRole", "principalId": "AROAUB2AA5FQRGAHITW4A:secmonkey", "arn": "arn:aws:sts::811596193553:assumed-role/SecurityMonkey/secmonkey", "accountId": "811596193553", "accessKeyId": "ASIAI9QHHRMC9F6XQJXN", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2017-05-27T04:59:38Z"}, "sessionIssuer": {"type": "Role", "principalId": "AROAUB2AA5FQRGAHITW4A", "arn": "arn:aws:iam::811596193553:role/SecurityMonkey", "accountId": "811596193553", "userName": "SecurityMonkey"}}}, "requestParameters": {"policyArn": "arn:aws:iam::aws:policy/AWSCodePipelineApproverAccess", "versionId": "v2"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "ea54e01d-bed7-4c3f-895f-6d28ce1d0340", "record_id": "flaws_cloudtrail:0000202:ea54e01d-bed7-4c3f-895f-6d28ce1d0340", "row_index": 202, "timestamp": "2017-05-27T04:59:46Z", "event_type": "GetPolicyVersion", "event_source": "iam.amazonaws.com", "principal": {"type": "AssumedRole", "arn": "arn:aws:sts::811596193553:assumed-role/SecurityMonkey/secmonkey", "account_id": "811596193553", "principal_id": "AROAUB2AA5FQRGAHITW4A:secmonkey", "user_name": null, "access_key_id": "ASIAI9QHHRMC9F6XQJXN", "session_issuer_arn": "arn:aws:iam::811596193553:role/SecurityMonkey", "session_issuer_user_name": "SecurityMonkey"}, "network": {"source_ip": "255.253.125.115", "user_agent": "Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56 Resource", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 1052, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "ea54e01d-bed7-4c3f-895f-6d28ce1d0340", "eventTime": "2017-05-27T04:59:46Z", "eventName": "GetPolicyVersion", "eventSource": "iam.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.253.125.115", "userAgent": "Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56 Resource", "awsRegion": "us-east-1", "userIdentity": {"type": "AssumedRole", "principalId": "AROAUB2AA5FQRGAHITW4A:secmonkey", "arn": "arn:aws:sts::811596193553:assumed-role/SecurityMonkey/secmonkey", "accountId": "811596193553", "accessKeyId": "ASIAI9QHHRMC9F6XQJXN", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2017-05-27T04:59:38Z"}, "sessionIssuer": {"type": "Role", "principalId": "AROAUB2AA5FQRGAHITW4A", "arn": "arn:aws:iam::811596193553:role/SecurityMonkey", "accountId": "811596193553", "userName": "SecurityMonkey"}}}, "requestParameters": {"policyArn": "arn:aws:iam::aws:policy/AmazonS3FullAccess", "versionId": "v1"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "bedfd1d8-4d65-46b4-a45e-02f272e90cfe", "record_id": "flaws_cloudtrail:0000203:bedfd1d8-4d65-46b4-a45e-02f272e90cfe", "row_index": 203, "timestamp": "2017-05-27T04:59:46Z", "event_type": "GetPolicyVersion", "event_source": "iam.amazonaws.com", "principal": {"type": "AssumedRole", "arn": "arn:aws:sts::811596193553:assumed-role/SecurityMonkey/secmonkey", "account_id": "811596193553", "principal_id": "AROAUB2AA5FQRGAHITW4A:secmonkey", "user_name": null, "access_key_id": "ASIAI9QHHRMC9F6XQJXN", "session_issuer_arn": "arn:aws:iam::811596193553:role/SecurityMonkey", "session_issuer_user_name": "SecurityMonkey"}, "network": {"source_ip": "255.253.125.115", "user_agent": "Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56 Resource", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 1065, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "bedfd1d8-4d65-46b4-a45e-02f272e90cfe", "eventTime": "2017-05-27T04:59:46Z", "eventName": "GetPolicyVersion", "eventSource": "iam.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.253.125.115", "userAgent": "Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56 Resource", "awsRegion": "us-east-1", "userIdentity": {"type": "AssumedRole", "principalId": "AROAUB2AA5FQRGAHITW4A:secmonkey", "arn": "arn:aws:sts::811596193553:assumed-role/SecurityMonkey/secmonkey", "accountId": "811596193553", "accessKeyId": "ASIAI9QHHRMC9F6XQJXN", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2017-05-27T04:59:38Z"}, "sessionIssuer": {"type": "Role", "principalId": "AROAUB2AA5FQRGAHITW4A", "arn": "arn:aws:iam::811596193553:role/SecurityMonkey", "accountId": "811596193553", "userName": "SecurityMonkey"}}}, "requestParameters": {"policyArn": "arn:aws:iam::aws:policy/AWSStorageGatewayReadOnlyAccess", "versionId": "v1"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "0f728b2a-b9f3-412e-b047-a737d18fc131", "record_id": "flaws_cloudtrail:0000204:0f728b2a-b9f3-412e-b047-a737d18fc131", "row_index": 204, "timestamp": "2017-05-27T04:59:46Z", "event_type": "GetPolicyVersion", "event_source": "iam.amazonaws.com", "principal": {"type": "AssumedRole", "arn": "arn:aws:sts::811596193553:assumed-role/SecurityMonkey/secmonkey", "account_id": "811596193553", "principal_id": "AROAUB2AA5FQRGAHITW4A:secmonkey", "user_name": null, "access_key_id": "ASIAI9QHHRMC9F6XQJXN", "session_issuer_arn": "arn:aws:iam::811596193553:role/SecurityMonkey", "session_issuer_user_name": "SecurityMonkey"}, "network": {"source_ip": "255.253.125.115", "user_agent": "Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56 Resource", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 1054, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "0f728b2a-b9f3-412e-b047-a737d18fc131", "eventTime": "2017-05-27T04:59:46Z", "eventName": "GetPolicyVersion", "eventSource": "iam.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.253.125.115", "userAgent": "Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56 Resource", "awsRegion": "us-east-1", "userIdentity": {"type": "AssumedRole", "principalId": "AROAUB2AA5FQRGAHITW4A:secmonkey", "arn": "arn:aws:sts::811596193553:assumed-role/SecurityMonkey/secmonkey", "accountId": "811596193553", "accessKeyId": "ASIAI9QHHRMC9F6XQJXN", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2017-05-27T04:59:38Z"}, "sessionIssuer": {"type": "Role", "principalId": "AROAUB2AA5FQRGAHITW4A", "arn": "arn:aws:iam::811596193553:role/SecurityMonkey", "accountId": "811596193553", "userName": "SecurityMonkey"}}}, "requestParameters": {"policyArn": "arn:aws:iam::aws:policy/job-function/Billing", "versionId": "v1"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "67ca36ab-49b5-4093-8545-486303d98d6e", "record_id": "flaws_cloudtrail:0000205:67ca36ab-49b5-4093-8545-486303d98d6e", "row_index": 205, "timestamp": "2017-05-27T04:59:47Z", "event_type": "AssumeRole", "event_source": "sts.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/SecurityMokey", "account_id": "811596193553", "principal_id": "AIDAQ9SRE1SZZZ4Q4UOJH", "user_name": "SecurityMokey", "access_key_id": "AKIAXJ0III4JBKZDXGXN", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "255.253.125.115", "user_agent": "Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56", "aws_region": "us-east-1"}, "resource_arns": ["arn:aws:iam::811596193553:role/SecurityMonkey"], "raw_record_size_bytes": 1453, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "resources", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "67ca36ab-49b5-4093-8545-486303d98d6e", "eventTime": "2017-05-27T04:59:47Z", "eventName": "AssumeRole", "eventSource": "sts.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.253.125.115", "userAgent": "Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDAQ9SRE1SZZZ4Q4UOJH", "arn": "arn:aws:iam::811596193553:user/SecurityMokey", "accountId": "811596193553", "accessKeyId": "AKIAXJ0III4JBKZDXGXN", "userName": "SecurityMokey"}, "requestParameters": {"roleArn": "arn:aws:iam::811596193553:role/SecurityMonkey", "roleSessionName": "secmonkey"}, "responseElements": {"credentials": {"accessKeyId": "ASIAX74D9YI5QWKGG467", "expiration": "May 27, 2017 5:59:47 AM", "sessionToken": "FQoDYXdzECYaDAmSpYnK7Sf2MunSMyLMAeKsAf4V4P1liNRh6X+CKZq1xJwctdKzAPAsL0veaS6LH1u+79LtrfZb7jbOgKH+J6kC4nopBUDeFvQui0b5UhztPz2FFMlfbqJsuhKBblFVEesecI4WeQoMMd7x7r3lf2vV+RMPa9/E6Zv1oc/xvcnGSfWEQdTve2qt9XZ+HtjHhaswGYtEkS6wtl/qJfsVNp8Y8+llFi9Kou5C0yGaQ8l4ja5FzcYpCCDnJerI6KnBYmWjjUfb4dBOCn+dZIoz2D7LF6U8VjFgivjX2ijDj6TJBQ=="}, "assumedRoleUser": {"assumedRoleId": "AROAUB2AA5FQRGAHITW4A:secmonkey", "arn": "arn:aws:sts::811596193553:assumed-role/SecurityMonkey/secmonkey"}}, "resources": [{"ARN": "arn:aws:iam::811596193553:role/SecurityMonkey", "accountId": "811596193553", "type": "AWS::IAM::Role"}]}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "8e7bc52c-41c4-452b-810d-7f068df2d543", "record_id": "flaws_cloudtrail:0000206:8e7bc52c-41c4-452b-810d-7f068df2d543", "row_index": 206, "timestamp": "2017-05-27T04:59:47Z", "event_type": "GetPolicyVersion", "event_source": "iam.amazonaws.com", "principal": {"type": "AssumedRole", "arn": "arn:aws:sts::811596193553:assumed-role/SecurityMonkey/secmonkey", "account_id": "811596193553", "principal_id": "AROAUB2AA5FQRGAHITW4A:secmonkey", "user_name": null, "access_key_id": "ASIAI9QHHRMC9F6XQJXN", "session_issuer_arn": "arn:aws:iam::811596193553:role/SecurityMonkey", "session_issuer_user_name": "SecurityMonkey"}, "network": {"source_ip": "255.253.125.115", "user_agent": "Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56 Resource", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 1080, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "8e7bc52c-41c4-452b-810d-7f068df2d543", "eventTime": "2017-05-27T04:59:47Z", "eventName": "GetPolicyVersion", "eventSource": "iam.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.253.125.115", "userAgent": "Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56 Resource", "awsRegion": "us-east-1", "userIdentity": {"type": "AssumedRole", "principalId": "AROAUB2AA5FQRGAHITW4A:secmonkey", "arn": "arn:aws:sts::811596193553:assumed-role/SecurityMonkey/secmonkey", "accountId": "811596193553", "accessKeyId": "ASIAI9QHHRMC9F6XQJXN", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2017-05-27T04:59:38Z"}, "sessionIssuer": {"type": "Role", "principalId": "AROAUB2AA5FQRGAHITW4A", "arn": "arn:aws:iam::811596193553:role/SecurityMonkey", "accountId": "811596193553", "userName": "SecurityMonkey"}}}, "requestParameters": {"policyArn": "arn:aws:iam::aws:policy/service-role/AWSElasticBeanstalkEnhancedHealth", "versionId": "v2"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "73aac4aa-712e-4052-82ce-f1cc21542936", "record_id": "flaws_cloudtrail:0000207:73aac4aa-712e-4052-82ce-f1cc21542936", "row_index": 207, "timestamp": "2017-05-27T04:59:47Z", "event_type": "GetPolicyVersion", "event_source": "iam.amazonaws.com", "principal": {"type": "AssumedRole", "arn": "arn:aws:sts::811596193553:assumed-role/SecurityMonkey/secmonkey", "account_id": "811596193553", "principal_id": "AROAUB2AA5FQRGAHITW4A:secmonkey", "user_name": null, "access_key_id": "ASIAI9QHHRMC9F6XQJXN", "session_issuer_arn": "arn:aws:iam::811596193553:role/SecurityMonkey", "session_issuer_user_name": "SecurityMonkey"}, "network": {"source_ip": "255.253.125.115", "user_agent": "Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56 Resource", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 1070, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "73aac4aa-712e-4052-82ce-f1cc21542936", "eventTime": "2017-05-27T04:59:47Z", "eventName": "GetPolicyVersion", "eventSource": "iam.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.253.125.115", "userAgent": "Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56 Resource", "awsRegion": "us-east-1", "userIdentity": {"type": "AssumedRole", "principalId": "AROAUB2AA5FQRGAHITW4A:secmonkey", "arn": "arn:aws:sts::811596193553:assumed-role/SecurityMonkey/secmonkey", "accountId": "811596193553", "accessKeyId": "ASIAI9QHHRMC9F6XQJXN", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2017-05-27T04:59:38Z"}, "sessionIssuer": {"type": "Role", "principalId": "AROAUB2AA5FQRGAHITW4A", "arn": "arn:aws:iam::811596193553:role/SecurityMonkey", "accountId": "811596193553", "userName": "SecurityMonkey"}}}, "requestParameters": {"policyArn": "arn:aws:iam::aws:policy/AmazonElasticMapReduceReadOnlyAccess", "versionId": "v2"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "ae544a28-fdf6-468b-8b3b-63b449b51d78", "record_id": "flaws_cloudtrail:0000208:ae544a28-fdf6-468b-8b3b-63b449b51d78", "row_index": 208, "timestamp": "2017-05-27T04:59:47Z", "event_type": "GetPolicyVersion", "event_source": "iam.amazonaws.com", "principal": {"type": "AssumedRole", "arn": "arn:aws:sts::811596193553:assumed-role/SecurityMonkey/secmonkey", "account_id": "811596193553", "principal_id": "AROAUB2AA5FQRGAHITW4A:secmonkey", "user_name": null, "access_key_id": "ASIAI9QHHRMC9F6XQJXN", "session_issuer_arn": "arn:aws:iam::811596193553:role/SecurityMonkey", "session_issuer_user_name": "SecurityMonkey"}, "network": {"source_ip": "255.253.125.115", "user_agent": "Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56 Resource", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 1067, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "ae544a28-fdf6-468b-8b3b-63b449b51d78", "eventTime": "2017-05-27T04:59:47Z", "eventName": "GetPolicyVersion", "eventSource": "iam.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.253.125.115", "userAgent": "Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56 Resource", "awsRegion": "us-east-1", "userIdentity": {"type": "AssumedRole", "principalId": "AROAUB2AA5FQRGAHITW4A:secmonkey", "arn": "arn:aws:sts::811596193553:assumed-role/SecurityMonkey/secmonkey", "accountId": "811596193553", "accessKeyId": "ASIAI9QHHRMC9F6XQJXN", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2017-05-27T04:59:38Z"}, "sessionIssuer": {"type": "Role", "principalId": "AROAUB2AA5FQRGAHITW4A", "arn": "arn:aws:iam::811596193553:role/SecurityMonkey", "accountId": "811596193553", "userName": "SecurityMonkey"}}}, "requestParameters": {"policyArn": "arn:aws:iam::aws:policy/AWSDirectoryServiceReadOnlyAccess", "versionId": "v3"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "a8b486b7-1b90-4681-ba6a-44f81d2a5b38", "record_id": "flaws_cloudtrail:0000209:a8b486b7-1b90-4681-ba6a-44f81d2a5b38", "row_index": 209, "timestamp": "2017-05-27T04:59:47Z", "event_type": "GetPolicyVersion", "event_source": "iam.amazonaws.com", "principal": {"type": "AssumedRole", "arn": "arn:aws:sts::811596193553:assumed-role/SecurityMonkey/secmonkey", "account_id": "811596193553", "principal_id": "AROAUB2AA5FQRGAHITW4A:secmonkey", "user_name": null, "access_key_id": "ASIAI9QHHRMC9F6XQJXN", "session_issuer_arn": "arn:aws:iam::811596193553:role/SecurityMonkey", "session_issuer_user_name": "SecurityMonkey"}, "network": {"source_ip": "255.253.125.115", "user_agent": "Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56 Resource", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 1055, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "a8b486b7-1b90-4681-ba6a-44f81d2a5b38", "eventTime": "2017-05-27T04:59:47Z", "eventName": "GetPolicyVersion", "eventSource": "iam.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.253.125.115", "userAgent": "Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56 Resource", "awsRegion": "us-east-1", "userIdentity": {"type": "AssumedRole", "principalId": "AROAUB2AA5FQRGAHITW4A:secmonkey", "arn": "arn:aws:sts::811596193553:assumed-role/SecurityMonkey/secmonkey", "accountId": "811596193553", "accessKeyId": "ASIAI9QHHRMC9F6XQJXN", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2017-05-27T04:59:38Z"}, "sessionIssuer": {"type": "Role", "principalId": "AROAUB2AA5FQRGAHITW4A", "arn": "arn:aws:iam::811596193553:role/SecurityMonkey", "accountId": "811596193553", "userName": "SecurityMonkey"}}}, "requestParameters": {"policyArn": "arn:aws:iam::aws:policy/AWSXrayReadOnlyAccess", "versionId": "v1"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "61cb3e47-cea8-4507-80b8-cbffc3ecc930", "record_id": "flaws_cloudtrail:0000210:61cb3e47-cea8-4507-80b8-cbffc3ecc930", "row_index": 210, "timestamp": "2017-05-27T04:59:47Z", "event_type": "GetPolicyVersion", "event_source": "iam.amazonaws.com", "principal": {"type": "AssumedRole", "arn": "arn:aws:sts::811596193553:assumed-role/SecurityMonkey/secmonkey", "account_id": "811596193553", "principal_id": "AROAUB2AA5FQRGAHITW4A:secmonkey", "user_name": null, "access_key_id": "ASIAI9QHHRMC9F6XQJXN", "session_issuer_arn": "arn:aws:iam::811596193553:role/SecurityMonkey", "session_issuer_user_name": "SecurityMonkey"}, "network": {"source_ip": "255.253.125.115", "user_agent": "Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56 Resource", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 1057, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "61cb3e47-cea8-4507-80b8-cbffc3ecc930", "eventTime": "2017-05-27T04:59:47Z", "eventName": "GetPolicyVersion", "eventSource": "iam.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.253.125.115", "userAgent": "Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56 Resource", "awsRegion": "us-east-1", "userIdentity": {"type": "AssumedRole", "principalId": "AROAUB2AA5FQRGAHITW4A:secmonkey", "arn": "arn:aws:sts::811596193553:assumed-role/SecurityMonkey/secmonkey", "accountId": "811596193553", "accessKeyId": "ASIAI9QHHRMC9F6XQJXN", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2017-05-27T04:59:38Z"}, "sessionIssuer": {"type": "Role", "principalId": "AROAUB2AA5FQRGAHITW4A", "arn": "arn:aws:iam::811596193553:role/SecurityMonkey", "accountId": "811596193553", "userName": "SecurityMonkey"}}}, "requestParameters": {"policyArn": "arn:aws:iam::aws:policy/AmazonVPCReadOnlyAccess", "versionId": "v4"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "c21b6190-93e9-4148-9d43-2740b3229d08", "record_id": "flaws_cloudtrail:0000211:c21b6190-93e9-4148-9d43-2740b3229d08", "row_index": 211, "timestamp": "2017-05-27T04:59:47Z", "event_type": "GetPolicyVersion", "event_source": "iam.amazonaws.com", "principal": {"type": "AssumedRole", "arn": "arn:aws:sts::811596193553:assumed-role/SecurityMonkey/secmonkey", "account_id": "811596193553", "principal_id": "AROAUB2AA5FQRGAHITW4A:secmonkey", "user_name": null, "access_key_id": "ASIAI9QHHRMC9F6XQJXN", "session_issuer_arn": "arn:aws:iam::811596193553:role/SecurityMonkey", "session_issuer_user_name": "SecurityMonkey"}, "network": {"source_ip": "255.253.125.115", "user_agent": "Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56 Resource", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 1064, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "c21b6190-93e9-4148-9d43-2740b3229d08", "eventTime": "2017-05-27T04:59:47Z", "eventName": "GetPolicyVersion", "eventSource": "iam.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.253.125.115", "userAgent": "Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56 Resource", "awsRegion": "us-east-1", "userIdentity": {"type": "AssumedRole", "principalId": "AROAUB2AA5FQRGAHITW4A:secmonkey", "arn": "arn:aws:sts::811596193553:assumed-role/SecurityMonkey/secmonkey", "accountId": "811596193553", "accessKeyId": "ASIAI9QHHRMC9F6XQJXN", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2017-05-27T04:59:38Z"}, "sessionIssuer": {"type": "Role", "principalId": "AROAUB2AA5FQRGAHITW4A", "arn": "arn:aws:iam::811596193553:role/SecurityMonkey", "accountId": "811596193553", "userName": "SecurityMonkey"}}}, "requestParameters": {"policyArn": "arn:aws:iam::aws:policy/CloudWatchEventsReadOnlyAccess", "versionId": "v1"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "8caae3c1-d6a1-4e2c-84a8-103617b26f87c", "record_id": "flaws_cloudtrail:0000212:8caae3c1-d6a1-4e2c-84a8-103617b26f87c", "row_index": 212, "timestamp": "2017-05-27T04:59:47Z", "event_type": "GetPolicyVersion", "event_source": "iam.amazonaws.com", "principal": {"type": "AssumedRole", "arn": "arn:aws:sts::811596193553:assumed-role/SecurityMonkey/secmonkey", "account_id": "811596193553", "principal_id": "AROAUB2AA5FQRGAHITW4A:secmonkey", "user_name": null, "access_key_id": "ASIAI9QHHRMC9F6XQJXN", "session_issuer_arn": "arn:aws:iam::811596193553:role/SecurityMonkey", "session_issuer_user_name": "SecurityMonkey"}, "network": {"source_ip": "255.253.125.115", "user_agent": "Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56 Resource", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 1069, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "8caae3c1-d6a1-4e2c-84a8-103617b26f87c", "eventTime": "2017-05-27T04:59:47Z", "eventName": "GetPolicyVersion", "eventSource": "iam.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.253.125.115", "userAgent": "Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56 Resource", "awsRegion": "us-east-1", "userIdentity": {"type": "AssumedRole", "principalId": "AROAUB2AA5FQRGAHITW4A:secmonkey", "arn": "arn:aws:sts::811596193553:assumed-role/SecurityMonkey/secmonkey", "accountId": "811596193553", "accessKeyId": "ASIAI9QHHRMC9F6XQJXN", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2017-05-27T04:59:38Z"}, "sessionIssuer": {"type": "Role", "principalId": "AROAUB2AA5FQRGAHITW4A", "arn": "arn:aws:iam::811596193553:role/SecurityMonkey", "accountId": "811596193553", "userName": "SecurityMonkey"}}}, "requestParameters": {"policyArn": "arn:aws:iam::aws:policy/AmazonEC2ContainerRegistryReadOnly", "versionId": "v2"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "f4a961fd-7fc4-4ee2-8e86-11f36f955227d", "record_id": "flaws_cloudtrail:0000213:f4a961fd-7fc4-4ee2-8e86-11f36f955227d", "row_index": 213, "timestamp": "2017-05-27T04:59:47Z", "event_type": "GetPolicyVersion", "event_source": "iam.amazonaws.com", "principal": {"type": "AssumedRole", "arn": "arn:aws:sts::811596193553:assumed-role/SecurityMonkey/secmonkey", "account_id": "811596193553", "principal_id": "AROAUB2AA5FQRGAHITW4A:secmonkey", "user_name": null, "access_key_id": "ASIAI9QHHRMC9F6XQJXN", "session_issuer_arn": "arn:aws:iam::811596193553:role/SecurityMonkey", "session_issuer_user_name": "SecurityMonkey"}, "network": {"source_ip": "255.253.125.115", "user_agent": "Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56 Resource", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 1080, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "f4a961fd-7fc4-4ee2-8e86-11f36f955227d", "eventTime": "2017-05-27T04:59:47Z", "eventName": "GetPolicyVersion", "eventSource": "iam.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.253.125.115", "userAgent": "Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56 Resource", "awsRegion": "us-east-1", "userIdentity": {"type": "AssumedRole", "principalId": "AROAUB2AA5FQRGAHITW4A:secmonkey", "arn": "arn:aws:sts::811596193553:assumed-role/SecurityMonkey/secmonkey", "accountId": "811596193553", "accessKeyId": "ASIAI9QHHRMC9F6XQJXN", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2017-05-27T04:59:38Z"}, "sessionIssuer": {"type": "Role", "principalId": "AROAUB2AA5FQRGAHITW4A", "arn": "arn:aws:iam::811596193553:role/SecurityMonkey", "accountId": "811596193553", "userName": "SecurityMonkey"}}}, "requestParameters": {"policyArn": "arn:aws:iam::aws:policy/service-role/AmazonElasticMapReduceforEC2Role", "versionId": "v2"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "2cdd4301-1e7f-40ae-8b0f-3fe6418bfc2f", "record_id": "flaws_cloudtrail:0000214:2cdd4301-1e7f-40ae-8b0f-3fe6418bfc2f", "row_index": 214, "timestamp": "2017-05-27T04:59:47Z", "event_type": "GetPolicyVersion", "event_source": "iam.amazonaws.com", "principal": {"type": "AssumedRole", "arn": "arn:aws:sts::811596193553:assumed-role/SecurityMonkey/secmonkey", "account_id": "811596193553", "principal_id": "AROAUB2AA5FQRGAHITW4A:secmonkey", "user_name": null, "access_key_id": "ASIAI9QHHRMC9F6XQJXN", "session_issuer_arn": "arn:aws:iam::811596193553:role/SecurityMonkey", "session_issuer_user_name": "SecurityMonkey"}, "network": {"source_ip": "255.253.125.115", "user_agent": "Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56 Resource", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 1068, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "2cdd4301-1e7f-40ae-8b0f-3fe6418bfc2f", "eventTime": "2017-05-27T04:59:47Z", "eventName": "GetPolicyVersion", "eventSource": "iam.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.253.125.115", "userAgent": "Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56 Resource", "awsRegion": "us-east-1", "userIdentity": {"type": "AssumedRole", "principalId": "AROAUB2AA5FQRGAHITW4A:secmonkey", "arn": "arn:aws:sts::811596193553:assumed-role/SecurityMonkey/secmonkey", "accountId": "811596193553", "accessKeyId": "ASIAI9QHHRMC9F6XQJXN", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2017-05-27T04:59:38Z"}, "sessionIssuer": {"type": "Role", "principalId": "AROAUB2AA5FQRGAHITW4A", "arn": "arn:aws:iam::811596193553:role/SecurityMonkey", "accountId": "811596193553", "userName": "SecurityMonkey"}}}, "requestParameters": {"policyArn": "arn:aws:iam::aws:policy/job-function/DatabaseAdministrator", "versionId": "v1"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "9a4a2835-41fa-4bb3-95c4-e678146d72f38", "record_id": "flaws_cloudtrail:0000215:9a4a2835-41fa-4bb3-95c4-e678146d72f38", "row_index": 215, "timestamp": "2017-05-27T04:59:47Z", "event_type": "GetPolicyVersion", "event_source": "iam.amazonaws.com", "principal": {"type": "AssumedRole", "arn": "arn:aws:sts::811596193553:assumed-role/SecurityMonkey/secmonkey", "account_id": "811596193553", "principal_id": "AROAUB2AA5FQRGAHITW4A:secmonkey", "user_name": null, "access_key_id": "ASIAI9QHHRMC9F6XQJXN", "session_issuer_arn": "arn:aws:iam::811596193553:role/SecurityMonkey", "session_issuer_user_name": "SecurityMonkey"}, "network": {"source_ip": "255.253.125.115", "user_agent": "Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56 Resource", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 1058, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "9a4a2835-41fa-4bb3-95c4-e678146d72f38", "eventTime": "2017-05-27T04:59:47Z", "eventName": "GetPolicyVersion", "eventSource": "iam.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.253.125.115", "userAgent": "Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56 Resource", "awsRegion": "us-east-1", "userIdentity": {"type": "AssumedRole", "principalId": "AROAUB2AA5FQRGAHITW4A:secmonkey", "arn": "arn:aws:sts::811596193553:assumed-role/SecurityMonkey/secmonkey", "accountId": "811596193553", "accessKeyId": "ASIAI9QHHRMC9F6XQJXN", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2017-05-27T04:59:38Z"}, "sessionIssuer": {"type": "Role", "principalId": "AROAUB2AA5FQRGAHITW4A", "arn": "arn:aws:iam::811596193553:role/SecurityMonkey", "accountId": "811596193553", "userName": "SecurityMonkey"}}}, "requestParameters": {"policyArn": "arn:aws:iam::aws:policy/AmazonEC2ReadOnlyAccess", "versionId": "v1"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "d9d576c9-2782-4836-a053-a25aa981db91", "record_id": "flaws_cloudtrail:0000216:d9d576c9-2782-4836-a053-a25aa981db91", "row_index": 216, "timestamp": "2017-05-27T04:59:47Z", "event_type": "GetPolicyVersion", "event_source": "iam.amazonaws.com", "principal": {"type": "AssumedRole", "arn": "arn:aws:sts::811596193553:assumed-role/SecurityMonkey/secmonkey", "account_id": "811596193553", "principal_id": "AROAUB2AA5FQRGAHITW4A:secmonkey", "user_name": null, "access_key_id": "ASIAI9QHHRMC9F6XQJXN", "session_issuer_arn": "arn:aws:iam::811596193553:role/SecurityMonkey", "session_issuer_user_name": "SecurityMonkey"}, "network": {"source_ip": "255.253.125.115", "user_agent": "Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56 Resource", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 1062, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "d9d576c9-2782-4836-a053-a25aa981db91", "eventTime": "2017-05-27T04:59:47Z", "eventName": "GetPolicyVersion", "eventSource": "iam.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.253.125.115", "userAgent": "Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56 Resource", "awsRegion": "us-east-1", "userIdentity": {"type": "AssumedRole", "principalId": "AROAUB2AA5FQRGAHITW4A:secmonkey", "arn": "arn:aws:sts::811596193553:assumed-role/SecurityMonkey/secmonkey", "accountId": "811596193553", "accessKeyId": "ASIAI9QHHRMC9F6XQJXN", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2017-05-27T04:59:38Z"}, "sessionIssuer": {"type": "Role", "principalId": "AROAUB2AA5FQRGAHITW4A", "arn": "arn:aws:iam::811596193553:role/SecurityMonkey", "accountId": "811596193553", "userName": "SecurityMonkey"}}}, "requestParameters": {"policyArn": "arn:aws:iam::aws:policy/AmazonRedshiftReadOnlyAccess", "versionId": "v1"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "75c60c54-0367-42cd-ae1f-7c0935eb5f53", "record_id": "flaws_cloudtrail:0000217:75c60c54-0367-42cd-ae1f-7c0935eb5f53", "row_index": 217, "timestamp": "2017-05-27T04:59:47Z", "event_type": "GetTrailStatus", "event_source": "cloudtrail.amazonaws.com", "principal": {"type": "AssumedRole", "arn": "arn:aws:sts::811596193553:assumed-role/SecurityMonkey/secmonkey", "account_id": "811596193553", "principal_id": "AROAUB2AA5FQRGAHITW4A:secmonkey", "user_name": null, "access_key_id": "ASIADLBXY6L4HR9AO8JK", "session_issuer_arn": "arn:aws:iam::811596193553:role/SecurityMonkey", "session_issuer_user_name": "SecurityMonkey"}, "network": {"source_ip": "255.253.125.115", "user_agent": "Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56", "aws_region": "us-east-2"}, "resource_arns": [], "raw_record_size_bytes": 1042, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "75c60c54-0367-42cd-ae1f-7c0935eb5f53", "eventTime": "2017-05-27T04:59:47Z", "eventName": "GetTrailStatus", "eventSource": "cloudtrail.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.253.125.115", "userAgent": "Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56", "awsRegion": "us-east-2", "userIdentity": {"type": "AssumedRole", "principalId": "AROAUB2AA5FQRGAHITW4A:secmonkey", "arn": "arn:aws:sts::811596193553:assumed-role/SecurityMonkey/secmonkey", "accountId": "811596193553", "accessKeyId": "ASIADLBXY6L4HR9AO8JK", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2017-05-27T04:59:46Z"}, "sessionIssuer": {"type": "Role", "principalId": "AROAUB2AA5FQRGAHITW4A", "arn": "arn:aws:iam::811596193553:role/SecurityMonkey", "accountId": "811596193553", "userName": "SecurityMonkey"}}}, "requestParameters": {"name": "arn:aws:cloudtrail:us-west-2:811596193553:trail/cloudtrail"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "840c57ca-7bf7-4fcf-adc8-ec36c1a5557e", "record_id": "flaws_cloudtrail:0000218:840c57ca-7bf7-4fcf-adc8-ec36c1a5557e", "row_index": 218, "timestamp": "2017-05-27T04:59:47Z", "event_type": "DescribeTrails", "event_source": "cloudtrail.amazonaws.com", "principal": {"type": "AssumedRole", "arn": "arn:aws:sts::811596193553:assumed-role/SecurityMonkey/secmonkey", "account_id": "811596193553", "principal_id": "AROAUB2AA5FQRGAHITW4A:secmonkey", "user_name": null, "access_key_id": "ASIADLBXY6L4HR9AO8JK", "session_issuer_arn": "arn:aws:iam::811596193553:role/SecurityMonkey", "session_issuer_user_name": "SecurityMonkey"}, "network": {"source_ip": "255.253.125.115", "user_agent": "Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56", "aws_region": "us-east-2"}, "resource_arns": [], "raw_record_size_bytes": 977, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "840c57ca-7bf7-4fcf-adc8-ec36c1a5557e", "eventTime": "2017-05-27T04:59:47Z", "eventName": "DescribeTrails", "eventSource": "cloudtrail.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.253.125.115", "userAgent": "Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56", "awsRegion": "us-east-2", "userIdentity": {"type": "AssumedRole", "principalId": "AROAUB2AA5FQRGAHITW4A:secmonkey", "arn": "arn:aws:sts::811596193553:assumed-role/SecurityMonkey/secmonkey", "accountId": "811596193553", "accessKeyId": "ASIADLBXY6L4HR9AO8JK", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2017-05-27T04:59:46Z"}, "sessionIssuer": {"type": "Role", "principalId": "AROAUB2AA5FQRGAHITW4A", "arn": "arn:aws:iam::811596193553:role/SecurityMonkey", "accountId": "811596193553", "userName": "SecurityMonkey"}}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "38af0f92-0e4c-4399-949f-e0b13545a7d9", "record_id": "flaws_cloudtrail:0000219:38af0f92-0e4c-4399-949f-e0b13545a7d9", "row_index": 219, "timestamp": "2017-05-27T04:59:48Z", "event_type": "DescribeTrails", "event_source": "cloudtrail.amazonaws.com", "principal": {"type": "AssumedRole", "arn": "arn:aws:sts::811596193553:assumed-role/SecurityMonkey/secmonkey", "account_id": "811596193553", "principal_id": "AROAUB2AA5FQRGAHITW4A:secmonkey", "user_name": null, "access_key_id": "ASIAX74D9YI5QWKGG467", "session_issuer_arn": "arn:aws:iam::811596193553:role/SecurityMonkey", "session_issuer_user_name": "SecurityMonkey"}, "network": {"source_ip": "255.253.125.115", "user_agent": "Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56", "aws_region": "ap-southeast-1"}, "resource_arns": [], "raw_record_size_bytes": 981, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "38af0f92-0e4c-4399-949f-e0b13545a7d9", "eventTime": "2017-05-27T04:59:48Z", "eventName": "DescribeTrails", "eventSource": "cloudtrail.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.253.125.115", "userAgent": "Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56", "awsRegion": "ap-southeast-1", "userIdentity": {"type": "AssumedRole", "principalId": "AROAUB2AA5FQRGAHITW4A:secmonkey", "arn": "arn:aws:sts::811596193553:assumed-role/SecurityMonkey/secmonkey", "accountId": "811596193553", "accessKeyId": "ASIAX74D9YI5QWKGG467", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2017-05-27T04:59:47Z"}, "sessionIssuer": {"type": "Role", "principalId": "AROAUB2AA5FQRGAHITW4A", "arn": "arn:aws:iam::811596193553:role/SecurityMonkey", "accountId": "811596193553", "userName": "SecurityMonkey"}}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "5adce55a-1fd3-40be-b2a7-11b678862eb5e", "record_id": "flaws_cloudtrail:0000220:5adce55a-1fd3-40be-b2a7-11b678862eb5e", "row_index": 220, "timestamp": "2017-05-27T04:59:48Z", "event_type": "GetTrailStatus", "event_source": "cloudtrail.amazonaws.com", "principal": {"type": "AssumedRole", "arn": "arn:aws:sts::811596193553:assumed-role/SecurityMonkey/secmonkey", "account_id": "811596193553", "principal_id": "AROAUB2AA5FQRGAHITW4A:secmonkey", "user_name": null, "access_key_id": "ASIAX74D9YI5QWKGG467", "session_issuer_arn": "arn:aws:iam::811596193553:role/SecurityMonkey", "session_issuer_user_name": "SecurityMonkey"}, "network": {"source_ip": "255.253.125.115", "user_agent": "Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56", "aws_region": "ap-southeast-1"}, "resource_arns": [], "raw_record_size_bytes": 1047, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "5adce55a-1fd3-40be-b2a7-11b678862eb5e", "eventTime": "2017-05-27T04:59:48Z", "eventName": "GetTrailStatus", "eventSource": "cloudtrail.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.253.125.115", "userAgent": "Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56", "awsRegion": "ap-southeast-1", "userIdentity": {"type": "AssumedRole", "principalId": "AROAUB2AA5FQRGAHITW4A:secmonkey", "arn": "arn:aws:sts::811596193553:assumed-role/SecurityMonkey/secmonkey", "accountId": "811596193553", "accessKeyId": "ASIAX74D9YI5QWKGG467", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2017-05-27T04:59:47Z"}, "sessionIssuer": {"type": "Role", "principalId": "AROAUB2AA5FQRGAHITW4A", "arn": "arn:aws:iam::811596193553:role/SecurityMonkey", "accountId": "811596193553", "userName": "SecurityMonkey"}}}, "requestParameters": {"name": "arn:aws:cloudtrail:us-west-2:811596193553:trail/cloudtrail"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "aa3e266e-6a6c-4319-a870-c94dcb93b715", "record_id": "flaws_cloudtrail:0000221:aa3e266e-6a6c-4319-a870-c94dcb93b715", "row_index": 221, "timestamp": "2017-05-27T04:59:48Z", "event_type": "GetPolicyVersion", "event_source": "iam.amazonaws.com", "principal": {"type": "AssumedRole", "arn": "arn:aws:sts::811596193553:assumed-role/SecurityMonkey/secmonkey", "account_id": "811596193553", "principal_id": "AROAUB2AA5FQRGAHITW4A:secmonkey", "user_name": null, "access_key_id": "ASIAI9QHHRMC9F6XQJXN", "session_issuer_arn": "arn:aws:iam::811596193553:role/SecurityMonkey", "session_issuer_user_name": "SecurityMonkey"}, "network": {"source_ip": "255.253.125.115", "user_agent": "Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56 Resource", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 1065, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "aa3e266e-6a6c-4319-a870-c94dcb93b715", "eventTime": "2017-05-27T04:59:48Z", "eventName": "GetPolicyVersion", "eventSource": "iam.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.253.125.115", "userAgent": "Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56 Resource", "awsRegion": "us-east-1", "userIdentity": {"type": "AssumedRole", "principalId": "AROAUB2AA5FQRGAHITW4A:secmonkey", "arn": "arn:aws:sts::811596193553:assumed-role/SecurityMonkey/secmonkey", "accountId": "811596193553", "accessKeyId": "ASIAI9QHHRMC9F6XQJXN", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2017-05-27T04:59:38Z"}, "sessionIssuer": {"type": "Role", "principalId": "AROAUB2AA5FQRGAHITW4A", "arn": "arn:aws:iam::811596193553:role/SecurityMonkey", "accountId": "811596193553", "userName": "SecurityMonkey"}}}, "requestParameters": {"policyArn": "arn:aws:iam::aws:policy/AmazonKinesisAnalyticsReadOnly", "versionId": "v1"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "8b3e15cb-075a-4f98-99bc-201ee3d918b6", "record_id": "flaws_cloudtrail:0000222:8b3e15cb-075a-4f98-99bc-201ee3d918b6", "row_index": 222, "timestamp": "2017-05-27T04:59:48Z", "event_type": "GetPolicyVersion", "event_source": "iam.amazonaws.com", "principal": {"type": "AssumedRole", "arn": "arn:aws:sts::811596193553:assumed-role/SecurityMonkey/secmonkey", "account_id": "811596193553", "principal_id": "AROAUB2AA5FQRGAHITW4A:secmonkey", "user_name": null, "access_key_id": "ASIAI9QHHRMC9F6XQJXN", "session_issuer_arn": "arn:aws:iam::811596193553:role/SecurityMonkey", "session_issuer_user_name": "SecurityMonkey"}, "network": {"source_ip": "255.253.125.115", "user_agent": "Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56 Resource", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 1063, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "8b3e15cb-075a-4f98-99bc-201ee3d918b6", "eventTime": "2017-05-27T04:59:48Z", "eventName": "GetPolicyVersion", "eventSource": "iam.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.253.125.115", "userAgent": "Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56 Resource", "awsRegion": "us-east-1", "userIdentity": {"type": "AssumedRole", "principalId": "AROAUB2AA5FQRGAHITW4A:secmonkey", "arn": "arn:aws:sts::811596193553:assumed-role/SecurityMonkey/secmonkey", "accountId": "811596193553", "accessKeyId": "ASIAI9QHHRMC9F6XQJXN", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2017-05-27T04:59:38Z"}, "sessionIssuer": {"type": "Role", "principalId": "AROAUB2AA5FQRGAHITW4A", "arn": "arn:aws:iam::811596193553:role/SecurityMonkey", "accountId": "811596193553", "userName": "SecurityMonkey"}}}, "requestParameters": {"policyArn": "arn:aws:iam::aws:policy/AWSCodePipelineReadOnlyAccess", "versionId": "v5"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "c393104c7-8ddd-407b-8e10-dd4eb1f492c9", "record_id": "flaws_cloudtrail:0000223:c393104c7-8ddd-407b-8e10-dd4eb1f492c9", "row_index": 223, "timestamp": "2017-05-27T04:59:48Z", "event_type": "GetPolicyVersion", "event_source": "iam.amazonaws.com", "principal": {"type": "AssumedRole", "arn": "arn:aws:sts::811596193553:assumed-role/SecurityMonkey/secmonkey", "account_id": "811596193553", "principal_id": "AROAUB2AA5FQRGAHITW4A:secmonkey", "user_name": null, "access_key_id": "ASIAI9QHHRMC9F6XQJXN", "session_issuer_arn": "arn:aws:iam::811596193553:role/SecurityMonkey", "session_issuer_user_name": "SecurityMonkey"}, "network": {"source_ip": "255.253.125.115", "user_agent": "Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56 Resource", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 1079, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "c393104c7-8ddd-407b-8e10-dd4eb1f492c9", "eventTime": "2017-05-27T04:59:48Z", "eventName": "GetPolicyVersion", "eventSource": "iam.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.253.125.115", "userAgent": "Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56 Resource", "awsRegion": "us-east-1", "userIdentity": {"type": "AssumedRole", "principalId": "AROAUB2AA5FQRGAHITW4A:secmonkey", "arn": "arn:aws:sts::811596193553:assumed-role/SecurityMonkey/secmonkey", "accountId": "811596193553", "accessKeyId": "ASIAI9QHHRMC9F6XQJXN", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2017-05-27T04:59:38Z"}, "sessionIssuer": {"type": "Role", "principalId": "AROAUB2AA5FQRGAHITW4A", "arn": "arn:aws:iam::811596193553:role/SecurityMonkey", "accountId": "811596193553", "userName": "SecurityMonkey"}}}, "requestParameters": {"policyArn": "arn:aws:iam::aws:policy/service-role/AmazonRDSDirectoryServiceAccess", "versionId": "v1"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "bca98a01-1d10-4e83-90ab-b38888b665bb", "record_id": "flaws_cloudtrail:0000224:bca98a01-1d10-4e83-90ab-b38888b665bb", "row_index": 224, "timestamp": "2017-05-27T04:59:48Z", "event_type": "GetPolicyVersion", "event_source": "iam.amazonaws.com", "principal": {"type": "AssumedRole", "arn": "arn:aws:sts::811596193553:assumed-role/SecurityMonkey/secmonkey", "account_id": "811596193553", "principal_id": "AROAUB2AA5FQRGAHITW4A:secmonkey", "user_name": null, "access_key_id": "ASIAI9QHHRMC9F6XQJXN", "session_issuer_arn": "arn:aws:iam::811596193553:role/SecurityMonkey", "session_issuer_user_name": "SecurityMonkey"}, "network": {"source_ip": "255.253.125.115", "user_agent": "Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56 Resource", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 1062, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "bca98a01-1d10-4e83-90ab-b38888b665bb", "eventTime": "2017-05-27T04:59:48Z", "eventName": "GetPolicyVersion", "eventSource": "iam.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.253.125.115", "userAgent": "Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56 Resource", "awsRegion": "us-east-1", "userIdentity": {"type": "AssumedRole", "principalId": "AROAUB2AA5FQRGAHITW4A:secmonkey", "arn": "arn:aws:sts::811596193553:assumed-role/SecurityMonkey/secmonkey", "accountId": "811596193553", "accessKeyId": "ASIAI9QHHRMC9F6XQJXN", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2017-05-27T04:59:38Z"}, "sessionIssuer": {"type": "Role", "principalId": "AROAUB2AA5FQRGAHITW4A", "arn": "arn:aws:iam::811596193553:role/SecurityMonkey", "accountId": "811596193553", "userName": "SecurityMonkey"}}}, "requestParameters": {"policyArn": "arn:aws:iam::aws:policy/ServiceCatalogAdminFullAccess", "versionId": "v2"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "6cd171ce-55e5-464c-8232-f17ba012db37", "record_id": "flaws_cloudtrail:0000225:6cd171ce-55e5-464c-8232-f17ba012db37", "row_index": 225, "timestamp": "2017-05-27T04:59:48Z", "event_type": "GetPolicyVersion", "event_source": "iam.amazonaws.com", "principal": {"type": "AssumedRole", "arn": "arn:aws:sts::811596193553:assumed-role/SecurityMonkey/secmonkey", "account_id": "811596193553", "principal_id": "AROAUB2AA5FQRGAHITW4A:secmonkey", "user_name": null, "access_key_id": "ASIAI9QHHRMC9F6XQJXN", "session_issuer_arn": "arn:aws:iam::811596193553:role/SecurityMonkey", "session_issuer_user_name": "SecurityMonkey"}, "network": {"source_ip": "255.253.125.115", "user_agent": "Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56 Resource", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 1066, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "6cd171ce-55e5-464c-8232-f17ba012db37", "eventTime": "2017-05-27T04:59:48Z", "eventName": "GetPolicyVersion", "eventSource": "iam.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.253.125.115", "userAgent": "Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56 Resource", "awsRegion": "us-east-1", "userIdentity": {"type": "AssumedRole", "principalId": "AROAUB2AA5FQRGAHITW4A:secmonkey", "arn": "arn:aws:sts::811596193553:assumed-role/SecurityMonkey/secmonkey", "accountId": "811596193553", "accessKeyId": "ASIAI9QHHRMC9F6XQJXN", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2017-05-27T04:59:38Z"}, "sessionIssuer": {"type": "Role", "principalId": "AROAUB2AA5FQRGAHITW4A", "arn": "arn:aws:iam::811596193553:role/SecurityMonkey", "accountId": "811596193553", "userName": "SecurityMonkey"}}}, "requestParameters": {"policyArn": "arn:aws:iam::aws:policy/AmazonAPIGatewayInvokeFullAccess", "versionId": "v1"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "470bf3dd-337b-4c09-9c97-c6cbc2c3cb37", "record_id": "flaws_cloudtrail:0000226:470bf3dd-337b-4c09-9c97-c6cbc2c3cb37", "row_index": 226, "timestamp": "2017-05-27T04:59:48Z", "event_type": "GetPolicyVersion", "event_source": "iam.amazonaws.com", "principal": {"type": "AssumedRole", "arn": "arn:aws:sts::811596193553:assumed-role/SecurityMonkey/secmonkey", "account_id": "811596193553", "principal_id": "AROAUB2AA5FQRGAHITW4A:secmonkey", "user_name": null, "access_key_id": "ASIAI9QHHRMC9F6XQJXN", "session_issuer_arn": "arn:aws:iam::811596193553:role/SecurityMonkey", "session_issuer_user_name": "SecurityMonkey"}, "network": {"source_ip": "255.253.125.115", "user_agent": "Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56 Resource", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 1054, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "470bf3dd-337b-4c09-9c97-c6cbc2c3cb37", "eventTime": "2017-05-27T04:59:48Z", "eventName": "GetPolicyVersion", "eventSource": "iam.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.253.125.115", "userAgent": "Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56 Resource", "awsRegion": "us-east-1", "userIdentity": {"type": "AssumedRole", "principalId": "AROAUB2AA5FQRGAHITW4A:secmonkey", "arn": "arn:aws:sts::811596193553:assumed-role/SecurityMonkey/secmonkey", "accountId": "811596193553", "accessKeyId": "ASIAI9QHHRMC9F6XQJXN", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2017-05-27T04:59:38Z"}, "sessionIssuer": {"type": "Role", "principalId": "AROAUB2AA5FQRGAHITW4A", "arn": "arn:aws:iam::811596193553:role/SecurityMonkey", "accountId": "811596193553", "userName": "SecurityMonkey"}}}, "requestParameters": {"policyArn": "arn:aws:iam::aws:policy/CloudWatchFullAccess", "versionId": "v1"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "360e0270-5a9d-4552-b856-805227b484", "record_id": "flaws_cloudtrail:0000227:360e0270-5a9d-4552-b856-805227b484", "row_index": 227, "timestamp": "2017-05-27T04:59:48Z", "event_type": "GetPolicyVersion", "event_source": "iam.amazonaws.com", "principal": {"type": "AssumedRole", "arn": "arn:aws:sts::811596193553:assumed-role/SecurityMonkey/secmonkey", "account_id": "811596193553", "principal_id": "AROAUB2AA5FQRGAHITW4A:secmonkey", "user_name": null, "access_key_id": "ASIAI9QHHRMC9F6XQJXN", "session_issuer_arn": "arn:aws:iam::811596193553:role/SecurityMonkey", "session_issuer_user_name": "SecurityMonkey"}, "network": {"source_ip": "255.253.125.115", "user_agent": "Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56 Resource", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 1064, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "360e0270-5a9d-4552-b856-805227b484", "eventTime": "2017-05-27T04:59:48Z", "eventName": "GetPolicyVersion", "eventSource": "iam.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.253.125.115", "userAgent": "Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56 Resource", "awsRegion": "us-east-1", "userIdentity": {"type": "AssumedRole", "principalId": "AROAUB2AA5FQRGAHITW4A:secmonkey", "arn": "arn:aws:sts::811596193553:assumed-role/SecurityMonkey/secmonkey", "accountId": "811596193553", "accessKeyId": "ASIAI9QHHRMC9F6XQJXN", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2017-05-27T04:59:38Z"}, "sessionIssuer": {"type": "Role", "principalId": "AROAUB2AA5FQRGAHITW4A", "arn": "arn:aws:iam::811596193553:role/SecurityMonkey", "accountId": "811596193553", "userName": "SecurityMonkey"}}}, "requestParameters": {"policyArn": "arn:aws:iam::aws:policy/service-role/AWSDataPipelineRole", "versionId": "v5"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "845cc94f-c06f-4075-896c-6bd2b4d082f3", "record_id": "flaws_cloudtrail:0000228:845cc94f-c06f-4075-896c-6bd2b4d082f3", "row_index": 228, "timestamp": "2017-05-27T04:59:48Z", "event_type": "GetPolicyVersion", "event_source": "iam.amazonaws.com", "principal": {"type": "AssumedRole", "arn": "arn:aws:sts::811596193553:assumed-role/SecurityMonkey/secmonkey", "account_id": "811596193553", "principal_id": "AROAUB2AA5FQRGAHITW4A:secmonkey", "user_name": null, "access_key_id": "ASIAI9QHHRMC9F6XQJXN", "session_issuer_arn": "arn:aws:iam::811596193553:role/SecurityMonkey", "session_issuer_user_name": "SecurityMonkey"}, "network": {"source_ip": "255.253.125.115", "user_agent": "Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56 Resource", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 1083, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "845cc94f-c06f-4075-896c-6bd2b4d082f3", "eventTime": "2017-05-27T04:59:48Z", "eventName": "GetPolicyVersion", "eventSource": "iam.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.253.125.115", "userAgent": "Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56 Resource", "awsRegion": "us-east-1", "userIdentity": {"type": "AssumedRole", "principalId": "AROAUB2AA5FQRGAHITW4A:secmonkey", "arn": "arn:aws:sts::811596193553:assumed-role/SecurityMonkey/secmonkey", "accountId": "811596193553", "accessKeyId": "ASIAI9QHHRMC9F6XQJXN", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2017-05-27T04:59:38Z"}, "sessionIssuer": {"type": "Role", "principalId": "AROAUB2AA5FQRGAHITW4A", "arn": "arn:aws:iam::811596193553:role/SecurityMonkey", "accountId": "811596193553", "userName": "SecurityMonkey"}}}, "requestParameters": {"policyArn": "arn:aws:iam::aws:policy/service-role/AmazonAPIGatewayPushToCloudWatchLogs", "versionId": "v1"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "50ae0f92-883e-4de8-a9bd-c2b46ec9aed9", "record_id": "flaws_cloudtrail:0000229:50ae0f92-883e-4de8-a9bd-c2b46ec9aed9", "row_index": 229, "timestamp": "2017-05-27T04:59:48Z", "event_type": "GetPolicyVersion", "event_source": "iam.amazonaws.com", "principal": {"type": "AssumedRole", "arn": "arn:aws:sts::811596193553:assumed-role/SecurityMonkey/secmonkey", "account_id": "811596193553", "principal_id": "AROAUB2AA5FQRGAHITW4A:secmonkey", "user_name": null, "access_key_id": "ASIAI9QHHRMC9F6XQJXN", "session_issuer_arn": "arn:aws:iam::811596193553:role/SecurityMonkey", "session_issuer_user_name": "SecurityMonkey"}, "network": {"source_ip": "255.253.125.115", "user_agent": "Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56 Resource", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 1057, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "50ae0f92-883e-4de8-a9bd-c2b46ec9aed9", "eventTime": "2017-05-27T04:59:48Z", "eventName": "GetPolicyVersion", "eventSource": "iam.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.253.125.115", "userAgent": "Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56 Resource", "awsRegion": "us-east-1", "userIdentity": {"type": "AssumedRole", "principalId": "AROAUB2AA5FQRGAHITW4A:secmonkey", "arn": "arn:aws:sts::811596193553:assumed-role/SecurityMonkey/secmonkey", "accountId": "811596193553", "accessKeyId": "ASIAI9QHHRMC9F6XQJXN", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2017-05-27T04:59:38Z"}, "sessionIssuer": {"type": "Role", "principalId": "AROAUB2AA5FQRGAHITW4A", "arn": "arn:aws:iam::811596193553:role/SecurityMonkey", "accountId": "811596193553", "userName": "SecurityMonkey"}}}, "requestParameters": {"policyArn": "arn:aws:iam::aws:policy/AWSMobileHub_FullAccess", "versionId": "v8"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "fc9ae962-d65b-4a00-8a8e-5b6c143d6527", "record_id": "flaws_cloudtrail:0000230:fc9ae962-d65b-4a00-8a8e-5b6c143d6527", "row_index": 230, "timestamp": "2017-05-27T04:59:48Z", "event_type": "GetPolicyVersion", "event_source": "iam.amazonaws.com", "principal": {"type": "AssumedRole", "arn": "arn:aws:sts::811596193553:assumed-role/SecurityMonkey/secmonkey", "account_id": "811596193553", "principal_id": "AROAUB2AA5FQRGAHITW4A:secmonkey", "user_name": null, "access_key_id": "ASIAI9QHHRMC9F6XQJXN", "session_issuer_arn": "arn:aws:iam::811596193553:role/SecurityMonkey", "session_issuer_user_name": "SecurityMonkey"}, "network": {"source_ip": "255.253.125.115", "user_agent": "Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56 Resource", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 1065, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "fc9ae962-d65b-4a00-8a8e-5b6c143d6527", "eventTime": "2017-05-27T04:59:48Z", "eventName": "GetPolicyVersion", "eventSource": "iam.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.253.125.115", "userAgent": "Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56 Resource", "awsRegion": "us-east-1", "userIdentity": {"type": "AssumedRole", "principalId": "AROAUB2AA5FQRGAHITW4A:secmonkey", "arn": "arn:aws:sts::811596193553:assumed-role/SecurityMonkey/secmonkey", "accountId": "811596193553", "accessKeyId": "ASIAI9QHHRMC9F6XQJXN", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2017-05-27T04:59:38Z"}, "sessionIssuer": {"type": "Role", "principalId": "AROAUB2AA5FQRGAHITW4A", "arn": "arn:aws:iam::811596193553:role/SecurityMonkey", "accountId": "811596193553", "userName": "SecurityMonkey"}}}, "requestParameters": {"policyArn": "arn:aws:iam::aws:policy/AmazonMobileAnalyticsFullAccess", "versionId": "v1"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "610e7885-163b-4ae0-9df2-eb8010e1a938", "record_id": "flaws_cloudtrail:0000231:610e7885-163b-4ae0-9df2-eb8010e1a938", "row_index": 231, "timestamp": "2017-05-27T04:59:49Z", "event_type": "GetTrailStatus", "event_source": "cloudtrail.amazonaws.com", "principal": {"type": "AssumedRole", "arn": "arn:aws:sts::811596193553:assumed-role/SecurityMonkey/secmonkey", "account_id": "811596193553", "principal_id": "AROAUB2AA5FQRGAHITW4A:secmonkey", "user_name": null, "access_key_id": "ASIA0Y6M7BPG6ELXVGFH", "session_issuer_arn": "arn:aws:iam::811596193553:role/SecurityMonkey", "session_issuer_user_name": "SecurityMonkey"}, "network": {"source_ip": "255.253.125.115", "user_agent": "Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56", "aws_region": "ca-central-1"}, "resource_arns": [], "raw_record_size_bytes": 1045, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "610e7885-163b-4ae0-9df2-eb8010e1a938", "eventTime": "2017-05-27T04:59:49Z", "eventName": "GetTrailStatus", "eventSource": "cloudtrail.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.253.125.115", "userAgent": "Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56", "awsRegion": "ca-central-1", "userIdentity": {"type": "AssumedRole", "principalId": "AROAUB2AA5FQRGAHITW4A:secmonkey", "arn": "arn:aws:sts::811596193553:assumed-role/SecurityMonkey/secmonkey", "accountId": "811596193553", "accessKeyId": "ASIA0Y6M7BPG6ELXVGFH", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2017-05-27T04:59:49Z"}, "sessionIssuer": {"type": "Role", "principalId": "AROAUB2AA5FQRGAHITW4A", "arn": "arn:aws:iam::811596193553:role/SecurityMonkey", "accountId": "811596193553", "userName": "SecurityMonkey"}}}, "requestParameters": {"name": "arn:aws:cloudtrail:us-west-2:811596193553:trail/cloudtrail"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "ac05e9eb-3c26-4ad0-bc8c-3d391cff9e42", "record_id": "flaws_cloudtrail:0000232:ac05e9eb-3c26-4ad0-bc8c-3d391cff9e42", "row_index": 232, "timestamp": "2017-05-27T04:59:49Z", "event_type": "DescribeTrails", "event_source": "cloudtrail.amazonaws.com", "principal": {"type": "AssumedRole", "arn": "arn:aws:sts::811596193553:assumed-role/SecurityMonkey/secmonkey", "account_id": "811596193553", "principal_id": "AROAUB2AA5FQRGAHITW4A:secmonkey", "user_name": null, "access_key_id": "ASIA0Y6M7BPG6ELXVGFH", "session_issuer_arn": "arn:aws:iam::811596193553:role/SecurityMonkey", "session_issuer_user_name": "SecurityMonkey"}, "network": {"source_ip": "255.253.125.115", "user_agent": "Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56", "aws_region": "ca-central-1"}, "resource_arns": [], "raw_record_size_bytes": 980, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "ac05e9eb-3c26-4ad0-bc8c-3d391cff9e42", "eventTime": "2017-05-27T04:59:49Z", "eventName": "DescribeTrails", "eventSource": "cloudtrail.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.253.125.115", "userAgent": "Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56", "awsRegion": "ca-central-1", "userIdentity": {"type": "AssumedRole", "principalId": "AROAUB2AA5FQRGAHITW4A:secmonkey", "arn": "arn:aws:sts::811596193553:assumed-role/SecurityMonkey/secmonkey", "accountId": "811596193553", "accessKeyId": "ASIA0Y6M7BPG6ELXVGFH", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2017-05-27T04:59:49Z"}, "sessionIssuer": {"type": "Role", "principalId": "AROAUB2AA5FQRGAHITW4A", "arn": "arn:aws:iam::811596193553:role/SecurityMonkey", "accountId": "811596193553", "userName": "SecurityMonkey"}}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "1c35b30f-4738-41ec-b341-386f9d42f4a1", "record_id": "flaws_cloudtrail:0000233:1c35b30f-4738-41ec-b341-386f9d42f4a1", "row_index": 233, "timestamp": "2017-05-27T04:59:49Z", "event_type": "AssumeRole", "event_source": "sts.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/SecurityMokey", "account_id": "811596193553", "principal_id": "AIDAQ9SRE1SZZZ4Q4UOJH", "user_name": "SecurityMokey", "access_key_id": "AKIAXJ0III4JBKZDXGXN", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "255.253.125.115", "user_agent": "Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56", "aws_region": "us-east-1"}, "resource_arns": ["arn:aws:iam::811596193553:role/SecurityMonkey"], "raw_record_size_bytes": 1454, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "resources", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "1c35b30f-4738-41ec-b341-386f9d42f4a1", "eventTime": "2017-05-27T04:59:49Z", "eventName": "AssumeRole", "eventSource": "sts.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.253.125.115", "userAgent": "Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDAQ9SRE1SZZZ4Q4UOJH", "arn": "arn:aws:iam::811596193553:user/SecurityMokey", "accountId": "811596193553", "accessKeyId": "AKIAXJ0III4JBKZDXGXN", "userName": "SecurityMokey"}, "requestParameters": {"roleArn": "arn:aws:iam::811596193553:role/SecurityMonkey", "roleSessionName": "secmonkey"}, "responseElements": {"credentials": {"accessKeyId": "ASIA0Y6M7BPG6ELXVGFH", "expiration": "May 27, 2017 5:59:49 AM", "sessionToken": "FQoDYXdzECYaDKgjr8ImTDBfNTsNDCLMAQXEvCMlyq+jtgfYtycksrK5C9S4UzI2d/Usc7hs+MbOl5zcPqZVeU61YSMuDTG06bq2cWI2KBqyrVlpPu9nuDIv6yg1l8gCrOnvKRDL+Lja0gbbRfbi2j7pUNdBDOzuW3MeBu96OCizK4X55NieN0+kyWbR3OKmKH5JTTjYGRHd1+g5aQElwK0qIqlpJEmZ0hf1xErDn55272i4Pc09NpspIDVKBr/5Fka1YgLRxIEZCe6hinvmD4rquwIX4kqgonkMQNm1C0zNamWzrSjFj6TJBQ=="}, "assumedRoleUser": {"assumedRoleId": "AROAUB2AA5FQRGAHITW4A:secmonkey", "arn": "arn:aws:sts::811596193553:assumed-role/SecurityMonkey/secmonkey"}}, "resources": [{"ARN": "arn:aws:iam::811596193553:role/SecurityMonkey", "accountId": "811596193553", "type": "AWS::IAM::Role"}]}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "d29317-187c-4a22-9e4a-efe4a5ea48ae", "record_id": "flaws_cloudtrail:0000234:d29317-187c-4a22-9e4a-efe4a5ea48ae", "row_index": 234, "timestamp": "2017-05-27T04:59:49Z", "event_type": "GetPolicyVersion", "event_source": "iam.amazonaws.com", "principal": {"type": "AssumedRole", "arn": "arn:aws:sts::811596193553:assumed-role/SecurityMonkey/secmonkey", "account_id": "811596193553", "principal_id": "AROAUB2AA5FQRGAHITW4A:secmonkey", "user_name": null, "access_key_id": "ASIAI9QHHRMC9F6XQJXN", "session_issuer_arn": "arn:aws:iam::811596193553:role/SecurityMonkey", "session_issuer_user_name": "SecurityMonkey"}, "network": {"source_ip": "255.253.125.115", "user_agent": "Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56 Resource", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 1067, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "d29317-187c-4a22-9e4a-efe4a5ea48ae", "eventTime": "2017-05-27T04:59:49Z", "eventName": "GetPolicyVersion", "eventSource": "iam.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.253.125.115", "userAgent": "Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56 Resource", "awsRegion": "us-east-1", "userIdentity": {"type": "AssumedRole", "principalId": "AROAUB2AA5FQRGAHITW4A:secmonkey", "arn": "arn:aws:sts::811596193553:assumed-role/SecurityMonkey/secmonkey", "accountId": "811596193553", "accessKeyId": "ASIAI9QHHRMC9F6XQJXN", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2017-05-27T04:59:38Z"}, "sessionIssuer": {"type": "Role", "principalId": "AROAUB2AA5FQRGAHITW4A", "arn": "arn:aws:iam::811596193553:role/SecurityMonkey", "accountId": "811596193553", "userName": "SecurityMonkey"}}}, "requestParameters": {"policyArn": "arn:aws:iam::aws:policy/AmazonElasticTranscoderJobsSubmitter", "versionId": "v1"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "9c810c49-48df-4fd3-bffa-baa616a436da", "record_id": "flaws_cloudtrail:0000235:9c810c49-48df-4fd3-bffa-baa616a436da", "row_index": 235, "timestamp": "2017-05-27T04:59:49Z", "event_type": "GetPolicyVersion", "event_source": "iam.amazonaws.com", "principal": {"type": "AssumedRole", "arn": "arn:aws:sts::811596193553:assumed-role/SecurityMonkey/secmonkey", "account_id": "811596193553", "principal_id": "AROAUB2AA5FQRGAHITW4A:secmonkey", "user_name": null, "access_key_id": "ASIAI9QHHRMC9F6XQJXN", "session_issuer_arn": "arn:aws:iam::811596193553:role/SecurityMonkey", "session_issuer_user_name": "SecurityMonkey"}, "network": {"source_ip": "255.253.125.115", "user_agent": "Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56 Resource", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 1058, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "9c810c49-48df-4fd3-bffa-baa616a436da", "eventTime": "2017-05-27T04:59:49Z", "eventName": "GetPolicyVersion", "eventSource": "iam.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.253.125.115", "userAgent": "Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56 Resource", "awsRegion": "us-east-1", "userIdentity": {"type": "AssumedRole", "principalId": "AROAUB2AA5FQRGAHITW4A:secmonkey", "arn": "arn:aws:sts::811596193553:assumed-role/SecurityMonkey/secmonkey", "accountId": "811596193553", "accessKeyId": "ASIAI9QHHRMC9F6XQJXN", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2017-05-27T04:59:38Z"}, "sessionIssuer": {"type": "Role", "principalId": "AROAUB2AA5FQRGAHITW4A", "arn": "arn:aws:iam::811596193553:role/SecurityMonkey", "accountId": "811596193553", "userName": "SecurityMonkey"}}}, "requestParameters": {"policyArn": "arn:aws:iam::aws:policy/AWSDataPipeline_PowerUser", "versionId": "v1"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "c102033e-3628-46a4-b697-83a2e3300e8d", "record_id": "flaws_cloudtrail:0000236:c102033e-3628-46a4-b697-83a2e3300e8d", "row_index": 236, "timestamp": "2017-05-27T04:59:49Z", "event_type": "GetPolicyVersion", "event_source": "iam.amazonaws.com", "principal": {"type": "AssumedRole", "arn": "arn:aws:sts::811596193553:assumed-role/SecurityMonkey/secmonkey", "account_id": "811596193553", "principal_id": "AROAUB2AA5FQRGAHITW4A:secmonkey", "user_name": null, "access_key_id": "ASIAI9QHHRMC9F6XQJXN", "session_issuer_arn": "arn:aws:iam::811596193553:role/SecurityMonkey", "session_issuer_user_name": "SecurityMonkey"}, "network": {"source_ip": "255.253.125.115", "user_agent": "Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56 Resource", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 1069, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "c102033e-3628-46a4-b697-83a2e3300e8d", "eventTime": "2017-05-27T04:59:49Z", "eventName": "GetPolicyVersion", "eventSource": "iam.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.253.125.115", "userAgent": "Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56 Resource", "awsRegion": "us-east-1", "userIdentity": {"type": "AssumedRole", "principalId": "AROAUB2AA5FQRGAHITW4A:secmonkey", "arn": "arn:aws:sts::811596193553:assumed-role/SecurityMonkey/secmonkey", "accountId": "811596193553", "accessKeyId": "ASIAI9QHHRMC9F6XQJXN", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2017-05-27T04:59:38Z"}, "sessionIssuer": {"type": "Role", "principalId": "AROAUB2AA5FQRGAHITW4A", "arn": "arn:aws:iam::811596193553:role/SecurityMonkey", "accountId": "811596193553", "userName": "SecurityMonkey"}}}, "requestParameters": {"policyArn": "arn:aws:iam::aws:policy/service-role/AmazonEC2SpotFleetRole", "versionId": "v3"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "4e48c3eb-400a-428a-8dc4-0130cc68c66b", "record_id": "flaws_cloudtrail:0000237:4e48c3eb-400a-428a-8dc4-0130cc68c66b", "row_index": 237, "timestamp": "2017-05-27T04:59:49Z", "event_type": "GetPolicyVersion", "event_source": "iam.amazonaws.com", "principal": {"type": "AssumedRole", "arn": "arn:aws:sts::811596193553:assumed-role/SecurityMonkey/secmonkey", "account_id": "811596193553", "principal_id": "AROAUB2AA5FQRGAHITW4A:secmonkey", "user_name": null, "access_key_id": "ASIAI9QHHRMC9F6XQJXN", "session_issuer_arn": "arn:aws:iam::811596193553:role/SecurityMonkey", "session_issuer_user_name": "SecurityMonkey"}, "network": {"source_ip": "255.253.125.115", "user_agent": "Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56 Resource", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 1061, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "4e48c3eb-400a-428a-8dc4-0130cc68c66b", "eventTime": "2017-05-27T04:59:49Z", "eventName": "GetPolicyVersion", "eventSource": "iam.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.253.125.115", "userAgent": "Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56 Resource", "awsRegion": "us-east-1", "userIdentity": {"type": "AssumedRole", "principalId": "AROAUB2AA5FQRGAHITW4A:secmonkey", "arn": "arn:aws:sts::811596193553:assumed-role/SecurityMonkey/secmonkey", "accountId": "811596193553", "accessKeyId": "ASIAI9QHHRMC9F6XQJXN", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2017-05-27T04:59:38Z"}, "sessionIssuer": {"type": "Role", "principalId": "AROAUB2AA5FQRGAHITW4A", "arn": "arn:aws:iam::811596193553:role/SecurityMonkey", "accountId": "811596193553", "userName": "SecurityMonkey"}}}, "requestParameters": {"policyArn": "arn:aws:iam::aws:policy/AWSCodeBuildDeveloperAccess", "versionId": "v1"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "a64f886d-47cf-472c-ad9f-44b27ff8e7da", "record_id": "flaws_cloudtrail:0000238:a64f886d-47cf-472c-ad9f-44b27ff8e7da", "row_index": 238, "timestamp": "2017-05-27T04:59:49Z", "event_type": "GetPolicyVersion", "event_source": "iam.amazonaws.com", "principal": {"type": "AssumedRole", "arn": "arn:aws:sts::811596193553:assumed-role/SecurityMonkey/secmonkey", "account_id": "811596193553", "principal_id": "AROAUB2AA5FQRGAHITW4A:secmonkey", "user_name": null, "access_key_id": "ASIAI9QHHRMC9F6XQJXN", "session_issuer_arn": "arn:aws:iam::811596193553:role/SecurityMonkey", "session_issuer_user_name": "SecurityMonkey"}, "network": {"source_ip": "255.253.125.115", "user_agent": "Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56 Resource", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 1078, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "a64f886d-47cf-472c-ad9f-44b27ff8e7da", "eventTime": "2017-05-27T04:59:49Z", "eventName": "GetPolicyVersion", "eventSource": "iam.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.253.125.115", "userAgent": "Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56 Resource", "awsRegion": "us-east-1", "userIdentity": {"type": "AssumedRole", "principalId": "AROAUB2AA5FQRGAHITW4A:secmonkey", "arn": "arn:aws:sts::811596193553:assumed-role/SecurityMonkey/secmonkey", "accountId": "811596193553", "accessKeyId": "ASIAI9QHHRMC9F6XQJXN", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2017-05-27T04:59:38Z"}, "sessionIssuer": {"type": "Role", "principalId": "AROAUB2AA5FQRGAHITW4A", "arn": "arn:aws:iam::811596193553:role/SecurityMonkey", "accountId": "811596193553", "userName": "SecurityMonkey"}}}, "requestParameters": {"policyArn": "arn:aws:iam::aws:policy/service-role/AmazonEC2SpotFleetAutoscaleRole", "versionId": "v1"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "19d064cd-c5e6-45a7-b5a2-69d73f863f52", "record_id": "flaws_cloudtrail:0000239:19d064cd-c5e6-45a7-b5a2-69d73f863f52", "row_index": 239, "timestamp": "2017-05-27T04:59:49Z", "event_type": "GetPolicyVersion", "event_source": "iam.amazonaws.com", "principal": {"type": "AssumedRole", "arn": "arn:aws:sts::811596193553:assumed-role/SecurityMonkey/secmonkey", "account_id": "811596193553", "principal_id": "AROAUB2AA5FQRGAHITW4A:secmonkey", "user_name": null, "access_key_id": "ASIAI9QHHRMC9F6XQJXN", "session_issuer_arn": "arn:aws:iam::811596193553:role/SecurityMonkey", "session_issuer_user_name": "SecurityMonkey"}, "network": {"source_ip": "255.253.125.115", "user_agent": "Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56 Resource", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 1055, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "19d064cd-c5e6-45a7-b5a2-69d73f863f52", "eventTime": "2017-05-27T04:59:49Z", "eventName": "GetPolicyVersion", "eventSource": "iam.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.253.125.115", "userAgent": "Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56 Resource", "awsRegion": "us-east-1", "userIdentity": {"type": "AssumedRole", "principalId": "AROAUB2AA5FQRGAHITW4A:secmonkey", "arn": "arn:aws:sts::811596193553:assumed-role/SecurityMonkey/secmonkey", "accountId": "811596193553", "accessKeyId": "ASIAI9QHHRMC9F6XQJXN", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2017-05-27T04:59:38Z"}, "sessionIssuer": {"type": "Role", "principalId": "AROAUB2AA5FQRGAHITW4A", "arn": "arn:aws:iam::811596193553:role/SecurityMonkey", "accountId": "811596193553", "userName": "SecurityMonkey"}}}, "requestParameters": {"policyArn": "arn:aws:iam::aws:policy/AWSCloudHSMFullAccess", "versionId": "v1"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "ac5957b2-515d-4534-adcb-79085b7c1dbf", "record_id": "flaws_cloudtrail:0000240:ac5957b2-515d-4534-adcb-79085b7c1dbf", "row_index": 240, "timestamp": "2017-05-27T04:59:49Z", "event_type": "GetPolicyVersion", "event_source": "iam.amazonaws.com", "principal": {"type": "AssumedRole", "arn": "arn:aws:sts::811596193553:assumed-role/SecurityMonkey/secmonkey", "account_id": "811596193553", "principal_id": "AROAUB2AA5FQRGAHITW4A:secmonkey", "user_name": null, "access_key_id": "ASIAI9QHHRMC9F6XQJXN", "session_issuer_arn": "arn:aws:iam::811596193553:role/SecurityMonkey", "session_issuer_user_name": "SecurityMonkey"}, "network": {"source_ip": "255.253.125.115", "user_agent": "Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56 Resource", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 1055, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "ac5957b2-515d-4534-adcb-79085b7c1dbf", "eventTime": "2017-05-27T04:59:49Z", "eventName": "GetPolicyVersion", "eventSource": "iam.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.253.125.115", "userAgent": "Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56 Resource", "awsRegion": "us-east-1", "userIdentity": {"type": "AssumedRole", "principalId": "AROAUB2AA5FQRGAHITW4A:secmonkey", "arn": "arn:aws:sts::811596193553:assumed-role/SecurityMonkey/secmonkey", "accountId": "811596193553", "accessKeyId": "ASIAI9QHHRMC9F6XQJXN", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2017-05-27T04:59:38Z"}, "sessionIssuer": {"type": "Role", "principalId": "AROAUB2AA5FQRGAHITW4A", "arn": "arn:aws:iam::811596193553:role/SecurityMonkey", "accountId": "811596193553", "userName": "SecurityMonkey"}}}, "requestParameters": {"policyArn": "arn:aws:iam::aws:policy/CloudSearchFullAccess", "versionId": "v1"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "a235d3c6-818b-46d3-b171-7362aa1f7d44", "record_id": "flaws_cloudtrail:0000241:a235d3c6-818b-46d3-b171-7362aa1f7d44", "row_index": 241, "timestamp": "2017-05-27T04:59:49Z", "event_type": "GetPolicyVersion", "event_source": "iam.amazonaws.com", "principal": {"type": "AssumedRole", "arn": "arn:aws:sts::811596193553:assumed-role/SecurityMonkey/secmonkey", "account_id": "811596193553", "principal_id": "AROAUB2AA5FQRGAHITW4A:secmonkey", "user_name": null, "access_key_id": "ASIAI9QHHRMC9F6XQJXN", "session_issuer_arn": "arn:aws:iam::811596193553:role/SecurityMonkey", "session_issuer_user_name": "SecurityMonkey"}, "network": {"source_ip": "255.253.125.115", "user_agent": "Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56 Resource", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 1061, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "a235d3c6-818b-46d3-b171-7362aa1f7d44", "eventTime": "2017-05-27T04:59:49Z", "eventName": "GetPolicyVersion", "eventSource": "iam.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.253.125.115", "userAgent": "Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56 Resource", "awsRegion": "us-east-1", "userIdentity": {"type": "AssumedRole", "principalId": "AROAUB2AA5FQRGAHITW4A:secmonkey", "arn": "arn:aws:sts::811596193553:assumed-role/SecurityMonkey/secmonkey", "accountId": "811596193553", "accessKeyId": "ASIAI9QHHRMC9F6XQJXN", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2017-05-27T04:59:38Z"}, "sessionIssuer": {"type": "Role", "principalId": "AROAUB2AA5FQRGAHITW4A", "arn": "arn:aws:iam::811596193553:role/SecurityMonkey", "accountId": "811596193553", "userName": "SecurityMonkey"}}}, "requestParameters": {"policyArn": "arn:aws:iam::aws:policy/AWSCodeDeployReadOnlyAccess", "versionId": "v1"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "04ec373e-dcb0-43de-ba21-3d333a029d7c", "record_id": "flaws_cloudtrail:0000242:04ec373e-dcb0-43de-ba21-3d333a029d7c", "row_index": 242, "timestamp": "2017-05-27T04:59:49Z", "event_type": "GetPolicyVersion", "event_source": "iam.amazonaws.com", "principal": {"type": "AssumedRole", "arn": "arn:aws:sts::811596193553:assumed-role/SecurityMonkey/secmonkey", "account_id": "811596193553", "principal_id": "AROAUB2AA5FQRGAHITW4A:secmonkey", "user_name": null, "access_key_id": "ASIAI9QHHRMC9F6XQJXN", "session_issuer_arn": "arn:aws:iam::811596193553:role/SecurityMonkey", "session_issuer_user_name": "SecurityMonkey"}, "network": {"source_ip": "255.253.125.115", "user_agent": "Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56 Resource", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 1077, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "04ec373e-dcb0-43de-ba21-3d333a029d7c", "eventTime": "2017-05-27T04:59:49Z", "eventName": "GetPolicyVersion", "eventSource": "iam.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.253.125.115", "userAgent": "Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56 Resource", "awsRegion": "us-east-1", "userIdentity": {"type": "AssumedRole", "principalId": "AROAUB2AA5FQRGAHITW4A:secmonkey", "arn": "arn:aws:sts::811596193553:assumed-role/SecurityMonkey/secmonkey", "accountId": "811596193553", "accessKeyId": "ASIAI9QHHRMC9F6XQJXN", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2017-05-27T04:59:38Z"}, "sessionIssuer": {"type": "Role", "principalId": "AROAUB2AA5FQRGAHITW4A", "arn": "arn:aws:iam::811596193553:role/SecurityMonkey", "accountId": "811596193553", "userName": "SecurityMonkey"}}}, "requestParameters": {"policyArn": "arn:aws:iam::aws:policy/AmazonMachineLearningBatchPredictionsAccess", "versionId": "v1"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "27a71b76-06d5-4cb1-8b5d-12f136cd3e6a", "record_id": "flaws_cloudtrail:0000243:27a71b76-06d5-4cb1-8b5d-12f136cd3e6a", "row_index": 243, "timestamp": "2017-05-27T04:59:49Z", "event_type": "GetPolicyVersion", "event_source": "iam.amazonaws.com", "principal": {"type": "AssumedRole", "arn": "arn:aws:sts::811596193553:assumed-role/SecurityMonkey/secmonkey", "account_id": "811596193553", "principal_id": "AROAUB2AA5FQRGAHITW4A:secmonkey", "user_name": null, "access_key_id": "ASIAI9QHHRMC9F6XQJXN", "session_issuer_arn": "arn:aws:iam::811596193553:role/SecurityMonkey", "session_issuer_user_name": "SecurityMonkey"}, "network": {"source_ip": "255.253.125.115", "user_agent": "Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56 Resource", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 1049, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "27a71b76-06d5-4cb1-8b5d-12f136cd3e6a", "eventTime": "2017-05-27T04:59:49Z", "eventName": "GetPolicyVersion", "eventSource": "iam.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.253.125.115", "userAgent": "Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56 Resource", "awsRegion": "us-east-1", "userIdentity": {"type": "AssumedRole", "principalId": "AROAUB2AA5FQRGAHITW4A:secmonkey", "arn": "arn:aws:sts::811596193553:assumed-role/SecurityMonkey/secmonkey", "accountId": "811596193553", "accessKeyId": "ASIAI9QHHRMC9F6XQJXN", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2017-05-27T04:59:38Z"}, "sessionIssuer": {"type": "Role", "principalId": "AROAUB2AA5FQRGAHITW4A", "arn": "arn:aws:iam::811596193553:role/SecurityMonkey", "accountId": "811596193553", "userName": "SecurityMonkey"}}}, "requestParameters": {"policyArn": "arn:aws:iam::aws:policy/ReadOnlyAccess", "versionId": "v26"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "569b4fd4-96af-4c33-9635-586b90ca33d9", "record_id": "flaws_cloudtrail:0000244:569b4fd4-96af-4c33-9635-586b90ca33d9", "row_index": 244, "timestamp": "2017-05-27T04:59:49Z", "event_type": "GetPolicyVersion", "event_source": "iam.amazonaws.com", "principal": {"type": "AssumedRole", "arn": "arn:aws:sts::811596193553:assumed-role/SecurityMonkey/secmonkey", "account_id": "811596193553", "principal_id": "AROAUB2AA5FQRGAHITW4A:secmonkey", "user_name": null, "access_key_id": "ASIAI9QHHRMC9F6XQJXN", "session_issuer_arn": "arn:aws:iam::811596193553:role/SecurityMonkey", "session_issuer_user_name": "SecurityMonkey"}, "network": {"source_ip": "255.253.125.115", "user_agent": "Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56 Resource", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 1065, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "569b4fd4-96af-4c33-9635-586b90ca33d9", "eventTime": "2017-05-27T04:59:49Z", "eventName": "GetPolicyVersion", "eventSource": "iam.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.253.125.115", "userAgent": "Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56 Resource", "awsRegion": "us-east-1", "userIdentity": {"type": "AssumedRole", "principalId": "AROAUB2AA5FQRGAHITW4A:secmonkey", "arn": "arn:aws:sts::811596193553:assumed-role/SecurityMonkey/secmonkey", "accountId": "811596193553", "accessKeyId": "ASIAI9QHHRMC9F6XQJXN", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2017-05-27T04:59:38Z"}, "sessionIssuer": {"type": "Role", "principalId": "AROAUB2AA5FQRGAHITW4A", "arn": "arn:aws:iam::811596193553:role/SecurityMonkey", "accountId": "811596193553", "userName": "SecurityMonkey"}}}, "requestParameters": {"policyArn": "arn:aws:iam::aws:policy/AmazonRekognitionReadOnlyAccess", "versionId": "v1"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "f87bb777-6018-4f74-9b17-c6c10575c2c5", "record_id": "flaws_cloudtrail:0000245:f87bb777-6018-4f74-9b17-c6c10575c2c5", "row_index": 245, "timestamp": "2017-05-27T04:59:50Z", "event_type": "AssumeRole", "event_source": "sts.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/SecurityMokey", "account_id": "811596193553", "principal_id": "AIDAQ9SRE1SZZZ4Q4UOJH", "user_name": "SecurityMokey", "access_key_id": "AKIAXJ0III4JBKZDXGXN", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "255.253.125.115", "user_agent": "Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56", "aws_region": "us-east-1"}, "resource_arns": ["arn:aws:iam::811596193553:role/SecurityMonkey"], "raw_record_size_bytes": 1450, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "resources", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "f87bb777-6018-4f74-9b17-c6c10575c2c5", "eventTime": "2017-05-27T04:59:50Z", "eventName": "AssumeRole", "eventSource": "sts.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.253.125.115", "userAgent": "Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDAQ9SRE1SZZZ4Q4UOJH", "arn": "arn:aws:iam::811596193553:user/SecurityMokey", "accountId": "811596193553", "accessKeyId": "AKIAXJ0III4JBKZDXGXN", "userName": "SecurityMokey"}, "requestParameters": {"roleArn": "arn:aws:iam::811596193553:role/SecurityMonkey", "roleSessionName": "secmonkey"}, "responseElements": {"credentials": {"accessKeyId": "ASIA5SX1F2U0GG6M1JZO", "expiration": "May 27, 2017 5:59:50 AM", "sessionToken": "FQoDYXdzECYaDDa1e2V4EZx6b+5kiyLMAZQklbIJ1ZiZvUXk+ksXJnZHE4zCoXNpNCckiRHddS2jfC/cAtOCmr5YCRaXiQ4G5DxYJwSKS1+bJRz7PRk+LjaFgFv1tMZRbt0xl1mdGM+wM1jZrzUWR29c0U+zUkLsg0cN6HXSKct8kLAYhNVzAF98edQT6B7jrf+Gr5VtxPMM03TXnJHw/4JwFUNntzjVRH93qWVtJaGXnL9yrdPSRdx1DlTI3+9s7S2z5eedGHItqWs2Chj9e+xKq+N9YR14p3SKDf9imSpibPaQ0SjGj6TJBQ=="}, "assumedRoleUser": {"assumedRoleId": "AROAUB2AA5FQRGAHITW4A:secmonkey", "arn": "arn:aws:sts::811596193553:assumed-role/SecurityMonkey/secmonkey"}}, "resources": [{"ARN": "arn:aws:iam::811596193553:role/SecurityMonkey", "accountId": "811596193553", "type": "AWS::IAM::Role"}]}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "6c59a9bb-1020-4b93-b5ac-78796b9c1f7a", "record_id": "flaws_cloudtrail:0000246:6c59a9bb-1020-4b93-b5ac-78796b9c1f7a", "row_index": 246, "timestamp": "2017-05-27T04:59:50Z", "event_type": "GetPolicyVersion", "event_source": "iam.amazonaws.com", "principal": {"type": "AssumedRole", "arn": "arn:aws:sts::811596193553:assumed-role/SecurityMonkey/secmonkey", "account_id": "811596193553", "principal_id": "AROAUB2AA5FQRGAHITW4A:secmonkey", "user_name": null, "access_key_id": "ASIAI9QHHRMC9F6XQJXN", "session_issuer_arn": "arn:aws:iam::811596193553:role/SecurityMonkey", "session_issuer_user_name": "SecurityMonkey"}, "network": {"source_ip": "255.253.125.115", "user_agent": "Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56 Resource", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 1077, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "6c59a9bb-1020-4b93-b5ac-78796b9c1f7a", "eventTime": "2017-05-27T04:59:50Z", "eventName": "GetPolicyVersion", "eventSource": "iam.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.253.125.115", "userAgent": "Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56 Resource", "awsRegion": "us-east-1", "userIdentity": {"type": "AssumedRole", "principalId": "AROAUB2AA5FQRGAHITW4A:secmonkey", "arn": "arn:aws:sts::811596193553:assumed-role/SecurityMonkey/secmonkey", "accountId": "811596193553", "accessKeyId": "ASIAI9QHHRMC9F6XQJXN", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2017-05-27T04:59:38Z"}, "sessionIssuer": {"type": "Role", "principalId": "AROAUB2AA5FQRGAHITW4A", "arn": "arn:aws:iam::811596193553:role/SecurityMonkey", "accountId": "811596193553", "userName": "SecurityMonkey"}}}, "requestParameters": {"policyArn": "arn:aws:iam::aws:policy/service-role/AWSLambdaDynamoDBExecutionRole", "versionId": "v1"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "65639f7-210e-4778-8c9c-6aad78094380", "record_id": "flaws_cloudtrail:0000247:65639f7-210e-4778-8c9c-6aad78094380", "row_index": 247, "timestamp": "2017-05-27T04:59:50Z", "event_type": "GetPolicyVersion", "event_source": "iam.amazonaws.com", "principal": {"type": "AssumedRole", "arn": "arn:aws:sts::811596193553:assumed-role/SecurityMonkey/secmonkey", "account_id": "811596193553", "principal_id": "AROAUB2AA5FQRGAHITW4A:secmonkey", "user_name": null, "access_key_id": "ASIAI9QHHRMC9F6XQJXN", "session_issuer_arn": "arn:aws:iam::811596193553:role/SecurityMonkey", "session_issuer_user_name": "SecurityMonkey"}, "network": {"source_ip": "255.253.125.115", "user_agent": "Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56 Resource", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 1059, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "65639f7-210e-4778-8c9c-6aad78094380", "eventTime": "2017-05-27T04:59:50Z", "eventName": "GetPolicyVersion", "eventSource": "iam.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.253.125.115", "userAgent": "Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56 Resource", "awsRegion": "us-east-1", "userIdentity": {"type": "AssumedRole", "principalId": "AROAUB2AA5FQRGAHITW4A:secmonkey", "arn": "arn:aws:sts::811596193553:assumed-role/SecurityMonkey/secmonkey", "accountId": "811596193553", "accessKeyId": "ASIAI9QHHRMC9F6XQJXN", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2017-05-27T04:59:38Z"}, "sessionIssuer": {"type": "Role", "principalId": "AROAUB2AA5FQRGAHITW4A", "arn": "arn:aws:iam::811596193553:role/SecurityMonkey", "accountId": "811596193553", "userName": "SecurityMonkey"}}}, "requestParameters": {"policyArn": "arn:aws:iam::aws:policy/CloudWatchActionsEC2Access", "versionId": "v1"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "7bfd8901-9cce-447a-9928-5361dc041f29", "record_id": "flaws_cloudtrail:0000248:7bfd8901-9cce-447a-9928-5361dc041f29", "row_index": 248, "timestamp": "2017-05-27T04:59:50Z", "event_type": "GetPolicyVersion", "event_source": "iam.amazonaws.com", "principal": {"type": "AssumedRole", "arn": "arn:aws:sts::811596193553:assumed-role/SecurityMonkey/secmonkey", "account_id": "811596193553", "principal_id": "AROAUB2AA5FQRGAHITW4A:secmonkey", "user_name": null, "access_key_id": "ASIAI9QHHRMC9F6XQJXN", "session_issuer_arn": "arn:aws:iam::811596193553:role/SecurityMonkey", "session_issuer_user_name": "SecurityMonkey"}, "network": {"source_ip": "255.253.125.115", "user_agent": "Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56 Resource", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 1057, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "7bfd8901-9cce-447a-9928-5361dc041f29", "eventTime": "2017-05-27T04:59:50Z", "eventName": "GetPolicyVersion", "eventSource": "iam.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.253.125.115", "userAgent": "Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56 Resource", "awsRegion": "us-east-1", "userIdentity": {"type": "AssumedRole", "principalId": "AROAUB2AA5FQRGAHITW4A:secmonkey", "arn": "arn:aws:sts::811596193553:assumed-role/SecurityMonkey/secmonkey", "accountId": "811596193553", "accessKeyId": "ASIAI9QHHRMC9F6XQJXN", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2017-05-27T04:59:38Z"}, "sessionIssuer": {"type": "Role", "principalId": "AROAUB2AA5FQRGAHITW4A", "arn": "arn:aws:iam::811596193553:role/SecurityMonkey", "accountId": "811596193553", "userName": "SecurityMonkey"}}}, "requestParameters": {"policyArn": "arn:aws:iam::aws:policy/AWSCodeDeployFullAccess", "versionId": "v1"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "825e0d98-2dbd-46ca-93c8-700383b7c560", "record_id": "flaws_cloudtrail:0000249:825e0d98-2dbd-46ca-93c8-700383b7c560", "row_index": 249, "timestamp": "2017-05-27T04:59:50Z", "event_type": "GetPolicyVersion", "event_source": "iam.amazonaws.com", "principal": {"type": "AssumedRole", "arn": "arn:aws:sts::811596193553:assumed-role/SecurityMonkey/secmonkey", "account_id": "811596193553", "principal_id": "AROAUB2AA5FQRGAHITW4A:secmonkey", "user_name": null, "access_key_id": "ASIAI9QHHRMC9F6XQJXN", "session_issuer_arn": "arn:aws:iam::811596193553:role/SecurityMonkey", "session_issuer_user_name": "SecurityMonkey"}, "network": {"source_ip": "255.253.125.115", "user_agent": "Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56 Resource", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 1059, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "825e0d98-2dbd-46ca-93c8-700383b7c560", "eventTime": "2017-05-27T04:59:50Z", "eventName": "GetPolicyVersion", "eventSource": "iam.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.253.125.115", "userAgent": "Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56 Resource", "awsRegion": "us-east-1", "userIdentity": {"type": "AssumedRole", "principalId": "AROAUB2AA5FQRGAHITW4A:secmonkey", "arn": "arn:aws:sts::811596193553:assumed-role/SecurityMonkey/secmonkey", "accountId": "811596193553", "accessKeyId": "ASIAI9QHHRMC9F6XQJXN", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2017-05-27T04:59:38Z"}, "sessionIssuer": {"type": "Role", "principalId": "AROAUB2AA5FQRGAHITW4A", "arn": "arn:aws:iam::811596193553:role/SecurityMonkey", "accountId": "811596193553", "userName": "SecurityMonkey"}}}, "requestParameters": {"policyArn": "arn:aws:iam::aws:policy/AmazonKinesisReadOnlyAccess", "versionId": "v1"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "3d7d1d3a-ab7c-427f-afc6-4d6c10d2a881", "record_id": "flaws_cloudtrail:0000250:3d7d1d3a-ab7c-427f-afc6-4d6c10d2a881", "row_index": 250, "timestamp": "2017-05-27T04:59:50Z", "event_type": "GetPolicyVersion", "event_source": "iam.amazonaws.com", "principal": {"type": "AssumedRole", "arn": "arn:aws:sts::811596193553:assumed-role/SecurityMonkey/secmonkey", "account_id": "811596193553", "principal_id": "AROAUB2AA5FQRGAHITW4A:secmonkey", "user_name": null, "access_key_id": "ASIAI9QHHRMC9F6XQJXN", "session_issuer_arn": "arn:aws:iam::811596193553:role/SecurityMonkey", "session_issuer_user_name": "SecurityMonkey"}, "network": {"source_ip": "255.253.125.115", "user_agent": "Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56 Resource", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 1062, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "3d7d1d3a-ab7c-427f-afc6-4d6c10d2a881", "eventTime": "2017-05-27T04:59:50Z", "eventName": "GetPolicyVersion", "eventSource": "iam.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.253.125.115", "userAgent": "Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56 Resource", "awsRegion": "us-east-1", "userIdentity": {"type": "AssumedRole", "principalId": "AROAUB2AA5FQRGAHITW4A:secmonkey", "arn": "arn:aws:sts::811596193553:assumed-role/SecurityMonkey/secmonkey", "accountId": "811596193553", "accessKeyId": "ASIAI9QHHRMC9F6XQJXN", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2017-05-27T04:59:38Z"}, "sessionIssuer": {"type": "Role", "principalId": "AROAUB2AA5FQRGAHITW4A", "arn": "arn:aws:iam::811596193553:role/SecurityMonkey", "accountId": "811596193553", "userName": "SecurityMonkey"}}}, "requestParameters": {"policyArn": "arn:aws:iam::aws:policy/AmazonMechanicalTurkReadOnly", "versionId": "v2"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "def4294d-3d1d-4268-ad44-d769dbdedd79", "record_id": "flaws_cloudtrail:0000251:def4294d-3d1d-4268-ad44-d769dbdedd79", "row_index": 251, "timestamp": "2017-05-27T04:59:50Z", "event_type": "GetPolicyVersion", "event_source": "iam.amazonaws.com", "principal": {"type": "AssumedRole", "arn": "arn:aws:sts::811596193553:assumed-role/SecurityMonkey/secmonkey", "account_id": "811596193553", "principal_id": "AROAUB2AA5FQRGAHITW4A:secmonkey", "user_name": null, "access_key_id": "ASIAI9QHHRMC9F6XQJXN", "session_issuer_arn": "arn:aws:iam::811596193553:role/SecurityMonkey", "session_issuer_user_name": "SecurityMonkey"}, "network": {"source_ip": "255.253.125.115", "user_agent": "Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56 Resource", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 1080, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "def4294d-3d1d-4268-ad44-d769dbdedd79", "eventTime": "2017-05-27T04:59:50Z", "eventName": "GetPolicyVersion", "eventSource": "iam.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.253.125.115", "userAgent": "Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56 Resource", "awsRegion": "us-east-1", "userIdentity": {"type": "AssumedRole", "principalId": "AROAUB2AA5FQRGAHITW4A:secmonkey", "arn": "arn:aws:sts::811596193553:assumed-role/SecurityMonkey/secmonkey", "accountId": "811596193553", "accessKeyId": "ASIAI9QHHRMC9F6XQJXN", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2017-05-27T04:59:38Z"}, "sessionIssuer": {"type": "Role", "principalId": "AROAUB2AA5FQRGAHITW4A", "arn": "arn:aws:iam::811596193553:role/SecurityMonkey", "accountId": "811596193553", "userName": "SecurityMonkey"}}}, "requestParameters": {"policyArn": "arn:aws:iam::aws:policy/service-role/AutoScalingNotificationAccessRole", "versionId": "v1"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "6efc1cd3-58f1-4636-a9d8-2eedfce93be7", "record_id": "flaws_cloudtrail:0000252:6efc1cd3-58f1-4636-a9d8-2eedfce93be7", "row_index": 252, "timestamp": "2017-05-27T04:59:50Z", "event_type": "GetPolicyVersion", "event_source": "iam.amazonaws.com", "principal": {"type": "AssumedRole", "arn": "arn:aws:sts::811596193553:assumed-role/SecurityMonkey/secmonkey", "account_id": "811596193553", "principal_id": "AROAUB2AA5FQRGAHITW4A:secmonkey", "user_name": null, "access_key_id": "ASIAI9QHHRMC9F6XQJXN", "session_issuer_arn": "arn:aws:iam::811596193553:role/SecurityMonkey", "session_issuer_user_name": "SecurityMonkey"}, "network": {"source_ip": "255.253.125.115", "user_agent": "Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56 Resource", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 1054, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "6efc1cd3-58f1-4636-a9d8-2eedfce93be7", "eventTime": "2017-05-27T04:59:50Z", "eventName": "GetPolicyVersion", "eventSource": "iam.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.253.125.115", "userAgent": "Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56 Resource", "awsRegion": "us-east-1", "userIdentity": {"type": "AssumedRole", "principalId": "AROAUB2AA5FQRGAHITW4A:secmonkey", "arn": "arn:aws:sts::811596193553:assumed-role/SecurityMonkey/secmonkey", "accountId": "811596193553", "accessKeyId": "ASIAI9QHHRMC9F6XQJXN", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2017-05-27T04:59:38Z"}, "sessionIssuer": {"type": "Role", "principalId": "AROAUB2AA5FQRGAHITW4A", "arn": "arn:aws:iam::811596193553:role/SecurityMonkey", "accountId": "811596193553", "userName": "SecurityMonkey"}}}, "requestParameters": {"policyArn": "arn:aws:iam::aws:policy/AWSWAFReadOnlyAccess", "versionId": "v2"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "fd895bc8-c473-4bae-9696-b4b4abdbc7b3", "record_id": "flaws_cloudtrail:0000253:fd895bc8-c473-4bae-9696-b4b4abdbc7b3", "row_index": 253, "timestamp": "2017-05-27T04:59:50Z", "event_type": "GetPolicyVersion", "event_source": "iam.amazonaws.com", "principal": {"type": "AssumedRole", "arn": "arn:aws:sts::811596193553:assumed-role/SecurityMonkey/secmonkey", "account_id": "811596193553", "principal_id": "AROAUB2AA5FQRGAHITW4A:secmonkey", "user_name": null, "access_key_id": "ASIAI9QHHRMC9F6XQJXN", "session_issuer_arn": "arn:aws:iam::811596193553:role/SecurityMonkey", "session_issuer_user_name": "SecurityMonkey"}, "network": {"source_ip": "255.253.125.115", "user_agent": "Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56 Resource", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 1057, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "fd895bc8-c473-4bae-9696-b4b4abdbc7b3", "eventTime": "2017-05-27T04:59:50Z", "eventName": "GetPolicyVersion", "eventSource": "iam.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.253.125.115", "userAgent": "Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56 Resource", "awsRegion": "us-east-1", "userIdentity": {"type": "AssumedRole", "principalId": "AROAUB2AA5FQRGAHITW4A:secmonkey", "arn": "arn:aws:sts::811596193553:assumed-role/SecurityMonkey/secmonkey", "accountId": "811596193553", "accessKeyId": "ASIAI9QHHRMC9F6XQJXN", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2017-05-27T04:59:38Z"}, "sessionIssuer": {"type": "Role", "principalId": "AROAUB2AA5FQRGAHITW4A", "arn": "arn:aws:iam::811596193553:role/SecurityMonkey", "accountId": "811596193553", "userName": "SecurityMonkey"}}}, "requestParameters": {"policyArn": "arn:aws:iam::aws:policy/AmazonSESReadOnlyAccess", "versionId": "v1"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "622d5205-898e-4a0e-b2a8-cd9dcd2e676d", "record_id": "flaws_cloudtrail:0000254:622d5205-898e-4a0e-b2a8-cd9dcd2e676d", "row_index": 254, "timestamp": "2017-05-27T04:59:50Z", "event_type": "GetPolicyVersion", "event_source": "iam.amazonaws.com", "principal": {"type": "AssumedRole", "arn": "arn:aws:sts::811596193553:assumed-role/SecurityMonkey/secmonkey", "account_id": "811596193553", "principal_id": "AROAUB2AA5FQRGAHITW4A:secmonkey", "user_name": null, "access_key_id": "ASIAI9QHHRMC9F6XQJXN", "session_issuer_arn": "arn:aws:iam::811596193553:role/SecurityMonkey", "session_issuer_user_name": "SecurityMonkey"}, "network": {"source_ip": "255.253.125.115", "user_agent": "Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56 Resource", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 1058, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "622d5205-898e-4a0e-b2a8-cd9dcd2e676d", "eventTime": "2017-05-27T04:59:50Z", "eventName": "GetPolicyVersion", "eventSource": "iam.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.253.125.115", "userAgent": "Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56 Resource", "awsRegion": "us-east-1", "userIdentity": {"type": "AssumedRole", "principalId": "AROAUB2AA5FQRGAHITW4A:secmonkey", "arn": "arn:aws:sts::811596193553:assumed-role/SecurityMonkey/secmonkey", "accountId": "811596193553", "accessKeyId": "ASIAI9QHHRMC9F6XQJXN", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2017-05-27T04:59:38Z"}, "sessionIssuer": {"type": "Role", "principalId": "AROAUB2AA5FQRGAHITW4A", "arn": "arn:aws:iam::811596193553:role/SecurityMonkey", "accountId": "811596193553", "userName": "SecurityMonkey"}}}, "requestParameters": {"policyArn": "arn:aws:iam::aws:policy/AmazonDynamoDBFullAccess", "versionId": "v2"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "6c1570f0-51b8-40f6-b845-cee6a237754af", "record_id": "flaws_cloudtrail:0000255:6c1570f0-51b8-40f6-b845-cee6a237754af", "row_index": 255, "timestamp": "2017-05-27T04:59:50Z", "event_type": "GetPolicyVersion", "event_source": "iam.amazonaws.com", "principal": {"type": "AssumedRole", "arn": "arn:aws:sts::811596193553:assumed-role/SecurityMonkey/secmonkey", "account_id": "811596193553", "principal_id": "AROAUB2AA5FQRGAHITW4A:secmonkey", "user_name": null, "access_key_id": "ASIAI9QHHRMC9F6XQJXN", "session_issuer_arn": "arn:aws:iam::811596193553:role/SecurityMonkey", "session_issuer_user_name": "SecurityMonkey"}, "network": {"source_ip": "255.253.125.115", "user_agent": "Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56 Resource", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 1064, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "6c1570f0-51b8-40f6-b845-cee6a237754af", "eventTime": "2017-05-27T04:59:50Z", "eventName": "GetPolicyVersion", "eventSource": "iam.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.253.125.115", "userAgent": "Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56 Resource", "awsRegion": "us-east-1", "userIdentity": {"type": "AssumedRole", "principalId": "AROAUB2AA5FQRGAHITW4A:secmonkey", "arn": "arn:aws:sts::811596193553:assumed-role/SecurityMonkey/secmonkey", "accountId": "811596193553", "accessKeyId": "ASIAI9QHHRMC9F6XQJXN", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2017-05-27T04:59:38Z"}, "sessionIssuer": {"type": "Role", "principalId": "AROAUB2AA5FQRGAHITW4A", "arn": "arn:aws:iam::811596193553:role/SecurityMonkey", "accountId": "811596193553", "userName": "SecurityMonkey"}}}, "requestParameters": {"policyArn": "arn:aws:iam::aws:policy/AWSDirectoryServiceFullAccess", "versionId": "v2"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "efd7bfd4-022b-4273-ad13-fce001b616aa", "record_id": "flaws_cloudtrail:0000256:efd7bfd4-022b-4273-ad13-fce001b616aa", "row_index": 256, "timestamp": "2017-05-27T04:59:50Z", "event_type": "GetPolicyVersion", "event_source": "iam.amazonaws.com", "principal": {"type": "AssumedRole", "arn": "arn:aws:sts::811596193553:assumed-role/SecurityMonkey/secmonkey", "account_id": "811596193553", "principal_id": "AROAUB2AA5FQRGAHITW4A:secmonkey", "user_name": null, "access_key_id": "ASIAI9QHHRMC9F6XQJXN", "session_issuer_arn": "arn:aws:iam::811596193553:role/SecurityMonkey", "session_issuer_user_name": "SecurityMonkey"}, "network": {"source_ip": "255.253.125.115", "user_agent": "Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56 Resource", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 1067, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "efd7bfd4-022b-4273-ad13-fce001b616aa", "eventTime": "2017-05-27T04:59:50Z", "eventName": "GetPolicyVersion", "eventSource": "iam.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.253.125.115", "userAgent": "Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56 Resource", "awsRegion": "us-east-1", "userIdentity": {"type": "AssumedRole", "principalId": "AROAUB2AA5FQRGAHITW4A:secmonkey", "arn": "arn:aws:sts::811596193553:assumed-role/SecurityMonkey/secmonkey", "accountId": "811596193553", "accessKeyId": "ASIAI9QHHRMC9F6XQJXN", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2017-05-27T04:59:38Z"}, "sessionIssuer": {"type": "Role", "principalId": "AROAUB2AA5FQRGAHITW4A", "arn": "arn:aws:iam::811596193553:role/SecurityMonkey", "accountId": "811596193553", "userName": "SecurityMonkey"}}}, "requestParameters": {"policyArn": "arn:aws:iam::aws:policy/service-role/AWSCodeStarServiceRole", "versionId": "v1"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "832c9038-c930-44b8-a236-d5e3edd746e3", "record_id": "flaws_cloudtrail:0000257:832c9038-c930-44b8-a236-d5e3edd746e3", "row_index": 257, "timestamp": "2017-05-27T04:59:51Z", "event_type": "AssumeRole", "event_source": "sts.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/SecurityMokey", "account_id": "811596193553", "principal_id": "AIDAQ9SRE1SZZZ4Q4UOJH", "user_name": "SecurityMokey", "access_key_id": "AKIAXJ0III4JBKZDXGXN", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "255.253.125.115", "user_agent": "Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56", "aws_region": "us-east-1"}, "resource_arns": ["arn:aws:iam::811596193553:role/SecurityMonkey"], "raw_record_size_bytes": 1453, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "resources", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "832c9038-c930-44b8-a236-d5e3edd746e3", "eventTime": "2017-05-27T04:59:51Z", "eventName": "AssumeRole", "eventSource": "sts.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.253.125.115", "userAgent": "Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDAQ9SRE1SZZZ4Q4UOJH", "arn": "arn:aws:iam::811596193553:user/SecurityMokey", "accountId": "811596193553", "accessKeyId": "AKIAXJ0III4JBKZDXGXN", "userName": "SecurityMokey"}, "requestParameters": {"roleArn": "arn:aws:iam::811596193553:role/SecurityMonkey", "roleSessionName": "secmonkey"}, "responseElements": {"credentials": {"accessKeyId": "ASIAKQJJB2ZE812YJ345", "expiration": "May 27, 2017 5:59:51 AM", "sessionToken": "FQoDYXdzECYaDA/l767jVeUubL21xSLMAfAEB1g/RMiCNFyNM/hD7OH3/oO8Rd4pNxNpJBuFuDKXY8AjqIUSrR/DOL3hsHizWD0l+AK1FBv/9E5ZtJ6yPog9MQ0r9XucItLVLwXlDDE9L3uh7/iCmJOJy0IYJv5/e7+csT+K5fgXkEiX1S3t/JGmHWR4RzpeQeNX1kkLL+QygZMt5Zbq6pTPaxeGXxOIVPVfCPASHB7C7L2ylzJA1jjq6SEB2RSFybeFPMT00JYCIvYmcJIKduBpWqPhpfs6rC57QWfMbwoMpXnDZCjHj6TJBQ=="}, "assumedRoleUser": {"assumedRoleId": "AROAUB2AA5FQRGAHITW4A:secmonkey", "arn": "arn:aws:sts::811596193553:assumed-role/SecurityMonkey/secmonkey"}}, "resources": [{"ARN": "arn:aws:iam::811596193553:role/SecurityMonkey", "accountId": "811596193553", "type": "AWS::IAM::Role"}]}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "16cff9fe-7274-47f3-a98b-0ec4f8465d2a", "record_id": "flaws_cloudtrail:0000258:16cff9fe-7274-47f3-a98b-0ec4f8465d2a", "row_index": 258, "timestamp": "2017-05-27T04:59:51Z", "event_type": "GetPolicyVersion", "event_source": "iam.amazonaws.com", "principal": {"type": "AssumedRole", "arn": "arn:aws:sts::811596193553:assumed-role/SecurityMonkey/secmonkey", "account_id": "811596193553", "principal_id": "AROAUB2AA5FQRGAHITW4A:secmonkey", "user_name": null, "access_key_id": "ASIAI9QHHRMC9F6XQJXN", "session_issuer_arn": "arn:aws:iam::811596193553:role/SecurityMonkey", "session_issuer_user_name": "SecurityMonkey"}, "network": {"source_ip": "255.253.125.115", "user_agent": "Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56 Resource", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 1064, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "16cff9fe-7274-47f3-a98b-0ec4f8465d2a", "eventTime": "2017-05-27T04:59:51Z", "eventName": "GetPolicyVersion", "eventSource": "iam.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.253.125.115", "userAgent": "Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56 Resource", "awsRegion": "us-east-1", "userIdentity": {"type": "AssumedRole", "principalId": "AROAUB2AA5FQRGAHITW4A:secmonkey", "arn": "arn:aws:sts::811596193553:assumed-role/SecurityMonkey/secmonkey", "accountId": "811596193553", "accessKeyId": "ASIAI9QHHRMC9F6XQJXN", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2017-05-27T04:59:38Z"}, "sessionIssuer": {"type": "Role", "principalId": "AROAUB2AA5FQRGAHITW4A", "arn": "arn:aws:iam::811596193553:role/SecurityMonkey", "accountId": "811596193553", "userName": "SecurityMonkey"}}}, "requestParameters": {"policyArn": "arn:aws:iam::aws:policy/AmazonRoute53DomainsFullAccess", "versionId": "v1"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "3ffdabce-310d-4113-9457-43f749bd714b", "record_id": "flaws_cloudtrail:0000259:3ffdabce-310d-4113-9457-43f749bd714b", "row_index": 259, "timestamp": "2017-05-27T04:59:51Z", "event_type": "GetPolicyVersion", "event_source": "iam.amazonaws.com", "principal": {"type": "AssumedRole", "arn": "arn:aws:sts::811596193553:assumed-role/SecurityMonkey/secmonkey", "account_id": "811596193553", "principal_id": "AROAUB2AA5FQRGAHITW4A:secmonkey", "user_name": null, "access_key_id": "ASIAI9QHHRMC9F6XQJXN", "session_issuer_arn": "arn:aws:iam::811596193553:role/SecurityMonkey", "session_issuer_user_name": "SecurityMonkey"}, "network": {"source_ip": "255.253.125.115", "user_agent": "Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56 Resource", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 1066, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "3ffdabce-310d-4113-9457-43f749bd714b", "eventTime": "2017-05-27T04:59:51Z", "eventName": "GetPolicyVersion", "eventSource": "iam.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.253.125.115", "userAgent": "Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56 Resource", "awsRegion": "us-east-1", "userIdentity": {"type": "AssumedRole", "principalId": "AROAUB2AA5FQRGAHITW4A:secmonkey", "arn": "arn:aws:sts::811596193553:assumed-role/SecurityMonkey/secmonkey", "accountId": "811596193553", "accessKeyId": "ASIAI9QHHRMC9F6XQJXN", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2017-05-27T04:59:38Z"}, "sessionIssuer": {"type": "Role", "principalId": "AROAUB2AA5FQRGAHITW4A", "arn": "arn:aws:iam::811596193553:role/SecurityMonkey", "accountId": "811596193553", "userName": "SecurityMonkey"}}}, "requestParameters": {"policyArn": "arn:aws:iam::aws:policy/AmazonElastiCacheReadOnlyAccess", "versionId": "v1"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "643cb3b0-4483-4f3a-b292-9dfe7758f0b5", "record_id": "flaws_cloudtrail:0000260:643cb3b0-4483-4f3a-b292-9dfe7758f0b5", "row_index": 260, "timestamp": "2017-05-27T04:59:51Z", "event_type": "GetPolicyVersion", "event_source": "iam.amazonaws.com", "principal": {"type": "AssumedRole", "arn": "arn:aws:sts::811596193553:assumed-role/SecurityMonkey/secmonkey", "account_id": "811596193553", "principal_id": "AROAUB2AA5FQRGAHITW4A:secmonkey", "user_name": null, "access_key_id": "ASIAI9QHHRMC9F6XQJXN", "session_issuer_arn": "arn:aws:iam::811596193553:role/SecurityMonkey", "session_issuer_user_name": "SecurityMonkey"}, "network": {"source_ip": "255.253.125.115", "user_agent": "Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56 Resource", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 1056, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "643cb3b0-4483-4f3a-b292-9dfe7758f0b5", "eventTime": "2017-05-27T04:59:51Z", "eventName": "GetPolicyVersion", "eventSource": "iam.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.253.125.115", "userAgent": "Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56 Resource", "awsRegion": "us-east-1", "userIdentity": {"type": "AssumedRole", "principalId": "AROAUB2AA5FQRGAHITW4A:secmonkey", "arn": "arn:aws:sts::811596193553:assumed-role/SecurityMonkey/secmonkey", "accountId": "811596193553", "accessKeyId": "ASIAI9QHHRMC9F6XQJXN", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2017-05-27T04:59:38Z"}, "sessionIssuer": {"type": "Role", "principalId": "AROAUB2AA5FQRGAHITW4A", "arn": "arn:aws:iam::811596193553:role/SecurityMonkey", "accountId": "811596193553", "userName": "SecurityMonkey"}}}, "requestParameters": {"policyArn": "arn:aws:iam::aws:policy/AmazonAthenaFullAccess", "versionId": "v1"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "422c6b5b-ef8d-45ef-a0c4-0b2efa55c665", "record_id": "flaws_cloudtrail:0000261:422c6b5b-ef8d-45ef-a0c4-0b2efa55c665", "row_index": 261, "timestamp": "2017-05-27T04:59:51Z", "event_type": "GetPolicyVersion", "event_source": "iam.amazonaws.com", "principal": {"type": "AssumedRole", "arn": "arn:aws:sts::811596193553:assumed-role/SecurityMonkey/secmonkey", "account_id": "811596193553", "principal_id": "AROAUB2AA5FQRGAHITW4A:secmonkey", "user_name": null, "access_key_id": "ASIAI9QHHRMC9F6XQJXN", "session_issuer_arn": "arn:aws:iam::811596193553:role/SecurityMonkey", "session_issuer_user_name": "SecurityMonkey"}, "network": {"source_ip": "255.253.125.115", "user_agent": "Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56 Resource", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 1071, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "422c6b5b-ef8d-45ef-a0c4-0b2efa55c665", "eventTime": "2017-05-27T04:59:51Z", "eventName": "GetPolicyVersion", "eventSource": "iam.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.253.125.115", "userAgent": "Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56 Resource", "awsRegion": "us-east-1", "userIdentity": {"type": "AssumedRole", "principalId": "AROAUB2AA5FQRGAHITW4A:secmonkey", "arn": "arn:aws:sts::811596193553:assumed-role/SecurityMonkey/secmonkey", "accountId": "811596193553", "accessKeyId": "ASIAI9QHHRMC9F6XQJXN", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2017-05-27T04:59:38Z"}, "sessionIssuer": {"type": "Role", "principalId": "AROAUB2AA5FQRGAHITW4A", "arn": "arn:aws:iam::811596193553:role/SecurityMonkey", "accountId": "811596193553", "userName": "SecurityMonkey"}}}, "requestParameters": {"policyArn": "arn:aws:iam::aws:policy/AmazonElasticFileSystemReadOnlyAccess", "versionId": "v1"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "84051af2-899f-4b82-b2ff-d2495c9e264e", "record_id": "flaws_cloudtrail:0000262:84051af2-899f-4b82-b2ff-d2495c9e264e", "row_index": 262, "timestamp": "2017-05-27T04:59:51Z", "event_type": "GetPolicyVersion", "event_source": "iam.amazonaws.com", "principal": {"type": "AssumedRole", "arn": "arn:aws:sts::811596193553:assumed-role/SecurityMonkey/secmonkey", "account_id": "811596193553", "principal_id": "AROAUB2AA5FQRGAHITW4A:secmonkey", "user_name": null, "access_key_id": "ASIAI9QHHRMC9F6XQJXN", "session_issuer_arn": "arn:aws:iam::811596193553:role/SecurityMonkey", "session_issuer_user_name": "SecurityMonkey"}, "network": {"source_ip": "255.253.125.115", "user_agent": "Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56 Resource", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 1054, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "84051af2-899f-4b82-b2ff-d2495c9e264e", "eventTime": "2017-05-27T04:59:51Z", "eventName": "GetPolicyVersion", "eventSource": "iam.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.253.125.115", "userAgent": "Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56 Resource", "awsRegion": "us-east-1", "userIdentity": {"type": "AssumedRole", "principalId": "AROAUB2AA5FQRGAHITW4A:secmonkey", "arn": "arn:aws:sts::811596193553:assumed-role/SecurityMonkey/secmonkey", "accountId": "811596193553", "accessKeyId": "ASIAI9QHHRMC9F6XQJXN", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2017-05-27T04:59:38Z"}, "sessionIssuer": {"type": "Role", "principalId": "AROAUB2AA5FQRGAHITW4A", "arn": "arn:aws:iam::811596193553:role/SecurityMonkey", "accountId": "811596193553", "userName": "SecurityMonkey"}}}, "requestParameters": {"policyArn": "arn:aws:iam::aws:policy/CloudFrontFullAccess", "versionId": "v3"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "104bc173-5794-449e-a259-57b8a6d4c794", "record_id": "flaws_cloudtrail:0000263:104bc173-5794-449e-a259-57b8a6d4c794", "row_index": 263, "timestamp": "2017-05-27T04:59:51Z", "event_type": "GetPolicyVersion", "event_source": "iam.amazonaws.com", "principal": {"type": "AssumedRole", "arn": "arn:aws:sts::811596193553:assumed-role/SecurityMonkey/secmonkey", "account_id": "811596193553", "principal_id": "AROAUB2AA5FQRGAHITW4A:secmonkey", "user_name": null, "access_key_id": "ASIAI9QHHRMC9F6XQJXN", "session_issuer_arn": "arn:aws:iam::811596193553:role/SecurityMonkey", "session_issuer_user_name": "SecurityMonkey"}, "network": {"source_ip": "255.253.125.115", "user_agent": "Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56 Resource", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 1093, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "104bc173-5794-449e-a259-57b8a6d4c794", "eventTime": "2017-05-27T04:59:51Z", "eventName": "GetPolicyVersion", "eventSource": "iam.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.253.125.115", "userAgent": "Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56 Resource", "awsRegion": "us-east-1", "userIdentity": {"type": "AssumedRole", "principalId": "AROAUB2AA5FQRGAHITW4A:secmonkey", "arn": "arn:aws:sts::811596193553:assumed-role/SecurityMonkey/secmonkey", "accountId": "811596193553", "accessKeyId": "ASIAI9QHHRMC9F6XQJXN", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2017-05-27T04:59:38Z"}, "sessionIssuer": {"type": "Role", "principalId": "AROAUB2AA5FQRGAHITW4A", "arn": "arn:aws:iam::811596193553:role/SecurityMonkey", "accountId": "811596193553", "userName": "SecurityMonkey"}}}, "requestParameters": {"policyArn": "arn:aws:iam::aws:policy/service-role/AmazonMachineLearningRoleforRedshiftDataSource", "versionId": "v1"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "c40d98f5-b02a-44f5-b6ee-ba444660c636", "record_id": "flaws_cloudtrail:0000264:c40d98f5-b02a-44f5-b6ee-ba444660c636", "row_index": 264, "timestamp": "2017-05-27T04:59:51Z", "event_type": "GetPolicyVersion", "event_source": "iam.amazonaws.com", "principal": {"type": "AssumedRole", "arn": "arn:aws:sts::811596193553:assumed-role/SecurityMonkey/secmonkey", "account_id": "811596193553", "principal_id": "AROAUB2AA5FQRGAHITW4A:secmonkey", "user_name": null, "access_key_id": "ASIAI9QHHRMC9F6XQJXN", "session_issuer_arn": "arn:aws:iam::811596193553:role/SecurityMonkey", "session_issuer_user_name": "SecurityMonkey"}, "network": {"source_ip": "255.253.125.115", "user_agent": "Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56 Resource", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 1080, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "c40d98f5-b02a-44f5-b6ee-ba444660c636", "eventTime": "2017-05-27T04:59:51Z", "eventName": "GetPolicyVersion", "eventSource": "iam.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.253.125.115", "userAgent": "Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56 Resource", "awsRegion": "us-east-1", "userIdentity": {"type": "AssumedRole", "principalId": "AROAUB2AA5FQRGAHITW4A:secmonkey", "arn": "arn:aws:sts::811596193553:assumed-role/SecurityMonkey/secmonkey", "accountId": "811596193553", "accessKeyId": "ASIAI9QHHRMC9F6XQJXN", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2017-05-27T04:59:38Z"}, "sessionIssuer": {"type": "Role", "principalId": "AROAUB2AA5FQRGAHITW4A", "arn": "arn:aws:iam::811596193553:role/SecurityMonkey", "accountId": "811596193553", "userName": "SecurityMonkey"}}}, "requestParameters": {"policyArn": "arn:aws:iam::aws:policy/AmazonMobileAnalyticsNon-financialReportAccess", "versionId": "v1"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "b9fa301c-6da7-4064-883e-f80b63bc2275", "record_id": "flaws_cloudtrail:0000265:b9fa301c-6da7-4064-883e-f80b63bc2275", "row_index": 265, "timestamp": "2017-05-27T04:59:51Z", "event_type": "GetPolicyVersion", "event_source": "iam.amazonaws.com", "principal": {"type": "AssumedRole", "arn": "arn:aws:sts::811596193553:assumed-role/SecurityMonkey/secmonkey", "account_id": "811596193553", "principal_id": "AROAUB2AA5FQRGAHITW4A:secmonkey", "user_name": null, "access_key_id": "ASIAI9QHHRMC9F6XQJXN", "session_issuer_arn": "arn:aws:iam::811596193553:role/SecurityMonkey", "session_issuer_user_name": "SecurityMonkey"}, "network": {"source_ip": "255.253.125.115", "user_agent": "Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56 Resource", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 1055, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "b9fa301c-6da7-4064-883e-f80b63bc2275", "eventTime": "2017-05-27T04:59:51Z", "eventName": "GetPolicyVersion", "eventSource": "iam.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.253.125.115", "userAgent": "Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56 Resource", "awsRegion": "us-east-1", "userIdentity": {"type": "AssumedRole", "principalId": "AROAUB2AA5FQRGAHITW4A:secmonkey", "arn": "arn:aws:sts::811596193553:assumed-role/SecurityMonkey/secmonkey", "accountId": "811596193553", "accessKeyId": "ASIAI9QHHRMC9F6XQJXN", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2017-05-27T04:59:38Z"}, "sessionIssuer": {"type": "Role", "principalId": "AROAUB2AA5FQRGAHITW4A", "arn": "arn:aws:iam::811596193553:role/SecurityMonkey", "accountId": "811596193553", "userName": "SecurityMonkey"}}}, "requestParameters": {"policyArn": "arn:aws:iam::aws:policy/AWSCloudTrailFullAccess", "versionId": "v4"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "9b30c284-7320-43c0-8c1a-9cf986306ff6", "record_id": "flaws_cloudtrail:0000266:9b30c284-7320-43c0-8c1a-9cf986306ff6", "row_index": 266, "timestamp": "2017-05-27T04:59:51Z", "event_type": "GetPolicyVersion", "event_source": "iam.amazonaws.com", "principal": {"type": "AssumedRole", "arn": "arn:aws:sts::811596193553:assumed-role/SecurityMonkey/secmonkey", "account_id": "811596193553", "principal_id": "AROAUB2AA5FQRGAHITW4A:secmonkey", "user_name": null, "access_key_id": "ASIAI9QHHRMC9F6XQJXN", "session_issuer_arn": "arn:aws:iam::811596193553:role/SecurityMonkey", "session_issuer_user_name": "SecurityMonkey"}, "network": {"source_ip": "255.253.125.115", "user_agent": "Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56 Resource", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 1080, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "9b30c284-7320-43c0-8c1a-9cf986306ff6", "eventTime": "2017-05-27T04:59:51Z", "eventName": "GetPolicyVersion", "eventSource": "iam.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.253.125.115", "userAgent": "Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56 Resource", "awsRegion": "us-east-1", "userIdentity": {"type": "AssumedRole", "principalId": "AROAUB2AA5FQRGAHITW4A:secmonkey", "arn": "arn:aws:sts::811596193553:assumed-role/SecurityMonkey/secmonkey", "accountId": "811596193553", "accessKeyId": "ASIAI9QHHRMC9F6XQJXN", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2017-05-27T04:59:38Z"}, "sessionIssuer": {"type": "Role", "principalId": "AROAUB2AA5FQRGAHITW4A", "arn": "arn:aws:iam::811596193553:role/SecurityMonkey", "accountId": "811596193553", "userName": "SecurityMonkey"}}}, "requestParameters": {"policyArn": "arn:aws:iam::aws:policy/AmazonCognitoDeveloperAuthenticatedIdentities", "versionId": "v1"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "10adbd7e-d2a0-4ec0-b3e3-f4462da644ac", "record_id": "flaws_cloudtrail:0000267:10adbd7e-d2a0-4ec0-b3e3-f4462da644ac", "row_index": 267, "timestamp": "2017-05-27T04:59:51Z", "event_type": "GetPolicyVersion", "event_source": "iam.amazonaws.com", "principal": {"type": "AssumedRole", "arn": "arn:aws:sts::811596193553:assumed-role/SecurityMonkey/secmonkey", "account_id": "811596193553", "principal_id": "AROAUB2AA5FQRGAHITW4A:secmonkey", "user_name": null, "access_key_id": "ASIAI9QHHRMC9F6XQJXN", "session_issuer_arn": "arn:aws:iam::811596193553:role/SecurityMonkey", "session_issuer_user_name": "SecurityMonkey"}, "network": {"source_ip": "255.253.125.115", "user_agent": "Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56 Resource", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 1058, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "10adbd7e-d2a0-4ec0-b3e3-f4462da644ac", "eventTime": "2017-05-27T04:59:51Z", "eventName": "GetPolicyVersion", "eventSource": "iam.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.253.125.115", "userAgent": "Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56 Resource", "awsRegion": "us-east-1", "userIdentity": {"type": "AssumedRole", "principalId": "AROAUB2AA5FQRGAHITW4A:secmonkey", "arn": "arn:aws:sts::811596193553:assumed-role/SecurityMonkey/secmonkey", "accountId": "811596193553", "accessKeyId": "ASIAI9QHHRMC9F6XQJXN", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2017-05-27T04:59:38Z"}, "sessionIssuer": {"type": "Role", "principalId": "AROAUB2AA5FQRGAHITW4A", "arn": "arn:aws:iam::811596193553:role/SecurityMonkey", "accountId": "811596193553", "userName": "SecurityMonkey"}}}, "requestParameters": {"policyArn": "arn:aws:iam::aws:policy/service-role/AWSConfigRole", "versionId": "v9"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "261318c-ecfc-4f6a-bffd-4edb45189a19", "record_id": "flaws_cloudtrail:0000268:261318c-ecfc-4f6a-bffd-4edb45189a19", "row_index": 268, "timestamp": "2017-05-27T04:59:51Z", "event_type": "GetPolicyVersion", "event_source": "iam.amazonaws.com", "principal": {"type": "AssumedRole", "arn": "arn:aws:sts::811596193553:assumed-role/SecurityMonkey/secmonkey", "account_id": "811596193553", "principal_id": "AROAUB2AA5FQRGAHITW4A:secmonkey", "user_name": null, "access_key_id": "ASIAI9QHHRMC9F6XQJXN", "session_issuer_arn": "arn:aws:iam::811596193553:role/SecurityMonkey", "session_issuer_user_name": "SecurityMonkey"}, "network": {"source_ip": "255.253.125.115", "user_agent": "Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56 Resource", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 1074, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "261318c-ecfc-4f6a-bffd-4edb45189a19", "eventTime": "2017-05-27T04:59:51Z", "eventName": "GetPolicyVersion", "eventSource": "iam.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.253.125.115", "userAgent": "Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56 Resource", "awsRegion": "us-east-1", "userIdentity": {"type": "AssumedRole", "principalId": "AROAUB2AA5FQRGAHITW4A:secmonkey", "arn": "arn:aws:sts::811596193553:assumed-role/SecurityMonkey/secmonkey", "accountId": "811596193553", "accessKeyId": "ASIAI9QHHRMC9F6XQJXN", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2017-05-27T04:59:38Z"}, "sessionIssuer": {"type": "Role", "principalId": "AROAUB2AA5FQRGAHITW4A", "arn": "arn:aws:iam::811596193553:role/SecurityMonkey", "accountId": "811596193553", "userName": "SecurityMonkey"}}}, "requestParameters": {"policyArn": "arn:aws:iam::aws:policy/service-role/AmazonAppStreamServiceAccess", "versionId": "v3"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "7ae9da9e-aa91-4840-b04a-e5173f8f8457", "record_id": "flaws_cloudtrail:0000269:7ae9da9e-aa91-4840-b04a-e5173f8f8457", "row_index": 269, "timestamp": "2017-05-27T04:59:51Z", "event_type": "GetPolicyVersion", "event_source": "iam.amazonaws.com", "principal": {"type": "AssumedRole", "arn": "arn:aws:sts::811596193553:assumed-role/SecurityMonkey/secmonkey", "account_id": "811596193553", "principal_id": "AROAUB2AA5FQRGAHITW4A:secmonkey", "user_name": null, "access_key_id": "ASIAI9QHHRMC9F6XQJXN", "session_issuer_arn": "arn:aws:iam::811596193553:role/SecurityMonkey", "session_issuer_user_name": "SecurityMonkey"}, "network": {"source_ip": "255.253.125.115", "user_agent": "Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56 Resource", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 1058, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "7ae9da9e-aa91-4840-b04a-e5173f8f8457", "eventTime": "2017-05-27T04:59:51Z", "eventName": "GetPolicyVersion", "eventSource": "iam.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.253.125.115", "userAgent": "Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56 Resource", "awsRegion": "us-east-1", "userIdentity": {"type": "AssumedRole", "principalId": "AROAUB2AA5FQRGAHITW4A:secmonkey", "arn": "arn:aws:sts::811596193553:assumed-role/SecurityMonkey/secmonkey", "accountId": "811596193553", "accessKeyId": "ASIAI9QHHRMC9F6XQJXN", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2017-05-27T04:59:38Z"}, "sessionIssuer": {"type": "Role", "principalId": "AROAUB2AA5FQRGAHITW4A", "arn": "arn:aws:iam::811596193553:role/SecurityMonkey", "accountId": "811596193553", "userName": "SecurityMonkey"}}}, "requestParameters": {"policyArn": "arn:aws:iam::aws:policy/AmazonRedshiftFullAccess", "versionId": "v1"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "e329423ad-6681-449f-98d6-658880009688", "record_id": "flaws_cloudtrail:0000270:e329423ad-6681-449f-98d6-658880009688", "row_index": 270, "timestamp": "2017-05-27T04:59:51Z", "event_type": "DescribeTrails", "event_source": "cloudtrail.amazonaws.com", "principal": {"type": "AssumedRole", "arn": "arn:aws:sts::811596193553:assumed-role/SecurityMonkey/secmonkey", "account_id": "811596193553", "principal_id": "AROAUB2AA5FQRGAHITW4A:secmonkey", "user_name": null, "access_key_id": "ASIAKQJJB2ZE812YJ345", "session_issuer_arn": "arn:aws:iam::811596193553:role/SecurityMonkey", "session_issuer_user_name": "SecurityMonkey"}, "network": {"source_ip": "255.253.125.115", "user_agent": "Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 978, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "e329423ad-6681-449f-98d6-658880009688", "eventTime": "2017-05-27T04:59:51Z", "eventName": "DescribeTrails", "eventSource": "cloudtrail.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.253.125.115", "userAgent": "Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56", "awsRegion": "us-west-2", "userIdentity": {"type": "AssumedRole", "principalId": "AROAUB2AA5FQRGAHITW4A:secmonkey", "arn": "arn:aws:sts::811596193553:assumed-role/SecurityMonkey/secmonkey", "accountId": "811596193553", "accessKeyId": "ASIAKQJJB2ZE812YJ345", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2017-05-27T04:59:51Z"}, "sessionIssuer": {"type": "Role", "principalId": "AROAUB2AA5FQRGAHITW4A", "arn": "arn:aws:iam::811596193553:role/SecurityMonkey", "accountId": "811596193553", "userName": "SecurityMonkey"}}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "cad6df2c-6fa4-49a3-8240-789e8891b1ec", "record_id": "flaws_cloudtrail:0000271:cad6df2c-6fa4-49a3-8240-789e8891b1ec", "row_index": 271, "timestamp": "2017-05-27T04:59:52Z", "event_type": "AssumeRole", "event_source": "sts.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/SecurityMokey", "account_id": "811596193553", "principal_id": "AIDAQ9SRE1SZZZ4Q4UOJH", "user_name": "SecurityMokey", "access_key_id": "AKIAXJ0III4JBKZDXGXN", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "255.253.125.115", "user_agent": "Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56", "aws_region": "us-east-1"}, "resource_arns": ["arn:aws:iam::811596193553:role/SecurityMonkey"], "raw_record_size_bytes": 1453, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "resources", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "cad6df2c-6fa4-49a3-8240-789e8891b1ec", "eventTime": "2017-05-27T04:59:52Z", "eventName": "AssumeRole", "eventSource": "sts.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.253.125.115", "userAgent": "Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDAQ9SRE1SZZZ4Q4UOJH", "arn": "arn:aws:iam::811596193553:user/SecurityMokey", "accountId": "811596193553", "accessKeyId": "AKIAXJ0III4JBKZDXGXN", "userName": "SecurityMokey"}, "requestParameters": {"roleArn": "arn:aws:iam::811596193553:role/SecurityMonkey", "roleSessionName": "secmonkey"}, "responseElements": {"credentials": {"accessKeyId": "ASIAL9J3PT5P1DFCF5I6", "expiration": "May 27, 2017 5:59:52 AM", "sessionToken": "FQoDYXdzECYaDJrjWFm3wPXFKsq6piLMAV32rTrSHOeN9NdeJTI42MIXAEiu0OHlMM3YdcWs3HrH0sR9ZGrpNTrIXvqWNIWd1tAblKKZnkPJTQLWQwK9A375nGzAP7stl/js5mh0iLLsrf3m7xcluprqg6qmaw+j4YyY++OIk5o4HNPDj+7zzkT6tfJhS+U0ZIg93l6VIIqc6M4BBMav+ZINoC/uhIb/l4Vv2C/rh6SLq2FvY1+JuwIl8xyDH5JEG1uShx02D/2n6Uq2tiktTxyA61jbX7eMFCB4ulx7RaQdvLO8CijIj6TJBQ=="}, "assumedRoleUser": {"assumedRoleId": "AROAUB2AA5FQRGAHITW4A:secmonkey", "arn": "arn:aws:sts::811596193553:assumed-role/SecurityMonkey/secmonkey"}}, "resources": [{"ARN": "arn:aws:iam::811596193553:role/SecurityMonkey", "accountId": "811596193553", "type": "AWS::IAM::Role"}]}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "dce1e923-0539-42e7-bf79-513b2dc25fe5", "record_id": "flaws_cloudtrail:0000272:dce1e923-0539-42e7-bf79-513b2dc25fe5", "row_index": 272, "timestamp": "2017-05-27T04:59:52Z", "event_type": "GetPolicyVersion", "event_source": "iam.amazonaws.com", "principal": {"type": "AssumedRole", "arn": "arn:aws:sts::811596193553:assumed-role/SecurityMonkey/secmonkey", "account_id": "811596193553", "principal_id": "AROAUB2AA5FQRGAHITW4A:secmonkey", "user_name": null, "access_key_id": "ASIAI9QHHRMC9F6XQJXN", "session_issuer_arn": "arn:aws:iam::811596193553:role/SecurityMonkey", "session_issuer_user_name": "SecurityMonkey"}, "network": {"source_ip": "255.253.125.115", "user_agent": "Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56 Resource", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 1059, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "dce1e923-0539-42e7-bf79-513b2dc25fe5", "eventTime": "2017-05-27T04:59:52Z", "eventName": "GetPolicyVersion", "eventSource": "iam.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.253.125.115", "userAgent": "Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56 Resource", "awsRegion": "us-east-1", "userIdentity": {"type": "AssumedRole", "principalId": "AROAUB2AA5FQRGAHITW4A:secmonkey", "arn": "arn:aws:sts::811596193553:assumed-role/SecurityMonkey/secmonkey", "accountId": "811596193553", "accessKeyId": "ASIAI9QHHRMC9F6XQJXN", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2017-05-27T04:59:38Z"}, "sessionIssuer": {"type": "Role", "principalId": "AROAUB2AA5FQRGAHITW4A", "arn": "arn:aws:iam::811596193553:role/SecurityMonkey", "accountId": "811596193553", "userName": "SecurityMonkey"}}}, "requestParameters": {"policyArn": "arn:aws:iam::aws:policy/AWSCloudHSMReadOnlyAccess", "versionId": "v1"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "a536ac28-17ca-40bf-8ec2-e2e2cc7dad98", "record_id": "flaws_cloudtrail:0000273:a536ac28-17ca-40bf-8ec2-e2e2cc7dad98", "row_index": 273, "timestamp": "2017-05-27T04:59:52Z", "event_type": "GetPolicyVersion", "event_source": "iam.amazonaws.com", "principal": {"type": "AssumedRole", "arn": "arn:aws:sts::811596193553:assumed-role/SecurityMonkey/secmonkey", "account_id": "811596193553", "principal_id": "AROAUB2AA5FQRGAHITW4A:secmonkey", "user_name": null, "access_key_id": "ASIAI9QHHRMC9F6XQJXN", "session_issuer_arn": "arn:aws:iam::811596193553:role/SecurityMonkey", "session_issuer_user_name": "SecurityMonkey"}, "network": {"source_ip": "255.253.125.115", "user_agent": "Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56 Resource", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 1066, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "a536ac28-17ca-40bf-8ec2-e2e2cc7dad98", "eventTime": "2017-05-27T04:59:52Z", "eventName": "GetPolicyVersion", "eventSource": "iam.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.253.125.115", "userAgent": "Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56 Resource", "awsRegion": "us-east-1", "userIdentity": {"type": "AssumedRole", "principalId": "AROAUB2AA5FQRGAHITW4A:secmonkey", "arn": "arn:aws:sts::811596193553:assumed-role/SecurityMonkey/secmonkey", "accountId": "811596193553", "accessKeyId": "ASIAI9QHHRMC9F6XQJXN", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2017-05-27T04:59:38Z"}, "sessionIssuer": {"type": "Role", "principalId": "AROAUB2AA5FQRGAHITW4A", "arn": "arn:aws:iam::811596193553:role/SecurityMonkey", "accountId": "811596193553", "userName": "SecurityMonkey"}}}, "requestParameters": {"policyArn": "arn:aws:iam::aws:policy/job-function/SystemAdministrator", "versionId": "v2"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "ed78c035-8a96-42fa-8022-d57797ff3669", "record_id": "flaws_cloudtrail:0000274:ed78c035-8a96-42fa-8022-d57797ff3669", "row_index": 274, "timestamp": "2017-05-27T04:59:52Z", "event_type": "GetPolicyVersion", "event_source": "iam.amazonaws.com", "principal": {"type": "AssumedRole", "arn": "arn:aws:sts::811596193553:assumed-role/SecurityMonkey/secmonkey", "account_id": "811596193553", "principal_id": "AROAUB2AA5FQRGAHITW4A:secmonkey", "user_name": null, "access_key_id": "ASIAI9QHHRMC9F6XQJXN", "session_issuer_arn": "arn:aws:iam::811596193553:role/SecurityMonkey", "session_issuer_user_name": "SecurityMonkey"}, "network": {"source_ip": "255.253.125.115", "user_agent": "Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56 Resource", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 1061, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "ed78c035-8a96-42fa-8022-d57797ff3669", "eventTime": "2017-05-27T04:59:52Z", "eventName": "GetPolicyVersion", "eventSource": "iam.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.253.125.115", "userAgent": "Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56 Resource", "awsRegion": "us-east-1", "userIdentity": {"type": "AssumedRole", "principalId": "AROAUB2AA5FQRGAHITW4A:secmonkey", "arn": "arn:aws:sts::811596193553:assumed-role/SecurityMonkey/secmonkey", "accountId": "811596193553", "accessKeyId": "ASIAI9QHHRMC9F6XQJXN", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2017-05-27T04:59:38Z"}, "sessionIssuer": {"type": "Role", "principalId": "AROAUB2AA5FQRGAHITW4A", "arn": "arn:aws:iam::811596193553:role/SecurityMonkey", "accountId": "811596193553", "userName": "SecurityMonkey"}}}, "requestParameters": {"policyArn": "arn:aws:iam::aws:policy/AmazonRoute53ReadOnlyAccess", "versionId": "v2"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "0fd786078-de89-4e99-81a9-10632bae9aa7", "record_id": "flaws_cloudtrail:0000275:0fd786078-de89-4e99-81a9-10632bae9aa7", "row_index": 275, "timestamp": "2017-05-27T04:59:52Z", "event_type": "GetPolicyVersion", "event_source": "iam.amazonaws.com", "principal": {"type": "AssumedRole", "arn": "arn:aws:sts::811596193553:assumed-role/SecurityMonkey/secmonkey", "account_id": "811596193553", "principal_id": "AROAUB2AA5FQRGAHITW4A:secmonkey", "user_name": null, "access_key_id": "ASIAI9QHHRMC9F6XQJXN", "session_issuer_arn": "arn:aws:iam::811596193553:role/SecurityMonkey", "session_issuer_user_name": "SecurityMonkey"}, "network": {"source_ip": "255.253.125.115", "user_agent": "Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56 Resource", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 1057, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "0fd786078-de89-4e99-81a9-10632bae9aa7", "eventTime": "2017-05-27T04:59:52Z", "eventName": "GetPolicyVersion", "eventSource": "iam.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.253.125.115", "userAgent": "Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56 Resource", "awsRegion": "us-east-1", "userIdentity": {"type": "AssumedRole", "principalId": "AROAUB2AA5FQRGAHITW4A:secmonkey", "arn": "arn:aws:sts::811596193553:assumed-role/SecurityMonkey/secmonkey", "accountId": "811596193553", "accessKeyId": "ASIAI9QHHRMC9F6XQJXN", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2017-05-27T04:59:38Z"}, "sessionIssuer": {"type": "Role", "principalId": "AROAUB2AA5FQRGAHITW4A", "arn": "arn:aws:iam::811596193553:role/SecurityMonkey", "accountId": "811596193553", "userName": "SecurityMonkey"}}}, "requestParameters": {"policyArn": "arn:aws:iam::aws:policy/AmazonEC2ReportsAccess", "versionId": "v1"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "8cf7bf31-1b37-4409-b11f-b499c3339de6", "record_id": "flaws_cloudtrail:0000276:8cf7bf31-1b37-4409-b11f-b499c3339de6", "row_index": 276, "timestamp": "2017-05-27T04:59:52Z", "event_type": "GetPolicyVersion", "event_source": "iam.amazonaws.com", "principal": {"type": "AssumedRole", "arn": "arn:aws:sts::811596193553:assumed-role/SecurityMonkey/secmonkey", "account_id": "811596193553", "principal_id": "AROAUB2AA5FQRGAHITW4A:secmonkey", "user_name": null, "access_key_id": "ASIAI9QHHRMC9F6XQJXN", "session_issuer_arn": "arn:aws:iam::811596193553:role/SecurityMonkey", "session_issuer_user_name": "SecurityMonkey"}, "network": {"source_ip": "255.253.125.115", "user_agent": "Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56 Resource", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 1085, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "8cf7bf31-1b37-4409-b11f-b499c3339de6", "eventTime": "2017-05-27T04:59:52Z", "eventName": "GetPolicyVersion", "eventSource": "iam.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.253.125.115", "userAgent": "Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56 Resource", "awsRegion": "us-east-1", "userIdentity": {"type": "AssumedRole", "principalId": "AROAUB2AA5FQRGAHITW4A:secmonkey", "arn": "arn:aws:sts::811596193553:assumed-role/SecurityMonkey/secmonkey", "accountId": "811596193553", "accessKeyId": "ASIAI9QHHRMC9F6XQJXN", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2017-05-27T04:59:38Z"}, "sessionIssuer": {"type": "Role", "principalId": "AROAUB2AA5FQRGAHITW4A", "arn": "arn:aws:iam::811596193553:role/SecurityMonkey", "accountId": "811596193553", "userName": "SecurityMonkey"}}}, "requestParameters": {"policyArn": "arn:aws:iam::aws:policy/service-role/AmazonEC2ContainerServiceAutoscaleRole", "versionId": "v1"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "0a2c3739-81e5-4b55-a9ce-c7c1ad3c481e", "record_id": "flaws_cloudtrail:0000277:0a2c3739-81e5-4b55-a9ce-c7c1ad3c481e", "row_index": 277, "timestamp": "2017-05-27T04:59:52Z", "event_type": "GetPolicyVersion", "event_source": "iam.amazonaws.com", "principal": {"type": "AssumedRole", "arn": "arn:aws:sts::811596193553:assumed-role/SecurityMonkey/secmonkey", "account_id": "811596193553", "principal_id": "AROAUB2AA5FQRGAHITW4A:secmonkey", "user_name": null, "access_key_id": "ASIAI9QHHRMC9F6XQJXN", "session_issuer_arn": "arn:aws:iam::811596193553:role/SecurityMonkey", "session_issuer_user_name": "SecurityMonkey"}, "network": {"source_ip": "255.253.125.115", "user_agent": "Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56 Resource", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 1060, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "0a2c3739-81e5-4b55-a9ce-c7c1ad3c481e", "eventTime": "2017-05-27T04:59:52Z", "eventName": "GetPolicyVersion", "eventSource": "iam.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.253.125.115", "userAgent": "Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56 Resource", "awsRegion": "us-east-1", "userIdentity": {"type": "AssumedRole", "principalId": "AROAUB2AA5FQRGAHITW4A:secmonkey", "arn": "arn:aws:sts::811596193553:assumed-role/SecurityMonkey/secmonkey", "accountId": "811596193553", "accessKeyId": "ASIAI9QHHRMC9F6XQJXN", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2017-05-27T04:59:38Z"}, "sessionIssuer": {"type": "Role", "principalId": "AROAUB2AA5FQRGAHITW4A", "arn": "arn:aws:iam::811596193553:role/SecurityMonkey", "accountId": "811596193553", "userName": "SecurityMonkey"}}}, "requestParameters": {"policyArn": "arn:aws:iam::aws:policy/AmazonZocaloReadOnlyAccess", "versionId": "v1"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "80f36cd7-4273-422c-93ef-6df5e91b918a", "record_id": "flaws_cloudtrail:0000278:80f36cd7-4273-422c-93ef-6df5e91b918a", "row_index": 278, "timestamp": "2017-05-27T04:59:52Z", "event_type": "GetPolicyVersion", "event_source": "iam.amazonaws.com", "principal": {"type": "AssumedRole", "arn": "arn:aws:sts::811596193553:assumed-role/SecurityMonkey/secmonkey", "account_id": "811596193553", "principal_id": "AROAUB2AA5FQRGAHITW4A:secmonkey", "user_name": null, "access_key_id": "ASIAI9QHHRMC9F6XQJXN", "session_issuer_arn": "arn:aws:iam::811596193553:role/SecurityMonkey", "session_issuer_user_name": "SecurityMonkey"}, "network": {"source_ip": "255.253.125.115", "user_agent": "Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56 Resource", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 1066, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "80f36cd7-4273-422c-93ef-6df5e91b918a", "eventTime": "2017-05-27T04:59:52Z", "eventName": "GetPolicyVersion", "eventSource": "iam.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.253.125.115", "userAgent": "Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56 Resource", "awsRegion": "us-east-1", "userIdentity": {"type": "AssumedRole", "principalId": "AROAUB2AA5FQRGAHITW4A:secmonkey", "arn": "arn:aws:sts::811596193553:assumed-role/SecurityMonkey/secmonkey", "accountId": "811596193553", "accessKeyId": "ASIAI9QHHRMC9F6XQJXN", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2017-05-27T04:59:38Z"}, "sessionIssuer": {"type": "Role", "principalId": "AROAUB2AA5FQRGAHITW4A", "arn": "arn:aws:iam::811596193553:role/SecurityMonkey", "accountId": "811596193553", "userName": "SecurityMonkey"}}}, "requestParameters": {"policyArn": "arn:aws:iam::aws:policy/service-role/AWSBatchServiceRole", "versionId": "v4"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "ab3ae268-5c39-4ed8-b11c-8b2db9df3226", "record_id": "flaws_cloudtrail:0000279:ab3ae268-5c39-4ed8-b11c-8b2db9df3226", "row_index": 279, "timestamp": "2017-05-27T04:59:52Z", "event_type": "GetPolicyVersion", "event_source": "iam.amazonaws.com", "principal": {"type": "AssumedRole", "arn": "arn:aws:sts::811596193553:assumed-role/SecurityMonkey/secmonkey", "account_id": "811596193553", "principal_id": "AROAUB2AA5FQRGAHITW4A:secmonkey", "user_name": null, "access_key_id": "ASIAI9QHHRMC9F6XQJXN", "session_issuer_arn": "arn:aws:iam::811596193553:role/SecurityMonkey", "session_issuer_user_name": "SecurityMonkey"}, "network": {"source_ip": "255.253.125.115", "user_agent": "Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56 Resource", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 1060, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "ab3ae268-5c39-4ed8-b11c-8b2db9df3226", "eventTime": "2017-05-27T04:59:52Z", "eventName": "GetPolicyVersion", "eventSource": "iam.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.253.125.115", "userAgent": "Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56 Resource", "awsRegion": "us-east-1", "userIdentity": {"type": "AssumedRole", "principalId": "AROAUB2AA5FQRGAHITW4A:secmonkey", "arn": "arn:aws:sts::811596193553:assumed-role/SecurityMonkey/secmonkey", "accountId": "811596193553", "accessKeyId": "ASIAI9QHHRMC9F6XQJXN", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2017-05-27T04:59:38Z"}, "sessionIssuer": {"type": "Role", "principalId": "AROAUB2AA5FQRGAHITW4A", "arn": "arn:aws:iam::811596193553:role/SecurityMonkey", "accountId": "811596193553", "userName": "SecurityMonkey"}}}, "requestParameters": {"policyArn": "arn:aws:iam::aws:policy/AWSElasticBeanstalkWebTier", "versionId": "v4"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "462784b4e-2d82-4eeb-9e7e-7760cdc7fbe6", "record_id": "flaws_cloudtrail:0000280:462784b4e-2d82-4eeb-9e7e-7760cdc7fbe6", "row_index": 280, "timestamp": "2017-05-27T04:59:52Z", "event_type": "GetPolicyVersion", "event_source": "iam.amazonaws.com", "principal": {"type": "AssumedRole", "arn": "arn:aws:sts::811596193553:assumed-role/SecurityMonkey/secmonkey", "account_id": "811596193553", "principal_id": "AROAUB2AA5FQRGAHITW4A:secmonkey", "user_name": null, "access_key_id": "ASIAI9QHHRMC9F6XQJXN", "session_issuer_arn": "arn:aws:iam::811596193553:role/SecurityMonkey", "session_issuer_user_name": "SecurityMonkey"}, "network": {"source_ip": "255.253.125.115", "user_agent": "Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56 Resource", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 1058, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "462784b4e-2d82-4eeb-9e7e-7760cdc7fbe6", "eventTime": "2017-05-27T04:59:52Z", "eventName": "GetPolicyVersion", "eventSource": "iam.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.253.125.115", "userAgent": "Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56 Resource", "awsRegion": "us-east-1", "userIdentity": {"type": "AssumedRole", "principalId": "AROAUB2AA5FQRGAHITW4A:secmonkey", "arn": "arn:aws:sts::811596193553:assumed-role/SecurityMonkey/secmonkey", "accountId": "811596193553", "accessKeyId": "ASIAI9QHHRMC9F6XQJXN", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2017-05-27T04:59:38Z"}, "sessionIssuer": {"type": "Role", "principalId": "AROAUB2AA5FQRGAHITW4A", "arn": "arn:aws:iam::811596193553:role/SecurityMonkey", "accountId": "811596193553", "userName": "SecurityMonkey"}}}, "requestParameters": {"policyArn": "arn:aws:iam::aws:policy/AmazonSQSReadOnlyAccess", "versionId": "v1"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "518959ab2-60ff-4055-b061-e19b95cdcab4", "record_id": "flaws_cloudtrail:0000281:518959ab2-60ff-4055-b061-e19b95cdcab4", "row_index": 281, "timestamp": "2017-05-27T04:59:52Z", "event_type": "GetPolicyVersion", "event_source": "iam.amazonaws.com", "principal": {"type": "AssumedRole", "arn": "arn:aws:sts::811596193553:assumed-role/SecurityMonkey/secmonkey", "account_id": "811596193553", "principal_id": "AROAUB2AA5FQRGAHITW4A:secmonkey", "user_name": null, "access_key_id": "ASIAI9QHHRMC9F6XQJXN", "session_issuer_arn": "arn:aws:iam::811596193553:role/SecurityMonkey", "session_issuer_user_name": "SecurityMonkey"}, "network": {"source_ip": "255.253.125.115", "user_agent": "Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56 Resource", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 1076, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "518959ab2-60ff-4055-b061-e19b95cdcab4", "eventTime": "2017-05-27T04:59:52Z", "eventName": "GetPolicyVersion", "eventSource": "iam.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.253.125.115", "userAgent": "Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56 Resource", "awsRegion": "us-east-1", "userIdentity": {"type": "AssumedRole", "principalId": "AROAUB2AA5FQRGAHITW4A:secmonkey", "arn": "arn:aws:sts::811596193553:assumed-role/SecurityMonkey/secmonkey", "accountId": "811596193553", "accessKeyId": "ASIAI9QHHRMC9F6XQJXN", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2017-05-27T04:59:38Z"}, "sessionIssuer": {"type": "Role", "principalId": "AROAUB2AA5FQRGAHITW4A", "arn": "arn:aws:iam::811596193553:role/SecurityMonkey", "accountId": "811596193553", "userName": "SecurityMonkey"}}}, "requestParameters": {"policyArn": "arn:aws:iam::aws:policy/service-role/AWSMobileHub_ServiceUseOnly", "versionId": "v21"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "a00e6b7f-98ff-4728-a532-5cad20140f69", "record_id": "flaws_cloudtrail:0000282:a00e6b7f-98ff-4728-a532-5cad20140f69", "row_index": 282, "timestamp": "2017-05-27T04:59:52Z", "event_type": "GetTrailStatus", "event_source": "cloudtrail.amazonaws.com", "principal": {"type": "AssumedRole", "arn": "arn:aws:sts::811596193553:assumed-role/SecurityMonkey/secmonkey", "account_id": "811596193553", "principal_id": "AROAUB2AA5FQRGAHITW4A:secmonkey", "user_name": null, "access_key_id": "ASIAKQJJB2ZE812YJ345", "session_issuer_arn": "arn:aws:iam::811596193553:role/SecurityMonkey", "session_issuer_user_name": "SecurityMonkey"}, "network": {"source_ip": "255.253.125.115", "user_agent": "Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1042, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "a00e6b7f-98ff-4728-a532-5cad20140f69", "eventTime": "2017-05-27T04:59:52Z", "eventName": "GetTrailStatus", "eventSource": "cloudtrail.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.253.125.115", "userAgent": "Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56", "awsRegion": "us-west-2", "userIdentity": {"type": "AssumedRole", "principalId": "AROAUB2AA5FQRGAHITW4A:secmonkey", "arn": "arn:aws:sts::811596193553:assumed-role/SecurityMonkey/secmonkey", "accountId": "811596193553", "accessKeyId": "ASIAKQJJB2ZE812YJ345", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2017-05-27T04:59:51Z"}, "sessionIssuer": {"type": "Role", "principalId": "AROAUB2AA5FQRGAHITW4A", "arn": "arn:aws:iam::811596193553:role/SecurityMonkey", "accountId": "811596193553", "userName": "SecurityMonkey"}}}, "requestParameters": {"name": "arn:aws:cloudtrail:us-west-2:811596193553:trail/cloudtrail"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "aad9c45a-4f60-4216-afd6-97f7e7af9af2", "record_id": "flaws_cloudtrail:0000283:aad9c45a-4f60-4216-afd6-97f7e7af9af2", "row_index": 283, "timestamp": "2017-05-27T04:59:53Z", "event_type": "AssumeRole", "event_source": "sts.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/SecurityMokey", "account_id": "811596193553", "principal_id": "AIDAQ9SRE1SZZZ4Q4UOJH", "user_name": "SecurityMokey", "access_key_id": "AKIAXJ0III4JBKZDXGXN", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "255.253.125.115", "user_agent": "Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56", "aws_region": "us-east-1"}, "resource_arns": ["arn:aws:iam::811596193553:role/SecurityMonkey"], "raw_record_size_bytes": 1451, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "resources", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "aad9c45a-4f60-4216-afd6-97f7e7af9af2", "eventTime": "2017-05-27T04:59:53Z", "eventName": "AssumeRole", "eventSource": "sts.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.253.125.115", "userAgent": "Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDAQ9SRE1SZZZ4Q4UOJH", "arn": "arn:aws:iam::811596193553:user/SecurityMokey", "accountId": "811596193553", "accessKeyId": "AKIAXJ0III4JBKZDXGXN", "userName": "SecurityMokey"}, "requestParameters": {"roleArn": "arn:aws:iam::811596193553:role/SecurityMonkey", "roleSessionName": "secmonkey"}, "responseElements": {"credentials": {"accessKeyId": "ASIAML1M12W303HSXH1S", "expiration": "May 27, 2017 5:59:53 AM", "sessionToken": "FQoDYXdzECYaDO4P4Q6mY/GcKYq2yiLMAVK61s9mGlY/bn52bLbA8qgjf+lZv3OiGtsMVrOxilnVA8ycoDsjMLuDez05VlMnWdkHXV4edS5CA7eudlg+Klxqm+HjFWBo2nDb1fFb/AAcAVs7XEFlSoEGh4rxQWs8lEXK4lZ3bV9A3WG/VA/ZAnEtvwDsZY6q1NRwaA/u7cC9jh0iOGtI7zqjduXpkNwg8XPctyH3qhAm55kQLYp4PPnL3byCSOOlvAbJunmWmVsRgPykLd3dVUDvFB3VeydI1eGmMp+Rn91VoByFGyjJj6TJBQ=="}, "assumedRoleUser": {"assumedRoleId": "AROAUB2AA5FQRGAHITW4A:secmonkey", "arn": "arn:aws:sts::811596193553:assumed-role/SecurityMonkey/secmonkey"}}, "resources": [{"ARN": "arn:aws:iam::811596193553:role/SecurityMonkey", "accountId": "811596193553", "type": "AWS::IAM::Role"}]}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "3d96d2f9-9bc8-48aa-8b22-75412a88a565", "record_id": "flaws_cloudtrail:0000284:3d96d2f9-9bc8-48aa-8b22-75412a88a565", "row_index": 284, "timestamp": "2017-05-27T04:59:53Z", "event_type": "GetPolicyVersion", "event_source": "iam.amazonaws.com", "principal": {"type": "AssumedRole", "arn": "arn:aws:sts::811596193553:assumed-role/SecurityMonkey/secmonkey", "account_id": "811596193553", "principal_id": "AROAUB2AA5FQRGAHITW4A:secmonkey", "user_name": null, "access_key_id": "ASIAI9QHHRMC9F6XQJXN", "session_issuer_arn": "arn:aws:iam::811596193553:role/SecurityMonkey", "session_issuer_user_name": "SecurityMonkey"}, "network": {"source_ip": "255.253.125.115", "user_agent": "Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56 Resource", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 1083, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "3d96d2f9-9bc8-48aa-8b22-75412a88a565", "eventTime": "2017-05-27T04:59:53Z", "eventName": "GetPolicyVersion", "eventSource": "iam.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.253.125.115", "userAgent": "Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56 Resource", "awsRegion": "us-east-1", "userIdentity": {"type": "AssumedRole", "principalId": "AROAUB2AA5FQRGAHITW4A:secmonkey", "arn": "arn:aws:sts::811596193553:assumed-role/SecurityMonkey/secmonkey", "accountId": "811596193553", "accessKeyId": "ASIAI9QHHRMC9F6XQJXN", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2017-05-27T04:59:38Z"}, "sessionIssuer": {"type": "Role", "principalId": "AROAUB2AA5FQRGAHITW4A", "arn": "arn:aws:iam::811596193553:role/SecurityMonkey", "accountId": "811596193553", "userName": "SecurityMonkey"}}}, "requestParameters": {"policyArn": "arn:aws:iam::aws:policy/AmazonMachineLearningRealTimePredictionOnlyAccess", "versionId": "v1"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "79a92344-d8d3-4b52-be08-f15a33e9f625", "record_id": "flaws_cloudtrail:0000285:79a92344-d8d3-4b52-be08-f15a33e9f625", "row_index": 285, "timestamp": "2017-05-27T04:59:53Z", "event_type": "GetPolicyVersion", "event_source": "iam.amazonaws.com", "principal": {"type": "AssumedRole", "arn": "arn:aws:sts::811596193553:assumed-role/SecurityMonkey/secmonkey", "account_id": "811596193553", "principal_id": "AROAUB2AA5FQRGAHITW4A:secmonkey", "user_name": null, "access_key_id": "ASIAI9QHHRMC9F6XQJXN", "session_issuer_arn": "arn:aws:iam::811596193553:role/SecurityMonkey", "session_issuer_user_name": "SecurityMonkey"}, "network": {"source_ip": "255.253.125.115", "user_agent": "Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56 Resource", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 1053, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "79a92344-d8d3-4b52-be08-f15a33e9f625", "eventTime": "2017-05-27T04:59:53Z", "eventName": "GetPolicyVersion", "eventSource": "iam.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.253.125.115", "userAgent": "Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56 Resource", "awsRegion": "us-east-1", "userIdentity": {"type": "AssumedRole", "principalId": "AROAUB2AA5FQRGAHITW4A:secmonkey", "arn": "arn:aws:sts::811596193553:assumed-role/SecurityMonkey/secmonkey", "accountId": "811596193553", "accessKeyId": "ASIAI9QHHRMC9F6XQJXN", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2017-05-27T04:59:38Z"}, "sessionIssuer": {"type": "Role", "principalId": "AROAUB2AA5FQRGAHITW4A", "arn": "arn:aws:iam::811596193553:role/SecurityMonkey", "accountId": "811596193553", "userName": "SecurityMonkey"}}}, "requestParameters": {"policyArn": "arn:aws:iam::aws:policy/AdministratorAccess", "versionId": "v1"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "9ef03a76-f6c5-4e74-9b9f-a12a3ce1da1c", "record_id": "flaws_cloudtrail:0000286:9ef03a76-f6c5-4e74-9b9f-a12a3ce1da1c", "row_index": 286, "timestamp": "2017-05-27T04:59:53Z", "event_type": "ListEntitiesForPolicy", "event_source": "iam.amazonaws.com", "principal": {"type": "AssumedRole", "arn": "arn:aws:sts::811596193553:assumed-role/SecurityMonkey/secmonkey", "account_id": "811596193553", "principal_id": "AROAUB2AA5FQRGAHITW4A:secmonkey", "user_name": null, "access_key_id": "ASIAI9QHHRMC9F6XQJXN", "session_issuer_arn": "arn:aws:iam::811596193553:role/SecurityMonkey", "session_issuer_user_name": "SecurityMonkey"}, "network": {"source_ip": "255.253.125.115", "user_agent": "Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56 Resource", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 1064, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "9ef03a76-f6c5-4e74-9b9f-a12a3ce1da1c", "eventTime": "2017-05-27T04:59:53Z", "eventName": "ListEntitiesForPolicy", "eventSource": "iam.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.253.125.115", "userAgent": "Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56 Resource", "awsRegion": "us-east-1", "userIdentity": {"type": "AssumedRole", "principalId": "AROAUB2AA5FQRGAHITW4A:secmonkey", "arn": "arn:aws:sts::811596193553:assumed-role/SecurityMonkey/secmonkey", "accountId": "811596193553", "accessKeyId": "ASIAI9QHHRMC9F6XQJXN", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2017-05-27T04:59:38Z"}, "sessionIssuer": {"type": "Role", "principalId": "AROAUB2AA5FQRGAHITW4A", "arn": "arn:aws:iam::811596193553:role/SecurityMonkey", "accountId": "811596193553", "userName": "SecurityMonkey"}}}, "requestParameters": {"entityFilter": "Group", "policyArn": "arn:aws:iam::aws:policy/AdministratorAccess"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "c7353a04-b5af-4e54-8480-58ee3afbc799", "record_id": "flaws_cloudtrail:0000287:c7353a04-b5af-4e54-8480-58ee3afbc799", "row_index": 287, "timestamp": "2017-05-27T04:59:53Z", "event_type": "ListEntitiesForPolicy", "event_source": "iam.amazonaws.com", "principal": {"type": "AssumedRole", "arn": "arn:aws:sts::811596193553:assumed-role/SecurityMonkey/secmonkey", "account_id": "811596193553", "principal_id": "AROAUB2AA5FQRGAHITW4A:secmonkey", "user_name": null, "access_key_id": "ASIAI9QHHRMC9F6XQJXN", "session_issuer_arn": "arn:aws:iam::811596193553:role/SecurityMonkey", "session_issuer_user_name": "SecurityMonkey"}, "network": {"source_ip": "255.253.125.115", "user_agent": "Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56 Resource", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 1063, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "c7353a04-b5af-4e54-8480-58ee3afbc799", "eventTime": "2017-05-27T04:59:53Z", "eventName": "ListEntitiesForPolicy", "eventSource": "iam.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.253.125.115", "userAgent": "Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56 Resource", "awsRegion": "us-east-1", "userIdentity": {"type": "AssumedRole", "principalId": "AROAUB2AA5FQRGAHITW4A:secmonkey", "arn": "arn:aws:sts::811596193553:assumed-role/SecurityMonkey/secmonkey", "accountId": "811596193553", "accessKeyId": "ASIAI9QHHRMC9F6XQJXN", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2017-05-27T04:59:38Z"}, "sessionIssuer": {"type": "Role", "principalId": "AROAUB2AA5FQRGAHITW4A", "arn": "arn:aws:iam::811596193553:role/SecurityMonkey", "accountId": "811596193553", "userName": "SecurityMonkey"}}}, "requestParameters": {"entityFilter": "Role", "policyArn": "arn:aws:iam::aws:policy/AdministratorAccess"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "a147415a4-4af6-45a4-8118-d6b61eb90af1", "record_id": "flaws_cloudtrail:0000288:a147415a4-4af6-45a4-8118-d6b61eb90af1", "row_index": 288, "timestamp": "2017-05-27T04:59:53Z", "event_type": "GetUser", "event_source": "iam.amazonaws.com", "principal": {"type": "AssumedRole", "arn": "arn:aws:sts::811596193553:assumed-role/SecurityMonkey/secmonkey", "account_id": "811596193553", "principal_id": "AROAUB2AA5FQRGAHITW4A:secmonkey", "user_name": null, "access_key_id": "ASIAI9QHHRMC9F6XQJXN", "session_issuer_arn": "arn:aws:iam::811596193553:role/SecurityMonkey", "session_issuer_user_name": "SecurityMonkey"}, "network": {"source_ip": "255.253.125.115", "user_agent": "Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56 Resource", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 986, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "a147415a4-4af6-45a4-8118-d6b61eb90af1", "eventTime": "2017-05-27T04:59:53Z", "eventName": "GetUser", "eventSource": "iam.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.253.125.115", "userAgent": "Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56 Resource", "awsRegion": "us-east-1", "userIdentity": {"type": "AssumedRole", "principalId": "AROAUB2AA5FQRGAHITW4A:secmonkey", "arn": "arn:aws:sts::811596193553:assumed-role/SecurityMonkey/secmonkey", "accountId": "811596193553", "accessKeyId": "ASIAI9QHHRMC9F6XQJXN", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2017-05-27T04:59:38Z"}, "sessionIssuer": {"type": "Role", "principalId": "AROAUB2AA5FQRGAHITW4A", "arn": "arn:aws:iam::811596193553:role/SecurityMonkey", "accountId": "811596193553", "userName": "SecurityMonkey"}}}, "requestParameters": {"userName": "piper"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "258903b3-1ef3-47d6-91b3-0b7fae1f6915", "record_id": "flaws_cloudtrail:0000289:258903b3-1ef3-47d6-91b3-0b7fae1f6915", "row_index": 289, "timestamp": "2017-05-27T04:59:53Z", "event_type": "ListEntitiesForPolicy", "event_source": "iam.amazonaws.com", "principal": {"type": "AssumedRole", "arn": "arn:aws:sts::811596193553:assumed-role/SecurityMonkey/secmonkey", "account_id": "811596193553", "principal_id": "AROAUB2AA5FQRGAHITW4A:secmonkey", "user_name": null, "access_key_id": "ASIAI9QHHRMC9F6XQJXN", "session_issuer_arn": "arn:aws:iam::811596193553:role/SecurityMonkey", "session_issuer_user_name": "SecurityMonkey"}, "network": {"source_ip": "255.253.125.115", "user_agent": "Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56 Resource", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 1062, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "258903b3-1ef3-47d6-91b3-0b7fae1f6915", "eventTime": "2017-05-27T04:59:53Z", "eventName": "ListEntitiesForPolicy", "eventSource": "iam.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.253.125.115", "userAgent": "Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56 Resource", "awsRegion": "us-east-1", "userIdentity": {"type": "AssumedRole", "principalId": "AROAUB2AA5FQRGAHITW4A:secmonkey", "arn": "arn:aws:sts::811596193553:assumed-role/SecurityMonkey/secmonkey", "accountId": "811596193553", "accessKeyId": "ASIAI9QHHRMC9F6XQJXN", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2017-05-27T04:59:38Z"}, "sessionIssuer": {"type": "Role", "principalId": "AROAUB2AA5FQRGAHITW4A", "arn": "arn:aws:iam::811596193553:role/SecurityMonkey", "accountId": "811596193553", "userName": "SecurityMonkey"}}}, "requestParameters": {"entityFilter": "User", "policyArn": "arn:aws:iam::aws:policy/AdministratorAccess"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "d560295c-5185-43f7-af1b-979e83b22479", "record_id": "flaws_cloudtrail:0000290:d560295c-5185-43f7-af1b-979e83b22479", "row_index": 290, "timestamp": "2017-05-27T04:59:53Z", "event_type": "GetPolicyVersion", "event_source": "iam.amazonaws.com", "principal": {"type": "AssumedRole", "arn": "arn:aws:sts::811596193553:assumed-role/SecurityMonkey/secmonkey", "account_id": "811596193553", "principal_id": "AROAUB2AA5FQRGAHITW4A:secmonkey", "user_name": null, "access_key_id": "ASIAI9QHHRMC9F6XQJXN", "session_issuer_arn": "arn:aws:iam::811596193553:role/SecurityMonkey", "session_issuer_user_name": "SecurityMonkey"}, "network": {"source_ip": "255.253.125.115", "user_agent": "Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56 Resource", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 1057, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "d560295c-5185-43f7-af1b-979e83b22479", "eventTime": "2017-05-27T04:59:53Z", "eventName": "GetPolicyVersion", "eventSource": "iam.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.253.125.115", "userAgent": "Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56 Resource", "awsRegion": "us-east-1", "userIdentity": {"type": "AssumedRole", "principalId": "AROAUB2AA5FQRGAHITW4A:secmonkey", "arn": "arn:aws:sts::811596193553:assumed-role/SecurityMonkey/secmonkey", "accountId": "811596193553", "accessKeyId": "ASIAI9QHHRMC9F6XQJXN", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2017-05-27T04:59:38Z"}, "sessionIssuer": {"type": "Role", "principalId": "AROAUB2AA5FQRGAHITW4A", "arn": "arn:aws:iam::811596193553:role/SecurityMonkey", "accountId": "811596193553", "userName": "SecurityMonkey"}}}, "requestParameters": {"policyArn": "arn:aws:iam::aws:policy/AmazonKinesisFullAccess", "versionId": "v1"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "867b5803-57e9-4467-b54c-7d4ffe073a70", "record_id": "flaws_cloudtrail:0000291:867b5803-57e9-4467-b54c-7d4ffe073a70", "row_index": 291, "timestamp": "2017-05-27T04:59:53Z", "event_type": "GetPolicyVersion", "event_source": "iam.amazonaws.com", "principal": {"type": "AssumedRole", "arn": "arn:aws:sts::811596193553:assumed-role/SecurityMonkey/secmonkey", "account_id": "811596193553", "principal_id": "AROAUB2AA5FQRGAHITW4A:secmonkey", "user_name": null, "access_key_id": "ASIAI9QHHRMC9F6XQJXN", "session_issuer_arn": "arn:aws:iam::811596193553:role/SecurityMonkey", "session_issuer_user_name": "SecurityMonkey"}, "network": {"source_ip": "255.253.125.115", "user_agent": "Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56 Resource", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 1069, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "867b5803-57e9-4467-b54c-7d4ffe073a70", "eventTime": "2017-05-27T04:59:53Z", "eventName": "GetPolicyVersion", "eventSource": "iam.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.253.125.115", "userAgent": "Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56 Resource", "awsRegion": "us-east-1", "userIdentity": {"type": "AssumedRole", "principalId": "AROAUB2AA5FQRGAHITW4A:secmonkey", "arn": "arn:aws:sts::811596193553:assumed-role/SecurityMonkey/secmonkey", "accountId": "811596193553", "accessKeyId": "ASIAI9QHHRMC9F6XQJXN", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2017-05-27T04:59:38Z"}, "sessionIssuer": {"type": "Role", "principalId": "AROAUB2AA5FQRGAHITW4A", "arn": "arn:aws:iam::811596193553:role/SecurityMonkey", "accountId": "811596193553", "userName": "SecurityMonkey"}}}, "requestParameters": {"policyArn": "arn:aws:iam::aws:policy/AmazonMachineLearningReadOnlyAccess", "versionId": "v1"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "9dc454d9-e98c-4fa7-9f8b-9344e38aa9c7", "record_id": "flaws_cloudtrail:0000292:9dc454d9-e98c-4fa7-9f8b-9344e38aa9c7", "row_index": 292, "timestamp": "2017-05-27T04:59:53Z", "event_type": "GetPolicyVersion", "event_source": "iam.amazonaws.com", "principal": {"type": "AssumedRole", "arn": "arn:aws:sts::811596193553:assumed-role/SecurityMonkey/secmonkey", "account_id": "811596193553", "principal_id": "AROAUB2AA5FQRGAHITW4A:secmonkey", "user_name": null, "access_key_id": "ASIAI9QHHRMC9F6XQJXN", "session_issuer_arn": "arn:aws:iam::811596193553:role/SecurityMonkey", "session_issuer_user_name": "SecurityMonkey"}, "network": {"source_ip": "255.253.125.115", "user_agent": "Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56 Resource", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 1065, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "9dc454d9-e98c-4fa7-9f8b-9344e38aa9c7", "eventTime": "2017-05-27T04:59:53Z", "eventName": "GetPolicyVersion", "eventSource": "iam.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.253.125.115", "userAgent": "Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56 Resource", "awsRegion": "us-east-1", "userIdentity": {"type": "AssumedRole", "principalId": "AROAUB2AA5FQRGAHITW4A:secmonkey", "arn": "arn:aws:sts::811596193553:assumed-role/SecurityMonkey/secmonkey", "accountId": "811596193553", "accessKeyId": "ASIAI9QHHRMC9F6XQJXN", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2017-05-27T04:59:38Z"}, "sessionIssuer": {"type": "Role", "principalId": "AROAUB2AA5FQRGAHITW4A", "arn": "arn:aws:iam::811596193553:role/SecurityMonkey", "accountId": "811596193553", "userName": "SecurityMonkey"}}}, "requestParameters": {"policyArn": "arn:aws:iam::aws:policy/AmazonMachineLearningFullAccess", "versionId": "v1"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "23e8191d-41a7-4972-96ba-9deea66e722d", "record_id": "flaws_cloudtrail:0000293:23e8191d-41a7-4972-96ba-9deea66e722d", "row_index": 293, "timestamp": "2017-05-27T04:59:53Z", "event_type": "GetPolicyVersion", "event_source": "iam.amazonaws.com", "principal": {"type": "AssumedRole", "arn": "arn:aws:sts::811596193553:assumed-role/SecurityMonkey/secmonkey", "account_id": "811596193553", "principal_id": "AROAUB2AA5FQRGAHITW4A:secmonkey", "user_name": null, "access_key_id": "ASIAI9QHHRMC9F6XQJXN", "session_issuer_arn": "arn:aws:iam::811596193553:role/SecurityMonkey", "session_issuer_user_name": "SecurityMonkey"}, "network": {"source_ip": "255.253.125.115", "user_agent": "Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56 Resource", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 1061, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "23e8191d-41a7-4972-96ba-9deea66e722d", "eventTime": "2017-05-27T04:59:53Z", "eventName": "GetPolicyVersion", "eventSource": "iam.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.253.125.115", "userAgent": "Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56 Resource", "awsRegion": "us-east-1", "userIdentity": {"type": "AssumedRole", "principalId": "AROAUB2AA5FQRGAHITW4A:secmonkey", "arn": "arn:aws:sts::811596193553:assumed-role/SecurityMonkey/secmonkey", "accountId": "811596193553", "accessKeyId": "ASIAI9QHHRMC9F6XQJXN", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2017-05-27T04:59:38Z"}, "sessionIssuer": {"type": "Role", "principalId": "AROAUB2AA5FQRGAHITW4A", "arn": "arn:aws:iam::811596193553:role/SecurityMonkey", "accountId": "811596193553", "userName": "SecurityMonkey"}}}, "requestParameters": {"policyArn": "arn:aws:iam::aws:policy/AmazonRekognitionFullAccess", "versionId": "v1"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "c4d076ef-2acd-4312-92d6-20b94af97871", "record_id": "flaws_cloudtrail:0000294:c4d076ef-2acd-4312-92d6-20b94af97871", "row_index": 294, "timestamp": "2017-05-27T04:59:53Z", "event_type": "GetPolicyVersion", "event_source": "iam.amazonaws.com", "principal": {"type": "AssumedRole", "arn": "arn:aws:sts::811596193553:assumed-role/SecurityMonkey/secmonkey", "account_id": "811596193553", "principal_id": "AROAUB2AA5FQRGAHITW4A:secmonkey", "user_name": null, "access_key_id": "ASIAI9QHHRMC9F6XQJXN", "session_issuer_arn": "arn:aws:iam::811596193553:role/SecurityMonkey", "session_issuer_user_name": "SecurityMonkey"}, "network": {"source_ip": "255.253.125.115", "user_agent": "Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56 Resource", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 1075, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "c4d076ef-2acd-4312-92d6-20b94af97871", "eventTime": "2017-05-27T04:59:53Z", "eventName": "GetPolicyVersion", "eventSource": "iam.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.253.125.115", "userAgent": "Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56 Resource", "awsRegion": "us-east-1", "userIdentity": {"type": "AssumedRole", "principalId": "AROAUB2AA5FQRGAHITW4A:secmonkey", "arn": "arn:aws:sts::811596193553:assumed-role/SecurityMonkey/secmonkey", "accountId": "811596193553", "accessKeyId": "ASIAI9QHHRMC9F6XQJXN", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2017-05-27T04:59:38Z"}, "sessionIssuer": {"type": "Role", "principalId": "AROAUB2AA5FQRGAHITW4A", "arn": "arn:aws:iam::811596193553:role/SecurityMonkey", "accountId": "811596193553", "userName": "SecurityMonkey"}}}, "requestParameters": {"policyArn": "arn:aws:iam::aws:policy/service-role/RDSCloudHsmAuthorizationRole", "versionId": "v1"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "8a0ed040-711c-4457-8f04-cdc9a6fa6902", "record_id": "flaws_cloudtrail:0000295:8a0ed040-711c-4457-8f04-cdc9a6fa6902", "row_index": 295, "timestamp": "2017-05-27T04:59:54Z", "event_type": "DescribeTrails", "event_source": "cloudtrail.amazonaws.com", "principal": {"type": "AssumedRole", "arn": "arn:aws:sts::811596193553:assumed-role/SecurityMonkey/secmonkey", "account_id": "811596193553", "principal_id": "AROAUB2AA5FQRGAHITW4A:secmonkey", "user_name": null, "access_key_id": "ASIAML1M12W303HSXH1S", "session_issuer_arn": "arn:aws:iam::811596193553:role/SecurityMonkey", "session_issuer_user_name": "SecurityMonkey"}, "network": {"source_ip": "255.253.125.115", "user_agent": "Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56", "aws_region": "ap-south-1"}, "resource_arns": [], "raw_record_size_bytes": 978, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "8a0ed040-711c-4457-8f04-cdc9a6fa6902", "eventTime": "2017-05-27T04:59:54Z", "eventName": "DescribeTrails", "eventSource": "cloudtrail.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.253.125.115", "userAgent": "Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56", "awsRegion": "ap-south-1", "userIdentity": {"type": "AssumedRole", "principalId": "AROAUB2AA5FQRGAHITW4A:secmonkey", "arn": "arn:aws:sts::811596193553:assumed-role/SecurityMonkey/secmonkey", "accountId": "811596193553", "accessKeyId": "ASIAML1M12W303HSXH1S", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2017-05-27T04:59:53Z"}, "sessionIssuer": {"type": "Role", "principalId": "AROAUB2AA5FQRGAHITW4A", "arn": "arn:aws:iam::811596193553:role/SecurityMonkey", "accountId": "811596193553", "userName": "SecurityMonkey"}}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "20ab4d27-753b-4d44-a306-74cff75417", "record_id": "flaws_cloudtrail:0000296:20ab4d27-753b-4d44-a306-74cff75417", "row_index": 296, "timestamp": "2017-05-27T04:59:54Z", "event_type": "GetTrailStatus", "event_source": "cloudtrail.amazonaws.com", "principal": {"type": "AssumedRole", "arn": "arn:aws:sts::811596193553:assumed-role/SecurityMonkey/secmonkey", "account_id": "811596193553", "principal_id": "AROAUB2AA5FQRGAHITW4A:secmonkey", "user_name": null, "access_key_id": "ASIAML1M12W303HSXH1S", "session_issuer_arn": "arn:aws:iam::811596193553:role/SecurityMonkey", "session_issuer_user_name": "SecurityMonkey"}, "network": {"source_ip": "255.253.125.115", "user_agent": "Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56", "aws_region": "ap-south-1"}, "resource_arns": [], "raw_record_size_bytes": 1041, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "20ab4d27-753b-4d44-a306-74cff75417", "eventTime": "2017-05-27T04:59:54Z", "eventName": "GetTrailStatus", "eventSource": "cloudtrail.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.253.125.115", "userAgent": "Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56", "awsRegion": "ap-south-1", "userIdentity": {"type": "AssumedRole", "principalId": "AROAUB2AA5FQRGAHITW4A:secmonkey", "arn": "arn:aws:sts::811596193553:assumed-role/SecurityMonkey/secmonkey", "accountId": "811596193553", "accessKeyId": "ASIAML1M12W303HSXH1S", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2017-05-27T04:59:53Z"}, "sessionIssuer": {"type": "Role", "principalId": "AROAUB2AA5FQRGAHITW4A", "arn": "arn:aws:iam::811596193553:role/SecurityMonkey", "accountId": "811596193553", "userName": "SecurityMonkey"}}}, "requestParameters": {"name": "arn:aws:cloudtrail:us-west-2:811596193553:trail/cloudtrail"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "b9a1358d-83ff-40e1-a741-f9c6d71523b", "record_id": "flaws_cloudtrail:0000297:b9a1358d-83ff-40e1-a741-f9c6d71523b", "row_index": 297, "timestamp": "2017-05-27T04:59:54Z", "event_type": "GetPolicyVersion", "event_source": "iam.amazonaws.com", "principal": {"type": "AssumedRole", "arn": "arn:aws:sts::811596193553:assumed-role/SecurityMonkey/secmonkey", "account_id": "811596193553", "principal_id": "AROAUB2AA5FQRGAHITW4A:secmonkey", "user_name": null, "access_key_id": "ASIAI9QHHRMC9F6XQJXN", "session_issuer_arn": "arn:aws:iam::811596193553:role/SecurityMonkey", "session_issuer_user_name": "SecurityMonkey"}, "network": {"source_ip": "255.253.125.115", "user_agent": "Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56 Resource", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 1059, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "b9a1358d-83ff-40e1-a741-f9c6d71523b", "eventTime": "2017-05-27T04:59:54Z", "eventName": "GetPolicyVersion", "eventSource": "iam.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.253.125.115", "userAgent": "Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56 Resource", "awsRegion": "us-east-1", "userIdentity": {"type": "AssumedRole", "principalId": "AROAUB2AA5FQRGAHITW4A:secmonkey", "arn": "arn:aws:sts::811596193553:assumed-role/SecurityMonkey/secmonkey", "accountId": "811596193553", "accessKeyId": "ASIAI9QHHRMC9F6XQJXN", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2017-05-27T04:59:38Z"}, "sessionIssuer": {"type": "Role", "principalId": "AROAUB2AA5FQRGAHITW4A", "arn": "arn:aws:iam::811596193553:role/SecurityMonkey", "accountId": "811596193553", "userName": "SecurityMonkey"}}}, "requestParameters": {"policyArn": "arn:aws:iam::aws:policy/AWSDataPipeline_FullAccess", "versionId": "v1"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "8c53067-8964-4342-a148-67af92ce4a76", "record_id": "flaws_cloudtrail:0000298:8c53067-8964-4342-a148-67af92ce4a76", "row_index": 298, "timestamp": "2017-05-27T04:59:54Z", "event_type": "GetPolicyVersion", "event_source": "iam.amazonaws.com", "principal": {"type": "AssumedRole", "arn": "arn:aws:sts::811596193553:assumed-role/SecurityMonkey/secmonkey", "account_id": "811596193553", "principal_id": "AROAUB2AA5FQRGAHITW4A:secmonkey", "user_name": null, "access_key_id": "ASIAI9QHHRMC9F6XQJXN", "session_issuer_arn": "arn:aws:iam::811596193553:role/SecurityMonkey", "session_issuer_user_name": "SecurityMonkey"}, "network": {"source_ip": "255.253.125.115", "user_agent": "Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56 Resource", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 1054, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "8c53067-8964-4342-a148-67af92ce4a76", "eventTime": "2017-05-27T04:59:54Z", "eventName": "GetPolicyVersion", "eventSource": "iam.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.253.125.115", "userAgent": "Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56 Resource", "awsRegion": "us-east-1", "userIdentity": {"type": "AssumedRole", "principalId": "AROAUB2AA5FQRGAHITW4A:secmonkey", "arn": "arn:aws:sts::811596193553:assumed-role/SecurityMonkey/secmonkey", "accountId": "811596193553", "accessKeyId": "ASIAI9QHHRMC9F6XQJXN", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2017-05-27T04:59:38Z"}, "sessionIssuer": {"type": "Role", "principalId": "AROAUB2AA5FQRGAHITW4A", "arn": "arn:aws:iam::811596193553:role/SecurityMonkey", "accountId": "811596193553", "userName": "SecurityMonkey"}}}, "requestParameters": {"policyArn": "arn:aws:iam::aws:policy/AWSCodeStarFullAccess", "versionId": "v1"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "3720da3e-281e-42b4-adbc-eb3b0ca2c71d", "record_id": "flaws_cloudtrail:0000299:3720da3e-281e-42b4-adbc-eb3b0ca2c71d", "row_index": 299, "timestamp": "2017-05-27T04:59:54Z", "event_type": "GetPolicyVersion", "event_source": "iam.amazonaws.com", "principal": {"type": "AssumedRole", "arn": "arn:aws:sts::811596193553:assumed-role/SecurityMonkey/secmonkey", "account_id": "811596193553", "principal_id": "AROAUB2AA5FQRGAHITW4A:secmonkey", "user_name": null, "access_key_id": "ASIAI9QHHRMC9F6XQJXN", "session_issuer_arn": "arn:aws:iam::811596193553:role/SecurityMonkey", "session_issuer_user_name": "SecurityMonkey"}, "network": {"source_ip": "255.253.125.115", "user_agent": "Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56 Resource", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 1048, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "3720da3e-281e-42b4-adbc-eb3b0ca2c71d", "eventTime": "2017-05-27T04:59:54Z", "eventName": "GetPolicyVersion", "eventSource": "iam.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.253.125.115", "userAgent": "Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56 Resource", "awsRegion": "us-east-1", "userIdentity": {"type": "AssumedRole", "principalId": "AROAUB2AA5FQRGAHITW4A:secmonkey", "arn": "arn:aws:sts::811596193553:assumed-role/SecurityMonkey/secmonkey", "accountId": "811596193553", "accessKeyId": "ASIAI9QHHRMC9F6XQJXN", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2017-05-27T04:59:38Z"}, "sessionIssuer": {"type": "Role", "principalId": "AROAUB2AA5FQRGAHITW4A", "arn": "arn:aws:iam::811596193553:role/SecurityMonkey", "accountId": "811596193553", "userName": "SecurityMonkey"}}}, "requestParameters": {"policyArn": "arn:aws:iam::aws:policy/SecurityAudit", "versionId": "v10"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "17cac4e3-7952-4ccf-ac08-9f432d30bab2", "record_id": "flaws_cloudtrail:0000300:17cac4e3-7952-4ccf-ac08-9f432d30bab2", "row_index": 300, "timestamp": "2017-05-27T04:59:54Z", "event_type": "ListEntitiesForPolicy", "event_source": "iam.amazonaws.com", "principal": {"type": "AssumedRole", "arn": "arn:aws:sts::811596193553:assumed-role/SecurityMonkey/secmonkey", "account_id": "811596193553", "principal_id": "AROAUB2AA5FQRGAHITW4A:secmonkey", "user_name": null, "access_key_id": "ASIAI9QHHRMC9F6XQJXN", "session_issuer_arn": "arn:aws:iam::811596193553:role/SecurityMonkey", "session_issuer_user_name": "SecurityMonkey"}, "network": {"source_ip": "255.253.125.115", "user_agent": "Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56 Resource", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 1058, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "17cac4e3-7952-4ccf-ac08-9f432d30bab2", "eventTime": "2017-05-27T04:59:54Z", "eventName": "ListEntitiesForPolicy", "eventSource": "iam.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.253.125.115", "userAgent": "Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56 Resource", "awsRegion": "us-east-1", "userIdentity": {"type": "AssumedRole", "principalId": "AROAUB2AA5FQRGAHITW4A:secmonkey", "arn": "arn:aws:sts::811596193553:assumed-role/SecurityMonkey/secmonkey", "accountId": "811596193553", "accessKeyId": "ASIAI9QHHRMC9F6XQJXN", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2017-05-27T04:59:38Z"}, "sessionIssuer": {"type": "Role", "principalId": "AROAUB2AA5FQRGAHITW4A", "arn": "arn:aws:iam::811596193553:role/SecurityMonkey", "accountId": "811596193553", "userName": "SecurityMonkey"}}}, "requestParameters": {"entityFilter": "Group", "policyArn": "arn:aws:iam::aws:policy/SecurityAudit"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "17633-8e7a-4b59-869f-e5382310f954", "record_id": "flaws_cloudtrail:0000301:17633-8e7a-4b59-869f-e5382310f954", "row_index": 301, "timestamp": "2017-05-27T04:59:54Z", "event_type": "GetRole", "event_source": "iam.amazonaws.com", "principal": {"type": "AssumedRole", "arn": "arn:aws:sts::811596193553:assumed-role/SecurityMonkey/secmonkey", "account_id": "811596193553", "principal_id": "AROAUB2AA5FQRGAHITW4A:secmonkey", "user_name": null, "access_key_id": "ASIAI9QHHRMC9F6XQJXN", "session_issuer_arn": "arn:aws:iam::811596193553:role/SecurityMonkey", "session_issuer_user_name": "SecurityMonkey"}, "network": {"source_ip": "255.253.125.115", "user_agent": "Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56 Resource", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 994, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "17633-8e7a-4b59-869f-e5382310f954", "eventTime": "2017-05-27T04:59:54Z", "eventName": "GetRole", "eventSource": "iam.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.253.125.115", "userAgent": "Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56 Resource", "awsRegion": "us-east-1", "userIdentity": {"type": "AssumedRole", "principalId": "AROAUB2AA5FQRGAHITW4A:secmonkey", "arn": "arn:aws:sts::811596193553:assumed-role/SecurityMonkey/secmonkey", "accountId": "811596193553", "accessKeyId": "ASIAI9QHHRMC9F6XQJXN", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2017-05-27T04:59:38Z"}, "sessionIssuer": {"type": "Role", "principalId": "AROAUB2AA5FQRGAHITW4A", "arn": "arn:aws:iam::811596193553:role/SecurityMonkey", "accountId": "811596193553", "userName": "SecurityMonkey"}}}, "requestParameters": {"roleName": "SecurityMonkey"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "15ad4697-c26e-44c0-82c9-6d98fd0fffc4", "record_id": "flaws_cloudtrail:0000302:15ad4697-c26e-44c0-82c9-6d98fd0fffc4", "row_index": 302, "timestamp": "2017-05-27T04:59:54Z", "event_type": "ListEntitiesForPolicy", "event_source": "iam.amazonaws.com", "principal": {"type": "AssumedRole", "arn": "arn:aws:sts::811596193553:assumed-role/SecurityMonkey/secmonkey", "account_id": "811596193553", "principal_id": "AROAUB2AA5FQRGAHITW4A:secmonkey", "user_name": null, "access_key_id": "ASIAI9QHHRMC9F6XQJXN", "session_issuer_arn": "arn:aws:iam::811596193553:role/SecurityMonkey", "session_issuer_user_name": "SecurityMonkey"}, "network": {"source_ip": "255.253.125.115", "user_agent": "Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56 Resource", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 1057, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "15ad4697-c26e-44c0-82c9-6d98fd0fffc4", "eventTime": "2017-05-27T04:59:54Z", "eventName": "ListEntitiesForPolicy", "eventSource": "iam.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.253.125.115", "userAgent": "Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56 Resource", "awsRegion": "us-east-1", "userIdentity": {"type": "AssumedRole", "principalId": "AROAUB2AA5FQRGAHITW4A:secmonkey", "arn": "arn:aws:sts::811596193553:assumed-role/SecurityMonkey/secmonkey", "accountId": "811596193553", "accessKeyId": "ASIAI9QHHRMC9F6XQJXN", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2017-05-27T04:59:38Z"}, "sessionIssuer": {"type": "Role", "principalId": "AROAUB2AA5FQRGAHITW4A", "arn": "arn:aws:iam::811596193553:role/SecurityMonkey", "accountId": "811596193553", "userName": "SecurityMonkey"}}}, "requestParameters": {"entityFilter": "Role", "policyArn": "arn:aws:iam::aws:policy/SecurityAudit"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "6f4bc147-4eca-4e78-aa35-c5424ab57eed", "record_id": "flaws_cloudtrail:0000303:6f4bc147-4eca-4e78-aa35-c5424ab57eed", "row_index": 303, "timestamp": "2017-05-27T04:59:54Z", "event_type": "GetUser", "event_source": "iam.amazonaws.com", "principal": {"type": "AssumedRole", "arn": "arn:aws:sts::811596193553:assumed-role/SecurityMonkey/secmonkey", "account_id": "811596193553", "principal_id": "AROAUB2AA5FQRGAHITW4A:secmonkey", "user_name": null, "access_key_id": "ASIAI9QHHRMC9F6XQJXN", "session_issuer_arn": "arn:aws:iam::811596193553:role/SecurityMonkey", "session_issuer_user_name": "SecurityMonkey"}, "network": {"source_ip": "255.253.125.115", "user_agent": "Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56 Resource", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 988, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "6f4bc147-4eca-4e78-aa35-c5424ab57eed", "eventTime": "2017-05-27T04:59:54Z", "eventName": "GetUser", "eventSource": "iam.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.253.125.115", "userAgent": "Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56 Resource", "awsRegion": "us-east-1", "userIdentity": {"type": "AssumedRole", "principalId": "AROAUB2AA5FQRGAHITW4A:secmonkey", "arn": "arn:aws:sts::811596193553:assumed-role/SecurityMonkey/secmonkey", "accountId": "811596193553", "accessKeyId": "ASIAI9QHHRMC9F6XQJXN", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2017-05-27T04:59:38Z"}, "sessionIssuer": {"type": "Role", "principalId": "AROAUB2AA5FQRGAHITW4A", "arn": "arn:aws:iam::811596193553:role/SecurityMonkey", "accountId": "811596193553", "userName": "SecurityMonkey"}}}, "requestParameters": {"userName": "piper"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "69eae768-1c52-44fd-9adb-a006c12934c5", "record_id": "flaws_cloudtrail:0000304:69eae768-1c52-44fd-9adb-a006c12934c5", "row_index": 304, "timestamp": "2017-05-27T04:59:54Z", "event_type": "GetUser", "event_source": "iam.amazonaws.com", "principal": {"type": "AssumedRole", "arn": "arn:aws:sts::811596193553:assumed-role/SecurityMonkey/secmonkey", "account_id": "811596193553", "principal_id": "AROAUB2AA5FQRGAHITW4A:secmonkey", "user_name": null, "access_key_id": "ASIAI9QHHRMC9F6XQJXN", "session_issuer_arn": "arn:aws:iam::811596193553:role/SecurityMonkey", "session_issuer_user_name": "SecurityMonkey"}, "network": {"source_ip": "255.253.125.115", "user_agent": "Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56 Resource", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 989, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "69eae768-1c52-44fd-9adb-a006c12934c5", "eventTime": "2017-05-27T04:59:54Z", "eventName": "GetUser", "eventSource": "iam.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.253.125.115", "userAgent": "Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56 Resource", "awsRegion": "us-east-1", "userIdentity": {"type": "AssumedRole", "principalId": "AROAUB2AA5FQRGAHITW4A:secmonkey", "arn": "arn:aws:sts::811596193553:assumed-role/SecurityMonkey/secmonkey", "accountId": "811596193553", "accessKeyId": "ASIAI9QHHRMC9F6XQJXN", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2017-05-27T04:59:38Z"}, "sessionIssuer": {"type": "Role", "principalId": "AROAUB2AA5FQRGAHITW4A", "arn": "arn:aws:iam::811596193553:role/SecurityMonkey", "accountId": "811596193553", "userName": "SecurityMonkey"}}}, "requestParameters": {"userName": "Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "3f8e06a8-5ef0-4f4a-b85c-3258ad69260f", "record_id": "flaws_cloudtrail:0000305:3f8e06a8-5ef0-4f4a-b85c-3258ad69260f", "row_index": 305, "timestamp": "2017-05-27T04:59:54Z", "event_type": "ListEntitiesForPolicy", "event_source": "iam.amazonaws.com", "principal": {"type": "AssumedRole", "arn": "arn:aws:sts::811596193553:assumed-role/SecurityMonkey/secmonkey", "account_id": "811596193553", "principal_id": "AROAUB2AA5FQRGAHITW4A:secmonkey", "user_name": null, "access_key_id": "ASIAI9QHHRMC9F6XQJXN", "session_issuer_arn": "arn:aws:iam::811596193553:role/SecurityMonkey", "session_issuer_user_name": "SecurityMonkey"}, "network": {"source_ip": "255.253.125.115", "user_agent": "Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56 Resource", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 1058, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "3f8e06a8-5ef0-4f4a-b85c-3258ad69260f", "eventTime": "2017-05-27T04:59:54Z", "eventName": "ListEntitiesForPolicy", "eventSource": "iam.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.253.125.115", "userAgent": "Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56 Resource", "awsRegion": "us-east-1", "userIdentity": {"type": "AssumedRole", "principalId": "AROAUB2AA5FQRGAHITW4A:secmonkey", "arn": "arn:aws:sts::811596193553:assumed-role/SecurityMonkey/secmonkey", "accountId": "811596193553", "accessKeyId": "ASIAI9QHHRMC9F6XQJXN", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2017-05-27T04:59:38Z"}, "sessionIssuer": {"type": "Role", "principalId": "AROAUB2AA5FQRGAHITW4A", "arn": "arn:aws:iam::811596193553:role/SecurityMonkey", "accountId": "811596193553", "userName": "SecurityMonkey"}}}, "requestParameters": {"entityFilter": "User", "policyArn": "arn:aws:iam::aws:policy/SecurityAudit"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "f6af6d86-f0bb-42a5-9741-6ae3d02a48ee", "record_id": "flaws_cloudtrail:0000306:f6af6d86-f0bb-42a5-9741-6ae3d02a48ee", "row_index": 306, "timestamp": "2017-05-27T04:59:54Z", "event_type": "GetPolicyVersion", "event_source": "iam.amazonaws.com", "principal": {"type": "AssumedRole", "arn": "arn:aws:sts::811596193553:assumed-role/SecurityMonkey/secmonkey", "account_id": "811596193553", "principal_id": "AROAUB2AA5FQRGAHITW4A:secmonkey", "user_name": null, "access_key_id": "ASIAI9QHHRMC9F6XQJXN", "session_issuer_arn": "arn:aws:iam::811596193553:role/SecurityMonkey", "session_issuer_user_name": "SecurityMonkey"}, "network": {"source_ip": "255.253.125.115", "user_agent": "Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56 Resource", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 1052, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "f6af6d86-f0bb-42a5-9741-6ae3d02a48ee", "eventTime": "2017-05-27T04:59:54Z", "eventName": "GetPolicyVersion", "eventSource": "iam.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.253.125.115", "userAgent": "Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56 Resource", "awsRegion": "us-east-1", "userIdentity": {"type": "AssumedRole", "principalId": "AROAUB2AA5FQRGAHITW4A:secmonkey", "arn": "arn:aws:sts::811596193553:assumed-role/SecurityMonkey/secmonkey", "accountId": "811596193553", "accessKeyId": "ASIAI9QHHRMC9F6XQJXN", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2017-05-27T04:59:38Z"}, "sessionIssuer": {"type": "Role", "principalId": "AROAUB2AA5FQRGAHITW4A", "arn": "arn:aws:iam::811596193553:role/SecurityMonkey", "accountId": "811596193553", "userName": "SecurityMonkey"}}}, "requestParameters": {"policyArn": "arn:aws:iam::aws:policy/AWSIoTConfigAccess", "versionId": "v4"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "22060b7b-15f9-4853-948e-9e17227fa816", "record_id": "flaws_cloudtrail:0000307:22060b7b-15f9-4853-948e-9e17227fa816", "row_index": 307, "timestamp": "2017-05-27T04:59:54Z", "event_type": "GetPolicyVersion", "event_source": "iam.amazonaws.com", "principal": {"type": "AssumedRole", "arn": "arn:aws:sts::811596193553:assumed-role/SecurityMonkey/secmonkey", "account_id": "811596193553", "principal_id": "AROAUB2AA5FQRGAHITW4A:secmonkey", "user_name": null, "access_key_id": "ASIAI9QHHRMC9F6XQJXN", "session_issuer_arn": "arn:aws:iam::811596193553:role/SecurityMonkey", "session_issuer_user_name": "SecurityMonkey"}, "network": {"source_ip": "255.253.125.115", "user_agent": "Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56 Resource", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 1053, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "22060b7b-15f9-4853-948e-9e17227fa816", "eventTime": "2017-05-27T04:59:54Z", "eventName": "GetPolicyVersion", "eventSource": "iam.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.253.125.115", "userAgent": "Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56 Resource", "awsRegion": "us-east-1", "userIdentity": {"type": "AssumedRole", "principalId": "AROAUB2AA5FQRGAHITW4A:secmonkey", "arn": "arn:aws:sts::811596193553:assumed-role/SecurityMonkey/secmonkey", "accountId": "811596193553", "accessKeyId": "ASIAI9QHHRMC9F6XQJXN", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2017-05-27T04:59:38Z"}, "sessionIssuer": {"type": "Role", "principalId": "AROAUB2AA5FQRGAHITW4A", "arn": "arn:aws:iam::811596193553:role/SecurityMonkey", "accountId": "811596193553", "userName": "SecurityMonkey"}}}, "requestParameters": {"policyArn": "arn:aws:iam::aws:policy/AWSConfigUserAccess", "versionId": "v3"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "8ed70594-2901-4b29-b804-57f5fe8e920a", "record_id": "flaws_cloudtrail:0000308:8ed70594-2901-4b29-b804-57f5fe8e920a", "row_index": 308, "timestamp": "2017-05-27T04:59:55Z", "event_type": "AssumeRole", "event_source": "sts.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/SecurityMokey", "account_id": "811596193553", "principal_id": "AIDAQ9SRE1SZZZ4Q4UOJH", "user_name": "SecurityMokey", "access_key_id": "AKIAXJ0III4JBKZDXGXN", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "255.253.125.115", "user_agent": "Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56", "aws_region": "us-east-1"}, "resource_arns": ["arn:aws:iam::811596193553:role/SecurityMonkey"], "raw_record_size_bytes": 1448, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "resources", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "8ed70594-2901-4b29-b804-57f5fe8e920a", "eventTime": "2017-05-27T04:59:55Z", "eventName": "AssumeRole", "eventSource": "sts.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.253.125.115", "userAgent": "Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDAQ9SRE1SZZZ4Q4UOJH", "arn": "arn:aws:iam::811596193553:user/SecurityMokey", "accountId": "811596193553", "accessKeyId": "AKIAXJ0III4JBKZDXGXN", "userName": "SecurityMokey"}, "requestParameters": {"roleArn": "arn:aws:iam::811596193553:role/SecurityMonkey", "roleSessionName": "secmonkey"}, "responseElements": {"credentials": {"accessKeyId": "ASIAJAWDQ3SI48DA836P", "expiration": "May 27, 2017 5:59:55 AM", "sessionToken": "FQoDYXdzECYaDL1yadfsp4EFRVy6tCLMAd6ztnrpy61bBPKbRUl/NGnhgSKrDu/tKwnDh7Ps62hks88rpvapodw2MPFAbeovxzOKyH22C9A6h5+vtmpAKxt2nsa8iraiyeaFpaXTt8ZhamLk4GTi+aV8Jvs3/CukbHkvQ6tgUKqlDmhbTHffcXAuUTxW43E9NAnY4rm/yoTz09qvSo4eJHpptEemVY78xc7XAqwYl754JE6g+MwsBew9HmBjM+0PU+niNwQI5qfXQ/1dNqKedljFRIuAYTCQ0n46hIhTn3TE/Eaw3ijLj6TJBQ=="}, "assumedRoleUser": {"assumedRoleId": "AROAUB2AA5FQRGAHITW4A:secmonkey", "arn": "arn:aws:sts::811596193553:assumed-role/SecurityMonkey/secmonkey"}}, "resources": [{"ARN": "arn:aws:iam::811596193553:role/SecurityMonkey", "accountId": "811596193553", "type": "AWS::IAM::Role"}]}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "fdf704a3-89aa-4ee0-8c9e-13040a26b0b4", "record_id": "flaws_cloudtrail:0000309:fdf704a3-89aa-4ee0-8c9e-13040a26b0b4", "row_index": 309, "timestamp": "2017-05-27T04:59:55Z", "event_type": "GetPolicyVersion", "event_source": "iam.amazonaws.com", "principal": {"type": "AssumedRole", "arn": "arn:aws:sts::811596193553:assumed-role/SecurityMonkey/secmonkey", "account_id": "811596193553", "principal_id": "AROAUB2AA5FQRGAHITW4A:secmonkey", "user_name": null, "access_key_id": "ASIAI9QHHRMC9F6XQJXN", "session_issuer_arn": "arn:aws:iam::811596193553:role/SecurityMonkey", "session_issuer_user_name": "SecurityMonkey"}, "network": {"source_ip": "255.253.125.115", "user_agent": "Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56 Resource", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 1056, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "fdf704a3-89aa-4ee0-8c9e-13040a26b0b4", "eventTime": "2017-05-27T04:59:55Z", "eventName": "GetPolicyVersion", "eventSource": "iam.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.253.125.115", "userAgent": "Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56 Resource", "awsRegion": "us-east-1", "userIdentity": {"type": "AssumedRole", "principalId": "AROAUB2AA5FQRGAHITW4A:secmonkey", "arn": "arn:aws:sts::811596193553:assumed-role/SecurityMonkey/secmonkey", "accountId": "811596193553", "accessKeyId": "ASIAI9QHHRMC9F6XQJXN", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2017-05-27T04:59:38Z"}, "sessionIssuer": {"type": "Role", "principalId": "AROAUB2AA5FQRGAHITW4A", "arn": "arn:aws:iam::811596193553:role/SecurityMonkey", "accountId": "811596193553", "userName": "SecurityMonkey"}}}, "requestParameters": {"policyArn": "arn:aws:iam::aws:policy/AWSOpsWorksRegisterCLI", "versionId": "v1"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "4b9410bd-c8b1-40a9-9fb7-0b20db2f01cf", "record_id": "flaws_cloudtrail:0000310:4b9410bd-c8b1-40a9-9fb7-0b20db2f01cf", "row_index": 310, "timestamp": "2017-05-27T04:59:55Z", "event_type": "GetPolicyVersion", "event_source": "iam.amazonaws.com", "principal": {"type": "AssumedRole", "arn": "arn:aws:sts::811596193553:assumed-role/SecurityMonkey/secmonkey", "account_id": "811596193553", "principal_id": "AROAUB2AA5FQRGAHITW4A:secmonkey", "user_name": null, "access_key_id": "ASIAI9QHHRMC9F6XQJXN", "session_issuer_arn": "arn:aws:iam::811596193553:role/SecurityMonkey", "session_issuer_user_name": "SecurityMonkey"}, "network": {"source_ip": "255.253.125.115", "user_agent": "Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56 Resource", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 1069, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "4b9410bd-c8b1-40a9-9fb7-0b20db2f01cf", "eventTime": "2017-05-27T04:59:55Z", "eventName": "GetPolicyVersion", "eventSource": "iam.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.253.125.115", "userAgent": "Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56 Resource", "awsRegion": "us-east-1", "userIdentity": {"type": "AssumedRole", "principalId": "AROAUB2AA5FQRGAHITW4A:secmonkey", "arn": "arn:aws:sts::811596193553:assumed-role/SecurityMonkey/secmonkey", "accountId": "811596193553", "accessKeyId": "ASIAI9QHHRMC9F6XQJXN", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2017-05-27T04:59:38Z"}, "sessionIssuer": {"type": "Role", "principalId": "AROAUB2AA5FQRGAHITW4A", "arn": "arn:aws:iam::811596193553:role/SecurityMonkey", "accountId": "811596193553", "userName": "SecurityMonkey"}}}, "requestParameters": {"policyArn": "arn:aws:iam::aws:policy/AmazonKinesisFirehoseReadOnlyAccess", "versionId": "v1"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "d0c22213-3edb-448f-a929-e18f8f4e103b", "record_id": "flaws_cloudtrail:0000311:d0c22213-3edb-448f-a929-e18f8f4e103b", "row_index": 311, "timestamp": "2017-05-27T04:59:55Z", "event_type": "GetPolicyVersion", "event_source": "iam.amazonaws.com", "principal": {"type": "AssumedRole", "arn": "arn:aws:sts::811596193553:assumed-role/SecurityMonkey/secmonkey", "account_id": "811596193553", "principal_id": "AROAUB2AA5FQRGAHITW4A:secmonkey", "user_name": null, "access_key_id": "ASIAI9QHHRMC9F6XQJXN", "session_issuer_arn": "arn:aws:iam::811596193553:role/SecurityMonkey", "session_issuer_user_name": "SecurityMonkey"}, "network": {"source_ip": "255.253.125.115", "user_agent": "Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56 Resource", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 1063, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "d0c22213-3edb-448f-a929-e18f8f4e103b", "eventTime": "2017-05-27T04:59:55Z", "eventName": "GetPolicyVersion", "eventSource": "iam.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.253.125.115", "userAgent": "Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56 Resource", "awsRegion": "us-east-1", "userIdentity": {"type": "AssumedRole", "principalId": "AROAUB2AA5FQRGAHITW4A:secmonkey", "arn": "arn:aws:sts::811596193553:assumed-role/SecurityMonkey/secmonkey", "accountId": "811596193553", "accessKeyId": "ASIAI9QHHRMC9F6XQJXN", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2017-05-27T04:59:38Z"}, "sessionIssuer": {"type": "Role", "principalId": "AROAUB2AA5FQRGAHITW4A", "arn": "arn:aws:iam::811596193553:role/SecurityMonkey", "accountId": "811596193553", "userName": "SecurityMonkey"}}}, "requestParameters": {"policyArn": "arn:aws:iam::aws:policy/CloudWatchLogsReadOnlyAccess", "versionId": "v2"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "4bded0b5-43d7-4232-a2dc-ebad56069882", "record_id": "flaws_cloudtrail:0000312:4bded0b5-43d7-4232-a2dc-ebad56069882", "row_index": 312, "timestamp": "2017-05-27T04:59:55Z", "event_type": "GetPolicyVersion", "event_source": "iam.amazonaws.com", "principal": {"type": "AssumedRole", "arn": "arn:aws:sts::811596193553:assumed-role/SecurityMonkey/secmonkey", "account_id": "811596193553", "principal_id": "AROAUB2AA5FQRGAHITW4A:secmonkey", "user_name": null, "access_key_id": "ASIAI9QHHRMC9F6XQJXN", "session_issuer_arn": "arn:aws:iam::811596193553:role/SecurityMonkey", "session_issuer_user_name": "SecurityMonkey"}, "network": {"source_ip": "255.253.125.115", "user_agent": "Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56 Resource", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 1053, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "4bded0b5-43d7-4232-a2dc-ebad56069882", "eventTime": "2017-05-27T04:59:55Z", "eventName": "GetPolicyVersion", "eventSource": "iam.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.253.125.115", "userAgent": "Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56 Resource", "awsRegion": "us-east-1", "userIdentity": {"type": "AssumedRole", "principalId": "AROAUB2AA5FQRGAHITW4A:secmonkey", "arn": "arn:aws:sts::811596193553:assumed-role/SecurityMonkey/secmonkey", "accountId": "811596193553", "accessKeyId": "ASIAI9QHHRMC9F6XQJXN", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2017-05-27T04:59:38Z"}, "sessionIssuer": {"type": "Role", "principalId": "AROAUB2AA5FQRGAHITW4A", "arn": "arn:aws:iam::811596193553:role/SecurityMonkey", "accountId": "811596193553", "userName": "SecurityMonkey"}}}, "requestParameters": {"policyArn": "arn:aws:iam::aws:policy/AmazonSESFullAccess", "versionId": "v1"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "e648b9a6-6346-462e-8986-3040c538fff3", "record_id": "flaws_cloudtrail:0000313:e648b9a6-6346-462e-8986-3040c538fff3", "row_index": 313, "timestamp": "2017-05-27T04:59:55Z", "event_type": "GetPolicyVersion", "event_source": "iam.amazonaws.com", "principal": {"type": "AssumedRole", "arn": "arn:aws:sts::811596193553:assumed-role/SecurityMonkey/secmonkey", "account_id": "811596193553", "principal_id": "AROAUB2AA5FQRGAHITW4A:secmonkey", "user_name": null, "access_key_id": "ASIAI9QHHRMC9F6XQJXN", "session_issuer_arn": "arn:aws:iam::811596193553:role/SecurityMonkey", "session_issuer_user_name": "SecurityMonkey"}, "network": {"source_ip": "255.253.125.115", "user_agent": "Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56 Resource", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 1064, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "e648b9a6-6346-462e-8986-3040c538fff3", "eventTime": "2017-05-27T04:59:55Z", "eventName": "GetPolicyVersion", "eventSource": "iam.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.253.125.115", "userAgent": "Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56 Resource", "awsRegion": "us-east-1", "userIdentity": {"type": "AssumedRole", "principalId": "AROAUB2AA5FQRGAHITW4A:secmonkey", "arn": "arn:aws:sts::811596193553:assumed-role/SecurityMonkey/secmonkey", "accountId": "811596193553", "accessKeyId": "ASIAI9QHHRMC9F6XQJXN", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2017-05-27T04:59:38Z"}, "sessionIssuer": {"type": "Role", "principalId": "AROAUB2AA5FQRGAHITW4A", "arn": "arn:aws:iam::811596193553:role/SecurityMonkey", "accountId": "811596193553", "userName": "SecurityMonkey"}}}, "requestParameters": {"policyArn": "arn:aws:iam::aws:policy/service-role/AWSCodeDeployRole", "versionId": "v4"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "333cbea3-d18a-4ea9-9aac-da898d865086", "record_id": "flaws_cloudtrail:0000314:333cbea3-d18a-4ea9-9aac-da898d865086", "row_index": 314, "timestamp": "2017-05-27T04:59:55Z", "event_type": "GetPolicyVersion", "event_source": "iam.amazonaws.com", "principal": {"type": "AssumedRole", "arn": "arn:aws:sts::811596193553:assumed-role/SecurityMonkey/secmonkey", "account_id": "811596193553", "principal_id": "AROAUB2AA5FQRGAHITW4A:secmonkey", "user_name": null, "access_key_id": "ASIAI9QHHRMC9F6XQJXN", "session_issuer_arn": "arn:aws:iam::811596193553:role/SecurityMonkey", "session_issuer_user_name": "SecurityMonkey"}, "network": {"source_ip": "255.253.125.115", "user_agent": "Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56 Resource", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 1055, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "333cbea3-d18a-4ea9-9aac-da898d865086", "eventTime": "2017-05-27T04:59:55Z", "eventName": "GetPolicyVersion", "eventSource": "iam.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.253.125.115", "userAgent": "Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56 Resource", "awsRegion": "us-east-1", "userIdentity": {"type": "AssumedRole", "principalId": "AROAUB2AA5FQRGAHITW4A:secmonkey", "arn": "arn:aws:sts::811596193553:assumed-role/SecurityMonkey/secmonkey", "accountId": "811596193553", "accessKeyId": "ASIAI9QHHRMC9F6XQJXN", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2017-05-27T04:59:38Z"}, "sessionIssuer": {"type": "Role", "principalId": "AROAUB2AA5FQRGAHITW4A", "arn": "arn:aws:iam::811596193553:role/SecurityMonkey", "accountId": "811596193553", "userName": "SecurityMonkey"}}}, "requestParameters": {"policyArn": "arn:aws:iam::aws:policy/AmazonWorkSpacesAdmin", "versionId": "v2"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "6ecca7b5-a122-40b3-ad14-33654c415", "record_id": "flaws_cloudtrail:0000315:6ecca7b5-a122-40b3-ad14-33654c415", "row_index": 315, "timestamp": "2017-05-27T04:59:55Z", "event_type": "GetPolicyVersion", "event_source": "iam.amazonaws.com", "principal": {"type": "AssumedRole", "arn": "arn:aws:sts::811596193553:assumed-role/SecurityMonkey/secmonkey", "account_id": "811596193553", "principal_id": "AROAUB2AA5FQRGAHITW4A:secmonkey", "user_name": null, "access_key_id": "ASIAI9QHHRMC9F6XQJXN", "session_issuer_arn": "arn:aws:iam::811596193553:role/SecurityMonkey", "session_issuer_user_name": "SecurityMonkey"}, "network": {"source_ip": "255.253.125.115", "user_agent": "Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56 Resource", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 1060, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "6ecca7b5-a122-40b3-ad14-33654c415", "eventTime": "2017-05-27T04:59:55Z", "eventName": "GetPolicyVersion", "eventSource": "iam.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.253.125.115", "userAgent": "Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56 Resource", "awsRegion": "us-east-1", "userIdentity": {"type": "AssumedRole", "principalId": "AROAUB2AA5FQRGAHITW4A:secmonkey", "arn": "arn:aws:sts::811596193553:assumed-role/SecurityMonkey/secmonkey", "accountId": "811596193553", "accessKeyId": "ASIAI9QHHRMC9F6XQJXN", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2017-05-27T04:59:38Z"}, "sessionIssuer": {"type": "Role", "principalId": "AROAUB2AA5FQRGAHITW4A", "arn": "arn:aws:iam::811596193553:role/SecurityMonkey", "accountId": "811596193553", "userName": "SecurityMonkey"}}}, "requestParameters": {"policyArn": "arn:aws:iam::aws:policy/AWSElasticBeanstalkFullAccess", "versionId": "v5"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "26c98078-4314-49ad-b4a4-1240baac73a1", "record_id": "flaws_cloudtrail:0000316:26c98078-4314-49ad-b4a4-1240baac73a1", "row_index": 316, "timestamp": "2017-05-27T04:59:55Z", "event_type": "GetPolicyVersion", "event_source": "iam.amazonaws.com", "principal": {"type": "AssumedRole", "arn": "arn:aws:sts::811596193553:assumed-role/SecurityMonkey/secmonkey", "account_id": "811596193553", "principal_id": "AROAUB2AA5FQRGAHITW4A:secmonkey", "user_name": null, "access_key_id": "ASIAI9QHHRMC9F6XQJXN", "session_issuer_arn": "arn:aws:iam::811596193553:role/SecurityMonkey", "session_issuer_user_name": "SecurityMonkey"}, "network": {"source_ip": "255.253.125.115", "user_agent": "Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56 Resource", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 1056, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "26c98078-4314-49ad-b4a4-1240baac73a1", "eventTime": "2017-05-27T04:59:55Z", "eventName": "GetPolicyVersion", "eventSource": "iam.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.253.125.115", "userAgent": "Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56 Resource", "awsRegion": "us-east-1", "userIdentity": {"type": "AssumedRole", "principalId": "AROAUB2AA5FQRGAHITW4A:secmonkey", "arn": "arn:aws:sts::811596193553:assumed-role/SecurityMonkey/secmonkey", "accountId": "811596193553", "accessKeyId": "ASIAI9QHHRMC9F6XQJXN", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2017-05-27T04:59:38Z"}, "sessionIssuer": {"type": "Role", "principalId": "AROAUB2AA5FQRGAHITW4A", "arn": "arn:aws:iam::811596193553:role/SecurityMonkey", "accountId": "811596193553", "userName": "SecurityMonkey"}}}, "requestParameters": {"policyArn": "arn:aws:iam::aws:policy/AmazonS3ReadOnlyAccess", "versionId": "v1"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "f2955e69-3926-4ca4-a808-1e53eaf630887", "record_id": "flaws_cloudtrail:0000317:f2955e69-3926-4ca4-a808-1e53eaf630887", "row_index": 317, "timestamp": "2017-05-27T04:59:55Z", "event_type": "GetPolicyVersion", "event_source": "iam.amazonaws.com", "principal": {"type": "AssumedRole", "arn": "arn:aws:sts::811596193553:assumed-role/SecurityMonkey/secmonkey", "account_id": "811596193553", "principal_id": "AROAUB2AA5FQRGAHITW4A:secmonkey", "user_name": null, "access_key_id": "ASIAI9QHHRMC9F6XQJXN", "session_issuer_arn": "arn:aws:iam::811596193553:role/SecurityMonkey", "session_issuer_user_name": "SecurityMonkey"}, "network": {"source_ip": "255.253.125.115", "user_agent": "Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56 Resource", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 1067, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "f2955e69-3926-4ca4-a808-1e53eaf630887", "eventTime": "2017-05-27T04:59:55Z", "eventName": "GetPolicyVersion", "eventSource": "iam.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.253.125.115", "userAgent": "Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56 Resource", "awsRegion": "us-east-1", "userIdentity": {"type": "AssumedRole", "principalId": "AROAUB2AA5FQRGAHITW4A:secmonkey", "arn": "arn:aws:sts::811596193553:assumed-role/SecurityMonkey/secmonkey", "accountId": "811596193553", "accessKeyId": "ASIAI9QHHRMC9F6XQJXN", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2017-05-27T04:59:38Z"}, "sessionIssuer": {"type": "Role", "principalId": "AROAUB2AA5FQRGAHITW4A", "arn": "arn:aws:iam::811596193553:role/SecurityMonkey", "accountId": "811596193553", "userName": "SecurityMonkey"}}}, "requestParameters": {"policyArn": "arn:aws:iam::aws:policy/AmazonElasticMapReduceFullAccess", "versionId": "v4"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "83bc71ac-6f0e-4b30-be6d-23e592e0e5a0", "record_id": "flaws_cloudtrail:0000318:83bc71ac-6f0e-4b30-be6d-23e592e0e5a0", "row_index": 318, "timestamp": "2017-05-27T04:59:55Z", "event_type": "GetPolicyVersion", "event_source": "iam.amazonaws.com", "principal": {"type": "AssumedRole", "arn": "arn:aws:sts::811596193553:assumed-role/SecurityMonkey/secmonkey", "account_id": "811596193553", "principal_id": "AROAUB2AA5FQRGAHITW4A:secmonkey", "user_name": null, "access_key_id": "ASIAI9QHHRMC9F6XQJXN", "session_issuer_arn": "arn:aws:iam::811596193553:role/SecurityMonkey", "session_issuer_user_name": "SecurityMonkey"}, "network": {"source_ip": "255.253.125.115", "user_agent": "Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56 Resource", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 1057, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "83bc71ac-6f0e-4b30-be6d-23e592e0e5a0", "eventTime": "2017-05-27T04:59:55Z", "eventName": "GetPolicyVersion", "eventSource": "iam.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.253.125.115", "userAgent": "Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56 Resource", "awsRegion": "us-east-1", "userIdentity": {"type": "AssumedRole", "principalId": "AROAUB2AA5FQRGAHITW4A:secmonkey", "arn": "arn:aws:sts::811596193553:assumed-role/SecurityMonkey/secmonkey", "accountId": "811596193553", "accessKeyId": "ASIAI9QHHRMC9F6XQJXN", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2017-05-27T04:59:38Z"}, "sessionIssuer": {"type": "Role", "principalId": "AROAUB2AA5FQRGAHITW4A", "arn": "arn:aws:iam::811596193553:role/SecurityMonkey", "accountId": "811596193553", "userName": "SecurityMonkey"}}}, "requestParameters": {"policyArn": "arn:aws:iam::aws:policy/AmazonSNSReadOnlyAccess", "versionId": "v1"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "6fb2cf19-a771-4c50-8e6a-d2657143d04d", "record_id": "flaws_cloudtrail:0000319:6fb2cf19-a771-4c50-8e6a-d2657143d04d", "row_index": 319, "timestamp": "2017-05-27T04:59:55Z", "event_type": "GetPolicyVersion", "event_source": "iam.amazonaws.com", "principal": {"type": "AssumedRole", "arn": "arn:aws:sts::811596193553:assumed-role/SecurityMonkey/secmonkey", "account_id": "811596193553", "principal_id": "AROAUB2AA5FQRGAHITW4A:secmonkey", "user_name": null, "access_key_id": "ASIAI9QHHRMC9F6XQJXN", "session_issuer_arn": "arn:aws:iam::811596193553:role/SecurityMonkey", "session_issuer_user_name": "SecurityMonkey"}, "network": {"source_ip": "255.253.125.115", "user_agent": "Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56 Resource", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 1062, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "6fb2cf19-a771-4c50-8e6a-d2657143d04d", "eventTime": "2017-05-27T04:59:55Z", "eventName": "GetPolicyVersion", "eventSource": "iam.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.253.125.115", "userAgent": "Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56 Resource", "awsRegion": "us-east-1", "userIdentity": {"type": "AssumedRole", "principalId": "AROAUB2AA5FQRGAHITW4A:secmonkey", "arn": "arn:aws:sts::811596193553:assumed-role/SecurityMonkey/secmonkey", "accountId": "811596193553", "accessKeyId": "ASIAI9QHHRMC9F6XQJXN", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2017-05-27T04:59:38Z"}, "sessionIssuer": {"type": "Role", "principalId": "AROAUB2AA5FQRGAHITW4A", "arn": "arn:aws:iam::811596193553:role/SecurityMonkey", "accountId": "811596193553", "userName": "SecurityMonkey"}}}, "requestParameters": {"policyArn": "arn:aws:iam::aws:policy/AutoScalingConsoleFullAccess", "versionId": "v1"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "1042d88b-178e-4b73-bb17-600623f419c", "record_id": "flaws_cloudtrail:0000320:1042d88b-178e-4b73-bb17-600623f419c", "row_index": 320, "timestamp": "2017-05-27T04:59:55Z", "event_type": "GetPolicyVersion", "event_source": "iam.amazonaws.com", "principal": {"type": "AssumedRole", "arn": "arn:aws:sts::811596193553:assumed-role/SecurityMonkey/secmonkey", "account_id": "811596193553", "principal_id": "AROAUB2AA5FQRGAHITW4A:secmonkey", "user_name": null, "access_key_id": "ASIAI9QHHRMC9F6XQJXN", "session_issuer_arn": "arn:aws:iam::811596193553:role/SecurityMonkey", "session_issuer_user_name": "SecurityMonkey"}, "network": {"source_ip": "255.253.125.115", "user_agent": "Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56 Resource", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 1061, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "1042d88b-178e-4b73-bb17-600623f419c", "eventTime": "2017-05-27T04:59:55Z", "eventName": "GetPolicyVersion", "eventSource": "iam.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.253.125.115", "userAgent": "Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56 Resource", "awsRegion": "us-east-1", "userIdentity": {"type": "AssumedRole", "principalId": "AROAUB2AA5FQRGAHITW4A:secmonkey", "arn": "arn:aws:sts::811596193553:assumed-role/SecurityMonkey/secmonkey", "accountId": "811596193553", "accessKeyId": "ASIAI9QHHRMC9F6XQJXN", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2017-05-27T04:59:38Z"}, "sessionIssuer": {"type": "Role", "principalId": "AROAUB2AA5FQRGAHITW4A", "arn": "arn:aws:iam::811596193553:role/SecurityMonkey", "accountId": "811596193553", "userName": "SecurityMonkey"}}}, "requestParameters": {"policyArn": "arn:aws:iam::aws:policy/AmazonDynamoDBReadOnlyAccess", "versionId": "v4"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "a5587e9c-0cd3-48c5-8b53-dd21c0c3dead", "record_id": "flaws_cloudtrail:0000321:a5587e9c-0cd3-48c5-8b53-dd21c0c3dead", "row_index": 321, "timestamp": "2017-05-27T04:59:56Z", "event_type": "GetTrailStatus", "event_source": "cloudtrail.amazonaws.com", "principal": {"type": "AssumedRole", "arn": "arn:aws:sts::811596193553:assumed-role/SecurityMonkey/secmonkey", "account_id": "811596193553", "principal_id": "AROAUB2AA5FQRGAHITW4A:secmonkey", "user_name": null, "access_key_id": "ASIAJAWDQ3SI48DA836P", "session_issuer_arn": "arn:aws:iam::811596193553:role/SecurityMonkey", "session_issuer_user_name": "SecurityMonkey"}, "network": {"source_ip": "255.253.125.115", "user_agent": "Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56", "aws_region": "eu-central-1"}, "resource_arns": [], "raw_record_size_bytes": 1045, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "a5587e9c-0cd3-48c5-8b53-dd21c0c3dead", "eventTime": "2017-05-27T04:59:56Z", "eventName": "GetTrailStatus", "eventSource": "cloudtrail.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.253.125.115", "userAgent": "Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56", "awsRegion": "eu-central-1", "userIdentity": {"type": "AssumedRole", "principalId": "AROAUB2AA5FQRGAHITW4A:secmonkey", "arn": "arn:aws:sts::811596193553:assumed-role/SecurityMonkey/secmonkey", "accountId": "811596193553", "accessKeyId": "ASIAJAWDQ3SI48DA836P", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2017-05-27T04:59:55Z"}, "sessionIssuer": {"type": "Role", "principalId": "AROAUB2AA5FQRGAHITW4A", "arn": "arn:aws:iam::811596193553:role/SecurityMonkey", "accountId": "811596193553", "userName": "SecurityMonkey"}}}, "requestParameters": {"name": "arn:aws:cloudtrail:us-west-2:811596193553:trail/cloudtrail"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "5c87b186-facb-421f-bd9a-4d7fc81a92f3", "record_id": "flaws_cloudtrail:0000322:5c87b186-facb-421f-bd9a-4d7fc81a92f3", "row_index": 322, "timestamp": "2017-05-27T04:59:56Z", "event_type": "DescribeTrails", "event_source": "cloudtrail.amazonaws.com", "principal": {"type": "AssumedRole", "arn": "arn:aws:sts::811596193553:assumed-role/SecurityMonkey/secmonkey", "account_id": "811596193553", "principal_id": "AROAUB2AA5FQRGAHITW4A:secmonkey", "user_name": null, "access_key_id": "ASIAJAWDQ3SI48DA836P", "session_issuer_arn": "arn:aws:iam::811596193553:role/SecurityMonkey", "session_issuer_user_name": "SecurityMonkey"}, "network": {"source_ip": "255.253.125.115", "user_agent": "Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56", "aws_region": "eu-central-1"}, "resource_arns": [], "raw_record_size_bytes": 980, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "5c87b186-facb-421f-bd9a-4d7fc81a92f3", "eventTime": "2017-05-27T04:59:56Z", "eventName": "DescribeTrails", "eventSource": "cloudtrail.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.253.125.115", "userAgent": "Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56", "awsRegion": "eu-central-1", "userIdentity": {"type": "AssumedRole", "principalId": "AROAUB2AA5FQRGAHITW4A:secmonkey", "arn": "arn:aws:sts::811596193553:assumed-role/SecurityMonkey/secmonkey", "accountId": "811596193553", "accessKeyId": "ASIAJAWDQ3SI48DA836P", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2017-05-27T04:59:55Z"}, "sessionIssuer": {"type": "Role", "principalId": "AROAUB2AA5FQRGAHITW4A", "arn": "arn:aws:iam::811596193553:role/SecurityMonkey", "accountId": "811596193553", "userName": "SecurityMonkey"}}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "95a3aeed-edf0-41ca-a1cc-4fe1a04de39d", "record_id": "flaws_cloudtrail:0000323:95a3aeed-edf0-41ca-a1cc-4fe1a04de39d", "row_index": 323, "timestamp": "2017-05-27T04:59:56Z", "event_type": "AssumeRole", "event_source": "sts.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/SecurityMokey", "account_id": "811596193553", "principal_id": "AIDAQ9SRE1SZZZ4Q4UOJH", "user_name": "SecurityMokey", "access_key_id": "AKIAXJ0III4JBKZDXGXN", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "255.253.125.115", "user_agent": "Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56", "aws_region": "us-east-1"}, "resource_arns": ["arn:aws:iam::811596193553:role/SecurityMonkey"], "raw_record_size_bytes": 1452, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "resources", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "95a3aeed-edf0-41ca-a1cc-4fe1a04de39d", "eventTime": "2017-05-27T04:59:56Z", "eventName": "AssumeRole", "eventSource": "sts.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.253.125.115", "userAgent": "Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDAQ9SRE1SZZZ4Q4UOJH", "arn": "arn:aws:iam::811596193553:user/SecurityMokey", "accountId": "811596193553", "accessKeyId": "AKIAXJ0III4JBKZDXGXN", "userName": "SecurityMokey"}, "requestParameters": {"roleArn": "arn:aws:iam::811596193553:role/SecurityMonkey", "roleSessionName": "secmonkey"}, "responseElements": {"credentials": {"accessKeyId": "ASIAZ5TREUJ39VTZDV67", "expiration": "May 27, 2017 5:59:56 AM", "sessionToken": "FQoDYXdzECYaDOS7TqaCrRSKmLHYSiLMAazbegEFjLsozKIR+T8IeUFhbz/b+Vz2BhK9J+5YZTiGaL57n7/miOR6ulkCReac3DaywCH6O0w1RAJxJyR395lFK1Q8GUsvDCmMEGVr8okuVzfMqqJ4vVS5wxtB+G1dm96sIxpeHkOH4/WJsNt4/rkdqOHQMjW8TMLTHdR9lv/sRcYqjLl3YZg+rQtbuM12rErp4hFkSv10U97cUF52qMwpd5DJv3PHRVhfDmkO+S+Y8NybGF5PAsCIJmVhsjxMEXXMGGri7i1rPueIfijMj6TJBQ=="}, "assumedRoleUser": {"assumedRoleId": "AROAUB2AA5FQRGAHITW4A:secmonkey", "arn": "arn:aws:sts::811596193553:assumed-role/SecurityMonkey/secmonkey"}}, "resources": [{"ARN": "arn:aws:iam::811596193553:role/SecurityMonkey", "accountId": "811596193553", "type": "AWS::IAM::Role"}]}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "e3f0304f-7641-4c0c-8a4c-afd47924b5ba", "record_id": "flaws_cloudtrail:0000324:e3f0304f-7641-4c0c-8a4c-afd47924b5ba", "row_index": 324, "timestamp": "2017-05-27T04:59:56Z", "event_type": "GetPolicyVersion", "event_source": "iam.amazonaws.com", "principal": {"type": "AssumedRole", "arn": "arn:aws:sts::811596193553:assumed-role/SecurityMonkey/secmonkey", "account_id": "811596193553", "principal_id": "AROAUB2AA5FQRGAHITW4A:secmonkey", "user_name": null, "access_key_id": "ASIAI9QHHRMC9F6XQJXN", "session_issuer_arn": "arn:aws:iam::811596193553:role/SecurityMonkey", "session_issuer_user_name": "SecurityMonkey"}, "network": {"source_ip": "255.253.125.115", "user_agent": "Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56 Resource", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 1060, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "e3f0304f-7641-4c0c-8a4c-afd47924b5ba", "eventTime": "2017-05-27T04:59:56Z", "eventName": "GetPolicyVersion", "eventSource": "iam.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.253.125.115", "userAgent": "Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56 Resource", "awsRegion": "us-east-1", "userIdentity": {"type": "AssumedRole", "principalId": "AROAUB2AA5FQRGAHITW4A:secmonkey", "arn": "arn:aws:sts::811596193553:assumed-role/SecurityMonkey/secmonkey", "accountId": "811596193553", "accessKeyId": "ASIAI9QHHRMC9F6XQJXN", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2017-05-27T04:59:38Z"}, "sessionIssuer": {"type": "Role", "principalId": "AROAUB2AA5FQRGAHITW4A", "arn": "arn:aws:iam::811596193553:role/SecurityMonkey", "accountId": "811596193553", "userName": "SecurityMonkey"}}}, "requestParameters": {"policyArn": "arn:aws:iam::aws:policy/job-function/DataScientist", "versionId": "v1"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "c9e0991d-af1d-4ccf-9ce3-1fc5aaad560d", "record_id": "flaws_cloudtrail:0000325:c9e0991d-af1d-4ccf-9ce3-1fc5aaad560d", "row_index": 325, "timestamp": "2017-05-27T04:59:56Z", "event_type": "GetPolicyVersion", "event_source": "iam.amazonaws.com", "principal": {"type": "AssumedRole", "arn": "arn:aws:sts::811596193553:assumed-role/SecurityMonkey/secmonkey", "account_id": "811596193553", "principal_id": "AROAUB2AA5FQRGAHITW4A:secmonkey", "user_name": null, "access_key_id": "ASIAI9QHHRMC9F6XQJXN", "session_issuer_arn": "arn:aws:iam::811596193553:role/SecurityMonkey", "session_issuer_user_name": "SecurityMonkey"}, "network": {"source_ip": "255.253.125.115", "user_agent": "Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56 Resource", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 1070, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "c9e0991d-af1d-4ccf-9ce3-1fc5aaad560d", "eventTime": "2017-05-27T04:59:56Z", "eventName": "GetPolicyVersion", "eventSource": "iam.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.253.125.115", "userAgent": "Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56 Resource", "awsRegion": "us-east-1", "userIdentity": {"type": "AssumedRole", "principalId": "AROAUB2AA5FQRGAHITW4A:secmonkey", "arn": "arn:aws:sts::811596193553:assumed-role/SecurityMonkey/secmonkey", "accountId": "811596193553", "accessKeyId": "ASIAI9QHHRMC9F6XQJXN", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2017-05-27T04:59:38Z"}, "sessionIssuer": {"type": "Role", "principalId": "AROAUB2AA5FQRGAHITW4A", "arn": "arn:aws:iam::811596193553:role/SecurityMonkey", "accountId": "811596193553", "userName": "SecurityMonkey"}}}, "requestParameters": {"policyArn": "arn:aws:iam::aws:policy/AmazonMobileAnalyticsWriteOnlyAccess", "versionId": "v1"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "23b119d4-c8ba-4a5b-ad73-9690dc17d74e", "record_id": "flaws_cloudtrail:0000326:23b119d4-c8ba-4a5b-ad73-9690dc17d74e", "row_index": 326, "timestamp": "2017-05-27T04:59:56Z", "event_type": "GetPolicyVersion", "event_source": "iam.amazonaws.com", "principal": {"type": "AssumedRole", "arn": "arn:aws:sts::811596193553:assumed-role/SecurityMonkey/secmonkey", "account_id": "811596193553", "principal_id": "AROAUB2AA5FQRGAHITW4A:secmonkey", "user_name": null, "access_key_id": "ASIAI9QHHRMC9F6XQJXN", "session_issuer_arn": "arn:aws:iam::811596193553:role/SecurityMonkey", "session_issuer_user_name": "SecurityMonkey"}, "network": {"source_ip": "255.253.125.115", "user_agent": "Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56 Resource", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 1059, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "23b119d4-c8ba-4a5b-ad73-9690dc17d74e", "eventTime": "2017-05-27T04:59:56Z", "eventName": "GetPolicyVersion", "eventSource": "iam.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.253.125.115", "userAgent": "Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56 Resource", "awsRegion": "us-east-1", "userIdentity": {"type": "AssumedRole", "principalId": "AROAUB2AA5FQRGAHITW4A:secmonkey", "arn": "arn:aws:sts::811596193553:assumed-role/SecurityMonkey/secmonkey", "accountId": "811596193553", "accessKeyId": "ASIAI9QHHRMC9F6XQJXN", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2017-05-27T04:59:38Z"}, "sessionIssuer": {"type": "Role", "principalId": "AROAUB2AA5FQRGAHITW4A", "arn": "arn:aws:iam::811596193553:role/SecurityMonkey", "accountId": "811596193553", "userName": "SecurityMonkey"}}}, "requestParameters": {"policyArn": "arn:aws:iam::aws:policy/AmazonPollyReadOnlyAccess", "versionId": "v1"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "62963-76b8-4aa2-89cc-be8bd6a99b42", "record_id": "flaws_cloudtrail:0000327:62963-76b8-4aa2-89cc-be8bd6a99b42", "row_index": 327, "timestamp": "2017-05-27T04:59:56Z", "event_type": "GetPolicyVersion", "event_source": "iam.amazonaws.com", "principal": {"type": "AssumedRole", "arn": "arn:aws:sts::811596193553:assumed-role/SecurityMonkey/secmonkey", "account_id": "811596193553", "principal_id": "AROAUB2AA5FQRGAHITW4A:secmonkey", "user_name": null, "access_key_id": "ASIAI9QHHRMC9F6XQJXN", "session_issuer_arn": "arn:aws:iam::811596193553:role/SecurityMonkey", "session_issuer_user_name": "SecurityMonkey"}, "network": {"source_ip": "255.253.125.115", "user_agent": "Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56 Resource", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 1058, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "62963-76b8-4aa2-89cc-be8bd6a99b42", "eventTime": "2017-05-27T04:59:56Z", "eventName": "GetPolicyVersion", "eventSource": "iam.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.253.125.115", "userAgent": "Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56 Resource", "awsRegion": "us-east-1", "userIdentity": {"type": "AssumedRole", "principalId": "AROAUB2AA5FQRGAHITW4A:secmonkey", "arn": "arn:aws:sts::811596193553:assumed-role/SecurityMonkey/secmonkey", "accountId": "811596193553", "accessKeyId": "ASIAI9QHHRMC9F6XQJXN", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2017-05-27T04:59:38Z"}, "sessionIssuer": {"type": "Role", "principalId": "AROAUB2AA5FQRGAHITW4A", "arn": "arn:aws:iam::811596193553:role/SecurityMonkey", "accountId": "811596193553", "userName": "SecurityMonkey"}}}, "requestParameters": {"policyArn": "arn:aws:iam::aws:policy/ServiceCatalogEndUserAccess", "versionId": "v3"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "c6cb5b1d-dcc3-45e0-b8e2-c370d5c9af7f", "record_id": "flaws_cloudtrail:0000328:c6cb5b1d-dcc3-45e0-b8e2-c370d5c9af7f", "row_index": 328, "timestamp": "2017-05-27T04:59:56Z", "event_type": "GetPolicyVersion", "event_source": "iam.amazonaws.com", "principal": {"type": "AssumedRole", "arn": "arn:aws:sts::811596193553:assumed-role/SecurityMonkey/secmonkey", "account_id": "811596193553", "principal_id": "AROAUB2AA5FQRGAHITW4A:secmonkey", "user_name": null, "access_key_id": "ASIAI9QHHRMC9F6XQJXN", "session_issuer_arn": "arn:aws:iam::811596193553:role/SecurityMonkey", "session_issuer_user_name": "SecurityMonkey"}, "network": {"source_ip": "255.253.125.115", "user_agent": "Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56 Resource", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 1063, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "c6cb5b1d-dcc3-45e0-b8e2-c370d5c9af7f", "eventTime": "2017-05-27T04:59:56Z", "eventName": "GetPolicyVersion", "eventSource": "iam.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.253.125.115", "userAgent": "Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56 Resource", "awsRegion": "us-east-1", "userIdentity": {"type": "AssumedRole", "principalId": "AROAUB2AA5FQRGAHITW4A:secmonkey", "arn": "arn:aws:sts::811596193553:assumed-role/SecurityMonkey/secmonkey", "accountId": "811596193553", "accessKeyId": "ASIAI9QHHRMC9F6XQJXN", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2017-05-27T04:59:38Z"}, "sessionIssuer": {"type": "Role", "principalId": "AROAUB2AA5FQRGAHITW4A", "arn": "arn:aws:iam::811596193553:role/SecurityMonkey", "accountId": "811596193553", "userName": "SecurityMonkey"}}}, "requestParameters": {"policyArn": "arn:aws:iam::aws:policy/AmazonAPIGatewayAdministrator", "versionId": "v1"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "28fb52e1-50b6-4eac-a4cf-9c2e9b6bf14b", "record_id": "flaws_cloudtrail:0000329:28fb52e1-50b6-4eac-a4cf-9c2e9b6bf14b", "row_index": 329, "timestamp": "2017-05-27T04:59:56Z", "event_type": "GetPolicyVersion", "event_source": "iam.amazonaws.com", "principal": {"type": "AssumedRole", "arn": "arn:aws:sts::811596193553:assumed-role/SecurityMonkey/secmonkey", "account_id": "811596193553", "principal_id": "AROAUB2AA5FQRGAHITW4A:secmonkey", "user_name": null, "access_key_id": "ASIAI9QHHRMC9F6XQJXN", "session_issuer_arn": "arn:aws:iam::811596193553:role/SecurityMonkey", "session_issuer_user_name": "SecurityMonkey"}, "network": {"source_ip": "255.253.125.115", "user_agent": "Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56 Resource", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 1055, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "28fb52e1-50b6-4eac-a4cf-9c2e9b6bf14b", "eventTime": "2017-05-27T04:59:56Z", "eventName": "GetPolicyVersion", "eventSource": "iam.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.253.125.115", "userAgent": "Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56 Resource", "awsRegion": "us-east-1", "userIdentity": {"type": "AssumedRole", "principalId": "AROAUB2AA5FQRGAHITW4A:secmonkey", "arn": "arn:aws:sts::811596193553:assumed-role/SecurityMonkey/secmonkey", "accountId": "811596193553", "accessKeyId": "ASIAI9QHHRMC9F6XQJXN", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2017-05-27T04:59:38Z"}, "sessionIssuer": {"type": "Role", "principalId": "AROAUB2AA5FQRGAHITW4A", "arn": "arn:aws:iam::811596193553:role/SecurityMonkey", "accountId": "811596193553", "userName": "SecurityMonkey"}}}, "requestParameters": {"policyArn": "arn:aws:iam::aws:policy/IAMUserChangePassword", "versionId": "v2"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "044bad84-77cf-4d67-920f-9441e558e972", "record_id": "flaws_cloudtrail:0000330:044bad84-77cf-4d67-920f-9441e558e972", "row_index": 330, "timestamp": "2017-05-27T04:59:56Z", "event_type": "GetPolicyVersion", "event_source": "iam.amazonaws.com", "principal": {"type": "AssumedRole", "arn": "arn:aws:sts::811596193553:assumed-role/SecurityMonkey/secmonkey", "account_id": "811596193553", "principal_id": "AROAUB2AA5FQRGAHITW4A:secmonkey", "user_name": null, "access_key_id": "ASIAI9QHHRMC9F6XQJXN", "session_issuer_arn": "arn:aws:iam::811596193553:role/SecurityMonkey", "session_issuer_user_name": "SecurityMonkey"}, "network": {"source_ip": "255.253.125.115", "user_agent": "Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56 Resource", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 1067, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "044bad84-77cf-4d67-920f-9441e558e972", "eventTime": "2017-05-27T04:59:56Z", "eventName": "GetPolicyVersion", "eventSource": "iam.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.253.125.115", "userAgent": "Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56 Resource", "awsRegion": "us-east-1", "userIdentity": {"type": "AssumedRole", "principalId": "AROAUB2AA5FQRGAHITW4A:secmonkey", "arn": "arn:aws:sts::811596193553:assumed-role/SecurityMonkey/secmonkey", "accountId": "811596193553", "accessKeyId": "ASIAI9QHHRMC9F6XQJXN", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2017-05-27T04:59:38Z"}, "sessionIssuer": {"type": "Role", "principalId": "AROAUB2AA5FQRGAHITW4A", "arn": "arn:aws:iam::811596193553:role/SecurityMonkey", "accountId": "811596193553", "userName": "SecurityMonkey"}}}, "requestParameters": {"policyArn": "arn:aws:iam::aws:policy/AmazonElasticTranscoderFullAccess", "versionId": "v1"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "7587c418-91a8-43ca-8a45-6fdab53ebaf9", "record_id": "flaws_cloudtrail:0000331:7587c418-91a8-43ca-8a45-6fdab53ebaf9", "row_index": 331, "timestamp": "2017-05-27T04:59:56Z", "event_type": "GetPolicyVersion", "event_source": "iam.amazonaws.com", "principal": {"type": "AssumedRole", "arn": "arn:aws:sts::811596193553:assumed-role/SecurityMonkey/secmonkey", "account_id": "811596193553", "principal_id": "AROAUB2AA5FQRGAHITW4A:secmonkey", "user_name": null, "access_key_id": "ASIAI9QHHRMC9F6XQJXN", "session_issuer_arn": "arn:aws:iam::811596193553:role/SecurityMonkey", "session_issuer_user_name": "SecurityMonkey"}, "network": {"source_ip": "255.253.125.115", "user_agent": "Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56 Resource", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 1073, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "7587c418-91a8-43ca-8a45-6fdab53ebaf9", "eventTime": "2017-05-27T04:59:56Z", "eventName": "GetPolicyVersion", "eventSource": "iam.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.253.125.115", "userAgent": "Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56 Resource", "awsRegion": "us-east-1", "userIdentity": {"type": "AssumedRole", "principalId": "AROAUB2AA5FQRGAHITW4A:secmonkey", "arn": "arn:aws:sts::811596193553:assumed-role/SecurityMonkey/secmonkey", "accountId": "811596193553", "accessKeyId": "ASIAI9QHHRMC9F6XQJXN", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2017-05-27T04:59:38Z"}, "sessionIssuer": {"type": "Role", "principalId": "AROAUB2AA5FQRGAHITW4A", "arn": "arn:aws:iam::811596193553:role/SecurityMonkey", "accountId": "811596193553", "userName": "SecurityMonkey"}}}, "requestParameters": {"policyArn": "arn:aws:iam::aws:policy/AWSElasticBeanstalkMulticontainerDocker", "versionId": "v2"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "f579ba8d-65ea-4965-af5b-ac6209877af2", "record_id": "flaws_cloudtrail:0000332:f579ba8d-65ea-4965-af5b-ac6209877af2", "row_index": 332, "timestamp": "2017-05-27T04:59:56Z", "event_type": "GetPolicyVersion", "event_source": "iam.amazonaws.com", "principal": {"type": "AssumedRole", "arn": "arn:aws:sts::811596193553:assumed-role/SecurityMonkey/secmonkey", "account_id": "811596193553", "principal_id": "AROAUB2AA5FQRGAHITW4A:secmonkey", "user_name": null, "access_key_id": "ASIAI9QHHRMC9F6XQJXN", "session_issuer_arn": "arn:aws:iam::811596193553:role/SecurityMonkey", "session_issuer_user_name": "SecurityMonkey"}, "network": {"source_ip": "255.253.125.115", "user_agent": "Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56 Resource", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 1058, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "f579ba8d-65ea-4965-af5b-ac6209877af2", "eventTime": "2017-05-27T04:59:56Z", "eventName": "GetPolicyVersion", "eventSource": "iam.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.253.125.115", "userAgent": "Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56 Resource", "awsRegion": "us-east-1", "userIdentity": {"type": "AssumedRole", "principalId": "AROAUB2AA5FQRGAHITW4A:secmonkey", "arn": "arn:aws:sts::811596193553:assumed-role/SecurityMonkey/secmonkey", "accountId": "811596193553", "accessKeyId": "ASIAI9QHHRMC9F6XQJXN", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2017-05-27T04:59:38Z"}, "sessionIssuer": {"type": "Role", "principalId": "AROAUB2AA5FQRGAHITW4A", "arn": "arn:aws:iam::811596193553:role/SecurityMonkey", "accountId": "811596193553", "userName": "SecurityMonkey"}}}, "requestParameters": {"policyArn": "arn:aws:iam::aws:policy/CloudWatchLogsFullAccess", "versionId": "v1"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "912e13e8-1d0a-40d6-9b73-4aa2a9c375f1", "record_id": "flaws_cloudtrail:0000333:912e13e8-1d0a-40d6-9b73-4aa2a9c375f1", "row_index": 333, "timestamp": "2017-05-27T04:59:56Z", "event_type": "GetPolicyVersion", "event_source": "iam.amazonaws.com", "principal": {"type": "AssumedRole", "arn": "arn:aws:sts::811596193553:assumed-role/SecurityMonkey/secmonkey", "account_id": "811596193553", "principal_id": "AROAUB2AA5FQRGAHITW4A:secmonkey", "user_name": null, "access_key_id": "ASIAI9QHHRMC9F6XQJXN", "session_issuer_arn": "arn:aws:iam::811596193553:role/SecurityMonkey", "session_issuer_user_name": "SecurityMonkey"}, "network": {"source_ip": "255.253.125.115", "user_agent": "Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56 Resource", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 1079, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "912e13e8-1d0a-40d6-9b73-4aa2a9c375f1", "eventTime": "2017-05-27T04:59:56Z", "eventName": "GetPolicyVersion", "eventSource": "iam.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.253.125.115", "userAgent": "Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56 Resource", "awsRegion": "us-east-1", "userIdentity": {"type": "AssumedRole", "principalId": "AROAUB2AA5FQRGAHITW4A:secmonkey", "arn": "arn:aws:sts::811596193553:assumed-role/SecurityMonkey/secmonkey", "accountId": "811596193553", "accessKeyId": "ASIAI9QHHRMC9F6XQJXN", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2017-05-27T04:59:38Z"}, "sessionIssuer": {"type": "Role", "principalId": "AROAUB2AA5FQRGAHITW4A", "arn": "arn:aws:iam::811596193553:role/SecurityMonkey", "accountId": "811596193553", "userName": "SecurityMonkey"}}}, "requestParameters": {"policyArn": "arn:aws:iam::aws:policy/service-role/AmazonEC2RoleforDataPipelineRole", "versionId": "v3"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "6779f813-0408-4292-a300-fb0154e17b12", "record_id": "flaws_cloudtrail:0000334:6779f813-0408-4292-a300-fb0154e17b12", "row_index": 334, "timestamp": "2017-05-27T04:59:56Z", "event_type": "GetPolicyVersion", "event_source": "iam.amazonaws.com", "principal": {"type": "AssumedRole", "arn": "arn:aws:sts::811596193553:assumed-role/SecurityMonkey/secmonkey", "account_id": "811596193553", "principal_id": "AROAUB2AA5FQRGAHITW4A:secmonkey", "user_name": null, "access_key_id": "ASIAI9QHHRMC9F6XQJXN", "session_issuer_arn": "arn:aws:iam::811596193553:role/SecurityMonkey", "session_issuer_user_name": "SecurityMonkey"}, "network": {"source_ip": "255.253.125.115", "user_agent": "Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56 Resource", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 1074, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "6779f813-0408-4292-a300-fb0154e17b12", "eventTime": "2017-05-27T04:59:56Z", "eventName": "GetPolicyVersion", "eventSource": "iam.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.253.125.115", "userAgent": "Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56 Resource", "awsRegion": "us-east-1", "userIdentity": {"type": "AssumedRole", "principalId": "AROAUB2AA5FQRGAHITW4A:secmonkey", "arn": "arn:aws:sts::811596193553:assumed-role/SecurityMonkey/secmonkey", "accountId": "811596193553", "accessKeyId": "ASIAI9QHHRMC9F6XQJXN", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2017-05-27T04:59:38Z"}, "sessionIssuer": {"type": "Role", "principalId": "AROAUB2AA5FQRGAHITW4A", "arn": "arn:aws:iam::811596193553:role/SecurityMonkey", "accountId": "811596193553", "userName": "SecurityMonkey"}}}, "requestParameters": {"policyArn": "arn:aws:iam::aws:policy/AmazonDynamoDBFullAccesswithDataPipeline", "versionId": "v2"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "1226edf2-dd12-4e6e-8ecd-b16de11cf20a", "record_id": "flaws_cloudtrail:0000335:1226edf2-dd12-4e6e-8ecd-b16de11cf20a", "row_index": 335, "timestamp": "2017-05-27T04:59:57Z", "event_type": "GetTrailStatus", "event_source": "cloudtrail.amazonaws.com", "principal": {"type": "AssumedRole", "arn": "arn:aws:sts::811596193553:assumed-role/SecurityMonkey/secmonkey", "account_id": "811596193553", "principal_id": "AROAUB2AA5FQRGAHITW4A:secmonkey", "user_name": null, "access_key_id": "ASIAZ5TREUJ39VTZDV67", "session_issuer_arn": "arn:aws:iam::811596193553:role/SecurityMonkey", "session_issuer_user_name": "SecurityMonkey"}, "network": {"source_ip": "255.253.125.115", "user_agent": "Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56", "aws_region": "eu-west-1"}, "resource_arns": [], "raw_record_size_bytes": 1042, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "1226edf2-dd12-4e6e-8ecd-b16de11cf20a", "eventTime": "2017-05-27T04:59:57Z", "eventName": "GetTrailStatus", "eventSource": "cloudtrail.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.253.125.115", "userAgent": "Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56", "awsRegion": "eu-west-1", "userIdentity": {"type": "AssumedRole", "principalId": "AROAUB2AA5FQRGAHITW4A:secmonkey", "arn": "arn:aws:sts::811596193553:assumed-role/SecurityMonkey/secmonkey", "accountId": "811596193553", "accessKeyId": "ASIAZ5TREUJ39VTZDV67", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2017-05-27T04:59:56Z"}, "sessionIssuer": {"type": "Role", "principalId": "AROAUB2AA5FQRGAHITW4A", "arn": "arn:aws:iam::811596193553:role/SecurityMonkey", "accountId": "811596193553", "userName": "SecurityMonkey"}}}, "requestParameters": {"name": "arn:aws:cloudtrail:us-west-2:811596193553:trail/cloudtrail"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "47d1d573-9e16-415d-8ca7-d672ea22410", "record_id": "flaws_cloudtrail:0000336:47d1d573-9e16-415d-8ca7-d672ea22410", "row_index": 336, "timestamp": "2017-05-27T04:59:57Z", "event_type": "DescribeTrails", "event_source": "cloudtrail.amazonaws.com", "principal": {"type": "AssumedRole", "arn": "arn:aws:sts::811596193553:assumed-role/SecurityMonkey/secmonkey", "account_id": "811596193553", "principal_id": "AROAUB2AA5FQRGAHITW4A:secmonkey", "user_name": null, "access_key_id": "ASIAZ5TREUJ39VTZDV67", "session_issuer_arn": "arn:aws:iam::811596193553:role/SecurityMonkey", "session_issuer_user_name": "SecurityMonkey"}, "network": {"source_ip": "255.253.125.115", "user_agent": "Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56", "aws_region": "eu-west-1"}, "resource_arns": [], "raw_record_size_bytes": 976, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "47d1d573-9e16-415d-8ca7-d672ea22410", "eventTime": "2017-05-27T04:59:57Z", "eventName": "DescribeTrails", "eventSource": "cloudtrail.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.253.125.115", "userAgent": "Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56", "awsRegion": "eu-west-1", "userIdentity": {"type": "AssumedRole", "principalId": "AROAUB2AA5FQRGAHITW4A:secmonkey", "arn": "arn:aws:sts::811596193553:assumed-role/SecurityMonkey/secmonkey", "accountId": "811596193553", "accessKeyId": "ASIAZ5TREUJ39VTZDV67", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2017-05-27T04:59:56Z"}, "sessionIssuer": {"type": "Role", "principalId": "AROAUB2AA5FQRGAHITW4A", "arn": "arn:aws:iam::811596193553:role/SecurityMonkey", "accountId": "811596193553", "userName": "SecurityMonkey"}}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "15fb7547-5c55-40ba-bdde-998ef5f19a00", "record_id": "flaws_cloudtrail:0000337:15fb7547-5c55-40ba-bdde-998ef5f19a00", "row_index": 337, "timestamp": "2017-05-27T04:59:57Z", "event_type": "GetPolicyVersion", "event_source": "iam.amazonaws.com", "principal": {"type": "AssumedRole", "arn": "arn:aws:sts::811596193553:assumed-role/SecurityMonkey/secmonkey", "account_id": "811596193553", "principal_id": "AROAUB2AA5FQRGAHITW4A:secmonkey", "user_name": null, "access_key_id": "ASIAI9QHHRMC9F6XQJXN", "session_issuer_arn": "arn:aws:iam::811596193553:role/SecurityMonkey", "session_issuer_user_name": "SecurityMonkey"}, "network": {"source_ip": "255.253.125.115", "user_agent": "Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56 Resource", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 1074, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "15fb7547-5c55-40ba-bdde-998ef5f19a00", "eventTime": "2017-05-27T04:59:57Z", "eventName": "GetPolicyVersion", "eventSource": "iam.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.253.125.115", "userAgent": "Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56 Resource", "awsRegion": "us-east-1", "userIdentity": {"type": "AssumedRole", "principalId": "AROAUB2AA5FQRGAHITW4A:secmonkey", "arn": "arn:aws:sts::811596193553:assumed-role/SecurityMonkey/secmonkey", "accountId": "811596193553", "accessKeyId": "ASIAI9QHHRMC9F6XQJXN", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2017-05-27T04:59:38Z"}, "sessionIssuer": {"type": "Role", "principalId": "AROAUB2AA5FQRGAHITW4A", "arn": "arn:aws:iam::811596193553:role/SecurityMonkey", "accountId": "811596193553", "userName": "SecurityMonkey"}}}, "requestParameters": {"policyArn": "arn:aws:iam::aws:policy/AWSApplicationDiscoveryServiceFullAccess", "versionId": "v1"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "50432a03-6115-4bdd-9cc6-cbe5b7df7e83", "record_id": "flaws_cloudtrail:0000338:50432a03-6115-4bdd-9cc6-cbe5b7df7e83", "row_index": 338, "timestamp": "2017-05-27T04:59:57Z", "event_type": "GetPolicyVersion", "event_source": "iam.amazonaws.com", "principal": {"type": "AssumedRole", "arn": "arn:aws:sts::811596193553:assumed-role/SecurityMonkey/secmonkey", "account_id": "811596193553", "principal_id": "AROAUB2AA5FQRGAHITW4A:secmonkey", "user_name": null, "access_key_id": "ASIAI9QHHRMC9F6XQJXN", "session_issuer_arn": "arn:aws:iam::811596193553:role/SecurityMonkey", "session_issuer_user_name": "SecurityMonkey"}, "network": {"source_ip": "255.253.125.115", "user_agent": "Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56 Resource", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 1074, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "50432a03-6115-4bdd-9cc6-cbe5b7df7e83", "eventTime": "2017-05-27T04:59:57Z", "eventName": "GetPolicyVersion", "eventSource": "iam.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.253.125.115", "userAgent": "Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56 Resource", "awsRegion": "us-east-1", "userIdentity": {"type": "AssumedRole", "principalId": "AROAUB2AA5FQRGAHITW4A:secmonkey", "arn": "arn:aws:sts::811596193553:assumed-role/SecurityMonkey/secmonkey", "accountId": "811596193553", "accessKeyId": "ASIAI9QHHRMC9F6XQJXN", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2017-05-27T04:59:38Z"}, "sessionIssuer": {"type": "Role", "principalId": "AROAUB2AA5FQRGAHITW4A", "arn": "arn:aws:iam::811596193553:role/SecurityMonkey", "accountId": "811596193553", "userName": "SecurityMonkey"}}}, "requestParameters": {"policyArn": "arn:aws:iam::aws:policy/service-role/AmazonDMSCloudWatchLogsRole", "versionId": "v1"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "b741e8d0-91d0-480d-ab96-1d106637c2b6", "record_id": "flaws_cloudtrail:0000339:b741e8d0-91d0-480d-ab96-1d106637c2b6", "row_index": 339, "timestamp": "2017-05-27T04:59:57Z", "event_type": "GetPolicyVersion", "event_source": "iam.amazonaws.com", "principal": {"type": "AssumedRole", "arn": "arn:aws:sts::811596193553:assumed-role/SecurityMonkey/secmonkey", "account_id": "811596193553", "principal_id": "AROAUB2AA5FQRGAHITW4A:secmonkey", "user_name": null, "access_key_id": "ASIAI9QHHRMC9F6XQJXN", "session_issuer_arn": "arn:aws:iam::811596193553:role/SecurityMonkey", "session_issuer_user_name": "SecurityMonkey"}, "network": {"source_ip": "255.253.125.115", "user_agent": "Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56 Resource", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 1055, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "b741e8d0-91d0-480d-ab96-1d106637c2b6", "eventTime": "2017-05-27T04:59:57Z", "eventName": "GetPolicyVersion", "eventSource": "iam.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.253.125.115", "userAgent": "Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56 Resource", "awsRegion": "us-east-1", "userIdentity": {"type": "AssumedRole", "principalId": "AROAUB2AA5FQRGAHITW4A:secmonkey", "arn": "arn:aws:sts::811596193553:assumed-role/SecurityMonkey/secmonkey", "accountId": "811596193553", "accessKeyId": "ASIAI9QHHRMC9F6XQJXN", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2017-05-27T04:59:38Z"}, "sessionIssuer": {"type": "Role", "principalId": "AROAUB2AA5FQRGAHITW4A", "arn": "arn:aws:iam::811596193553:role/SecurityMonkey", "accountId": "811596193553", "userName": "SecurityMonkey"}}}, "requestParameters": {"policyArn": "arn:aws:iam::aws:policy/AmazonCognitoReadOnly", "versionId": "v2"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "a8367eb8-c808-4199-ae3c-f9fd090ed4e6", "record_id": "flaws_cloudtrail:0000340:a8367eb8-c808-4199-ae3c-f9fd090ed4e6", "row_index": 340, "timestamp": "2017-05-27T04:59:57Z", "event_type": "GetPolicyVersion", "event_source": "iam.amazonaws.com", "principal": {"type": "AssumedRole", "arn": "arn:aws:sts::811596193553:assumed-role/SecurityMonkey/secmonkey", "account_id": "811596193553", "principal_id": "AROAUB2AA5FQRGAHITW4A:secmonkey", "user_name": null, "access_key_id": "ASIAI9QHHRMC9F6XQJXN", "session_issuer_arn": "arn:aws:iam::811596193553:role/SecurityMonkey", "session_issuer_user_name": "SecurityMonkey"}, "network": {"source_ip": "255.253.125.115", "user_agent": "Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56 Resource", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 1069, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "a8367eb8-c808-4199-ae3c-f9fd090ed4e6", "eventTime": "2017-05-27T04:59:57Z", "eventName": "GetPolicyVersion", "eventSource": "iam.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.253.125.115", "userAgent": "Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56 Resource", "awsRegion": "us-east-1", "userIdentity": {"type": "AssumedRole", "principalId": "AROAUB2AA5FQRGAHITW4A:secmonkey", "arn": "arn:aws:sts::811596193553:assumed-role/SecurityMonkey/secmonkey", "accountId": "811596193553", "accessKeyId": "ASIAI9QHHRMC9F6XQJXN", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2017-05-27T04:59:38Z"}, "sessionIssuer": {"type": "Role", "principalId": "AROAUB2AA5FQRGAHITW4A", "arn": "arn:aws:iam::811596193553:role/SecurityMonkey", "accountId": "811596193553", "userName": "SecurityMonkey"}}}, "requestParameters": {"policyArn": "arn:aws:iam::aws:policy/AmazonEC2ContainerServiceFullAccess", "versionId": "v3"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "98090e4-0eda-4051-95e7-cd92ee454ac2", "record_id": "flaws_cloudtrail:0000341:98090e4-0eda-4051-95e7-cd92ee454ac2", "row_index": 341, "timestamp": "2017-05-27T04:59:57Z", "event_type": "GetPolicyVersion", "event_source": "iam.amazonaws.com", "principal": {"type": "AssumedRole", "arn": "arn:aws:sts::811596193553:assumed-role/SecurityMonkey/secmonkey", "account_id": "811596193553", "principal_id": "AROAUB2AA5FQRGAHITW4A:secmonkey", "user_name": null, "access_key_id": "ASIAI9QHHRMC9F6XQJXN", "session_issuer_arn": "arn:aws:iam::811596193553:role/SecurityMonkey", "session_issuer_user_name": "SecurityMonkey"}, "network": {"source_ip": "255.253.125.115", "user_agent": "Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56 Resource", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 1054, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "98090e4-0eda-4051-95e7-cd92ee454ac2", "eventTime": "2017-05-27T04:59:57Z", "eventName": "GetPolicyVersion", "eventSource": "iam.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.253.125.115", "userAgent": "Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56 Resource", "awsRegion": "us-east-1", "userIdentity": {"type": "AssumedRole", "principalId": "AROAUB2AA5FQRGAHITW4A:secmonkey", "arn": "arn:aws:sts::811596193553:assumed-role/SecurityMonkey/secmonkey", "accountId": "811596193553", "accessKeyId": "ASIAI9QHHRMC9F6XQJXN", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2017-05-27T04:59:38Z"}, "sessionIssuer": {"type": "Role", "principalId": "AROAUB2AA5FQRGAHITW4A", "arn": "arn:aws:iam::811596193553:role/SecurityMonkey", "accountId": "811596193553", "userName": "SecurityMonkey"}}}, "requestParameters": {"policyArn": "arn:aws:iam::aws:policy/AWSCodeCommitReadOnly", "versionId": "v1"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "2b566a80-74fa-4280-b097-6414d65843", "record_id": "flaws_cloudtrail:0000342:2b566a80-74fa-4280-b097-6414d65843", "row_index": 342, "timestamp": "2017-05-27T04:59:57Z", "event_type": "GetPolicyVersion", "event_source": "iam.amazonaws.com", "principal": {"type": "AssumedRole", "arn": "arn:aws:sts::811596193553:assumed-role/SecurityMonkey/secmonkey", "account_id": "811596193553", "principal_id": "AROAUB2AA5FQRGAHITW4A:secmonkey", "user_name": null, "access_key_id": "ASIAI9QHHRMC9F6XQJXN", "session_issuer_arn": "arn:aws:iam::811596193553:role/SecurityMonkey", "session_issuer_user_name": "SecurityMonkey"}, "network": {"source_ip": "255.253.125.115", "user_agent": "Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56 Resource", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 1051, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "2b566a80-74fa-4280-b097-6414d65843", "eventTime": "2017-05-27T04:59:57Z", "eventName": "GetPolicyVersion", "eventSource": "iam.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.253.125.115", "userAgent": "Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56 Resource", "awsRegion": "us-east-1", "userIdentity": {"type": "AssumedRole", "principalId": "AROAUB2AA5FQRGAHITW4A:secmonkey", "arn": "arn:aws:sts::811596193553:assumed-role/SecurityMonkey/secmonkey", "accountId": "811596193553", "accessKeyId": "ASIAI9QHHRMC9F6XQJXN", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2017-05-27T04:59:38Z"}, "sessionIssuer": {"type": "Role", "principalId": "AROAUB2AA5FQRGAHITW4A", "arn": "arn:aws:iam::811596193553:role/SecurityMonkey", "accountId": "811596193553", "userName": "SecurityMonkey"}}}, "requestParameters": {"policyArn": "arn:aws:iam::aws:policy/AmazonSSMFullAccess", "versionId": "v2"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "e22c74c7-3218-4c48-b071-dcccd77cf875", "record_id": "flaws_cloudtrail:0000343:e22c74c7-3218-4c48-b071-dcccd77cf875", "row_index": 343, "timestamp": "2017-05-27T04:59:57Z", "event_type": "GetPolicyVersion", "event_source": "iam.amazonaws.com", "principal": {"type": "AssumedRole", "arn": "arn:aws:sts::811596193553:assumed-role/SecurityMonkey/secmonkey", "account_id": "811596193553", "principal_id": "AROAUB2AA5FQRGAHITW4A:secmonkey", "user_name": null, "access_key_id": "ASIAI9QHHRMC9F6XQJXN", "session_issuer_arn": "arn:aws:iam::811596193553:role/SecurityMonkey", "session_issuer_user_name": "SecurityMonkey"}, "network": {"source_ip": "255.253.125.115", "user_agent": "Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56 Resource", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 1067, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "e22c74c7-3218-4c48-b071-dcccd77cf875", "eventTime": "2017-05-27T04:59:57Z", "eventName": "GetPolicyVersion", "eventSource": "iam.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.253.125.115", "userAgent": "Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56 Resource", "awsRegion": "us-east-1", "userIdentity": {"type": "AssumedRole", "principalId": "AROAUB2AA5FQRGAHITW4A:secmonkey", "arn": "arn:aws:sts::811596193553:assumed-role/SecurityMonkey/secmonkey", "accountId": "811596193553", "accessKeyId": "ASIAI9QHHRMC9F6XQJXN", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2017-05-27T04:59:38Z"}, "sessionIssuer": {"type": "Role", "principalId": "AROAUB2AA5FQRGAHITW4A", "arn": "arn:aws:iam::811596193553:role/SecurityMonkey", "accountId": "811596193553", "userName": "SecurityMonkey"}}}, "requestParameters": {"policyArn": "arn:aws:iam::aws:policy/ServiceCatalogAdminReadOnlyAccess", "versionId": "v4"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "5c792d0b-1e7f-467c-86c3-f25615db7cb0", "record_id": "flaws_cloudtrail:0000344:5c792d0b-1e7f-467c-86c3-f25615db7cb0", "row_index": 344, "timestamp": "2017-05-27T04:59:57Z", "event_type": "GetPolicyVersion", "event_source": "iam.amazonaws.com", "principal": {"type": "AssumedRole", "arn": "arn:aws:sts::811596193553:assumed-role/SecurityMonkey/secmonkey", "account_id": "811596193553", "principal_id": "AROAUB2AA5FQRGAHITW4A:secmonkey", "user_name": null, "access_key_id": "ASIAI9QHHRMC9F6XQJXN", "session_issuer_arn": "arn:aws:iam::811596193553:role/SecurityMonkey", "session_issuer_user_name": "SecurityMonkey"}, "network": {"source_ip": "255.253.125.115", "user_agent": "Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56 Resource", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 1052, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "5c792d0b-1e7f-467c-86c3-f25615db7cb0", "eventTime": "2017-05-27T04:59:57Z", "eventName": "GetPolicyVersion", "eventSource": "iam.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.253.125.115", "userAgent": "Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56 Resource", "awsRegion": "us-east-1", "userIdentity": {"type": "AssumedRole", "principalId": "AROAUB2AA5FQRGAHITW4A:secmonkey", "arn": "arn:aws:sts::811596193553:assumed-role/SecurityMonkey/secmonkey", "accountId": "811596193553", "accessKeyId": "ASIAI9QHHRMC9F6XQJXN", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2017-05-27T04:59:38Z"}, "sessionIssuer": {"type": "Role", "principalId": "AROAUB2AA5FQRGAHITW4A", "arn": "arn:aws:iam::811596193553:role/SecurityMonkey", "accountId": "811596193553", "userName": "SecurityMonkey"}}}, "requestParameters": {"policyArn": "arn:aws:iam::aws:policy/AWSBatchFullAccess", "versionId": "v2"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "9de5ddfd-39d2-4f32-853a-4a32957c6d81", "record_id": "flaws_cloudtrail:0000345:9de5ddfd-39d2-4f32-853a-4a32957c6d81", "row_index": 345, "timestamp": "2017-05-27T04:59:57Z", "event_type": "GetPolicyVersion", "event_source": "iam.amazonaws.com", "principal": {"type": "AssumedRole", "arn": "arn:aws:sts::811596193553:assumed-role/SecurityMonkey/secmonkey", "account_id": "811596193553", "principal_id": "AROAUB2AA5FQRGAHITW4A:secmonkey", "user_name": null, "access_key_id": "ASIAI9QHHRMC9F6XQJXN", "session_issuer_arn": "arn:aws:iam::811596193553:role/SecurityMonkey", "session_issuer_user_name": "SecurityMonkey"}, "network": {"source_ip": "255.253.125.115", "user_agent": "Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56 Resource", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 1044, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "9de5ddfd-39d2-4f32-853a-4a32957c6d81", "eventTime": "2017-05-27T04:59:57Z", "eventName": "GetPolicyVersion", "eventSource": "iam.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.253.125.115", "userAgent": "Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56 Resource", "awsRegion": "us-east-1", "userIdentity": {"type": "AssumedRole", "principalId": "AROAUB2AA5FQRGAHITW4A:secmonkey", "arn": "arn:aws:sts::811596193553:assumed-role/SecurityMonkey/secmonkey", "accountId": "811596193553", "accessKeyId": "ASIAI9QHHRMC9F6XQJXN", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2017-05-27T04:59:38Z"}, "sessionIssuer": {"type": "Role", "principalId": "AROAUB2AA5FQRGAHITW4A", "arn": "arn:aws:iam::811596193553:role/SecurityMonkey", "accountId": "811596193553", "userName": "SecurityMonkey"}}}, "requestParameters": {"policyArn": "arn:aws:iam::aws:policy/AWSConnector", "versionId": "v3"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "80fab880-312c-4695-8792-f0b14dd11b28", "record_id": "flaws_cloudtrail:0000346:80fab880-312c-4695-8792-f0b14dd11b28", "row_index": 346, "timestamp": "2017-05-27T04:59:57Z", "event_type": "GetPolicyVersion", "event_source": "iam.amazonaws.com", "principal": {"type": "AssumedRole", "arn": "arn:aws:sts::811596193553:assumed-role/SecurityMonkey/secmonkey", "account_id": "811596193553", "principal_id": "AROAUB2AA5FQRGAHITW4A:secmonkey", "user_name": null, "access_key_id": "ASIAI9QHHRMC9F6XQJXN", "session_issuer_arn": "arn:aws:iam::811596193553:role/SecurityMonkey", "session_issuer_user_name": "SecurityMonkey"}, "network": {"source_ip": "255.253.125.115", "user_agent": "Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56 Resource", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 1072, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "80fab880-312c-4695-8792-f0b14dd11b28", "eventTime": "2017-05-27T04:59:57Z", "eventName": "GetPolicyVersion", "eventSource": "iam.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.253.125.115", "userAgent": "Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56 Resource", "awsRegion": "us-east-1", "userIdentity": {"type": "AssumedRole", "principalId": "AROAUB2AA5FQRGAHITW4A:secmonkey", "arn": "arn:aws:sts::811596193553:assumed-role/SecurityMonkey/secmonkey", "accountId": "811596193553", "accessKeyId": "ASIAI9QHHRMC9F6XQJXN", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2017-05-27T04:59:38Z"}, "sessionIssuer": {"type": "Role", "principalId": "AROAUB2AA5FQRGAHITW4A", "arn": "arn:aws:iam::811596193553:role/SecurityMonkey", "accountId": "811596193553", "userName": "SecurityMonkey"}}}, "requestParameters": {"policyArn": "arn:aws:iam::aws:policy/service-role/AWSOpsWorksCMServiceRole", "versionId": "v6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "bead667f-ce97-4ce7-be9a-a7699583b378", "record_id": "flaws_cloudtrail:0000347:bead667f-ce97-4ce7-be9a-a7699583b378", "row_index": 347, "timestamp": "2017-05-27T04:59:57Z", "event_type": "GetPolicyVersion", "event_source": "iam.amazonaws.com", "principal": {"type": "AssumedRole", "arn": "arn:aws:sts::811596193553:assumed-role/SecurityMonkey/secmonkey", "account_id": "811596193553", "principal_id": "AROAUB2AA5FQRGAHITW4A:secmonkey", "user_name": null, "access_key_id": "ASIAI9QHHRMC9F6XQJXN", "session_issuer_arn": "arn:aws:iam::811596193553:role/SecurityMonkey", "session_issuer_user_name": "SecurityMonkey"}, "network": {"source_ip": "255.253.125.115", "user_agent": "Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56 Resource", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 1065, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "bead667f-ce97-4ce7-be9a-a7699583b378", "eventTime": "2017-05-27T04:59:57Z", "eventName": "GetPolicyVersion", "eventSource": "iam.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.253.125.115", "userAgent": "Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56 Resource", "awsRegion": "us-east-1", "userIdentity": {"type": "AssumedRole", "principalId": "AROAUB2AA5FQRGAHITW4A:secmonkey", "arn": "arn:aws:sts::811596193553:assumed-role/SecurityMonkey/secmonkey", "accountId": "811596193553", "accessKeyId": "ASIAI9QHHRMC9F6XQJXN", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2017-05-27T04:59:38Z"}, "sessionIssuer": {"type": "Role", "principalId": "AROAUB2AA5FQRGAHITW4A", "arn": "arn:aws:iam::811596193553:role/SecurityMonkey", "accountId": "811596193553", "userName": "SecurityMonkey"}}}, "requestParameters": {"policyArn": "arn:aws:iam::aws:policy/AWSMarketplaceMeteringFullAccess", "versionId": "v1"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "4e925f31-1e80-4e06-9553-6b770fd7dc99", "record_id": "flaws_cloudtrail:0000348:4e925f31-1e80-4e06-9553-6b770fd7dc99", "row_index": 348, "timestamp": "2017-05-27T04:59:58Z", "event_type": "DescribeTrails", "event_source": "cloudtrail.amazonaws.com", "principal": {"type": "AssumedRole", "arn": "arn:aws:sts::811596193553:assumed-role/SecurityMonkey/secmonkey", "account_id": "811596193553", "principal_id": "AROAUB2AA5FQRGAHITW4A:secmonkey", "user_name": null, "access_key_id": "ASIAV8J7HQ2D4UPYR0CL", "session_issuer_arn": "arn:aws:iam::811596193553:role/SecurityMonkey", "session_issuer_user_name": "SecurityMonkey"}, "network": {"source_ip": "255.253.125.115", "user_agent": "Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56", "aws_region": "eu-west-2"}, "resource_arns": [], "raw_record_size_bytes": 974, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "4e925f31-1e80-4e06-9553-6b770fd7dc99", "eventTime": "2017-05-27T04:59:58Z", "eventName": "DescribeTrails", "eventSource": "cloudtrail.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.253.125.115", "userAgent": "Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56", "awsRegion": "eu-west-2", "userIdentity": {"type": "AssumedRole", "principalId": "AROAUB2AA5FQRGAHITW4A:secmonkey", "arn": "arn:aws:sts::811596193553:assumed-role/SecurityMonkey/secmonkey", "accountId": "811596193553", "accessKeyId": "ASIAV8J7HQ2D4UPYR0CL", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2017-05-27T04:59:58Z"}, "sessionIssuer": {"type": "Role", "principalId": "AROAUB2AA5FQRGAHITW4A", "arn": "arn:aws:iam::811596193553:role/SecurityMonkey", "accountId": "811596193553", "userName": "SecurityMonkey"}}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "fe944c3a-ada1-46f7-995b-10164bc02864", "record_id": "flaws_cloudtrail:0000349:fe944c3a-ada1-46f7-995b-10164bc02864", "row_index": 349, "timestamp": "2017-05-27T04:59:58Z", "event_type": "GetPolicyVersion", "event_source": "iam.amazonaws.com", "principal": {"type": "AssumedRole", "arn": "arn:aws:sts::811596193553:assumed-role/SecurityMonkey/secmonkey", "account_id": "811596193553", "principal_id": "AROAUB2AA5FQRGAHITW4A:secmonkey", "user_name": null, "access_key_id": "ASIAI9QHHRMC9F6XQJXN", "session_issuer_arn": "arn:aws:iam::811596193553:role/SecurityMonkey", "session_issuer_user_name": "SecurityMonkey"}, "network": {"source_ip": "255.253.125.115", "user_agent": "Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56 Resource", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 1067, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "fe944c3a-ada1-46f7-995b-10164bc02864", "eventTime": "2017-05-27T04:59:58Z", "eventName": "GetPolicyVersion", "eventSource": "iam.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.253.125.115", "userAgent": "Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56 Resource", "awsRegion": "us-east-1", "userIdentity": {"type": "AssumedRole", "principalId": "AROAUB2AA5FQRGAHITW4A:secmonkey", "arn": "arn:aws:sts::811596193553:assumed-role/SecurityMonkey/secmonkey", "accountId": "811596193553", "accessKeyId": "ASIAI9QHHRMC9F6XQJXN", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2017-05-27T04:59:38Z"}, "sessionIssuer": {"type": "Role", "principalId": "AROAUB2AA5FQRGAHITW4A", "arn": "arn:aws:iam::811596193553:role/SecurityMonkey", "accountId": "811596193553", "userName": "SecurityMonkey"}}}, "requestParameters": {"policyArn": "arn:aws:iam::aws:policy/AWSCodePipelineCustomActionAccess", "versionId": "v1"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "7599dafa-0396-4a20-8806-3036ed05e575", "record_id": "flaws_cloudtrail:0000350:7599dafa-0396-4a20-8806-3036ed05e575", "row_index": 350, "timestamp": "2017-05-27T04:59:58Z", "event_type": "GetPolicyVersion", "event_source": "iam.amazonaws.com", "principal": {"type": "AssumedRole", "arn": "arn:aws:sts::811596193553:assumed-role/SecurityMonkey/secmonkey", "account_id": "811596193553", "principal_id": "AROAUB2AA5FQRGAHITW4A:secmonkey", "user_name": null, "access_key_id": "ASIAI9QHHRMC9F6XQJXN", "session_issuer_arn": "arn:aws:iam::811596193553:role/SecurityMonkey", "session_issuer_user_name": "SecurityMonkey"}, "network": {"source_ip": "255.253.125.115", "user_agent": "Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56 Resource", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 1078, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "7599dafa-0396-4a20-8806-3036ed05e575", "eventTime": "2017-05-27T04:59:58Z", "eventName": "GetPolicyVersion", "eventSource": "iam.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.253.125.115", "userAgent": "Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56 Resource", "awsRegion": "us-east-1", "userIdentity": {"type": "AssumedRole", "principalId": "AROAUB2AA5FQRGAHITW4A:secmonkey", "arn": "arn:aws:sts::811596193553:assumed-role/SecurityMonkey/secmonkey", "accountId": "811596193553", "accessKeyId": "ASIAI9QHHRMC9F6XQJXN", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2017-05-27T04:59:38Z"}, "sessionIssuer": {"type": "Role", "principalId": "AROAUB2AA5FQRGAHITW4A", "arn": "arn:aws:iam::811596193553:role/SecurityMonkey", "accountId": "811596193553", "userName": "SecurityMonkey"}}}, "requestParameters": {"policyArn": "arn:aws:iam::aws:policy/service-role/VMImportExportRoleForAWSConnector", "versionId": "v1"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "2214af75-3cca-4177-ac1f-bfa939a75f26", "record_id": "flaws_cloudtrail:0000351:2214af75-3cca-4177-ac1f-bfa939a75f26", "row_index": 351, "timestamp": "2017-05-27T04:59:58Z", "event_type": "GetPolicyVersion", "event_source": "iam.amazonaws.com", "principal": {"type": "AssumedRole", "arn": "arn:aws:sts::811596193553:assumed-role/SecurityMonkey/secmonkey", "account_id": "811596193553", "principal_id": "AROAUB2AA5FQRGAHITW4A:secmonkey", "user_name": null, "access_key_id": "ASIAI9QHHRMC9F6XQJXN", "session_issuer_arn": "arn:aws:iam::811596193553:role/SecurityMonkey", "session_issuer_user_name": "SecurityMonkey"}, "network": {"source_ip": "255.253.125.115", "user_agent": "Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56 Resource", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 1076, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "2214af75-3cca-4177-ac1f-bfa939a75f26", "eventTime": "2017-05-27T04:59:58Z", "eventName": "GetPolicyVersion", "eventSource": "iam.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.253.125.115", "userAgent": "Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56 Resource", "awsRegion": "us-east-1", "userIdentity": {"type": "AssumedRole", "principalId": "AROAUB2AA5FQRGAHITW4A:secmonkey", "arn": "arn:aws:sts::811596193553:assumed-role/SecurityMonkey/secmonkey", "accountId": "811596193553", "accessKeyId": "ASIAI9QHHRMC9F6XQJXN", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2017-05-27T04:59:38Z"}, "sessionIssuer": {"type": "Role", "principalId": "AROAUB2AA5FQRGAHITW4A", "arn": "arn:aws:iam::811596193553:role/SecurityMonkey", "accountId": "811596193553", "userName": "SecurityMonkey"}}}, "requestParameters": {"policyArn": "arn:aws:iam::aws:policy/service-role/AWSQuickSightDescribeRedshift", "versionId": "v1"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "f6c07a15-9a2b-4af0-bacc-c61fc5cd1d58", "record_id": "flaws_cloudtrail:0000352:f6c07a15-9a2b-4af0-bacc-c61fc5cd1d58", "row_index": 352, "timestamp": "2017-05-27T04:59:58Z", "event_type": "GetPolicyVersion", "event_source": "iam.amazonaws.com", "principal": {"type": "AssumedRole", "arn": "arn:aws:sts::811596193553:assumed-role/SecurityMonkey/secmonkey", "account_id": "811596193553", "principal_id": "AROAUB2AA5FQRGAHITW4A:secmonkey", "user_name": null, "access_key_id": "ASIAI9QHHRMC9F6XQJXN", "session_issuer_arn": "arn:aws:iam::811596193553:role/SecurityMonkey", "session_issuer_user_name": "SecurityMonkey"}, "network": {"source_ip": "255.253.125.115", "user_agent": "Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56 Resource", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 1064, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "f6c07a15-9a2b-4af0-bacc-c61fc5cd1d58", "eventTime": "2017-05-27T04:59:58Z", "eventName": "GetPolicyVersion", "eventSource": "iam.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.253.125.115", "userAgent": "Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56 Resource", "awsRegion": "us-east-1", "userIdentity": {"type": "AssumedRole", "principalId": "AROAUB2AA5FQRGAHITW4A:secmonkey", "arn": "arn:aws:sts::811596193553:assumed-role/SecurityMonkey/secmonkey", "accountId": "811596193553", "accessKeyId": "ASIAI9QHHRMC9F6XQJXN", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2017-05-27T04:59:38Z"}, "sessionIssuer": {"type": "Role", "principalId": "AROAUB2AA5FQRGAHITW4A", "arn": "arn:aws:iam::811596193553:role/SecurityMonkey", "accountId": "811596193553", "userName": "SecurityMonkey"}}}, "requestParameters": {"policyArn": "arn:aws:iam::aws:policy/service-role/AWSIoTRuleActions", "versionId": "v1"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "fe00512-1ed7-413b-8c7a-ef6401fff711", "record_id": "flaws_cloudtrail:0000353:fe00512-1ed7-413b-8c7a-ef6401fff711", "row_index": 353, "timestamp": "2017-05-27T04:59:58Z", "event_type": "GetPolicyVersion", "event_source": "iam.amazonaws.com", "principal": {"type": "AssumedRole", "arn": "arn:aws:sts::811596193553:assumed-role/SecurityMonkey/secmonkey", "account_id": "811596193553", "principal_id": "AROAUB2AA5FQRGAHITW4A:secmonkey", "user_name": null, "access_key_id": "ASIAI9QHHRMC9F6XQJXN", "session_issuer_arn": "arn:aws:iam::811596193553:role/SecurityMonkey", "session_issuer_user_name": "SecurityMonkey"}, "network": {"source_ip": "255.253.125.115", "user_agent": "Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56 Resource", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 1049, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "fe00512-1ed7-413b-8c7a-ef6401fff711", "eventTime": "2017-05-27T04:59:58Z", "eventName": "GetPolicyVersion", "eventSource": "iam.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.253.125.115", "userAgent": "Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56 Resource", "awsRegion": "us-east-1", "userIdentity": {"type": "AssumedRole", "principalId": "AROAUB2AA5FQRGAHITW4A:secmonkey", "arn": "arn:aws:sts::811596193553:assumed-role/SecurityMonkey/secmonkey", "accountId": "811596193553", "accessKeyId": "ASIAI9QHHRMC9F6XQJXN", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2017-05-27T04:59:38Z"}, "sessionIssuer": {"type": "Role", "principalId": "AROAUB2AA5FQRGAHITW4A", "arn": "arn:aws:iam::811596193553:role/SecurityMonkey", "accountId": "811596193553", "userName": "SecurityMonkey"}}}, "requestParameters": {"policyArn": "arn:aws:iam::aws:policy/AWSLambdaExecute", "versionId": "v1"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "bb4dbe98-1968-4aa7-97de-e6c55a6ea674", "record_id": "flaws_cloudtrail:0000354:bb4dbe98-1968-4aa7-97de-e6c55a6ea674", "row_index": 354, "timestamp": "2017-05-27T04:59:58Z", "event_type": "GetPolicyVersion", "event_source": "iam.amazonaws.com", "principal": {"type": "AssumedRole", "arn": "arn:aws:sts::811596193553:assumed-role/SecurityMonkey/secmonkey", "account_id": "811596193553", "principal_id": "AROAUB2AA5FQRGAHITW4A:secmonkey", "user_name": null, "access_key_id": "ASIAI9QHHRMC9F6XQJXN", "session_issuer_arn": "arn:aws:iam::811596193553:role/SecurityMonkey", "session_issuer_user_name": "SecurityMonkey"}, "network": {"source_ip": "255.253.125.115", "user_agent": "Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56 Resource", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 1061, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "bb4dbe98-1968-4aa7-97de-e6c55a6ea674", "eventTime": "2017-05-27T04:59:58Z", "eventName": "GetPolicyVersion", "eventSource": "iam.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.253.125.115", "userAgent": "Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56 Resource", "awsRegion": "us-east-1", "userIdentity": {"type": "AssumedRole", "principalId": "AROAUB2AA5FQRGAHITW4A:secmonkey", "arn": "arn:aws:sts::811596193553:assumed-role/SecurityMonkey/secmonkey", "accountId": "811596193553", "accessKeyId": "ASIAI9QHHRMC9F6XQJXN", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2017-05-27T04:59:38Z"}, "sessionIssuer": {"type": "Role", "principalId": "AROAUB2AA5FQRGAHITW4A", "arn": "arn:aws:iam::811596193553:role/SecurityMonkey", "accountId": "811596193553", "userName": "SecurityMonkey"}}}, "requestParameters": {"policyArn": "arn:aws:iam::aws:policy/AWSCloudTrailReadOnlyAccess", "versionId": "v6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "a870ecaa-b6a4-4d5e-81b5-6d6f348075d41", "record_id": "flaws_cloudtrail:0000355:a870ecaa-b6a4-4d5e-81b5-6d6f348075d41", "row_index": 355, "timestamp": "2017-05-27T04:59:58Z", "event_type": "GetPolicyVersion", "event_source": "iam.amazonaws.com", "principal": {"type": "AssumedRole", "arn": "arn:aws:sts::811596193553:assumed-role/SecurityMonkey/secmonkey", "account_id": "811596193553", "principal_id": "AROAUB2AA5FQRGAHITW4A:secmonkey", "user_name": null, "access_key_id": "ASIAI9QHHRMC9F6XQJXN", "session_issuer_arn": "arn:aws:iam::811596193553:role/SecurityMonkey", "session_issuer_user_name": "SecurityMonkey"}, "network": {"source_ip": "255.253.125.115", "user_agent": "Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56 Resource", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 1072, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "a870ecaa-b6a4-4d5e-81b5-6d6f348075d41", "eventTime": "2017-05-27T04:59:58Z", "eventName": "GetPolicyVersion", "eventSource": "iam.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.253.125.115", "userAgent": "Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56 Resource", "awsRegion": "us-east-1", "userIdentity": {"type": "AssumedRole", "principalId": "AROAUB2AA5FQRGAHITW4A:secmonkey", "arn": "arn:aws:sts::811596193553:assumed-role/SecurityMonkey/secmonkey", "accountId": "811596193553", "accessKeyId": "ASIAI9QHHRMC9F6XQJXN", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2017-05-27T04:59:38Z"}, "sessionIssuer": {"type": "Role", "principalId": "AROAUB2AA5FQRGAHITW4A", "arn": "arn:aws:iam::811596193553:role/SecurityMonkey", "accountId": "811596193553", "userName": "SecurityMonkey"}}}, "requestParameters": {"policyArn": "arn:aws:iam::aws:policy/AmazonMachineLearningCreateOnlyAccess", "versionId": "v2"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "f9f429c6-4ea5-44cb-b536-21429c8a47a", "record_id": "flaws_cloudtrail:0000356:f9f429c6-4ea5-44cb-b536-21429c8a47a", "row_index": 356, "timestamp": "2017-05-27T04:59:58Z", "event_type": "GetPolicyVersion", "event_source": "iam.amazonaws.com", "principal": {"type": "AssumedRole", "arn": "arn:aws:sts::811596193553:assumed-role/SecurityMonkey/secmonkey", "account_id": "811596193553", "principal_id": "AROAUB2AA5FQRGAHITW4A:secmonkey", "user_name": null, "access_key_id": "ASIAI9QHHRMC9F6XQJXN", "session_issuer_arn": "arn:aws:iam::811596193553:role/SecurityMonkey", "session_issuer_user_name": "SecurityMonkey"}, "network": {"source_ip": "255.253.125.115", "user_agent": "Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56 Resource", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 1068, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "f9f429c6-4ea5-44cb-b536-21429c8a47a", "eventTime": "2017-05-27T04:59:58Z", "eventName": "GetPolicyVersion", "eventSource": "iam.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.253.125.115", "userAgent": "Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56 Resource", "awsRegion": "us-east-1", "userIdentity": {"type": "AssumedRole", "principalId": "AROAUB2AA5FQRGAHITW4A:secmonkey", "arn": "arn:aws:sts::811596193553:assumed-role/SecurityMonkey/secmonkey", "accountId": "811596193553", "accessKeyId": "ASIAI9QHHRMC9F6XQJXN", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2017-05-27T04:59:38Z"}, "sessionIssuer": {"type": "Role", "principalId": "AROAUB2AA5FQRGAHITW4A", "arn": "arn:aws:iam::811596193553:role/SecurityMonkey", "accountId": "811596193553", "userName": "SecurityMonkey"}}}, "requestParameters": {"policyArn": "arn:aws:iam::aws:policy/AmazonEC2ContainerRegistryPowerUser", "versionId": "v2"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "5af030e1-f560-41de-b146-9ea1f1742a32", "record_id": "flaws_cloudtrail:0000357:5af030e1-f560-41de-b146-9ea1f1742a32", "row_index": 357, "timestamp": "2017-05-27T04:59:58Z", "event_type": "GetPolicyVersion", "event_source": "iam.amazonaws.com", "principal": {"type": "AssumedRole", "arn": "arn:aws:sts::811596193553:assumed-role/SecurityMonkey/secmonkey", "account_id": "811596193553", "principal_id": "AROAUB2AA5FQRGAHITW4A:secmonkey", "user_name": null, "access_key_id": "ASIAI9QHHRMC9F6XQJXN", "session_issuer_arn": "arn:aws:iam::811596193553:role/SecurityMonkey", "session_issuer_user_name": "SecurityMonkey"}, "network": {"source_ip": "255.253.125.115", "user_agent": "Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56 Resource", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 1064, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "5af030e1-f560-41de-b146-9ea1f1742a32", "eventTime": "2017-05-27T04:59:58Z", "eventName": "GetPolicyVersion", "eventSource": "iam.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.253.125.115", "userAgent": "Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56 Resource", "awsRegion": "us-east-1", "userIdentity": {"type": "AssumedRole", "principalId": "AROAUB2AA5FQRGAHITW4A:secmonkey", "arn": "arn:aws:sts::811596193553:assumed-role/SecurityMonkey/secmonkey", "accountId": "811596193553", "accessKeyId": "ASIAI9QHHRMC9F6XQJXN", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2017-05-27T04:59:38Z"}, "sessionIssuer": {"type": "Role", "principalId": "AROAUB2AA5FQRGAHITW4A", "arn": "arn:aws:iam::811596193553:role/SecurityMonkey", "accountId": "811596193553", "userName": "SecurityMonkey"}}}, "requestParameters": {"policyArn": "arn:aws:iam::aws:policy/AmazonMechanicalTurkFullAccess", "versionId": "v1"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "22cd3375-39dc-4d5d-9a25-dae27fbf041f", "record_id": "flaws_cloudtrail:0000358:22cd3375-39dc-4d5d-9a25-dae27fbf041f", "row_index": 358, "timestamp": "2017-05-27T04:59:58Z", "event_type": "GetPolicyVersion", "event_source": "iam.amazonaws.com", "principal": {"type": "AssumedRole", "arn": "arn:aws:sts::811596193553:assumed-role/SecurityMonkey/secmonkey", "account_id": "811596193553", "principal_id": "AROAUB2AA5FQRGAHITW4A:secmonkey", "user_name": null, "access_key_id": "ASIAI9QHHRMC9F6XQJXN", "session_issuer_arn": "arn:aws:iam::811596193553:role/SecurityMonkey", "session_issuer_user_name": "SecurityMonkey"}, "network": {"source_ip": "255.253.125.115", "user_agent": "Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56 Resource", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 1059, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "22cd3375-39dc-4d5d-9a25-dae27fbf041f", "eventTime": "2017-05-27T04:59:58Z", "eventName": "GetPolicyVersion", "eventSource": "iam.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.253.125.115", "userAgent": "Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56 Resource", "awsRegion": "us-east-1", "userIdentity": {"type": "AssumedRole", "principalId": "AROAUB2AA5FQRGAHITW4A:secmonkey", "arn": "arn:aws:sts::811596193553:assumed-role/SecurityMonkey/secmonkey", "accountId": "811596193553", "accessKeyId": "ASIAI9QHHRMC9F6XQJXN", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2017-05-27T04:59:38Z"}, "sessionIssuer": {"type": "Role", "principalId": "AROAUB2AA5FQRGAHITW4A", "arn": "arn:aws:iam::811596193553:role/SecurityMonkey", "accountId": "811596193553", "userName": "SecurityMonkey"}}}, "requestParameters": {"policyArn": "arn:aws:iam::aws:policy/AWSImportExportFullAccess", "versionId": "v1"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "88976-4fe9-4936-8d73-402d48e5dcd1", "record_id": "flaws_cloudtrail:0000359:88976-4fe9-4936-8d73-402d48e5dcd1", "row_index": 359, "timestamp": "2017-05-27T04:59:58Z", "event_type": "GetPolicyVersion", "event_source": "iam.amazonaws.com", "principal": {"type": "AssumedRole", "arn": "arn:aws:sts::811596193553:assumed-role/SecurityMonkey/secmonkey", "account_id": "811596193553", "principal_id": "AROAUB2AA5FQRGAHITW4A:secmonkey", "user_name": null, "access_key_id": "ASIAI9QHHRMC9F6XQJXN", "session_issuer_arn": "arn:aws:iam::811596193553:role/SecurityMonkey", "session_issuer_user_name": "SecurityMonkey"}, "network": {"source_ip": "255.253.125.115", "user_agent": "Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56 Resource", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 1050, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "88976-4fe9-4936-8d73-402d48e5dcd1", "eventTime": "2017-05-27T04:59:58Z", "eventName": "GetPolicyVersion", "eventSource": "iam.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.253.125.115", "userAgent": "Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56 Resource", "awsRegion": "us-east-1", "userIdentity": {"type": "AssumedRole", "principalId": "AROAUB2AA5FQRGAHITW4A:secmonkey", "arn": "arn:aws:sts::811596193553:assumed-role/SecurityMonkey/secmonkey", "accountId": "811596193553", "accessKeyId": "ASIAI9QHHRMC9F6XQJXN", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2017-05-27T04:59:38Z"}, "sessionIssuer": {"type": "Role", "principalId": "AROAUB2AA5FQRGAHITW4A", "arn": "arn:aws:iam::811596193553:role/SecurityMonkey", "accountId": "811596193553", "userName": "SecurityMonkey"}}}, "requestParameters": {"policyArn": "arn:aws:iam::aws:policy/AmazonVPCFullAccess", "versionId": "v5"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "ebc861067-6ed0-43a8-b38c-dd0519a4134b", "record_id": "flaws_cloudtrail:0000360:ebc861067-6ed0-43a8-b38c-dd0519a4134b", "row_index": 360, "timestamp": "2017-05-27T04:59:58Z", "event_type": "AssumeRole", "event_source": "sts.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/SecurityMokey", "account_id": "811596193553", "principal_id": "AIDAQ9SRE1SZZZ4Q4UOJH", "user_name": "SecurityMokey", "access_key_id": "AKIAXJ0III4JBKZDXGXN", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "255.253.125.115", "user_agent": "Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56", "aws_region": "us-east-1"}, "resource_arns": ["arn:aws:iam::811596193553:role/SecurityMonkey"], "raw_record_size_bytes": 1451, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "resources", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "ebc861067-6ed0-43a8-b38c-dd0519a4134b", "eventTime": "2017-05-27T04:59:58Z", "eventName": "AssumeRole", "eventSource": "sts.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.253.125.115", "userAgent": "Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDAQ9SRE1SZZZ4Q4UOJH", "arn": "arn:aws:iam::811596193553:user/SecurityMokey", "accountId": "811596193553", "accessKeyId": "AKIAXJ0III4JBKZDXGXN", "userName": "SecurityMokey"}, "requestParameters": {"roleArn": "arn:aws:iam::811596193553:role/SecurityMonkey", "roleSessionName": "secmonkey"}, "responseElements": {"credentials": {"accessKeyId": "ASIAV8J7HQ2D4UPYR0CL", "expiration": "May 27, 2017 5:59:58 AM", "sessionToken": "FQoDYXdzECYaDHpttUQRQcAu/mrrFCLMAQfnFilkKwe7N+93uCDVNTcrVv6NyrsLjEkP8glOZ4DfYcSC04WON2/LQqCVCVuv2b6WCMmdccmNZk80S11Tyo+tpPzHZmkogVbJavyimK5pBILt6kvTdfJTME9KGIFNrGDnfPx2wvgWtLqekOqq7v7sxxGyImnD8McdBWnsqSrEF6PideKlT6xS03owSEpblVUO0cwHt1bLOBeilSU4TECXRptx+HWyhmFhejQqsLLDO4xBSy3WB0ZuICz9fqk2hGRK0OV+BOo34etTACjOj6TJBQ=="}, "assumedRoleUser": {"assumedRoleId": "AROAUB2AA5FQRGAHITW4A:secmonkey", "arn": "arn:aws:sts::811596193553:assumed-role/SecurityMonkey/secmonkey"}}, "resources": [{"ARN": "arn:aws:iam::811596193553:role/SecurityMonkey", "accountId": "811596193553", "type": "AWS::IAM::Role"}]}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "999e0b31-3676-4f93-81a3-4e52b8dd2d54", "record_id": "flaws_cloudtrail:0000361:999e0b31-3676-4f93-81a3-4e52b8dd2d54", "row_index": 361, "timestamp": "2017-05-27T04:59:59Z", "event_type": "GetTrailStatus", "event_source": "cloudtrail.amazonaws.com", "principal": {"type": "AssumedRole", "arn": "arn:aws:sts::811596193553:assumed-role/SecurityMonkey/secmonkey", "account_id": "811596193553", "principal_id": "AROAUB2AA5FQRGAHITW4A:secmonkey", "user_name": null, "access_key_id": "ASIAV8J7HQ2D4UPYR0CL", "session_issuer_arn": "arn:aws:iam::811596193553:role/SecurityMonkey", "session_issuer_user_name": "SecurityMonkey"}, "network": {"source_ip": "255.253.125.115", "user_agent": "Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56", "aws_region": "eu-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1042, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "999e0b31-3676-4f93-81a3-4e52b8dd2d54", "eventTime": "2017-05-27T04:59:59Z", "eventName": "GetTrailStatus", "eventSource": "cloudtrail.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.253.125.115", "userAgent": "Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56", "awsRegion": "eu-west-2", "userIdentity": {"type": "AssumedRole", "principalId": "AROAUB2AA5FQRGAHITW4A:secmonkey", "arn": "arn:aws:sts::811596193553:assumed-role/SecurityMonkey/secmonkey", "accountId": "811596193553", "accessKeyId": "ASIAV8J7HQ2D4UPYR0CL", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2017-05-27T04:59:58Z"}, "sessionIssuer": {"type": "Role", "principalId": "AROAUB2AA5FQRGAHITW4A", "arn": "arn:aws:iam::811596193553:role/SecurityMonkey", "accountId": "811596193553", "userName": "SecurityMonkey"}}}, "requestParameters": {"name": "arn:aws:cloudtrail:us-west-2:811596193553:trail/cloudtrail"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "801d8f95-3005-4087-9ed7-a072598d630b9", "record_id": "flaws_cloudtrail:0000362:801d8f95-3005-4087-9ed7-a072598d630b9", "row_index": 362, "timestamp": "2017-05-27T04:59:59Z", "event_type": "AssumeRole", "event_source": "sts.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/SecurityMokey", "account_id": "811596193553", "principal_id": "AIDAQ9SRE1SZZZ4Q4UOJH", "user_name": "SecurityMokey", "access_key_id": "AKIAXJ0III4JBKZDXGXN", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "255.253.125.115", "user_agent": "Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56", "aws_region": "us-east-1"}, "resource_arns": ["arn:aws:iam::811596193553:role/SecurityMonkey"], "raw_record_size_bytes": 1454, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "resources", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "801d8f95-3005-4087-9ed7-a072598d630b9", "eventTime": "2017-05-27T04:59:59Z", "eventName": "AssumeRole", "eventSource": "sts.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.253.125.115", "userAgent": "Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDAQ9SRE1SZZZ4Q4UOJH", "arn": "arn:aws:iam::811596193553:user/SecurityMokey", "accountId": "811596193553", "accessKeyId": "AKIAXJ0III4JBKZDXGXN", "userName": "SecurityMokey"}, "requestParameters": {"roleArn": "arn:aws:iam::811596193553:role/SecurityMonkey", "roleSessionName": "secmonkey"}, "responseElements": {"credentials": {"accessKeyId": "ASIAQ6YC0T6UO2XR4MFI", "expiration": "May 27, 2017 5:59:59 AM", "sessionToken": "FQoDYXdzECYaDB0L6WsEKguWEoJxliLMAeGP2WaPVaYLgkTigIroYH0gCyz6KDjVsUtSkxGYjU3E9Lm1f8g9X41yOuv1St579pz3YH/DRFWhzNk7uYpbfjQj9BXzVj/h4jSUt//534pzlFuIAkMyjPhiVHjPvLnozvm1NwDSBFmCZbxfL28NXar/yPXYY/8sxbtrvYQlMM/43GB2Ii4SbyFbkECLBlWnTvjB81bhtezZJVbwrrqd6azegAwDaMQjlezMlv0mQwaKxX8gcSpl+c4hWDO+x8QvNFc1MA+z+fBNKMS9nijPj6TJBQ=="}, "assumedRoleUser": {"assumedRoleId": "AROAUB2AA5FQRGAHITW4A:secmonkey", "arn": "arn:aws:sts::811596193553:assumed-role/SecurityMonkey/secmonkey"}}, "resources": [{"ARN": "arn:aws:iam::811596193553:role/SecurityMonkey", "accountId": "811596193553", "type": "AWS::IAM::Role"}]}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "8264e98f-a18d-4e5c-b151-e171dc74df18", "record_id": "flaws_cloudtrail:0000363:8264e98f-a18d-4e5c-b151-e171dc74df18", "row_index": 363, "timestamp": "2017-05-27T04:59:59Z", "event_type": "GetPolicyVersion", "event_source": "iam.amazonaws.com", "principal": {"type": "AssumedRole", "arn": "arn:aws:sts::811596193553:assumed-role/SecurityMonkey/secmonkey", "account_id": "811596193553", "principal_id": "AROAUB2AA5FQRGAHITW4A:secmonkey", "user_name": null, "access_key_id": "ASIAI9QHHRMC9F6XQJXN", "session_issuer_arn": "arn:aws:iam::811596193553:role/SecurityMonkey", "session_issuer_user_name": "SecurityMonkey"}, "network": {"source_ip": "255.253.125.115", "user_agent": "Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56 Resource", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 1070, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "8264e98f-a18d-4e5c-b151-e171dc74df18", "eventTime": "2017-05-27T04:59:59Z", "eventName": "GetPolicyVersion", "eventSource": "iam.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.253.125.115", "userAgent": "Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56 Resource", "awsRegion": "us-east-1", "userIdentity": {"type": "AssumedRole", "principalId": "AROAUB2AA5FQRGAHITW4A:secmonkey", "arn": "arn:aws:sts::811596193553:assumed-role/SecurityMonkey/secmonkey", "accountId": "811596193553", "accessKeyId": "ASIAI9QHHRMC9F6XQJXN", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2017-05-27T04:59:38Z"}, "sessionIssuer": {"type": "Role", "principalId": "AROAUB2AA5FQRGAHITW4A", "arn": "arn:aws:iam::811596193553:role/SecurityMonkey", "accountId": "811596193553", "userName": "SecurityMonkey"}}}, "requestParameters": {"policyArn": "arn:aws:iam::aws:policy/service-role/AmazonSSMAutomationRole", "versionId": "v3"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "9f9cb490-0d34-48a4-9859-a1a6b45dea20", "record_id": "flaws_cloudtrail:0000364:9f9cb490-0d34-48a4-9859-a1a6b45dea20", "row_index": 364, "timestamp": "2017-05-27T04:59:59Z", "event_type": "GetPolicyVersion", "event_source": "iam.amazonaws.com", "principal": {"type": "AssumedRole", "arn": "arn:aws:sts::811596193553:assumed-role/SecurityMonkey/secmonkey", "account_id": "811596193553", "principal_id": "AROAUB2AA5FQRGAHITW4A:secmonkey", "user_name": null, "access_key_id": "ASIAI9QHHRMC9F6XQJXN", "session_issuer_arn": "arn:aws:iam::811596193553:role/SecurityMonkey", "session_issuer_user_name": "SecurityMonkey"}, "network": {"source_ip": "255.253.125.115", "user_agent": "Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56 Resource", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 1074, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "9f9cb490-0d34-48a4-9859-a1a6b45dea20", "eventTime": "2017-05-27T04:59:59Z", "eventName": "GetPolicyVersion", "eventSource": "iam.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.253.125.115", "userAgent": "Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56 Resource", "awsRegion": "us-east-1", "userIdentity": {"type": "AssumedRole", "principalId": "AROAUB2AA5FQRGAHITW4A:secmonkey", "arn": "arn:aws:sts::811596193553:assumed-role/SecurityMonkey/secmonkey", "accountId": "811596193553", "accessKeyId": "ASIAI9QHHRMC9F6XQJXN", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2017-05-27T04:59:38Z"}, "sessionIssuer": {"type": "Role", "principalId": "AROAUB2AA5FQRGAHITW4A", "arn": "arn:aws:iam::811596193553:role/SecurityMonkey", "accountId": "811596193553", "userName": "SecurityMonkey"}}}, "requestParameters": {"policyArn": "arn:aws:iam::aws:policy/ResourceGroupsandTagEditorReadOnlyAccess", "versionId": "v1"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "ffbb0059-a71d-485f-b831-c0c15e46dfb8", "record_id": "flaws_cloudtrail:0000365:ffbb0059-a71d-485f-b831-c0c15e46dfb8", "row_index": 365, "timestamp": "2017-05-27T04:59:59Z", "event_type": "GetPolicyVersion", "event_source": "iam.amazonaws.com", "principal": {"type": "AssumedRole", "arn": "arn:aws:sts::811596193553:assumed-role/SecurityMonkey/secmonkey", "account_id": "811596193553", "principal_id": "AROAUB2AA5FQRGAHITW4A:secmonkey", "user_name": null, "access_key_id": "ASIAI9QHHRMC9F6XQJXN", "session_issuer_arn": "arn:aws:iam::811596193553:role/SecurityMonkey", "session_issuer_user_name": "SecurityMonkey"}, "network": {"source_ip": "255.253.125.115", "user_agent": "Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56 Resource", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 1076, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "ffbb0059-a71d-485f-b831-c0c15e46dfb8", "eventTime": "2017-05-27T04:59:59Z", "eventName": "GetPolicyVersion", "eventSource": "iam.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.253.125.115", "userAgent": "Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56 Resource", "awsRegion": "us-east-1", "userIdentity": {"type": "AssumedRole", "principalId": "AROAUB2AA5FQRGAHITW4A:secmonkey", "arn": "arn:aws:sts::811596193553:assumed-role/SecurityMonkey/secmonkey", "accountId": "811596193553", "accessKeyId": "ASIAI9QHHRMC9F6XQJXN", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2017-05-27T04:59:38Z"}, "sessionIssuer": {"type": "Role", "principalId": "AROAUB2AA5FQRGAHITW4A", "arn": "arn:aws:iam::811596193553:role/SecurityMonkey", "accountId": "811596193553", "userName": "SecurityMonkey"}}}, "requestParameters": {"policyArn": "arn:aws:iam::aws:policy/service-role/AWSLambdaKinesisExecutionRole", "versionId": "v1"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "6fa23a00-9995-4ef9-8261-39488bfa833", "record_id": "flaws_cloudtrail:0000366:6fa23a00-9995-4ef9-8261-39488bfa833", "row_index": 366, "timestamp": "2017-05-27T04:59:59Z", "event_type": "GetPolicyVersion", "event_source": "iam.amazonaws.com", "principal": {"type": "AssumedRole", "arn": "arn:aws:sts::811596193553:assumed-role/SecurityMonkey/secmonkey", "account_id": "811596193553", "principal_id": "AROAUB2AA5FQRGAHITW4A:secmonkey", "user_name": null, "access_key_id": "ASIAI9QHHRMC9F6XQJXN", "session_issuer_arn": "arn:aws:iam::811596193553:role/SecurityMonkey", "session_issuer_user_name": "SecurityMonkey"}, "network": {"source_ip": "255.253.125.115", "user_agent": "Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56 Resource", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 1072, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "6fa23a00-9995-4ef9-8261-39488bfa833", "eventTime": "2017-05-27T04:59:59Z", "eventName": "GetPolicyVersion", "eventSource": "iam.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.253.125.115", "userAgent": "Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56 Resource", "awsRegion": "us-east-1", "userIdentity": {"type": "AssumedRole", "principalId": "AROAUB2AA5FQRGAHITW4A:secmonkey", "arn": "arn:aws:sts::811596193553:assumed-role/SecurityMonkey/secmonkey", "accountId": "811596193553", "accessKeyId": "ASIAI9QHHRMC9F6XQJXN", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2017-05-27T04:59:38Z"}, "sessionIssuer": {"type": "Role", "principalId": "AROAUB2AA5FQRGAHITW4A", "arn": "arn:aws:iam::811596193553:role/SecurityMonkey", "accountId": "811596193553", "userName": "SecurityMonkey"}}}, "requestParameters": {"policyArn": "arn:aws:iam::aws:policy/service-role/AmazonDMSVPCManagementRole", "versionId": "v3"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "2eabbdcb-f36a-47a1-b95e-92e9aa4a461c", "record_id": "flaws_cloudtrail:0000367:2eabbdcb-f36a-47a1-b95e-92e9aa4a461c", "row_index": 367, "timestamp": "2017-05-27T04:59:59Z", "event_type": "GetPolicyVersion", "event_source": "iam.amazonaws.com", "principal": {"type": "AssumedRole", "arn": "arn:aws:sts::811596193553:assumed-role/SecurityMonkey/secmonkey", "account_id": "811596193553", "principal_id": "AROAUB2AA5FQRGAHITW4A:secmonkey", "user_name": null, "access_key_id": "ASIAI9QHHRMC9F6XQJXN", "session_issuer_arn": "arn:aws:iam::811596193553:role/SecurityMonkey", "session_issuer_user_name": "SecurityMonkey"}, "network": {"source_ip": "255.253.125.115", "user_agent": "Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56 Resource", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 1062, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "2eabbdcb-f36a-47a1-b95e-92e9aa4a461c", "eventTime": "2017-05-27T04:59:59Z", "eventName": "GetPolicyVersion", "eventSource": "iam.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.253.125.115", "userAgent": "Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56 Resource", "awsRegion": "us-east-1", "userIdentity": {"type": "AssumedRole", "principalId": "AROAUB2AA5FQRGAHITW4A:secmonkey", "arn": "arn:aws:sts::811596193553:assumed-role/SecurityMonkey/secmonkey", "accountId": "811596193553", "accessKeyId": "ASIAI9QHHRMC9F6XQJXN", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2017-05-27T04:59:38Z"}, "sessionIssuer": {"type": "Role", "principalId": "AROAUB2AA5FQRGAHITW4A", "arn": "arn:aws:iam::811596193553:role/SecurityMonkey", "accountId": "811596193553", "userName": "SecurityMonkey"}}}, "requestParameters": {"policyArn": "arn:aws:iam::aws:policy/AmazonWorkMailReadOnlyAccess", "versionId": "v1"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "68fd0861-c73d-4894-a736-2cf6ec2ac634", "record_id": "flaws_cloudtrail:0000368:68fd0861-c73d-4894-a736-2cf6ec2ac634", "row_index": 368, "timestamp": "2017-05-27T04:59:59Z", "event_type": "GetPolicyVersion", "event_source": "iam.amazonaws.com", "principal": {"type": "AssumedRole", "arn": "arn:aws:sts::811596193553:assumed-role/SecurityMonkey/secmonkey", "account_id": "811596193553", "principal_id": "AROAUB2AA5FQRGAHITW4A:secmonkey", "user_name": null, "access_key_id": "ASIAI9QHHRMC9F6XQJXN", "session_issuer_arn": "arn:aws:iam::811596193553:role/SecurityMonkey", "session_issuer_user_name": "SecurityMonkey"}, "network": {"source_ip": "255.253.125.115", "user_agent": "Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56 Resource", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 1060, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "68fd0861-c73d-4894-a736-2cf6ec2ac634", "eventTime": "2017-05-27T04:59:59Z", "eventName": "GetPolicyVersion", "eventSource": "iam.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.253.125.115", "userAgent": "Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56 Resource", "awsRegion": "us-east-1", "userIdentity": {"type": "AssumedRole", "principalId": "AROAUB2AA5FQRGAHITW4A:secmonkey", "arn": "arn:aws:sts::811596193553:assumed-role/SecurityMonkey/secmonkey", "accountId": "811596193553", "accessKeyId": "ASIAI9QHHRMC9F6XQJXN", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2017-05-27T04:59:38Z"}, "sessionIssuer": {"type": "Role", "principalId": "AROAUB2AA5FQRGAHITW4A", "arn": "arn:aws:iam::811596193553:role/SecurityMonkey", "accountId": "811596193553", "userName": "SecurityMonkey"}}}, "requestParameters": {"policyArn": "arn:aws:iam::aws:policy/AWSIoTConfigReadOnlyAccess", "versionId": "v4"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "1c9ebd33-5431-49f4-9fc5-03b28ec2fd18", "record_id": "flaws_cloudtrail:0000369:1c9ebd33-5431-49f4-9fc5-03b28ec2fd18", "row_index": 369, "timestamp": "2017-05-27T04:59:59Z", "event_type": "GetPolicyVersion", "event_source": "iam.amazonaws.com", "principal": {"type": "AssumedRole", "arn": "arn:aws:sts::811596193553:assumed-role/SecurityMonkey/secmonkey", "account_id": "811596193553", "principal_id": "AROAUB2AA5FQRGAHITW4A:secmonkey", "user_name": null, "access_key_id": "ASIAI9QHHRMC9F6XQJXN", "session_issuer_arn": "arn:aws:iam::811596193553:role/SecurityMonkey", "session_issuer_user_name": "SecurityMonkey"}, "network": {"source_ip": "255.253.125.115", "user_agent": "Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56 Resource", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 1071, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "1c9ebd33-5431-49f4-9fc5-03b28ec2fd18", "eventTime": "2017-05-27T04:59:59Z", "eventName": "GetPolicyVersion", "eventSource": "iam.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.253.125.115", "userAgent": "Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56 Resource", "awsRegion": "us-east-1", "userIdentity": {"type": "AssumedRole", "principalId": "AROAUB2AA5FQRGAHITW4A:secmonkey", "arn": "arn:aws:sts::811596193553:assumed-role/SecurityMonkey/secmonkey", "accountId": "811596193553", "accessKeyId": "ASIAI9QHHRMC9F6XQJXN", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2017-05-27T04:59:38Z"}, "sessionIssuer": {"type": "Role", "principalId": "AROAUB2AA5FQRGAHITW4A", "arn": "arn:aws:iam::811596193553:role/SecurityMonkey", "accountId": "811596193553", "userName": "SecurityMonkey"}}}, "requestParameters": {"policyArn": "arn:aws:iam::aws:policy/AmazonElasticTranscoderReadOnlyAccess", "versionId": "v1"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "18962d44-88d7-47f1-a928-daee825582f5b", "record_id": "flaws_cloudtrail:0000370:18962d44-88d7-47f1-a928-daee825582f5b", "row_index": 370, "timestamp": "2017-05-27T04:59:59Z", "event_type": "GetPolicyVersion", "event_source": "iam.amazonaws.com", "principal": {"type": "AssumedRole", "arn": "arn:aws:sts::811596193553:assumed-role/SecurityMonkey/secmonkey", "account_id": "811596193553", "principal_id": "AROAUB2AA5FQRGAHITW4A:secmonkey", "user_name": null, "access_key_id": "ASIAI9QHHRMC9F6XQJXN", "session_issuer_arn": "arn:aws:iam::811596193553:role/SecurityMonkey", "session_issuer_user_name": "SecurityMonkey"}, "network": {"source_ip": "255.253.125.115", "user_agent": "Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56 Resource", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 1052, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "18962d44-88d7-47f1-a928-daee825582f5b", "eventTime": "2017-05-27T04:59:59Z", "eventName": "GetPolicyVersion", "eventSource": "iam.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.253.125.115", "userAgent": "Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56 Resource", "awsRegion": "us-east-1", "userIdentity": {"type": "AssumedRole", "principalId": "AROAUB2AA5FQRGAHITW4A:secmonkey", "arn": "arn:aws:sts::811596193553:assumed-role/SecurityMonkey/secmonkey", "accountId": "811596193553", "accessKeyId": "ASIAI9QHHRMC9F6XQJXN", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2017-05-27T04:59:38Z"}, "sessionIssuer": {"type": "Role", "principalId": "AROAUB2AA5FQRGAHITW4A", "arn": "arn:aws:iam::811596193553:role/SecurityMonkey", "accountId": "811596193553", "userName": "SecurityMonkey"}}}, "requestParameters": {"policyArn": "arn:aws:iam::aws:policy/AmazonLexReadOnly", "versionId": "v1"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "2ea00b17-c5f4-4898-a9c8-12e7f745e3e2", "record_id": "flaws_cloudtrail:0000371:2ea00b17-c5f4-4898-a9c8-12e7f745e3e2", "row_index": 371, "timestamp": "2017-05-27T04:59:59Z", "event_type": "GetPolicyVersion", "event_source": "iam.amazonaws.com", "principal": {"type": "AssumedRole", "arn": "arn:aws:sts::811596193553:assumed-role/SecurityMonkey/secmonkey", "account_id": "811596193553", "principal_id": "AROAUB2AA5FQRGAHITW4A:secmonkey", "user_name": null, "access_key_id": "ASIAI9QHHRMC9F6XQJXN", "session_issuer_arn": "arn:aws:iam::811596193553:role/SecurityMonkey", "session_issuer_user_name": "SecurityMonkey"}, "network": {"source_ip": "255.253.125.115", "user_agent": "Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56 Resource", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 1061, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "2ea00b17-c5f4-4898-a9c8-12e7f745e3e2", "eventTime": "2017-05-27T04:59:59Z", "eventName": "GetPolicyVersion", "eventSource": "iam.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.253.125.115", "userAgent": "Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56 Resource", "awsRegion": "us-east-1", "userIdentity": {"type": "AssumedRole", "principalId": "AROAUB2AA5FQRGAHITW4A:secmonkey", "arn": "arn:aws:sts::811596193553:assumed-role/SecurityMonkey/secmonkey", "accountId": "811596193553", "accessKeyId": "ASIAI9QHHRMC9F6XQJXN", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2017-05-27T04:59:38Z"}, "sessionIssuer": {"type": "Role", "principalId": "AROAUB2AA5FQRGAHITW4A", "arn": "arn:aws:iam::811596193553:role/SecurityMonkey", "accountId": "811596193553", "userName": "SecurityMonkey"}}}, "requestParameters": {"policyArn": "arn:aws:iam::aws:policy/AWSStorageGatewayFullAccess", "versionId": "v1"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "504aeb57-ded5-4575-855a-449f8d2d1a73", "record_id": "flaws_cloudtrail:0000372:504aeb57-ded5-4575-855a-449f8d2d1a73", "row_index": 372, "timestamp": "2017-05-27T04:59:59Z", "event_type": "GetPolicyVersion", "event_source": "iam.amazonaws.com", "principal": {"type": "AssumedRole", "arn": "arn:aws:sts::811596193553:assumed-role/SecurityMonkey/secmonkey", "account_id": "811596193553", "principal_id": "AROAUB2AA5FQRGAHITW4A:secmonkey", "user_name": null, "access_key_id": "ASIAI9QHHRMC9F6XQJXN", "session_issuer_arn": "arn:aws:iam::811596193553:role/SecurityMonkey", "session_issuer_user_name": "SecurityMonkey"}, "network": {"source_ip": "255.253.125.115", "user_agent": "Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56 Resource", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 1064, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "504aeb57-ded5-4575-855a-449f8d2d1a73", "eventTime": "2017-05-27T04:59:59Z", "eventName": "GetPolicyVersion", "eventSource": "iam.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.253.125.115", "userAgent": "Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56 Resource", "awsRegion": "us-east-1", "userIdentity": {"type": "AssumedRole", "principalId": "AROAUB2AA5FQRGAHITW4A:secmonkey", "arn": "arn:aws:sts::811596193553:assumed-role/SecurityMonkey/secmonkey", "accountId": "811596193553", "accessKeyId": "ASIAI9QHHRMC9F6XQJXN", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2017-05-27T04:59:38Z"}, "sessionIssuer": {"type": "Role", "principalId": "AROAUB2AA5FQRGAHITW4A", "arn": "arn:aws:iam::811596193553:role/SecurityMonkey", "accountId": "811596193553", "userName": "SecurityMonkey"}}}, "requestParameters": {"policyArn": "arn:aws:iam::aws:policy/AmazonCloudDirectoryFullAccess", "versionId": "v1"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "145c6735-88a5-44cc-b068-303efe713799e", "record_id": "flaws_cloudtrail:0000373:145c6735-88a5-44cc-b068-303efe713799e", "row_index": 373, "timestamp": "2017-05-27T04:59:59Z", "event_type": "GetPolicyVersion", "event_source": "iam.amazonaws.com", "principal": {"type": "AssumedRole", "arn": "arn:aws:sts::811596193553:assumed-role/SecurityMonkey/secmonkey", "account_id": "811596193553", "principal_id": "AROAUB2AA5FQRGAHITW4A:secmonkey", "user_name": null, "access_key_id": "ASIAI9QHHRMC9F6XQJXN", "session_issuer_arn": "arn:aws:iam::811596193553:role/SecurityMonkey", "session_issuer_user_name": "SecurityMonkey"}, "network": {"source_ip": "255.253.125.115", "user_agent": "Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56 Resource", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 1066, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "145c6735-88a5-44cc-b068-303efe713799e", "eventTime": "2017-05-27T04:59:59Z", "eventName": "GetPolicyVersion", "eventSource": "iam.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.253.125.115", "userAgent": "Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56 Resource", "awsRegion": "us-east-1", "userIdentity": {"type": "AssumedRole", "principalId": "AROAUB2AA5FQRGAHITW4A:secmonkey", "arn": "arn:aws:sts::811596193553:assumed-role/SecurityMonkey/secmonkey", "accountId": "811596193553", "accessKeyId": "ASIAI9QHHRMC9F6XQJXN", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2017-05-27T04:59:38Z"}, "sessionIssuer": {"type": "Role", "principalId": "AROAUB2AA5FQRGAHITW4A", "arn": "arn:aws:iam::811596193553:role/SecurityMonkey", "accountId": "811596193553", "userName": "SecurityMonkey"}}}, "requestParameters": {"policyArn": "arn:aws:iam::aws:policy/AWSOpsWorksInstanceRegistration", "versionId": "v1"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "b9a84e41-1cde-447c-a95d-dd8727df9558", "record_id": "flaws_cloudtrail:0000374:b9a84e41-1cde-447c-a95d-dd8727df9558", "row_index": 374, "timestamp": "2017-05-27T04:59:59Z", "event_type": "DescribeRegions", "event_source": "ec2.amazonaws.com", "principal": {"type": "AssumedRole", "arn": "arn:aws:sts::811596193553:assumed-role/SecurityMonkey/secmonkey", "account_id": "811596193553", "principal_id": "AROAUB2AA5FQRGAHITW4A:secmonkey", "user_name": null, "access_key_id": "ASIAQ6YC0T6UO2XR4MFI", "session_issuer_arn": "arn:aws:iam::811596193553:role/SecurityMonkey", "session_issuer_user_name": "SecurityMonkey"}, "network": {"source_ip": "255.253.125.115", "user_agent": "Boto/2.47.0 Python/2.7.12 Linux/4.4.0-78-generic", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 968, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "b9a84e41-1cde-447c-a95d-dd8727df9558", "eventTime": "2017-05-27T04:59:59Z", "eventName": "DescribeRegions", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.253.125.115", "userAgent": "Boto/2.47.0 Python/2.7.12 Linux/4.4.0-78-generic", "awsRegion": "us-east-1", "userIdentity": {"type": "AssumedRole", "principalId": "AROAUB2AA5FQRGAHITW4A:secmonkey", "arn": "arn:aws:sts::811596193553:assumed-role/SecurityMonkey/secmonkey", "accountId": "811596193553", "accessKeyId": "ASIAQ6YC0T6UO2XR4MFI", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2017-05-27T04:59:59Z"}, "sessionIssuer": {"type": "Role", "principalId": "AROAUB2AA5FQRGAHITW4A", "arn": "arn:aws:iam::811596193553:role/SecurityMonkey", "accountId": "811596193553", "userName": "SecurityMonkey"}}}, "requestParameters": {"regionSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "c994e921-0a08-4faf-8b58-41b6b04bb62a", "record_id": "flaws_cloudtrail:0000375:c994e921-0a08-4faf-8b58-41b6b04bb62a", "row_index": 375, "timestamp": "2017-05-27T05:00:00Z", "event_type": "AssumeRole", "event_source": "sts.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/SecurityMokey", "account_id": "811596193553", "principal_id": "AIDAQ9SRE1SZZZ4Q4UOJH", "user_name": "SecurityMokey", "access_key_id": "AKIAXJ0III4JBKZDXGXN", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "255.253.125.115", "user_agent": "Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56", "aws_region": "us-east-1"}, "resource_arns": ["arn:aws:iam::811596193553:role/SecurityMonkey"], "raw_record_size_bytes": 1453, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "resources", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "c994e921-0a08-4faf-8b58-41b6b04bb62a", "eventTime": "2017-05-27T05:00:00Z", "eventName": "AssumeRole", "eventSource": "sts.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.253.125.115", "userAgent": "Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDAQ9SRE1SZZZ4Q4UOJH", "arn": "arn:aws:iam::811596193553:user/SecurityMokey", "accountId": "811596193553", "accessKeyId": "AKIAXJ0III4JBKZDXGXN", "userName": "SecurityMokey"}, "requestParameters": {"roleArn": "arn:aws:iam::811596193553:role/SecurityMonkey", "roleSessionName": "secmonkey"}, "responseElements": {"credentials": {"accessKeyId": "ASIADZF0B3AXEWABA6CA", "expiration": "May 27, 2017 6:00:00 AM", "sessionToken": "FQoDYXdzECYaDGQCY0R/Te8bWQk4fyLMAZGI0gfryFidJPZaTxIvWzLSDOA8iJsi/zH2QbxPOyfcV2OSirH/7mRAaPrPAduO2rIDW3Vns7WIpi0du5rcaJ8MjplINjeuYw7vnC0WfNRQ4qaRHfeiA2Dqnz3q6zn1CH5U+F2FCuamUEtOrUHJwd3QnOeXuO0AqUTuJhOZh1+IfO7wtbIn81gmXlYzbvVBGArfANyXC9fcroai5qVb+z4RIVgmsCwG89HTn0nIlv63BpKdz5Lbn7Wx83Xx3k0ePJmph7NNyLJiooR61SjQj6TJBQ=="}, "assumedRoleUser": {"assumedRoleId": "AROAUB2AA5FQRGAHITW4A:secmonkey", "arn": "arn:aws:sts::811596193553:assumed-role/SecurityMonkey/secmonkey"}}, "resources": [{"ARN": "arn:aws:iam::811596193553:role/SecurityMonkey", "accountId": "811596193553", "type": "AWS::IAM::Role"}]}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "eb5b7082-06f1-47ed-a792-92efe28d66db", "record_id": "flaws_cloudtrail:0000376:eb5b7082-06f1-47ed-a792-92efe28d66db", "row_index": 376, "timestamp": "2017-05-27T05:00:00Z", "event_type": "GetPolicyVersion", "event_source": "iam.amazonaws.com", "principal": {"type": "AssumedRole", "arn": "arn:aws:sts::811596193553:assumed-role/SecurityMonkey/secmonkey", "account_id": "811596193553", "principal_id": "AROAUB2AA5FQRGAHITW4A:secmonkey", "user_name": null, "access_key_id": "ASIAI9QHHRMC9F6XQJXN", "session_issuer_arn": "arn:aws:iam::811596193553:role/SecurityMonkey", "session_issuer_user_name": "SecurityMonkey"}, "network": {"source_ip": "255.253.125.115", "user_agent": "Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56 Resource", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 1058, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "eb5b7082-06f1-47ed-a792-92efe28d66db", "eventTime": "2017-05-27T05:00:00Z", "eventName": "GetPolicyVersion", "eventSource": "iam.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.253.125.115", "userAgent": "Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56 Resource", "awsRegion": "us-east-1", "userIdentity": {"type": "AssumedRole", "principalId": "AROAUB2AA5FQRGAHITW4A:secmonkey", "arn": "arn:aws:sts::811596193553:assumed-role/SecurityMonkey/secmonkey", "accountId": "811596193553", "accessKeyId": "ASIAI9QHHRMC9F6XQJXN", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2017-05-27T04:59:38Z"}, "sessionIssuer": {"type": "Role", "principalId": "AROAUB2AA5FQRGAHITW4A", "arn": "arn:aws:iam::811596193553:role/SecurityMonkey", "accountId": "811596193553", "userName": "SecurityMonkey"}}}, "requestParameters": {"policyArn": "arn:aws:iam::aws:policy/AmazonRDSReadOnlyAccess", "versionId": "v2"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "fbe2ee75-733d-4714-a8a9-d169eee0a11d", "record_id": "flaws_cloudtrail:0000377:fbe2ee75-733d-4714-a8a9-d169eee0a11d", "row_index": 377, "timestamp": "2017-05-27T05:00:00Z", "event_type": "GetPolicyVersion", "event_source": "iam.amazonaws.com", "principal": {"type": "AssumedRole", "arn": "arn:aws:sts::811596193553:assumed-role/SecurityMonkey/secmonkey", "account_id": "811596193553", "principal_id": "AROAUB2AA5FQRGAHITW4A:secmonkey", "user_name": null, "access_key_id": "ASIAI9QHHRMC9F6XQJXN", "session_issuer_arn": "arn:aws:iam::811596193553:role/SecurityMonkey", "session_issuer_user_name": "SecurityMonkey"}, "network": {"source_ip": "255.253.125.115", "user_agent": "Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56 Resource", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 1051, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "fbe2ee75-733d-4714-a8a9-d169eee0a11d", "eventTime": "2017-05-27T05:00:00Z", "eventName": "GetPolicyVersion", "eventSource": "iam.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.253.125.115", "userAgent": "Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56 Resource", "awsRegion": "us-east-1", "userIdentity": {"type": "AssumedRole", "principalId": "AROAUB2AA5FQRGAHITW4A:secmonkey", "arn": "arn:aws:sts::811596193553:assumed-role/SecurityMonkey/secmonkey", "accountId": "811596193553", "accessKeyId": "ASIAI9QHHRMC9F6XQJXN", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2017-05-27T04:59:38Z"}, "sessionIssuer": {"type": "Role", "principalId": "AROAUB2AA5FQRGAHITW4A", "arn": "arn:aws:iam::811596193553:role/SecurityMonkey", "accountId": "811596193553", "userName": "SecurityMonkey"}}}, "requestParameters": {"policyArn": "arn:aws:iam::aws:policy/IAMReadOnlyAccess", "versionId": "v3"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "fdc76dfb-f904-405c-8c37-160866af936", "record_id": "flaws_cloudtrail:0000378:fdc76dfb-f904-405c-8c37-160866af936", "row_index": 378, "timestamp": "2017-05-27T05:00:00Z", "event_type": "GetPolicyVersion", "event_source": "iam.amazonaws.com", "principal": {"type": "AssumedRole", "arn": "arn:aws:sts::811596193553:assumed-role/SecurityMonkey/secmonkey", "account_id": "811596193553", "principal_id": "AROAUB2AA5FQRGAHITW4A:secmonkey", "user_name": null, "access_key_id": "ASIAI9QHHRMC9F6XQJXN", "session_issuer_arn": "arn:aws:iam::811596193553:role/SecurityMonkey", "session_issuer_user_name": "SecurityMonkey"}, "network": {"source_ip": "255.253.125.115", "user_agent": "Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56 Resource", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 1072, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "fdc76dfb-f904-405c-8c37-160866af936", "eventTime": "2017-05-27T05:00:00Z", "eventName": "GetPolicyVersion", "eventSource": "iam.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.253.125.115", "userAgent": "Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56 Resource", "awsRegion": "us-east-1", "userIdentity": {"type": "AssumedRole", "principalId": "AROAUB2AA5FQRGAHITW4A:secmonkey", "arn": "arn:aws:sts::811596193553:assumed-role/SecurityMonkey/secmonkey", "accountId": "811596193553", "accessKeyId": "ASIAI9QHHRMC9F6XQJXN", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2017-05-27T04:59:38Z"}, "sessionIssuer": {"type": "Role", "principalId": "AROAUB2AA5FQRGAHITW4A", "arn": "arn:aws:iam::811596193553:role/SecurityMonkey", "accountId": "811596193553", "userName": "SecurityMonkey"}}}, "requestParameters": {"policyArn": "arn:aws:iam::aws:policy/service-role/AWSElasticBeanstalkService", "versionId": "v10"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "fa565648-9438-4ebe-949e-b4c195e61758", "record_id": "flaws_cloudtrail:0000379:fa565648-9438-4ebe-949e-b4c195e61758", "row_index": 379, "timestamp": "2017-05-27T05:00:00Z", "event_type": "GetPolicyVersion", "event_source": "iam.amazonaws.com", "principal": {"type": "AssumedRole", "arn": "arn:aws:sts::811596193553:assumed-role/SecurityMonkey/secmonkey", "account_id": "811596193553", "principal_id": "AROAUB2AA5FQRGAHITW4A:secmonkey", "user_name": null, "access_key_id": "ASIAI9QHHRMC9F6XQJXN", "session_issuer_arn": "arn:aws:iam::811596193553:role/SecurityMonkey", "session_issuer_user_name": "SecurityMonkey"}, "network": {"source_ip": "255.253.125.115", "user_agent": "Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56 Resource", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 1076, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "fa565648-9438-4ebe-949e-b4c195e61758", "eventTime": "2017-05-27T05:00:00Z", "eventName": "GetPolicyVersion", "eventSource": "iam.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.253.125.115", "userAgent": "Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56 Resource", "awsRegion": "us-east-1", "userIdentity": {"type": "AssumedRole", "principalId": "AROAUB2AA5FQRGAHITW4A:secmonkey", "arn": "arn:aws:sts::811596193553:assumed-role/SecurityMonkey/secmonkey", "accountId": "811596193553", "accessKeyId": "ASIAI9QHHRMC9F6XQJXN", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2017-05-27T04:59:38Z"}, "sessionIssuer": {"type": "Role", "principalId": "AROAUB2AA5FQRGAHITW4A", "arn": "arn:aws:iam::811596193553:role/SecurityMonkey", "accountId": "811596193553", "userName": "SecurityMonkey"}}}, "requestParameters": {"policyArn": "arn:aws:iam::aws:policy/AmazonMobileAnalyticsFinancialReportAccess", "versionId": "v1"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "30569a5-2119-4ee9-80f2-00b8f1f8597f", "record_id": "flaws_cloudtrail:0000380:30569a5-2119-4ee9-80f2-00b8f1f8597f", "row_index": 380, "timestamp": "2017-05-27T05:00:00Z", "event_type": "GetPolicyVersion", "event_source": "iam.amazonaws.com", "principal": {"type": "AssumedRole", "arn": "arn:aws:sts::811596193553:assumed-role/SecurityMonkey/secmonkey", "account_id": "811596193553", "principal_id": "AROAUB2AA5FQRGAHITW4A:secmonkey", "user_name": null, "access_key_id": "ASIAI9QHHRMC9F6XQJXN", "session_issuer_arn": "arn:aws:iam::811596193553:role/SecurityMonkey", "session_issuer_user_name": "SecurityMonkey"}, "network": {"source_ip": "255.253.125.115", "user_agent": "Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56 Resource", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 1059, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "30569a5-2119-4ee9-80f2-00b8f1f8597f", "eventTime": "2017-05-27T05:00:00Z", "eventName": "GetPolicyVersion", "eventSource": "iam.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.253.125.115", "userAgent": "Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56 Resource", "awsRegion": "us-east-1", "userIdentity": {"type": "AssumedRole", "principalId": "AROAUB2AA5FQRGAHITW4A:secmonkey", "arn": "arn:aws:sts::811596193553:assumed-role/SecurityMonkey/secmonkey", "accountId": "811596193553", "accessKeyId": "ASIAI9QHHRMC9F6XQJXN", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2017-05-27T04:59:38Z"}, "sessionIssuer": {"type": "Role", "principalId": "AROAUB2AA5FQRGAHITW4A", "arn": "arn:aws:iam::811596193553:role/SecurityMonkey", "accountId": "811596193553", "userName": "SecurityMonkey"}}}, "requestParameters": {"policyArn": "arn:aws:iam::aws:policy/service-role/AmazonSNSRole", "versionId": "v1"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "1bfce4a5-4cc1-4fb4-9df6-6aaec2abe471", "record_id": "flaws_cloudtrail:0000381:1bfce4a5-4cc1-4fb4-9df6-6aaec2abe471", "row_index": 381, "timestamp": "2017-05-27T05:00:00Z", "event_type": "GetPolicyVersion", "event_source": "iam.amazonaws.com", "principal": {"type": "AssumedRole", "arn": "arn:aws:sts::811596193553:assumed-role/SecurityMonkey/secmonkey", "account_id": "811596193553", "principal_id": "AROAUB2AA5FQRGAHITW4A:secmonkey", "user_name": null, "access_key_id": "ASIAI9QHHRMC9F6XQJXN", "session_issuer_arn": "arn:aws:iam::811596193553:role/SecurityMonkey", "session_issuer_user_name": "SecurityMonkey"}, "network": {"source_ip": "255.253.125.115", "user_agent": "Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56 Resource", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 1058, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "1bfce4a5-4cc1-4fb4-9df6-6aaec2abe471", "eventTime": "2017-05-27T05:00:00Z", "eventName": "GetPolicyVersion", "eventSource": "iam.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.253.125.115", "userAgent": "Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56 Resource", "awsRegion": "us-east-1", "userIdentity": {"type": "AssumedRole", "principalId": "AROAUB2AA5FQRGAHITW4A:secmonkey", "arn": "arn:aws:sts::811596193553:assumed-role/SecurityMonkey/secmonkey", "accountId": "811596193553", "accessKeyId": "ASIAI9QHHRMC9F6XQJXN", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2017-05-27T04:59:38Z"}, "sessionIssuer": {"type": "Role", "principalId": "AROAUB2AA5FQRGAHITW4A", "arn": "arn:aws:iam::811596193553:role/SecurityMonkey", "accountId": "811596193553", "userName": "SecurityMonkey"}}}, "requestParameters": {"policyArn": "arn:aws:iam::aws:policy/CloudFrontReadOnlyAccess", "versionId": "v3"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "5eae3b9e-c1d6-4b79-869f-4e6061084fbd", "record_id": "flaws_cloudtrail:0000382:5eae3b9e-c1d6-4b79-869f-4e6061084fbd", "row_index": 382, "timestamp": "2017-05-27T05:00:00Z", "event_type": "GetPolicyVersion", "event_source": "iam.amazonaws.com", "principal": {"type": "AssumedRole", "arn": "arn:aws:sts::811596193553:assumed-role/SecurityMonkey/secmonkey", "account_id": "811596193553", "principal_id": "AROAUB2AA5FQRGAHITW4A:secmonkey", "user_name": null, "access_key_id": "ASIAI9QHHRMC9F6XQJXN", "session_issuer_arn": "arn:aws:iam::811596193553:role/SecurityMonkey", "session_issuer_user_name": "SecurityMonkey"}, "network": {"source_ip": "255.253.125.115", "user_agent": "Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56 Resource", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 1078, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "5eae3b9e-c1d6-4b79-869f-4e6061084fbd", "eventTime": "2017-05-27T05:00:00Z", "eventName": "GetPolicyVersion", "eventSource": "iam.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.253.125.115", "userAgent": "Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56 Resource", "awsRegion": "us-east-1", "userIdentity": {"type": "AssumedRole", "principalId": "AROAUB2AA5FQRGAHITW4A:secmonkey", "arn": "arn:aws:sts::811596193553:assumed-role/SecurityMonkey/secmonkey", "accountId": "811596193553", "accessKeyId": "ASIAI9QHHRMC9F6XQJXN", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2017-05-27T04:59:38Z"}, "sessionIssuer": {"type": "Role", "principalId": "AROAUB2AA5FQRGAHITW4A", "arn": "arn:aws:iam::811596193553:role/SecurityMonkey", "accountId": "811596193553", "userName": "SecurityMonkey"}}}, "requestParameters": {"policyArn": "arn:aws:iam::aws:policy/service-role/CloudWatchEventsInvocationAccess", "versionId": "v1"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "86e1a5f0-c5ba-4928-a267-76e8ef8fb1bf", "record_id": "flaws_cloudtrail:0000383:86e1a5f0-c5ba-4928-a267-76e8ef8fb1bf", "row_index": 383, "timestamp": "2017-05-27T05:00:00Z", "event_type": "GetPolicyVersion", "event_source": "iam.amazonaws.com", "principal": {"type": "AssumedRole", "arn": "arn:aws:sts::811596193553:assumed-role/SecurityMonkey/secmonkey", "account_id": "811596193553", "principal_id": "AROAUB2AA5FQRGAHITW4A:secmonkey", "user_name": null, "access_key_id": "ASIAI9QHHRMC9F6XQJXN", "session_issuer_arn": "arn:aws:iam::811596193553:role/SecurityMonkey", "session_issuer_user_name": "SecurityMonkey"}, "network": {"source_ip": "255.253.125.115", "user_agent": "Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56 Resource", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 1087, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "86e1a5f0-c5ba-4928-a267-76e8ef8fb1bf", "eventTime": "2017-05-27T05:00:00Z", "eventName": "GetPolicyVersion", "eventSource": "iam.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.253.125.115", "userAgent": "Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56 Resource", "awsRegion": "us-east-1", "userIdentity": {"type": "AssumedRole", "principalId": "AROAUB2AA5FQRGAHITW4A:secmonkey", "arn": "arn:aws:sts::811596193553:assumed-role/SecurityMonkey/secmonkey", "accountId": "811596193553", "accessKeyId": "ASIAI9QHHRMC9F6XQJXN", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2017-05-27T04:59:38Z"}, "sessionIssuer": {"type": "Role", "principalId": "AROAUB2AA5FQRGAHITW4A", "arn": "arn:aws:iam::811596193553:role/SecurityMonkey", "accountId": "811596193553", "userName": "SecurityMonkey"}}}, "requestParameters": {"policyArn": "arn:aws:iam::aws:policy/AmazonMachineLearningManageRealTimeEndpointOnlyAccess", "versionId": "v1"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "5c3d63b7-ce52-4561-9ac1-09aab475704", "record_id": "flaws_cloudtrail:0000384:5c3d63b7-ce52-4561-9ac1-09aab475704", "row_index": 384, "timestamp": "2017-05-27T05:00:00Z", "event_type": "GetPolicyVersion", "event_source": "iam.amazonaws.com", "principal": {"type": "AssumedRole", "arn": "arn:aws:sts::811596193553:assumed-role/SecurityMonkey/secmonkey", "account_id": "811596193553", "principal_id": "AROAUB2AA5FQRGAHITW4A:secmonkey", "user_name": null, "access_key_id": "ASIAI9QHHRMC9F6XQJXN", "session_issuer_arn": "arn:aws:iam::811596193553:role/SecurityMonkey", "session_issuer_user_name": "SecurityMonkey"}, "network": {"source_ip": "255.253.125.115", "user_agent": "Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56 Resource", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 1059, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "5c3d63b7-ce52-4561-9ac1-09aab475704", "eventTime": "2017-05-27T05:00:00Z", "eventName": "GetPolicyVersion", "eventSource": "iam.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.253.125.115", "userAgent": "Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56 Resource", "awsRegion": "us-east-1", "userIdentity": {"type": "AssumedRole", "principalId": "AROAUB2AA5FQRGAHITW4A:secmonkey", "arn": "arn:aws:sts::811596193553:assumed-role/SecurityMonkey/secmonkey", "accountId": "811596193553", "accessKeyId": "ASIAI9QHHRMC9F6XQJXN", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2017-05-27T04:59:38Z"}, "sessionIssuer": {"type": "Role", "principalId": "AROAUB2AA5FQRGAHITW4A", "arn": "arn:aws:iam::811596193553:role/SecurityMonkey", "accountId": "811596193553", "userName": "SecurityMonkey"}}}, "requestParameters": {"policyArn": "arn:aws:iam::aws:policy/AWSCodeBuildReadOnlyAccess", "versionId": "v1"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "9d7cf820-2d0c-44ea-a526-6bc237a8390f", "record_id": "flaws_cloudtrail:0000385:9d7cf820-2d0c-44ea-a526-6bc237a8390f", "row_index": 385, "timestamp": "2017-05-27T05:00:00Z", "event_type": "GetPolicyVersion", "event_source": "iam.amazonaws.com", "principal": {"type": "AssumedRole", "arn": "arn:aws:sts::811596193553:assumed-role/SecurityMonkey/secmonkey", "account_id": "811596193553", "principal_id": "AROAUB2AA5FQRGAHITW4A:secmonkey", "user_name": null, "access_key_id": "ASIAI9QHHRMC9F6XQJXN", "session_issuer_arn": "arn:aws:iam::811596193553:role/SecurityMonkey", "session_issuer_user_name": "SecurityMonkey"}, "network": {"source_ip": "255.253.125.115", "user_agent": "Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56 Resource", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 1066, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "9d7cf820-2d0c-44ea-a526-6bc237a8390f", "eventTime": "2017-05-27T05:00:00Z", "eventName": "GetPolicyVersion", "eventSource": "iam.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.253.125.115", "userAgent": "Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56 Resource", "awsRegion": "us-east-1", "userIdentity": {"type": "AssumedRole", "principalId": "AROAUB2AA5FQRGAHITW4A:secmonkey", "arn": "arn:aws:sts::811596193553:assumed-role/SecurityMonkey/secmonkey", "accountId": "811596193553", "accessKeyId": "ASIAI9QHHRMC9F6XQJXN", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2017-05-27T04:59:38Z"}, "sessionIssuer": {"type": "Role", "principalId": "AROAUB2AA5FQRGAHITW4A", "arn": "arn:aws:iam::811596193553:role/SecurityMonkey", "accountId": "811596193553", "userName": "SecurityMonkey"}}}, "requestParameters": {"policyArn": "arn:aws:iam::aws:policy/AWSStepFunctionsConsoleFullAccess", "versionId": "v2"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "b37fbd44-87be-427a-8512-926736a9f71f3", "record_id": "flaws_cloudtrail:0000386:b37fbd44-87be-427a-8512-926736a9f71f3", "row_index": 386, "timestamp": "2017-05-27T05:00:00Z", "event_type": "GetPolicyVersion", "event_source": "iam.amazonaws.com", "principal": {"type": "AssumedRole", "arn": "arn:aws:sts::811596193553:assumed-role/SecurityMonkey/secmonkey", "account_id": "811596193553", "principal_id": "AROAUB2AA5FQRGAHITW4A:secmonkey", "user_name": null, "access_key_id": "ASIAI9QHHRMC9F6XQJXN", "session_issuer_arn": "arn:aws:iam::811596193553:role/SecurityMonkey", "session_issuer_user_name": "SecurityMonkey"}, "network": {"source_ip": "255.253.125.115", "user_agent": "Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56 Resource", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 1066, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "b37fbd44-87be-427a-8512-926736a9f71f3", "eventTime": "2017-05-27T05:00:00Z", "eventName": "GetPolicyVersion", "eventSource": "iam.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.253.125.115", "userAgent": "Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56 Resource", "awsRegion": "us-east-1", "userIdentity": {"type": "AssumedRole", "principalId": "AROAUB2AA5FQRGAHITW4A:secmonkey", "arn": "arn:aws:sts::811596193553:assumed-role/SecurityMonkey/secmonkey", "accountId": "811596193553", "accessKeyId": "ASIAI9QHHRMC9F6XQJXN", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2017-05-27T04:59:38Z"}, "sessionIssuer": {"type": "Role", "principalId": "AROAUB2AA5FQRGAHITW4A", "arn": "arn:aws:iam::811596193553:role/SecurityMonkey", "accountId": "811596193553", "userName": "SecurityMonkey"}}}, "requestParameters": {"policyArn": "arn:aws:iam::aws:policy/ServiceCatalogEndUserFullAccess", "versionId": "v3"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "fd2c034c-d789-4fd3-9495-360e915f5299", "record_id": "flaws_cloudtrail:0000387:fd2c034c-d789-4fd3-9495-360e915f5299", "row_index": 387, "timestamp": "2017-05-27T05:00:01Z", "event_type": "ListCertificates", "event_source": "acm.amazonaws.com", "principal": {"type": "AssumedRole", "arn": "arn:aws:sts::811596193553:assumed-role/SecurityMonkey/secmonkey", "account_id": "811596193553", "principal_id": "AROAUB2AA5FQRGAHITW4A:secmonkey", "user_name": null, "access_key_id": "ASIADZF0B3AXEWABA6CA", "session_issuer_arn": "arn:aws:iam::811596193553:role/SecurityMonkey", "session_issuer_user_name": "SecurityMonkey"}, "network": {"source_ip": "255.253.125.115", "user_agent": "Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56", "aws_region": "ap-south-1"}, "resource_arns": [], "raw_record_size_bytes": 972, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "fd2c034c-d789-4fd3-9495-360e915f5299", "eventTime": "2017-05-27T05:00:01Z", "eventName": "ListCertificates", "eventSource": "acm.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.253.125.115", "userAgent": "Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56", "awsRegion": "ap-south-1", "userIdentity": {"type": "AssumedRole", "principalId": "AROAUB2AA5FQRGAHITW4A:secmonkey", "arn": "arn:aws:sts::811596193553:assumed-role/SecurityMonkey/secmonkey", "accountId": "811596193553", "accessKeyId": "ASIADZF0B3AXEWABA6CA", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2017-05-27T05:00:00Z"}, "sessionIssuer": {"type": "Role", "principalId": "AROAUB2AA5FQRGAHITW4A", "arn": "arn:aws:iam::811596193553:role/SecurityMonkey", "accountId": "811596193553", "userName": "SecurityMonkey"}}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "9770abf6-1322-4c92-a4db-2bb5b492dbbf", "record_id": "flaws_cloudtrail:0000388:9770abf6-1322-4c92-a4db-2bb5b492dbbf", "row_index": 388, "timestamp": "2017-05-27T05:00:01Z", "event_type": "AssumeRole", "event_source": "sts.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/SecurityMokey", "account_id": "811596193553", "principal_id": "AIDAQ9SRE1SZZZ4Q4UOJH", "user_name": "SecurityMokey", "access_key_id": "AKIAXJ0III4JBKZDXGXN", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "255.253.125.115", "user_agent": "Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56", "aws_region": "us-east-1"}, "resource_arns": ["arn:aws:iam::811596193553:role/SecurityMonkey"], "raw_record_size_bytes": 1450, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "resources", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "9770abf6-1322-4c92-a4db-2bb5b492dbbf", "eventTime": "2017-05-27T05:00:01Z", "eventName": "AssumeRole", "eventSource": "sts.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.253.125.115", "userAgent": "Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDAQ9SRE1SZZZ4Q4UOJH", "arn": "arn:aws:iam::811596193553:user/SecurityMokey", "accountId": "811596193553", "accessKeyId": "AKIAXJ0III4JBKZDXGXN", "userName": "SecurityMokey"}, "requestParameters": {"roleArn": "arn:aws:iam::811596193553:role/SecurityMonkey", "roleSessionName": "secmonkey"}, "responseElements": {"credentials": {"accessKeyId": "ASIAIY7Q9IN277NZQV02", "expiration": "May 27, 2017 6:00:01 AM", "sessionToken": "FQoDYXdzECYaDGp3rkyQV4JxLu/d8iLMAcdmSoDkpquyDCjkOxRNGNRfjJVXM/kXydmC4fPwr93Vo9ksumerw0kDN6UbE6OqnBbNDns6ynxVMMiRdkmz+Dai3P33slie6UMTOwR7V+CP9P8zHdB6+/k/sWLw+KiEQxUx/paE2Hx70vi0SBkgtkr8pkVjw1/Aa86k3wBD3eWNSbHvUiOWU6nQ3+rxFiWIT8SQO1WCDWZHln+fJrAZEZW1ViBF02iyHEc7i7Q0caxg4pYSeLcSC7h0aHhvEp2nUqEm8za1VjwYXqBrhSjRj6TJBQ=="}, "assumedRoleUser": {"assumedRoleId": "AROAUB2AA5FQRGAHITW4A:secmonkey", "arn": "arn:aws:sts::811596193553:assumed-role/SecurityMonkey/secmonkey"}}, "resources": [{"ARN": "arn:aws:iam::811596193553:role/SecurityMonkey", "accountId": "811596193553", "type": "AWS::IAM::Role"}]}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "eeb2e747-8c6f-4e42-9115-aba21fd6c211", "record_id": "flaws_cloudtrail:0000389:eeb2e747-8c6f-4e42-9115-aba21fd6c211", "row_index": 389, "timestamp": "2017-05-27T05:00:01Z", "event_type": "GetPolicyVersion", "event_source": "iam.amazonaws.com", "principal": {"type": "AssumedRole", "arn": "arn:aws:sts::811596193553:assumed-role/SecurityMonkey/secmonkey", "account_id": "811596193553", "principal_id": "AROAUB2AA5FQRGAHITW4A:secmonkey", "user_name": null, "access_key_id": "ASIAI9QHHRMC9F6XQJXN", "session_issuer_arn": "arn:aws:iam::811596193553:role/SecurityMonkey", "session_issuer_user_name": "SecurityMonkey"}, "network": {"source_ip": "255.253.125.115", "user_agent": "Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56 Resource", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 1056, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "eeb2e747-8c6f-4e42-9115-aba21fd6c211", "eventTime": "2017-05-27T05:00:01Z", "eventName": "GetPolicyVersion", "eventSource": "iam.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.253.125.115", "userAgent": "Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56 Resource", "awsRegion": "us-east-1", "userIdentity": {"type": "AssumedRole", "principalId": "AROAUB2AA5FQRGAHITW4A:secmonkey", "arn": "arn:aws:sts::811596193553:assumed-role/SecurityMonkey/secmonkey", "accountId": "811596193553", "accessKeyId": "ASIAI9QHHRMC9F6XQJXN", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2017-05-27T04:59:38Z"}, "sessionIssuer": {"type": "Role", "principalId": "AROAUB2AA5FQRGAHITW4A", "arn": "arn:aws:iam::811596193553:role/SecurityMonkey", "accountId": "811596193553", "userName": "SecurityMonkey"}}}, "requestParameters": {"policyArn": "arn:aws:iam::aws:policy/AmazonCognitoPowerUser", "versionId": "v2"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "711c0678-6b00-48d4-9df6-d6868fa1bb74", "record_id": "flaws_cloudtrail:0000390:711c0678-6b00-48d4-9df6-d6868fa1bb74", "row_index": 390, "timestamp": "2017-05-27T05:00:01Z", "event_type": "GetPolicyVersion", "event_source": "iam.amazonaws.com", "principal": {"type": "AssumedRole", "arn": "arn:aws:sts::811596193553:assumed-role/SecurityMonkey/secmonkey", "account_id": "811596193553", "principal_id": "AROAUB2AA5FQRGAHITW4A:secmonkey", "user_name": null, "access_key_id": "ASIAI9QHHRMC9F6XQJXN", "session_issuer_arn": "arn:aws:iam::811596193553:role/SecurityMonkey", "session_issuer_user_name": "SecurityMonkey"}, "network": {"source_ip": "255.253.125.115", "user_agent": "Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56 Resource", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 1067, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "711c0678-6b00-48d4-9df6-d6868fa1bb74", "eventTime": "2017-05-27T05:00:01Z", "eventName": "GetPolicyVersion", "eventSource": "iam.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.253.125.115", "userAgent": "Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56 Resource", "awsRegion": "us-east-1", "userIdentity": {"type": "AssumedRole", "principalId": "AROAUB2AA5FQRGAHITW4A:secmonkey", "arn": "arn:aws:sts::811596193553:assumed-role/SecurityMonkey/secmonkey", "accountId": "811596193553", "accessKeyId": "ASIAI9QHHRMC9F6XQJXN", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2017-05-27T04:59:38Z"}, "sessionIssuer": {"type": "Role", "principalId": "AROAUB2AA5FQRGAHITW4A", "arn": "arn:aws:iam::811596193553:role/SecurityMonkey", "accountId": "811596193553", "userName": "SecurityMonkey"}}}, "requestParameters": {"policyArn": "arn:aws:iam::aws:policy/AmazonElasticFileSystemFullAccess", "versionId": "v1"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "0f033957a-4e6d-414f-a1df-c74f6f18805a", "record_id": "flaws_cloudtrail:0000391:0f033957a-4e6d-414f-a1df-c74f6f18805a", "row_index": 391, "timestamp": "2017-05-27T05:00:01Z", "event_type": "GetPolicyVersion", "event_source": "iam.amazonaws.com", "principal": {"type": "AssumedRole", "arn": "arn:aws:sts::811596193553:assumed-role/SecurityMonkey/secmonkey", "account_id": "811596193553", "principal_id": "AROAUB2AA5FQRGAHITW4A:secmonkey", "user_name": null, "access_key_id": "ASIAI9QHHRMC9F6XQJXN", "session_issuer_arn": "arn:aws:iam::811596193553:role/SecurityMonkey", "session_issuer_user_name": "SecurityMonkey"}, "network": {"source_ip": "255.253.125.115", "user_agent": "Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56 Resource", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 1074, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "0f033957a-4e6d-414f-a1df-c74f6f18805a", "eventTime": "2017-05-27T05:00:01Z", "eventName": "GetPolicyVersion", "eventSource": "iam.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.253.125.115", "userAgent": "Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56 Resource", "awsRegion": "us-east-1", "userIdentity": {"type": "AssumedRole", "principalId": "AROAUB2AA5FQRGAHITW4A:secmonkey", "arn": "arn:aws:sts::811596193553:assumed-role/SecurityMonkey/secmonkey", "accountId": "811596193553", "accessKeyId": "ASIAI9QHHRMC9F6XQJXN", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2017-05-27T04:59:38Z"}, "sessionIssuer": {"type": "Role", "principalId": "AROAUB2AA5FQRGAHITW4A", "arn": "arn:aws:iam::811596193553:role/SecurityMonkey", "accountId": "811596193553", "userName": "SecurityMonkey"}}}, "requestParameters": {"policyArn": "arn:aws:iam::aws:policy/service-role/ServerMigrationServiceRole", "versionId": "v1"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "f71ea729-7e96-4a56-af9f-0f286806624e", "record_id": "flaws_cloudtrail:0000392:f71ea729-7e96-4a56-af9f-0f286806624e", "row_index": 392, "timestamp": "2017-05-27T05:00:01Z", "event_type": "GetPolicyVersion", "event_source": "iam.amazonaws.com", "principal": {"type": "AssumedRole", "arn": "arn:aws:sts::811596193553:assumed-role/SecurityMonkey/secmonkey", "account_id": "811596193553", "principal_id": "AROAUB2AA5FQRGAHITW4A:secmonkey", "user_name": null, "access_key_id": "ASIAI9QHHRMC9F6XQJXN", "session_issuer_arn": "arn:aws:iam::811596193553:role/SecurityMonkey", "session_issuer_user_name": "SecurityMonkey"}, "network": {"source_ip": "255.253.125.115", "user_agent": "Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56 Resource", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 1049, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "f71ea729-7e96-4a56-af9f-0f286806624e", "eventTime": "2017-05-27T05:00:01Z", "eventName": "GetPolicyVersion", "eventSource": "iam.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.253.125.115", "userAgent": "Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56 Resource", "awsRegion": "us-east-1", "userIdentity": {"type": "AssumedRole", "principalId": "AROAUB2AA5FQRGAHITW4A:secmonkey", "arn": "arn:aws:sts::811596193553:assumed-role/SecurityMonkey/secmonkey", "accountId": "811596193553", "accessKeyId": "ASIAI9QHHRMC9F6XQJXN", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2017-05-27T04:59:38Z"}, "sessionIssuer": {"type": "Role", "principalId": "AROAUB2AA5FQRGAHITW4A", "arn": "arn:aws:iam::811596193553:role/SecurityMonkey", "accountId": "811596193553", "userName": "SecurityMonkey"}}}, "requestParameters": {"policyArn": "arn:aws:iam::aws:policy/AmazonESFullAccess", "versionId": "v1"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "be62d7e3-6eb3-4c05-83bd-0c3ed2f91c30", "record_id": "flaws_cloudtrail:0000393:be62d7e3-6eb3-4c05-83bd-0c3ed2f91c30", "row_index": 393, "timestamp": "2017-05-27T05:00:01Z", "event_type": "GetPolicyVersion", "event_source": "iam.amazonaws.com", "principal": {"type": "AssumedRole", "arn": "arn:aws:sts::811596193553:assumed-role/SecurityMonkey/secmonkey", "account_id": "811596193553", "principal_id": "AROAUB2AA5FQRGAHITW4A:secmonkey", "user_name": null, "access_key_id": "ASIAI9QHHRMC9F6XQJXN", "session_issuer_arn": "arn:aws:iam::811596193553:role/SecurityMonkey", "session_issuer_user_name": "SecurityMonkey"}, "network": {"source_ip": "255.253.125.115", "user_agent": "Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56 Resource", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 1049, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "be62d7e3-6eb3-4c05-83bd-0c3ed2f91c30", "eventTime": "2017-05-27T05:00:01Z", "eventName": "GetPolicyVersion", "eventSource": "iam.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.253.125.115", "userAgent": "Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56 Resource", "awsRegion": "us-east-1", "userIdentity": {"type": "AssumedRole", "principalId": "AROAUB2AA5FQRGAHITW4A:secmonkey", "arn": "arn:aws:sts::811596193553:assumed-role/SecurityMonkey/secmonkey", "accountId": "811596193553", "accessKeyId": "ASIAI9QHHRMC9F6XQJXN", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2017-05-27T04:59:38Z"}, "sessionIssuer": {"type": "Role", "principalId": "AROAUB2AA5FQRGAHITW4A", "arn": "arn:aws:iam::811596193553:role/SecurityMonkey", "accountId": "811596193553", "userName": "SecurityMonkey"}}}, "requestParameters": {"policyArn": "arn:aws:iam::aws:policy/AWSIoTDataAccess", "versionId": "v1"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "a16e5b61-959c-42e2-8adb-94be6ab001d2", "record_id": "flaws_cloudtrail:0000394:a16e5b61-959c-42e2-8adb-94be6ab001d2", "row_index": 394, "timestamp": "2017-05-27T05:00:01Z", "event_type": "GetPolicyVersion", "event_source": "iam.amazonaws.com", "principal": {"type": "AssumedRole", "arn": "arn:aws:sts::811596193553:assumed-role/SecurityMonkey/secmonkey", "account_id": "811596193553", "principal_id": "AROAUB2AA5FQRGAHITW4A:secmonkey", "user_name": null, "access_key_id": "ASIAI9QHHRMC9F6XQJXN", "session_issuer_arn": "arn:aws:iam::811596193553:role/SecurityMonkey", "session_issuer_user_name": "SecurityMonkey"}, "network": {"source_ip": "255.253.125.115", "user_agent": "Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56 Resource", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 1059, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "a16e5b61-959c-42e2-8adb-94be6ab001d2", "eventTime": "2017-05-27T05:00:01Z", "eventName": "GetPolicyVersion", "eventSource": "iam.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.253.125.115", "userAgent": "Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56 Resource", "awsRegion": "us-east-1", "userIdentity": {"type": "AssumedRole", "principalId": "AROAUB2AA5FQRGAHITW4A:secmonkey", "arn": "arn:aws:sts::811596193553:assumed-role/SecurityMonkey/secmonkey", "accountId": "811596193553", "accessKeyId": "ASIAI9QHHRMC9F6XQJXN", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2017-05-27T04:59:38Z"}, "sessionIssuer": {"type": "Role", "principalId": "AROAUB2AA5FQRGAHITW4A", "arn": "arn:aws:iam::811596193553:role/SecurityMonkey", "accountId": "811596193553", "userName": "SecurityMonkey"}}}, "requestParameters": {"policyArn": "arn:aws:iam::aws:policy/AmazonAppStreamFullAccess", "versionId": "v1"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "2db2ce9b-3f44-4961-af02-c6a3d842197a", "record_id": "flaws_cloudtrail:0000395:2db2ce9b-3f44-4961-af02-c6a3d842197a", "row_index": 395, "timestamp": "2017-05-27T05:00:01Z", "event_type": "GetPolicyVersion", "event_source": "iam.amazonaws.com", "principal": {"type": "AssumedRole", "arn": "arn:aws:sts::811596193553:assumed-role/SecurityMonkey/secmonkey", "account_id": "811596193553", "principal_id": "AROAUB2AA5FQRGAHITW4A:secmonkey", "user_name": null, "access_key_id": "ASIAI9QHHRMC9F6XQJXN", "session_issuer_arn": "arn:aws:iam::811596193553:role/SecurityMonkey", "session_issuer_user_name": "SecurityMonkey"}, "network": {"source_ip": "255.253.125.115", "user_agent": "Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56 Resource", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 1082, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "2db2ce9b-3f44-4961-af02-c6a3d842197a", "eventTime": "2017-05-27T05:00:01Z", "eventName": "GetPolicyVersion", "eventSource": "iam.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.253.125.115", "userAgent": "Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56 Resource", "awsRegion": "us-east-1", "userIdentity": {"type": "AssumedRole", "principalId": "AROAUB2AA5FQRGAHITW4A:secmonkey", "arn": "arn:aws:sts::811596193553:assumed-role/SecurityMonkey/secmonkey", "accountId": "811596193553", "accessKeyId": "ASIAI9QHHRMC9F6XQJXN", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2017-05-27T04:59:38Z"}, "sessionIssuer": {"type": "Role", "principalId": "AROAUB2AA5FQRGAHITW4A", "arn": "arn:aws:iam::811596193553:role/SecurityMonkey", "accountId": "811596193553", "userName": "SecurityMonkey"}}}, "requestParameters": {"policyArn": "arn:aws:iam::aws:policy/service-role/AmazonEC2ContainerServiceforEC2Role", "versionId": "v5"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "b32878f2-bd6b-4127-ab97-a2b1c08f6dbb", "record_id": "flaws_cloudtrail:0000396:b32878f2-bd6b-4127-ab97-a2b1c08f6dbb", "row_index": 396, "timestamp": "2017-05-27T05:00:01Z", "event_type": "GetPolicyVersion", "event_source": "iam.amazonaws.com", "principal": {"type": "AssumedRole", "arn": "arn:aws:sts::811596193553:assumed-role/SecurityMonkey/secmonkey", "account_id": "811596193553", "principal_id": "AROAUB2AA5FQRGAHITW4A:secmonkey", "user_name": null, "access_key_id": "ASIAI9QHHRMC9F6XQJXN", "session_issuer_arn": "arn:aws:iam::811596193553:role/SecurityMonkey", "session_issuer_user_name": "SecurityMonkey"}, "network": {"source_ip": "255.253.125.115", "user_agent": "Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56 Resource", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 1062, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "b32878f2-bd6b-4127-ab97-a2b1c08f6dbb", "eventTime": "2017-05-27T05:00:01Z", "eventName": "GetPolicyVersion", "eventSource": "iam.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.253.125.115", "userAgent": "Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56 Resource", "awsRegion": "us-east-1", "userIdentity": {"type": "AssumedRole", "principalId": "AROAUB2AA5FQRGAHITW4A:secmonkey", "arn": "arn:aws:sts::811596193553:assumed-role/SecurityMonkey/secmonkey", "accountId": "811596193553", "accessKeyId": "ASIAI9QHHRMC9F6XQJXN", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2017-05-27T04:59:38Z"}, "sessionIssuer": {"type": "Role", "principalId": "AROAUB2AA5FQRGAHITW4A", "arn": "arn:aws:iam::811596193553:role/SecurityMonkey", "accountId": "811596193553", "userName": "SecurityMonkey"}}}, "requestParameters": {"policyArn": "arn:aws:iam::aws:policy/AWSMarketplaceGetEntitlements", "versionId": "v1"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "0010d40b-e81e-491d-8b62-ae32d3fa0568", "record_id": "flaws_cloudtrail:0000397:0010d40b-e81e-491d-8b62-ae32d3fa0568", "row_index": 397, "timestamp": "2017-05-27T05:00:01Z", "event_type": "GetPolicyVersion", "event_source": "iam.amazonaws.com", "principal": {"type": "AssumedRole", "arn": "arn:aws:sts::811596193553:assumed-role/SecurityMonkey/secmonkey", "account_id": "811596193553", "principal_id": "AROAUB2AA5FQRGAHITW4A:secmonkey", "user_name": null, "access_key_id": "ASIAI9QHHRMC9F6XQJXN", "session_issuer_arn": "arn:aws:iam::811596193553:role/SecurityMonkey", "session_issuer_user_name": "SecurityMonkey"}, "network": {"source_ip": "255.253.125.115", "user_agent": "Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56 Resource", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 1061, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "0010d40b-e81e-491d-8b62-ae32d3fa0568", "eventTime": "2017-05-27T05:00:01Z", "eventName": "GetPolicyVersion", "eventSource": "iam.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.253.125.115", "userAgent": "Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56 Resource", "awsRegion": "us-east-1", "userIdentity": {"type": "AssumedRole", "principalId": "AROAUB2AA5FQRGAHITW4A:secmonkey", "arn": "arn:aws:sts::811596193553:assumed-role/SecurityMonkey/secmonkey", "accountId": "811596193553", "accessKeyId": "ASIAI9QHHRMC9F6XQJXN", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2017-05-27T04:59:38Z"}, "sessionIssuer": {"type": "Role", "principalId": "AROAUB2AA5FQRGAHITW4A", "arn": "arn:aws:iam::811596193553:role/SecurityMonkey", "accountId": "811596193553", "userName": "SecurityMonkey"}}}, "requestParameters": {"policyArn": "arn:aws:iam::aws:policy/AWSAccountUsageReportAccess", "versionId": "v1"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "82ff8b4e-2133-46e7-8dbe-13819be6d0dd", "record_id": "flaws_cloudtrail:0000398:82ff8b4e-2133-46e7-8dbe-13819be6d0dd", "row_index": 398, "timestamp": "2017-05-27T05:00:01Z", "event_type": "GetPolicyVersion", "event_source": "iam.amazonaws.com", "principal": {"type": "AssumedRole", "arn": "arn:aws:sts::811596193553:assumed-role/SecurityMonkey/secmonkey", "account_id": "811596193553", "principal_id": "AROAUB2AA5FQRGAHITW4A:secmonkey", "user_name": null, "access_key_id": "ASIAI9QHHRMC9F6XQJXN", "session_issuer_arn": "arn:aws:iam::811596193553:role/SecurityMonkey", "session_issuer_user_name": "SecurityMonkey"}, "network": {"source_ip": "255.253.125.115", "user_agent": "Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56 Resource", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 1057, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "82ff8b4e-2133-46e7-8dbe-13819be6d0dd", "eventTime": "2017-05-27T05:00:01Z", "eventName": "GetPolicyVersion", "eventSource": "iam.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.253.125.115", "userAgent": "Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56 Resource", "awsRegion": "us-east-1", "userIdentity": {"type": "AssumedRole", "principalId": "AROAUB2AA5FQRGAHITW4A:secmonkey", "arn": "arn:aws:sts::811596193553:assumed-role/SecurityMonkey/secmonkey", "accountId": "811596193553", "accessKeyId": "ASIAI9QHHRMC9F6XQJXN", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2017-05-27T04:59:38Z"}, "sessionIssuer": {"type": "Role", "principalId": "AROAUB2AA5FQRGAHITW4A", "arn": "arn:aws:iam::811596193553:role/SecurityMonkey", "accountId": "811596193553", "userName": "SecurityMonkey"}}}, "requestParameters": {"policyArn": "arn:aws:iam::aws:policy/AWSLambdaReadOnlyAccess", "versionId": "v6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "87f3ae29-c8f7-48c9-8ed0-8afc8fe890b8", "record_id": "flaws_cloudtrail:0000399:87f3ae29-c8f7-48c9-8ed0-8afc8fe890b8", "row_index": 399, "timestamp": "2017-05-27T05:00:01Z", "event_type": "GetPolicyVersion", "event_source": "iam.amazonaws.com", "principal": {"type": "AssumedRole", "arn": "arn:aws:sts::811596193553:assumed-role/SecurityMonkey/secmonkey", "account_id": "811596193553", "principal_id": "AROAUB2AA5FQRGAHITW4A:secmonkey", "user_name": null, "access_key_id": "ASIAI9QHHRMC9F6XQJXN", "session_issuer_arn": "arn:aws:iam::811596193553:role/SecurityMonkey", "session_issuer_user_name": "SecurityMonkey"}, "network": {"source_ip": "255.253.125.115", "user_agent": "Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56 Resource", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 1056, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "87f3ae29-c8f7-48c9-8ed0-8afc8fe890b8", "eventTime": "2017-05-27T05:00:01Z", "eventName": "GetPolicyVersion", "eventSource": "iam.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.253.125.115", "userAgent": "Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56 Resource", "awsRegion": "us-east-1", "userIdentity": {"type": "AssumedRole", "principalId": "AROAUB2AA5FQRGAHITW4A:secmonkey", "arn": "arn:aws:sts::811596193553:assumed-role/SecurityMonkey/secmonkey", "accountId": "811596193553", "accessKeyId": "ASIAI9QHHRMC9F6XQJXN", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2017-05-27T04:59:38Z"}, "sessionIssuer": {"type": "Role", "principalId": "AROAUB2AA5FQRGAHITW4A", "arn": "arn:aws:iam::811596193553:role/SecurityMonkey", "accountId": "811596193553", "userName": "SecurityMonkey"}}}, "requestParameters": {"policyArn": "arn:aws:iam::aws:policy/AmazonZocaloFullAccess", "versionId": "v1"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "faa89199-ac5c-4576-ac5e-036327c61a05", "record_id": "flaws_cloudtrail:0000400:faa89199-ac5c-4576-ac5e-036327c61a05", "row_index": 400, "timestamp": "2017-05-27T05:00:01Z", "event_type": "GetPolicyVersion", "event_source": "iam.amazonaws.com", "principal": {"type": "AssumedRole", "arn": "arn:aws:sts::811596193553:assumed-role/SecurityMonkey/secmonkey", "account_id": "811596193553", "principal_id": "AROAUB2AA5FQRGAHITW4A:secmonkey", "user_name": null, "access_key_id": "ASIAI9QHHRMC9F6XQJXN", "session_issuer_arn": "arn:aws:iam::811596193553:role/SecurityMonkey", "session_issuer_user_name": "SecurityMonkey"}, "network": {"source_ip": "255.253.125.115", "user_agent": "Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56 Resource", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 1058, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "faa89199-ac5c-4576-ac5e-036327c61a05", "eventTime": "2017-05-27T05:00:01Z", "eventName": "GetPolicyVersion", "eventSource": "iam.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.253.125.115", "userAgent": "Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56 Resource", "awsRegion": "us-east-1", "userIdentity": {"type": "AssumedRole", "principalId": "AROAUB2AA5FQRGAHITW4A:secmonkey", "arn": "arn:aws:sts::811596193553:assumed-role/SecurityMonkey/secmonkey", "accountId": "811596193553", "accessKeyId": "ASIAI9QHHRMC9F6XQJXN", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2017-05-27T04:59:38Z"}, "sessionIssuer": {"type": "Role", "principalId": "AROAUB2AA5FQRGAHITW4A", "arn": "arn:aws:iam::811596193553:role/SecurityMonkey", "accountId": "811596193553", "userName": "SecurityMonkey"}}}, "requestParameters": {"policyArn": "arn:aws:iam::aws:policy/ServerMigrationConnector", "versionId": "v1"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "b776ede5-cf65-4688-9dcd-510979905e4a", "record_id": "flaws_cloudtrail:0000401:b776ede5-cf65-4688-9dcd-510979905e4a", "row_index": 401, "timestamp": "2017-05-27T05:00:02Z", "event_type": "ListCertificates", "event_source": "acm.amazonaws.com", "principal": {"type": "AssumedRole", "arn": "arn:aws:sts::811596193553:assumed-role/SecurityMonkey/secmonkey", "account_id": "811596193553", "principal_id": "AROAUB2AA5FQRGAHITW4A:secmonkey", "user_name": null, "access_key_id": "ASIAIY7Q9IN277NZQV02", "session_issuer_arn": "arn:aws:iam::811596193553:role/SecurityMonkey", "session_issuer_user_name": "SecurityMonkey"}, "network": {"source_ip": "255.253.125.115", "user_agent": "Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56", "aws_region": "eu-west-2"}, "resource_arns": [], "raw_record_size_bytes": 972, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "b776ede5-cf65-4688-9dcd-510979905e4a", "eventTime": "2017-05-27T05:00:02Z", "eventName": "ListCertificates", "eventSource": "acm.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.253.125.115", "userAgent": "Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56", "awsRegion": "eu-west-2", "userIdentity": {"type": "AssumedRole", "principalId": "AROAUB2AA5FQRGAHITW4A:secmonkey", "arn": "arn:aws:sts::811596193553:assumed-role/SecurityMonkey/secmonkey", "accountId": "811596193553", "accessKeyId": "ASIAIY7Q9IN277NZQV02", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2017-05-27T05:00:01Z"}, "sessionIssuer": {"type": "Role", "principalId": "AROAUB2AA5FQRGAHITW4A", "arn": "arn:aws:iam::811596193553:role/SecurityMonkey", "accountId": "811596193553", "userName": "SecurityMonkey"}}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "1b17f039-8899-4e9c-9c5a-35cd03bcabae", "record_id": "flaws_cloudtrail:0000402:1b17f039-8899-4e9c-9c5a-35cd03bcabae", "row_index": 402, "timestamp": "2017-05-27T05:00:02Z", "event_type": "GetPolicyVersion", "event_source": "iam.amazonaws.com", "principal": {"type": "AssumedRole", "arn": "arn:aws:sts::811596193553:assumed-role/SecurityMonkey/secmonkey", "account_id": "811596193553", "principal_id": "AROAUB2AA5FQRGAHITW4A:secmonkey", "user_name": null, "access_key_id": "ASIAI9QHHRMC9F6XQJXN", "session_issuer_arn": "arn:aws:iam::811596193553:role/SecurityMonkey", "session_issuer_user_name": "SecurityMonkey"}, "network": {"source_ip": "255.253.125.115", "user_agent": "Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56 Resource", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 1050, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "1b17f039-8899-4e9c-9c5a-35cd03bcabae", "eventTime": "2017-05-27T05:00:02Z", "eventName": "GetPolicyVersion", "eventSource": "iam.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.253.125.115", "userAgent": "Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56 Resource", "awsRegion": "us-east-1", "userIdentity": {"type": "AssumedRole", "principalId": "AROAUB2AA5FQRGAHITW4A:secmonkey", "arn": "arn:aws:sts::811596193553:assumed-role/SecurityMonkey/secmonkey", "accountId": "811596193553", "accessKeyId": "ASIAI9QHHRMC9F6XQJXN", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2017-05-27T04:59:38Z"}, "sessionIssuer": {"type": "Role", "principalId": "AROAUB2AA5FQRGAHITW4A", "arn": "arn:aws:iam::811596193553:role/SecurityMonkey", "accountId": "811596193553", "userName": "SecurityMonkey"}}}, "requestParameters": {"policyArn": "arn:aws:iam::aws:policy/AWSWAFFullAccess", "versionId": "v2"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "3463ff34-9444-436b-a7c5-dd520b0d720f", "record_id": "flaws_cloudtrail:0000403:3463ff34-9444-436b-a7c5-dd520b0d720f", "row_index": 403, "timestamp": "2017-05-27T05:00:02Z", "event_type": "GetPolicyVersion", "event_source": "iam.amazonaws.com", "principal": {"type": "AssumedRole", "arn": "arn:aws:sts::811596193553:assumed-role/SecurityMonkey/secmonkey", "account_id": "811596193553", "principal_id": "AROAUB2AA5FQRGAHITW4A:secmonkey", "user_name": null, "access_key_id": "ASIAI9QHHRMC9F6XQJXN", "session_issuer_arn": "arn:aws:iam::811596193553:role/SecurityMonkey", "session_issuer_user_name": "SecurityMonkey"}, "network": {"source_ip": "255.253.125.115", "user_agent": "Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56 Resource", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 1058, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "3463ff34-9444-436b-a7c5-dd520b0d720f", "eventTime": "2017-05-27T05:00:02Z", "eventName": "GetPolicyVersion", "eventSource": "iam.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.253.125.115", "userAgent": "Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56 Resource", "awsRegion": "us-east-1", "userIdentity": {"type": "AssumedRole", "principalId": "AROAUB2AA5FQRGAHITW4A:secmonkey", "arn": "arn:aws:sts::811596193553:assumed-role/SecurityMonkey/secmonkey", "accountId": "811596193553", "accessKeyId": "ASIAI9QHHRMC9F6XQJXN", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2017-05-27T04:59:38Z"}, "sessionIssuer": {"type": "Role", "principalId": "AROAUB2AA5FQRGAHITW4A", "arn": "arn:aws:iam::811596193553:role/SecurityMonkey", "accountId": "811596193553", "userName": "SecurityMonkey"}}}, "requestParameters": {"policyArn": "arn:aws:iam::aws:policy/CloudWatchReadOnlyAccess", "versionId": "v1"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "9a9c6f66-522c-4d15-9ac2-25eab5e9a907", "record_id": "flaws_cloudtrail:0000404:9a9c6f66-522c-4d15-9ac2-25eab5e9a907", "row_index": 404, "timestamp": "2017-05-27T05:00:02Z", "event_type": "GetPolicyVersion", "event_source": "iam.amazonaws.com", "principal": {"type": "AssumedRole", "arn": "arn:aws:sts::811596193553:assumed-role/SecurityMonkey/secmonkey", "account_id": "811596193553", "principal_id": "AROAUB2AA5FQRGAHITW4A:secmonkey", "user_name": null, "access_key_id": "ASIAI9QHHRMC9F6XQJXN", "session_issuer_arn": "arn:aws:iam::811596193553:role/SecurityMonkey", "session_issuer_user_name": "SecurityMonkey"}, "network": {"source_ip": "255.253.125.115", "user_agent": "Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56 Resource", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 1065, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "9a9c6f66-522c-4d15-9ac2-25eab5e9a907", "eventTime": "2017-05-27T05:00:02Z", "eventName": "GetPolicyVersion", "eventSource": "iam.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.253.125.115", "userAgent": "Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56 Resource", "awsRegion": "us-east-1", "userIdentity": {"type": "AssumedRole", "principalId": "AROAUB2AA5FQRGAHITW4A:secmonkey", "arn": "arn:aws:sts::811596193553:assumed-role/SecurityMonkey/secmonkey", "accountId": "811596193553", "accessKeyId": "ASIAI9QHHRMC9F6XQJXN", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2017-05-27T04:59:38Z"}, "sessionIssuer": {"type": "Role", "principalId": "AROAUB2AA5FQRGAHITW4A", "arn": "arn:aws:iam::811596193553:role/SecurityMonkey", "accountId": "811596193553", "userName": "SecurityMonkey"}}}, "requestParameters": {"policyArn": "arn:aws:iam::aws:policy/AmazonKinesisFirehoseFullAccess", "versionId": "v1"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "a128577fa-3ce0-4dc1-9159-532539f2ee", "record_id": "flaws_cloudtrail:0000405:a128577fa-3ce0-4dc1-9159-532539f2ee", "row_index": 405, "timestamp": "2017-05-27T05:00:02Z", "event_type": "GetPolicyVersion", "event_source": "iam.amazonaws.com", "principal": {"type": "AssumedRole", "arn": "arn:aws:sts::811596193553:assumed-role/SecurityMonkey/secmonkey", "account_id": "811596193553", "principal_id": "AROAUB2AA5FQRGAHITW4A:secmonkey", "user_name": null, "access_key_id": "ASIAI9QHHRMC9F6XQJXN", "session_issuer_arn": "arn:aws:iam::811596193553:role/SecurityMonkey", "session_issuer_user_name": "SecurityMonkey"}, "network": {"source_ip": "255.253.125.115", "user_agent": "Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56 Resource", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 1073, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "a128577fa-3ce0-4dc1-9159-532539f2ee", "eventTime": "2017-05-27T05:00:02Z", "eventName": "GetPolicyVersion", "eventSource": "iam.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.253.125.115", "userAgent": "Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56 Resource", "awsRegion": "us-east-1", "userIdentity": {"type": "AssumedRole", "principalId": "AROAUB2AA5FQRGAHITW4A:secmonkey", "arn": "arn:aws:sts::811596193553:assumed-role/SecurityMonkey/secmonkey", "accountId": "811596193553", "accessKeyId": "ASIAI9QHHRMC9F6XQJXN", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2017-05-27T04:59:38Z"}, "sessionIssuer": {"type": "Role", "principalId": "AROAUB2AA5FQRGAHITW4A", "arn": "arn:aws:iam::811596193553:role/SecurityMonkey", "accountId": "811596193553", "userName": "SecurityMonkey"}}}, "requestParameters": {"policyArn": "arn:aws:iam::aws:policy/service-role/AWSLambdaBasicExecutionRole", "versionId": "v1"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "a2b60ecd-e31a-4da3-85b9-8a6332c4b537", "record_id": "flaws_cloudtrail:0000406:a2b60ecd-e31a-4da3-85b9-8a6332c4b537", "row_index": 406, "timestamp": "2017-05-27T05:00:02Z", "event_type": "GetPolicyVersion", "event_source": "iam.amazonaws.com", "principal": {"type": "AssumedRole", "arn": "arn:aws:sts::811596193553:assumed-role/SecurityMonkey/secmonkey", "account_id": "811596193553", "principal_id": "AROAUB2AA5FQRGAHITW4A:secmonkey", "user_name": null, "access_key_id": "ASIAI9QHHRMC9F6XQJXN", "session_issuer_arn": "arn:aws:iam::811596193553:role/SecurityMonkey", "session_issuer_user_name": "SecurityMonkey"}, "network": {"source_ip": "255.253.125.115", "user_agent": "Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56 Resource", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 1076, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "a2b60ecd-e31a-4da3-85b9-8a6332c4b537", "eventTime": "2017-05-27T05:00:02Z", "eventName": "GetPolicyVersion", "eventSource": "iam.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.253.125.115", "userAgent": "Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56 Resource", "awsRegion": "us-east-1", "userIdentity": {"type": "AssumedRole", "principalId": "AROAUB2AA5FQRGAHITW4A:secmonkey", "arn": "arn:aws:sts::811596193553:assumed-role/SecurityMonkey/secmonkey", "accountId": "811596193553", "accessKeyId": "ASIAI9QHHRMC9F6XQJXN", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2017-05-27T04:59:38Z"}, "sessionIssuer": {"type": "Role", "principalId": "AROAUB2AA5FQRGAHITW4A", "arn": "arn:aws:iam::811596193553:role/SecurityMonkey", "accountId": "811596193553", "userName": "SecurityMonkey"}}}, "requestParameters": {"policyArn": "arn:aws:iam::aws:policy/service-role/AmazonEC2ContainerServiceRole", "versionId": "v2"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "756afc44-d31d-4861-8aad-305a9ba7ee49", "record_id": "flaws_cloudtrail:0000407:756afc44-d31d-4861-8aad-305a9ba7ee49", "row_index": 407, "timestamp": "2017-05-27T05:00:02Z", "event_type": "GetPolicyVersion", "event_source": "iam.amazonaws.com", "principal": {"type": "AssumedRole", "arn": "arn:aws:sts::811596193553:assumed-role/SecurityMonkey/secmonkey", "account_id": "811596193553", "principal_id": "AROAUB2AA5FQRGAHITW4A:secmonkey", "user_name": null, "access_key_id": "ASIAI9QHHRMC9F6XQJXN", "session_issuer_arn": "arn:aws:iam::811596193553:role/SecurityMonkey", "session_issuer_user_name": "SecurityMonkey"}, "network": {"source_ip": "255.253.125.115", "user_agent": "Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56 Resource", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 1070, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "756afc44-d31d-4861-8aad-305a9ba7ee49", "eventTime": "2017-05-27T05:00:02Z", "eventName": "GetPolicyVersion", "eventSource": "iam.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.253.125.115", "userAgent": "Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56 Resource", "awsRegion": "us-east-1", "userIdentity": {"type": "AssumedRole", "principalId": "AROAUB2AA5FQRGAHITW4A:secmonkey", "arn": "arn:aws:sts::811596193553:assumed-role/SecurityMonkey/secmonkey", "accountId": "811596193553", "accessKeyId": "ASIAI9QHHRMC9F6XQJXN", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2017-05-27T04:59:38Z"}, "sessionIssuer": {"type": "Role", "principalId": "AROAUB2AA5FQRGAHITW4A", "arn": "arn:aws:iam::811596193553:role/SecurityMonkey", "accountId": "811596193553", "userName": "SecurityMonkey"}}}, "requestParameters": {"policyArn": "arn:aws:iam::aws:policy/ResourceGroupsandTagEditorFullAccess", "versionId": "v1"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "f428e513-96f8-4186-ba5d-e4ba636a88cd", "record_id": "flaws_cloudtrail:0000408:f428e513-96f8-4186-ba5d-e4ba636a88cd", "row_index": 408, "timestamp": "2017-05-27T05:00:02Z", "event_type": "GetPolicyVersion", "event_source": "iam.amazonaws.com", "principal": {"type": "AssumedRole", "arn": "arn:aws:sts::811596193553:assumed-role/SecurityMonkey/secmonkey", "account_id": "811596193553", "principal_id": "AROAUB2AA5FQRGAHITW4A:secmonkey", "user_name": null, "access_key_id": "ASIAI9QHHRMC9F6XQJXN", "session_issuer_arn": "arn:aws:iam::811596193553:role/SecurityMonkey", "session_issuer_user_name": "SecurityMonkey"}, "network": {"source_ip": "255.253.125.115", "user_agent": "Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56 Resource", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 1074, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "f428e513-96f8-4186-ba5d-e4ba636a88cd", "eventTime": "2017-05-27T05:00:02Z", "eventName": "GetPolicyVersion", "eventSource": "iam.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.253.125.115", "userAgent": "Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56 Resource", "awsRegion": "us-east-1", "userIdentity": {"type": "AssumedRole", "principalId": "AROAUB2AA5FQRGAHITW4A:secmonkey", "arn": "arn:aws:sts::811596193553:assumed-role/SecurityMonkey/secmonkey", "accountId": "811596193553", "accessKeyId": "ASIAI9QHHRMC9F6XQJXN", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2017-05-27T04:59:38Z"}, "sessionIssuer": {"type": "Role", "principalId": "AROAUB2AA5FQRGAHITW4A", "arn": "arn:aws:iam::811596193553:role/SecurityMonkey", "accountId": "811596193553", "userName": "SecurityMonkey"}}}, "requestParameters": {"policyArn": "arn:aws:iam::aws:policy/service-role/AmazonElasticTranscoderRole", "versionId": "v1"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "ff6b896f-bd67-4472-a5c8-2c7a6feb62c0", "record_id": "flaws_cloudtrail:0000409:ff6b896f-bd67-4472-a5c8-2c7a6feb62c0", "row_index": 409, "timestamp": "2017-05-27T05:00:02Z", "event_type": "GetPolicyVersion", "event_source": "iam.amazonaws.com", "principal": {"type": "AssumedRole", "arn": "arn:aws:sts::811596193553:assumed-role/SecurityMonkey/secmonkey", "account_id": "811596193553", "principal_id": "AROAUB2AA5FQRGAHITW4A:secmonkey", "user_name": null, "access_key_id": "ASIAI9QHHRMC9F6XQJXN", "session_issuer_arn": "arn:aws:iam::811596193553:role/SecurityMonkey", "session_issuer_user_name": "SecurityMonkey"}, "network": {"source_ip": "255.253.125.115", "user_agent": "Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56 Resource", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 1057, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "ff6b896f-bd67-4472-a5c8-2c7a6feb62c0", "eventTime": "2017-05-27T05:00:02Z", "eventName": "GetPolicyVersion", "eventSource": "iam.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.253.125.115", "userAgent": "Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56 Resource", "awsRegion": "us-east-1", "userIdentity": {"type": "AssumedRole", "principalId": "AROAUB2AA5FQRGAHITW4A:secmonkey", "arn": "arn:aws:sts::811596193553:assumed-role/SecurityMonkey/secmonkey", "accountId": "811596193553", "accessKeyId": "ASIAI9QHHRMC9F6XQJXN", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2017-05-27T04:59:38Z"}, "sessionIssuer": {"type": "Role", "principalId": "AROAUB2AA5FQRGAHITW4A", "arn": "arn:aws:iam::811596193553:role/SecurityMonkey", "accountId": "811596193553", "userName": "SecurityMonkey"}}}, "requestParameters": {"policyArn": "arn:aws:iam::aws:policy/AWSDeviceFarmFullAccess", "versionId": "v1"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "d084d89a-5b8a-41ef-998e-f5a6eacedd9a", "record_id": "flaws_cloudtrail:0000410:d084d89a-5b8a-41ef-998e-f5a6eacedd9a", "row_index": 410, "timestamp": "2017-05-27T05:00:02Z", "event_type": "GetPolicyVersion", "event_source": "iam.amazonaws.com", "principal": {"type": "AssumedRole", "arn": "arn:aws:sts::811596193553:assumed-role/SecurityMonkey/secmonkey", "account_id": "811596193553", "principal_id": "AROAUB2AA5FQRGAHITW4A:secmonkey", "user_name": null, "access_key_id": "ASIAI9QHHRMC9F6XQJXN", "session_issuer_arn": "arn:aws:iam::811596193553:role/SecurityMonkey", "session_issuer_user_name": "SecurityMonkey"}, "network": {"source_ip": "255.253.125.115", "user_agent": "Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56 Resource", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 1066, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "d084d89a-5b8a-41ef-998e-f5a6eacedd9a", "eventTime": "2017-05-27T05:00:02Z", "eventName": "GetPolicyVersion", "eventSource": "iam.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.253.125.115", "userAgent": "Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56 Resource", "awsRegion": "us-east-1", "userIdentity": {"type": "AssumedRole", "principalId": "AROAUB2AA5FQRGAHITW4A:secmonkey", "arn": "arn:aws:sts::811596193553:assumed-role/SecurityMonkey/secmonkey", "accountId": "811596193553", "accessKeyId": "ASIAI9QHHRMC9F6XQJXN", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2017-05-27T04:59:38Z"}, "sessionIssuer": {"type": "Role", "principalId": "AROAUB2AA5FQRGAHITW4A", "arn": "arn:aws:iam::811596193553:role/SecurityMonkey", "accountId": "811596193553", "userName": "SecurityMonkey"}}}, "requestParameters": {"policyArn": "arn:aws:iam::aws:policy/AWSKeyManagementServicePowerUser", "versionId": "v2"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "752469-c0e1-44ed-b776-be4bf7acad43", "record_id": "flaws_cloudtrail:0000411:752469-c0e1-44ed-b776-be4bf7acad43", "row_index": 411, "timestamp": "2017-05-27T05:00:02Z", "event_type": "GetPolicyVersion", "event_source": "iam.amazonaws.com", "principal": {"type": "AssumedRole", "arn": "arn:aws:sts::811596193553:assumed-role/SecurityMonkey/secmonkey", "account_id": "811596193553", "principal_id": "AROAUB2AA5FQRGAHITW4A:secmonkey", "user_name": null, "access_key_id": "ASIAI9QHHRMC9F6XQJXN", "session_issuer_arn": "arn:aws:iam::811596193553:role/SecurityMonkey", "session_issuer_user_name": "SecurityMonkey"}, "network": {"source_ip": "255.253.125.115", "user_agent": "Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56 Resource", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 1061, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "752469-c0e1-44ed-b776-be4bf7acad43", "eventTime": "2017-05-27T05:00:02Z", "eventName": "GetPolicyVersion", "eventSource": "iam.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.253.125.115", "userAgent": "Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56 Resource", "awsRegion": "us-east-1", "userIdentity": {"type": "AssumedRole", "principalId": "AROAUB2AA5FQRGAHITW4A:secmonkey", "arn": "arn:aws:sts::811596193553:assumed-role/SecurityMonkey/secmonkey", "accountId": "811596193553", "accessKeyId": "ASIAI9QHHRMC9F6XQJXN", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2017-05-27T04:59:38Z"}, "sessionIssuer": {"type": "Role", "principalId": "AROAUB2AA5FQRGAHITW4A", "arn": "arn:aws:iam::811596193553:role/SecurityMonkey", "accountId": "811596193553", "userName": "SecurityMonkey"}}}, "requestParameters": {"policyArn": "arn:aws:iam::aws:policy/AWSImportExportReadOnlyAccess", "versionId": "v1"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "aee1bf0b-e63a-42fc-b6be-0fb09501c9b8", "record_id": "flaws_cloudtrail:0000412:aee1bf0b-e63a-42fc-b6be-0fb09501c9b8", "row_index": 412, "timestamp": "2017-05-27T05:00:03Z", "event_type": "ListCertificates", "event_source": "acm.amazonaws.com", "principal": {"type": "AssumedRole", "arn": "arn:aws:sts::811596193553:assumed-role/SecurityMonkey/secmonkey", "account_id": "811596193553", "principal_id": "AROAUB2AA5FQRGAHITW4A:secmonkey", "user_name": null, "access_key_id": "ASIA0G3QETN88ZUMYEO8", "session_issuer_arn": "arn:aws:iam::811596193553:role/SecurityMonkey", "session_issuer_user_name": "SecurityMonkey"}, "network": {"source_ip": "255.253.125.115", "user_agent": "Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56", "aws_region": "eu-west-1"}, "resource_arns": [], "raw_record_size_bytes": 971, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "aee1bf0b-e63a-42fc-b6be-0fb09501c9b8", "eventTime": "2017-05-27T05:00:03Z", "eventName": "ListCertificates", "eventSource": "acm.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.253.125.115", "userAgent": "Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56", "awsRegion": "eu-west-1", "userIdentity": {"type": "AssumedRole", "principalId": "AROAUB2AA5FQRGAHITW4A:secmonkey", "arn": "arn:aws:sts::811596193553:assumed-role/SecurityMonkey/secmonkey", "accountId": "811596193553", "accessKeyId": "ASIA0G3QETN88ZUMYEO8", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2017-05-27T05:00:03Z"}, "sessionIssuer": {"type": "Role", "principalId": "AROAUB2AA5FQRGAHITW4A", "arn": "arn:aws:iam::811596193553:role/SecurityMonkey", "accountId": "811596193553", "userName": "SecurityMonkey"}}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "63c3167a-6d9c-4bad-9a8d-d7deec0e53b2", "record_id": "flaws_cloudtrail:0000413:63c3167a-6d9c-4bad-9a8d-d7deec0e53b2", "row_index": 413, "timestamp": "2017-05-27T05:00:03Z", "event_type": "AssumeRole", "event_source": "sts.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/SecurityMokey", "account_id": "811596193553", "principal_id": "AIDAQ9SRE1SZZZ4Q4UOJH", "user_name": "SecurityMokey", "access_key_id": "AKIAXJ0III4JBKZDXGXN", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "255.253.125.115", "user_agent": "Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56", "aws_region": "us-east-1"}, "resource_arns": ["arn:aws:iam::811596193553:role/SecurityMonkey"], "raw_record_size_bytes": 1454, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "resources", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "63c3167a-6d9c-4bad-9a8d-d7deec0e53b2", "eventTime": "2017-05-27T05:00:03Z", "eventName": "AssumeRole", "eventSource": "sts.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.253.125.115", "userAgent": "Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDAQ9SRE1SZZZ4Q4UOJH", "arn": "arn:aws:iam::811596193553:user/SecurityMokey", "accountId": "811596193553", "accessKeyId": "AKIAXJ0III4JBKZDXGXN", "userName": "SecurityMokey"}, "requestParameters": {"roleArn": "arn:aws:iam::811596193553:role/SecurityMonkey", "roleSessionName": "secmonkey"}, "responseElements": {"credentials": {"accessKeyId": "ASIA0G3QETN88ZUMYEO8", "expiration": "May 27, 2017 6:00:03 AM", "sessionToken": "FQoDYXdzECYaDCIbAt3XKFoT4X8F0SLMAWhq9O6/pF+PMi9An3DaMBcE5inlt2fsuywmu6b3tFMnPOnV6t9xU+clDBqW+Xa8N7jfJUNZbMXFgs2ohxXzEJ/jm+ooTYdBi4H6paY5IOfoTj93XpQ4j04EG0FHwzTPjk2zKb8E3UaGsm592gxXtirAJJdo598KKW5foCP4eGDfhMTw9KR692976jjuYySlEpEmop1DBfJg71jRawOJKm7/ZexgufcMPC/j5zifaE5ktGKPvpLnqWdm5gAXSOLf62prf170wH+YvZkvTAijTj6TJBQ=="}, "assumedRoleUser": {"assumedRoleId": "AROAUB2AA5FQRGAHITW4A:secmonkey", "arn": "arn:aws:sts::811596193553:assumed-role/SecurityMonkey/secmonkey"}}, "resources": [{"ARN": "arn:aws:iam::811596193553:role/SecurityMonkey", "accountId": "811596193553", "type": "AWS::IAM::Role"}]}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "f40a98e0-50ef-4679-8e2d-72723a7e79ad", "record_id": "flaws_cloudtrail:0000414:f40a98e0-50ef-4679-8e2d-72723a7e79ad", "row_index": 414, "timestamp": "2017-05-27T05:00:03Z", "event_type": "GetPolicyVersion", "event_source": "iam.amazonaws.com", "principal": {"type": "AssumedRole", "arn": "arn:aws:sts::811596193553:assumed-role/SecurityMonkey/secmonkey", "account_id": "811596193553", "principal_id": "AROAUB2AA5FQRGAHITW4A:secmonkey", "user_name": null, "access_key_id": "ASIAI9QHHRMC9F6XQJXN", "session_issuer_arn": "arn:aws:iam::811596193553:role/SecurityMonkey", "session_issuer_user_name": "SecurityMonkey"}, "network": {"source_ip": "255.253.125.115", "user_agent": "Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56 Resource", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 1060, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "f40a98e0-50ef-4679-8e2d-72723a7e79ad", "eventTime": "2017-05-27T05:00:03Z", "eventName": "GetPolicyVersion", "eventSource": "iam.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.253.125.115", "userAgent": "Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56 Resource", "awsRegion": "us-east-1", "userIdentity": {"type": "AssumedRole", "principalId": "AROAUB2AA5FQRGAHITW4A:secmonkey", "arn": "arn:aws:sts::811596193553:assumed-role/SecurityMonkey/secmonkey", "accountId": "811596193553", "accessKeyId": "ASIAI9QHHRMC9F6XQJXN", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2017-05-27T04:59:38Z"}, "sessionIssuer": {"type": "Role", "principalId": "AROAUB2AA5FQRGAHITW4A", "arn": "arn:aws:iam::811596193553:role/SecurityMonkey", "accountId": "811596193553", "userName": "SecurityMonkey"}}}, "requestParameters": {"policyArn": "arn:aws:iam::aws:policy/AWSDirectConnectFullAccess", "versionId": "v1"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "d0b9c247-ecb8-429e-9366-ced9282d984d", "record_id": "flaws_cloudtrail:0000415:d0b9c247-ecb8-429e-9366-ced9282d984d", "row_index": 415, "timestamp": "2017-05-27T05:00:03Z", "event_type": "GetPolicyVersion", "event_source": "iam.amazonaws.com", "principal": {"type": "AssumedRole", "arn": "arn:aws:sts::811596193553:assumed-role/SecurityMonkey/secmonkey", "account_id": "811596193553", "principal_id": "AROAUB2AA5FQRGAHITW4A:secmonkey", "user_name": null, "access_key_id": "ASIAI9QHHRMC9F6XQJXN", "session_issuer_arn": "arn:aws:iam::811596193553:role/SecurityMonkey", "session_issuer_user_name": "SecurityMonkey"}, "network": {"source_ip": "255.253.125.115", "user_agent": "Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56 Resource", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 1051, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "d0b9c247-ecb8-429e-9366-ced9282d984d", "eventTime": "2017-05-27T05:00:03Z", "eventName": "GetPolicyVersion", "eventSource": "iam.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.253.125.115", "userAgent": "Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56 Resource", "awsRegion": "us-east-1", "userIdentity": {"type": "AssumedRole", "principalId": "AROAUB2AA5FQRGAHITW4A:secmonkey", "arn": "arn:aws:sts::811596193553:assumed-role/SecurityMonkey/secmonkey", "accountId": "811596193553", "accessKeyId": "ASIAI9QHHRMC9F6XQJXN", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2017-05-27T04:59:38Z"}, "sessionIssuer": {"type": "Role", "principalId": "AROAUB2AA5FQRGAHITW4A", "arn": "arn:aws:iam::811596193553:role/SecurityMonkey", "accountId": "811596193553", "userName": "SecurityMonkey"}}}, "requestParameters": {"policyArn": "arn:aws:iam::aws:policy/AWSXrayFullAccess", "versionId": "v1"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "466008d68-8003-4a69-8948-432740adff81", "record_id": "flaws_cloudtrail:0000416:466008d68-8003-4a69-8948-432740adff81", "row_index": 416, "timestamp": "2017-05-27T05:00:03Z", "event_type": "GetPolicyVersion", "event_source": "iam.amazonaws.com", "principal": {"type": "AssumedRole", "arn": "arn:aws:sts::811596193553:assumed-role/SecurityMonkey/secmonkey", "account_id": "811596193553", "principal_id": "AROAUB2AA5FQRGAHITW4A:secmonkey", "user_name": null, "access_key_id": "ASIAI9QHHRMC9F6XQJXN", "session_issuer_arn": "arn:aws:iam::811596193553:role/SecurityMonkey", "session_issuer_user_name": "SecurityMonkey"}, "network": {"source_ip": "255.253.125.115", "user_agent": "Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56 Resource", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 1057, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "466008d68-8003-4a69-8948-432740adff81", "eventTime": "2017-05-27T05:00:03Z", "eventName": "GetPolicyVersion", "eventSource": "iam.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.253.125.115", "userAgent": "Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56 Resource", "awsRegion": "us-east-1", "userIdentity": {"type": "AssumedRole", "principalId": "AROAUB2AA5FQRGAHITW4A:secmonkey", "arn": "arn:aws:sts::811596193553:assumed-role/SecurityMonkey/secmonkey", "accountId": "811596193553", "accessKeyId": "ASIAI9QHHRMC9F6XQJXN", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2017-05-27T04:59:38Z"}, "sessionIssuer": {"type": "Role", "principalId": "AROAUB2AA5FQRGAHITW4A", "arn": "arn:aws:iam::811596193553:role/SecurityMonkey", "accountId": "811596193553", "userName": "SecurityMonkey"}}}, "requestParameters": {"policyArn": "arn:aws:iam::aws:policy/AmazonDRSVPCManagement", "versionId": "v1"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "2db4752d-95c8-414b-8872-080777cd67", "record_id": "flaws_cloudtrail:0000417:2db4752d-95c8-414b-8872-080777cd67", "row_index": 417, "timestamp": "2017-05-27T05:00:03Z", "event_type": "GetPolicyVersion", "event_source": "iam.amazonaws.com", "principal": {"type": "AssumedRole", "arn": "arn:aws:sts::811596193553:assumed-role/SecurityMonkey/secmonkey", "account_id": "811596193553", "principal_id": "AROAUB2AA5FQRGAHITW4A:secmonkey", "user_name": null, "access_key_id": "ASIAI9QHHRMC9F6XQJXN", "session_issuer_arn": "arn:aws:iam::811596193553:role/SecurityMonkey", "session_issuer_user_name": "SecurityMonkey"}, "network": {"source_ip": "255.253.125.115", "user_agent": "Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56 Resource", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 1059, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "2db4752d-95c8-414b-8872-080777cd67", "eventTime": "2017-05-27T05:00:03Z", "eventName": "GetPolicyVersion", "eventSource": "iam.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.253.125.115", "userAgent": "Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56 Resource", "awsRegion": "us-east-1", "userIdentity": {"type": "AssumedRole", "principalId": "AROAUB2AA5FQRGAHITW4A:secmonkey", "arn": "arn:aws:sts::811596193553:assumed-role/SecurityMonkey/secmonkey", "accountId": "811596193553", "accessKeyId": "ASIAI9QHHRMC9F6XQJXN", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2017-05-27T04:59:38Z"}, "sessionIssuer": {"type": "Role", "principalId": "AROAUB2AA5FQRGAHITW4A", "arn": "arn:aws:iam::811596193553:role/SecurityMonkey", "accountId": "811596193553", "userName": "SecurityMonkey"}}}, "requestParameters": {"policyArn": "arn:aws:iam::aws:policy/AWSElasticBeanstalkWorkerTier", "versionId": "v4"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "e61c038f-c7bc-41f8-98b6-3d0c5564c907", "record_id": "flaws_cloudtrail:0000418:e61c038f-c7bc-41f8-98b6-3d0c5564c907", "row_index": 418, "timestamp": "2017-05-27T05:00:03Z", "event_type": "GetPolicyVersion", "event_source": "iam.amazonaws.com", "principal": {"type": "AssumedRole", "arn": "arn:aws:sts::811596193553:assumed-role/SecurityMonkey/secmonkey", "account_id": "811596193553", "principal_id": "AROAUB2AA5FQRGAHITW4A:secmonkey", "user_name": null, "access_key_id": "ASIAI9QHHRMC9F6XQJXN", "session_issuer_arn": "arn:aws:iam::811596193553:role/SecurityMonkey", "session_issuer_user_name": "SecurityMonkey"}, "network": {"source_ip": "255.253.125.115", "user_agent": "Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56 Resource", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 1079, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "e61c038f-c7bc-41f8-98b6-3d0c5564c907", "eventTime": "2017-05-27T05:00:03Z", "eventName": "GetPolicyVersion", "eventSource": "iam.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.253.125.115", "userAgent": "Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56 Resource", "awsRegion": "us-east-1", "userIdentity": {"type": "AssumedRole", "principalId": "AROAUB2AA5FQRGAHITW4A:secmonkey", "arn": "arn:aws:sts::811596193553:assumed-role/SecurityMonkey/secmonkey", "accountId": "811596193553", "accessKeyId": "ASIAI9QHHRMC9F6XQJXN", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2017-05-27T04:59:38Z"}, "sessionIssuer": {"type": "Role", "principalId": "AROAUB2AA5FQRGAHITW4A", "arn": "arn:aws:iam::811596193553:role/SecurityMonkey", "accountId": "811596193553", "userName": "SecurityMonkey"}}}, "requestParameters": {"policyArn": "arn:aws:iam::aws:policy/AmazonWorkSpacesApplicationManagerAdminAccess", "versionId": "v1"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "b49c285c-3550-4460-9b32-82330df8ab2", "record_id": "flaws_cloudtrail:0000419:b49c285c-3550-4460-9b32-82330df8ab2", "row_index": 419, "timestamp": "2017-05-27T05:00:03Z", "event_type": "GetPolicyVersion", "event_source": "iam.amazonaws.com", "principal": {"type": "AssumedRole", "arn": "arn:aws:sts::811596193553:assumed-role/SecurityMonkey/secmonkey", "account_id": "811596193553", "principal_id": "AROAUB2AA5FQRGAHITW4A:secmonkey", "user_name": null, "access_key_id": "ASIAI9QHHRMC9F6XQJXN", "session_issuer_arn": "arn:aws:iam::811596193553:role/SecurityMonkey", "session_issuer_user_name": "SecurityMonkey"}, "network": {"source_ip": "255.253.125.115", "user_agent": "Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56 Resource", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 1066, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "b49c285c-3550-4460-9b32-82330df8ab2", "eventTime": "2017-05-27T05:00:03Z", "eventName": "GetPolicyVersion", "eventSource": "iam.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.253.125.115", "userAgent": "Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56 Resource", "awsRegion": "us-east-1", "userIdentity": {"type": "AssumedRole", "principalId": "AROAUB2AA5FQRGAHITW4A:secmonkey", "arn": "arn:aws:sts::811596193553:assumed-role/SecurityMonkey/secmonkey", "accountId": "811596193553", "accessKeyId": "ASIAI9QHHRMC9F6XQJXN", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2017-05-27T04:59:38Z"}, "sessionIssuer": {"type": "Role", "principalId": "AROAUB2AA5FQRGAHITW4A", "arn": "arn:aws:iam::811596193553:role/SecurityMonkey", "accountId": "811596193553", "userName": "SecurityMonkey"}}}, "requestParameters": {"policyArn": "arn:aws:iam::aws:policy/job-function/NetworkAdministrator", "versionId": "v2"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "511718-1275-468e-a489-53b7d2487e8e", "record_id": "flaws_cloudtrail:0000420:511718-1275-468e-a489-53b7d2487e8e", "row_index": 420, "timestamp": "2017-05-27T05:00:03Z", "event_type": "GetPolicyVersion", "event_source": "iam.amazonaws.com", "principal": {"type": "AssumedRole", "arn": "arn:aws:sts::811596193553:assumed-role/SecurityMonkey/secmonkey", "account_id": "811596193553", "principal_id": "AROAUB2AA5FQRGAHITW4A:secmonkey", "user_name": null, "access_key_id": "ASIAI9QHHRMC9F6XQJXN", "session_issuer_arn": "arn:aws:iam::811596193553:role/SecurityMonkey", "session_issuer_user_name": "SecurityMonkey"}, "network": {"source_ip": "255.253.125.115", "user_agent": "Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56 Resource", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 1055, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "511718-1275-468e-a489-53b7d2487e8e", "eventTime": "2017-05-27T05:00:03Z", "eventName": "GetPolicyVersion", "eventSource": "iam.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.253.125.115", "userAgent": "Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56 Resource", "awsRegion": "us-east-1", "userIdentity": {"type": "AssumedRole", "principalId": "AROAUB2AA5FQRGAHITW4A:secmonkey", "arn": "arn:aws:sts::811596193553:assumed-role/SecurityMonkey/secmonkey", "accountId": "811596193553", "accessKeyId": "ASIAI9QHHRMC9F6XQJXN", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2017-05-27T04:59:38Z"}, "sessionIssuer": {"type": "Role", "principalId": "AROAUB2AA5FQRGAHITW4A", "arn": "arn:aws:iam::811596193553:role/SecurityMonkey", "accountId": "811596193553", "userName": "SecurityMonkey"}}}, "requestParameters": {"policyArn": "arn:aws:iam::aws:policy/AmazonSSMReadOnlyAccess", "versionId": "v1"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "5c1aefd0-16e5-4bf4-881b-e4f3ae864fe0", "record_id": "flaws_cloudtrail:0000421:5c1aefd0-16e5-4bf4-881b-e4f3ae864fe0", "row_index": 421, "timestamp": "2017-05-27T05:00:03Z", "event_type": "GetPolicyVersion", "event_source": "iam.amazonaws.com", "principal": {"type": "AssumedRole", "arn": "arn:aws:sts::811596193553:assumed-role/SecurityMonkey/secmonkey", "account_id": "811596193553", "principal_id": "AROAUB2AA5FQRGAHITW4A:secmonkey", "user_name": null, "access_key_id": "ASIAI9QHHRMC9F6XQJXN", "session_issuer_arn": "arn:aws:iam::811596193553:role/SecurityMonkey", "session_issuer_user_name": "SecurityMonkey"}, "network": {"source_ip": "255.253.125.115", "user_agent": "Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56 Resource", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 1084, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "5c1aefd0-16e5-4bf4-881b-e4f3ae864fe0", "eventTime": "2017-05-27T05:00:03Z", "eventName": "GetPolicyVersion", "eventSource": "iam.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.253.125.115", "userAgent": "Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56 Resource", "awsRegion": "us-east-1", "userIdentity": {"type": "AssumedRole", "principalId": "AROAUB2AA5FQRGAHITW4A:secmonkey", "arn": "arn:aws:sts::811596193553:assumed-role/SecurityMonkey/secmonkey", "accountId": "811596193553", "accessKeyId": "ASIAI9QHHRMC9F6XQJXN", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2017-05-27T04:59:38Z"}, "sessionIssuer": {"type": "Role", "principalId": "AROAUB2AA5FQRGAHITW4A", "arn": "arn:aws:iam::811596193553:role/SecurityMonkey", "accountId": "811596193553", "userName": "SecurityMonkey"}}}, "requestParameters": {"policyArn": "arn:aws:iam::aws:policy/service-role/AWSGreengrassResourceAccessRolePolicy", "versionId": "v3"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "de26e1d0-8be5-412c-a66d-f2e8dd2eff09", "record_id": "flaws_cloudtrail:0000422:de26e1d0-8be5-412c-a66d-f2e8dd2eff09", "row_index": 422, "timestamp": "2017-05-27T05:00:03Z", "event_type": "GetPolicyVersion", "event_source": "iam.amazonaws.com", "principal": {"type": "AssumedRole", "arn": "arn:aws:sts::811596193553:assumed-role/SecurityMonkey/secmonkey", "account_id": "811596193553", "principal_id": "AROAUB2AA5FQRGAHITW4A:secmonkey", "user_name": null, "access_key_id": "ASIAI9QHHRMC9F6XQJXN", "session_issuer_arn": "arn:aws:iam::811596193553:role/SecurityMonkey", "session_issuer_user_name": "SecurityMonkey"}, "network": {"source_ip": "255.253.125.115", "user_agent": "Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56 Resource", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 1059, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "de26e1d0-8be5-412c-a66d-f2e8dd2eff09", "eventTime": "2017-05-27T05:00:03Z", "eventName": "GetPolicyVersion", "eventSource": "iam.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.253.125.115", "userAgent": "Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56 Resource", "awsRegion": "us-east-1", "userIdentity": {"type": "AssumedRole", "principalId": "AROAUB2AA5FQRGAHITW4A:secmonkey", "arn": "arn:aws:sts::811596193553:assumed-role/SecurityMonkey/secmonkey", "accountId": "811596193553", "accessKeyId": "ASIAI9QHHRMC9F6XQJXN", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2017-05-27T04:59:38Z"}, "sessionIssuer": {"type": "Role", "principalId": "AROAUB2AA5FQRGAHITW4A", "arn": "arn:aws:iam::811596193553:role/SecurityMonkey", "accountId": "811596193553", "userName": "SecurityMonkey"}}}, "requestParameters": {"policyArn": "arn:aws:iam::aws:policy/AWSCodePipelineFullAccess", "versionId": "v5"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "d010f7fc-9e32-41e1-b7bb-d21214a7c330", "record_id": "flaws_cloudtrail:0000423:d010f7fc-9e32-41e1-b7bb-d21214a7c330", "row_index": 423, "timestamp": "2017-05-27T05:00:03Z", "event_type": "GetPolicyVersion", "event_source": "iam.amazonaws.com", "principal": {"type": "AssumedRole", "arn": "arn:aws:sts::811596193553:assumed-role/SecurityMonkey/secmonkey", "account_id": "811596193553", "principal_id": "AROAUB2AA5FQRGAHITW4A:secmonkey", "user_name": null, "access_key_id": "ASIAI9QHHRMC9F6XQJXN", "session_issuer_arn": "arn:aws:iam::811596193553:role/SecurityMonkey", "session_issuer_user_name": "SecurityMonkey"}, "network": {"source_ip": "255.253.125.115", "user_agent": "Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56 Resource", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 1054, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "d010f7fc-9e32-41e1-b7bb-d21214a7c330", "eventTime": "2017-05-27T05:00:03Z", "eventName": "GetPolicyVersion", "eventSource": "iam.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.253.125.115", "userAgent": "Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56 Resource", "awsRegion": "us-east-1", "userIdentity": {"type": "AssumedRole", "principalId": "AROAUB2AA5FQRGAHITW4A:secmonkey", "arn": "arn:aws:sts::811596193553:assumed-role/SecurityMonkey/secmonkey", "accountId": "811596193553", "accessKeyId": "ASIAI9QHHRMC9F6XQJXN", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2017-05-27T04:59:38Z"}, "sessionIssuer": {"type": "Role", "principalId": "AROAUB2AA5FQRGAHITW4A", "arn": "arn:aws:iam::811596193553:role/SecurityMonkey", "accountId": "811596193553", "userName": "SecurityMonkey"}}}, "requestParameters": {"policyArn": "arn:aws:iam::aws:policy/AWSMarketplaceRead-only", "versionId": "v1"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "c28e6201-847f-43f4-94df-54d6bc748f3a", "record_id": "flaws_cloudtrail:0000424:c28e6201-847f-43f4-94df-54d6bc748f3a", "row_index": 424, "timestamp": "2017-05-27T05:00:03Z", "event_type": "GetPolicyVersion", "event_source": "iam.amazonaws.com", "principal": {"type": "AssumedRole", "arn": "arn:aws:sts::811596193553:assumed-role/SecurityMonkey/secmonkey", "account_id": "811596193553", "principal_id": "AROAUB2AA5FQRGAHITW4A:secmonkey", "user_name": null, "access_key_id": "ASIAI9QHHRMC9F6XQJXN", "session_issuer_arn": "arn:aws:iam::811596193553:role/SecurityMonkey", "session_issuer_user_name": "SecurityMonkey"}, "network": {"source_ip": "255.253.125.115", "user_agent": "Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56 Resource", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 1064, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "c28e6201-847f-43f4-94df-54d6bc748f3a", "eventTime": "2017-05-27T05:00:03Z", "eventName": "GetPolicyVersion", "eventSource": "iam.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.253.125.115", "userAgent": "Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56 Resource", "awsRegion": "us-east-1", "userIdentity": {"type": "AssumedRole", "principalId": "AROAUB2AA5FQRGAHITW4A:secmonkey", "arn": "arn:aws:sts::811596193553:assumed-role/SecurityMonkey/secmonkey", "accountId": "811596193553", "accessKeyId": "ASIAI9QHHRMC9F6XQJXN", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2017-05-27T04:59:38Z"}, "sessionIssuer": {"type": "Role", "principalId": "AROAUB2AA5FQRGAHITW4A", "arn": "arn:aws:iam::811596193553:role/SecurityMonkey", "accountId": "811596193553", "userName": "SecurityMonkey"}}}, "requestParameters": {"policyArn": "arn:aws:iam::aws:policy/AWSStepFunctionsReadOnlyAccess", "versionId": "v1"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "619596b5-84c5-4eab-8c58-099117e70ed", "record_id": "flaws_cloudtrail:0000425:619596b5-84c5-4eab-8c58-099117e70ed", "row_index": 425, "timestamp": "2017-05-27T05:00:04Z", "event_type": "AssumeRole", "event_source": "sts.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/SecurityMokey", "account_id": "811596193553", "principal_id": "AIDAQ9SRE1SZZZ4Q4UOJH", "user_name": "SecurityMokey", "access_key_id": "AKIAXJ0III4JBKZDXGXN", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "255.253.125.115", "user_agent": "Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56", "aws_region": "us-east-1"}, "resource_arns": ["arn:aws:iam::811596193553:role/SecurityMonkey"], "raw_record_size_bytes": 1452, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "resources", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "619596b5-84c5-4eab-8c58-099117e70ed", "eventTime": "2017-05-27T05:00:04Z", "eventName": "AssumeRole", "eventSource": "sts.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.253.125.115", "userAgent": "Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDAQ9SRE1SZZZ4Q4UOJH", "arn": "arn:aws:iam::811596193553:user/SecurityMokey", "accountId": "811596193553", "accessKeyId": "AKIAXJ0III4JBKZDXGXN", "userName": "SecurityMokey"}, "requestParameters": {"roleArn": "arn:aws:iam::811596193553:role/SecurityMonkey", "roleSessionName": "secmonkey"}, "responseElements": {"credentials": {"accessKeyId": "ASIA4BTGKLN4ZW9WO8MH", "expiration": "May 27, 2017 6:00:04 AM", "sessionToken": "FQoDYXdzECYaDGtkAHw2cz/TBKRTRyLMAVU1kiRcxUIpigDJLOA83ovtqanJCYhO69GlJ1Dlgo8uwT6HPU1YirLkNUS79LEkry12pBkBxMsuLjk78AUAjaX2vDoYcpAxWBZ36kVGLuKZgbCpRl2NXVQe9FOtwGZdcnrqpv5wHn6oa5ZmLnJ/e2HXYHudNNTmywvHJw2Xs5ltxd8phAnNt9HBj41GSeqA8MHIafv7HVBVtHXQcT7JyEFW1Um25zYHL6ygKMOaqPRCCxiypsJDJt8UsCJ0yi5G+JIV/G8YjFxUZT2NFyjUj6TJBQ=="}, "assumedRoleUser": {"assumedRoleId": "AROAUB2AA5FQRGAHITW4A:secmonkey", "arn": "arn:aws:sts::811596193553:assumed-role/SecurityMonkey/secmonkey"}}, "resources": [{"ARN": "arn:aws:iam::811596193553:role/SecurityMonkey", "accountId": "811596193553", "type": "AWS::IAM::Role"}]}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "13d7fa2c-c011-494e-859d-d979f9ef049d", "record_id": "flaws_cloudtrail:0000426:13d7fa2c-c011-494e-859d-d979f9ef049d", "row_index": 426, "timestamp": "2017-05-27T05:00:04Z", "event_type": "GetPolicyVersion", "event_source": "iam.amazonaws.com", "principal": {"type": "AssumedRole", "arn": "arn:aws:sts::811596193553:assumed-role/SecurityMonkey/secmonkey", "account_id": "811596193553", "principal_id": "AROAUB2AA5FQRGAHITW4A:secmonkey", "user_name": null, "access_key_id": "ASIAI9QHHRMC9F6XQJXN", "session_issuer_arn": "arn:aws:iam::811596193553:role/SecurityMonkey", "session_issuer_user_name": "SecurityMonkey"}, "network": {"source_ip": "255.253.125.115", "user_agent": "Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56 Resource", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 1057, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "13d7fa2c-c011-494e-859d-d979f9ef049d", "eventTime": "2017-05-27T05:00:04Z", "eventName": "GetPolicyVersion", "eventSource": "iam.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.253.125.115", "userAgent": "Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56 Resource", "awsRegion": "us-east-1", "userIdentity": {"type": "AssumedRole", "principalId": "AROAUB2AA5FQRGAHITW4A:secmonkey", "arn": "arn:aws:sts::811596193553:assumed-role/SecurityMonkey/secmonkey", "accountId": "811596193553", "accessKeyId": "ASIAI9QHHRMC9F6XQJXN", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2017-05-27T04:59:38Z"}, "sessionIssuer": {"type": "Role", "principalId": "AROAUB2AA5FQRGAHITW4A", "arn": "arn:aws:iam::811596193553:role/SecurityMonkey", "accountId": "811596193553", "userName": "SecurityMonkey"}}}, "requestParameters": {"policyArn": "arn:aws:iam::aws:policy/AWSCodeBuildAdminAccess", "versionId": "v1"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "06f292044-1516-4e02-bd56-ce040c4f2011", "record_id": "flaws_cloudtrail:0000427:06f292044-1516-4e02-bd56-ce040c4f2011", "row_index": 427, "timestamp": "2017-05-27T05:00:04Z", "event_type": "GetPolicyVersion", "event_source": "iam.amazonaws.com", "principal": {"type": "AssumedRole", "arn": "arn:aws:sts::811596193553:assumed-role/SecurityMonkey/secmonkey", "account_id": "811596193553", "principal_id": "AROAUB2AA5FQRGAHITW4A:secmonkey", "user_name": null, "access_key_id": "ASIAI9QHHRMC9F6XQJXN", "session_issuer_arn": "arn:aws:iam::811596193553:role/SecurityMonkey", "session_issuer_user_name": "SecurityMonkey"}, "network": {"source_ip": "255.253.125.115", "user_agent": "Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56 Resource", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 1067, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "06f292044-1516-4e02-bd56-ce040c4f2011", "eventTime": "2017-05-27T05:00:04Z", "eventName": "GetPolicyVersion", "eventSource": "iam.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.253.125.115", "userAgent": "Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56 Resource", "awsRegion": "us-east-1", "userIdentity": {"type": "AssumedRole", "principalId": "AROAUB2AA5FQRGAHITW4A:secmonkey", "arn": "arn:aws:sts::811596193553:assumed-role/SecurityMonkey/secmonkey", "accountId": "811596193553", "accessKeyId": "ASIAI9QHHRMC9F6XQJXN", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2017-05-27T04:59:38Z"}, "sessionIssuer": {"type": "Role", "principalId": "AROAUB2AA5FQRGAHITW4A", "arn": "arn:aws:iam::811596193553:role/SecurityMonkey", "accountId": "811596193553", "userName": "SecurityMonkey"}}}, "requestParameters": {"policyArn": "arn:aws:iam::aws:policy/AmazonKinesisAnalyticsFullAccess", "versionId": "v1"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "b155f9d2-d0de-4d17-8bbe-9158fba92408", "record_id": "flaws_cloudtrail:0000428:b155f9d2-d0de-4d17-8bbe-9158fba92408", "row_index": 428, "timestamp": "2017-05-27T05:00:04Z", "event_type": "GetPolicyVersion", "event_source": "iam.amazonaws.com", "principal": {"type": "AssumedRole", "arn": "arn:aws:sts::811596193553:assumed-role/SecurityMonkey/secmonkey", "account_id": "811596193553", "principal_id": "AROAUB2AA5FQRGAHITW4A:secmonkey", "user_name": null, "access_key_id": "ASIAI9QHHRMC9F6XQJXN", "session_issuer_arn": "arn:aws:iam::811596193553:role/SecurityMonkey", "session_issuer_user_name": "SecurityMonkey"}, "network": {"source_ip": "255.253.125.115", "user_agent": "Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56 Resource", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 1058, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "b155f9d2-d0de-4d17-8bbe-9158fba92408", "eventTime": "2017-05-27T05:00:04Z", "eventName": "GetPolicyVersion", "eventSource": "iam.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.253.125.115", "userAgent": "Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56 Resource", "awsRegion": "us-east-1", "userIdentity": {"type": "AssumedRole", "principalId": "AROAUB2AA5FQRGAHITW4A:secmonkey", "arn": "arn:aws:sts::811596193553:assumed-role/SecurityMonkey/secmonkey", "accountId": "811596193553", "accessKeyId": "ASIAI9QHHRMC9F6XQJXN", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2017-05-27T04:59:38Z"}, "sessionIssuer": {"type": "Role", "principalId": "AROAUB2AA5FQRGAHITW4A", "arn": "arn:aws:iam::811596193553:role/SecurityMonkey", "accountId": "811596193553", "userName": "SecurityMonkey"}}}, "requestParameters": {"policyArn": "arn:aws:iam::aws:policy/AWSAccountActivityAccess", "versionId": "v1"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "b427dad3-0e3d-4639-bd7e-33cb271f5c87", "record_id": "flaws_cloudtrail:0000429:b427dad3-0e3d-4639-bd7e-33cb271f5c87", "row_index": 429, "timestamp": "2017-05-27T05:00:04Z", "event_type": "GetPolicyVersion", "event_source": "iam.amazonaws.com", "principal": {"type": "AssumedRole", "arn": "arn:aws:sts::811596193553:assumed-role/SecurityMonkey/secmonkey", "account_id": "811596193553", "principal_id": "AROAUB2AA5FQRGAHITW4A:secmonkey", "user_name": null, "access_key_id": "ASIAI9QHHRMC9F6XQJXN", "session_issuer_arn": "arn:aws:iam::811596193553:role/SecurityMonkey", "session_issuer_user_name": "SecurityMonkey"}, "network": {"source_ip": "255.253.125.115", "user_agent": "Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56 Resource", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 1057, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "b427dad3-0e3d-4639-bd7e-33cb271f5c87", "eventTime": "2017-05-27T05:00:04Z", "eventName": "GetPolicyVersion", "eventSource": "iam.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.253.125.115", "userAgent": "Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56 Resource", "awsRegion": "us-east-1", "userIdentity": {"type": "AssumedRole", "principalId": "AROAUB2AA5FQRGAHITW4A:secmonkey", "arn": "arn:aws:sts::811596193553:assumed-role/SecurityMonkey/secmonkey", "accountId": "811596193553", "accessKeyId": "ASIAI9QHHRMC9F6XQJXN", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2017-05-27T04:59:38Z"}, "sessionIssuer": {"type": "Role", "principalId": "AROAUB2AA5FQRGAHITW4A", "arn": "arn:aws:iam::811596193553:role/SecurityMonkey", "accountId": "811596193553", "userName": "SecurityMonkey"}}}, "requestParameters": {"policyArn": "arn:aws:iam::aws:policy/AmazonGlacierFullAccess", "versionId": "v1"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "78108c51-ea08-444b-9fb7-40ce5ff72ca7", "record_id": "flaws_cloudtrail:0000430:78108c51-ea08-444b-9fb7-40ce5ff72ca7", "row_index": 430, "timestamp": "2017-05-27T05:00:04Z", "event_type": "GetPolicyVersion", "event_source": "iam.amazonaws.com", "principal": {"type": "AssumedRole", "arn": "arn:aws:sts::811596193553:assumed-role/SecurityMonkey/secmonkey", "account_id": "811596193553", "principal_id": "AROAUB2AA5FQRGAHITW4A:secmonkey", "user_name": null, "access_key_id": "ASIAI9QHHRMC9F6XQJXN", "session_issuer_arn": "arn:aws:iam::811596193553:role/SecurityMonkey", "session_issuer_user_name": "SecurityMonkey"}, "network": {"source_ip": "255.253.125.115", "user_agent": "Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56 Resource", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 1058, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "78108c51-ea08-444b-9fb7-40ce5ff72ca7", "eventTime": "2017-05-27T05:00:04Z", "eventName": "GetPolicyVersion", "eventSource": "iam.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.253.125.115", "userAgent": "Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56 Resource", "awsRegion": "us-east-1", "userIdentity": {"type": "AssumedRole", "principalId": "AROAUB2AA5FQRGAHITW4A:secmonkey", "arn": "arn:aws:sts::811596193553:assumed-role/SecurityMonkey/secmonkey", "accountId": "811596193553", "accessKeyId": "ASIAI9QHHRMC9F6XQJXN", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2017-05-27T04:59:38Z"}, "sessionIssuer": {"type": "Role", "principalId": "AROAUB2AA5FQRGAHITW4A", "arn": "arn:aws:iam::811596193553:role/SecurityMonkey", "accountId": "811596193553", "userName": "SecurityMonkey"}}}, "requestParameters": {"policyArn": "arn:aws:iam::aws:policy/AmazonWorkMailFullAccess", "versionId": "v3"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "9462f613-6c7d-40b6-ba78-00ba20b72d61", "record_id": "flaws_cloudtrail:0000431:9462f613-6c7d-40b6-ba78-00ba20b72d61", "row_index": 431, "timestamp": "2017-05-27T05:00:04Z", "event_type": "GetPolicyVersion", "event_source": "iam.amazonaws.com", "principal": {"type": "AssumedRole", "arn": "arn:aws:sts::811596193553:assumed-role/SecurityMonkey/secmonkey", "account_id": "811596193553", "principal_id": "AROAUB2AA5FQRGAHITW4A:secmonkey", "user_name": null, "access_key_id": "ASIAI9QHHRMC9F6XQJXN", "session_issuer_arn": "arn:aws:iam::811596193553:role/SecurityMonkey", "session_issuer_user_name": "SecurityMonkey"}, "network": {"source_ip": "255.253.125.115", "user_agent": "Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56 Resource", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 1067, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "9462f613-6c7d-40b6-ba78-00ba20b72d61", "eventTime": "2017-05-27T05:00:04Z", "eventName": "GetPolicyVersion", "eventSource": "iam.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.253.125.115", "userAgent": "Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56 Resource", "awsRegion": "us-east-1", "userIdentity": {"type": "AssumedRole", "principalId": "AROAUB2AA5FQRGAHITW4A:secmonkey", "arn": "arn:aws:sts::811596193553:assumed-role/SecurityMonkey/secmonkey", "accountId": "811596193553", "accessKeyId": "ASIAI9QHHRMC9F6XQJXN", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2017-05-27T04:59:38Z"}, "sessionIssuer": {"type": "Role", "principalId": "AROAUB2AA5FQRGAHITW4A", "arn": "arn:aws:iam::811596193553:role/SecurityMonkey", "accountId": "811596193553", "userName": "SecurityMonkey"}}}, "requestParameters": {"policyArn": "arn:aws:iam::aws:policy/AWSMarketplaceManageSubscriptions", "versionId": "v1"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "4fe8266d-913c-48a2-aced-ce587c5f6d2a", "record_id": "flaws_cloudtrail:0000432:4fe8266d-913c-48a2-aced-ce587c5f6d2a", "row_index": 432, "timestamp": "2017-05-27T05:00:04Z", "event_type": "GetPolicyVersion", "event_source": "iam.amazonaws.com", "principal": {"type": "AssumedRole", "arn": "arn:aws:sts::811596193553:assumed-role/SecurityMonkey/secmonkey", "account_id": "811596193553", "principal_id": "AROAUB2AA5FQRGAHITW4A:secmonkey", "user_name": null, "access_key_id": "ASIAI9QHHRMC9F6XQJXN", "session_issuer_arn": "arn:aws:iam::811596193553:role/SecurityMonkey", "session_issuer_user_name": "SecurityMonkey"}, "network": {"source_ip": "255.253.125.115", "user_agent": "Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56 Resource", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 1077, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "4fe8266d-913c-48a2-aced-ce587c5f6d2a", "eventTime": "2017-05-27T05:00:04Z", "eventName": "GetPolicyVersion", "eventSource": "iam.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.253.125.115", "userAgent": "Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56 Resource", "awsRegion": "us-east-1", "userIdentity": {"type": "AssumedRole", "principalId": "AROAUB2AA5FQRGAHITW4A:secmonkey", "arn": "arn:aws:sts::811596193553:assumed-role/SecurityMonkey/secmonkey", "accountId": "811596193553", "accessKeyId": "ASIAI9QHHRMC9F6XQJXN", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2017-05-27T04:59:38Z"}, "sessionIssuer": {"type": "Role", "principalId": "AROAUB2AA5FQRGAHITW4A", "arn": "arn:aws:iam::811596193553:role/SecurityMonkey", "accountId": "811596193553", "userName": "SecurityMonkey"}}}, "requestParameters": {"policyArn": "arn:aws:iam::aws:policy/AWSElasticBeanstalkCustomPlatformforEC2Role", "versionId": "v1"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "b9c50e83-8f97-4b77-b5b3-118bff519e62", "record_id": "flaws_cloudtrail:0000433:b9c50e83-8f97-4b77-b5b3-118bff519e62", "row_index": 433, "timestamp": "2017-05-27T05:00:04Z", "event_type": "GetPolicyVersion", "event_source": "iam.amazonaws.com", "principal": {"type": "AssumedRole", "arn": "arn:aws:sts::811596193553:assumed-role/SecurityMonkey/secmonkey", "account_id": "811596193553", "principal_id": "AROAUB2AA5FQRGAHITW4A:secmonkey", "user_name": null, "access_key_id": "ASIAI9QHHRMC9F6XQJXN", "session_issuer_arn": "arn:aws:iam::811596193553:role/SecurityMonkey", "session_issuer_user_name": "SecurityMonkey"}, "network": {"source_ip": "255.253.125.115", "user_agent": "Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56 Resource", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 1050, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "b9c50e83-8f97-4b77-b5b3-118bff519e62", "eventTime": "2017-05-27T05:00:04Z", "eventName": "GetPolicyVersion", "eventSource": "iam.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.253.125.115", "userAgent": "Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56 Resource", "awsRegion": "us-east-1", "userIdentity": {"type": "AssumedRole", "principalId": "AROAUB2AA5FQRGAHITW4A:secmonkey", "arn": "arn:aws:sts::811596193553:assumed-role/SecurityMonkey/secmonkey", "accountId": "811596193553", "accessKeyId": "ASIAI9QHHRMC9F6XQJXN", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2017-05-27T04:59:38Z"}, "sessionIssuer": {"type": "Role", "principalId": "AROAUB2AA5FQRGAHITW4A", "arn": "arn:aws:iam::811596193553:role/SecurityMonkey", "accountId": "811596193553", "userName": "SecurityMonkey"}}}, "requestParameters": {"policyArn": "arn:aws:iam::aws:policy/AWSSupportAccess", "versionId": "v1"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "a5c7a89d-4633-4a4c-bb91-585c15820f", "record_id": "flaws_cloudtrail:0000434:a5c7a89d-4633-4a4c-bb91-585c15820f", "row_index": 434, "timestamp": "2017-05-27T05:00:04Z", "event_type": "GetPolicyVersion", "event_source": "iam.amazonaws.com", "principal": {"type": "AssumedRole", "arn": "arn:aws:sts::811596193553:assumed-role/SecurityMonkey/secmonkey", "account_id": "811596193553", "principal_id": "AROAUB2AA5FQRGAHITW4A:secmonkey", "user_name": null, "access_key_id": "ASIAI9QHHRMC9F6XQJXN", "session_issuer_arn": "arn:aws:iam::811596193553:role/SecurityMonkey", "session_issuer_user_name": "SecurityMonkey"}, "network": {"source_ip": "255.253.125.115", "user_agent": "Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56 Resource", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 1085, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "a5c7a89d-4633-4a4c-bb91-585c15820f", "eventTime": "2017-05-27T05:00:04Z", "eventName": "GetPolicyVersion", "eventSource": "iam.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.253.125.115", "userAgent": "Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56 Resource", "awsRegion": "us-east-1", "userIdentity": {"type": "AssumedRole", "principalId": "AROAUB2AA5FQRGAHITW4A:secmonkey", "arn": "arn:aws:sts::811596193553:assumed-role/SecurityMonkey/secmonkey", "accountId": "811596193553", "accessKeyId": "ASIAI9QHHRMC9F6XQJXN", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2017-05-27T04:59:38Z"}, "sessionIssuer": {"type": "Role", "principalId": "AROAUB2AA5FQRGAHITW4A", "arn": "arn:aws:iam::811596193553:role/SecurityMonkey", "accountId": "811596193553", "userName": "SecurityMonkey"}}}, "requestParameters": {"policyArn": "arn:aws:iam::aws:policy/service-role/AmazonElasticMapReduceforAutoScalingRole", "versionId": "v1"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "4be25b2b-ebde-4539-aee8-558a53f6c2f2", "record_id": "flaws_cloudtrail:0000435:4be25b2b-ebde-4539-aee8-558a53f6c2f2", "row_index": 435, "timestamp": "2017-05-27T05:00:04Z", "event_type": "GetPolicyVersion", "event_source": "iam.amazonaws.com", "principal": {"type": "AssumedRole", "arn": "arn:aws:sts::811596193553:assumed-role/SecurityMonkey/secmonkey", "account_id": "811596193553", "principal_id": "AROAUB2AA5FQRGAHITW4A:secmonkey", "user_name": null, "access_key_id": "ASIAI9QHHRMC9F6XQJXN", "session_issuer_arn": "arn:aws:iam::811596193553:role/SecurityMonkey", "session_issuer_user_name": "SecurityMonkey"}, "network": {"source_ip": "255.253.125.115", "user_agent": "Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56 Resource", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 1063, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "4be25b2b-ebde-4539-aee8-558a53f6c2f2", "eventTime": "2017-05-27T05:00:04Z", "eventName": "GetPolicyVersion", "eventSource": "iam.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.253.125.115", "userAgent": "Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56 Resource", "awsRegion": "us-east-1", "userIdentity": {"type": "AssumedRole", "principalId": "AROAUB2AA5FQRGAHITW4A:secmonkey", "arn": "arn:aws:sts::811596193553:assumed-role/SecurityMonkey/secmonkey", "accountId": "811596193553", "accessKeyId": "ASIAI9QHHRMC9F6XQJXN", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2017-05-27T04:59:38Z"}, "sessionIssuer": {"type": "Role", "principalId": "AROAUB2AA5FQRGAHITW4A", "arn": "arn:aws:iam::811596193553:role/SecurityMonkey", "accountId": "811596193553", "userName": "SecurityMonkey"}}}, "requestParameters": {"policyArn": "arn:aws:iam::aws:policy/AWSLambdaInvocation-DynamoDB", "versionId": "v1"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "a1195d64-88a5-4e0c-b474-cb411d85192", "record_id": "flaws_cloudtrail:0000436:a1195d64-88a5-4e0c-b474-cb411d85192", "row_index": 436, "timestamp": "2017-05-27T05:00:04Z", "event_type": "GetPolicyVersion", "event_source": "iam.amazonaws.com", "principal": {"type": "AssumedRole", "arn": "arn:aws:sts::811596193553:assumed-role/SecurityMonkey/secmonkey", "account_id": "811596193553", "principal_id": "AROAUB2AA5FQRGAHITW4A:secmonkey", "user_name": null, "access_key_id": "ASIAI9QHHRMC9F6XQJXN", "session_issuer_arn": "arn:aws:iam::811596193553:role/SecurityMonkey", "session_issuer_user_name": "SecurityMonkey"}, "network": {"source_ip": "255.253.125.115", "user_agent": "Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56 Resource", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 1047, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "a1195d64-88a5-4e0c-b474-cb411d85192", "eventTime": "2017-05-27T05:00:04Z", "eventName": "GetPolicyVersion", "eventSource": "iam.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.253.125.115", "userAgent": "Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56 Resource", "awsRegion": "us-east-1", "userIdentity": {"type": "AssumedRole", "principalId": "AROAUB2AA5FQRGAHITW4A:secmonkey", "arn": "arn:aws:sts::811596193553:assumed-role/SecurityMonkey/secmonkey", "accountId": "811596193553", "accessKeyId": "ASIAI9QHHRMC9F6XQJXN", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2017-05-27T04:59:38Z"}, "sessionIssuer": {"type": "Role", "principalId": "AROAUB2AA5FQRGAHITW4A", "arn": "arn:aws:iam::811596193553:role/SecurityMonkey", "accountId": "811596193553", "userName": "SecurityMonkey"}}}, "requestParameters": {"policyArn": "arn:aws:iam::aws:policy/IAMUserSSHKeys", "versionId": "v1"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "68652e76-8cbd-42c3-8475-988130065527", "record_id": "flaws_cloudtrail:0000437:68652e76-8cbd-42c3-8475-988130065527", "row_index": 437, "timestamp": "2017-05-27T05:00:05Z", "event_type": "ListCertificates", "event_source": "acm.amazonaws.com", "principal": {"type": "AssumedRole", "arn": "arn:aws:sts::811596193553:assumed-role/SecurityMonkey/secmonkey", "account_id": "811596193553", "principal_id": "AROAUB2AA5FQRGAHITW4A:secmonkey", "user_name": null, "access_key_id": "ASIA4BTGKLN4ZW9WO8MH", "session_issuer_arn": "arn:aws:iam::811596193553:role/SecurityMonkey", "session_issuer_user_name": "SecurityMonkey"}, "network": {"source_ip": "255.253.125.115", "user_agent": "Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56", "aws_region": "ap-northeast-2"}, "resource_arns": [], "raw_record_size_bytes": 977, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "68652e76-8cbd-42c3-8475-988130065527", "eventTime": "2017-05-27T05:00:05Z", "eventName": "ListCertificates", "eventSource": "acm.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.253.125.115", "userAgent": "Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56", "awsRegion": "ap-northeast-2", "userIdentity": {"type": "AssumedRole", "principalId": "AROAUB2AA5FQRGAHITW4A:secmonkey", "arn": "arn:aws:sts::811596193553:assumed-role/SecurityMonkey/secmonkey", "accountId": "811596193553", "accessKeyId": "ASIA4BTGKLN4ZW9WO8MH", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2017-05-27T05:00:04Z"}, "sessionIssuer": {"type": "Role", "principalId": "AROAUB2AA5FQRGAHITW4A", "arn": "arn:aws:iam::811596193553:role/SecurityMonkey", "accountId": "811596193553", "userName": "SecurityMonkey"}}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "5ad5ba45-4519-485f-80d5-6e45dc9f6660", "record_id": "flaws_cloudtrail:0000438:5ad5ba45-4519-485f-80d5-6e45dc9f6660", "row_index": 438, "timestamp": "2017-05-27T05:00:05Z", "event_type": "GetPolicyVersion", "event_source": "iam.amazonaws.com", "principal": {"type": "AssumedRole", "arn": "arn:aws:sts::811596193553:assumed-role/SecurityMonkey/secmonkey", "account_id": "811596193553", "principal_id": "AROAUB2AA5FQRGAHITW4A:secmonkey", "user_name": null, "access_key_id": "ASIAI9QHHRMC9F6XQJXN", "session_issuer_arn": "arn:aws:iam::811596193553:role/SecurityMonkey", "session_issuer_user_name": "SecurityMonkey"}, "network": {"source_ip": "255.253.125.115", "user_agent": "Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56 Resource", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 1050, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "5ad5ba45-4519-485f-80d5-6e45dc9f6660", "eventTime": "2017-05-27T05:00:05Z", "eventName": "GetPolicyVersion", "eventSource": "iam.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.253.125.115", "userAgent": "Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56 Resource", "awsRegion": "us-east-1", "userIdentity": {"type": "AssumedRole", "principalId": "AROAUB2AA5FQRGAHITW4A:secmonkey", "arn": "arn:aws:sts::811596193553:assumed-role/SecurityMonkey/secmonkey", "accountId": "811596193553", "accessKeyId": "ASIAI9QHHRMC9F6XQJXN", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2017-05-27T04:59:38Z"}, "sessionIssuer": {"type": "Role", "principalId": "AROAUB2AA5FQRGAHITW4A", "arn": "arn:aws:iam::811596193553:role/SecurityMonkey", "accountId": "811596193553", "userName": "SecurityMonkey"}}}, "requestParameters": {"policyArn": "arn:aws:iam::aws:policy/AWSIoTFullAccess", "versionId": "v1"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "f86bd767-1ce1-43e3-b5b8-070998a7f708", "record_id": "flaws_cloudtrail:0000439:f86bd767-1ce1-43e3-b5b8-070998a7f708", "row_index": 439, "timestamp": "2017-05-27T05:00:05Z", "event_type": "GetPolicyVersion", "event_source": "iam.amazonaws.com", "principal": {"type": "AssumedRole", "arn": "arn:aws:sts::811596193553:assumed-role/SecurityMonkey/secmonkey", "account_id": "811596193553", "principal_id": "AROAUB2AA5FQRGAHITW4A:secmonkey", "user_name": null, "access_key_id": "ASIAI9QHHRMC9F6XQJXN", "session_issuer_arn": "arn:aws:iam::811596193553:role/SecurityMonkey", "session_issuer_user_name": "SecurityMonkey"}, "network": {"source_ip": "255.253.125.115", "user_agent": "Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56 Resource", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 1072, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "f86bd767-1ce1-43e3-b5b8-070998a7f708", "eventTime": "2017-05-27T05:00:05Z", "eventName": "GetPolicyVersion", "eventSource": "iam.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.253.125.115", "userAgent": "Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56 Resource", "awsRegion": "us-east-1", "userIdentity": {"type": "AssumedRole", "principalId": "AROAUB2AA5FQRGAHITW4A:secmonkey", "arn": "arn:aws:sts::811596193553:assumed-role/SecurityMonkey/secmonkey", "accountId": "811596193553", "accessKeyId": "ASIAI9QHHRMC9F6XQJXN", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2017-05-27T04:59:38Z"}, "sessionIssuer": {"type": "Role", "principalId": "AROAUB2AA5FQRGAHITW4A", "arn": "arn:aws:iam::811596193553:role/SecurityMonkey", "accountId": "811596193553", "userName": "SecurityMonkey"}}}, "requestParameters": {"policyArn": "arn:aws:iam::aws:policy/service-role/AWSQuickSightDescribeRDS", "versionId": "v1"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "206251abe-c60b-4f27-bebf-38accbcefc34", "record_id": "flaws_cloudtrail:0000440:206251abe-c60b-4f27-bebf-38accbcefc34", "row_index": 440, "timestamp": "2017-05-27T05:00:05Z", "event_type": "GetPolicyVersion", "event_source": "iam.amazonaws.com", "principal": {"type": "AssumedRole", "arn": "arn:aws:sts::811596193553:assumed-role/SecurityMonkey/secmonkey", "account_id": "811596193553", "principal_id": "AROAUB2AA5FQRGAHITW4A:secmonkey", "user_name": null, "access_key_id": "ASIAI9QHHRMC9F6XQJXN", "session_issuer_arn": "arn:aws:iam::811596193553:role/SecurityMonkey", "session_issuer_user_name": "SecurityMonkey"}, "network": {"source_ip": "255.253.125.115", "user_agent": "Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56 Resource", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 1075, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "206251abe-c60b-4f27-bebf-38accbcefc34", "eventTime": "2017-05-27T05:00:05Z", "eventName": "GetPolicyVersion", "eventSource": "iam.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.253.125.115", "userAgent": "Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56 Resource", "awsRegion": "us-east-1", "userIdentity": {"type": "AssumedRole", "principalId": "AROAUB2AA5FQRGAHITW4A:secmonkey", "arn": "arn:aws:sts::811596193553:assumed-role/SecurityMonkey/secmonkey", "accountId": "811596193553", "accessKeyId": "ASIAI9QHHRMC9F6XQJXN", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2017-05-27T04:59:38Z"}, "sessionIssuer": {"type": "Role", "principalId": "AROAUB2AA5FQRGAHITW4A", "arn": "arn:aws:iam::811596193553:role/SecurityMonkey", "accountId": "811596193553", "userName": "SecurityMonkey"}}}, "requestParameters": {"policyArn": "arn:aws:iam::aws:policy/service-role/AWSConfigRulesExecutionRole", "versionId": "v1"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "8113af4c-6039-496d-9808-0c91f4b4df95", "record_id": "flaws_cloudtrail:0000441:8113af4c-6039-496d-9808-0c91f4b4df95", "row_index": 441, "timestamp": "2017-05-27T05:00:05Z", "event_type": "GetPolicyVersion", "event_source": "iam.amazonaws.com", "principal": {"type": "AssumedRole", "arn": "arn:aws:sts::811596193553:assumed-role/SecurityMonkey/secmonkey", "account_id": "811596193553", "principal_id": "AROAUB2AA5FQRGAHITW4A:secmonkey", "user_name": null, "access_key_id": "ASIAI9QHHRMC9F6XQJXN", "session_issuer_arn": "arn:aws:iam::811596193553:role/SecurityMonkey", "session_issuer_user_name": "SecurityMonkey"}, "network": {"source_ip": "255.253.125.115", "user_agent": "Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56 Resource", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 1056, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "8113af4c-6039-496d-9808-0c91f4b4df95", "eventTime": "2017-05-27T05:00:05Z", "eventName": "GetPolicyVersion", "eventSource": "iam.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.253.125.115", "userAgent": "Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56 Resource", "awsRegion": "us-east-1", "userIdentity": {"type": "AssumedRole", "principalId": "AROAUB2AA5FQRGAHITW4A:secmonkey", "arn": "arn:aws:sts::811596193553:assumed-role/SecurityMonkey/secmonkey", "accountId": "811596193553", "accessKeyId": "ASIAI9QHHRMC9F6XQJXN", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2017-05-27T04:59:38Z"}, "sessionIssuer": {"type": "Role", "principalId": "AROAUB2AA5FQRGAHITW4A", "arn": "arn:aws:iam::811596193553:role/SecurityMonkey", "accountId": "811596193553", "userName": "SecurityMonkey"}}}, "requestParameters": {"policyArn": "arn:aws:iam::aws:policy/AmazonESReadOnlyAccess", "versionId": "v1"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "758cc856-3d4a-4d83-90d8-24d969733e", "record_id": "flaws_cloudtrail:0000442:758cc856-3d4a-4d83-90d8-24d969733e", "row_index": 442, "timestamp": "2017-05-27T05:00:05Z", "event_type": "GetPolicyVersion", "event_source": "iam.amazonaws.com", "principal": {"type": "AssumedRole", "arn": "arn:aws:sts::811596193553:assumed-role/SecurityMonkey/secmonkey", "account_id": "811596193553", "principal_id": "AROAUB2AA5FQRGAHITW4A:secmonkey", "user_name": null, "access_key_id": "ASIAI9QHHRMC9F6XQJXN", "session_issuer_arn": "arn:aws:iam::811596193553:role/SecurityMonkey", "session_issuer_user_name": "SecurityMonkey"}, "network": {"source_ip": "255.253.125.115", "user_agent": "Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56 Resource", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 1059, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "758cc856-3d4a-4d83-90d8-24d969733e", "eventTime": "2017-05-27T05:00:05Z", "eventName": "GetPolicyVersion", "eventSource": "iam.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.253.125.115", "userAgent": "Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56 Resource", "awsRegion": "us-east-1", "userIdentity": {"type": "AssumedRole", "principalId": "AROAUB2AA5FQRGAHITW4A:secmonkey", "arn": "arn:aws:sts::811596193553:assumed-role/SecurityMonkey/secmonkey", "accountId": "811596193553", "accessKeyId": "ASIAI9QHHRMC9F6XQJXN", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2017-05-27T04:59:38Z"}, "sessionIssuer": {"type": "Role", "principalId": "AROAUB2AA5FQRGAHITW4A", "arn": "arn:aws:iam::811596193553:role/SecurityMonkey", "accountId": "811596193553", "userName": "SecurityMonkey"}}}, "requestParameters": {"policyArn": "arn:aws:iam::aws:policy/AWSCodeDeployDeployerAccess", "versionId": "v1"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "1158af98-744c-4cdd-bf5f-6b3df86b1722", "record_id": "flaws_cloudtrail:0000443:1158af98-744c-4cdd-bf5f-6b3df86b1722", "row_index": 443, "timestamp": "2017-05-27T05:00:05Z", "event_type": "GetPolicyVersion", "event_source": "iam.amazonaws.com", "principal": {"type": "AssumedRole", "arn": "arn:aws:sts::811596193553:assumed-role/SecurityMonkey/secmonkey", "account_id": "811596193553", "principal_id": "AROAUB2AA5FQRGAHITW4A:secmonkey", "user_name": null, "access_key_id": "ASIAI9QHHRMC9F6XQJXN", "session_issuer_arn": "arn:aws:iam::811596193553:role/SecurityMonkey", "session_issuer_user_name": "SecurityMonkey"}, "network": {"source_ip": "255.253.125.115", "user_agent": "Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56 Resource", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 1055, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "1158af98-744c-4cdd-bf5f-6b3df86b1722", "eventTime": "2017-05-27T05:00:05Z", "eventName": "GetPolicyVersion", "eventSource": "iam.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.253.125.115", "userAgent": "Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56 Resource", "awsRegion": "us-east-1", "userIdentity": {"type": "AssumedRole", "principalId": "AROAUB2AA5FQRGAHITW4A:secmonkey", "arn": "arn:aws:sts::811596193553:assumed-role/SecurityMonkey/secmonkey", "accountId": "811596193553", "accessKeyId": "ASIAI9QHHRMC9F6XQJXN", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2017-05-27T04:59:38Z"}, "sessionIssuer": {"type": "Role", "principalId": "AROAUB2AA5FQRGAHITW4A", "arn": "arn:aws:iam::811596193553:role/SecurityMonkey", "accountId": "811596193553", "userName": "SecurityMonkey"}}}, "requestParameters": {"policyArn": "arn:aws:iam::aws:policy/AmazonPollyFullAccess", "versionId": "v1"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "2d44479-fcdb-4e1b-8040-998a2df3e8b7", "record_id": "flaws_cloudtrail:0000444:2d44479-fcdb-4e1b-8040-998a2df3e8b7", "row_index": 444, "timestamp": "2017-05-27T05:00:05Z", "event_type": "GetPolicyVersion", "event_source": "iam.amazonaws.com", "principal": {"type": "AssumedRole", "arn": "arn:aws:sts::811596193553:assumed-role/SecurityMonkey/secmonkey", "account_id": "811596193553", "principal_id": "AROAUB2AA5FQRGAHITW4A:secmonkey", "user_name": null, "access_key_id": "ASIAI9QHHRMC9F6XQJXN", "session_issuer_arn": "arn:aws:iam::811596193553:role/SecurityMonkey", "session_issuer_user_name": "SecurityMonkey"}, "network": {"source_ip": "255.253.125.115", "user_agent": "Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56 Resource", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 1075, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "2d44479-fcdb-4e1b-8040-998a2df3e8b7", "eventTime": "2017-05-27T05:00:05Z", "eventName": "GetPolicyVersion", "eventSource": "iam.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.253.125.115", "userAgent": "Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56 Resource", "awsRegion": "us-east-1", "userIdentity": {"type": "AssumedRole", "principalId": "AROAUB2AA5FQRGAHITW4A:secmonkey", "arn": "arn:aws:sts::811596193553:assumed-role/SecurityMonkey/secmonkey", "accountId": "811596193553", "accessKeyId": "ASIAI9QHHRMC9F6XQJXN", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2017-05-27T04:59:38Z"}, "sessionIssuer": {"type": "Role", "principalId": "AROAUB2AA5FQRGAHITW4A", "arn": "arn:aws:iam::811596193553:role/SecurityMonkey", "accountId": "811596193553", "userName": "SecurityMonkey"}}}, "requestParameters": {"policyArn": "arn:aws:iam::aws:policy/service-role/AmazonSSMMaintenanceWindowRole", "versionId": "v1"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "53edf906-5c3e-462c-886d-371306abadde", "record_id": "flaws_cloudtrail:0000445:53edf906-5c3e-462c-886d-371306abadde", "row_index": 445, "timestamp": "2017-05-27T05:00:05Z", "event_type": "GetPolicyVersion", "event_source": "iam.amazonaws.com", "principal": {"type": "AssumedRole", "arn": "arn:aws:sts::811596193553:assumed-role/SecurityMonkey/secmonkey", "account_id": "811596193553", "principal_id": "AROAUB2AA5FQRGAHITW4A:secmonkey", "user_name": null, "access_key_id": "ASIAI9QHHRMC9F6XQJXN", "session_issuer_arn": "arn:aws:iam::811596193553:role/SecurityMonkey", "session_issuer_user_name": "SecurityMonkey"}, "network": {"source_ip": "255.253.125.115", "user_agent": "Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56 Resource", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 1079, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "53edf906-5c3e-462c-886d-371306abadde", "eventTime": "2017-05-27T05:00:05Z", "eventName": "GetPolicyVersion", "eventSource": "iam.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.253.125.115", "userAgent": "Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56 Resource", "awsRegion": "us-east-1", "userIdentity": {"type": "AssumedRole", "principalId": "AROAUB2AA5FQRGAHITW4A:secmonkey", "arn": "arn:aws:sts::811596193553:assumed-role/SecurityMonkey/secmonkey", "accountId": "811596193553", "accessKeyId": "ASIAI9QHHRMC9F6XQJXN", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2017-05-27T04:59:38Z"}, "sessionIssuer": {"type": "Role", "principalId": "AROAUB2AA5FQRGAHITW4A", "arn": "arn:aws:iam::811596193553:role/SecurityMonkey", "accountId": "811596193553", "userName": "SecurityMonkey"}}}, "requestParameters": {"policyArn": "arn:aws:iam::aws:policy/service-role/AmazonRDSEnhancedMonitoringRole", "versionId": "v1"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "faa1a61f-19c6-40a4-af6b-48532e22f25c", "record_id": "flaws_cloudtrail:0000446:faa1a61f-19c6-40a4-af6b-48532e22f25c", "row_index": 446, "timestamp": "2017-05-27T05:00:05Z", "event_type": "GetPolicyVersion", "event_source": "iam.amazonaws.com", "principal": {"type": "AssumedRole", "arn": "arn:aws:sts::811596193553:assumed-role/SecurityMonkey/secmonkey", "account_id": "811596193553", "principal_id": "AROAUB2AA5FQRGAHITW4A:secmonkey", "user_name": null, "access_key_id": "ASIAI9QHHRMC9F6XQJXN", "session_issuer_arn": "arn:aws:iam::811596193553:role/SecurityMonkey", "session_issuer_user_name": "SecurityMonkey"}, "network": {"source_ip": "255.253.125.115", "user_agent": "Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56 Resource", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 1053, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "faa1a61f-19c6-40a4-af6b-48532e22f25c", "eventTime": "2017-05-27T05:00:05Z", "eventName": "GetPolicyVersion", "eventSource": "iam.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.253.125.115", "userAgent": "Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56 Resource", "awsRegion": "us-east-1", "userIdentity": {"type": "AssumedRole", "principalId": "AROAUB2AA5FQRGAHITW4A:secmonkey", "arn": "arn:aws:sts::811596193553:assumed-role/SecurityMonkey/secmonkey", "accountId": "811596193553", "accessKeyId": "ASIAI9QHHRMC9F6XQJXN", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2017-05-27T04:59:38Z"}, "sessionIssuer": {"type": "Role", "principalId": "AROAUB2AA5FQRGAHITW4A", "arn": "arn:aws:iam::811596193553:role/SecurityMonkey", "accountId": "811596193553", "userName": "SecurityMonkey"}}}, "requestParameters": {"policyArn": "arn:aws:iam::aws:policy/AmazonLexFullAccess", "versionId": "v3"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "c4c54d71-8fad-4912-8f04-c38ce9a78fde", "record_id": "flaws_cloudtrail:0000447:c4c54d71-8fad-4912-8f04-c38ce9a78fde", "row_index": 447, "timestamp": "2017-05-27T05:00:05Z", "event_type": "GetPolicyVersion", "event_source": "iam.amazonaws.com", "principal": {"type": "AssumedRole", "arn": "arn:aws:sts::811596193553:assumed-role/SecurityMonkey/secmonkey", "account_id": "811596193553", "principal_id": "AROAUB2AA5FQRGAHITW4A:secmonkey", "user_name": null, "access_key_id": "ASIAI9QHHRMC9F6XQJXN", "session_issuer_arn": "arn:aws:iam::811596193553:role/SecurityMonkey", "session_issuer_user_name": "SecurityMonkey"}, "network": {"source_ip": "255.253.125.115", "user_agent": "Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56 Resource", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 1078, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "c4c54d71-8fad-4912-8f04-c38ce9a78fde", "eventTime": "2017-05-27T05:00:05Z", "eventName": "GetPolicyVersion", "eventSource": "iam.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.253.125.115", "userAgent": "Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56 Resource", "awsRegion": "us-east-1", "userIdentity": {"type": "AssumedRole", "principalId": "AROAUB2AA5FQRGAHITW4A:secmonkey", "arn": "arn:aws:sts::811596193553:assumed-role/SecurityMonkey/secmonkey", "accountId": "811596193553", "accessKeyId": "ASIAI9QHHRMC9F6XQJXN", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2017-05-27T04:59:38Z"}, "sessionIssuer": {"type": "Role", "principalId": "AROAUB2AA5FQRGAHITW4A", "arn": "arn:aws:iam::811596193553:role/SecurityMonkey", "accountId": "811596193553", "userName": "SecurityMonkey"}}}, "requestParameters": {"policyArn": "arn:aws:iam::aws:policy/service-role/AWSLambdaVPCAccessExecutionRole", "versionId": "v1"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "780356d5-bd2b-4f05-9521-c72209fb1", "record_id": "flaws_cloudtrail:0000448:780356d5-bd2b-4f05-9521-c72209fb1", "row_index": 448, "timestamp": "2017-05-27T05:00:05Z", "event_type": "GetPolicyVersion", "event_source": "iam.amazonaws.com", "principal": {"type": "AssumedRole", "arn": "arn:aws:sts::811596193553:assumed-role/SecurityMonkey/secmonkey", "account_id": "811596193553", "principal_id": "AROAUB2AA5FQRGAHITW4A:secmonkey", "user_name": null, "access_key_id": "ASIAI9QHHRMC9F6XQJXN", "session_issuer_arn": "arn:aws:iam::811596193553:role/SecurityMonkey", "session_issuer_user_name": "SecurityMonkey"}, "network": {"source_ip": "255.253.125.115", "user_agent": "Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56 Resource", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 1050, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "780356d5-bd2b-4f05-9521-c72209fb1", "eventTime": "2017-05-27T05:00:05Z", "eventName": "GetPolicyVersion", "eventSource": "iam.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.253.125.115", "userAgent": "Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56 Resource", "awsRegion": "us-east-1", "userIdentity": {"type": "AssumedRole", "principalId": "AROAUB2AA5FQRGAHITW4A:secmonkey", "arn": "arn:aws:sts::811596193553:assumed-role/SecurityMonkey/secmonkey", "accountId": "811596193553", "accessKeyId": "ASIAI9QHHRMC9F6XQJXN", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2017-05-27T04:59:38Z"}, "sessionIssuer": {"type": "Role", "principalId": "AROAUB2AA5FQRGAHITW4A", "arn": "arn:aws:iam::811596193553:role/SecurityMonkey", "accountId": "811596193553", "userName": "SecurityMonkey"}}}, "requestParameters": {"policyArn": "arn:aws:iam::aws:policy/AmazonLexRunBotsOnly", "versionId": "v1"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "57d6b521-d312-4ef2-ab6d-5f328435dd7e", "record_id": "flaws_cloudtrail:0000449:57d6b521-d312-4ef2-ab6d-5f328435dd7e", "row_index": 449, "timestamp": "2017-05-27T05:00:05Z", "event_type": "GetPolicyVersion", "event_source": "iam.amazonaws.com", "principal": {"type": "AssumedRole", "arn": "arn:aws:sts::811596193553:assumed-role/SecurityMonkey/secmonkey", "account_id": "811596193553", "principal_id": "AROAUB2AA5FQRGAHITW4A:secmonkey", "user_name": null, "access_key_id": "ASIAI9QHHRMC9F6XQJXN", "session_issuer_arn": "arn:aws:iam::811596193553:role/SecurityMonkey", "session_issuer_user_name": "SecurityMonkey"}, "network": {"source_ip": "255.253.125.115", "user_agent": "Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56 Resource", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 1053, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "57d6b521-d312-4ef2-ab6d-5f328435dd7e", "eventTime": "2017-05-27T05:00:05Z", "eventName": "GetPolicyVersion", "eventSource": "iam.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.253.125.115", "userAgent": "Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56 Resource", "awsRegion": "us-east-1", "userIdentity": {"type": "AssumedRole", "principalId": "AROAUB2AA5FQRGAHITW4A:secmonkey", "arn": "arn:aws:sts::811596193553:assumed-role/SecurityMonkey/secmonkey", "accountId": "811596193553", "accessKeyId": "ASIAI9QHHRMC9F6XQJXN", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2017-05-27T04:59:38Z"}, "sessionIssuer": {"type": "Role", "principalId": "AROAUB2AA5FQRGAHITW4A", "arn": "arn:aws:iam::811596193553:role/SecurityMonkey", "accountId": "811596193553", "userName": "SecurityMonkey"}}}, "requestParameters": {"policyArn": "arn:aws:iam::aws:policy/AmazonSNSFullAccess", "versionId": "v1"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "46dc3d1f-2cce-48f0-b8f9-1fb33fc6f7c9", "record_id": "flaws_cloudtrail:0000450:46dc3d1f-2cce-48f0-b8f9-1fb33fc6f7c9", "row_index": 450, "timestamp": "2017-05-27T05:00:05Z", "event_type": "AssumeRole", "event_source": "sts.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/SecurityMokey", "account_id": "811596193553", "principal_id": "AIDAQ9SRE1SZZZ4Q4UOJH", "user_name": "SecurityMokey", "access_key_id": "AKIAXJ0III4JBKZDXGXN", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "255.253.125.115", "user_agent": "Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56", "aws_region": "us-east-1"}, "resource_arns": ["arn:aws:iam::811596193553:role/SecurityMonkey"], "raw_record_size_bytes": 1453, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "resources", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "46dc3d1f-2cce-48f0-b8f9-1fb33fc6f7c9", "eventTime": "2017-05-27T05:00:05Z", "eventName": "AssumeRole", "eventSource": "sts.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.253.125.115", "userAgent": "Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDAQ9SRE1SZZZ4Q4UOJH", "arn": "arn:aws:iam::811596193553:user/SecurityMokey", "accountId": "811596193553", "accessKeyId": "AKIAXJ0III4JBKZDXGXN", "userName": "SecurityMokey"}, "requestParameters": {"roleArn": "arn:aws:iam::811596193553:role/SecurityMonkey", "roleSessionName": "secmonkey"}, "responseElements": {"credentials": {"accessKeyId": "ASIAT1I6FGQLMNF82YES", "expiration": "May 27, 2017 6:00:05 AM", "sessionToken": "FQoDYXdzECYaDFsOhSgSqXdtt7SaQCLMAX/HyeTJVjpH0wlvKu1faMX487gdZHbanESQh4if4Dhwz3t3/Af5NxsT1hRTiXhljpj3Ng+HKlh6HQ+Oc1jKwqRQ8ILGAg59PycTvTpeHLnQqZRuG4hAxpeg9cHJrDKsa2B2wPfy7F62G+tifW7LGYzwsPFEEDzHvwAhUnxgKQcaAAsY77rUWpXX7MxBJ0wXxZCT53tH/NoHxe7R5degDIsCuMth+uYQkjmzt8qqvn+Vy5HjmNRWoZyn44KqN2TY8IbAIEkm3KokIwZtNCjVj6TJBQ=="}, "assumedRoleUser": {"assumedRoleId": "AROAUB2AA5FQRGAHITW4A:secmonkey", "arn": "arn:aws:sts::811596193553:assumed-role/SecurityMonkey/secmonkey"}}, "resources": [{"ARN": "arn:aws:iam::811596193553:role/SecurityMonkey", "accountId": "811596193553", "type": "AWS::IAM::Role"}]}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "39eded67-b929-4479-8cfa-d15a12a15b96", "record_id": "flaws_cloudtrail:0000451:39eded67-b929-4479-8cfa-d15a12a15b96", "row_index": 451, "timestamp": "2017-05-27T05:00:06Z", "event_type": "ListCertificates", "event_source": "acm.amazonaws.com", "principal": {"type": "AssumedRole", "arn": "arn:aws:sts::811596193553:assumed-role/SecurityMonkey/secmonkey", "account_id": "811596193553", "principal_id": "AROAUB2AA5FQRGAHITW4A:secmonkey", "user_name": null, "access_key_id": "ASIAT1I6FGQLMNF82YES", "session_issuer_arn": "arn:aws:iam::811596193553:role/SecurityMonkey", "session_issuer_user_name": "SecurityMonkey"}, "network": {"source_ip": "255.253.125.115", "user_agent": "Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56", "aws_region": "ap-northeast-1"}, "resource_arns": [], "raw_record_size_bytes": 975, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "39eded67-b929-4479-8cfa-d15a12a15b96", "eventTime": "2017-05-27T05:00:06Z", "eventName": "ListCertificates", "eventSource": "acm.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.253.125.115", "userAgent": "Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56", "awsRegion": "ap-northeast-1", "userIdentity": {"type": "AssumedRole", "principalId": "AROAUB2AA5FQRGAHITW4A:secmonkey", "arn": "arn:aws:sts::811596193553:assumed-role/SecurityMonkey/secmonkey", "accountId": "811596193553", "accessKeyId": "ASIAT1I6FGQLMNF82YES", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2017-05-27T05:00:05Z"}, "sessionIssuer": {"type": "Role", "principalId": "AROAUB2AA5FQRGAHITW4A", "arn": "arn:aws:iam::811596193553:role/SecurityMonkey", "accountId": "811596193553", "userName": "SecurityMonkey"}}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "b62db174-cb60-4436-89c5-35cd6be86e74", "record_id": "flaws_cloudtrail:0000452:b62db174-cb60-4436-89c5-35cd6be86e74", "row_index": 452, "timestamp": "2017-05-27T05:00:06Z", "event_type": "AssumeRole", "event_source": "sts.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/SecurityMokey", "account_id": "811596193553", "principal_id": "AIDAQ9SRE1SZZZ4Q4UOJH", "user_name": "SecurityMokey", "access_key_id": "AKIAXJ0III4JBKZDXGXN", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "255.253.125.115", "user_agent": "Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56", "aws_region": "us-east-1"}, "resource_arns": ["arn:aws:iam::811596193553:role/SecurityMonkey"], "raw_record_size_bytes": 1453, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "resources", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "b62db174-cb60-4436-89c5-35cd6be86e74", "eventTime": "2017-05-27T05:00:06Z", "eventName": "AssumeRole", "eventSource": "sts.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.253.125.115", "userAgent": "Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDAQ9SRE1SZZZ4Q4UOJH", "arn": "arn:aws:iam::811596193553:user/SecurityMokey", "accountId": "811596193553", "accessKeyId": "AKIAXJ0III4JBKZDXGXN", "userName": "SecurityMokey"}, "requestParameters": {"roleArn": "arn:aws:iam::811596193553:role/SecurityMonkey", "roleSessionName": "secmonkey"}, "responseElements": {"credentials": {"accessKeyId": "ASIA8OQF6COSFDPDXP1X", "expiration": "May 27, 2017 6:00:06 AM", "sessionToken": "FQoDYXdzECYaDK1NxP5ajg2lbUDSDyLMAed4bBv5Vaf8R7uxMaTNld0N9e8iJ6eGCFv4TR6I+onGnkWaPTPIwPOU4bIfmUXenNcz6Wkx+ewez6I2gJrDe6tgCHalKJ9klo5YlyJR7F8ArxtulVYWpONioz3C59oybH7gDKAbdTG4mqX4EXcP6HLBreYtzrbliBzBIhhoXSNQsTzsbPS5M1DPyRcFwS4AE7KOiAUs/+jm2o2ZnrqVpXVh3msVXWWj/fkRdaD2vNDwnaBwBV4MCpcEzLwbPIFKOVHmkIovd71yd9EEgCjWj6TJBQ=="}, "assumedRoleUser": {"assumedRoleId": "AROAUB2AA5FQRGAHITW4A:secmonkey", "arn": "arn:aws:sts::811596193553:assumed-role/SecurityMonkey/secmonkey"}}, "resources": [{"ARN": "arn:aws:iam::811596193553:role/SecurityMonkey", "accountId": "811596193553", "type": "AWS::IAM::Role"}]}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "19d0393e-803d-4b8b-b25b-22c0ea0c4518", "record_id": "flaws_cloudtrail:0000453:19d0393e-803d-4b8b-b25b-22c0ea0c4518", "row_index": 453, "timestamp": "2017-05-27T05:00:06Z", "event_type": "GetPolicyVersion", "event_source": "iam.amazonaws.com", "principal": {"type": "AssumedRole", "arn": "arn:aws:sts::811596193553:assumed-role/SecurityMonkey/secmonkey", "account_id": "811596193553", "principal_id": "AROAUB2AA5FQRGAHITW4A:secmonkey", "user_name": null, "access_key_id": "ASIAI9QHHRMC9F6XQJXN", "session_issuer_arn": "arn:aws:iam::811596193553:role/SecurityMonkey", "session_issuer_user_name": "SecurityMonkey"}, "network": {"source_ip": "255.253.125.115", "user_agent": "Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56 Resource", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 1059, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "19d0393e-803d-4b8b-b25b-22c0ea0c4518", "eventTime": "2017-05-27T05:00:06Z", "eventName": "GetPolicyVersion", "eventSource": "iam.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.253.125.115", "userAgent": "Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56 Resource", "awsRegion": "us-east-1", "userIdentity": {"type": "AssumedRole", "principalId": "AROAUB2AA5FQRGAHITW4A:secmonkey", "arn": "arn:aws:sts::811596193553:assumed-role/SecurityMonkey/secmonkey", "accountId": "811596193553", "accessKeyId": "ASIAI9QHHRMC9F6XQJXN", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2017-05-27T04:59:38Z"}, "sessionIssuer": {"type": "Role", "principalId": "AROAUB2AA5FQRGAHITW4A", "arn": "arn:aws:iam::811596193553:role/SecurityMonkey", "accountId": "811596193553", "userName": "SecurityMonkey"}}}, "requestParameters": {"policyArn": "arn:aws:iam::aws:policy/AWSOpsWorksCloudWatchLogs", "versionId": "v1"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "866b85a8-c067-4165-b4e6-364daf50f1a2", "record_id": "flaws_cloudtrail:0000454:866b85a8-c067-4165-b4e6-364daf50f1a2", "row_index": 454, "timestamp": "2017-05-27T05:00:06Z", "event_type": "GetPolicyVersion", "event_source": "iam.amazonaws.com", "principal": {"type": "AssumedRole", "arn": "arn:aws:sts::811596193553:assumed-role/SecurityMonkey/secmonkey", "account_id": "811596193553", "principal_id": "AROAUB2AA5FQRGAHITW4A:secmonkey", "user_name": null, "access_key_id": "ASIAI9QHHRMC9F6XQJXN", "session_issuer_arn": "arn:aws:iam::811596193553:role/SecurityMonkey", "session_issuer_user_name": "SecurityMonkey"}, "network": {"source_ip": "255.253.125.115", "user_agent": "Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56 Resource", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 1059, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "866b85a8-c067-4165-b4e6-364daf50f1a2", "eventTime": "2017-05-27T05:00:06Z", "eventName": "GetPolicyVersion", "eventSource": "iam.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.253.125.115", "userAgent": "Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56 Resource", "awsRegion": "us-east-1", "userIdentity": {"type": "AssumedRole", "principalId": "AROAUB2AA5FQRGAHITW4A:secmonkey", "arn": "arn:aws:sts::811596193553:assumed-role/SecurityMonkey/secmonkey", "accountId": "811596193553", "accessKeyId": "ASIAI9QHHRMC9F6XQJXN", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2017-05-27T04:59:38Z"}, "sessionIssuer": {"type": "Role", "principalId": "AROAUB2AA5FQRGAHITW4A", "arn": "arn:aws:iam::811596193553:role/SecurityMonkey", "accountId": "811596193553", "userName": "SecurityMonkey"}}}, "requestParameters": {"policyArn": "arn:aws:iam::aws:policy/CloudSearchReadOnlyAccess", "versionId": "v1"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "0148d61f-1400-428c-9526-34683d04d9", "record_id": "flaws_cloudtrail:0000455:0148d61f-1400-428c-9526-34683d04d9", "row_index": 455, "timestamp": "2017-05-27T05:00:06Z", "event_type": "GetPolicyVersion", "event_source": "iam.amazonaws.com", "principal": {"type": "AssumedRole", "arn": "arn:aws:sts::811596193553:assumed-role/SecurityMonkey/secmonkey", "account_id": "811596193553", "principal_id": "AROAUB2AA5FQRGAHITW4A:secmonkey", "user_name": null, "access_key_id": "ASIAI9QHHRMC9F6XQJXN", "session_issuer_arn": "arn:aws:iam::811596193553:role/SecurityMonkey", "session_issuer_user_name": "SecurityMonkey"}, "network": {"source_ip": "255.253.125.115", "user_agent": "Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56 Resource", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 1055, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "0148d61f-1400-428c-9526-34683d04d9", "eventTime": "2017-05-27T05:00:06Z", "eventName": "GetPolicyVersion", "eventSource": "iam.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.253.125.115", "userAgent": "Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56 Resource", "awsRegion": "us-east-1", "userIdentity": {"type": "AssumedRole", "principalId": "AROAUB2AA5FQRGAHITW4A:secmonkey", "arn": "arn:aws:sts::811596193553:assumed-role/SecurityMonkey/secmonkey", "accountId": "811596193553", "accessKeyId": "ASIAI9QHHRMC9F6XQJXN", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2017-05-27T04:59:38Z"}, "sessionIssuer": {"type": "Role", "principalId": "AROAUB2AA5FQRGAHITW4A", "arn": "arn:aws:iam::811596193553:role/SecurityMonkey", "accountId": "811596193553", "userName": "SecurityMonkey"}}}, "requestParameters": {"policyArn": "arn:aws:iam::aws:policy/AWSGreengrassFullAccess", "versionId": "v1"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "74fb50a0-9bcb-448d-9674-5624e04582b0", "record_id": "flaws_cloudtrail:0000456:74fb50a0-9bcb-448d-9674-5624e04582b0", "row_index": 456, "timestamp": "2017-05-27T05:00:06Z", "event_type": "GetPolicyVersion", "event_source": "iam.amazonaws.com", "principal": {"type": "AssumedRole", "arn": "arn:aws:sts::811596193553:assumed-role/SecurityMonkey/secmonkey", "account_id": "811596193553", "principal_id": "AROAUB2AA5FQRGAHITW4A:secmonkey", "user_name": null, "access_key_id": "ASIAI9QHHRMC9F6XQJXN", "session_issuer_arn": "arn:aws:iam::811596193553:role/SecurityMonkey", "session_issuer_user_name": "SecurityMonkey"}, "network": {"source_ip": "255.253.125.115", "user_agent": "Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56 Resource", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 1065, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "74fb50a0-9bcb-448d-9674-5624e04582b0", "eventTime": "2017-05-27T05:00:06Z", "eventName": "GetPolicyVersion", "eventSource": "iam.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.253.125.115", "userAgent": "Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56 Resource", "awsRegion": "us-east-1", "userIdentity": {"type": "AssumedRole", "principalId": "AROAUB2AA5FQRGAHITW4A:secmonkey", "arn": "arn:aws:sts::811596193553:assumed-role/SecurityMonkey/secmonkey", "accountId": "811596193553", "accessKeyId": "ASIAI9QHHRMC9F6XQJXN", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2017-05-27T04:59:38Z"}, "sessionIssuer": {"type": "Role", "principalId": "AROAUB2AA5FQRGAHITW4A", "arn": "arn:aws:iam::811596193553:role/SecurityMonkey", "accountId": "811596193553", "userName": "SecurityMonkey"}}}, "requestParameters": {"policyArn": "arn:aws:iam::aws:policy/AWSCloudFormationReadOnlyAccess", "versionId": "v1"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "9c5bc0c6-e3ac-421a-876e-35990bf169a2", "record_id": "flaws_cloudtrail:0000457:9c5bc0c6-e3ac-421a-876e-35990bf169a2", "row_index": 457, "timestamp": "2017-05-27T05:00:06Z", "event_type": "GetPolicyVersion", "event_source": "iam.amazonaws.com", "principal": {"type": "AssumedRole", "arn": "arn:aws:sts::811596193553:assumed-role/SecurityMonkey/secmonkey", "account_id": "811596193553", "principal_id": "AROAUB2AA5FQRGAHITW4A:secmonkey", "user_name": null, "access_key_id": "ASIAI9QHHRMC9F6XQJXN", "session_issuer_arn": "arn:aws:iam::811596193553:role/SecurityMonkey", "session_issuer_user_name": "SecurityMonkey"}, "network": {"source_ip": "255.253.125.115", "user_agent": "Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56 Resource", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 1057, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "9c5bc0c6-e3ac-421a-876e-35990bf169a2", "eventTime": "2017-05-27T05:00:06Z", "eventName": "GetPolicyVersion", "eventSource": "iam.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.253.125.115", "userAgent": "Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56 Resource", "awsRegion": "us-east-1", "userIdentity": {"type": "AssumedRole", "principalId": "AROAUB2AA5FQRGAHITW4A:secmonkey", "arn": "arn:aws:sts::811596193553:assumed-role/SecurityMonkey/secmonkey", "accountId": "811596193553", "accessKeyId": "ASIAI9QHHRMC9F6XQJXN", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2017-05-27T04:59:38Z"}, "sessionIssuer": {"type": "Role", "principalId": "AROAUB2AA5FQRGAHITW4A", "arn": "arn:aws:iam::811596193553:role/SecurityMonkey", "accountId": "811596193553", "userName": "SecurityMonkey"}}}, "requestParameters": {"policyArn": "arn:aws:iam::aws:policy/AmazonRoute53FullAccess", "versionId": "v2"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "32dc3c28-2692-4953-9c95-187d3e61bd46", "record_id": "flaws_cloudtrail:0000458:32dc3c28-2692-4953-9c95-187d3e61bd46", "row_index": 458, "timestamp": "2017-05-27T05:00:06Z", "event_type": "GetPolicyVersion", "event_source": "iam.amazonaws.com", "principal": {"type": "AssumedRole", "arn": "arn:aws:sts::811596193553:assumed-role/SecurityMonkey/secmonkey", "account_id": "811596193553", "principal_id": "AROAUB2AA5FQRGAHITW4A:secmonkey", "user_name": null, "access_key_id": "ASIAI9QHHRMC9F6XQJXN", "session_issuer_arn": "arn:aws:iam::811596193553:role/SecurityMonkey", "session_issuer_user_name": "SecurityMonkey"}, "network": {"source_ip": "255.253.125.115", "user_agent": "Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56 Resource", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 1060, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "32dc3c28-2692-4953-9c95-187d3e61bd46", "eventTime": "2017-05-27T05:00:06Z", "eventName": "GetPolicyVersion", "eventSource": "iam.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.253.125.115", "userAgent": "Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56 Resource", "awsRegion": "us-east-1", "userIdentity": {"type": "AssumedRole", "principalId": "AROAUB2AA5FQRGAHITW4A:secmonkey", "arn": "arn:aws:sts::811596193553:assumed-role/SecurityMonkey/secmonkey", "accountId": "811596193553", "accessKeyId": "ASIAI9QHHRMC9F6XQJXN", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2017-05-27T04:59:38Z"}, "sessionIssuer": {"type": "Role", "principalId": "AROAUB2AA5FQRGAHITW4A", "arn": "arn:aws:iam::811596193553:role/SecurityMonkey", "accountId": "811596193553", "userName": "SecurityMonkey"}}}, "requestParameters": {"policyArn": "arn:aws:iam::aws:policy/service-role/AWSLambdaRole", "versionId": "v1"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "61d6e554-717e-4c4b-bbaf-3d99398ad845", "record_id": "flaws_cloudtrail:0000459:61d6e554-717e-4c4b-bbaf-3d99398ad845", "row_index": 459, "timestamp": "2017-05-27T05:00:06Z", "event_type": "GetPolicyVersion", "event_source": "iam.amazonaws.com", "principal": {"type": "AssumedRole", "arn": "arn:aws:sts::811596193553:assumed-role/SecurityMonkey/secmonkey", "account_id": "811596193553", "principal_id": "AROAUB2AA5FQRGAHITW4A:secmonkey", "user_name": null, "access_key_id": "ASIAI9QHHRMC9F6XQJXN", "session_issuer_arn": "arn:aws:iam::811596193553:role/SecurityMonkey", "session_issuer_user_name": "SecurityMonkey"}, "network": {"source_ip": "255.253.125.115", "user_agent": "Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56 Resource", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 1075, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "61d6e554-717e-4c4b-bbaf-3d99398ad845", "eventTime": "2017-05-27T05:00:06Z", "eventName": "GetPolicyVersion", "eventSource": "iam.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.253.125.115", "userAgent": "Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56 Resource", "awsRegion": "us-east-1", "userIdentity": {"type": "AssumedRole", "principalId": "AROAUB2AA5FQRGAHITW4A:secmonkey", "arn": "arn:aws:sts::811596193553:assumed-role/SecurityMonkey/secmonkey", "accountId": "811596193553", "accessKeyId": "ASIAI9QHHRMC9F6XQJXN", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2017-05-27T04:59:38Z"}, "sessionIssuer": {"type": "Role", "principalId": "AROAUB2AA5FQRGAHITW4A", "arn": "arn:aws:iam::811596193553:role/SecurityMonkey", "accountId": "811596193553", "userName": "SecurityMonkey"}}}, "requestParameters": {"policyArn": "arn:aws:iam::aws:policy/service-role/AWSLambdaENIManagementAccess", "versionId": "v1"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "150b0686-df9b-48d8-8d46-e78aff6da3ce", "record_id": "flaws_cloudtrail:0000460:150b0686-df9b-48d8-8d46-e78aff6da3ce", "row_index": 460, "timestamp": "2017-05-27T05:00:06Z", "event_type": "GetPolicyVersion", "event_source": "iam.amazonaws.com", "principal": {"type": "AssumedRole", "arn": "arn:aws:sts::811596193553:assumed-role/SecurityMonkey/secmonkey", "account_id": "811596193553", "principal_id": "AROAUB2AA5FQRGAHITW4A:secmonkey", "user_name": null, "access_key_id": "ASIAI9QHHRMC9F6XQJXN", "session_issuer_arn": "arn:aws:iam::811596193553:role/SecurityMonkey", "session_issuer_user_name": "SecurityMonkey"}, "network": {"source_ip": "255.253.125.115", "user_agent": "Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56 Resource", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 1063, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "150b0686-df9b-48d8-8d46-e78aff6da3ce", "eventTime": "2017-05-27T05:00:06Z", "eventName": "GetPolicyVersion", "eventSource": "iam.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.253.125.115", "userAgent": "Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56 Resource", "awsRegion": "us-east-1", "userIdentity": {"type": "AssumedRole", "principalId": "AROAUB2AA5FQRGAHITW4A:secmonkey", "arn": "arn:aws:sts::811596193553:assumed-role/SecurityMonkey/secmonkey", "accountId": "811596193553", "accessKeyId": "ASIAI9QHHRMC9F6XQJXN", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2017-05-27T04:59:38Z"}, "sessionIssuer": {"type": "Role", "principalId": "AROAUB2AA5FQRGAHITW4A", "arn": "arn:aws:iam::811596193553:role/SecurityMonkey", "accountId": "811596193553", "userName": "SecurityMonkey"}}}, "requestParameters": {"policyArn": "arn:aws:iam::aws:policy/AmazonAppStreamReadOnlyAccess", "versionId": "v2"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "1717a60c-e122-42ed-80bd-c198112caba8", "record_id": "flaws_cloudtrail:0000461:1717a60c-e122-42ed-80bd-c198112caba8", "row_index": 461, "timestamp": "2017-05-27T05:00:06Z", "event_type": "GetPolicyVersion", "event_source": "iam.amazonaws.com", "principal": {"type": "AssumedRole", "arn": "arn:aws:sts::811596193553:assumed-role/SecurityMonkey/secmonkey", "account_id": "811596193553", "principal_id": "AROAUB2AA5FQRGAHITW4A:secmonkey", "user_name": null, "access_key_id": "ASIAI9QHHRMC9F6XQJXN", "session_issuer_arn": "arn:aws:iam::811596193553:role/SecurityMonkey", "session_issuer_user_name": "SecurityMonkey"}, "network": {"source_ip": "255.253.125.115", "user_agent": "Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56 Resource", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 1060, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "1717a60c-e122-42ed-80bd-c198112caba8", "eventTime": "2017-05-27T05:00:06Z", "eventName": "GetPolicyVersion", "eventSource": "iam.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.253.125.115", "userAgent": "Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56 Resource", "awsRegion": "us-east-1", "userIdentity": {"type": "AssumedRole", "principalId": "AROAUB2AA5FQRGAHITW4A:secmonkey", "arn": "arn:aws:sts::811596193553:assumed-role/SecurityMonkey/secmonkey", "accountId": "811596193553", "accessKeyId": "ASIAI9QHHRMC9F6XQJXN", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2017-05-27T04:59:38Z"}, "sessionIssuer": {"type": "Role", "principalId": "AROAUB2AA5FQRGAHITW4A", "arn": "arn:aws:iam::811596193553:role/SecurityMonkey", "accountId": "811596193553", "userName": "SecurityMonkey"}}}, "requestParameters": {"policyArn": "arn:aws:iam::aws:policy/AWSStepFunctionsFullAccess", "versionId": "v1"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "ede933622-a043-44a2-8561-296fd66498e3", "record_id": "flaws_cloudtrail:0000462:ede933622-a043-44a2-8561-296fd66498e3", "row_index": 462, "timestamp": "2017-05-27T05:00:06Z", "event_type": "GetPolicyVersion", "event_source": "iam.amazonaws.com", "principal": {"type": "AssumedRole", "arn": "arn:aws:sts::811596193553:assumed-role/SecurityMonkey/secmonkey", "account_id": "811596193553", "principal_id": "AROAUB2AA5FQRGAHITW4A:secmonkey", "user_name": null, "access_key_id": "ASIAI9QHHRMC9F6XQJXN", "session_issuer_arn": "arn:aws:iam::811596193553:role/SecurityMonkey", "session_issuer_user_name": "SecurityMonkey"}, "network": {"source_ip": "255.253.125.115", "user_agent": "Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56 Resource", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 1064, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "ede933622-a043-44a2-8561-296fd66498e3", "eventTime": "2017-05-27T05:00:06Z", "eventName": "GetPolicyVersion", "eventSource": "iam.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.253.125.115", "userAgent": "Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56 Resource", "awsRegion": "us-east-1", "userIdentity": {"type": "AssumedRole", "principalId": "AROAUB2AA5FQRGAHITW4A:secmonkey", "arn": "arn:aws:sts::811596193553:assumed-role/SecurityMonkey/secmonkey", "accountId": "811596193553", "accessKeyId": "ASIAI9QHHRMC9F6XQJXN", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2017-05-27T04:59:38Z"}, "sessionIssuer": {"type": "Role", "principalId": "AROAUB2AA5FQRGAHITW4A", "arn": "arn:aws:iam::811596193553:role/SecurityMonkey", "accountId": "811596193553", "userName": "SecurityMonkey"}}}, "requestParameters": {"policyArn": "arn:aws:iam::aws:policy/AmazonInspectorReadOnlyAccess", "versionId": "v2"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "ac81e21f-16d2-4a7c-839f-e9ea01bdacfa", "record_id": "flaws_cloudtrail:0000463:ac81e21f-16d2-4a7c-839f-e9ea01bdacfa", "row_index": 463, "timestamp": "2017-05-27T05:00:06Z", "event_type": "GetPolicyVersion", "event_source": "iam.amazonaws.com", "principal": {"type": "AssumedRole", "arn": "arn:aws:sts::811596193553:assumed-role/SecurityMonkey/secmonkey", "account_id": "811596193553", "principal_id": "AROAUB2AA5FQRGAHITW4A:secmonkey", "user_name": null, "access_key_id": "ASIAI9QHHRMC9F6XQJXN", "session_issuer_arn": "arn:aws:iam::811596193553:role/SecurityMonkey", "session_issuer_user_name": "SecurityMonkey"}, "network": {"source_ip": "255.253.125.115", "user_agent": "Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56 Resource", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 1065, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "ac81e21f-16d2-4a7c-839f-e9ea01bdacfa", "eventTime": "2017-05-27T05:00:06Z", "eventName": "GetPolicyVersion", "eventSource": "iam.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.253.125.115", "userAgent": "Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56 Resource", "awsRegion": "us-east-1", "userIdentity": {"type": "AssumedRole", "principalId": "AROAUB2AA5FQRGAHITW4A:secmonkey", "arn": "arn:aws:sts::811596193553:assumed-role/SecurityMonkey/secmonkey", "accountId": "811596193553", "accessKeyId": "ASIAI9QHHRMC9F6XQJXN", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2017-05-27T04:59:38Z"}, "sessionIssuer": {"type": "Role", "principalId": "AROAUB2AA5FQRGAHITW4A", "arn": "arn:aws:iam::811596193553:role/SecurityMonkey", "accountId": "811596193553", "userName": "SecurityMonkey"}}}, "requestParameters": {"policyArn": "arn:aws:iam::aws:policy/AWSCertificateManagerFullAccess", "versionId": "v1"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "6b9b74f3-a95e-4203-b656-19f33741f3", "record_id": "flaws_cloudtrail:0000464:6b9b74f3-a95e-4203-b656-19f33741f3", "row_index": 464, "timestamp": "2017-05-27T05:00:07Z", "event_type": "ListCertificates", "event_source": "acm.amazonaws.com", "principal": {"type": "AssumedRole", "arn": "arn:aws:sts::811596193553:assumed-role/SecurityMonkey/secmonkey", "account_id": "811596193553", "principal_id": "AROAUB2AA5FQRGAHITW4A:secmonkey", "user_name": null, "access_key_id": "ASIA8OQF6COSFDPDXP1X", "session_issuer_arn": "arn:aws:iam::811596193553:role/SecurityMonkey", "session_issuer_user_name": "SecurityMonkey"}, "network": {"source_ip": "255.253.125.115", "user_agent": "Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56", "aws_region": "sa-east-1"}, "resource_arns": [], "raw_record_size_bytes": 970, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "6b9b74f3-a95e-4203-b656-19f33741f3", "eventTime": "2017-05-27T05:00:07Z", "eventName": "ListCertificates", "eventSource": "acm.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.253.125.115", "userAgent": "Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56", "awsRegion": "sa-east-1", "userIdentity": {"type": "AssumedRole", "principalId": "AROAUB2AA5FQRGAHITW4A:secmonkey", "arn": "arn:aws:sts::811596193553:assumed-role/SecurityMonkey/secmonkey", "accountId": "811596193553", "accessKeyId": "ASIA8OQF6COSFDPDXP1X", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2017-05-27T05:00:06Z"}, "sessionIssuer": {"type": "Role", "principalId": "AROAUB2AA5FQRGAHITW4A", "arn": "arn:aws:iam::811596193553:role/SecurityMonkey", "accountId": "811596193553", "userName": "SecurityMonkey"}}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "3cfebeec-84b0-4631-9d74-ba650dd064563", "record_id": "flaws_cloudtrail:0000465:3cfebeec-84b0-4631-9d74-ba650dd064563", "row_index": 465, "timestamp": "2017-05-27T05:00:07Z", "event_type": "GetPolicyVersion", "event_source": "iam.amazonaws.com", "principal": {"type": "AssumedRole", "arn": "arn:aws:sts::811596193553:assumed-role/SecurityMonkey/secmonkey", "account_id": "811596193553", "principal_id": "AROAUB2AA5FQRGAHITW4A:secmonkey", "user_name": null, "access_key_id": "ASIAI9QHHRMC9F6XQJXN", "session_issuer_arn": "arn:aws:iam::811596193553:role/SecurityMonkey", "session_issuer_user_name": "SecurityMonkey"}, "network": {"source_ip": "255.253.125.115", "user_agent": "Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56 Resource", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 1050, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "3cfebeec-84b0-4631-9d74-ba650dd064563", "eventTime": "2017-05-27T05:00:07Z", "eventName": "GetPolicyVersion", "eventSource": "iam.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.253.125.115", "userAgent": "Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56 Resource", "awsRegion": "us-east-1", "userIdentity": {"type": "AssumedRole", "principalId": "AROAUB2AA5FQRGAHITW4A:secmonkey", "arn": "arn:aws:sts::811596193553:assumed-role/SecurityMonkey/secmonkey", "accountId": "811596193553", "accessKeyId": "ASIAI9QHHRMC9F6XQJXN", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2017-05-27T04:59:38Z"}, "sessionIssuer": {"type": "Role", "principalId": "AROAUB2AA5FQRGAHITW4A", "arn": "arn:aws:iam::811596193553:role/SecurityMonkey", "accountId": "811596193553", "userName": "SecurityMonkey"}}}, "requestParameters": {"policyArn": "arn:aws:iam::aws:policy/PowerUserAccess", "versionId": "v2"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "afddd8bf-0f51-49d9-bb11-9e7e1d6fc0a8", "record_id": "flaws_cloudtrail:0000466:afddd8bf-0f51-49d9-bb11-9e7e1d6fc0a8", "row_index": 466, "timestamp": "2017-05-27T05:00:07Z", "event_type": "GetPolicyVersion", "event_source": "iam.amazonaws.com", "principal": {"type": "AssumedRole", "arn": "arn:aws:sts::811596193553:assumed-role/SecurityMonkey/secmonkey", "account_id": "811596193553", "principal_id": "AROAUB2AA5FQRGAHITW4A:secmonkey", "user_name": null, "access_key_id": "ASIAI9QHHRMC9F6XQJXN", "session_issuer_arn": "arn:aws:iam::811596193553:role/SecurityMonkey", "session_issuer_user_name": "SecurityMonkey"}, "network": {"source_ip": "255.253.125.115", "user_agent": "Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56 Resource", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 1060, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "afddd8bf-0f51-49d9-bb11-9e7e1d6fc0a8", "eventTime": "2017-05-27T05:00:07Z", "eventName": "GetPolicyVersion", "eventSource": "iam.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.253.125.115", "userAgent": "Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56 Resource", "awsRegion": "us-east-1", "userIdentity": {"type": "AssumedRole", "principalId": "AROAUB2AA5FQRGAHITW4A:secmonkey", "arn": "arn:aws:sts::811596193553:assumed-role/SecurityMonkey/secmonkey", "accountId": "811596193553", "accessKeyId": "ASIAI9QHHRMC9F6XQJXN", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2017-05-27T04:59:38Z"}, "sessionIssuer": {"type": "Role", "principalId": "AROAUB2AA5FQRGAHITW4A", "arn": "arn:aws:iam::811596193553:role/SecurityMonkey", "accountId": "811596193553", "userName": "SecurityMonkey"}}}, "requestParameters": {"policyArn": "arn:aws:iam::aws:policy/CloudWatchEventsFullAccess", "versionId": "v1"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "bd953e0e-c851-4743-a147-ea2607d3908a", "record_id": "flaws_cloudtrail:0000467:bd953e0e-c851-4743-a147-ea2607d3908a", "row_index": 467, "timestamp": "2017-05-27T05:00:08Z", "event_type": "ListCertificates", "event_source": "acm.amazonaws.com", "principal": {"type": "AssumedRole", "arn": "arn:aws:sts::811596193553:assumed-role/SecurityMonkey/secmonkey", "account_id": "811596193553", "principal_id": "AROAUB2AA5FQRGAHITW4A:secmonkey", "user_name": null, "access_key_id": "ASIAZKT3G19CDWOLOPY2", "session_issuer_arn": "arn:aws:iam::811596193553:role/SecurityMonkey", "session_issuer_user_name": "SecurityMonkey"}, "network": {"source_ip": "255.253.125.115", "user_agent": "Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56", "aws_region": "ca-central-1"}, "resource_arns": [], "raw_record_size_bytes": 975, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "bd953e0e-c851-4743-a147-ea2607d3908a", "eventTime": "2017-05-27T05:00:08Z", "eventName": "ListCertificates", "eventSource": "acm.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.253.125.115", "userAgent": "Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56", "awsRegion": "ca-central-1", "userIdentity": {"type": "AssumedRole", "principalId": "AROAUB2AA5FQRGAHITW4A:secmonkey", "arn": "arn:aws:sts::811596193553:assumed-role/SecurityMonkey/secmonkey", "accountId": "811596193553", "accessKeyId": "ASIAZKT3G19CDWOLOPY2", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2017-05-27T05:00:08Z"}, "sessionIssuer": {"type": "Role", "principalId": "AROAUB2AA5FQRGAHITW4A", "arn": "arn:aws:iam::811596193553:role/SecurityMonkey", "accountId": "811596193553", "userName": "SecurityMonkey"}}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "936bd4ca-f4f8-472a-a2e7-216bb1a90a98", "record_id": "flaws_cloudtrail:0000468:936bd4ca-f4f8-472a-a2e7-216bb1a90a98", "row_index": 468, "timestamp": "2017-05-27T05:00:08Z", "event_type": "AssumeRole", "event_source": "sts.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/SecurityMokey", "account_id": "811596193553", "principal_id": "AIDAQ9SRE1SZZZ4Q4UOJH", "user_name": "SecurityMokey", "access_key_id": "AKIAXJ0III4JBKZDXGXN", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "255.253.125.115", "user_agent": "Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56", "aws_region": "us-east-1"}, "resource_arns": ["arn:aws:iam::811596193553:role/SecurityMonkey"], "raw_record_size_bytes": 1453, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "resources", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "936bd4ca-f4f8-472a-a2e7-216bb1a90a98", "eventTime": "2017-05-27T05:00:08Z", "eventName": "AssumeRole", "eventSource": "sts.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.253.125.115", "userAgent": "Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDAQ9SRE1SZZZ4Q4UOJH", "arn": "arn:aws:iam::811596193553:user/SecurityMokey", "accountId": "811596193553", "accessKeyId": "AKIAXJ0III4JBKZDXGXN", "userName": "SecurityMokey"}, "requestParameters": {"roleArn": "arn:aws:iam::811596193553:role/SecurityMonkey", "roleSessionName": "secmonkey"}, "responseElements": {"credentials": {"accessKeyId": "ASIAZKT3G19CDWOLOPY2", "expiration": "May 27, 2017 6:00:08 AM", "sessionToken": "FQoDYXdzECYaDMoBfrnPtZLvRapcEyLMAae/4znlJ67f/MBqBu3H59DAiuBSJXefDHiXdnG0emjcZ4zP6zg+0OUSJ6fOLZrQx6otTPv2A6vXs39db2cxdPY6BhjRHU6dULS73FEzBKKQu9nInjQhvVVqWuRoX0Z2mzC67W2N2psyd2mTUk3xDa4I4duwt7a02lLRcCcnbSqYVwvwxJtpHVZQ2uZAD6LvPmyrPB3rAeBImkdsyIM/Du/DSjT36s3NfzN/gHzLkvDvWZNjb96PoSrynAFaRc9UVjVMAixqdFZaHV79ASjYj6TJBQ=="}, "assumedRoleUser": {"assumedRoleId": "AROAUB2AA5FQRGAHITW4A:secmonkey", "arn": "arn:aws:sts::811596193553:assumed-role/SecurityMonkey/secmonkey"}}, "resources": [{"ARN": "arn:aws:iam::811596193553:role/SecurityMonkey", "accountId": "811596193553", "type": "AWS::IAM::Role"}]}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "3fefa21a-167e-4b93-aac5-82127c01", "record_id": "flaws_cloudtrail:0000469:3fefa21a-167e-4b93-aac5-82127c01", "row_index": 469, "timestamp": "2017-05-27T05:00:08Z", "event_type": "AssumeRole", "event_source": "sts.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/SecurityMokey", "account_id": "811596193553", "principal_id": "AIDAQ9SRE1SZZZ4Q4UOJH", "user_name": "SecurityMokey", "access_key_id": "AKIAXJ0III4JBKZDXGXN", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "255.253.125.115", "user_agent": "Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56", "aws_region": "us-east-1"}, "resource_arns": ["arn:aws:iam::811596193553:role/SecurityMonkey"], "raw_record_size_bytes": 1449, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "resources", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "3fefa21a-167e-4b93-aac5-82127c01", "eventTime": "2017-05-27T05:00:08Z", "eventName": "AssumeRole", "eventSource": "sts.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.253.125.115", "userAgent": "Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDAQ9SRE1SZZZ4Q4UOJH", "arn": "arn:aws:iam::811596193553:user/SecurityMokey", "accountId": "811596193553", "accessKeyId": "AKIAXJ0III4JBKZDXGXN", "userName": "SecurityMokey"}, "requestParameters": {"roleArn": "arn:aws:iam::811596193553:role/SecurityMonkey", "roleSessionName": "secmonkey"}, "responseElements": {"credentials": {"accessKeyId": "ASIA48KTRDNET0U03TSQ", "expiration": "May 27, 2017 6:00:08 AM", "sessionToken": "FQoDYXdzECYaDN+sagg+07p8+yGqCiLMAbjqREwIunuiXdItW1bjxR+E1Gzilh6vC4cq9uu9Rgcc+e8GM/98kR3fLpyjrFyhYQnbQZGWNoVpnmEfUz1revTgfEiXx2F1i+mFvzQnzCcsGzikqDFnArNGkUKaVhapBVoIEtMQWrhBmeI8GduRWD92VHIXcOzjRiBXULi7X6XRympMAiArWHrzc2U+FF8o2FRlagdR+odKqNJA6LRdfbi9BftfWOfzEdS3EU7REaS/LHb0HzMuMXZRgyTynqeSCpa7fPA+dIrT5ow/xSjYj6TJBQ=="}, "assumedRoleUser": {"assumedRoleId": "AROAUB2AA5FQRGAHITW4A:secmonkey", "arn": "arn:aws:sts::811596193553:assumed-role/SecurityMonkey/secmonkey"}}, "resources": [{"ARN": "arn:aws:iam::811596193553:role/SecurityMonkey", "accountId": "811596193553", "type": "AWS::IAM::Role"}]}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "b8b180d1-7cc4-477a-9298-202a458d3627", "record_id": "flaws_cloudtrail:0000470:b8b180d1-7cc4-477a-9298-202a458d3627", "row_index": 470, "timestamp": "2017-05-27T05:00:09Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "AssumedRole", "arn": "arn:aws:sts::811596193553:assumed-role/SecurityMonkey/secmonkey", "account_id": "811596193553", "principal_id": "AROAUB2AA5FQRGAHITW4A:secmonkey", "user_name": null, "access_key_id": "ASIA48KTRDNET0U03TSQ", "session_issuer_arn": "arn:aws:iam::811596193553:role/SecurityMonkey", "session_issuer_user_name": "SecurityMonkey"}, "network": {"source_ip": "255.253.125.115", "user_agent": "Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56", "aws_region": "ap-northeast-1"}, "resource_arns": [], "raw_record_size_bytes": 1067, "raw_record_depth": 5, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "b8b180d1-7cc4-477a-9298-202a458d3627", "eventTime": "2017-05-27T05:00:09Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.253.125.115", "userAgent": "Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56", "awsRegion": "ap-northeast-1", "userIdentity": {"type": "AssumedRole", "principalId": "AROAUB2AA5FQRGAHITW4A:secmonkey", "arn": "arn:aws:sts::811596193553:assumed-role/SecurityMonkey/secmonkey", "accountId": "811596193553", "accessKeyId": "ASIA48KTRDNET0U03TSQ", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2017-05-27T05:00:08Z"}, "sessionIssuer": {"type": "Role", "principalId": "AROAUB2AA5FQRGAHITW4A", "arn": "arn:aws:iam::811596193553:role/SecurityMonkey", "accountId": "811596193553", "userName": "SecurityMonkey"}}}, "requestParameters": {"snapshotSet": {}, "ownersSet": {"items": [{"owner": "self"}]}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "dc1c69ff-fd5d-4390-bd4c-0232d9a4e6cd", "record_id": "flaws_cloudtrail:0000471:dc1c69ff-fd5d-4390-bd4c-0232d9a4e6cd", "row_index": 471, "timestamp": "2017-05-27T05:00:09Z", "event_type": "AssumeRole", "event_source": "sts.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/SecurityMokey", "account_id": "811596193553", "principal_id": "AIDAQ9SRE1SZZZ4Q4UOJH", "user_name": "SecurityMokey", "access_key_id": "AKIAXJ0III4JBKZDXGXN", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "255.253.125.115", "user_agent": "Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56", "aws_region": "us-east-1"}, "resource_arns": ["arn:aws:iam::811596193553:role/SecurityMonkey"], "raw_record_size_bytes": 1453, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "resources", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "dc1c69ff-fd5d-4390-bd4c-0232d9a4e6cd", "eventTime": "2017-05-27T05:00:09Z", "eventName": "AssumeRole", "eventSource": "sts.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.253.125.115", "userAgent": "Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDAQ9SRE1SZZZ4Q4UOJH", "arn": "arn:aws:iam::811596193553:user/SecurityMokey", "accountId": "811596193553", "accessKeyId": "AKIAXJ0III4JBKZDXGXN", "userName": "SecurityMokey"}, "requestParameters": {"roleArn": "arn:aws:iam::811596193553:role/SecurityMonkey", "roleSessionName": "secmonkey"}, "responseElements": {"credentials": {"accessKeyId": "ASIAPO166ODAKYVH0E2E", "expiration": "May 27, 2017 6:00:09 AM", "sessionToken": "FQoDYXdzECYaDJoq9bhd8jTVzRw1fyLMAYdIOlZ7vIYPg+O9LsGeENT5POzZQ4qy8Mx+rqEeAeEkXFQVaC1K5y5oPssWXri6SIEILJ1b9pnsDmjrFDZb72xc9V0oLOOYrhIrgTHILy96YIilFMxfX9abjQvEnZjTGY8ciZa2+RUZYVGYl/T1nyh6FvBMdsqAEB1HfVzFgBPNqOZj7Nj/slEy2w8XHdDeO5Lm0RYqxkhCIcShWh63w0E8FSrInXhoFwkvENxkKqCgqJTS+iQ1knqiLmcBRD5YmYnmMrkjVC1Op/VZ1CjZj6TJBQ=="}, "assumedRoleUser": {"assumedRoleId": "AROAUB2AA5FQRGAHITW4A:secmonkey", "arn": "arn:aws:sts::811596193553:assumed-role/SecurityMonkey/secmonkey"}}, "resources": [{"ARN": "arn:aws:iam::811596193553:role/SecurityMonkey", "accountId": "811596193553", "type": "AWS::IAM::Role"}]}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "f7c9f485-4f5a-4e16-a698-a6b41a80ab42", "record_id": "flaws_cloudtrail:0000472:f7c9f485-4f5a-4e16-a698-a6b41a80ab42", "row_index": 472, "timestamp": "2017-05-27T05:00:10Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "AssumedRole", "arn": "arn:aws:sts::811596193553:assumed-role/SecurityMonkey/secmonkey", "account_id": "811596193553", "principal_id": "AROAUB2AA5FQRGAHITW4A:secmonkey", "user_name": null, "access_key_id": "ASIA48KTRDNET0U03TSQ", "session_issuer_arn": "arn:aws:iam::811596193553:role/SecurityMonkey", "session_issuer_user_name": "SecurityMonkey"}, "network": {"source_ip": "255.253.125.115", "user_agent": "Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56", "aws_region": "ap-northeast-2"}, "resource_arns": [], "raw_record_size_bytes": 1068, "raw_record_depth": 5, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "f7c9f485-4f5a-4e16-a698-a6b41a80ab42", "eventTime": "2017-05-27T05:00:10Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.253.125.115", "userAgent": "Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56", "awsRegion": "ap-northeast-2", "userIdentity": {"type": "AssumedRole", "principalId": "AROAUB2AA5FQRGAHITW4A:secmonkey", "arn": "arn:aws:sts::811596193553:assumed-role/SecurityMonkey/secmonkey", "accountId": "811596193553", "accessKeyId": "ASIA48KTRDNET0U03TSQ", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2017-05-27T05:00:08Z"}, "sessionIssuer": {"type": "Role", "principalId": "AROAUB2AA5FQRGAHITW4A", "arn": "arn:aws:iam::811596193553:role/SecurityMonkey", "accountId": "811596193553", "userName": "SecurityMonkey"}}}, "requestParameters": {"snapshotSet": {}, "ownersSet": {"items": [{"owner": "self"}]}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "b0cb62d6-1ea1-4407-8bb4-4e28f92ab06c", "record_id": "flaws_cloudtrail:0000473:b0cb62d6-1ea1-4407-8bb4-4e28f92ab06c", "row_index": 473, "timestamp": "2017-05-27T05:00:10Z", "event_type": "ListCertificates", "event_source": "acm.amazonaws.com", "principal": {"type": "AssumedRole", "arn": "arn:aws:sts::811596193553:assumed-role/SecurityMonkey/secmonkey", "account_id": "811596193553", "principal_id": "AROAUB2AA5FQRGAHITW4A:secmonkey", "user_name": null, "access_key_id": "ASIAPO166ODAKYVH0E2E", "session_issuer_arn": "arn:aws:iam::811596193553:role/SecurityMonkey", "session_issuer_user_name": "SecurityMonkey"}, "network": {"source_ip": "255.253.125.115", "user_agent": "Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56", "aws_region": "ap-southeast-1"}, "resource_arns": [], "raw_record_size_bytes": 977, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "b0cb62d6-1ea1-4407-8bb4-4e28f92ab06c", "eventTime": "2017-05-27T05:00:10Z", "eventName": "ListCertificates", "eventSource": "acm.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.253.125.115", "userAgent": "Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56", "awsRegion": "ap-southeast-1", "userIdentity": {"type": "AssumedRole", "principalId": "AROAUB2AA5FQRGAHITW4A:secmonkey", "arn": "arn:aws:sts::811596193553:assumed-role/SecurityMonkey/secmonkey", "accountId": "811596193553", "accessKeyId": "ASIAPO166ODAKYVH0E2E", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2017-05-27T05:00:09Z"}, "sessionIssuer": {"type": "Role", "principalId": "AROAUB2AA5FQRGAHITW4A", "arn": "arn:aws:iam::811596193553:role/SecurityMonkey", "accountId": "811596193553", "userName": "SecurityMonkey"}}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "cd93d769-7a89-443a-8eee-81e65a992cb7", "record_id": "flaws_cloudtrail:0000474:cd93d769-7a89-443a-8eee-81e65a992cb7", "row_index": 474, "timestamp": "2017-05-27T05:00:10Z", "event_type": "AssumeRole", "event_source": "sts.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/SecurityMokey", "account_id": "811596193553", "principal_id": "AIDAQ9SRE1SZZZ4Q4UOJH", "user_name": "SecurityMokey", "access_key_id": "AKIAXJ0III4JBKZDXGXN", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "255.253.125.115", "user_agent": "Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56", "aws_region": "us-east-1"}, "resource_arns": ["arn:aws:iam::811596193553:role/SecurityMonkey"], "raw_record_size_bytes": 1453, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "resources", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "cd93d769-7a89-443a-8eee-81e65a992cb7", "eventTime": "2017-05-27T05:00:10Z", "eventName": "AssumeRole", "eventSource": "sts.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.253.125.115", "userAgent": "Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDAQ9SRE1SZZZ4Q4UOJH", "arn": "arn:aws:iam::811596193553:user/SecurityMokey", "accountId": "811596193553", "accessKeyId": "AKIAXJ0III4JBKZDXGXN", "userName": "SecurityMokey"}, "requestParameters": {"roleArn": "arn:aws:iam::811596193553:role/SecurityMonkey", "roleSessionName": "secmonkey"}, "responseElements": {"credentials": {"accessKeyId": "ASIA3TXNYHNDFYY5SCAE", "expiration": "May 27, 2017 6:00:10 AM", "sessionToken": "FQoDYXdzECYaDLPbQLioEyMYk0DNWSLMAYJ3p4jU4tZPVlw0EJ3rxuovbWn5xmdYgrE/fHetVOPxPvJzbbbkWcNwN+GZLrrTfpEDglNMGQgQshKj7y68fIIVhAJkR8O2y0+p1LTHbzayc3HPAVvcmMkfCWkjSEfj4zqnWnUliOOHbp+iuSYGfNFrAM6iQrmBO2rY25ed/roY5jPnXGBu14P2l9fIXlMjehMvcvdRFmE+esCoNADX6C/ScR/OKo92hwSPFWd5zvz5R8QKkKoOYlaeidxa9umAHNWoXd6e2UZcuNT4RSjaj6TJBQ=="}, "assumedRoleUser": {"assumedRoleId": "AROAUB2AA5FQRGAHITW4A:secmonkey", "arn": "arn:aws:sts::811596193553:assumed-role/SecurityMonkey/secmonkey"}}, "resources": [{"ARN": "arn:aws:iam::811596193553:role/SecurityMonkey", "accountId": "811596193553", "type": "AWS::IAM::Role"}]}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "733d99ae-735f-4a5f-8eb1-569243cf425", "record_id": "flaws_cloudtrail:0000475:733d99ae-735f-4a5f-8eb1-569243cf425", "row_index": 475, "timestamp": "2017-05-27T05:00:11Z", "event_type": "ListCertificates", "event_source": "acm.amazonaws.com", "principal": {"type": "AssumedRole", "arn": "arn:aws:sts::811596193553:assumed-role/SecurityMonkey/secmonkey", "account_id": "811596193553", "principal_id": "AROAUB2AA5FQRGAHITW4A:secmonkey", "user_name": null, "access_key_id": "ASIA3TXNYHNDFYY5SCAE", "session_issuer_arn": "arn:aws:iam::811596193553:role/SecurityMonkey", "session_issuer_user_name": "SecurityMonkey"}, "network": {"source_ip": "255.253.125.115", "user_agent": "Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56", "aws_region": "ap-southeast-2"}, "resource_arns": [], "raw_record_size_bytes": 976, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "733d99ae-735f-4a5f-8eb1-569243cf425", "eventTime": "2017-05-27T05:00:11Z", "eventName": "ListCertificates", "eventSource": "acm.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.253.125.115", "userAgent": "Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56", "awsRegion": "ap-southeast-2", "userIdentity": {"type": "AssumedRole", "principalId": "AROAUB2AA5FQRGAHITW4A:secmonkey", "arn": "arn:aws:sts::811596193553:assumed-role/SecurityMonkey/secmonkey", "accountId": "811596193553", "accessKeyId": "ASIA3TXNYHNDFYY5SCAE", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2017-05-27T05:00:10Z"}, "sessionIssuer": {"type": "Role", "principalId": "AROAUB2AA5FQRGAHITW4A", "arn": "arn:aws:iam::811596193553:role/SecurityMonkey", "accountId": "811596193553", "userName": "SecurityMonkey"}}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "35b3c68b-7d54-4b07-b065-80848b03687", "record_id": "flaws_cloudtrail:0000476:35b3c68b-7d54-4b07-b065-80848b03687", "row_index": 476, "timestamp": "2017-05-27T05:00:12Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "AssumedRole", "arn": "arn:aws:sts::811596193553:assumed-role/SecurityMonkey/secmonkey", "account_id": "811596193553", "principal_id": "AROAUB2AA5FQRGAHITW4A:secmonkey", "user_name": null, "access_key_id": "ASIA48KTRDNET0U03TSQ", "session_issuer_arn": "arn:aws:iam::811596193553:role/SecurityMonkey", "session_issuer_user_name": "SecurityMonkey"}, "network": {"source_ip": "255.253.125.115", "user_agent": "Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56", "aws_region": "ap-south-1"}, "resource_arns": [], "raw_record_size_bytes": 1063, "raw_record_depth": 5, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "35b3c68b-7d54-4b07-b065-80848b03687", "eventTime": "2017-05-27T05:00:12Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.253.125.115", "userAgent": "Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56", "awsRegion": "ap-south-1", "userIdentity": {"type": "AssumedRole", "principalId": "AROAUB2AA5FQRGAHITW4A:secmonkey", "arn": "arn:aws:sts::811596193553:assumed-role/SecurityMonkey/secmonkey", "accountId": "811596193553", "accessKeyId": "ASIA48KTRDNET0U03TSQ", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2017-05-27T05:00:08Z"}, "sessionIssuer": {"type": "Role", "principalId": "AROAUB2AA5FQRGAHITW4A", "arn": "arn:aws:iam::811596193553:role/SecurityMonkey", "accountId": "811596193553", "userName": "SecurityMonkey"}}}, "requestParameters": {"snapshotSet": {}, "ownersSet": {"items": [{"owner": "self"}]}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "85f4002a-996a-449e-ab19-3a94e886ef0a", "record_id": "flaws_cloudtrail:0000477:85f4002a-996a-449e-ab19-3a94e886ef0a", "row_index": 477, "timestamp": "2017-05-27T05:00:12Z", "event_type": "AssumeRole", "event_source": "sts.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/SecurityMokey", "account_id": "811596193553", "principal_id": "AIDAQ9SRE1SZZZ4Q4UOJH", "user_name": "SecurityMokey", "access_key_id": "AKIAXJ0III4JBKZDXGXN", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "255.253.125.115", "user_agent": "Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56", "aws_region": "us-east-1"}, "resource_arns": ["arn:aws:iam::811596193553:role/SecurityMonkey"], "raw_record_size_bytes": 1453, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "resources", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "85f4002a-996a-449e-ab19-3a94e886ef0a", "eventTime": "2017-05-27T05:00:12Z", "eventName": "AssumeRole", "eventSource": "sts.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.253.125.115", "userAgent": "Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDAQ9SRE1SZZZ4Q4UOJH", "arn": "arn:aws:iam::811596193553:user/SecurityMokey", "accountId": "811596193553", "accessKeyId": "AKIAXJ0III4JBKZDXGXN", "userName": "SecurityMokey"}, "requestParameters": {"roleArn": "arn:aws:iam::811596193553:role/SecurityMonkey", "roleSessionName": "secmonkey"}, "responseElements": {"credentials": {"accessKeyId": "ASIABHJXPFYGXFHBEN5J", "expiration": "May 27, 2017 6:00:12 AM", "sessionToken": "FQoDYXdzECYaDKSltowUWsOkLlQyAyLMATIPEEatFPi9vDfUMNB7pVauUHBRiuA2nSIGHo1EJAnrdbQujyiqjZa74TazmdDERI9N+X/W59UXpLCpRYK5c2UXur/bH5i12HvfduefCbRwaP8eabspRhnTMwqzeakRrpbw2k5VdV2N7MQIy0T1eVLdB21eftRsg6AmoQu5Uq2zZaNZ1U8h2r4YXiAwRXmpgN4SvDoIYVGVQYP+iEiLtyd+RTJqDMQi016ha6CKtuzfPFrLKZpuekAn6iGpeoXym4p+q6Jvz32SROA9aijcj6TJBQ=="}, "assumedRoleUser": {"assumedRoleId": "AROAUB2AA5FQRGAHITW4A:secmonkey", "arn": "arn:aws:sts::811596193553:assumed-role/SecurityMonkey/secmonkey"}}, "resources": [{"ARN": "arn:aws:iam::811596193553:role/SecurityMonkey", "accountId": "811596193553", "type": "AWS::IAM::Role"}]}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "dbb8546f-9899-46c4-a7f7-69602cc5", "record_id": "flaws_cloudtrail:0000478:dbb8546f-9899-46c4-a7f7-69602cc5", "row_index": 478, "timestamp": "2017-05-27T05:00:13Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "AssumedRole", "arn": "arn:aws:sts::811596193553:assumed-role/SecurityMonkey/secmonkey", "account_id": "811596193553", "principal_id": "AROAUB2AA5FQRGAHITW4A:secmonkey", "user_name": null, "access_key_id": "ASIA48KTRDNET0U03TSQ", "session_issuer_arn": "arn:aws:iam::811596193553:role/SecurityMonkey", "session_issuer_user_name": "SecurityMonkey"}, "network": {"source_ip": "255.253.125.115", "user_agent": "Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56", "aws_region": "ap-southeast-1"}, "resource_arns": [], "raw_record_size_bytes": 1064, "raw_record_depth": 5, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "dbb8546f-9899-46c4-a7f7-69602cc5", "eventTime": "2017-05-27T05:00:13Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.253.125.115", "userAgent": "Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56", "awsRegion": "ap-southeast-1", "userIdentity": {"type": "AssumedRole", "principalId": "AROAUB2AA5FQRGAHITW4A:secmonkey", "arn": "arn:aws:sts::811596193553:assumed-role/SecurityMonkey/secmonkey", "accountId": "811596193553", "accessKeyId": "ASIA48KTRDNET0U03TSQ", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2017-05-27T05:00:08Z"}, "sessionIssuer": {"type": "Role", "principalId": "AROAUB2AA5FQRGAHITW4A", "arn": "arn:aws:iam::811596193553:role/SecurityMonkey", "accountId": "811596193553", "userName": "SecurityMonkey"}}}, "requestParameters": {"snapshotSet": {}, "ownersSet": {"items": [{"owner": "self"}]}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "81ba6cfe-74d1-49c7-8609-8cf249532cc5", "record_id": "flaws_cloudtrail:0000479:81ba6cfe-74d1-49c7-8609-8cf249532cc5", "row_index": 479, "timestamp": "2017-05-27T05:00:13Z", "event_type": "ListCertificates", "event_source": "acm.amazonaws.com", "principal": {"type": "AssumedRole", "arn": "arn:aws:sts::811596193553:assumed-role/SecurityMonkey/secmonkey", "account_id": "811596193553", "principal_id": "AROAUB2AA5FQRGAHITW4A:secmonkey", "user_name": null, "access_key_id": "ASIABHJXPFYGXFHBEN5J", "session_issuer_arn": "arn:aws:iam::811596193553:role/SecurityMonkey", "session_issuer_user_name": "SecurityMonkey"}, "network": {"source_ip": "255.253.125.115", "user_agent": "Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56", "aws_region": "eu-central-1"}, "resource_arns": [], "raw_record_size_bytes": 975, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "81ba6cfe-74d1-49c7-8609-8cf249532cc5", "eventTime": "2017-05-27T05:00:13Z", "eventName": "ListCertificates", "eventSource": "acm.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.253.125.115", "userAgent": "Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56", "awsRegion": "eu-central-1", "userIdentity": {"type": "AssumedRole", "principalId": "AROAUB2AA5FQRGAHITW4A:secmonkey", "arn": "arn:aws:sts::811596193553:assumed-role/SecurityMonkey/secmonkey", "accountId": "811596193553", "accessKeyId": "ASIABHJXPFYGXFHBEN5J", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2017-05-27T05:00:12Z"}, "sessionIssuer": {"type": "Role", "principalId": "AROAUB2AA5FQRGAHITW4A", "arn": "arn:aws:iam::811596193553:role/SecurityMonkey", "accountId": "811596193553", "userName": "SecurityMonkey"}}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "5a53aada-f5d3-4785-a3b1-b40bb171f531", "record_id": "flaws_cloudtrail:0000480:5a53aada-f5d3-4785-a3b1-b40bb171f531", "row_index": 480, "timestamp": "2017-05-27T05:00:13Z", "event_type": "AssumeRole", "event_source": "sts.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/SecurityMokey", "account_id": "811596193553", "principal_id": "AIDAQ9SRE1SZZZ4Q4UOJH", "user_name": "SecurityMokey", "access_key_id": "AKIAXJ0III4JBKZDXGXN", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "255.253.125.115", "user_agent": "Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56", "aws_region": "us-east-1"}, "resource_arns": ["arn:aws:iam::811596193553:role/SecurityMonkey"], "raw_record_size_bytes": 1453, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "resources", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "5a53aada-f5d3-4785-a3b1-b40bb171f531", "eventTime": "2017-05-27T05:00:13Z", "eventName": "AssumeRole", "eventSource": "sts.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.253.125.115", "userAgent": "Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDAQ9SRE1SZZZ4Q4UOJH", "arn": "arn:aws:iam::811596193553:user/SecurityMokey", "accountId": "811596193553", "accessKeyId": "AKIAXJ0III4JBKZDXGXN", "userName": "SecurityMokey"}, "requestParameters": {"roleArn": "arn:aws:iam::811596193553:role/SecurityMonkey", "roleSessionName": "secmonkey"}, "responseElements": {"credentials": {"accessKeyId": "ASIAUKJ5LN4GTF2S2UTU", "expiration": "May 27, 2017 6:00:13 AM", "sessionToken": "FQoDYXdzECYaDMTAVoGPzHgpD11uziLMAUCfvz0aN5N3Ctf9CLGxDV7LYgv5XuBOqp5UkST+wA25RVA8VUGTkODsyRV8WYImbTEYTxpCK6iQD80V1nJrIDpssVGxWesgn4djCZXjv9DwSymv79w8pJsbpFYX/cOKz7DFRJO0Ng1kC4/d11ZXV+Oqi0I/j1pPYSDStt4XdNjZ9HdYGFWiB0OnfGJmU8ruBmrgNcFqCRDr7rv4Ep3FuEpy0/wd4zm10/0VAK66tj8tG6tlYTu/hLo453OkD3PS2Nk0OxLr4W9cqAuwYijdj6TJBQ=="}, "assumedRoleUser": {"assumedRoleId": "AROAUB2AA5FQRGAHITW4A:secmonkey", "arn": "arn:aws:sts::811596193553:assumed-role/SecurityMonkey/secmonkey"}}, "resources": [{"ARN": "arn:aws:iam::811596193553:role/SecurityMonkey", "accountId": "811596193553", "type": "AWS::IAM::Role"}]}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "6ce5135a-6b6b-4251-84bf-4f2b4ccdecbd", "record_id": "flaws_cloudtrail:0000481:6ce5135a-6b6b-4251-84bf-4f2b4ccdecbd", "row_index": 481, "timestamp": "2017-05-27T05:00:14Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "AssumedRole", "arn": "arn:aws:sts::811596193553:assumed-role/SecurityMonkey/secmonkey", "account_id": "811596193553", "principal_id": "AROAUB2AA5FQRGAHITW4A:secmonkey", "user_name": null, "access_key_id": "ASIA48KTRDNET0U03TSQ", "session_issuer_arn": "arn:aws:iam::811596193553:role/SecurityMonkey", "session_issuer_user_name": "SecurityMonkey"}, "network": {"source_ip": "255.253.125.115", "user_agent": "Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56", "aws_region": "ap-southeast-2"}, "resource_arns": [], "raw_record_size_bytes": 1068, "raw_record_depth": 5, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "6ce5135a-6b6b-4251-84bf-4f2b4ccdecbd", "eventTime": "2017-05-27T05:00:14Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.253.125.115", "userAgent": "Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56", "awsRegion": "ap-southeast-2", "userIdentity": {"type": "AssumedRole", "principalId": "AROAUB2AA5FQRGAHITW4A:secmonkey", "arn": "arn:aws:sts::811596193553:assumed-role/SecurityMonkey/secmonkey", "accountId": "811596193553", "accessKeyId": "ASIA48KTRDNET0U03TSQ", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2017-05-27T05:00:08Z"}, "sessionIssuer": {"type": "Role", "principalId": "AROAUB2AA5FQRGAHITW4A", "arn": "arn:aws:iam::811596193553:role/SecurityMonkey", "accountId": "811596193553", "userName": "SecurityMonkey"}}}, "requestParameters": {"snapshotSet": {}, "ownersSet": {"items": [{"owner": "self"}]}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "1747ae95-fc15-445a-839a-f82bbc6a8486", "record_id": "flaws_cloudtrail:0000482:1747ae95-fc15-445a-839a-f82bbc6a8486", "row_index": 482, "timestamp": "2017-05-27T05:00:14Z", "event_type": "AssumeRole", "event_source": "sts.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/SecurityMokey", "account_id": "811596193553", "principal_id": "AIDAQ9SRE1SZZZ4Q4UOJH", "user_name": "SecurityMokey", "access_key_id": "AKIAXJ0III4JBKZDXGXN", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "255.253.125.115", "user_agent": "Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56", "aws_region": "us-east-1"}, "resource_arns": ["arn:aws:iam::811596193553:role/SecurityMonkey"], "raw_record_size_bytes": 1453, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "resources", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "1747ae95-fc15-445a-839a-f82bbc6a8486", "eventTime": "2017-05-27T05:00:14Z", "eventName": "AssumeRole", "eventSource": "sts.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.253.125.115", "userAgent": "Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDAQ9SRE1SZZZ4Q4UOJH", "arn": "arn:aws:iam::811596193553:user/SecurityMokey", "accountId": "811596193553", "accessKeyId": "AKIAXJ0III4JBKZDXGXN", "userName": "SecurityMokey"}, "requestParameters": {"roleArn": "arn:aws:iam::811596193553:role/SecurityMonkey", "roleSessionName": "secmonkey"}, "responseElements": {"credentials": {"accessKeyId": "ASIADYRO53DMVMF7Y4QT", "expiration": "May 27, 2017 6:00:14 AM", "sessionToken": "FQoDYXdzECYaDB9JIEYWyBDToZq8qCLMAYe6LN7Uh4anED7TJoXIE3s5yDa43ahOYh0MvM0XXmEr/PTfKtWmPWboVkYYVzFLVF1QXXLVJS1ZUsVCtfOLuI9NNbTV1Encscj3bs5lu9IxYOHO0U6Ra9JLa6C5wUUU4LRn+1iX3Kd+pxg4VNKaBUIaA640FLlo+Oq6HV+QZ4vzXxSWhELS74Ds2D5nQX34ApBxgXjNWHPTSf4tfLXRKxunEw6iy3FHJEpWm3pzzpl6KTMamVPj79DlKopl8u3zkDFieTMKcj+xwBfc1ijej6TJBQ=="}, "assumedRoleUser": {"assumedRoleId": "AROAUB2AA5FQRGAHITW4A:secmonkey", "arn": "arn:aws:sts::811596193553:assumed-role/SecurityMonkey/secmonkey"}}, "resources": [{"ARN": "arn:aws:iam::811596193553:role/SecurityMonkey", "accountId": "811596193553", "type": "AWS::IAM::Role"}]}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "e49350d3-cd5d-4410-b9cf-914f23ba1800", "record_id": "flaws_cloudtrail:0000483:e49350d3-cd5d-4410-b9cf-914f23ba1800", "row_index": 483, "timestamp": "2017-05-27T05:00:14Z", "event_type": "ListCertificates", "event_source": "acm.amazonaws.com", "principal": {"type": "AssumedRole", "arn": "arn:aws:sts::811596193553:assumed-role/SecurityMonkey/secmonkey", "account_id": "811596193553", "principal_id": "AROAUB2AA5FQRGAHITW4A:secmonkey", "user_name": null, "access_key_id": "ASIAUKJ5LN4GTF2S2UTU", "session_issuer_arn": "arn:aws:iam::811596193553:role/SecurityMonkey", "session_issuer_user_name": "SecurityMonkey"}, "network": {"source_ip": "255.253.125.115", "user_agent": "Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 972, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "e49350d3-cd5d-4410-b9cf-914f23ba1800", "eventTime": "2017-05-27T05:00:14Z", "eventName": "ListCertificates", "eventSource": "acm.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.253.125.115", "userAgent": "Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56", "awsRegion": "us-east-1", "userIdentity": {"type": "AssumedRole", "principalId": "AROAUB2AA5FQRGAHITW4A:secmonkey", "arn": "arn:aws:sts::811596193553:assumed-role/SecurityMonkey/secmonkey", "accountId": "811596193553", "accessKeyId": "ASIAUKJ5LN4GTF2S2UTU", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2017-05-27T05:00:13Z"}, "sessionIssuer": {"type": "Role", "principalId": "AROAUB2AA5FQRGAHITW4A", "arn": "arn:aws:iam::811596193553:role/SecurityMonkey", "accountId": "811596193553", "userName": "SecurityMonkey"}}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "2e0883b7-2bdb-4eaa-b5f4-6b4cf06a713b", "record_id": "flaws_cloudtrail:0000484:2e0883b7-2bdb-4eaa-b5f4-6b4cf06a713b", "row_index": 484, "timestamp": "2017-05-27T05:00:14Z", "event_type": "ListCertificates", "event_source": "acm.amazonaws.com", "principal": {"type": "AssumedRole", "arn": "arn:aws:sts::811596193553:assumed-role/SecurityMonkey/secmonkey", "account_id": "811596193553", "principal_id": "AROAUB2AA5FQRGAHITW4A:secmonkey", "user_name": null, "access_key_id": "ASIADYRO53DMVMF7Y4QT", "session_issuer_arn": "arn:aws:iam::811596193553:role/SecurityMonkey", "session_issuer_user_name": "SecurityMonkey"}, "network": {"source_ip": "255.253.125.115", "user_agent": "Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56", "aws_region": "us-east-2"}, "resource_arns": [], "raw_record_size_bytes": 972, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "2e0883b7-2bdb-4eaa-b5f4-6b4cf06a713b", "eventTime": "2017-05-27T05:00:14Z", "eventName": "ListCertificates", "eventSource": "acm.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.253.125.115", "userAgent": "Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56", "awsRegion": "us-east-2", "userIdentity": {"type": "AssumedRole", "principalId": "AROAUB2AA5FQRGAHITW4A:secmonkey", "arn": "arn:aws:sts::811596193553:assumed-role/SecurityMonkey/secmonkey", "accountId": "811596193553", "accessKeyId": "ASIADYRO53DMVMF7Y4QT", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2017-05-27T05:00:14Z"}, "sessionIssuer": {"type": "Role", "principalId": "AROAUB2AA5FQRGAHITW4A", "arn": "arn:aws:iam::811596193553:role/SecurityMonkey", "accountId": "811596193553", "userName": "SecurityMonkey"}}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "8e7dd720-6439-4f12-ad8d-e08e33a28488", "record_id": "flaws_cloudtrail:0000485:8e7dd720-6439-4f12-ad8d-e08e33a28488", "row_index": 485, "timestamp": "2017-05-27T05:00:15Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "AssumedRole", "arn": "arn:aws:sts::811596193553:assumed-role/SecurityMonkey/secmonkey", "account_id": "811596193553", "principal_id": "AROAUB2AA5FQRGAHITW4A:secmonkey", "user_name": null, "access_key_id": "ASIA48KTRDNET0U03TSQ", "session_issuer_arn": "arn:aws:iam::811596193553:role/SecurityMonkey", "session_issuer_user_name": "SecurityMonkey"}, "network": {"source_ip": "255.253.125.115", "user_agent": "Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56", "aws_region": "ca-central-1"}, "resource_arns": [], "raw_record_size_bytes": 1066, "raw_record_depth": 5, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "8e7dd720-6439-4f12-ad8d-e08e33a28488", "eventTime": "2017-05-27T05:00:15Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.253.125.115", "userAgent": "Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56", "awsRegion": "ca-central-1", "userIdentity": {"type": "AssumedRole", "principalId": "AROAUB2AA5FQRGAHITW4A:secmonkey", "arn": "arn:aws:sts::811596193553:assumed-role/SecurityMonkey/secmonkey", "accountId": "811596193553", "accessKeyId": "ASIA48KTRDNET0U03TSQ", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2017-05-27T05:00:08Z"}, "sessionIssuer": {"type": "Role", "principalId": "AROAUB2AA5FQRGAHITW4A", "arn": "arn:aws:iam::811596193553:role/SecurityMonkey", "accountId": "811596193553", "userName": "SecurityMonkey"}}}, "requestParameters": {"snapshotSet": {}, "ownersSet": {"items": [{"owner": "self"}]}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "f93d35cc-bb0b-4ba7-9ba2-92c1b3dacfd0", "record_id": "flaws_cloudtrail:0000486:f93d35cc-bb0b-4ba7-9ba2-92c1b3dacfd0", "row_index": 486, "timestamp": "2017-05-27T05:00:15Z", "event_type": "AssumeRole", "event_source": "sts.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/SecurityMokey", "account_id": "811596193553", "principal_id": "AIDAQ9SRE1SZZZ4Q4UOJH", "user_name": "SecurityMokey", "access_key_id": "AKIAXJ0III4JBKZDXGXN", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "255.253.125.115", "user_agent": "Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56", "aws_region": "us-east-1"}, "resource_arns": ["arn:aws:iam::811596193553:role/SecurityMonkey"], "raw_record_size_bytes": 1447, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "resources", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "f93d35cc-bb0b-4ba7-9ba2-92c1b3dacfd0", "eventTime": "2017-05-27T05:00:15Z", "eventName": "AssumeRole", "eventSource": "sts.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.253.125.115", "userAgent": "Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDAQ9SRE1SZZZ4Q4UOJH", "arn": "arn:aws:iam::811596193553:user/SecurityMokey", "accountId": "811596193553", "accessKeyId": "AKIAXJ0III4JBKZDXGXN", "userName": "SecurityMokey"}, "requestParameters": {"roleArn": "arn:aws:iam::811596193553:role/SecurityMonkey", "roleSessionName": "secmonkey"}, "responseElements": {"credentials": {"accessKeyId": "ASIAZRI9NZ2URDPT0331", "expiration": "May 27, 2017 6:00:15 AM", "sessionToken": "FQoDYXdzECYaDKofMKPpyu62Y5Mk3yLMAR1UmHjGnydMkKF6tw9rFgeoVEwLEe/PXDnjgyeXSKisIrxquB4973cVg/iO8yGjmV/XH8FK+xBNXYIKYzJQnMqxwrtQeE00BNl8J+tI5qY8phY9n8iZWePTi1NYjRU4at16eCHmLvfUdIpCv3xuJfkd9JaqVMVWtCzxuLv4ikIiZiGM7ZAejM8HVu3x9mI1P8lyJ56SU0iXvKTLkoWX1E7ZbfonV1EQQFhpy1CYx2Q5yBCY+M5Wv+TnV+rrZEg+V8Fv+OvnWO2kGRJPOCjfj6TJBQ=="}, "assumedRoleUser": {"assumedRoleId": "AROAUB2AA5FQRGAHITW4A:secmonkey", "arn": "arn:aws:sts::811596193553:assumed-role/SecurityMonkey/secmonkey"}}, "resources": [{"ARN": "arn:aws:iam::811596193553:role/SecurityMonkey", "accountId": "811596193553", "type": "AWS::IAM::Role"}]}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "009a5c39-79de-47c9-b791-c56267a3ad7", "record_id": "flaws_cloudtrail:0000487:009a5c39-79de-47c9-b791-c56267a3ad7", "row_index": 487, "timestamp": "2017-05-27T05:00:15Z", "event_type": "ListCertificates", "event_source": "acm.amazonaws.com", "principal": {"type": "AssumedRole", "arn": "arn:aws:sts::811596193553:assumed-role/SecurityMonkey/secmonkey", "account_id": "811596193553", "principal_id": "AROAUB2AA5FQRGAHITW4A:secmonkey", "user_name": null, "access_key_id": "ASIAZRI9NZ2URDPT0331", "session_issuer_arn": "arn:aws:iam::811596193553:role/SecurityMonkey", "session_issuer_user_name": "SecurityMonkey"}, "network": {"source_ip": "255.253.125.115", "user_agent": "Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56", "aws_region": "us-west-1"}, "resource_arns": [], "raw_record_size_bytes": 971, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "009a5c39-79de-47c9-b791-c56267a3ad7", "eventTime": "2017-05-27T05:00:15Z", "eventName": "ListCertificates", "eventSource": "acm.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.253.125.115", "userAgent": "Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56", "awsRegion": "us-west-1", "userIdentity": {"type": "AssumedRole", "principalId": "AROAUB2AA5FQRGAHITW4A:secmonkey", "arn": "arn:aws:sts::811596193553:assumed-role/SecurityMonkey/secmonkey", "accountId": "811596193553", "accessKeyId": "ASIAZRI9NZ2URDPT0331", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2017-05-27T05:00:15Z"}, "sessionIssuer": {"type": "Role", "principalId": "AROAUB2AA5FQRGAHITW4A", "arn": "arn:aws:iam::811596193553:role/SecurityMonkey", "accountId": "811596193553", "userName": "SecurityMonkey"}}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "9d4900a7-edb3-47d5-9bfc-0771ed81a45c", "record_id": "flaws_cloudtrail:0000488:9d4900a7-edb3-47d5-9bfc-0771ed81a45c", "row_index": 488, "timestamp": "2017-05-27T05:00:16Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "AssumedRole", "arn": "arn:aws:sts::811596193553:assumed-role/SecurityMonkey/secmonkey", "account_id": "811596193553", "principal_id": "AROAUB2AA5FQRGAHITW4A:secmonkey", "user_name": null, "access_key_id": "ASIA48KTRDNET0U03TSQ", "session_issuer_arn": "arn:aws:iam::811596193553:role/SecurityMonkey", "session_issuer_user_name": "SecurityMonkey"}, "network": {"source_ip": "255.253.125.115", "user_agent": "Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56", "aws_region": "eu-central-1"}, "resource_arns": [], "raw_record_size_bytes": 1066, "raw_record_depth": 5, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "9d4900a7-edb3-47d5-9bfc-0771ed81a45c", "eventTime": "2017-05-27T05:00:16Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.253.125.115", "userAgent": "Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56", "awsRegion": "eu-central-1", "userIdentity": {"type": "AssumedRole", "principalId": "AROAUB2AA5FQRGAHITW4A:secmonkey", "arn": "arn:aws:sts::811596193553:assumed-role/SecurityMonkey/secmonkey", "accountId": "811596193553", "accessKeyId": "ASIA48KTRDNET0U03TSQ", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2017-05-27T05:00:08Z"}, "sessionIssuer": {"type": "Role", "principalId": "AROAUB2AA5FQRGAHITW4A", "arn": "arn:aws:iam::811596193553:role/SecurityMonkey", "accountId": "811596193553", "userName": "SecurityMonkey"}}}, "requestParameters": {"snapshotSet": {}, "ownersSet": {"items": [{"owner": "self"}]}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "896e3bcf-b23e-4aab-88a2-12f605d21c9c", "record_id": "flaws_cloudtrail:0000489:896e3bcf-b23e-4aab-88a2-12f605d21c9c", "row_index": 489, "timestamp": "2017-05-27T05:00:16Z", "event_type": "AssumeRole", "event_source": "sts.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/SecurityMokey", "account_id": "811596193553", "principal_id": "AIDAQ9SRE1SZZZ4Q4UOJH", "user_name": "SecurityMokey", "access_key_id": "AKIAXJ0III4JBKZDXGXN", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "255.253.125.115", "user_agent": "Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56", "aws_region": "us-east-1"}, "resource_arns": ["arn:aws:iam::811596193553:role/SecurityMonkey"], "raw_record_size_bytes": 1453, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "resources", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "896e3bcf-b23e-4aab-88a2-12f605d21c9c", "eventTime": "2017-05-27T05:00:16Z", "eventName": "AssumeRole", "eventSource": "sts.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.253.125.115", "userAgent": "Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDAQ9SRE1SZZZ4Q4UOJH", "arn": "arn:aws:iam::811596193553:user/SecurityMokey", "accountId": "811596193553", "accessKeyId": "AKIAXJ0III4JBKZDXGXN", "userName": "SecurityMokey"}, "requestParameters": {"roleArn": "arn:aws:iam::811596193553:role/SecurityMonkey", "roleSessionName": "secmonkey"}, "responseElements": {"credentials": {"accessKeyId": "ASIAEKL86YNMLLHILT2E", "expiration": "May 27, 2017 6:00:16 AM", "sessionToken": "FQoDYXdzECYaDHkpnDMdrlEO2u0O+SLMAWimT/h5rC7Fn+KS+gX5MCs/QHLrY230ivNGcez5/ttBKzZWbQCgX+bi4t7TFNJhebwkR/3bj3F4jo1iaUTqN0Xef6pvrEcmkcIqRBDVYMaDvtgPD1PfbxEOIhwGX64FD3GCL7ketnT8bO5zTARypVMNlTFS/UQB38DWszcZHhVYFi4kXIPEcjZBAhAWSgeYLft2vOkJ9w+C4jUfjUFaMLCmsRJP80dIAw+UiPLcSNnQ/X3/eokWqGUfGUr/PZCbswa5xRBEsamOAzwwPijgj6TJBQ=="}, "assumedRoleUser": {"assumedRoleId": "AROAUB2AA5FQRGAHITW4A:secmonkey", "arn": "arn:aws:sts::811596193553:assumed-role/SecurityMonkey/secmonkey"}}, "resources": [{"ARN": "arn:aws:iam::811596193553:role/SecurityMonkey", "accountId": "811596193553", "type": "AWS::IAM::Role"}]}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "143396c-ca97-417b-9e1d-e2f44a2768ac", "record_id": "flaws_cloudtrail:0000490:143396c-ca97-417b-9e1d-e2f44a2768ac", "row_index": 490, "timestamp": "2017-05-27T05:00:17Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "AssumedRole", "arn": "arn:aws:sts::811596193553:assumed-role/SecurityMonkey/secmonkey", "account_id": "811596193553", "principal_id": "AROAUB2AA5FQRGAHITW4A:secmonkey", "user_name": null, "access_key_id": "ASIA48KTRDNET0U03TSQ", "session_issuer_arn": "arn:aws:iam::811596193553:role/SecurityMonkey", "session_issuer_user_name": "SecurityMonkey"}, "network": {"source_ip": "255.253.125.115", "user_agent": "Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56", "aws_region": "eu-west-1"}, "resource_arns": [], "raw_record_size_bytes": 1063, "raw_record_depth": 5, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "143396c-ca97-417b-9e1d-e2f44a2768ac", "eventTime": "2017-05-27T05:00:17Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.253.125.115", "userAgent": "Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56", "awsRegion": "eu-west-1", "userIdentity": {"type": "AssumedRole", "principalId": "AROAUB2AA5FQRGAHITW4A:secmonkey", "arn": "arn:aws:sts::811596193553:assumed-role/SecurityMonkey/secmonkey", "accountId": "811596193553", "accessKeyId": "ASIA48KTRDNET0U03TSQ", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2017-05-27T05:00:08Z"}, "sessionIssuer": {"type": "Role", "principalId": "AROAUB2AA5FQRGAHITW4A", "arn": "arn:aws:iam::811596193553:role/SecurityMonkey", "accountId": "811596193553", "userName": "SecurityMonkey"}}}, "requestParameters": {"snapshotSet": {}, "ownersSet": {"items": [{"owner": "self"}]}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "34daed51-260f-4e03-a36c-e9d5568f0a3f", "record_id": "flaws_cloudtrail:0000491:34daed51-260f-4e03-a36c-e9d5568f0a3f", "row_index": 491, "timestamp": "2017-05-27T05:00:17Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "AssumedRole", "arn": "arn:aws:sts::811596193553:assumed-role/SecurityMonkey/secmonkey", "account_id": "811596193553", "principal_id": "AROAUB2AA5FQRGAHITW4A:secmonkey", "user_name": null, "access_key_id": "ASIA48KTRDNET0U03TSQ", "session_issuer_arn": "arn:aws:iam::811596193553:role/SecurityMonkey", "session_issuer_user_name": "SecurityMonkey"}, "network": {"source_ip": "255.253.125.115", "user_agent": "Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56", "aws_region": "eu-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1063, "raw_record_depth": 5, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "34daed51-260f-4e03-a36c-e9d5568f0a3f", "eventTime": "2017-05-27T05:00:17Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.253.125.115", "userAgent": "Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56", "awsRegion": "eu-west-2", "userIdentity": {"type": "AssumedRole", "principalId": "AROAUB2AA5FQRGAHITW4A:secmonkey", "arn": "arn:aws:sts::811596193553:assumed-role/SecurityMonkey/secmonkey", "accountId": "811596193553", "accessKeyId": "ASIA48KTRDNET0U03TSQ", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2017-05-27T05:00:08Z"}, "sessionIssuer": {"type": "Role", "principalId": "AROAUB2AA5FQRGAHITW4A", "arn": "arn:aws:iam::811596193553:role/SecurityMonkey", "accountId": "811596193553", "userName": "SecurityMonkey"}}}, "requestParameters": {"snapshotSet": {}, "ownersSet": {"items": [{"owner": "self"}]}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "ff331c8a-3db5-4e70-8b36-249a642bb575", "record_id": "flaws_cloudtrail:0000492:ff331c8a-3db5-4e70-8b36-249a642bb575", "row_index": 492, "timestamp": "2017-05-27T05:00:17Z", "event_type": "ListBuckets", "event_source": "s3.amazonaws.com", "principal": {"type": "AssumedRole", "arn": "arn:aws:sts::811596193553:assumed-role/SecurityMonkey/cloudaux", "account_id": "811596193553", "principal_id": "AROAUB2AA5FQRGAHITW4A:cloudaux", "user_name": null, "access_key_id": "ASIAWWGE8SBRJDRN2KLG", "session_issuer_arn": "arn:aws:iam::811596193553:role/SecurityMonkey", "session_issuer_user_name": "SecurityMonkey"}, "network": {"source_ip": "255.253.125.115", "user_agent": "[Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56]", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 944, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "ff331c8a-3db5-4e70-8b36-249a642bb575", "eventTime": "2017-05-27T05:00:17Z", "eventName": "ListBuckets", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.253.125.115", "userAgent": "[Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56]", "awsRegion": "us-east-1", "userIdentity": {"type": "AssumedRole", "principalId": "AROAUB2AA5FQRGAHITW4A:cloudaux", "arn": "arn:aws:sts::811596193553:assumed-role/SecurityMonkey/cloudaux", "accountId": "811596193553", "accessKeyId": "ASIAWWGE8SBRJDRN2KLG", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2017-05-27T04:15:23Z"}, "sessionIssuer": {"type": "Role", "principalId": "AROAUB2AA5FQRGAHITW4A", "arn": "arn:aws:iam::811596193553:role/SecurityMonkey", "accountId": "811596193553", "userName": "SecurityMonkey"}}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "7074a4cb-9b66-456e-9fe2-3f033d4bc04c", "record_id": "flaws_cloudtrail:0000493:7074a4cb-9b66-456e-9fe2-3f033d4bc04c", "row_index": 493, "timestamp": "2017-05-27T05:00:17Z", "event_type": "GetBucketLocation", "event_source": "s3.amazonaws.com", "principal": {"type": "AssumedRole", "arn": "arn:aws:sts::811596193553:assumed-role/SecurityMonkey/cloudaux", "account_id": "811596193553", "principal_id": "AROAUB2AA5FQRGAHITW4A:cloudaux", "user_name": null, "access_key_id": "ASIAWWGE8SBRJDRN2KLG", "session_issuer_arn": "arn:aws:iam::811596193553:role/SecurityMonkey", "session_issuer_user_name": "SecurityMonkey"}, "network": {"source_ip": "255.253.125.115", "user_agent": "[Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56]", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 1033, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "7074a4cb-9b66-456e-9fe2-3f033d4bc04c", "eventTime": "2017-05-27T05:00:17Z", "eventName": "GetBucketLocation", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.253.125.115", "userAgent": "[Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56]", "awsRegion": "us-east-1", "userIdentity": {"type": "AssumedRole", "principalId": "AROAUB2AA5FQRGAHITW4A:cloudaux", "arn": "arn:aws:sts::811596193553:assumed-role/SecurityMonkey/cloudaux", "accountId": "811596193553", "accessKeyId": "ASIAWWGE8SBRJDRN2KLG", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2017-05-27T04:15:23Z"}, "sessionIssuer": {"type": "Role", "principalId": "AROAUB2AA5FQRGAHITW4A", "arn": "arn:aws:iam::811596193553:role/SecurityMonkey", "accountId": "811596193553", "userName": "SecurityMonkey"}}}, "requestParameters": {"bucketName": "b5677c799b465420d8e7b0a6689a0bb0c4afbc9e.flaws.cloud", "location": [""]}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "78c12126-6248-4718-90de-d5011353f806", "record_id": "flaws_cloudtrail:0000494:78c12126-6248-4718-90de-d5011353f806", "row_index": 494, "timestamp": "2017-05-27T05:00:17Z", "event_type": "ListCertificates", "event_source": "acm.amazonaws.com", "principal": {"type": "AssumedRole", "arn": "arn:aws:sts::811596193553:assumed-role/SecurityMonkey/secmonkey", "account_id": "811596193553", "principal_id": "AROAUB2AA5FQRGAHITW4A:secmonkey", "user_name": null, "access_key_id": "ASIAEKL86YNMLLHILT2E", "session_issuer_arn": "arn:aws:iam::811596193553:role/SecurityMonkey", "session_issuer_user_name": "SecurityMonkey"}, "network": {"source_ip": "255.253.125.115", "user_agent": "Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 972, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "78c12126-6248-4718-90de-d5011353f806", "eventTime": "2017-05-27T05:00:17Z", "eventName": "ListCertificates", "eventSource": "acm.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.253.125.115", "userAgent": "Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56", "awsRegion": "us-west-2", "userIdentity": {"type": "AssumedRole", "principalId": "AROAUB2AA5FQRGAHITW4A:secmonkey", "arn": "arn:aws:sts::811596193553:assumed-role/SecurityMonkey/secmonkey", "accountId": "811596193553", "accessKeyId": "ASIAEKL86YNMLLHILT2E", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2017-05-27T05:00:16Z"}, "sessionIssuer": {"type": "Role", "principalId": "AROAUB2AA5FQRGAHITW4A", "arn": "arn:aws:iam::811596193553:role/SecurityMonkey", "accountId": "811596193553", "userName": "SecurityMonkey"}}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "8a1412e3-2caf-45a9-9ed7-ef6350a8dd05", "record_id": "flaws_cloudtrail:0000495:8a1412e3-2caf-45a9-9ed7-ef6350a8dd05", "row_index": 495, "timestamp": "2017-05-27T05:00:18Z", "event_type": "GetBucketReplication", "event_source": "s3.amazonaws.com", "principal": {"type": "AssumedRole", "arn": "arn:aws:sts::811596193553:assumed-role/SecurityMonkey/cloudaux", "account_id": "811596193553", "principal_id": "AROAUB2AA5FQRGAHITW4A:cloudaux", "user_name": null, "access_key_id": "ASIA1FZDVOXSQD6GDJFL", "session_issuer_arn": "arn:aws:iam::811596193553:role/SecurityMonkey", "session_issuer_user_name": "SecurityMonkey"}, "network": {"source_ip": "255.253.125.115", "user_agent": "[Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56]", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1147, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "8a1412e3-2caf-45a9-9ed7-ef6350a8dd05", "eventTime": "2017-05-27T05:00:18Z", "eventName": "GetBucketReplication", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.253.125.115", "userAgent": "[Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56]", "awsRegion": "us-west-2", "errorCode": "ReplicationConfigurationNotFoundError", "errorMessage": "The replication configuration was not found", "userIdentity": {"type": "AssumedRole", "principalId": "AROAUB2AA5FQRGAHITW4A:cloudaux", "arn": "arn:aws:sts::811596193553:assumed-role/SecurityMonkey/cloudaux", "accountId": "811596193553", "accessKeyId": "ASIA1FZDVOXSQD6GDJFL", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2017-05-27T04:15:19Z"}, "sessionIssuer": {"type": "Role", "principalId": "AROAUB2AA5FQRGAHITW4A", "arn": "arn:aws:iam::811596193553:role/SecurityMonkey", "accountId": "811596193553", "userName": "SecurityMonkey"}}}, "requestParameters": {"replication": [""], "bucketName": "b5677c799b465420d8e7b0a6689a0bb0c4afbc9e.flaws.cloud"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "3ada2650-36b0-4745-ae00-bfe3214bd430", "record_id": "flaws_cloudtrail:0000496:3ada2650-36b0-4745-ae00-bfe3214bd430", "row_index": 496, "timestamp": "2017-05-27T05:00:18Z", "event_type": "GetBucketPolicy", "event_source": "s3.amazonaws.com", "principal": {"type": "AssumedRole", "arn": "arn:aws:sts::811596193553:assumed-role/SecurityMonkey/cloudaux", "account_id": "811596193553", "principal_id": "AROAUB2AA5FQRGAHITW4A:cloudaux", "user_name": null, "access_key_id": "ASIA1FZDVOXSQD6GDJFL", "session_issuer_arn": "arn:aws:iam::811596193553:role/SecurityMonkey", "session_issuer_user_name": "SecurityMonkey"}, "network": {"source_ip": "255.253.125.115", "user_agent": "[Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56]", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1029, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "3ada2650-36b0-4745-ae00-bfe3214bd430", "eventTime": "2017-05-27T05:00:18Z", "eventName": "GetBucketPolicy", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.253.125.115", "userAgent": "[Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56]", "awsRegion": "us-west-2", "userIdentity": {"type": "AssumedRole", "principalId": "AROAUB2AA5FQRGAHITW4A:cloudaux", "arn": "arn:aws:sts::811596193553:assumed-role/SecurityMonkey/cloudaux", "accountId": "811596193553", "accessKeyId": "ASIA1FZDVOXSQD6GDJFL", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2017-05-27T04:15:19Z"}, "sessionIssuer": {"type": "Role", "principalId": "AROAUB2AA5FQRGAHITW4A", "arn": "arn:aws:iam::811596193553:role/SecurityMonkey", "accountId": "811596193553", "userName": "SecurityMonkey"}}}, "requestParameters": {"bucketName": "b5677c799b465420d8e7b0a6689a0bb0c4afbc9e.flaws.cloud", "policy": [""]}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "3845ef7f-76e6-4946-be92-bf77fe63e183", "record_id": "flaws_cloudtrail:0000497:3845ef7f-76e6-4946-be92-bf77fe63e183", "row_index": 497, "timestamp": "2017-05-27T05:00:18Z", "event_type": "GetBucketLogging", "event_source": "s3.amazonaws.com", "principal": {"type": "AssumedRole", "arn": "arn:aws:sts::811596193553:assumed-role/SecurityMonkey/cloudaux", "account_id": "811596193553", "principal_id": "AROAUB2AA5FQRGAHITW4A:cloudaux", "user_name": null, "access_key_id": "ASIA1FZDVOXSQD6GDJFL", "session_issuer_arn": "arn:aws:iam::811596193553:role/SecurityMonkey", "session_issuer_user_name": "SecurityMonkey"}, "network": {"source_ip": "255.253.125.115", "user_agent": "[Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56]", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1031, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "3845ef7f-76e6-4946-be92-bf77fe63e183", "eventTime": "2017-05-27T05:00:18Z", "eventName": "GetBucketLogging", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.253.125.115", "userAgent": "[Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56]", "awsRegion": "us-west-2", "userIdentity": {"type": "AssumedRole", "principalId": "AROAUB2AA5FQRGAHITW4A:cloudaux", "arn": "arn:aws:sts::811596193553:assumed-role/SecurityMonkey/cloudaux", "accountId": "811596193553", "accessKeyId": "ASIA1FZDVOXSQD6GDJFL", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2017-05-27T04:15:19Z"}, "sessionIssuer": {"type": "Role", "principalId": "AROAUB2AA5FQRGAHITW4A", "arn": "arn:aws:iam::811596193553:role/SecurityMonkey", "accountId": "811596193553", "userName": "SecurityMonkey"}}}, "requestParameters": {"logging": [""], "bucketName": "b5677c799b465420d8e7b0a6689a0bb0c4afbc9e.flaws.cloud"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "5cd8081d-df19-43d1-a209-175e044b942c", "record_id": "flaws_cloudtrail:0000498:5cd8081d-df19-43d1-a209-175e044b942c", "row_index": 498, "timestamp": "2017-05-27T05:00:18Z", "event_type": "GetBucketTagging", "event_source": "s3.amazonaws.com", "principal": {"type": "AssumedRole", "arn": "arn:aws:sts::811596193553:assumed-role/SecurityMonkey/cloudaux", "account_id": "811596193553", "principal_id": "AROAUB2AA5FQRGAHITW4A:cloudaux", "user_name": null, "access_key_id": "ASIA1FZDVOXSQD6GDJFL", "session_issuer_arn": "arn:aws:iam::811596193553:role/SecurityMonkey", "session_issuer_user_name": "SecurityMonkey"}, "network": {"source_ip": "255.253.125.115", "user_agent": "[Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56]", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1101, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "5cd8081d-df19-43d1-a209-175e044b942c", "eventTime": "2017-05-27T05:00:18Z", "eventName": "GetBucketTagging", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.253.125.115", "userAgent": "[Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56]", "awsRegion": "us-west-2", "errorCode": "NoSuchTagSet", "errorMessage": "The TagSet does not exist", "userIdentity": {"type": "AssumedRole", "principalId": "AROAUB2AA5FQRGAHITW4A:cloudaux", "arn": "arn:aws:sts::811596193553:assumed-role/SecurityMonkey/cloudaux", "accountId": "811596193553", "accessKeyId": "ASIA1FZDVOXSQD6GDJFL", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2017-05-27T04:15:19Z"}, "sessionIssuer": {"type": "Role", "principalId": "AROAUB2AA5FQRGAHITW4A", "arn": "arn:aws:iam::811596193553:role/SecurityMonkey", "accountId": "811596193553", "userName": "SecurityMonkey"}}}, "requestParameters": {"tagging": [""], "bucketName": "b5677c799b465420d8e7b0a6689a0bb0c4afbc9e.flaws.cloud"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "7e1ee112-a300-4aef-9ef9-20c0208ed377", "record_id": "flaws_cloudtrail:0000499:7e1ee112-a300-4aef-9ef9-20c0208ed377", "row_index": 499, "timestamp": "2017-05-27T05:00:18Z", "event_type": "GetBucketCors", "event_source": "s3.amazonaws.com", "principal": {"type": "AssumedRole", "arn": "arn:aws:sts::811596193553:assumed-role/SecurityMonkey/cloudaux", "account_id": "811596193553", "principal_id": "AROAUB2AA5FQRGAHITW4A:cloudaux", "user_name": null, "access_key_id": "ASIA1FZDVOXSQD6GDJFL", "session_issuer_arn": "arn:aws:iam::811596193553:role/SecurityMonkey", "session_issuer_user_name": "SecurityMonkey"}, "network": {"source_ip": "255.253.125.115", "user_agent": "[Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56]", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1117, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "7e1ee112-a300-4aef-9ef9-20c0208ed377", "eventTime": "2017-05-27T05:00:18Z", "eventName": "GetBucketCors", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.253.125.115", "userAgent": "[Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56]", "awsRegion": "us-west-2", "errorCode": "NoSuchCORSConfiguration", "errorMessage": "The CORS configuration does not exist", "userIdentity": {"type": "AssumedRole", "principalId": "AROAUB2AA5FQRGAHITW4A:cloudaux", "arn": "arn:aws:sts::811596193553:assumed-role/SecurityMonkey/cloudaux", "accountId": "811596193553", "accessKeyId": "ASIA1FZDVOXSQD6GDJFL", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2017-05-27T04:15:19Z"}, "sessionIssuer": {"type": "Role", "principalId": "AROAUB2AA5FQRGAHITW4A", "arn": "arn:aws:iam::811596193553:role/SecurityMonkey", "accountId": "811596193553", "userName": "SecurityMonkey"}}}, "requestParameters": {"bucketName": "b5677c799b465420d8e7b0a6689a0bb0c4afbc9e.flaws.cloud", "cors": [""]}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "47becffd-ea01-43bb-8592-6d67c6dcc542", "record_id": "flaws_cloudtrail:0000500:47becffd-ea01-43bb-8592-6d67c6dcc542", "row_index": 500, "timestamp": "2017-05-27T05:00:18Z", "event_type": "GetBucketWebsite", "event_source": "s3.amazonaws.com", "principal": {"type": "AssumedRole", "arn": "arn:aws:sts::811596193553:assumed-role/SecurityMonkey/cloudaux", "account_id": "811596193553", "principal_id": "AROAUB2AA5FQRGAHITW4A:cloudaux", "user_name": null, "access_key_id": "ASIA1FZDVOXSQD6GDJFL", "session_issuer_arn": "arn:aws:iam::811596193553:role/SecurityMonkey", "session_issuer_user_name": "SecurityMonkey"}, "network": {"source_ip": "255.253.125.115", "user_agent": "[Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56]", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1031, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "47becffd-ea01-43bb-8592-6d67c6dcc542", "eventTime": "2017-05-27T05:00:18Z", "eventName": "GetBucketWebsite", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.253.125.115", "userAgent": "[Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56]", "awsRegion": "us-west-2", "userIdentity": {"type": "AssumedRole", "principalId": "AROAUB2AA5FQRGAHITW4A:cloudaux", "arn": "arn:aws:sts::811596193553:assumed-role/SecurityMonkey/cloudaux", "accountId": "811596193553", "accessKeyId": "ASIA1FZDVOXSQD6GDJFL", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2017-05-27T04:15:19Z"}, "sessionIssuer": {"type": "Role", "principalId": "AROAUB2AA5FQRGAHITW4A", "arn": "arn:aws:iam::811596193553:role/SecurityMonkey", "accountId": "811596193553", "userName": "SecurityMonkey"}}}, "requestParameters": {"bucketName": "b5677c799b465420d8e7b0a6689a0bb0c4afbc9e.flaws.cloud", "website": [""]}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "1bb514c9-ce53-4ee5-80c7-5e2be8c0bcc2", "record_id": "flaws_cloudtrail:0000501:1bb514c9-ce53-4ee5-80c7-5e2be8c0bcc2", "row_index": 501, "timestamp": "2017-05-27T05:00:18Z", "event_type": "GetBucketNotification", "event_source": "s3.amazonaws.com", "principal": {"type": "AssumedRole", "arn": "arn:aws:sts::811596193553:assumed-role/SecurityMonkey/cloudaux", "account_id": "811596193553", "principal_id": "AROAUB2AA5FQRGAHITW4A:cloudaux", "user_name": null, "access_key_id": "ASIA1FZDVOXSQD6GDJFL", "session_issuer_arn": "arn:aws:iam::811596193553:role/SecurityMonkey", "session_issuer_user_name": "SecurityMonkey"}, "network": {"source_ip": "255.253.125.115", "user_agent": "[Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56]", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1041, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "1bb514c9-ce53-4ee5-80c7-5e2be8c0bcc2", "eventTime": "2017-05-27T05:00:18Z", "eventName": "GetBucketNotification", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.253.125.115", "userAgent": "[Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56]", "awsRegion": "us-west-2", "userIdentity": {"type": "AssumedRole", "principalId": "AROAUB2AA5FQRGAHITW4A:cloudaux", "arn": "arn:aws:sts::811596193553:assumed-role/SecurityMonkey/cloudaux", "accountId": "811596193553", "accessKeyId": "ASIA1FZDVOXSQD6GDJFL", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2017-05-27T04:15:19Z"}, "sessionIssuer": {"type": "Role", "principalId": "AROAUB2AA5FQRGAHITW4A", "arn": "arn:aws:iam::811596193553:role/SecurityMonkey", "accountId": "811596193553", "userName": "SecurityMonkey"}}}, "requestParameters": {"notification": [""], "bucketName": "b5677c799b465420d8e7b0a6689a0bb0c4afbc9e.flaws.cloud"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "b969c890-93a6-4f98-909f-c194bae11abe", "record_id": "flaws_cloudtrail:0000502:b969c890-93a6-4f98-909f-c194bae11abe", "row_index": 502, "timestamp": "2017-05-27T05:00:19Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "AssumedRole", "arn": "arn:aws:sts::811596193553:assumed-role/SecurityMonkey/secmonkey", "account_id": "811596193553", "principal_id": "AROAUB2AA5FQRGAHITW4A:secmonkey", "user_name": null, "access_key_id": "ASIA48KTRDNET0U03TSQ", "session_issuer_arn": "arn:aws:iam::811596193553:role/SecurityMonkey", "session_issuer_user_name": "SecurityMonkey"}, "network": {"source_ip": "255.253.125.115", "user_agent": "Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56", "aws_region": "sa-east-1"}, "resource_arns": [], "raw_record_size_bytes": 1063, "raw_record_depth": 5, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "b969c890-93a6-4f98-909f-c194bae11abe", "eventTime": "2017-05-27T05:00:19Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.253.125.115", "userAgent": "Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56", "awsRegion": "sa-east-1", "userIdentity": {"type": "AssumedRole", "principalId": "AROAUB2AA5FQRGAHITW4A:secmonkey", "arn": "arn:aws:sts::811596193553:assumed-role/SecurityMonkey/secmonkey", "accountId": "811596193553", "accessKeyId": "ASIA48KTRDNET0U03TSQ", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2017-05-27T05:00:08Z"}, "sessionIssuer": {"type": "Role", "principalId": "AROAUB2AA5FQRGAHITW4A", "arn": "arn:aws:iam::811596193553:role/SecurityMonkey", "accountId": "811596193553", "userName": "SecurityMonkey"}}}, "requestParameters": {"snapshotSet": {}, "ownersSet": {"items": [{"owner": "self"}]}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "be489bc2-2dda-4726-b6ba-8778f9116edd", "record_id": "flaws_cloudtrail:0000503:be489bc2-2dda-4726-b6ba-8778f9116edd", "row_index": 503, "timestamp": "2017-05-27T05:00:19Z", "event_type": "AssumeRole", "event_source": "sts.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/SecurityMokey", "account_id": "811596193553", "principal_id": "AIDAQ9SRE1SZZZ4Q4UOJH", "user_name": "SecurityMokey", "access_key_id": "AKIAXJ0III4JBKZDXGXN", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "255.253.125.115", "user_agent": "Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56", "aws_region": "us-east-1"}, "resource_arns": ["arn:aws:iam::811596193553:role/SecurityMonkey"], "raw_record_size_bytes": 1446, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "resources", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "be489bc2-2dda-4726-b6ba-8778f9116edd", "eventTime": "2017-05-27T05:00:19Z", "eventName": "AssumeRole", "eventSource": "sts.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.253.125.115", "userAgent": "Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDAQ9SRE1SZZZ4Q4UOJH", "arn": "arn:aws:iam::811596193553:user/SecurityMokey", "accountId": "811596193553", "accessKeyId": "AKIAXJ0III4JBKZDXGXN", "userName": "SecurityMokey"}, "requestParameters": {"roleArn": "arn:aws:iam::811596193553:role/SecurityMonkey", "roleSessionName": "cloudaux"}, "responseElements": {"credentials": {"accessKeyId": "ASIA97AFJX4A1GZJI08P", "expiration": "May 27, 2017 6:00:19 AM", "sessionToken": "FQoDYXdzECYaDPcITI/QJZz55oA8myLLAc0WQe4add31e+LW+NgoVYBc+yPeR3DKGuZatKp+Ugr9cKpK9yWDbif/UiMzUzVlsGguyev/9bts25wWyQdtkVoqWNwLJmmmOTWo4t7SZhFB1bbvWcgYKbB8CAkQtKvFPa2XXFf/yKoRpTNLSq8FO7cwzOxyC+A6OavydMFMXILeTPermpyN+WgNeHmIS6giZS45R/j+odVq2OsAcEJrvSn+IWfL8xqJo96+e/IGrYVofYytwArF0sjRcnIm27XIQgVbUyuC8FJjuqgyKOOPpMkF"}, "assumedRoleUser": {"assumedRoleId": "AROAUB2AA5FQRGAHITW4A:cloudaux", "arn": "arn:aws:sts::811596193553:assumed-role/SecurityMonkey/cloudaux"}}, "resources": [{"ARN": "arn:aws:iam::811596193553:role/SecurityMonkey", "accountId": "811596193553", "type": "AWS::IAM::Role"}]}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "64c299f6-3793-4028-9087-130429a5e8b5", "record_id": "flaws_cloudtrail:0000504:64c299f6-3793-4028-9087-130429a5e8b5", "row_index": 504, "timestamp": "2017-05-27T05:00:19Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "AssumedRole", "arn": "arn:aws:sts::811596193553:assumed-role/SecurityMonkey/secmonkey", "account_id": "811596193553", "principal_id": "AROAUB2AA5FQRGAHITW4A:secmonkey", "user_name": null, "access_key_id": "ASIA48KTRDNET0U03TSQ", "session_issuer_arn": "arn:aws:iam::811596193553:role/SecurityMonkey", "session_issuer_user_name": "SecurityMonkey"}, "network": {"source_ip": "255.253.125.115", "user_agent": "Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 1062, "raw_record_depth": 5, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "64c299f6-3793-4028-9087-130429a5e8b5", "eventTime": "2017-05-27T05:00:19Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.253.125.115", "userAgent": "Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56", "awsRegion": "us-east-1", "userIdentity": {"type": "AssumedRole", "principalId": "AROAUB2AA5FQRGAHITW4A:secmonkey", "arn": "arn:aws:sts::811596193553:assumed-role/SecurityMonkey/secmonkey", "accountId": "811596193553", "accessKeyId": "ASIA48KTRDNET0U03TSQ", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2017-05-27T05:00:08Z"}, "sessionIssuer": {"type": "Role", "principalId": "AROAUB2AA5FQRGAHITW4A", "arn": "arn:aws:iam::811596193553:role/SecurityMonkey", "accountId": "811596193553", "userName": "SecurityMonkey"}}}, "requestParameters": {"snapshotSet": {}, "ownersSet": {"items": [{"owner": "self"}]}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "7ca5fe7f-1f9e-4bad-824a-607732c0b98c", "record_id": "flaws_cloudtrail:0000505:7ca5fe7f-1f9e-4bad-824a-607732c0b98c", "row_index": 505, "timestamp": "2017-05-27T05:00:19Z", "event_type": "GetBucketAcl", "event_source": "s3.amazonaws.com", "principal": {"type": "AssumedRole", "arn": "arn:aws:sts::811596193553:assumed-role/SecurityMonkey/cloudaux", "account_id": "811596193553", "principal_id": "AROAUB2AA5FQRGAHITW4A:cloudaux", "user_name": null, "access_key_id": "ASIA1FZDVOXSQD6GDJFL", "session_issuer_arn": "arn:aws:iam::811596193553:role/SecurityMonkey", "session_issuer_user_name": "SecurityMonkey"}, "network": {"source_ip": "255.253.125.115", "user_agent": "[Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56]", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1024, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "7ca5fe7f-1f9e-4bad-824a-607732c0b98c", "eventTime": "2017-05-27T05:00:19Z", "eventName": "GetBucketAcl", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.253.125.115", "userAgent": "[Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56]", "awsRegion": "us-west-2", "userIdentity": {"type": "AssumedRole", "principalId": "AROAUB2AA5FQRGAHITW4A:cloudaux", "arn": "arn:aws:sts::811596193553:assumed-role/SecurityMonkey/cloudaux", "accountId": "811596193553", "accessKeyId": "ASIA1FZDVOXSQD6GDJFL", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2017-05-27T04:15:19Z"}, "sessionIssuer": {"type": "Role", "principalId": "AROAUB2AA5FQRGAHITW4A", "arn": "arn:aws:iam::811596193553:role/SecurityMonkey", "accountId": "811596193553", "userName": "SecurityMonkey"}}}, "requestParameters": {"bucketName": "b5677c799b465420d8e7b0a6689a0bb0c4afbc9e.flaws.cloud", "acl": [""]}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "9b058aa3-f9e0-47e1-898f-1dbaa869c40c", "record_id": "flaws_cloudtrail:0000506:9b058aa3-f9e0-47e1-898f-1dbaa869c40c", "row_index": 506, "timestamp": "2017-05-27T05:00:20Z", "event_type": "GetBucketLocation", "event_source": "s3.amazonaws.com", "principal": {"type": "AssumedRole", "arn": "arn:aws:sts::811596193553:assumed-role/SecurityMonkey/cloudaux", "account_id": "811596193553", "principal_id": "AROAUB2AA5FQRGAHITW4A:cloudaux", "user_name": null, "access_key_id": "ASIAWWGE8SBRJDRN2KLG", "session_issuer_arn": "arn:aws:iam::811596193553:role/SecurityMonkey", "session_issuer_user_name": "SecurityMonkey"}, "network": {"source_ip": "255.253.125.115", "user_agent": "[Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56]", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 991, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "9b058aa3-f9e0-47e1-898f-1dbaa869c40c", "eventTime": "2017-05-27T05:00:20Z", "eventName": "GetBucketLocation", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.253.125.115", "userAgent": "[Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56]", "awsRegion": "us-east-1", "userIdentity": {"type": "AssumedRole", "principalId": "AROAUB2AA5FQRGAHITW4A:cloudaux", "arn": "arn:aws:sts::811596193553:assumed-role/SecurityMonkey/cloudaux", "accountId": "811596193553", "accessKeyId": "ASIAWWGE8SBRJDRN2KLG", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2017-05-27T04:15:23Z"}, "sessionIssuer": {"type": "Role", "principalId": "AROAUB2AA5FQRGAHITW4A", "arn": "arn:aws:iam::811596193553:role/SecurityMonkey", "accountId": "811596193553", "userName": "SecurityMonkey"}}}, "requestParameters": {"bucketName": "flaws-logs", "location": [""]}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "207e9dc9-a728-4ef8-a9bf-3570727b1c06", "record_id": "flaws_cloudtrail:0000507:207e9dc9-a728-4ef8-a9bf-3570727b1c06", "row_index": 507, "timestamp": "2017-05-27T05:00:20Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "AssumedRole", "arn": "arn:aws:sts::811596193553:assumed-role/SecurityMonkey/secmonkey", "account_id": "811596193553", "principal_id": "AROAUB2AA5FQRGAHITW4A:secmonkey", "user_name": null, "access_key_id": "ASIA48KTRDNET0U03TSQ", "session_issuer_arn": "arn:aws:iam::811596193553:role/SecurityMonkey", "session_issuer_user_name": "SecurityMonkey"}, "network": {"source_ip": "255.253.125.115", "user_agent": "Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56", "aws_region": "us-east-2"}, "resource_arns": [], "raw_record_size_bytes": 1063, "raw_record_depth": 5, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "207e9dc9-a728-4ef8-a9bf-3570727b1c06", "eventTime": "2017-05-27T05:00:20Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.253.125.115", "userAgent": "Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56", "awsRegion": "us-east-2", "userIdentity": {"type": "AssumedRole", "principalId": "AROAUB2AA5FQRGAHITW4A:secmonkey", "arn": "arn:aws:sts::811596193553:assumed-role/SecurityMonkey/secmonkey", "accountId": "811596193553", "accessKeyId": "ASIA48KTRDNET0U03TSQ", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2017-05-27T05:00:08Z"}, "sessionIssuer": {"type": "Role", "principalId": "AROAUB2AA5FQRGAHITW4A", "arn": "arn:aws:iam::811596193553:role/SecurityMonkey", "accountId": "811596193553", "userName": "SecurityMonkey"}}}, "requestParameters": {"snapshotSet": {}, "ownersSet": {"items": [{"owner": "self"}]}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "d52c8453-458e-42fc-91a7-0db72db14038", "record_id": "flaws_cloudtrail:0000508:d52c8453-458e-42fc-91a7-0db72db14038", "row_index": 508, "timestamp": "2017-05-27T05:00:20Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "AssumedRole", "arn": "arn:aws:sts::811596193553:assumed-role/SecurityMonkey/secmonkey", "account_id": "811596193553", "principal_id": "AROAUB2AA5FQRGAHITW4A:secmonkey", "user_name": null, "access_key_id": "ASIA48KTRDNET0U03TSQ", "session_issuer_arn": "arn:aws:iam::811596193553:role/SecurityMonkey", "session_issuer_user_name": "SecurityMonkey"}, "network": {"source_ip": "255.253.125.115", "user_agent": "Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56", "aws_region": "us-west-1"}, "resource_arns": [], "raw_record_size_bytes": 1063, "raw_record_depth": 5, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "d52c8453-458e-42fc-91a7-0db72db14038", "eventTime": "2017-05-27T05:00:20Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.253.125.115", "userAgent": "Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56", "awsRegion": "us-west-1", "userIdentity": {"type": "AssumedRole", "principalId": "AROAUB2AA5FQRGAHITW4A:secmonkey", "arn": "arn:aws:sts::811596193553:assumed-role/SecurityMonkey/secmonkey", "accountId": "811596193553", "accessKeyId": "ASIA48KTRDNET0U03TSQ", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2017-05-27T05:00:08Z"}, "sessionIssuer": {"type": "Role", "principalId": "AROAUB2AA5FQRGAHITW4A", "arn": "arn:aws:iam::811596193553:role/SecurityMonkey", "accountId": "811596193553", "userName": "SecurityMonkey"}}}, "requestParameters": {"snapshotSet": {}, "ownersSet": {"items": [{"owner": "self"}]}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "09fa95ab-3341-48de-a6c1-e94ce7909c6f", "record_id": "flaws_cloudtrail:0000509:09fa95ab-3341-48de-a6c1-e94ce7909c6f", "row_index": 509, "timestamp": "2017-05-27T05:00:20Z", "event_type": "GetBucketWebsite", "event_source": "s3.amazonaws.com", "principal": {"type": "AssumedRole", "arn": "arn:aws:sts::811596193553:assumed-role/SecurityMonkey/cloudaux", "account_id": "811596193553", "principal_id": "AROAUB2AA5FQRGAHITW4A:cloudaux", "user_name": null, "access_key_id": "ASIA97AFJX4A1GZJI08P", "session_issuer_arn": "arn:aws:iam::811596193553:role/SecurityMonkey", "session_issuer_user_name": "SecurityMonkey"}, "network": {"source_ip": "255.253.125.115", "user_agent": "[Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56]", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1106, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "09fa95ab-3341-48de-a6c1-e94ce7909c6f", "eventTime": "2017-05-27T05:00:20Z", "eventName": "GetBucketWebsite", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.253.125.115", "userAgent": "[Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56]", "awsRegion": "us-west-2", "errorCode": "NoSuchWebsiteConfiguration", "errorMessage": "The specified bucket does not have a website configuration", "userIdentity": {"type": "AssumedRole", "principalId": "AROAUB2AA5FQRGAHITW4A:cloudaux", "arn": "arn:aws:sts::811596193553:assumed-role/SecurityMonkey/cloudaux", "accountId": "811596193553", "accessKeyId": "ASIA97AFJX4A1GZJI08P", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2017-05-27T05:00:19Z"}, "sessionIssuer": {"type": "Role", "principalId": "AROAUB2AA5FQRGAHITW4A", "arn": "arn:aws:iam::811596193553:role/SecurityMonkey", "accountId": "811596193553", "userName": "SecurityMonkey"}}}, "requestParameters": {"bucketName": "flaws-logs", "website": [""]}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "2d948e8f-b29a-4036-b3d2-18e310a366c8", "record_id": "flaws_cloudtrail:0000510:2d948e8f-b29a-4036-b3d2-18e310a366c8", "row_index": 510, "timestamp": "2017-05-27T05:00:20Z", "event_type": "GetBucketVersioning", "event_source": "s3.amazonaws.com", "principal": {"type": "AssumedRole", "arn": "arn:aws:sts::811596193553:assumed-role/SecurityMonkey/cloudaux", "account_id": "811596193553", "principal_id": "AROAUB2AA5FQRGAHITW4A:cloudaux", "user_name": null, "access_key_id": "ASIA97AFJX4A1GZJI08P", "session_issuer_arn": "arn:aws:iam::811596193553:role/SecurityMonkey", "session_issuer_user_name": "SecurityMonkey"}, "network": {"source_ip": "255.253.125.115", "user_agent": "[Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56]", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1037, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "2d948e8f-b29a-4036-b3d2-18e310a366c8", "eventTime": "2017-05-27T05:00:20Z", "eventName": "GetBucketVersioning", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.253.125.115", "userAgent": "[Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56]", "awsRegion": "us-west-2", "userIdentity": {"type": "AssumedRole", "principalId": "AROAUB2AA5FQRGAHITW4A:cloudaux", "arn": "arn:aws:sts::811596193553:assumed-role/SecurityMonkey/cloudaux", "accountId": "811596193553", "accessKeyId": "ASIA97AFJX4A1GZJI08P", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2017-05-27T05:00:19Z"}, "sessionIssuer": {"type": "Role", "principalId": "AROAUB2AA5FQRGAHITW4A", "arn": "arn:aws:iam::811596193553:role/SecurityMonkey", "accountId": "811596193553", "userName": "SecurityMonkey"}}}, "requestParameters": {"bucketName": "b5677c799b465420d8e7b0a6689a0bb0c4afbc9e.flaws.cloud", "versioning": [""]}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "23f0de97-f998-487f-b62b-0d0ab7479717", "record_id": "flaws_cloudtrail:0000511:23f0de97-f998-487f-b62b-0d0ab7479717", "row_index": 511, "timestamp": "2017-05-27T05:00:20Z", "event_type": "GetBucketLifecycle", "event_source": "s3.amazonaws.com", "principal": {"type": "AssumedRole", "arn": "arn:aws:sts::811596193553:assumed-role/SecurityMonkey/cloudaux", "account_id": "811596193553", "principal_id": "AROAUB2AA5FQRGAHITW4A:cloudaux", "user_name": null, "access_key_id": "ASIA97AFJX4A1GZJI08P", "session_issuer_arn": "arn:aws:iam::811596193553:role/SecurityMonkey", "session_issuer_user_name": "SecurityMonkey"}, "network": {"source_ip": "255.253.125.115", "user_agent": "[Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56]", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1136, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "23f0de97-f998-487f-b62b-0d0ab7479717", "eventTime": "2017-05-27T05:00:20Z", "eventName": "GetBucketLifecycle", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.253.125.115", "userAgent": "[Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56]", "awsRegion": "us-west-2", "errorCode": "NoSuchLifecycleConfiguration", "errorMessage": "The lifecycle configuration does not exist", "userIdentity": {"type": "AssumedRole", "principalId": "AROAUB2AA5FQRGAHITW4A:cloudaux", "arn": "arn:aws:sts::811596193553:assumed-role/SecurityMonkey/cloudaux", "accountId": "811596193553", "accessKeyId": "ASIA97AFJX4A1GZJI08P", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2017-05-27T05:00:19Z"}, "sessionIssuer": {"type": "Role", "principalId": "AROAUB2AA5FQRGAHITW4A", "arn": "arn:aws:iam::811596193553:role/SecurityMonkey", "accountId": "811596193553", "userName": "SecurityMonkey"}}}, "requestParameters": {"lifecycle": [""], "bucketName": "b5677c799b465420d8e7b0a6689a0bb0c4afbc9e.flaws.cloud"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "17c886be-1c99-43dc-890e-e46e2470390b", "record_id": "flaws_cloudtrail:0000512:17c886be-1c99-43dc-890e-e46e2470390b", "row_index": 512, "timestamp": "2017-05-27T05:00:20Z", "event_type": "GetBucketCors", "event_source": "s3.amazonaws.com", "principal": {"type": "AssumedRole", "arn": "arn:aws:sts::811596193553:assumed-role/SecurityMonkey/cloudaux", "account_id": "811596193553", "principal_id": "AROAUB2AA5FQRGAHITW4A:cloudaux", "user_name": null, "access_key_id": "ASIA97AFJX4A1GZJI08P", "session_issuer_arn": "arn:aws:iam::811596193553:role/SecurityMonkey", "session_issuer_user_name": "SecurityMonkey"}, "network": {"source_ip": "255.253.125.115", "user_agent": "[Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56]", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1076, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "17c886be-1c99-43dc-890e-e46e2470390b", "eventTime": "2017-05-27T05:00:20Z", "eventName": "GetBucketCors", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.253.125.115", "userAgent": "[Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56]", "awsRegion": "us-west-2", "errorCode": "NoSuchCORSConfiguration", "errorMessage": "The CORS configuration does not exist", "userIdentity": {"type": "AssumedRole", "principalId": "AROAUB2AA5FQRGAHITW4A:cloudaux", "arn": "arn:aws:sts::811596193553:assumed-role/SecurityMonkey/cloudaux", "accountId": "811596193553", "accessKeyId": "ASIA97AFJX4A1GZJI08P", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2017-05-27T05:00:19Z"}, "sessionIssuer": {"type": "Role", "principalId": "AROAUB2AA5FQRGAHITW4A", "arn": "arn:aws:iam::811596193553:role/SecurityMonkey", "accountId": "811596193553", "userName": "SecurityMonkey"}}}, "requestParameters": {"bucketName": "flaws-logs", "cors": [""]}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "cc6741ff-5c9d-4d86-b318-425961e9d7d2", "record_id": "flaws_cloudtrail:0000513:cc6741ff-5c9d-4d86-b318-425961e9d7d2", "row_index": 513, "timestamp": "2017-05-27T05:00:20Z", "event_type": "GetBucketLogging", "event_source": "s3.amazonaws.com", "principal": {"type": "AssumedRole", "arn": "arn:aws:sts::811596193553:assumed-role/SecurityMonkey/cloudaux", "account_id": "811596193553", "principal_id": "AROAUB2AA5FQRGAHITW4A:cloudaux", "user_name": null, "access_key_id": "ASIA97AFJX4A1GZJI08P", "session_issuer_arn": "arn:aws:iam::811596193553:role/SecurityMonkey", "session_issuer_user_name": "SecurityMonkey"}, "network": {"source_ip": "255.253.125.115", "user_agent": "[Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56]", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 989, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "cc6741ff-5c9d-4d86-b318-425961e9d7d2", "eventTime": "2017-05-27T05:00:20Z", "eventName": "GetBucketLogging", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.253.125.115", "userAgent": "[Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56]", "awsRegion": "us-west-2", "userIdentity": {"type": "AssumedRole", "principalId": "AROAUB2AA5FQRGAHITW4A:cloudaux", "arn": "arn:aws:sts::811596193553:assumed-role/SecurityMonkey/cloudaux", "accountId": "811596193553", "accessKeyId": "ASIA97AFJX4A1GZJI08P", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2017-05-27T05:00:19Z"}, "sessionIssuer": {"type": "Role", "principalId": "AROAUB2AA5FQRGAHITW4A", "arn": "arn:aws:iam::811596193553:role/SecurityMonkey", "accountId": "811596193553", "userName": "SecurityMonkey"}}}, "requestParameters": {"logging": [""], "bucketName": "flaws-logs"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "0f9ca8e6-bc53-427f-a7d6-e13832e8f7f", "record_id": "flaws_cloudtrail:0000514:0f9ca8e6-bc53-427f-a7d6-e13832e8f7f", "row_index": 514, "timestamp": "2017-05-27T05:00:20Z", "event_type": "GetBucketReplication", "event_source": "s3.amazonaws.com", "principal": {"type": "AssumedRole", "arn": "arn:aws:sts::811596193553:assumed-role/SecurityMonkey/cloudaux", "account_id": "811596193553", "principal_id": "AROAUB2AA5FQRGAHITW4A:cloudaux", "user_name": null, "access_key_id": "ASIA97AFJX4A1GZJI08P", "session_issuer_arn": "arn:aws:iam::811596193553:role/SecurityMonkey", "session_issuer_user_name": "SecurityMonkey"}, "network": {"source_ip": "255.253.125.115", "user_agent": "[Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56]", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1108, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "0f9ca8e6-bc53-427f-a7d6-e13832e8f7f", "eventTime": "2017-05-27T05:00:20Z", "eventName": "GetBucketReplication", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.253.125.115", "userAgent": "[Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56]", "awsRegion": "us-west-2", "errorCode": "ReplicationConfigurationNotFoundError", "errorMessage": "The replication configuration was not found", "userIdentity": {"type": "AssumedRole", "principalId": "AROAUB2AA5FQRGAHITW4A:cloudaux", "arn": "arn:aws:sts::811596193553:assumed-role/SecurityMonkey/cloudaux", "accountId": "811596193553", "accessKeyId": "ASIA97AFJX4A1GZJI08P", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2017-05-27T05:00:19Z"}, "sessionIssuer": {"type": "Role", "principalId": "AROAUB2AA5FQRGAHITW4A", "arn": "arn:aws:iam::811596193553:role/SecurityMonkey", "accountId": "811596193553", "userName": "SecurityMonkey"}}}, "requestParameters": {"replication": [""], "bucketName": "flaws-logs"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "48920-1235-4085-bdac-f10fbbe26965", "record_id": "flaws_cloudtrail:0000515:48920-1235-4085-bdac-f10fbbe26965", "row_index": 515, "timestamp": "2017-05-27T05:00:21Z", "event_type": "AssumeRole", "event_source": "sts.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/SecurityMokey", "account_id": "811596193553", "principal_id": "AIDAQ9SRE1SZZZ4Q4UOJH", "user_name": "SecurityMokey", "access_key_id": "AKIAXJ0III4JBKZDXGXN", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "255.253.125.115", "user_agent": "Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56", "aws_region": "us-east-1"}, "resource_arns": ["arn:aws:iam::811596193553:role/SecurityMonkey"], "raw_record_size_bytes": 1449, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "resources", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "48920-1235-4085-bdac-f10fbbe26965", "eventTime": "2017-05-27T05:00:21Z", "eventName": "AssumeRole", "eventSource": "sts.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.253.125.115", "userAgent": "Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDAQ9SRE1SZZZ4Q4UOJH", "arn": "arn:aws:iam::811596193553:user/SecurityMokey", "accountId": "811596193553", "accessKeyId": "AKIAXJ0III4JBKZDXGXN", "userName": "SecurityMokey"}, "requestParameters": {"roleArn": "arn:aws:iam::811596193553:role/SecurityMonkey", "roleSessionName": "secmonkey"}, "responseElements": {"credentials": {"accessKeyId": "ASIAP2NO3L9F66JRLDUJ", "expiration": "May 27, 2017 6:00:21 AM", "sessionToken": "FQoDYXdzECYaDHjoRElWLjHEsDhlYCLMAY4vUFf390tn/HpYcgP30d3Hi/QkuWFs3Ve279JfoCg1/b9vhqo/ahW5Y+eR40UEhYK4VZ9XsYbb41IKd6KxVm6ZcvEVsOp9BZsuXA7qb68MHFzNnj/pCHu6nAP/PSOVSzFgiGjh/TGmOuDb9nd6KmJ12Fg0ozM17NajCeWMnbYsL43gLNQvuuGxPF54I45gpHWuaYZ+f1BZfNTM17s3N+6rTJD+7/yhnnx2Q2CoI7T4k1/EfOGf6AUiZnjLDg6PimxJMIcJ/D4zKLeeuyjlj6TJBQ=="}, "assumedRoleUser": {"assumedRoleId": "AROAUB2AA5FQRGAHITW4A:secmonkey", "arn": "arn:aws:sts::811596193553:assumed-role/SecurityMonkey/secmonkey"}}, "resources": [{"ARN": "arn:aws:iam::811596193553:role/SecurityMonkey", "accountId": "811596193553", "type": "AWS::IAM::Role"}]}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "430186bdf-e0d6-4fcc-878d-25e374fcf324", "record_id": "flaws_cloudtrail:0000516:430186bdf-e0d6-4fcc-878d-25e374fcf324", "row_index": 516, "timestamp": "2017-05-27T05:00:21Z", "event_type": "GetBucketNotification", "event_source": "s3.amazonaws.com", "principal": {"type": "AssumedRole", "arn": "arn:aws:sts::811596193553:assumed-role/SecurityMonkey/cloudaux", "account_id": "811596193553", "principal_id": "AROAUB2AA5FQRGAHITW4A:cloudaux", "user_name": null, "access_key_id": "ASIA97AFJX4A1GZJI08P", "session_issuer_arn": "arn:aws:iam::811596193553:role/SecurityMonkey", "session_issuer_user_name": "SecurityMonkey"}, "network": {"source_ip": "255.253.125.115", "user_agent": "[Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56]", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1000, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "430186bdf-e0d6-4fcc-878d-25e374fcf324", "eventTime": "2017-05-27T05:00:21Z", "eventName": "GetBucketNotification", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.253.125.115", "userAgent": "[Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56]", "awsRegion": "us-west-2", "userIdentity": {"type": "AssumedRole", "principalId": "AROAUB2AA5FQRGAHITW4A:cloudaux", "arn": "arn:aws:sts::811596193553:assumed-role/SecurityMonkey/cloudaux", "accountId": "811596193553", "accessKeyId": "ASIA97AFJX4A1GZJI08P", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2017-05-27T05:00:19Z"}, "sessionIssuer": {"type": "Role", "principalId": "AROAUB2AA5FQRGAHITW4A", "arn": "arn:aws:iam::811596193553:role/SecurityMonkey", "accountId": "811596193553", "userName": "SecurityMonkey"}}}, "requestParameters": {"notification": [""], "bucketName": "flaws-logs"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "90e184a2-2d22-48e8-acc8-e2440ac652235", "record_id": "flaws_cloudtrail:0000517:90e184a2-2d22-48e8-acc8-e2440ac652235", "row_index": 517, "timestamp": "2017-05-27T05:00:21Z", "event_type": "GetBucketTagging", "event_source": "s3.amazonaws.com", "principal": {"type": "AssumedRole", "arn": "arn:aws:sts::811596193553:assumed-role/SecurityMonkey/cloudaux", "account_id": "811596193553", "principal_id": "AROAUB2AA5FQRGAHITW4A:cloudaux", "user_name": null, "access_key_id": "ASIA97AFJX4A1GZJI08P", "session_issuer_arn": "arn:aws:iam::811596193553:role/SecurityMonkey", "session_issuer_user_name": "SecurityMonkey"}, "network": {"source_ip": "255.253.125.115", "user_agent": "[Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56]", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1058, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "90e184a2-2d22-48e8-acc8-e2440ac652235", "eventTime": "2017-05-27T05:00:21Z", "eventName": "GetBucketTagging", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.253.125.115", "userAgent": "[Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56]", "awsRegion": "us-west-2", "errorCode": "NoSuchTagSet", "errorMessage": "The TagSet does not exist", "userIdentity": {"type": "AssumedRole", "principalId": "AROAUB2AA5FQRGAHITW4A:cloudaux", "arn": "arn:aws:sts::811596193553:assumed-role/SecurityMonkey/cloudaux", "accountId": "811596193553", "accessKeyId": "ASIA97AFJX4A1GZJI08P", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2017-05-27T05:00:19Z"}, "sessionIssuer": {"type": "Role", "principalId": "AROAUB2AA5FQRGAHITW4A", "arn": "arn:aws:iam::811596193553:role/SecurityMonkey", "accountId": "811596193553", "userName": "SecurityMonkey"}}}, "requestParameters": {"tagging": [""], "bucketName": "flaws-logs"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "932b018c-3106-4717-b061-4cd0f2fc8c14", "record_id": "flaws_cloudtrail:0000518:932b018c-3106-4717-b061-4cd0f2fc8c14", "row_index": 518, "timestamp": "2017-05-27T05:00:21Z", "event_type": "GetBucketVersioning", "event_source": "s3.amazonaws.com", "principal": {"type": "AssumedRole", "arn": "arn:aws:sts::811596193553:assumed-role/SecurityMonkey/cloudaux", "account_id": "811596193553", "principal_id": "AROAUB2AA5FQRGAHITW4A:cloudaux", "user_name": null, "access_key_id": "ASIA97AFJX4A1GZJI08P", "session_issuer_arn": "arn:aws:iam::811596193553:role/SecurityMonkey", "session_issuer_user_name": "SecurityMonkey"}, "network": {"source_ip": "255.253.125.115", "user_agent": "[Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56]", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 995, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "932b018c-3106-4717-b061-4cd0f2fc8c14", "eventTime": "2017-05-27T05:00:21Z", "eventName": "GetBucketVersioning", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.253.125.115", "userAgent": "[Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56]", "awsRegion": "us-west-2", "userIdentity": {"type": "AssumedRole", "principalId": "AROAUB2AA5FQRGAHITW4A:cloudaux", "arn": "arn:aws:sts::811596193553:assumed-role/SecurityMonkey/cloudaux", "accountId": "811596193553", "accessKeyId": "ASIA97AFJX4A1GZJI08P", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2017-05-27T05:00:19Z"}, "sessionIssuer": {"type": "Role", "principalId": "AROAUB2AA5FQRGAHITW4A", "arn": "arn:aws:iam::811596193553:role/SecurityMonkey", "accountId": "811596193553", "userName": "SecurityMonkey"}}}, "requestParameters": {"bucketName": "flaws-logs", "versioning": [""]}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "ff0f30c5-ab29-46c7-a80f-e0bd918e6078", "record_id": "flaws_cloudtrail:0000519:ff0f30c5-ab29-46c7-a80f-e0bd918e6078", "row_index": 519, "timestamp": "2017-05-27T05:00:21Z", "event_type": "GetBucketPolicy", "event_source": "s3.amazonaws.com", "principal": {"type": "AssumedRole", "arn": "arn:aws:sts::811596193553:assumed-role/SecurityMonkey/cloudaux", "account_id": "811596193553", "principal_id": "AROAUB2AA5FQRGAHITW4A:cloudaux", "user_name": null, "access_key_id": "ASIA97AFJX4A1GZJI08P", "session_issuer_arn": "arn:aws:iam::811596193553:role/SecurityMonkey", "session_issuer_user_name": "SecurityMonkey"}, "network": {"source_ip": "255.253.125.115", "user_agent": "[Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56]", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 988, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "ff0f30c5-ab29-46c7-a80f-e0bd918e6078", "eventTime": "2017-05-27T05:00:21Z", "eventName": "GetBucketPolicy", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.253.125.115", "userAgent": "[Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56]", "awsRegion": "us-west-2", "userIdentity": {"type": "AssumedRole", "principalId": "AROAUB2AA5FQRGAHITW4A:cloudaux", "arn": "arn:aws:sts::811596193553:assumed-role/SecurityMonkey/cloudaux", "accountId": "811596193553", "accessKeyId": "ASIA97AFJX4A1GZJI08P", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2017-05-27T05:00:19Z"}, "sessionIssuer": {"type": "Role", "principalId": "AROAUB2AA5FQRGAHITW4A", "arn": "arn:aws:iam::811596193553:role/SecurityMonkey", "accountId": "811596193553", "userName": "SecurityMonkey"}}}, "requestParameters": {"bucketName": "flaws-logs", "policy": [""]}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "8cccd6e8-e147-497a-b749-179db3e6d735", "record_id": "flaws_cloudtrail:0000520:8cccd6e8-e147-497a-b749-179db3e6d735", "row_index": 520, "timestamp": "2017-05-27T05:00:21Z", "event_type": "GetBucketLifecycle", "event_source": "s3.amazonaws.com", "principal": {"type": "AssumedRole", "arn": "arn:aws:sts::811596193553:assumed-role/SecurityMonkey/cloudaux", "account_id": "811596193553", "principal_id": "AROAUB2AA5FQRGAHITW4A:cloudaux", "user_name": null, "access_key_id": "ASIA97AFJX4A1GZJI08P", "session_issuer_arn": "arn:aws:iam::811596193553:role/SecurityMonkey", "session_issuer_user_name": "SecurityMonkey"}, "network": {"source_ip": "255.253.125.115", "user_agent": "[Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56]", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1096, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "8cccd6e8-e147-497a-b749-179db3e6d735", "eventTime": "2017-05-27T05:00:21Z", "eventName": "GetBucketLifecycle", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.253.125.115", "userAgent": "[Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56]", "awsRegion": "us-west-2", "errorCode": "NoSuchLifecycleConfiguration", "errorMessage": "The lifecycle configuration does not exist", "userIdentity": {"type": "AssumedRole", "principalId": "AROAUB2AA5FQRGAHITW4A:cloudaux", "arn": "arn:aws:sts::811596193553:assumed-role/SecurityMonkey/cloudaux", "accountId": "811596193553", "accessKeyId": "ASIA97AFJX4A1GZJI08P", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2017-05-27T05:00:19Z"}, "sessionIssuer": {"type": "Role", "principalId": "AROAUB2AA5FQRGAHITW4A", "arn": "arn:aws:iam::811596193553:role/SecurityMonkey", "accountId": "811596193553", "userName": "SecurityMonkey"}}}, "requestParameters": {"lifecycle": [""], "bucketName": "flaws-logs"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "6a114809b-385d-41da-af5e-add7c6190a0d", "record_id": "flaws_cloudtrail:0000521:6a114809b-385d-41da-af5e-add7c6190a0d", "row_index": 521, "timestamp": "2017-05-27T05:00:21Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "AssumedRole", "arn": "arn:aws:sts::811596193553:assumed-role/SecurityMonkey/secmonkey", "account_id": "811596193553", "principal_id": "AROAUB2AA5FQRGAHITW4A:secmonkey", "user_name": null, "access_key_id": "ASIA48KTRDNET0U03TSQ", "session_issuer_arn": "arn:aws:iam::811596193553:role/SecurityMonkey", "session_issuer_user_name": "SecurityMonkey"}, "network": {"source_ip": "255.253.125.115", "user_agent": "Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1064, "raw_record_depth": 5, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "6a114809b-385d-41da-af5e-add7c6190a0d", "eventTime": "2017-05-27T05:00:21Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.253.125.115", "userAgent": "Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56", "awsRegion": "us-west-2", "userIdentity": {"type": "AssumedRole", "principalId": "AROAUB2AA5FQRGAHITW4A:secmonkey", "arn": "arn:aws:sts::811596193553:assumed-role/SecurityMonkey/secmonkey", "accountId": "811596193553", "accessKeyId": "ASIA48KTRDNET0U03TSQ", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2017-05-27T05:00:08Z"}, "sessionIssuer": {"type": "Role", "principalId": "AROAUB2AA5FQRGAHITW4A", "arn": "arn:aws:iam::811596193553:role/SecurityMonkey", "accountId": "811596193553", "userName": "SecurityMonkey"}}}, "requestParameters": {"snapshotSet": {}, "ownersSet": {"items": [{"owner": "self"}]}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "1dbbc09f-267c-48c9-873c-ca46a99a6c88", "record_id": "flaws_cloudtrail:0000522:1dbbc09f-267c-48c9-873c-ca46a99a6c88", "row_index": 522, "timestamp": "2017-05-27T05:00:21Z", "event_type": "ListIdentities", "event_source": "ses.amazonaws.com", "principal": {"type": "AssumedRole", "arn": "arn:aws:sts::811596193553:assumed-role/SecurityMonkey/secmonkey", "account_id": "811596193553", "principal_id": "AROAUB2AA5FQRGAHITW4A:secmonkey", "user_name": null, "access_key_id": "ASIAP2NO3L9F66JRLDUJ", "session_issuer_arn": "arn:aws:iam::811596193553:role/SecurityMonkey", "session_issuer_user_name": "SecurityMonkey"}, "network": {"source_ip": "255.253.125.115", "user_agent": "Boto/2.47.0 Python/2.7.12 Linux/4.4.0-78-generic", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 952, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "1dbbc09f-267c-48c9-873c-ca46a99a6c88", "eventTime": "2017-05-27T05:00:21Z", "eventName": "ListIdentities", "eventSource": "ses.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.253.125.115", "userAgent": "Boto/2.47.0 Python/2.7.12 Linux/4.4.0-78-generic", "awsRegion": "us-west-2", "userIdentity": {"type": "AssumedRole", "principalId": "AROAUB2AA5FQRGAHITW4A:secmonkey", "arn": "arn:aws:sts::811596193553:assumed-role/SecurityMonkey/secmonkey", "accountId": "811596193553", "accessKeyId": "ASIAP2NO3L9F66JRLDUJ", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2017-05-27T05:00:21Z"}, "sessionIssuer": {"type": "Role", "principalId": "AROAUB2AA5FQRGAHITW4A", "arn": "arn:aws:iam::811596193553:role/SecurityMonkey", "accountId": "811596193553", "userName": "SecurityMonkey"}}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "21e8cafc-fbfb-42f6-a676-22e945b35e60", "record_id": "flaws_cloudtrail:0000523:21e8cafc-fbfb-42f6-a676-22e945b35e60", "row_index": 523, "timestamp": "2017-05-27T05:00:21Z", "event_type": "ListVerifiedEmailAddresses", "event_source": "ses.amazonaws.com", "principal": {"type": "AssumedRole", "arn": "arn:aws:sts::811596193553:assumed-role/SecurityMonkey/secmonkey", "account_id": "811596193553", "principal_id": "AROAUB2AA5FQRGAHITW4A:secmonkey", "user_name": null, "access_key_id": "ASIAP2NO3L9F66JRLDUJ", "session_issuer_arn": "arn:aws:iam::811596193553:role/SecurityMonkey", "session_issuer_user_name": "SecurityMonkey"}, "network": {"source_ip": "255.253.125.115", "user_agent": "Boto/2.47.0 Python/2.7.12 Linux/4.4.0-78-generic", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 965, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "21e8cafc-fbfb-42f6-a676-22e945b35e60", "eventTime": "2017-05-27T05:00:21Z", "eventName": "ListVerifiedEmailAddresses", "eventSource": "ses.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.253.125.115", "userAgent": "Boto/2.47.0 Python/2.7.12 Linux/4.4.0-78-generic", "awsRegion": "us-west-2", "userIdentity": {"type": "AssumedRole", "principalId": "AROAUB2AA5FQRGAHITW4A:secmonkey", "arn": "arn:aws:sts::811596193553:assumed-role/SecurityMonkey/secmonkey", "accountId": "811596193553", "accessKeyId": "ASIAP2NO3L9F66JRLDUJ", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2017-05-27T05:00:21Z"}, "sessionIssuer": {"type": "Role", "principalId": "AROAUB2AA5FQRGAHITW4A", "arn": "arn:aws:iam::811596193553:role/SecurityMonkey", "accountId": "811596193553", "userName": "SecurityMonkey"}}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "26d4a258-28f6-4704-962c-ae88c64890d5", "record_id": "flaws_cloudtrail:0000524:26d4a258-28f6-4704-962c-ae88c64890d5", "row_index": 524, "timestamp": "2017-05-27T05:00:21Z", "event_type": "GetBucketAcl", "event_source": "s3.amazonaws.com", "principal": {"type": "AssumedRole", "arn": "arn:aws:sts::811596193553:assumed-role/SecurityMonkey/cloudaux", "account_id": "811596193553", "principal_id": "AROAUB2AA5FQRGAHITW4A:cloudaux", "user_name": null, "access_key_id": "ASIA97AFJX4A1GZJI08P", "session_issuer_arn": "arn:aws:iam::811596193553:role/SecurityMonkey", "session_issuer_user_name": "SecurityMonkey"}, "network": {"source_ip": "255.253.125.115", "user_agent": "[Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56]", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 981, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "26d4a258-28f6-4704-962c-ae88c64890d5", "eventTime": "2017-05-27T05:00:21Z", "eventName": "GetBucketAcl", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.253.125.115", "userAgent": "[Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56]", "awsRegion": "us-west-2", "userIdentity": {"type": "AssumedRole", "principalId": "AROAUB2AA5FQRGAHITW4A:cloudaux", "arn": "arn:aws:sts::811596193553:assumed-role/SecurityMonkey/cloudaux", "accountId": "811596193553", "accessKeyId": "ASIA97AFJX4A1GZJI08P", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2017-05-27T05:00:19Z"}, "sessionIssuer": {"type": "Role", "principalId": "AROAUB2AA5FQRGAHITW4A", "arn": "arn:aws:iam::811596193553:role/SecurityMonkey", "accountId": "811596193553", "userName": "SecurityMonkey"}}}, "requestParameters": {"bucketName": "flaws-logs", "acl": [""]}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "61fb0658-63fc-4eb9-8443-c9fc99addbb5", "record_id": "flaws_cloudtrail:0000525:61fb0658-63fc-4eb9-8443-c9fc99addbb5", "row_index": 525, "timestamp": "2017-05-27T05:00:22Z", "event_type": "ListVerifiedEmailAddresses", "event_source": "ses.amazonaws.com", "principal": {"type": "AssumedRole", "arn": "arn:aws:sts::811596193553:assumed-role/SecurityMonkey/secmonkey", "account_id": "811596193553", "principal_id": "AROAUB2AA5FQRGAHITW4A:secmonkey", "user_name": null, "access_key_id": "ASIAG55X9M3ZJ4BZMZBL", "session_issuer_arn": "arn:aws:iam::811596193553:role/SecurityMonkey", "session_issuer_user_name": "SecurityMonkey"}, "network": {"source_ip": "255.253.125.115", "user_agent": "Boto/2.47.0 Python/2.7.12 Linux/4.4.0-78-generic", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 964, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "61fb0658-63fc-4eb9-8443-c9fc99addbb5", "eventTime": "2017-05-27T05:00:22Z", "eventName": "ListVerifiedEmailAddresses", "eventSource": "ses.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.253.125.115", "userAgent": "Boto/2.47.0 Python/2.7.12 Linux/4.4.0-78-generic", "awsRegion": "us-east-1", "userIdentity": {"type": "AssumedRole", "principalId": "AROAUB2AA5FQRGAHITW4A:secmonkey", "arn": "arn:aws:sts::811596193553:assumed-role/SecurityMonkey/secmonkey", "accountId": "811596193553", "accessKeyId": "ASIAG55X9M3ZJ4BZMZBL", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2017-05-27T05:00:22Z"}, "sessionIssuer": {"type": "Role", "principalId": "AROAUB2AA5FQRGAHITW4A", "arn": "arn:aws:iam::811596193553:role/SecurityMonkey", "accountId": "811596193553", "userName": "SecurityMonkey"}}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "9d24a364-8615-49cd-969f-d6985d979942", "record_id": "flaws_cloudtrail:0000526:9d24a364-8615-49cd-969f-d6985d979942", "row_index": 526, "timestamp": "2017-05-27T05:00:22Z", "event_type": "ListIdentities", "event_source": "ses.amazonaws.com", "principal": {"type": "AssumedRole", "arn": "arn:aws:sts::811596193553:assumed-role/SecurityMonkey/secmonkey", "account_id": "811596193553", "principal_id": "AROAUB2AA5FQRGAHITW4A:secmonkey", "user_name": null, "access_key_id": "ASIAG55X9M3ZJ4BZMZBL", "session_issuer_arn": "arn:aws:iam::811596193553:role/SecurityMonkey", "session_issuer_user_name": "SecurityMonkey"}, "network": {"source_ip": "255.253.125.115", "user_agent": "Boto/2.47.0 Python/2.7.12 Linux/4.4.0-78-generic", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 952, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "9d24a364-8615-49cd-969f-d6985d979942", "eventTime": "2017-05-27T05:00:22Z", "eventName": "ListIdentities", "eventSource": "ses.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.253.125.115", "userAgent": "Boto/2.47.0 Python/2.7.12 Linux/4.4.0-78-generic", "awsRegion": "us-east-1", "userIdentity": {"type": "AssumedRole", "principalId": "AROAUB2AA5FQRGAHITW4A:secmonkey", "arn": "arn:aws:sts::811596193553:assumed-role/SecurityMonkey/secmonkey", "accountId": "811596193553", "accessKeyId": "ASIAG55X9M3ZJ4BZMZBL", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2017-05-27T05:00:22Z"}, "sessionIssuer": {"type": "Role", "principalId": "AROAUB2AA5FQRGAHITW4A", "arn": "arn:aws:iam::811596193553:role/SecurityMonkey", "accountId": "811596193553", "userName": "SecurityMonkey"}}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "41109-bc8c-4296-833c-7e48c8c8e8a4", "record_id": "flaws_cloudtrail:0000527:41109-bc8c-4296-833c-7e48c8c8e8a4", "row_index": 527, "timestamp": "2017-05-27T05:00:22Z", "event_type": "AssumeRole", "event_source": "sts.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/SecurityMokey", "account_id": "811596193553", "principal_id": "AIDAQ9SRE1SZZZ4Q4UOJH", "user_name": "SecurityMokey", "access_key_id": "AKIAXJ0III4JBKZDXGXN", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "255.253.125.115", "user_agent": "Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56", "aws_region": "us-east-1"}, "resource_arns": ["arn:aws:iam::811596193553:role/SecurityMonkey"], "raw_record_size_bytes": 1449, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "resources", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "41109-bc8c-4296-833c-7e48c8c8e8a4", "eventTime": "2017-05-27T05:00:22Z", "eventName": "AssumeRole", "eventSource": "sts.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.253.125.115", "userAgent": "Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDAQ9SRE1SZZZ4Q4UOJH", "arn": "arn:aws:iam::811596193553:user/SecurityMokey", "accountId": "811596193553", "accessKeyId": "AKIAXJ0III4JBKZDXGXN", "userName": "SecurityMokey"}, "requestParameters": {"roleArn": "arn:aws:iam::811596193553:role/SecurityMonkey", "roleSessionName": "secmonkey"}, "responseElements": {"credentials": {"accessKeyId": "ASIAG55X9M3ZJ4BZMZBL", "expiration": "May 27, 2017 6:00:22 AM", "sessionToken": "FQoDYXdzECYaDKJnxCesuoksCxie/SLMAU76u1obFvl91mcB0+PWvxVNPZvBCL302l4Exj0lSxxHx28jqSArtOvaZKufhk3//3YEP5LDbZvDz7OIEXIrBTHajZvaOYWlnAJTxmxU8EJ9GCfgd2NGxLyBtgvMXvd7iTMm3ZKJFDBbGgE0UNU+50dsCWyFU5Pb9c1nydyyguftnOHZZZOK7b3uIf00OydwKIU2omOAKgGhevAFKSRdUxyHfm/xvZ7wT3d6vmPEG+8yJQWhnN0wk4+B2QNvQvNQxG1gmqRUKeuPzQV/Syjmj6TJBQ=="}, "assumedRoleUser": {"assumedRoleId": "AROAUB2AA5FQRGAHITW4A:secmonkey", "arn": "arn:aws:sts::811596193553:assumed-role/SecurityMonkey/secmonkey"}}, "resources": [{"ARN": "arn:aws:iam::811596193553:role/SecurityMonkey", "accountId": "811596193553", "type": "AWS::IAM::Role"}]}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "05b35e9c-7848-4b67-94a7-cc62e91e92a7", "record_id": "flaws_cloudtrail:0000528:05b35e9c-7848-4b67-94a7-cc62e91e92a7", "row_index": 528, "timestamp": "2017-05-27T05:00:22Z", "event_type": "GetBucketLocation", "event_source": "s3.amazonaws.com", "principal": {"type": "AssumedRole", "arn": "arn:aws:sts::811596193553:assumed-role/SecurityMonkey/cloudaux", "account_id": "811596193553", "principal_id": "AROAUB2AA5FQRGAHITW4A:cloudaux", "user_name": null, "access_key_id": "ASIAWWGE8SBRJDRN2KLG", "session_issuer_arn": "arn:aws:iam::811596193553:role/SecurityMonkey", "session_issuer_user_name": "SecurityMonkey"}, "network": {"source_ip": "255.253.125.115", "user_agent": "[Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56]", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 992, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "05b35e9c-7848-4b67-94a7-cc62e91e92a7", "eventTime": "2017-05-27T05:00:22Z", "eventName": "GetBucketLocation", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.253.125.115", "userAgent": "[Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56]", "awsRegion": "us-east-1", "userIdentity": {"type": "AssumedRole", "principalId": "AROAUB2AA5FQRGAHITW4A:cloudaux", "arn": "arn:aws:sts::811596193553:assumed-role/SecurityMonkey/cloudaux", "accountId": "811596193553", "accessKeyId": "ASIAWWGE8SBRJDRN2KLG", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2017-05-27T04:15:23Z"}, "sessionIssuer": {"type": "Role", "principalId": "AROAUB2AA5FQRGAHITW4A", "arn": "arn:aws:iam::811596193553:role/SecurityMonkey", "accountId": "811596193553", "userName": "SecurityMonkey"}}}, "requestParameters": {"bucketName": "flaws.cloud", "location": [""]}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "3d7110e8-0119-45c7-91c5-3397b2af8f57", "record_id": "flaws_cloudtrail:0000529:3d7110e8-0119-45c7-91c5-3397b2af8f57", "row_index": 529, "timestamp": "2017-05-27T05:00:22Z", "event_type": "GetBucketTagging", "event_source": "s3.amazonaws.com", "principal": {"type": "AssumedRole", "arn": "arn:aws:sts::811596193553:assumed-role/SecurityMonkey/cloudaux", "account_id": "811596193553", "principal_id": "AROAUB2AA5FQRGAHITW4A:cloudaux", "user_name": null, "access_key_id": "ASIA97AFJX4A1GZJI08P", "session_issuer_arn": "arn:aws:iam::811596193553:role/SecurityMonkey", "session_issuer_user_name": "SecurityMonkey"}, "network": {"source_ip": "255.253.125.115", "user_agent": "[Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56]", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1060, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "3d7110e8-0119-45c7-91c5-3397b2af8f57", "eventTime": "2017-05-27T05:00:22Z", "eventName": "GetBucketTagging", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.253.125.115", "userAgent": "[Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56]", "awsRegion": "us-west-2", "errorCode": "NoSuchTagSet", "errorMessage": "The TagSet does not exist", "userIdentity": {"type": "AssumedRole", "principalId": "AROAUB2AA5FQRGAHITW4A:cloudaux", "arn": "arn:aws:sts::811596193553:assumed-role/SecurityMonkey/cloudaux", "accountId": "811596193553", "accessKeyId": "ASIA97AFJX4A1GZJI08P", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2017-05-27T05:00:19Z"}, "sessionIssuer": {"type": "Role", "principalId": "AROAUB2AA5FQRGAHITW4A", "arn": "arn:aws:iam::811596193553:role/SecurityMonkey", "accountId": "811596193553", "userName": "SecurityMonkey"}}}, "requestParameters": {"tagging": [""], "bucketName": "flaws.cloud"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "3da863fe-e18f-4791-95f3-947f2ef018941", "record_id": "flaws_cloudtrail:0000530:3da863fe-e18f-4791-95f3-947f2ef018941", "row_index": 530, "timestamp": "2017-05-27T05:00:22Z", "event_type": "GetBucketNotification", "event_source": "s3.amazonaws.com", "principal": {"type": "AssumedRole", "arn": "arn:aws:sts::811596193553:assumed-role/SecurityMonkey/cloudaux", "account_id": "811596193553", "principal_id": "AROAUB2AA5FQRGAHITW4A:cloudaux", "user_name": null, "access_key_id": "ASIA97AFJX4A1GZJI08P", "session_issuer_arn": "arn:aws:iam::811596193553:role/SecurityMonkey", "session_issuer_user_name": "SecurityMonkey"}, "network": {"source_ip": "255.253.125.115", "user_agent": "[Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56]", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1001, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "3da863fe-e18f-4791-95f3-947f2ef018941", "eventTime": "2017-05-27T05:00:22Z", "eventName": "GetBucketNotification", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.253.125.115", "userAgent": "[Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56]", "awsRegion": "us-west-2", "userIdentity": {"type": "AssumedRole", "principalId": "AROAUB2AA5FQRGAHITW4A:cloudaux", "arn": "arn:aws:sts::811596193553:assumed-role/SecurityMonkey/cloudaux", "accountId": "811596193553", "accessKeyId": "ASIA97AFJX4A1GZJI08P", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2017-05-27T05:00:19Z"}, "sessionIssuer": {"type": "Role", "principalId": "AROAUB2AA5FQRGAHITW4A", "arn": "arn:aws:iam::811596193553:role/SecurityMonkey", "accountId": "811596193553", "userName": "SecurityMonkey"}}}, "requestParameters": {"notification": [""], "bucketName": "flaws.cloud"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "4fe57fda-efbb-44f8-bb30-af5d63fd6102", "record_id": "flaws_cloudtrail:0000531:4fe57fda-efbb-44f8-bb30-af5d63fd6102", "row_index": 531, "timestamp": "2017-05-27T05:00:22Z", "event_type": "GetBucketCors", "event_source": "s3.amazonaws.com", "principal": {"type": "AssumedRole", "arn": "arn:aws:sts::811596193553:assumed-role/SecurityMonkey/cloudaux", "account_id": "811596193553", "principal_id": "AROAUB2AA5FQRGAHITW4A:cloudaux", "user_name": null, "access_key_id": "ASIA97AFJX4A1GZJI08P", "session_issuer_arn": "arn:aws:iam::811596193553:role/SecurityMonkey", "session_issuer_user_name": "SecurityMonkey"}, "network": {"source_ip": "255.253.125.115", "user_agent": "[Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56]", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1076, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "4fe57fda-efbb-44f8-bb30-af5d63fd6102", "eventTime": "2017-05-27T05:00:22Z", "eventName": "GetBucketCors", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.253.125.115", "userAgent": "[Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56]", "awsRegion": "us-west-2", "errorCode": "NoSuchCORSConfiguration", "errorMessage": "The CORS configuration does not exist", "userIdentity": {"type": "AssumedRole", "principalId": "AROAUB2AA5FQRGAHITW4A:cloudaux", "arn": "arn:aws:sts::811596193553:assumed-role/SecurityMonkey/cloudaux", "accountId": "811596193553", "accessKeyId": "ASIA97AFJX4A1GZJI08P", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2017-05-27T05:00:19Z"}, "sessionIssuer": {"type": "Role", "principalId": "AROAUB2AA5FQRGAHITW4A", "arn": "arn:aws:iam::811596193553:role/SecurityMonkey", "accountId": "811596193553", "userName": "SecurityMonkey"}}}, "requestParameters": {"bucketName": "flaws.cloud", "cors": [""]}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "0dcbd297-c9b3-4172-ac54-31ff906705d", "record_id": "flaws_cloudtrail:0000532:0dcbd297-c9b3-4172-ac54-31ff906705d", "row_index": 532, "timestamp": "2017-05-27T05:00:22Z", "event_type": "GetBucketLogging", "event_source": "s3.amazonaws.com", "principal": {"type": "AssumedRole", "arn": "arn:aws:sts::811596193553:assumed-role/SecurityMonkey/cloudaux", "account_id": "811596193553", "principal_id": "AROAUB2AA5FQRGAHITW4A:cloudaux", "user_name": null, "access_key_id": "ASIA97AFJX4A1GZJI08P", "session_issuer_arn": "arn:aws:iam::811596193553:role/SecurityMonkey", "session_issuer_user_name": "SecurityMonkey"}, "network": {"source_ip": "255.253.125.115", "user_agent": "[Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56]", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 989, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "0dcbd297-c9b3-4172-ac54-31ff906705d", "eventTime": "2017-05-27T05:00:22Z", "eventName": "GetBucketLogging", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.253.125.115", "userAgent": "[Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56]", "awsRegion": "us-west-2", "userIdentity": {"type": "AssumedRole", "principalId": "AROAUB2AA5FQRGAHITW4A:cloudaux", "arn": "arn:aws:sts::811596193553:assumed-role/SecurityMonkey/cloudaux", "accountId": "811596193553", "accessKeyId": "ASIA97AFJX4A1GZJI08P", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2017-05-27T05:00:19Z"}, "sessionIssuer": {"type": "Role", "principalId": "AROAUB2AA5FQRGAHITW4A", "arn": "arn:aws:iam::811596193553:role/SecurityMonkey", "accountId": "811596193553", "userName": "SecurityMonkey"}}}, "requestParameters": {"logging": [""], "bucketName": "flaws.cloud"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "6bc1d5e6-7154-4a00-a863-24ebcf717006f", "record_id": "flaws_cloudtrail:0000533:6bc1d5e6-7154-4a00-a863-24ebcf717006f", "row_index": 533, "timestamp": "2017-05-27T05:00:22Z", "event_type": "GetBucketWebsite", "event_source": "s3.amazonaws.com", "principal": {"type": "AssumedRole", "arn": "arn:aws:sts::811596193553:assumed-role/SecurityMonkey/cloudaux", "account_id": "811596193553", "principal_id": "AROAUB2AA5FQRGAHITW4A:cloudaux", "user_name": null, "access_key_id": "ASIA97AFJX4A1GZJI08P", "session_issuer_arn": "arn:aws:iam::811596193553:role/SecurityMonkey", "session_issuer_user_name": "SecurityMonkey"}, "network": {"source_ip": "255.253.125.115", "user_agent": "[Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56]", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 991, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "6bc1d5e6-7154-4a00-a863-24ebcf717006f", "eventTime": "2017-05-27T05:00:22Z", "eventName": "GetBucketWebsite", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.253.125.115", "userAgent": "[Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56]", "awsRegion": "us-west-2", "userIdentity": {"type": "AssumedRole", "principalId": "AROAUB2AA5FQRGAHITW4A:cloudaux", "arn": "arn:aws:sts::811596193553:assumed-role/SecurityMonkey/cloudaux", "accountId": "811596193553", "accessKeyId": "ASIA97AFJX4A1GZJI08P", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2017-05-27T05:00:19Z"}, "sessionIssuer": {"type": "Role", "principalId": "AROAUB2AA5FQRGAHITW4A", "arn": "arn:aws:iam::811596193553:role/SecurityMonkey", "accountId": "811596193553", "userName": "SecurityMonkey"}}}, "requestParameters": {"bucketName": "flaws.cloud", "website": [""]}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "4ed347a3-290d-4724-9cf2-633febe79be5", "record_id": "flaws_cloudtrail:0000534:4ed347a3-290d-4724-9cf2-633febe79be5", "row_index": 534, "timestamp": "2017-05-27T05:00:22Z", "event_type": "GetBucketAcl", "event_source": "s3.amazonaws.com", "principal": {"type": "AssumedRole", "arn": "arn:aws:sts::811596193553:assumed-role/SecurityMonkey/cloudaux", "account_id": "811596193553", "principal_id": "AROAUB2AA5FQRGAHITW4A:cloudaux", "user_name": null, "access_key_id": "ASIA97AFJX4A1GZJI08P", "session_issuer_arn": "arn:aws:iam::811596193553:role/SecurityMonkey", "session_issuer_user_name": "SecurityMonkey"}, "network": {"source_ip": "255.253.125.115", "user_agent": "[Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56]", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 982, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "4ed347a3-290d-4724-9cf2-633febe79be5", "eventTime": "2017-05-27T05:00:22Z", "eventName": "GetBucketAcl", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.253.125.115", "userAgent": "[Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56]", "awsRegion": "us-west-2", "userIdentity": {"type": "AssumedRole", "principalId": "AROAUB2AA5FQRGAHITW4A:cloudaux", "arn": "arn:aws:sts::811596193553:assumed-role/SecurityMonkey/cloudaux", "accountId": "811596193553", "accessKeyId": "ASIA97AFJX4A1GZJI08P", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2017-05-27T05:00:19Z"}, "sessionIssuer": {"type": "Role", "principalId": "AROAUB2AA5FQRGAHITW4A", "arn": "arn:aws:iam::811596193553:role/SecurityMonkey", "accountId": "811596193553", "userName": "SecurityMonkey"}}}, "requestParameters": {"bucketName": "flaws.cloud", "acl": [""]}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "3379c919-e8e2-4ebb-9148-23809f76409", "record_id": "flaws_cloudtrail:0000535:3379c919-e8e2-4ebb-9148-23809f76409", "row_index": 535, "timestamp": "2017-05-27T05:00:22Z", "event_type": "GetBucketPolicy", "event_source": "s3.amazonaws.com", "principal": {"type": "AssumedRole", "arn": "arn:aws:sts::811596193553:assumed-role/SecurityMonkey/cloudaux", "account_id": "811596193553", "principal_id": "AROAUB2AA5FQRGAHITW4A:cloudaux", "user_name": null, "access_key_id": "ASIA97AFJX4A1GZJI08P", "session_issuer_arn": "arn:aws:iam::811596193553:role/SecurityMonkey", "session_issuer_user_name": "SecurityMonkey"}, "network": {"source_ip": "255.253.125.115", "user_agent": "[Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56]", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 987, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "3379c919-e8e2-4ebb-9148-23809f76409", "eventTime": "2017-05-27T05:00:22Z", "eventName": "GetBucketPolicy", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.253.125.115", "userAgent": "[Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56]", "awsRegion": "us-west-2", "userIdentity": {"type": "AssumedRole", "principalId": "AROAUB2AA5FQRGAHITW4A:cloudaux", "arn": "arn:aws:sts::811596193553:assumed-role/SecurityMonkey/cloudaux", "accountId": "811596193553", "accessKeyId": "ASIA97AFJX4A1GZJI08P", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2017-05-27T05:00:19Z"}, "sessionIssuer": {"type": "Role", "principalId": "AROAUB2AA5FQRGAHITW4A", "arn": "arn:aws:iam::811596193553:role/SecurityMonkey", "accountId": "811596193553", "userName": "SecurityMonkey"}}}, "requestParameters": {"bucketName": "flaws.cloud", "policy": [""]}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "ce8e06e8-5ed2-4b1f-94b4-36f187f62be9", "record_id": "flaws_cloudtrail:0000536:ce8e06e8-5ed2-4b1f-94b4-36f187f62be9", "row_index": 536, "timestamp": "2017-05-27T05:00:22Z", "event_type": "GetBucketReplication", "event_source": "s3.amazonaws.com", "principal": {"type": "AssumedRole", "arn": "arn:aws:sts::811596193553:assumed-role/SecurityMonkey/cloudaux", "account_id": "811596193553", "principal_id": "AROAUB2AA5FQRGAHITW4A:cloudaux", "user_name": null, "access_key_id": "ASIA97AFJX4A1GZJI08P", "session_issuer_arn": "arn:aws:iam::811596193553:role/SecurityMonkey", "session_issuer_user_name": "SecurityMonkey"}, "network": {"source_ip": "255.253.125.115", "user_agent": "[Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56]", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1111, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "ce8e06e8-5ed2-4b1f-94b4-36f187f62be9", "eventTime": "2017-05-27T05:00:22Z", "eventName": "GetBucketReplication", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.253.125.115", "userAgent": "[Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56]", "awsRegion": "us-west-2", "errorCode": "ReplicationConfigurationNotFoundError", "errorMessage": "The replication configuration was not found", "userIdentity": {"type": "AssumedRole", "principalId": "AROAUB2AA5FQRGAHITW4A:cloudaux", "arn": "arn:aws:sts::811596193553:assumed-role/SecurityMonkey/cloudaux", "accountId": "811596193553", "accessKeyId": "ASIA97AFJX4A1GZJI08P", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2017-05-27T05:00:19Z"}, "sessionIssuer": {"type": "Role", "principalId": "AROAUB2AA5FQRGAHITW4A", "arn": "arn:aws:iam::811596193553:role/SecurityMonkey", "accountId": "811596193553", "userName": "SecurityMonkey"}}}, "requestParameters": {"replication": [""], "bucketName": "flaws.cloud"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "4151e0e0-19f2-434c-9f2c-901d4a95f7d4", "record_id": "flaws_cloudtrail:0000537:4151e0e0-19f2-434c-9f2c-901d4a95f7d4", "row_index": 537, "timestamp": "2017-05-27T05:00:23Z", "event_type": "ListIdentities", "event_source": "ses.amazonaws.com", "principal": {"type": "AssumedRole", "arn": "arn:aws:sts::811596193553:assumed-role/SecurityMonkey/secmonkey", "account_id": "811596193553", "principal_id": "AROAUB2AA5FQRGAHITW4A:secmonkey", "user_name": null, "access_key_id": "ASIAH1FA1NLO29ZCNB63", "session_issuer_arn": "arn:aws:iam::811596193553:role/SecurityMonkey", "session_issuer_user_name": "SecurityMonkey"}, "network": {"source_ip": "255.253.125.115", "user_agent": "Boto/2.47.0 Python/2.7.12 Linux/4.4.0-78-generic", "aws_region": "eu-west-1"}, "resource_arns": [], "raw_record_size_bytes": 951, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "4151e0e0-19f2-434c-9f2c-901d4a95f7d4", "eventTime": "2017-05-27T05:00:23Z", "eventName": "ListIdentities", "eventSource": "ses.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.253.125.115", "userAgent": "Boto/2.47.0 Python/2.7.12 Linux/4.4.0-78-generic", "awsRegion": "eu-west-1", "userIdentity": {"type": "AssumedRole", "principalId": "AROAUB2AA5FQRGAHITW4A:secmonkey", "arn": "arn:aws:sts::811596193553:assumed-role/SecurityMonkey/secmonkey", "accountId": "811596193553", "accessKeyId": "ASIAH1FA1NLO29ZCNB63", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2017-05-27T05:00:23Z"}, "sessionIssuer": {"type": "Role", "principalId": "AROAUB2AA5FQRGAHITW4A", "arn": "arn:aws:iam::811596193553:role/SecurityMonkey", "accountId": "811596193553", "userName": "SecurityMonkey"}}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "3aac874e-1408-4651-98f4-9d31eff8c59d", "record_id": "flaws_cloudtrail:0000538:3aac874e-1408-4651-98f4-9d31eff8c59d", "row_index": 538, "timestamp": "2017-05-27T05:00:23Z", "event_type": "ListVerifiedEmailAddresses", "event_source": "ses.amazonaws.com", "principal": {"type": "AssumedRole", "arn": "arn:aws:sts::811596193553:assumed-role/SecurityMonkey/secmonkey", "account_id": "811596193553", "principal_id": "AROAUB2AA5FQRGAHITW4A:secmonkey", "user_name": null, "access_key_id": "ASIAH1FA1NLO29ZCNB63", "session_issuer_arn": "arn:aws:iam::811596193553:role/SecurityMonkey", "session_issuer_user_name": "SecurityMonkey"}, "network": {"source_ip": "255.253.125.115", "user_agent": "Boto/2.47.0 Python/2.7.12 Linux/4.4.0-78-generic", "aws_region": "eu-west-1"}, "resource_arns": [], "raw_record_size_bytes": 963, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "3aac874e-1408-4651-98f4-9d31eff8c59d", "eventTime": "2017-05-27T05:00:23Z", "eventName": "ListVerifiedEmailAddresses", "eventSource": "ses.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.253.125.115", "userAgent": "Boto/2.47.0 Python/2.7.12 Linux/4.4.0-78-generic", "awsRegion": "eu-west-1", "userIdentity": {"type": "AssumedRole", "principalId": "AROAUB2AA5FQRGAHITW4A:secmonkey", "arn": "arn:aws:sts::811596193553:assumed-role/SecurityMonkey/secmonkey", "accountId": "811596193553", "accessKeyId": "ASIAH1FA1NLO29ZCNB63", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2017-05-27T05:00:23Z"}, "sessionIssuer": {"type": "Role", "principalId": "AROAUB2AA5FQRGAHITW4A", "arn": "arn:aws:iam::811596193553:role/SecurityMonkey", "accountId": "811596193553", "userName": "SecurityMonkey"}}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "e1cd8d4b-69a1-4dbe-bf7a-acabe737d644", "record_id": "flaws_cloudtrail:0000539:e1cd8d4b-69a1-4dbe-bf7a-acabe737d644", "row_index": 539, "timestamp": "2017-05-27T05:00:23Z", "event_type": "AssumeRole", "event_source": "sts.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/SecurityMokey", "account_id": "811596193553", "principal_id": "AIDAQ9SRE1SZZZ4Q4UOJH", "user_name": "SecurityMokey", "access_key_id": "AKIAXJ0III4JBKZDXGXN", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "255.253.125.115", "user_agent": "Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56", "aws_region": "us-east-1"}, "resource_arns": ["arn:aws:iam::811596193553:role/SecurityMonkey"], "raw_record_size_bytes": 1443, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "resources", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "e1cd8d4b-69a1-4dbe-bf7a-acabe737d644", "eventTime": "2017-05-27T05:00:23Z", "eventName": "AssumeRole", "eventSource": "sts.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.253.125.115", "userAgent": "Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDAQ9SRE1SZZZ4Q4UOJH", "arn": "arn:aws:iam::811596193553:user/SecurityMokey", "accountId": "811596193553", "accessKeyId": "AKIAXJ0III4JBKZDXGXN", "userName": "SecurityMokey"}, "requestParameters": {"roleArn": "arn:aws:iam::811596193553:role/SecurityMonkey", "roleSessionName": "cloudaux"}, "responseElements": {"credentials": {"accessKeyId": "ASIAVVCM6EFO0RRE4GGX", "expiration": "May 27, 2017 6:00:23 AM", "sessionToken": "FQoDYXdzECYaDKrgYmZsWYNKVs7Z2yLLAXwB6GcDuAQ8/A8/F+eb6tZN4tAo3Cx1eMF+mSn4Ivvss7ZwefmX0wv8htWs3U/HtVnGD6Ux85ATIrchtBqHZl9HalGwjjsiBTVYM893pMqjrjSl1WeOW3NehPqqpkt3nG5DrbU4mKhn2eSSp8sFrXzkUDnV/kzQQ1ASIeb9kbwpBwluNjUxw8H1WiAi5uZ9V1bW6XIQvdL+23FCe1y3llgjnCc+mQv/KUFZkPTPhLB40P6EDkAO3CJ2ai6Cj2qFt8z0qrbzELFUPNQXKOePpMkF"}, "assumedRoleUser": {"assumedRoleId": "AROAUB2AA5FQRGAHITW4A:cloudaux", "arn": "arn:aws:sts::811596193553:assumed-role/SecurityMonkey/cloudaux"}}, "resources": [{"ARN": "arn:aws:iam::811596193553:role/SecurityMonkey", "accountId": "811596193553", "type": "AWS::IAM::Role"}]}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "4458f6e4-29bd-444d-bb80-e248b137d63d", "record_id": "flaws_cloudtrail:0000540:4458f6e4-29bd-444d-bb80-e248b137d63d", "row_index": 540, "timestamp": "2017-05-27T05:00:23Z", "event_type": "AssumeRole", "event_source": "sts.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/SecurityMokey", "account_id": "811596193553", "principal_id": "AIDAQ9SRE1SZZZ4Q4UOJH", "user_name": "SecurityMokey", "access_key_id": "AKIAXJ0III4JBKZDXGXN", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "255.253.125.115", "user_agent": "Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56", "aws_region": "us-east-1"}, "resource_arns": ["arn:aws:iam::811596193553:role/SecurityMonkey"], "raw_record_size_bytes": 1453, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "resources", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "4458f6e4-29bd-444d-bb80-e248b137d63d", "eventTime": "2017-05-27T05:00:23Z", "eventName": "AssumeRole", "eventSource": "sts.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.253.125.115", "userAgent": "Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDAQ9SRE1SZZZ4Q4UOJH", "arn": "arn:aws:iam::811596193553:user/SecurityMokey", "accountId": "811596193553", "accessKeyId": "AKIAXJ0III4JBKZDXGXN", "userName": "SecurityMokey"}, "requestParameters": {"roleArn": "arn:aws:iam::811596193553:role/SecurityMonkey", "roleSessionName": "secmonkey"}, "responseElements": {"credentials": {"accessKeyId": "ASIAH1FA1NLO29ZCNB63", "expiration": "May 27, 2017 6:00:23 AM", "sessionToken": "FQoDYXdzECYaDJtn5mmGcC0e6h9QbyLMAVZXJfvlV6KpNYdxzokZsj8pBoMJCgSnXOHrWCpPcYrkVFB33gNzFYC2QAxFqeIQbv4UAHqHDKkzY0sW+DOhbqXYYJDB1T1hN1DJkPOyX/XBzEArsjyT8+vH7H3tqe2HOmYDojZT5q8MNaqhhyVt5nC4J8fSFF2wllbyciWT+qKhszrfQMlfZycTmzrP4gQdI3YWKXQCWZ8ixU1MzSYzs/jWhbPeoijTSFdV35sTb4y7wN4byoVZiShTId3QfbHHQwG3efcugekJUBd+tSjnj6TJBQ=="}, "assumedRoleUser": {"assumedRoleId": "AROAUB2AA5FQRGAHITW4A:secmonkey", "arn": "arn:aws:sts::811596193553:assumed-role/SecurityMonkey/secmonkey"}}, "resources": [{"ARN": "arn:aws:iam::811596193553:role/SecurityMonkey", "accountId": "811596193553", "type": "AWS::IAM::Role"}]}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "6703fd75-cccc-48a3-85dc-e860d8ea971f", "record_id": "flaws_cloudtrail:0000541:6703fd75-cccc-48a3-85dc-e860d8ea971f", "row_index": 541, "timestamp": "2017-05-27T05:00:23Z", "event_type": "GetBucketLocation", "event_source": "s3.amazonaws.com", "principal": {"type": "AssumedRole", "arn": "arn:aws:sts::811596193553:assumed-role/SecurityMonkey/cloudaux", "account_id": "811596193553", "principal_id": "AROAUB2AA5FQRGAHITW4A:cloudaux", "user_name": null, "access_key_id": "ASIAVVCM6EFO0RRE4GGX", "session_issuer_arn": "arn:aws:iam::811596193553:role/SecurityMonkey", "session_issuer_user_name": "SecurityMonkey"}, "network": {"source_ip": "255.253.125.115", "user_agent": "[Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56]", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 1032, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "6703fd75-cccc-48a3-85dc-e860d8ea971f", "eventTime": "2017-05-27T05:00:23Z", "eventName": "GetBucketLocation", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.253.125.115", "userAgent": "[Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56]", "awsRegion": "us-east-1", "userIdentity": {"type": "AssumedRole", "principalId": "AROAUB2AA5FQRGAHITW4A:cloudaux", "arn": "arn:aws:sts::811596193553:assumed-role/SecurityMonkey/cloudaux", "accountId": "811596193553", "accessKeyId": "ASIAVVCM6EFO0RRE4GGX", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2017-05-27T05:00:23Z"}, "sessionIssuer": {"type": "Role", "principalId": "AROAUB2AA5FQRGAHITW4A", "arn": "arn:aws:iam::811596193553:role/SecurityMonkey", "accountId": "811596193553", "userName": "SecurityMonkey"}}}, "requestParameters": {"bucketName": "level2-295510a051f3fcd006ae345973478972.flaws.cloud", "location": [""]}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "ce625ffc-25c1-4e29-90af-294071e3ef63", "record_id": "flaws_cloudtrail:0000542:ce625ffc-25c1-4e29-90af-294071e3ef63", "row_index": 542, "timestamp": "2017-05-27T05:00:23Z", "event_type": "GetBucketVersioning", "event_source": "s3.amazonaws.com", "principal": {"type": "AssumedRole", "arn": "arn:aws:sts::811596193553:assumed-role/SecurityMonkey/cloudaux", "account_id": "811596193553", "principal_id": "AROAUB2AA5FQRGAHITW4A:cloudaux", "user_name": null, "access_key_id": "ASIA97AFJX4A1GZJI08P", "session_issuer_arn": "arn:aws:iam::811596193553:role/SecurityMonkey", "session_issuer_user_name": "SecurityMonkey"}, "network": {"source_ip": "255.253.125.115", "user_agent": "[Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56]", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 996, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "ce625ffc-25c1-4e29-90af-294071e3ef63", "eventTime": "2017-05-27T05:00:23Z", "eventName": "GetBucketVersioning", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.253.125.115", "userAgent": "[Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56]", "awsRegion": "us-west-2", "userIdentity": {"type": "AssumedRole", "principalId": "AROAUB2AA5FQRGAHITW4A:cloudaux", "arn": "arn:aws:sts::811596193553:assumed-role/SecurityMonkey/cloudaux", "accountId": "811596193553", "accessKeyId": "ASIA97AFJX4A1GZJI08P", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2017-05-27T05:00:19Z"}, "sessionIssuer": {"type": "Role", "principalId": "AROAUB2AA5FQRGAHITW4A", "arn": "arn:aws:iam::811596193553:role/SecurityMonkey", "accountId": "811596193553", "userName": "SecurityMonkey"}}}, "requestParameters": {"bucketName": "flaws.cloud", "versioning": [""]}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "be4824f8-16ea-4468-8c14-32d8e5c763f0", "record_id": "flaws_cloudtrail:0000543:be4824f8-16ea-4468-8c14-32d8e5c763f0", "row_index": 543, "timestamp": "2017-05-27T05:00:23Z", "event_type": "GetBucketLifecycle", "event_source": "s3.amazonaws.com", "principal": {"type": "AssumedRole", "arn": "arn:aws:sts::811596193553:assumed-role/SecurityMonkey/cloudaux", "account_id": "811596193553", "principal_id": "AROAUB2AA5FQRGAHITW4A:cloudaux", "user_name": null, "access_key_id": "ASIA97AFJX4A1GZJI08P", "session_issuer_arn": "arn:aws:iam::811596193553:role/SecurityMonkey", "session_issuer_user_name": "SecurityMonkey"}, "network": {"source_ip": "255.253.125.115", "user_agent": "[Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56]", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1094, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "be4824f8-16ea-4468-8c14-32d8e5c763f0", "eventTime": "2017-05-27T05:00:23Z", "eventName": "GetBucketLifecycle", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.253.125.115", "userAgent": "[Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56]", "awsRegion": "us-west-2", "errorCode": "NoSuchLifecycleConfiguration", "errorMessage": "The lifecycle configuration does not exist", "userIdentity": {"type": "AssumedRole", "principalId": "AROAUB2AA5FQRGAHITW4A:cloudaux", "arn": "arn:aws:sts::811596193553:assumed-role/SecurityMonkey/cloudaux", "accountId": "811596193553", "accessKeyId": "ASIA97AFJX4A1GZJI08P", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2017-05-27T05:00:19Z"}, "sessionIssuer": {"type": "Role", "principalId": "AROAUB2AA5FQRGAHITW4A", "arn": "arn:aws:iam::811596193553:role/SecurityMonkey", "accountId": "811596193553", "userName": "SecurityMonkey"}}}, "requestParameters": {"lifecycle": [""], "bucketName": "flaws.cloud"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "ca32505-e477-47e1-ad7a-e95c6b655cec", "record_id": "flaws_cloudtrail:0000544:ca32505-e477-47e1-ad7a-e95c6b655cec", "row_index": 544, "timestamp": "2017-05-27T05:00:23Z", "event_type": "GetBucketLogging", "event_source": "s3.amazonaws.com", "principal": {"type": "AssumedRole", "arn": "arn:aws:sts::811596193553:assumed-role/SecurityMonkey/cloudaux", "account_id": "811596193553", "principal_id": "AROAUB2AA5FQRGAHITW4A:cloudaux", "user_name": null, "access_key_id": "ASIA97AFJX4A1GZJI08P", "session_issuer_arn": "arn:aws:iam::811596193553:role/SecurityMonkey", "session_issuer_user_name": "SecurityMonkey"}, "network": {"source_ip": "255.253.125.115", "user_agent": "[Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56]", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1029, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "ca32505-e477-47e1-ad7a-e95c6b655cec", "eventTime": "2017-05-27T05:00:23Z", "eventName": "GetBucketLogging", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.253.125.115", "userAgent": "[Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56]", "awsRegion": "us-west-2", "userIdentity": {"type": "AssumedRole", "principalId": "AROAUB2AA5FQRGAHITW4A:cloudaux", "arn": "arn:aws:sts::811596193553:assumed-role/SecurityMonkey/cloudaux", "accountId": "811596193553", "accessKeyId": "ASIA97AFJX4A1GZJI08P", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2017-05-27T05:00:19Z"}, "sessionIssuer": {"type": "Role", "principalId": "AROAUB2AA5FQRGAHITW4A", "arn": "arn:aws:iam::811596193553:role/SecurityMonkey", "accountId": "811596193553", "userName": "SecurityMonkey"}}}, "requestParameters": {"logging": [""], "bucketName": "level2-295510a051f3fcd006ae345973478972.flaws.cloud"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "75e189424-9dc2-4b38-86da-592afdfbca1b", "record_id": "flaws_cloudtrail:0000545:75e189424-9dc2-4b38-86da-592afdfbca1b", "row_index": 545, "timestamp": "2017-05-27T05:00:23Z", "event_type": "GetBucketReplication", "event_source": "s3.amazonaws.com", "principal": {"type": "AssumedRole", "arn": "arn:aws:sts::811596193553:assumed-role/SecurityMonkey/cloudaux", "account_id": "811596193553", "principal_id": "AROAUB2AA5FQRGAHITW4A:cloudaux", "user_name": null, "access_key_id": "ASIA97AFJX4A1GZJI08P", "session_issuer_arn": "arn:aws:iam::811596193553:role/SecurityMonkey", "session_issuer_user_name": "SecurityMonkey"}, "network": {"source_ip": "255.253.125.115", "user_agent": "[Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56]", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1153, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "75e189424-9dc2-4b38-86da-592afdfbca1b", "eventTime": "2017-05-27T05:00:23Z", "eventName": "GetBucketReplication", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.253.125.115", "userAgent": "[Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56]", "awsRegion": "us-west-2", "errorCode": "ReplicationConfigurationNotFoundError", "errorMessage": "The replication configuration was not found", "userIdentity": {"type": "AssumedRole", "principalId": "AROAUB2AA5FQRGAHITW4A:cloudaux", "arn": "arn:aws:sts::811596193553:assumed-role/SecurityMonkey/cloudaux", "accountId": "811596193553", "accessKeyId": "ASIA97AFJX4A1GZJI08P", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2017-05-27T05:00:19Z"}, "sessionIssuer": {"type": "Role", "principalId": "AROAUB2AA5FQRGAHITW4A", "arn": "arn:aws:iam::811596193553:role/SecurityMonkey", "accountId": "811596193553", "userName": "SecurityMonkey"}}}, "requestParameters": {"replication": [""], "bucketName": "level2-295510a051f3fcd006ae345973478972.flaws.cloud"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "9c921818-00c7-43f5-912f-71656c0fa928", "record_id": "flaws_cloudtrail:0000546:9c921818-00c7-43f5-912f-71656c0fa928", "row_index": 546, "timestamp": "2017-05-27T05:00:23Z", "event_type": "GetBucketWebsite", "event_source": "s3.amazonaws.com", "principal": {"type": "AssumedRole", "arn": "arn:aws:sts::811596193553:assumed-role/SecurityMonkey/cloudaux", "account_id": "811596193553", "principal_id": "AROAUB2AA5FQRGAHITW4A:cloudaux", "user_name": null, "access_key_id": "ASIA97AFJX4A1GZJI08P", "session_issuer_arn": "arn:aws:iam::811596193553:role/SecurityMonkey", "session_issuer_user_name": "SecurityMonkey"}, "network": {"source_ip": "255.253.125.115", "user_agent": "[Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56]", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1030, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "9c921818-00c7-43f5-912f-71656c0fa928", "eventTime": "2017-05-27T05:00:23Z", "eventName": "GetBucketWebsite", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.253.125.115", "userAgent": "[Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56]", "awsRegion": "us-west-2", "userIdentity": {"type": "AssumedRole", "principalId": "AROAUB2AA5FQRGAHITW4A:cloudaux", "arn": "arn:aws:sts::811596193553:assumed-role/SecurityMonkey/cloudaux", "accountId": "811596193553", "accessKeyId": "ASIA97AFJX4A1GZJI08P", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2017-05-27T05:00:19Z"}, "sessionIssuer": {"type": "Role", "principalId": "AROAUB2AA5FQRGAHITW4A", "arn": "arn:aws:iam::811596193553:role/SecurityMonkey", "accountId": "811596193553", "userName": "SecurityMonkey"}}}, "requestParameters": {"bucketName": "level2-295510a051f3fcd006ae345973478972.flaws.cloud", "website": [""]}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "384d0707-4ea7-4b50-948d-8308320f92bb", "record_id": "flaws_cloudtrail:0000547:384d0707-4ea7-4b50-948d-8308320f92bb", "row_index": 547, "timestamp": "2017-05-27T05:00:24Z", "event_type": "AssumeRole", "event_source": "sts.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/SecurityMokey", "account_id": "811596193553", "principal_id": "AIDAQ9SRE1SZZZ4Q4UOJH", "user_name": "SecurityMokey", "access_key_id": "AKIAXJ0III4JBKZDXGXN", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "255.253.125.115", "user_agent": "Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56", "aws_region": "us-east-1"}, "resource_arns": ["arn:aws:iam::811596193553:role/SecurityMonkey"], "raw_record_size_bytes": 1453, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "resources", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "384d0707-4ea7-4b50-948d-8308320f92bb", "eventTime": "2017-05-27T05:00:24Z", "eventName": "AssumeRole", "eventSource": "sts.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.253.125.115", "userAgent": "Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDAQ9SRE1SZZZ4Q4UOJH", "arn": "arn:aws:iam::811596193553:user/SecurityMokey", "accountId": "811596193553", "accessKeyId": "AKIAXJ0III4JBKZDXGXN", "userName": "SecurityMokey"}, "requestParameters": {"roleArn": "arn:aws:iam::811596193553:role/SecurityMonkey", "roleSessionName": "secmonkey"}, "responseElements": {"credentials": {"accessKeyId": "ASIAMZ0G00U0Y96HX77G", "expiration": "May 27, 2017 6:00:24 AM", "sessionToken": "FQoDYXdzECYaDJUm2i519UhWf+qslSLMAfTc+KFz/j44KDmYMoAxIgTCrvvortIYJL5pzHdqyewJpdIwcRA1337Fs/gHI0amiiOEQmZN0RIOJk7ZGHR4OmnGZsndJqQoujoaV/Flm5krb8TWvRQbDBBMwndONvXCKp9J+CdqGNyCfIMEZTnP0soOT/9AaK/6JLlOyX5uhj9H2MfSygpz6sJe5M+m6ioXqWYNVakQvTtppoCxIPBD55lW+ofQEAZhLqhCKCFsqTk6BfXvz2DKbr+eGfueb7U6oKdLGzrf5mm7weg+cyjoj6TJBQ=="}, "assumedRoleUser": {"assumedRoleId": "AROAUB2AA5FQRGAHITW4A:secmonkey", "arn": "arn:aws:sts::811596193553:assumed-role/SecurityMonkey/secmonkey"}}, "resources": [{"ARN": "arn:aws:iam::811596193553:role/SecurityMonkey", "accountId": "811596193553", "type": "AWS::IAM::Role"}]}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "adb3366f-5cb6-419d-b0ce-75b33ae00a18", "record_id": "flaws_cloudtrail:0000548:adb3366f-5cb6-419d-b0ce-75b33ae00a18", "row_index": 548, "timestamp": "2017-05-27T05:00:24Z", "event_type": "AssumeRole", "event_source": "sts.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/SecurityMokey", "account_id": "811596193553", "principal_id": "AIDAQ9SRE1SZZZ4Q4UOJH", "user_name": "SecurityMokey", "access_key_id": "AKIAXJ0III4JBKZDXGXN", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "255.253.125.115", "user_agent": "Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56", "aws_region": "us-east-1"}, "resource_arns": ["arn:aws:iam::811596193553:role/SecurityMonkey"], "raw_record_size_bytes": 1447, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "resources", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "adb3366f-5cb6-419d-b0ce-75b33ae00a18", "eventTime": "2017-05-27T05:00:24Z", "eventName": "AssumeRole", "eventSource": "sts.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.253.125.115", "userAgent": "Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDAQ9SRE1SZZZ4Q4UOJH", "arn": "arn:aws:iam::811596193553:user/SecurityMokey", "accountId": "811596193553", "accessKeyId": "AKIAXJ0III4JBKZDXGXN", "userName": "SecurityMokey"}, "requestParameters": {"roleArn": "arn:aws:iam::811596193553:role/SecurityMonkey", "roleSessionName": "cloudaux"}, "responseElements": {"credentials": {"accessKeyId": "ASIAS80AO57D2DXHCAXU", "expiration": "May 27, 2017 6:00:24 AM", "sessionToken": "FQoDYXdzECYaDF6V6Y4BGrWQftZFaiLLAcyksXatLLrbMZyU7eJxlcam2PmStVAUCyBfanhWR74VWV1H4M8sYwMuldfRCSsbRsY0Q5wbxPiillGjhPHrogMQWvcckwn6/8SCBvodmUP2V4M7CwkGsMVziena7Opxn0ua8b9Sl5LlGXKHjoaDG1MEB3Ok5D+pYReyav2+bADGOL+Pd3DRcdG65BJFygkxjajqDbUcGIeKvzZBts+rPvOhyaZAYPBWy1rJxb7ZW1Gpx92v9TSZVfbIN1fOj4bcVPJymeaXRZPnuf5IKOiPpMkF"}, "assumedRoleUser": {"assumedRoleId": "AROAUB2AA5FQRGAHITW4A:cloudaux", "arn": "arn:aws:sts::811596193553:assumed-role/SecurityMonkey/cloudaux"}}, "resources": [{"ARN": "arn:aws:iam::811596193553:role/SecurityMonkey", "accountId": "811596193553", "type": "AWS::IAM::Role"}]}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "356f85ff-317d-4c30-bc5d-77d52d0c23e8", "record_id": "flaws_cloudtrail:0000549:356f85ff-317d-4c30-bc5d-77d52d0c23e8", "row_index": 549, "timestamp": "2017-05-27T05:00:24Z", "event_type": "GetBucketCors", "event_source": "s3.amazonaws.com", "principal": {"type": "AssumedRole", "arn": "arn:aws:sts::811596193553:assumed-role/SecurityMonkey/cloudaux", "account_id": "811596193553", "principal_id": "AROAUB2AA5FQRGAHITW4A:cloudaux", "user_name": null, "access_key_id": "ASIA97AFJX4A1GZJI08P", "session_issuer_arn": "arn:aws:iam::811596193553:role/SecurityMonkey", "session_issuer_user_name": "SecurityMonkey"}, "network": {"source_ip": "255.253.125.115", "user_agent": "[Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56]", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1117, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "356f85ff-317d-4c30-bc5d-77d52d0c23e8", "eventTime": "2017-05-27T05:00:24Z", "eventName": "GetBucketCors", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.253.125.115", "userAgent": "[Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56]", "awsRegion": "us-west-2", "errorCode": "NoSuchCORSConfiguration", "errorMessage": "The CORS configuration does not exist", "userIdentity": {"type": "AssumedRole", "principalId": "AROAUB2AA5FQRGAHITW4A:cloudaux", "arn": "arn:aws:sts::811596193553:assumed-role/SecurityMonkey/cloudaux", "accountId": "811596193553", "accessKeyId": "ASIA97AFJX4A1GZJI08P", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2017-05-27T05:00:19Z"}, "sessionIssuer": {"type": "Role", "principalId": "AROAUB2AA5FQRGAHITW4A", "arn": "arn:aws:iam::811596193553:role/SecurityMonkey", "accountId": "811596193553", "userName": "SecurityMonkey"}}}, "requestParameters": {"bucketName": "level2-295510a051f3fcd006ae345973478972.flaws.cloud", "cors": [""]}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "33c4c351-7e7b-4f21-99ff-72d67996896c", "record_id": "flaws_cloudtrail:0000550:33c4c351-7e7b-4f21-99ff-72d67996896c", "row_index": 550, "timestamp": "2017-05-27T05:00:24Z", "event_type": "GetBucketPolicy", "event_source": "s3.amazonaws.com", "principal": {"type": "AssumedRole", "arn": "arn:aws:sts::811596193553:assumed-role/SecurityMonkey/cloudaux", "account_id": "811596193553", "principal_id": "AROAUB2AA5FQRGAHITW4A:cloudaux", "user_name": null, "access_key_id": "ASIA97AFJX4A1GZJI08P", "session_issuer_arn": "arn:aws:iam::811596193553:role/SecurityMonkey", "session_issuer_user_name": "SecurityMonkey"}, "network": {"source_ip": "255.253.125.115", "user_agent": "[Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56]", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1028, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "33c4c351-7e7b-4f21-99ff-72d67996896c", "eventTime": "2017-05-27T05:00:24Z", "eventName": "GetBucketPolicy", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.253.125.115", "userAgent": "[Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56]", "awsRegion": "us-west-2", "userIdentity": {"type": "AssumedRole", "principalId": "AROAUB2AA5FQRGAHITW4A:cloudaux", "arn": "arn:aws:sts::811596193553:assumed-role/SecurityMonkey/cloudaux", "accountId": "811596193553", "accessKeyId": "ASIA97AFJX4A1GZJI08P", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2017-05-27T05:00:19Z"}, "sessionIssuer": {"type": "Role", "principalId": "AROAUB2AA5FQRGAHITW4A", "arn": "arn:aws:iam::811596193553:role/SecurityMonkey", "accountId": "811596193553", "userName": "SecurityMonkey"}}}, "requestParameters": {"bucketName": "level2-295510a051f3fcd006ae345973478972.flaws.cloud", "policy": [""]}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "eee9b78a-2363-4d16-ad95-93d31edeff91", "record_id": "flaws_cloudtrail:0000551:eee9b78a-2363-4d16-ad95-93d31edeff91", "row_index": 551, "timestamp": "2017-05-27T05:00:24Z", "event_type": "GetBucketNotification", "event_source": "s3.amazonaws.com", "principal": {"type": "AssumedRole", "arn": "arn:aws:sts::811596193553:assumed-role/SecurityMonkey/cloudaux", "account_id": "811596193553", "principal_id": "AROAUB2AA5FQRGAHITW4A:cloudaux", "user_name": null, "access_key_id": "ASIA97AFJX4A1GZJI08P", "session_issuer_arn": "arn:aws:iam::811596193553:role/SecurityMonkey", "session_issuer_user_name": "SecurityMonkey"}, "network": {"source_ip": "255.253.125.115", "user_agent": "[Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56]", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1039, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "eee9b78a-2363-4d16-ad95-93d31edeff91", "eventTime": "2017-05-27T05:00:24Z", "eventName": "GetBucketNotification", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.253.125.115", "userAgent": "[Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56]", "awsRegion": "us-west-2", "userIdentity": {"type": "AssumedRole", "principalId": "AROAUB2AA5FQRGAHITW4A:cloudaux", "arn": "arn:aws:sts::811596193553:assumed-role/SecurityMonkey/cloudaux", "accountId": "811596193553", "accessKeyId": "ASIA97AFJX4A1GZJI08P", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2017-05-27T05:00:19Z"}, "sessionIssuer": {"type": "Role", "principalId": "AROAUB2AA5FQRGAHITW4A", "arn": "arn:aws:iam::811596193553:role/SecurityMonkey", "accountId": "811596193553", "userName": "SecurityMonkey"}}}, "requestParameters": {"notification": [""], "bucketName": "level2-295510a051f3fcd006ae345973478972.flaws.cloud"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "1ef84a2c-3879-47d7-9d96-b82e320b8c6e", "record_id": "flaws_cloudtrail:0000552:1ef84a2c-3879-47d7-9d96-b82e320b8c6e", "row_index": 552, "timestamp": "2017-05-27T05:00:24Z", "event_type": "GetBucketAcl", "event_source": "s3.amazonaws.com", "principal": {"type": "AssumedRole", "arn": "arn:aws:sts::811596193553:assumed-role/SecurityMonkey/cloudaux", "account_id": "811596193553", "principal_id": "AROAUB2AA5FQRGAHITW4A:cloudaux", "user_name": null, "access_key_id": "ASIA97AFJX4A1GZJI08P", "session_issuer_arn": "arn:aws:iam::811596193553:role/SecurityMonkey", "session_issuer_user_name": "SecurityMonkey"}, "network": {"source_ip": "255.253.125.115", "user_agent": "[Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56]", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1017, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "1ef84a2c-3879-47d7-9d96-b82e320b8c6e", "eventTime": "2017-05-27T05:00:24Z", "eventName": "GetBucketAcl", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.253.125.115", "userAgent": "[Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56]", "awsRegion": "us-west-2", "userIdentity": {"type": "AssumedRole", "principalId": "AROAUB2AA5FQRGAHITW4A:cloudaux", "arn": "arn:aws:sts::811596193553:assumed-role/SecurityMonkey/cloudaux", "accountId": "811596193553", "accessKeyId": "ASIA97AFJX4A1GZJI08P", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2017-05-27T05:00:19Z"}, "sessionIssuer": {"type": "Role", "principalId": "AROAUB2AA5FQRGAHITW4A", "arn": "arn:aws:iam::811596193553:role/SecurityMonkey", "accountId": "811596193553", "userName": "SecurityMonkey"}}}, "requestParameters": {"bucketName": "level2-295510a051f3fcd006ae345973478972.flaws.cloud", "acl": [""]}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "e53344-f624-4925-8353-2ca65e2f39b5", "record_id": "flaws_cloudtrail:0000553:e53344-f624-4925-8353-2ca65e2f39b5", "row_index": 553, "timestamp": "2017-05-27T05:00:24Z", "event_type": "GetBucketLifecycle", "event_source": "s3.amazonaws.com", "principal": {"type": "AssumedRole", "arn": "arn:aws:sts::811596193553:assumed-role/SecurityMonkey/cloudaux", "account_id": "811596193553", "principal_id": "AROAUB2AA5FQRGAHITW4A:cloudaux", "user_name": null, "access_key_id": "ASIA97AFJX4A1GZJI08P", "session_issuer_arn": "arn:aws:iam::811596193553:role/SecurityMonkey", "session_issuer_user_name": "SecurityMonkey"}, "network": {"source_ip": "255.253.125.115", "user_agent": "[Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56]", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1135, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "e53344-f624-4925-8353-2ca65e2f39b5", "eventTime": "2017-05-27T05:00:24Z", "eventName": "GetBucketLifecycle", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.253.125.115", "userAgent": "[Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56]", "awsRegion": "us-west-2", "errorCode": "NoSuchLifecycleConfiguration", "errorMessage": "The lifecycle configuration does not exist", "userIdentity": {"type": "AssumedRole", "principalId": "AROAUB2AA5FQRGAHITW4A:cloudaux", "arn": "arn:aws:sts::811596193553:assumed-role/SecurityMonkey/cloudaux", "accountId": "811596193553", "accessKeyId": "ASIA97AFJX4A1GZJI08P", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2017-05-27T05:00:19Z"}, "sessionIssuer": {"type": "Role", "principalId": "AROAUB2AA5FQRGAHITW4A", "arn": "arn:aws:iam::811596193553:role/SecurityMonkey", "accountId": "811596193553", "userName": "SecurityMonkey"}}}, "requestParameters": {"lifecycle": [""], "bucketName": "level2-295510a051f3fcd006ae345973478972.flaws.cloud"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "a1796a58-b9d0-402b-b313-867283b6b09d5", "record_id": "flaws_cloudtrail:0000554:a1796a58-b9d0-402b-b313-867283b6b09d5", "row_index": 554, "timestamp": "2017-05-27T05:00:24Z", "event_type": "GetBucketTagging", "event_source": "s3.amazonaws.com", "principal": {"type": "AssumedRole", "arn": "arn:aws:sts::811596193553:assumed-role/SecurityMonkey/cloudaux", "account_id": "811596193553", "principal_id": "AROAUB2AA5FQRGAHITW4A:cloudaux", "user_name": null, "access_key_id": "ASIA97AFJX4A1GZJI08P", "session_issuer_arn": "arn:aws:iam::811596193553:role/SecurityMonkey", "session_issuer_user_name": "SecurityMonkey"}, "network": {"source_ip": "255.253.125.115", "user_agent": "[Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56]", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1101, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "a1796a58-b9d0-402b-b313-867283b6b09d5", "eventTime": "2017-05-27T05:00:24Z", "eventName": "GetBucketTagging", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.253.125.115", "userAgent": "[Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56]", "awsRegion": "us-west-2", "errorCode": "NoSuchTagSet", "errorMessage": "The TagSet does not exist", "userIdentity": {"type": "AssumedRole", "principalId": "AROAUB2AA5FQRGAHITW4A:cloudaux", "arn": "arn:aws:sts::811596193553:assumed-role/SecurityMonkey/cloudaux", "accountId": "811596193553", "accessKeyId": "ASIA97AFJX4A1GZJI08P", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2017-05-27T05:00:19Z"}, "sessionIssuer": {"type": "Role", "principalId": "AROAUB2AA5FQRGAHITW4A", "arn": "arn:aws:iam::811596193553:role/SecurityMonkey", "accountId": "811596193553", "userName": "SecurityMonkey"}}}, "requestParameters": {"tagging": [""], "bucketName": "level2-295510a051f3fcd006ae345973478972.flaws.cloud"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "8e10baf9-c2eb-42a0-8a27-5a816571ba81", "record_id": "flaws_cloudtrail:0000555:8e10baf9-c2eb-42a0-8a27-5a816571ba81", "row_index": 555, "timestamp": "2017-05-27T05:00:24Z", "event_type": "GetBucketVersioning", "event_source": "s3.amazonaws.com", "principal": {"type": "AssumedRole", "arn": "arn:aws:sts::811596193553:assumed-role/SecurityMonkey/cloudaux", "account_id": "811596193553", "principal_id": "AROAUB2AA5FQRGAHITW4A:cloudaux", "user_name": null, "access_key_id": "ASIA97AFJX4A1GZJI08P", "session_issuer_arn": "arn:aws:iam::811596193553:role/SecurityMonkey", "session_issuer_user_name": "SecurityMonkey"}, "network": {"source_ip": "255.253.125.115", "user_agent": "[Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56]", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1031, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "8e10baf9-c2eb-42a0-8a27-5a816571ba81", "eventTime": "2017-05-27T05:00:24Z", "eventName": "GetBucketVersioning", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.253.125.115", "userAgent": "[Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56]", "awsRegion": "us-west-2", "userIdentity": {"type": "AssumedRole", "principalId": "AROAUB2AA5FQRGAHITW4A:cloudaux", "arn": "arn:aws:sts::811596193553:assumed-role/SecurityMonkey/cloudaux", "accountId": "811596193553", "accessKeyId": "ASIA97AFJX4A1GZJI08P", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2017-05-27T05:00:19Z"}, "sessionIssuer": {"type": "Role", "principalId": "AROAUB2AA5FQRGAHITW4A", "arn": "arn:aws:iam::811596193553:role/SecurityMonkey", "accountId": "811596193553", "userName": "SecurityMonkey"}}}, "requestParameters": {"bucketName": "level2-295510a051f3fcd006ae345973478972.flaws.cloud", "versioning": [""]}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "e7694b2b-b61c-4294-818f-86afd54127f4", "record_id": "flaws_cloudtrail:0000556:e7694b2b-b61c-4294-818f-86afd54127f4", "row_index": 556, "timestamp": "2017-05-27T05:00:25Z", "event_type": "DescribeLoadBalancers", "event_source": "elasticloadbalancing.amazonaws.com", "principal": {"type": "AssumedRole", "arn": "arn:aws:sts::811596193553:assumed-role/SecurityMonkey/cloudaux", "account_id": "811596193553", "principal_id": "AROAUB2AA5FQRGAHITW4A:cloudaux", "user_name": null, "access_key_id": "ASIAS80AO57D2DXHCAXU", "session_issuer_arn": "arn:aws:iam::811596193553:role/SecurityMonkey", "session_issuer_user_name": "SecurityMonkey"}, "network": {"source_ip": "255.253.125.115", "user_agent": "Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56", "aws_region": "ap-northeast-1"}, "resource_arns": [], "raw_record_size_bytes": 1039, "raw_record_depth": 4, "raw_record_top_level_keys": ["apiVersion", "awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "e7694b2b-b61c-4294-818f-86afd54127f4", "eventTime": "2017-05-27T05:00:25Z", "eventName": "DescribeLoadBalancers", "eventSource": "elasticloadbalancing.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.253.125.115", "userAgent": "Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56", "awsRegion": "ap-northeast-1", "userIdentity": {"type": "AssumedRole", "principalId": "AROAUB2AA5FQRGAHITW4A:cloudaux", "arn": "arn:aws:sts::811596193553:assumed-role/SecurityMonkey/cloudaux", "accountId": "811596193553", "accessKeyId": "ASIAS80AO57D2DXHCAXU", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2017-05-27T05:00:24Z"}, "sessionIssuer": {"type": "Role", "principalId": "AROAUB2AA5FQRGAHITW4A", "arn": "arn:aws:iam::811596193553:role/SecurityMonkey", "accountId": "811596193553", "userName": "SecurityMonkey"}}}, "responseElements": {"loadBalancers": []}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "87fd4069-34c7-4ab7-8043-5dee911b74af", "record_id": "flaws_cloudtrail:0000557:87fd4069-34c7-4ab7-8043-5dee911b74af", "row_index": 557, "timestamp": "2017-05-27T05:00:25Z", "event_type": "GetBucketLocation", "event_source": "s3.amazonaws.com", "principal": {"type": "AssumedRole", "arn": "arn:aws:sts::811596193553:assumed-role/SecurityMonkey/cloudaux", "account_id": "811596193553", "principal_id": "AROAUB2AA5FQRGAHITW4A:cloudaux", "user_name": null, "access_key_id": "ASIAVVCM6EFO0RRE4GGX", "session_issuer_arn": "arn:aws:iam::811596193553:role/SecurityMonkey", "session_issuer_user_name": "SecurityMonkey"}, "network": {"source_ip": "255.253.125.115", "user_agent": "[Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56]", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 1031, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "87fd4069-34c7-4ab7-8043-5dee911b74af", "eventTime": "2017-05-27T05:00:25Z", "eventName": "GetBucketLocation", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.253.125.115", "userAgent": "[Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56]", "awsRegion": "us-east-1", "userIdentity": {"type": "AssumedRole", "principalId": "AROAUB2AA5FQRGAHITW4A:cloudaux", "arn": "arn:aws:sts::811596193553:assumed-role/SecurityMonkey/cloudaux", "accountId": "811596193553", "accessKeyId": "ASIAVVCM6EFO0RRE4GGX", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2017-05-27T05:00:23Z"}, "sessionIssuer": {"type": "Role", "principalId": "AROAUB2AA5FQRGAHITW4A", "arn": "arn:aws:iam::811596193553:role/SecurityMonkey", "accountId": "811596193553", "userName": "SecurityMonkey"}}}, "requestParameters": {"bucketName": "level3-2644b9e749c3d14e400f847199800c14.flaws.cloud", "location": [""]}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "8e217c33-e99f-48c6-b00f-17fd7b2146f0", "record_id": "flaws_cloudtrail:0000558:8e217c33-e99f-48c6-b00f-17fd7b2146f0", "row_index": 558, "timestamp": "2017-05-27T05:00:25Z", "event_type": "AssumeRole", "event_source": "sts.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/SecurityMokey", "account_id": "811596193553", "principal_id": "AIDAQ9SRE1SZZZ4Q4UOJH", "user_name": "SecurityMokey", "access_key_id": "AKIAXJ0III4JBKZDXGXN", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "255.253.125.115", "user_agent": "Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56", "aws_region": "us-east-1"}, "resource_arns": ["arn:aws:iam::811596193553:role/SecurityMonkey"], "raw_record_size_bytes": 1446, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "resources", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "8e217c33-e99f-48c6-b00f-17fd7b2146f0", "eventTime": "2017-05-27T05:00:25Z", "eventName": "AssumeRole", "eventSource": "sts.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.253.125.115", "userAgent": "Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDAQ9SRE1SZZZ4Q4UOJH", "arn": "arn:aws:iam::811596193553:user/SecurityMokey", "accountId": "811596193553", "accessKeyId": "AKIAXJ0III4JBKZDXGXN", "userName": "SecurityMokey"}, "requestParameters": {"roleArn": "arn:aws:iam::811596193553:role/SecurityMonkey", "roleSessionName": "cloudaux"}, "responseElements": {"credentials": {"accessKeyId": "ASIA9AB1VY6Y33BMXAER", "expiration": "May 27, 2017 6:00:25 AM", "sessionToken": "FQoDYXdzECYaDLdG70rJ4gxxOhn/JiLLAdAI8PzFXmk1a92i1ApfpnIoQGke0LsaPNeFd3i24Zq+TxO4AdHFeXQ4i3nsuEXvn35Knkm1F9rXRwXnrAZvbktz32LiLVFrWc/L/ervwvkfY40gbeifcHFAgAxm0YVWg2e2UTi7WjmoQuupVLv1gfjIwf5pa8zQrMVqZjpAdeHvJgQoVy0/XNOIA12zVasbLXNCJvzZU53vg2+IaQYZrDK6q48MhzqyCrMO79DbibAkCX2kXdsEyrLuWwMCXex037g0sYDSh9wXfsIuKOmPpMkF"}, "assumedRoleUser": {"assumedRoleId": "AROAUB2AA5FQRGAHITW4A:cloudaux", "arn": "arn:aws:sts::811596193553:assumed-role/SecurityMonkey/cloudaux"}}, "resources": [{"ARN": "arn:aws:iam::811596193553:role/SecurityMonkey", "accountId": "811596193553", "type": "AWS::IAM::Role"}]}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "63da51a2-d318-48fe-954f-205c30e420d6", "record_id": "flaws_cloudtrail:0000559:63da51a2-d318-48fe-954f-205c30e420d6", "row_index": 559, "timestamp": "2017-05-27T05:00:25Z", "event_type": "GetBucketTagging", "event_source": "s3.amazonaws.com", "principal": {"type": "AssumedRole", "arn": "arn:aws:sts::811596193553:assumed-role/SecurityMonkey/cloudaux", "account_id": "811596193553", "principal_id": "AROAUB2AA5FQRGAHITW4A:cloudaux", "user_name": null, "access_key_id": "ASIA97AFJX4A1GZJI08P", "session_issuer_arn": "arn:aws:iam::811596193553:role/SecurityMonkey", "session_issuer_user_name": "SecurityMonkey"}, "network": {"source_ip": "255.253.125.115", "user_agent": "[Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56]", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1100, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "63da51a2-d318-48fe-954f-205c30e420d6", "eventTime": "2017-05-27T05:00:25Z", "eventName": "GetBucketTagging", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.253.125.115", "userAgent": "[Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56]", "awsRegion": "us-west-2", "errorCode": "NoSuchTagSet", "errorMessage": "The TagSet does not exist", "userIdentity": {"type": "AssumedRole", "principalId": "AROAUB2AA5FQRGAHITW4A:cloudaux", "arn": "arn:aws:sts::811596193553:assumed-role/SecurityMonkey/cloudaux", "accountId": "811596193553", "accessKeyId": "ASIA97AFJX4A1GZJI08P", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2017-05-27T05:00:19Z"}, "sessionIssuer": {"type": "Role", "principalId": "AROAUB2AA5FQRGAHITW4A", "arn": "arn:aws:iam::811596193553:role/SecurityMonkey", "accountId": "811596193553", "userName": "SecurityMonkey"}}}, "requestParameters": {"tagging": [""], "bucketName": "level3-2644b9e749c3d14e400f847199800c14.flaws.cloud"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "6a0ec82d-98cf-49a3-a643-9cb169c9e522", "record_id": "flaws_cloudtrail:0000560:6a0ec82d-98cf-49a3-a643-9cb169c9e522", "row_index": 560, "timestamp": "2017-05-27T05:00:25Z", "event_type": "GetBucketLogging", "event_source": "s3.amazonaws.com", "principal": {"type": "AssumedRole", "arn": "arn:aws:sts::811596193553:assumed-role/SecurityMonkey/cloudaux", "account_id": "811596193553", "principal_id": "AROAUB2AA5FQRGAHITW4A:cloudaux", "user_name": null, "access_key_id": "ASIA97AFJX4A1GZJI08P", "session_issuer_arn": "arn:aws:iam::811596193553:role/SecurityMonkey", "session_issuer_user_name": "SecurityMonkey"}, "network": {"source_ip": "255.253.125.115", "user_agent": "[Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56]", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1030, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "6a0ec82d-98cf-49a3-a643-9cb169c9e522", "eventTime": "2017-05-27T05:00:25Z", "eventName": "GetBucketLogging", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.253.125.115", "userAgent": "[Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56]", "awsRegion": "us-west-2", "userIdentity": {"type": "AssumedRole", "principalId": "AROAUB2AA5FQRGAHITW4A:cloudaux", "arn": "arn:aws:sts::811596193553:assumed-role/SecurityMonkey/cloudaux", "accountId": "811596193553", "accessKeyId": "ASIA97AFJX4A1GZJI08P", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2017-05-27T05:00:19Z"}, "sessionIssuer": {"type": "Role", "principalId": "AROAUB2AA5FQRGAHITW4A", "arn": "arn:aws:iam::811596193553:role/SecurityMonkey", "accountId": "811596193553", "userName": "SecurityMonkey"}}}, "requestParameters": {"logging": [""], "bucketName": "level3-2644b9e749c3d14e400f847199800c14.flaws.cloud"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "20d89348-2634-4e34-9aad-96e4e6db9aa1", "record_id": "flaws_cloudtrail:0000561:20d89348-2634-4e34-9aad-96e4e6db9aa1", "row_index": 561, "timestamp": "2017-05-27T05:00:25Z", "event_type": "GetBucketLifecycle", "event_source": "s3.amazonaws.com", "principal": {"type": "AssumedRole", "arn": "arn:aws:sts::811596193553:assumed-role/SecurityMonkey/cloudaux", "account_id": "811596193553", "principal_id": "AROAUB2AA5FQRGAHITW4A:cloudaux", "user_name": null, "access_key_id": "ASIA97AFJX4A1GZJI08P", "session_issuer_arn": "arn:aws:iam::811596193553:role/SecurityMonkey", "session_issuer_user_name": "SecurityMonkey"}, "network": {"source_ip": "255.253.125.115", "user_agent": "[Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56]", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1137, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "20d89348-2634-4e34-9aad-96e4e6db9aa1", "eventTime": "2017-05-27T05:00:25Z", "eventName": "GetBucketLifecycle", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.253.125.115", "userAgent": "[Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56]", "awsRegion": "us-west-2", "errorCode": "NoSuchLifecycleConfiguration", "errorMessage": "The lifecycle configuration does not exist", "userIdentity": {"type": "AssumedRole", "principalId": "AROAUB2AA5FQRGAHITW4A:cloudaux", "arn": "arn:aws:sts::811596193553:assumed-role/SecurityMonkey/cloudaux", "accountId": "811596193553", "accessKeyId": "ASIA97AFJX4A1GZJI08P", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2017-05-27T05:00:19Z"}, "sessionIssuer": {"type": "Role", "principalId": "AROAUB2AA5FQRGAHITW4A", "arn": "arn:aws:iam::811596193553:role/SecurityMonkey", "accountId": "811596193553", "userName": "SecurityMonkey"}}}, "requestParameters": {"lifecycle": [""], "bucketName": "level3-2644b9e749c3d14e400f847199800c14.flaws.cloud"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "99a8a960-9615-4a96-9b53-f29d837523c7", "record_id": "flaws_cloudtrail:0000562:99a8a960-9615-4a96-9b53-f29d837523c7", "row_index": 562, "timestamp": "2017-05-27T05:00:25Z", "event_type": "GetBucketVersioning", "event_source": "s3.amazonaws.com", "principal": {"type": "AssumedRole", "arn": "arn:aws:sts::811596193553:assumed-role/SecurityMonkey/cloudaux", "account_id": "811596193553", "principal_id": "AROAUB2AA5FQRGAHITW4A:cloudaux", "user_name": null, "access_key_id": "ASIA97AFJX4A1GZJI08P", "session_issuer_arn": "arn:aws:iam::811596193553:role/SecurityMonkey", "session_issuer_user_name": "SecurityMonkey"}, "network": {"source_ip": "255.253.125.115", "user_agent": "[Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56]", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1036, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "99a8a960-9615-4a96-9b53-f29d837523c7", "eventTime": "2017-05-27T05:00:25Z", "eventName": "GetBucketVersioning", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.253.125.115", "userAgent": "[Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56]", "awsRegion": "us-west-2", "userIdentity": {"type": "AssumedRole", "principalId": "AROAUB2AA5FQRGAHITW4A:cloudaux", "arn": "arn:aws:sts::811596193553:assumed-role/SecurityMonkey/cloudaux", "accountId": "811596193553", "accessKeyId": "ASIA97AFJX4A1GZJI08P", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2017-05-27T05:00:19Z"}, "sessionIssuer": {"type": "Role", "principalId": "AROAUB2AA5FQRGAHITW4A", "arn": "arn:aws:iam::811596193553:role/SecurityMonkey", "accountId": "811596193553", "userName": "SecurityMonkey"}}}, "requestParameters": {"bucketName": "level3-2644b9e749c3d14e400f847199800c14.flaws.cloud", "versioning": [""]}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "94b801075-e47d-45d5-bcd3-7847c20668", "record_id": "flaws_cloudtrail:0000563:94b801075-e47d-45d5-bcd3-7847c20668", "row_index": 563, "timestamp": "2017-05-27T05:00:25Z", "event_type": "GetBucketNotification", "event_source": "s3.amazonaws.com", "principal": {"type": "AssumedRole", "arn": "arn:aws:sts::811596193553:assumed-role/SecurityMonkey/cloudaux", "account_id": "811596193553", "principal_id": "AROAUB2AA5FQRGAHITW4A:cloudaux", "user_name": null, "access_key_id": "ASIA97AFJX4A1GZJI08P", "session_issuer_arn": "arn:aws:iam::811596193553:role/SecurityMonkey", "session_issuer_user_name": "SecurityMonkey"}, "network": {"source_ip": "255.253.125.115", "user_agent": "[Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56]", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1039, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "94b801075-e47d-45d5-bcd3-7847c20668", "eventTime": "2017-05-27T05:00:25Z", "eventName": "GetBucketNotification", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.253.125.115", "userAgent": "[Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56]", "awsRegion": "us-west-2", "userIdentity": {"type": "AssumedRole", "principalId": "AROAUB2AA5FQRGAHITW4A:cloudaux", "arn": "arn:aws:sts::811596193553:assumed-role/SecurityMonkey/cloudaux", "accountId": "811596193553", "accessKeyId": "ASIA97AFJX4A1GZJI08P", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2017-05-27T05:00:19Z"}, "sessionIssuer": {"type": "Role", "principalId": "AROAUB2AA5FQRGAHITW4A", "arn": "arn:aws:iam::811596193553:role/SecurityMonkey", "accountId": "811596193553", "userName": "SecurityMonkey"}}}, "requestParameters": {"notification": [""], "bucketName": "level3-2644b9e749c3d14e400f847199800c14.flaws.cloud"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "e08c4423-b05e-4442-862f-f38a68be7be5", "record_id": "flaws_cloudtrail:0000564:e08c4423-b05e-4442-862f-f38a68be7be5", "row_index": 564, "timestamp": "2017-05-27T05:00:25Z", "event_type": "GetBucketWebsite", "event_source": "s3.amazonaws.com", "principal": {"type": "AssumedRole", "arn": "arn:aws:sts::811596193553:assumed-role/SecurityMonkey/cloudaux", "account_id": "811596193553", "principal_id": "AROAUB2AA5FQRGAHITW4A:cloudaux", "user_name": null, "access_key_id": "ASIA97AFJX4A1GZJI08P", "session_issuer_arn": "arn:aws:iam::811596193553:role/SecurityMonkey", "session_issuer_user_name": "SecurityMonkey"}, "network": {"source_ip": "255.253.125.115", "user_agent": "[Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56]", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1030, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "e08c4423-b05e-4442-862f-f38a68be7be5", "eventTime": "2017-05-27T05:00:25Z", "eventName": "GetBucketWebsite", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.253.125.115", "userAgent": "[Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56]", "awsRegion": "us-west-2", "userIdentity": {"type": "AssumedRole", "principalId": "AROAUB2AA5FQRGAHITW4A:cloudaux", "arn": "arn:aws:sts::811596193553:assumed-role/SecurityMonkey/cloudaux", "accountId": "811596193553", "accessKeyId": "ASIA97AFJX4A1GZJI08P", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2017-05-27T05:00:19Z"}, "sessionIssuer": {"type": "Role", "principalId": "AROAUB2AA5FQRGAHITW4A", "arn": "arn:aws:iam::811596193553:role/SecurityMonkey", "accountId": "811596193553", "userName": "SecurityMonkey"}}}, "requestParameters": {"bucketName": "level3-2644b9e749c3d14e400f847199800c14.flaws.cloud", "website": [""]}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "6ebbe2f6-fe98-4688-8df2-fea73a4b0712", "record_id": "flaws_cloudtrail:0000565:6ebbe2f6-fe98-4688-8df2-fea73a4b0712", "row_index": 565, "timestamp": "2017-05-27T05:00:25Z", "event_type": "GetBucketAcl", "event_source": "s3.amazonaws.com", "principal": {"type": "AssumedRole", "arn": "arn:aws:sts::811596193553:assumed-role/SecurityMonkey/cloudaux", "account_id": "811596193553", "principal_id": "AROAUB2AA5FQRGAHITW4A:cloudaux", "user_name": null, "access_key_id": "ASIA97AFJX4A1GZJI08P", "session_issuer_arn": "arn:aws:iam::811596193553:role/SecurityMonkey", "session_issuer_user_name": "SecurityMonkey"}, "network": {"source_ip": "255.253.125.115", "user_agent": "[Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56]", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1022, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "6ebbe2f6-fe98-4688-8df2-fea73a4b0712", "eventTime": "2017-05-27T05:00:25Z", "eventName": "GetBucketAcl", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.253.125.115", "userAgent": "[Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56]", "awsRegion": "us-west-2", "userIdentity": {"type": "AssumedRole", "principalId": "AROAUB2AA5FQRGAHITW4A:cloudaux", "arn": "arn:aws:sts::811596193553:assumed-role/SecurityMonkey/cloudaux", "accountId": "811596193553", "accessKeyId": "ASIA97AFJX4A1GZJI08P", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2017-05-27T05:00:19Z"}, "sessionIssuer": {"type": "Role", "principalId": "AROAUB2AA5FQRGAHITW4A", "arn": "arn:aws:iam::811596193553:role/SecurityMonkey", "accountId": "811596193553", "userName": "SecurityMonkey"}}}, "requestParameters": {"bucketName": "level3-2644b9e749c3d14e400f847199800c14.flaws.cloud", "acl": [""]}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "2ca073a6-74d5-4202-b49f-1f7a003e2348", "record_id": "flaws_cloudtrail:0000566:2ca073a6-74d5-4202-b49f-1f7a003e2348", "row_index": 566, "timestamp": "2017-05-27T05:00:25Z", "event_type": "GetBucketReplication", "event_source": "s3.amazonaws.com", "principal": {"type": "AssumedRole", "arn": "arn:aws:sts::811596193553:assumed-role/SecurityMonkey/cloudaux", "account_id": "811596193553", "principal_id": "AROAUB2AA5FQRGAHITW4A:cloudaux", "user_name": null, "access_key_id": "ASIA97AFJX4A1GZJI08P", "session_issuer_arn": "arn:aws:iam::811596193553:role/SecurityMonkey", "session_issuer_user_name": "SecurityMonkey"}, "network": {"source_ip": "255.253.125.115", "user_agent": "[Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56]", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1151, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "2ca073a6-74d5-4202-b49f-1f7a003e2348", "eventTime": "2017-05-27T05:00:25Z", "eventName": "GetBucketReplication", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.253.125.115", "userAgent": "[Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56]", "awsRegion": "us-west-2", "errorCode": "ReplicationConfigurationNotFoundError", "errorMessage": "The replication configuration was not found", "userIdentity": {"type": "AssumedRole", "principalId": "AROAUB2AA5FQRGAHITW4A:cloudaux", "arn": "arn:aws:sts::811596193553:assumed-role/SecurityMonkey/cloudaux", "accountId": "811596193553", "accessKeyId": "ASIA97AFJX4A1GZJI08P", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2017-05-27T05:00:19Z"}, "sessionIssuer": {"type": "Role", "principalId": "AROAUB2AA5FQRGAHITW4A", "arn": "arn:aws:iam::811596193553:role/SecurityMonkey", "accountId": "811596193553", "userName": "SecurityMonkey"}}}, "requestParameters": {"replication": [""], "bucketName": "level3-2644b9e749c3d14e400f847199800c14.flaws.cloud"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "b138b26a-d574-4b47-b180-727cc2d17bba", "record_id": "flaws_cloudtrail:0000567:b138b26a-d574-4b47-b180-727cc2d17bba", "row_index": 567, "timestamp": "2017-05-27T05:00:25Z", "event_type": "GetBucketPolicy", "event_source": "s3.amazonaws.com", "principal": {"type": "AssumedRole", "arn": "arn:aws:sts::811596193553:assumed-role/SecurityMonkey/cloudaux", "account_id": "811596193553", "principal_id": "AROAUB2AA5FQRGAHITW4A:cloudaux", "user_name": null, "access_key_id": "ASIA97AFJX4A1GZJI08P", "session_issuer_arn": "arn:aws:iam::811596193553:role/SecurityMonkey", "session_issuer_user_name": "SecurityMonkey"}, "network": {"source_ip": "255.253.125.115", "user_agent": "[Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56]", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1028, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "b138b26a-d574-4b47-b180-727cc2d17bba", "eventTime": "2017-05-27T05:00:25Z", "eventName": "GetBucketPolicy", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.253.125.115", "userAgent": "[Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56]", "awsRegion": "us-west-2", "userIdentity": {"type": "AssumedRole", "principalId": "AROAUB2AA5FQRGAHITW4A:cloudaux", "arn": "arn:aws:sts::811596193553:assumed-role/SecurityMonkey/cloudaux", "accountId": "811596193553", "accessKeyId": "ASIA97AFJX4A1GZJI08P", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2017-05-27T05:00:19Z"}, "sessionIssuer": {"type": "Role", "principalId": "AROAUB2AA5FQRGAHITW4A", "arn": "arn:aws:iam::811596193553:role/SecurityMonkey", "accountId": "811596193553", "userName": "SecurityMonkey"}}}, "requestParameters": {"bucketName": "level3-2644b9e749c3d14e400f847199800c14.flaws.cloud", "policy": [""]}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "94ef7031-8d4d-4e15-ae00-d61babd90fba", "record_id": "flaws_cloudtrail:0000568:94ef7031-8d4d-4e15-ae00-d61babd90fba", "row_index": 568, "timestamp": "2017-05-27T05:00:25Z", "event_type": "GetBucketCors", "event_source": "s3.amazonaws.com", "principal": {"type": "AssumedRole", "arn": "arn:aws:sts::811596193553:assumed-role/SecurityMonkey/cloudaux", "account_id": "811596193553", "principal_id": "AROAUB2AA5FQRGAHITW4A:cloudaux", "user_name": null, "access_key_id": "ASIA97AFJX4A1GZJI08P", "session_issuer_arn": "arn:aws:iam::811596193553:role/SecurityMonkey", "session_issuer_user_name": "SecurityMonkey"}, "network": {"source_ip": "255.253.125.115", "user_agent": "[Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56]", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1117, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "94ef7031-8d4d-4e15-ae00-d61babd90fba", "eventTime": "2017-05-27T05:00:25Z", "eventName": "GetBucketCors", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.253.125.115", "userAgent": "[Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56]", "awsRegion": "us-west-2", "errorCode": "NoSuchCORSConfiguration", "errorMessage": "The CORS configuration does not exist", "userIdentity": {"type": "AssumedRole", "principalId": "AROAUB2AA5FQRGAHITW4A:cloudaux", "arn": "arn:aws:sts::811596193553:assumed-role/SecurityMonkey/cloudaux", "accountId": "811596193553", "accessKeyId": "ASIA97AFJX4A1GZJI08P", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2017-05-27T05:00:19Z"}, "sessionIssuer": {"type": "Role", "principalId": "AROAUB2AA5FQRGAHITW4A", "arn": "arn:aws:iam::811596193553:role/SecurityMonkey", "accountId": "811596193553", "userName": "SecurityMonkey"}}}, "requestParameters": {"bucketName": "level3-2644b9e749c3d14e400f847199800c14.flaws.cloud", "cors": [""]}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "f2c64c55-ee48-47fd-abeb-a8141e0973c8", "record_id": "flaws_cloudtrail:0000569:f2c64c55-ee48-47fd-abeb-a8141e0973c8", "row_index": 569, "timestamp": "2017-05-27T05:00:26Z", "event_type": "DescribeLoadBalancers", "event_source": "elasticloadbalancing.amazonaws.com", "principal": {"type": "AssumedRole", "arn": "arn:aws:sts::811596193553:assumed-role/SecurityMonkey/cloudaux", "account_id": "811596193553", "principal_id": "AROAUB2AA5FQRGAHITW4A:cloudaux", "user_name": null, "access_key_id": "ASIA9AB1VY6Y33BMXAER", "session_issuer_arn": "arn:aws:iam::811596193553:role/SecurityMonkey", "session_issuer_user_name": "SecurityMonkey"}, "network": {"source_ip": "255.253.125.115", "user_agent": "Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56", "aws_region": "ap-northeast-2"}, "resource_arns": [], "raw_record_size_bytes": 1039, "raw_record_depth": 4, "raw_record_top_level_keys": ["apiVersion", "awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "f2c64c55-ee48-47fd-abeb-a8141e0973c8", "eventTime": "2017-05-27T05:00:26Z", "eventName": "DescribeLoadBalancers", "eventSource": "elasticloadbalancing.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.253.125.115", "userAgent": "Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56", "awsRegion": "ap-northeast-2", "userIdentity": {"type": "AssumedRole", "principalId": "AROAUB2AA5FQRGAHITW4A:cloudaux", "arn": "arn:aws:sts::811596193553:assumed-role/SecurityMonkey/cloudaux", "accountId": "811596193553", "accessKeyId": "ASIA9AB1VY6Y33BMXAER", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2017-05-27T05:00:25Z"}, "sessionIssuer": {"type": "Role", "principalId": "AROAUB2AA5FQRGAHITW4A", "arn": "arn:aws:iam::811596193553:role/SecurityMonkey", "accountId": "811596193553", "userName": "SecurityMonkey"}}}, "responseElements": {"loadBalancers": []}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "b973524c-0bf9-4429-be85-e6d45f744fa0", "record_id": "flaws_cloudtrail:0000570:b973524c-0bf9-4429-be85-e6d45f744fa0", "row_index": 570, "timestamp": "2017-05-27T05:00:26Z", "event_type": "GetBucketLocation", "event_source": "s3.amazonaws.com", "principal": {"type": "AssumedRole", "arn": "arn:aws:sts::811596193553:assumed-role/SecurityMonkey/cloudaux", "account_id": "811596193553", "principal_id": "AROAUB2AA5FQRGAHITW4A:cloudaux", "user_name": null, "access_key_id": "ASIAVVCM6EFO0RRE4GGX", "session_issuer_arn": "arn:aws:iam::811596193553:role/SecurityMonkey", "session_issuer_user_name": "SecurityMonkey"}, "network": {"source_ip": "255.253.125.115", "user_agent": "[Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56]", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 1032, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "b973524c-0bf9-4429-be85-e6d45f744fa0", "eventTime": "2017-05-27T05:00:26Z", "eventName": "GetBucketLocation", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.253.125.115", "userAgent": "[Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56]", "awsRegion": "us-east-1", "userIdentity": {"type": "AssumedRole", "principalId": "AROAUB2AA5FQRGAHITW4A:cloudaux", "arn": "arn:aws:sts::811596193553:assumed-role/SecurityMonkey/cloudaux", "accountId": "811596193553", "accessKeyId": "ASIAVVCM6EFO0RRE4GGX", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2017-05-27T05:00:23Z"}, "sessionIssuer": {"type": "Role", "principalId": "AROAUB2AA5FQRGAHITW4A", "arn": "arn:aws:iam::811596193553:role/SecurityMonkey", "accountId": "811596193553", "userName": "SecurityMonkey"}}}, "requestParameters": {"bucketName": "level4-974134b52e7c35aebcc4b45f19113936.flaws.cloud", "location": [""]}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "155ac15d-f2d9-4dd4-bbb2-f08bc40b15f3", "record_id": "flaws_cloudtrail:0000571:155ac15d-f2d9-4dd4-bbb2-f08bc40b15f3", "row_index": 571, "timestamp": "2017-05-27T05:00:26Z", "event_type": "GetBucketLogging", "event_source": "s3.amazonaws.com", "principal": {"type": "AssumedRole", "arn": "arn:aws:sts::811596193553:assumed-role/SecurityMonkey/cloudaux", "account_id": "811596193553", "principal_id": "AROAUB2AA5FQRGAHITW4A:cloudaux", "user_name": null, "access_key_id": "ASIA97AFJX4A1GZJI08P", "session_issuer_arn": "arn:aws:iam::811596193553:role/SecurityMonkey", "session_issuer_user_name": "SecurityMonkey"}, "network": {"source_ip": "255.253.125.115", "user_agent": "[Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56]", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1029, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "155ac15d-f2d9-4dd4-bbb2-f08bc40b15f3", "eventTime": "2017-05-27T05:00:26Z", "eventName": "GetBucketLogging", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.253.125.115", "userAgent": "[Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56]", "awsRegion": "us-west-2", "userIdentity": {"type": "AssumedRole", "principalId": "AROAUB2AA5FQRGAHITW4A:cloudaux", "arn": "arn:aws:sts::811596193553:assumed-role/SecurityMonkey/cloudaux", "accountId": "811596193553", "accessKeyId": "ASIA97AFJX4A1GZJI08P", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2017-05-27T05:00:19Z"}, "sessionIssuer": {"type": "Role", "principalId": "AROAUB2AA5FQRGAHITW4A", "arn": "arn:aws:iam::811596193553:role/SecurityMonkey", "accountId": "811596193553", "userName": "SecurityMonkey"}}}, "requestParameters": {"logging": [""], "bucketName": "level4-974134b52e7c35aebcc4b45f19113936.flaws.cloud"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "a86912ac-b0e4-491e-a99a-e71eebcd5c21", "record_id": "flaws_cloudtrail:0000572:a86912ac-b0e4-491e-a99a-e71eebcd5c21", "row_index": 572, "timestamp": "2017-05-27T05:00:26Z", "event_type": "GetBucketNotification", "event_source": "s3.amazonaws.com", "principal": {"type": "AssumedRole", "arn": "arn:aws:sts::811596193553:assumed-role/SecurityMonkey/cloudaux", "account_id": "811596193553", "principal_id": "AROAUB2AA5FQRGAHITW4A:cloudaux", "user_name": null, "access_key_id": "ASIA97AFJX4A1GZJI08P", "session_issuer_arn": "arn:aws:iam::811596193553:role/SecurityMonkey", "session_issuer_user_name": "SecurityMonkey"}, "network": {"source_ip": "255.253.125.115", "user_agent": "[Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56]", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1040, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "a86912ac-b0e4-491e-a99a-e71eebcd5c21", "eventTime": "2017-05-27T05:00:26Z", "eventName": "GetBucketNotification", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.253.125.115", "userAgent": "[Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56]", "awsRegion": "us-west-2", "userIdentity": {"type": "AssumedRole", "principalId": "AROAUB2AA5FQRGAHITW4A:cloudaux", "arn": "arn:aws:sts::811596193553:assumed-role/SecurityMonkey/cloudaux", "accountId": "811596193553", "accessKeyId": "ASIA97AFJX4A1GZJI08P", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2017-05-27T05:00:19Z"}, "sessionIssuer": {"type": "Role", "principalId": "AROAUB2AA5FQRGAHITW4A", "arn": "arn:aws:iam::811596193553:role/SecurityMonkey", "accountId": "811596193553", "userName": "SecurityMonkey"}}}, "requestParameters": {"notification": [""], "bucketName": "level4-974134b52e7c35aebcc4b45f19113936.flaws.cloud"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "f571da65-eb85-4abc-9b6e-c62f9d4eb464", "record_id": "flaws_cloudtrail:0000573:f571da65-eb85-4abc-9b6e-c62f9d4eb464", "row_index": 573, "timestamp": "2017-05-27T05:00:26Z", "event_type": "GetBucketReplication", "event_source": "s3.amazonaws.com", "principal": {"type": "AssumedRole", "arn": "arn:aws:sts::811596193553:assumed-role/SecurityMonkey/cloudaux", "account_id": "811596193553", "principal_id": "AROAUB2AA5FQRGAHITW4A:cloudaux", "user_name": null, "access_key_id": "ASIA97AFJX4A1GZJI08P", "session_issuer_arn": "arn:aws:iam::811596193553:role/SecurityMonkey", "session_issuer_user_name": "SecurityMonkey"}, "network": {"source_ip": "255.253.125.115", "user_agent": "[Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56]", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1151, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "f571da65-eb85-4abc-9b6e-c62f9d4eb464", "eventTime": "2017-05-27T05:00:26Z", "eventName": "GetBucketReplication", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.253.125.115", "userAgent": "[Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56]", "awsRegion": "us-west-2", "errorCode": "ReplicationConfigurationNotFoundError", "errorMessage": "The replication configuration was not found", "userIdentity": {"type": "AssumedRole", "principalId": "AROAUB2AA5FQRGAHITW4A:cloudaux", "arn": "arn:aws:sts::811596193553:assumed-role/SecurityMonkey/cloudaux", "accountId": "811596193553", "accessKeyId": "ASIA97AFJX4A1GZJI08P", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2017-05-27T05:00:19Z"}, "sessionIssuer": {"type": "Role", "principalId": "AROAUB2AA5FQRGAHITW4A", "arn": "arn:aws:iam::811596193553:role/SecurityMonkey", "accountId": "811596193553", "userName": "SecurityMonkey"}}}, "requestParameters": {"replication": [""], "bucketName": "level4-974134b52e7c35aebcc4b45f19113936.flaws.cloud"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "165bb010-de5e-4fac-95cc-e53aad5e41b9", "record_id": "flaws_cloudtrail:0000574:165bb010-de5e-4fac-95cc-e53aad5e41b9", "row_index": 574, "timestamp": "2017-05-27T05:00:26Z", "event_type": "GetBucketTagging", "event_source": "s3.amazonaws.com", "principal": {"type": "AssumedRole", "arn": "arn:aws:sts::811596193553:assumed-role/SecurityMonkey/cloudaux", "account_id": "811596193553", "principal_id": "AROAUB2AA5FQRGAHITW4A:cloudaux", "user_name": null, "access_key_id": "ASIA97AFJX4A1GZJI08P", "session_issuer_arn": "arn:aws:iam::811596193553:role/SecurityMonkey", "session_issuer_user_name": "SecurityMonkey"}, "network": {"source_ip": "255.253.125.115", "user_agent": "[Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56]", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1100, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "165bb010-de5e-4fac-95cc-e53aad5e41b9", "eventTime": "2017-05-27T05:00:26Z", "eventName": "GetBucketTagging", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.253.125.115", "userAgent": "[Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56]", "awsRegion": "us-west-2", "errorCode": "NoSuchTagSet", "errorMessage": "The TagSet does not exist", "userIdentity": {"type": "AssumedRole", "principalId": "AROAUB2AA5FQRGAHITW4A:cloudaux", "arn": "arn:aws:sts::811596193553:assumed-role/SecurityMonkey/cloudaux", "accountId": "811596193553", "accessKeyId": "ASIA97AFJX4A1GZJI08P", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2017-05-27T05:00:19Z"}, "sessionIssuer": {"type": "Role", "principalId": "AROAUB2AA5FQRGAHITW4A", "arn": "arn:aws:iam::811596193553:role/SecurityMonkey", "accountId": "811596193553", "userName": "SecurityMonkey"}}}, "requestParameters": {"tagging": [""], "bucketName": "level4-974134b52e7c35aebcc4b45f19113936.flaws.cloud"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "9289bbd1-5e55-4fec-a2b0-27360c077d", "record_id": "flaws_cloudtrail:0000575:9289bbd1-5e55-4fec-a2b0-27360c077d", "row_index": 575, "timestamp": "2017-05-27T05:00:26Z", "event_type": "GetBucketWebsite", "event_source": "s3.amazonaws.com", "principal": {"type": "AssumedRole", "arn": "arn:aws:sts::811596193553:assumed-role/SecurityMonkey/cloudaux", "account_id": "811596193553", "principal_id": "AROAUB2AA5FQRGAHITW4A:cloudaux", "user_name": null, "access_key_id": "ASIA97AFJX4A1GZJI08P", "session_issuer_arn": "arn:aws:iam::811596193553:role/SecurityMonkey", "session_issuer_user_name": "SecurityMonkey"}, "network": {"source_ip": "255.253.125.115", "user_agent": "[Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56]", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1028, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "9289bbd1-5e55-4fec-a2b0-27360c077d", "eventTime": "2017-05-27T05:00:26Z", "eventName": "GetBucketWebsite", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.253.125.115", "userAgent": "[Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56]", "awsRegion": "us-west-2", "userIdentity": {"type": "AssumedRole", "principalId": "AROAUB2AA5FQRGAHITW4A:cloudaux", "arn": "arn:aws:sts::811596193553:assumed-role/SecurityMonkey/cloudaux", "accountId": "811596193553", "accessKeyId": "ASIA97AFJX4A1GZJI08P", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2017-05-27T05:00:19Z"}, "sessionIssuer": {"type": "Role", "principalId": "AROAUB2AA5FQRGAHITW4A", "arn": "arn:aws:iam::811596193553:role/SecurityMonkey", "accountId": "811596193553", "userName": "SecurityMonkey"}}}, "requestParameters": {"bucketName": "level4-974134b52e7c35aebcc4b45f19113936.flaws.cloud", "website": [""]}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "277448f1-c77a-4371-8c12-30da5a016d02", "record_id": "flaws_cloudtrail:0000576:277448f1-c77a-4371-8c12-30da5a016d02", "row_index": 576, "timestamp": "2017-05-27T05:00:26Z", "event_type": "GetBucketPolicy", "event_source": "s3.amazonaws.com", "principal": {"type": "AssumedRole", "arn": "arn:aws:sts::811596193553:assumed-role/SecurityMonkey/cloudaux", "account_id": "811596193553", "principal_id": "AROAUB2AA5FQRGAHITW4A:cloudaux", "user_name": null, "access_key_id": "ASIA97AFJX4A1GZJI08P", "session_issuer_arn": "arn:aws:iam::811596193553:role/SecurityMonkey", "session_issuer_user_name": "SecurityMonkey"}, "network": {"source_ip": "255.253.125.115", "user_agent": "[Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56]", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1028, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "277448f1-c77a-4371-8c12-30da5a016d02", "eventTime": "2017-05-27T05:00:26Z", "eventName": "GetBucketPolicy", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.253.125.115", "userAgent": "[Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56]", "awsRegion": "us-west-2", "userIdentity": {"type": "AssumedRole", "principalId": "AROAUB2AA5FQRGAHITW4A:cloudaux", "arn": "arn:aws:sts::811596193553:assumed-role/SecurityMonkey/cloudaux", "accountId": "811596193553", "accessKeyId": "ASIA97AFJX4A1GZJI08P", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2017-05-27T05:00:19Z"}, "sessionIssuer": {"type": "Role", "principalId": "AROAUB2AA5FQRGAHITW4A", "arn": "arn:aws:iam::811596193553:role/SecurityMonkey", "accountId": "811596193553", "userName": "SecurityMonkey"}}}, "requestParameters": {"bucketName": "level4-974134b52e7c35aebcc4b45f19113936.flaws.cloud", "policy": [""]}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "aab824695-581d-49e2-9c40-ee7fd4d8a0d5", "record_id": "flaws_cloudtrail:0000577:aab824695-581d-49e2-9c40-ee7fd4d8a0d5", "row_index": 577, "timestamp": "2017-05-27T05:00:26Z", "event_type": "GetBucketVersioning", "event_source": "s3.amazonaws.com", "principal": {"type": "AssumedRole", "arn": "arn:aws:sts::811596193553:assumed-role/SecurityMonkey/cloudaux", "account_id": "811596193553", "principal_id": "AROAUB2AA5FQRGAHITW4A:cloudaux", "user_name": null, "access_key_id": "ASIA97AFJX4A1GZJI08P", "session_issuer_arn": "arn:aws:iam::811596193553:role/SecurityMonkey", "session_issuer_user_name": "SecurityMonkey"}, "network": {"source_ip": "255.253.125.115", "user_agent": "[Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56]", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1037, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "aab824695-581d-49e2-9c40-ee7fd4d8a0d5", "eventTime": "2017-05-27T05:00:26Z", "eventName": "GetBucketVersioning", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.253.125.115", "userAgent": "[Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56]", "awsRegion": "us-west-2", "userIdentity": {"type": "AssumedRole", "principalId": "AROAUB2AA5FQRGAHITW4A:cloudaux", "arn": "arn:aws:sts::811596193553:assumed-role/SecurityMonkey/cloudaux", "accountId": "811596193553", "accessKeyId": "ASIA97AFJX4A1GZJI08P", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2017-05-27T05:00:19Z"}, "sessionIssuer": {"type": "Role", "principalId": "AROAUB2AA5FQRGAHITW4A", "arn": "arn:aws:iam::811596193553:role/SecurityMonkey", "accountId": "811596193553", "userName": "SecurityMonkey"}}}, "requestParameters": {"bucketName": "level4-974134b52e7c35aebcc4b45f19113936.flaws.cloud", "versioning": [""]}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "5f4bc3ee-f363-4f66-b4db-6b1c85370e33", "record_id": "flaws_cloudtrail:0000578:5f4bc3ee-f363-4f66-b4db-6b1c85370e33", "row_index": 578, "timestamp": "2017-05-27T05:00:26Z", "event_type": "GetBucketCors", "event_source": "s3.amazonaws.com", "principal": {"type": "AssumedRole", "arn": "arn:aws:sts::811596193553:assumed-role/SecurityMonkey/cloudaux", "account_id": "811596193553", "principal_id": "AROAUB2AA5FQRGAHITW4A:cloudaux", "user_name": null, "access_key_id": "ASIA97AFJX4A1GZJI08P", "session_issuer_arn": "arn:aws:iam::811596193553:role/SecurityMonkey", "session_issuer_user_name": "SecurityMonkey"}, "network": {"source_ip": "255.253.125.115", "user_agent": "[Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56]", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1117, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "5f4bc3ee-f363-4f66-b4db-6b1c85370e33", "eventTime": "2017-05-27T05:00:26Z", "eventName": "GetBucketCors", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.253.125.115", "userAgent": "[Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56]", "awsRegion": "us-west-2", "errorCode": "NoSuchCORSConfiguration", "errorMessage": "The CORS configuration does not exist", "userIdentity": {"type": "AssumedRole", "principalId": "AROAUB2AA5FQRGAHITW4A:cloudaux", "arn": "arn:aws:sts::811596193553:assumed-role/SecurityMonkey/cloudaux", "accountId": "811596193553", "accessKeyId": "ASIA97AFJX4A1GZJI08P", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2017-05-27T05:00:19Z"}, "sessionIssuer": {"type": "Role", "principalId": "AROAUB2AA5FQRGAHITW4A", "arn": "arn:aws:iam::811596193553:role/SecurityMonkey", "accountId": "811596193553", "userName": "SecurityMonkey"}}}, "requestParameters": {"bucketName": "level4-974134b52e7c35aebcc4b45f19113936.flaws.cloud", "cors": [""]}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "3a6d1ada-d981-455d-8b0b-bceae9478c05", "record_id": "flaws_cloudtrail:0000579:3a6d1ada-d981-455d-8b0b-bceae9478c05", "row_index": 579, "timestamp": "2017-05-27T05:00:26Z", "event_type": "GetBucketLifecycle", "event_source": "s3.amazonaws.com", "principal": {"type": "AssumedRole", "arn": "arn:aws:sts::811596193553:assumed-role/SecurityMonkey/cloudaux", "account_id": "811596193553", "principal_id": "AROAUB2AA5FQRGAHITW4A:cloudaux", "user_name": null, "access_key_id": "ASIA97AFJX4A1GZJI08P", "session_issuer_arn": "arn:aws:iam::811596193553:role/SecurityMonkey", "session_issuer_user_name": "SecurityMonkey"}, "network": {"source_ip": "255.253.125.115", "user_agent": "[Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56]", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1137, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "3a6d1ada-d981-455d-8b0b-bceae9478c05", "eventTime": "2017-05-27T05:00:26Z", "eventName": "GetBucketLifecycle", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.253.125.115", "userAgent": "[Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56]", "awsRegion": "us-west-2", "errorCode": "NoSuchLifecycleConfiguration", "errorMessage": "The lifecycle configuration does not exist", "userIdentity": {"type": "AssumedRole", "principalId": "AROAUB2AA5FQRGAHITW4A:cloudaux", "arn": "arn:aws:sts::811596193553:assumed-role/SecurityMonkey/cloudaux", "accountId": "811596193553", "accessKeyId": "ASIA97AFJX4A1GZJI08P", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2017-05-27T05:00:19Z"}, "sessionIssuer": {"type": "Role", "principalId": "AROAUB2AA5FQRGAHITW4A", "arn": "arn:aws:iam::811596193553:role/SecurityMonkey", "accountId": "811596193553", "userName": "SecurityMonkey"}}}, "requestParameters": {"lifecycle": [""], "bucketName": "level4-974134b52e7c35aebcc4b45f19113936.flaws.cloud"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "0637edb7-f31d-4b02-ac02-36c4be77d5f1", "record_id": "flaws_cloudtrail:0000580:0637edb7-f31d-4b02-ac02-36c4be77d5f1", "row_index": 580, "timestamp": "2017-05-27T05:00:26Z", "event_type": "GetBucketAcl", "event_source": "s3.amazonaws.com", "principal": {"type": "AssumedRole", "arn": "arn:aws:sts::811596193553:assumed-role/SecurityMonkey/cloudaux", "account_id": "811596193553", "principal_id": "AROAUB2AA5FQRGAHITW4A:cloudaux", "user_name": null, "access_key_id": "ASIA97AFJX4A1GZJI08P", "session_issuer_arn": "arn:aws:iam::811596193553:role/SecurityMonkey", "session_issuer_user_name": "SecurityMonkey"}, "network": {"source_ip": "255.253.125.115", "user_agent": "[Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56]", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1023, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "0637edb7-f31d-4b02-ac02-36c4be77d5f1", "eventTime": "2017-05-27T05:00:26Z", "eventName": "GetBucketAcl", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.253.125.115", "userAgent": "[Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56]", "awsRegion": "us-west-2", "userIdentity": {"type": "AssumedRole", "principalId": "AROAUB2AA5FQRGAHITW4A:cloudaux", "arn": "arn:aws:sts::811596193553:assumed-role/SecurityMonkey/cloudaux", "accountId": "811596193553", "accessKeyId": "ASIA97AFJX4A1GZJI08P", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2017-05-27T05:00:19Z"}, "sessionIssuer": {"type": "Role", "principalId": "AROAUB2AA5FQRGAHITW4A", "arn": "arn:aws:iam::811596193553:role/SecurityMonkey", "accountId": "811596193553", "userName": "SecurityMonkey"}}}, "requestParameters": {"bucketName": "level4-974134b52e7c35aebcc4b45f19113936.flaws.cloud", "acl": [""]}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "2bdcbbfa-fe6c-4482-8f50-9bf7e0501c07", "record_id": "flaws_cloudtrail:0000581:2bdcbbfa-fe6c-4482-8f50-9bf7e0501c07", "row_index": 581, "timestamp": "2017-05-27T05:00:27Z", "event_type": "GetBucketLocation", "event_source": "s3.amazonaws.com", "principal": {"type": "AssumedRole", "arn": "arn:aws:sts::811596193553:assumed-role/SecurityMonkey/cloudaux", "account_id": "811596193553", "principal_id": "AROAUB2AA5FQRGAHITW4A:cloudaux", "user_name": null, "access_key_id": "ASIAVVCM6EFO0RRE4GGX", "session_issuer_arn": "arn:aws:iam::811596193553:role/SecurityMonkey", "session_issuer_user_name": "SecurityMonkey"}, "network": {"source_ip": "255.253.125.115", "user_agent": "[Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56]", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 1032, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "2bdcbbfa-fe6c-4482-8f50-9bf7e0501c07", "eventTime": "2017-05-27T05:00:27Z", "eventName": "GetBucketLocation", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.253.125.115", "userAgent": "[Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56]", "awsRegion": "us-east-1", "userIdentity": {"type": "AssumedRole", "principalId": "AROAUB2AA5FQRGAHITW4A:cloudaux", "arn": "arn:aws:sts::811596193553:assumed-role/SecurityMonkey/cloudaux", "accountId": "811596193553", "accessKeyId": "ASIAVVCM6EFO0RRE4GGX", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2017-05-27T05:00:23Z"}, "sessionIssuer": {"type": "Role", "principalId": "AROAUB2AA5FQRGAHITW4A", "arn": "arn:aws:iam::811596193553:role/SecurityMonkey", "accountId": "811596193553", "userName": "SecurityMonkey"}}}, "requestParameters": {"bucketName": "level6-588e81908c84e62a6dd8202d535469dd.flaws.cloud", "location": [""]}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "8ea8035b-3f7b-4588-9ac7-6bc952f1cd71", "record_id": "flaws_cloudtrail:0000582:8ea8035b-3f7b-4588-9ac7-6bc952f1cd71", "row_index": 582, "timestamp": "2017-05-27T05:00:27Z", "event_type": "GetBucketLocation", "event_source": "s3.amazonaws.com", "principal": {"type": "AssumedRole", "arn": "arn:aws:sts::811596193553:assumed-role/SecurityMonkey/cloudaux", "account_id": "811596193553", "principal_id": "AROAUB2AA5FQRGAHITW4A:cloudaux", "user_name": null, "access_key_id": "ASIAVVCM6EFO0RRE4GGX", "session_issuer_arn": "arn:aws:iam::811596193553:role/SecurityMonkey", "session_issuer_user_name": "SecurityMonkey"}, "network": {"source_ip": "255.253.125.115", "user_agent": "[Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56]", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 1032, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "8ea8035b-3f7b-4588-9ac7-6bc952f1cd71", "eventTime": "2017-05-27T05:00:27Z", "eventName": "GetBucketLocation", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.253.125.115", "userAgent": "[Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56]", "awsRegion": "us-east-1", "userIdentity": {"type": "AssumedRole", "principalId": "AROAUB2AA5FQRGAHITW4A:cloudaux", "arn": "arn:aws:sts::811596193553:assumed-role/SecurityMonkey/cloudaux", "accountId": "811596193553", "accessKeyId": "ASIAVVCM6EFO0RRE4GGX", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2017-05-27T05:00:23Z"}, "sessionIssuer": {"type": "Role", "principalId": "AROAUB2AA5FQRGAHITW4A", "arn": "arn:aws:iam::811596193553:role/SecurityMonkey", "accountId": "811596193553", "userName": "SecurityMonkey"}}}, "requestParameters": {"bucketName": "level5-8dbc21dbbd6129208d054061ef063f04.flaws.cloud", "location": [""]}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "85165b-ceb3-4461-9b32-20c1dc969853d", "record_id": "flaws_cloudtrail:0000583:85165b-ceb3-4461-9b32-20c1dc969853d", "row_index": 583, "timestamp": "2017-05-27T05:00:27Z", "event_type": "AssumeRole", "event_source": "sts.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/SecurityMokey", "account_id": "811596193553", "principal_id": "AIDAQ9SRE1SZZZ4Q4UOJH", "user_name": "SecurityMokey", "access_key_id": "AKIAXJ0III4JBKZDXGXN", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "255.253.125.115", "user_agent": "Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56", "aws_region": "us-east-1"}, "resource_arns": ["arn:aws:iam::811596193553:role/SecurityMonkey"], "raw_record_size_bytes": 1444, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "resources", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "85165b-ceb3-4461-9b32-20c1dc969853d", "eventTime": "2017-05-27T05:00:27Z", "eventName": "AssumeRole", "eventSource": "sts.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.253.125.115", "userAgent": "Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDAQ9SRE1SZZZ4Q4UOJH", "arn": "arn:aws:iam::811596193553:user/SecurityMokey", "accountId": "811596193553", "accessKeyId": "AKIAXJ0III4JBKZDXGXN", "userName": "SecurityMokey"}, "requestParameters": {"roleArn": "arn:aws:iam::811596193553:role/SecurityMonkey", "roleSessionName": "cloudaux"}, "responseElements": {"credentials": {"accessKeyId": "ASIAPO0A8QZKSUTA115R", "expiration": "May 27, 2017 6:00:27 AM", "sessionToken": "FQoDYXdzECYaDAS+vzw1agqnEniFaiLLAZ/yXC/+IPl8XSq70v9UOPdeykB9huOEkCHUGfxD/A2bUVojjgex+3uThbmNje2B70rqApf1AQURg9sqxCFv5B4ChiX0wUIHTXh+1Ba8Z/p8N3IZesn6txdSOkYCmD8TZ2l/amSgDlOEpgDh9NxY4gg++uemKXHUrCIDsoiofsmw7hTylbuJY1i2icfqap0F8mWENLbmjnTaRlizkT2bPx4agVvdImhFKkgZdW3W/P7DiHhd8+4NA3piUkjha3tfUjPhYR28RySXm4HbKOuPpMkF"}, "assumedRoleUser": {"assumedRoleId": "AROAUB2AA5FQRGAHITW4A:cloudaux", "arn": "arn:aws:sts::811596193553:assumed-role/SecurityMonkey/cloudaux"}}, "resources": [{"ARN": "arn:aws:iam::811596193553:role/SecurityMonkey", "accountId": "811596193553", "type": "AWS::IAM::Role"}]}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "ea1c3f80-6e1d-499a-80a4-4c35a655a689", "record_id": "flaws_cloudtrail:0000584:ea1c3f80-6e1d-499a-80a4-4c35a655a689", "row_index": 584, "timestamp": "2017-05-27T05:00:27Z", "event_type": "GetBucketWebsite", "event_source": "s3.amazonaws.com", "principal": {"type": "AssumedRole", "arn": "arn:aws:sts::811596193553:assumed-role/SecurityMonkey/cloudaux", "account_id": "811596193553", "principal_id": "AROAUB2AA5FQRGAHITW4A:cloudaux", "user_name": null, "access_key_id": "ASIA97AFJX4A1GZJI08P", "session_issuer_arn": "arn:aws:iam::811596193553:role/SecurityMonkey", "session_issuer_user_name": "SecurityMonkey"}, "network": {"source_ip": "255.253.125.115", "user_agent": "[Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56]", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1028, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "ea1c3f80-6e1d-499a-80a4-4c35a655a689", "eventTime": "2017-05-27T05:00:27Z", "eventName": "GetBucketWebsite", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.253.125.115", "userAgent": "[Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56]", "awsRegion": "us-west-2", "userIdentity": {"type": "AssumedRole", "principalId": "AROAUB2AA5FQRGAHITW4A:cloudaux", "arn": "arn:aws:sts::811596193553:assumed-role/SecurityMonkey/cloudaux", "accountId": "811596193553", "accessKeyId": "ASIA97AFJX4A1GZJI08P", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2017-05-27T05:00:19Z"}, "sessionIssuer": {"type": "Role", "principalId": "AROAUB2AA5FQRGAHITW4A", "arn": "arn:aws:iam::811596193553:role/SecurityMonkey", "accountId": "811596193553", "userName": "SecurityMonkey"}}}, "requestParameters": {"bucketName": "level5-8dbc21dbbd6129208d054061ef063f04.flaws.cloud", "website": [""]}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "673843c-6319-4a98-85d5-115df67a1c7f", "record_id": "flaws_cloudtrail:0000585:673843c-6319-4a98-85d5-115df67a1c7f", "row_index": 585, "timestamp": "2017-05-27T05:00:27Z", "event_type": "GetBucketNotification", "event_source": "s3.amazonaws.com", "principal": {"type": "AssumedRole", "arn": "arn:aws:sts::811596193553:assumed-role/SecurityMonkey/cloudaux", "account_id": "811596193553", "principal_id": "AROAUB2AA5FQRGAHITW4A:cloudaux", "user_name": null, "access_key_id": "ASIA97AFJX4A1GZJI08P", "session_issuer_arn": "arn:aws:iam::811596193553:role/SecurityMonkey", "session_issuer_user_name": "SecurityMonkey"}, "network": {"source_ip": "255.253.125.115", "user_agent": "[Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56]", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1039, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "673843c-6319-4a98-85d5-115df67a1c7f", "eventTime": "2017-05-27T05:00:27Z", "eventName": "GetBucketNotification", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.253.125.115", "userAgent": "[Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56]", "awsRegion": "us-west-2", "userIdentity": {"type": "AssumedRole", "principalId": "AROAUB2AA5FQRGAHITW4A:cloudaux", "arn": "arn:aws:sts::811596193553:assumed-role/SecurityMonkey/cloudaux", "accountId": "811596193553", "accessKeyId": "ASIA97AFJX4A1GZJI08P", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2017-05-27T05:00:19Z"}, "sessionIssuer": {"type": "Role", "principalId": "AROAUB2AA5FQRGAHITW4A", "arn": "arn:aws:iam::811596193553:role/SecurityMonkey", "accountId": "811596193553", "userName": "SecurityMonkey"}}}, "requestParameters": {"notification": [""], "bucketName": "level5-8dbc21dbbd6129208d054061ef063f04.flaws.cloud"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "43ed2cb2-a619-4b33-b0af-0633eba800b6", "record_id": "flaws_cloudtrail:0000586:43ed2cb2-a619-4b33-b0af-0633eba800b6", "row_index": 586, "timestamp": "2017-05-27T05:00:27Z", "event_type": "GetBucketLifecycle", "event_source": "s3.amazonaws.com", "principal": {"type": "AssumedRole", "arn": "arn:aws:sts::811596193553:assumed-role/SecurityMonkey/cloudaux", "account_id": "811596193553", "principal_id": "AROAUB2AA5FQRGAHITW4A:cloudaux", "user_name": null, "access_key_id": "ASIA97AFJX4A1GZJI08P", "session_issuer_arn": "arn:aws:iam::811596193553:role/SecurityMonkey", "session_issuer_user_name": "SecurityMonkey"}, "network": {"source_ip": "255.253.125.115", "user_agent": "[Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56]", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1137, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "43ed2cb2-a619-4b33-b0af-0633eba800b6", "eventTime": "2017-05-27T05:00:27Z", "eventName": "GetBucketLifecycle", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.253.125.115", "userAgent": "[Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56]", "awsRegion": "us-west-2", "errorCode": "NoSuchLifecycleConfiguration", "errorMessage": "The lifecycle configuration does not exist", "userIdentity": {"type": "AssumedRole", "principalId": "AROAUB2AA5FQRGAHITW4A:cloudaux", "arn": "arn:aws:sts::811596193553:assumed-role/SecurityMonkey/cloudaux", "accountId": "811596193553", "accessKeyId": "ASIA97AFJX4A1GZJI08P", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2017-05-27T05:00:19Z"}, "sessionIssuer": {"type": "Role", "principalId": "AROAUB2AA5FQRGAHITW4A", "arn": "arn:aws:iam::811596193553:role/SecurityMonkey", "accountId": "811596193553", "userName": "SecurityMonkey"}}}, "requestParameters": {"lifecycle": [""], "bucketName": "level5-8dbc21dbbd6129208d054061ef063f04.flaws.cloud"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "49407-9476-4519-8473-ffe1046b2f7d", "record_id": "flaws_cloudtrail:0000587:49407-9476-4519-8473-ffe1046b2f7d", "row_index": 587, "timestamp": "2017-05-27T05:00:27Z", "event_type": "GetBucketPolicy", "event_source": "s3.amazonaws.com", "principal": {"type": "AssumedRole", "arn": "arn:aws:sts::811596193553:assumed-role/SecurityMonkey/cloudaux", "account_id": "811596193553", "principal_id": "AROAUB2AA5FQRGAHITW4A:cloudaux", "user_name": null, "access_key_id": "ASIA97AFJX4A1GZJI08P", "session_issuer_arn": "arn:aws:iam::811596193553:role/SecurityMonkey", "session_issuer_user_name": "SecurityMonkey"}, "network": {"source_ip": "255.253.125.115", "user_agent": "[Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56]", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1025, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "49407-9476-4519-8473-ffe1046b2f7d", "eventTime": "2017-05-27T05:00:27Z", "eventName": "GetBucketPolicy", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.253.125.115", "userAgent": "[Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56]", "awsRegion": "us-west-2", "userIdentity": {"type": "AssumedRole", "principalId": "AROAUB2AA5FQRGAHITW4A:cloudaux", "arn": "arn:aws:sts::811596193553:assumed-role/SecurityMonkey/cloudaux", "accountId": "811596193553", "accessKeyId": "ASIA97AFJX4A1GZJI08P", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2017-05-27T05:00:19Z"}, "sessionIssuer": {"type": "Role", "principalId": "AROAUB2AA5FQRGAHITW4A", "arn": "arn:aws:iam::811596193553:role/SecurityMonkey", "accountId": "811596193553", "userName": "SecurityMonkey"}}}, "requestParameters": {"bucketName": "level5-8dbc21dbbd6129208d054061ef063f04.flaws.cloud", "policy": [""]}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "616b505c-1b0f-48ce-8578-426f57b232a4", "record_id": "flaws_cloudtrail:0000588:616b505c-1b0f-48ce-8578-426f57b232a4", "row_index": 588, "timestamp": "2017-05-27T05:00:27Z", "event_type": "GetBucketReplication", "event_source": "s3.amazonaws.com", "principal": {"type": "AssumedRole", "arn": "arn:aws:sts::811596193553:assumed-role/SecurityMonkey/cloudaux", "account_id": "811596193553", "principal_id": "AROAUB2AA5FQRGAHITW4A:cloudaux", "user_name": null, "access_key_id": "ASIA97AFJX4A1GZJI08P", "session_issuer_arn": "arn:aws:iam::811596193553:role/SecurityMonkey", "session_issuer_user_name": "SecurityMonkey"}, "network": {"source_ip": "255.253.125.115", "user_agent": "[Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56]", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1150, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "616b505c-1b0f-48ce-8578-426f57b232a4", "eventTime": "2017-05-27T05:00:27Z", "eventName": "GetBucketReplication", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.253.125.115", "userAgent": "[Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56]", "awsRegion": "us-west-2", "errorCode": "ReplicationConfigurationNotFoundError", "errorMessage": "The replication configuration was not found", "userIdentity": {"type": "AssumedRole", "principalId": "AROAUB2AA5FQRGAHITW4A:cloudaux", "arn": "arn:aws:sts::811596193553:assumed-role/SecurityMonkey/cloudaux", "accountId": "811596193553", "accessKeyId": "ASIA97AFJX4A1GZJI08P", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2017-05-27T05:00:19Z"}, "sessionIssuer": {"type": "Role", "principalId": "AROAUB2AA5FQRGAHITW4A", "arn": "arn:aws:iam::811596193553:role/SecurityMonkey", "accountId": "811596193553", "userName": "SecurityMonkey"}}}, "requestParameters": {"replication": [""], "bucketName": "level5-8dbc21dbbd6129208d054061ef063f04.flaws.cloud"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "68f58121-3141-4a80-882a-e25f0199a608", "record_id": "flaws_cloudtrail:0000589:68f58121-3141-4a80-882a-e25f0199a608", "row_index": 589, "timestamp": "2017-05-27T05:00:27Z", "event_type": "GetBucketTagging", "event_source": "s3.amazonaws.com", "principal": {"type": "AssumedRole", "arn": "arn:aws:sts::811596193553:assumed-role/SecurityMonkey/cloudaux", "account_id": "811596193553", "principal_id": "AROAUB2AA5FQRGAHITW4A:cloudaux", "user_name": null, "access_key_id": "ASIA97AFJX4A1GZJI08P", "session_issuer_arn": "arn:aws:iam::811596193553:role/SecurityMonkey", "session_issuer_user_name": "SecurityMonkey"}, "network": {"source_ip": "255.253.125.115", "user_agent": "[Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56]", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1100, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "68f58121-3141-4a80-882a-e25f0199a608", "eventTime": "2017-05-27T05:00:27Z", "eventName": "GetBucketTagging", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.253.125.115", "userAgent": "[Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56]", "awsRegion": "us-west-2", "errorCode": "NoSuchTagSet", "errorMessage": "The TagSet does not exist", "userIdentity": {"type": "AssumedRole", "principalId": "AROAUB2AA5FQRGAHITW4A:cloudaux", "arn": "arn:aws:sts::811596193553:assumed-role/SecurityMonkey/cloudaux", "accountId": "811596193553", "accessKeyId": "ASIA97AFJX4A1GZJI08P", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2017-05-27T05:00:19Z"}, "sessionIssuer": {"type": "Role", "principalId": "AROAUB2AA5FQRGAHITW4A", "arn": "arn:aws:iam::811596193553:role/SecurityMonkey", "accountId": "811596193553", "userName": "SecurityMonkey"}}}, "requestParameters": {"tagging": [""], "bucketName": "level5-8dbc21dbbd6129208d054061ef063f04.flaws.cloud"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "47552f0-24c5-4842-a911-c309e8f7ac43", "record_id": "flaws_cloudtrail:0000590:47552f0-24c5-4842-a911-c309e8f7ac43", "row_index": 590, "timestamp": "2017-05-27T05:00:27Z", "event_type": "GetBucketVersioning", "event_source": "s3.amazonaws.com", "principal": {"type": "AssumedRole", "arn": "arn:aws:sts::811596193553:assumed-role/SecurityMonkey/cloudaux", "account_id": "811596193553", "principal_id": "AROAUB2AA5FQRGAHITW4A:cloudaux", "user_name": null, "access_key_id": "ASIA97AFJX4A1GZJI08P", "session_issuer_arn": "arn:aws:iam::811596193553:role/SecurityMonkey", "session_issuer_user_name": "SecurityMonkey"}, "network": {"source_ip": "255.253.125.115", "user_agent": "[Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56]", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1034, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "47552f0-24c5-4842-a911-c309e8f7ac43", "eventTime": "2017-05-27T05:00:27Z", "eventName": "GetBucketVersioning", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.253.125.115", "userAgent": "[Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56]", "awsRegion": "us-west-2", "userIdentity": {"type": "AssumedRole", "principalId": "AROAUB2AA5FQRGAHITW4A:cloudaux", "arn": "arn:aws:sts::811596193553:assumed-role/SecurityMonkey/cloudaux", "accountId": "811596193553", "accessKeyId": "ASIA97AFJX4A1GZJI08P", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2017-05-27T05:00:19Z"}, "sessionIssuer": {"type": "Role", "principalId": "AROAUB2AA5FQRGAHITW4A", "arn": "arn:aws:iam::811596193553:role/SecurityMonkey", "accountId": "811596193553", "userName": "SecurityMonkey"}}}, "requestParameters": {"bucketName": "level5-8dbc21dbbd6129208d054061ef063f04.flaws.cloud", "versioning": [""]}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "d232f9b1-f83d-47e4-b6be-5f370facafa9", "record_id": "flaws_cloudtrail:0000591:d232f9b1-f83d-47e4-b6be-5f370facafa9", "row_index": 591, "timestamp": "2017-05-27T05:00:27Z", "event_type": "GetBucketLogging", "event_source": "s3.amazonaws.com", "principal": {"type": "AssumedRole", "arn": "arn:aws:sts::811596193553:assumed-role/SecurityMonkey/cloudaux", "account_id": "811596193553", "principal_id": "AROAUB2AA5FQRGAHITW4A:cloudaux", "user_name": null, "access_key_id": "ASIA97AFJX4A1GZJI08P", "session_issuer_arn": "arn:aws:iam::811596193553:role/SecurityMonkey", "session_issuer_user_name": "SecurityMonkey"}, "network": {"source_ip": "255.253.125.115", "user_agent": "[Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56]", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1030, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "d232f9b1-f83d-47e4-b6be-5f370facafa9", "eventTime": "2017-05-27T05:00:27Z", "eventName": "GetBucketLogging", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.253.125.115", "userAgent": "[Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56]", "awsRegion": "us-west-2", "userIdentity": {"type": "AssumedRole", "principalId": "AROAUB2AA5FQRGAHITW4A:cloudaux", "arn": "arn:aws:sts::811596193553:assumed-role/SecurityMonkey/cloudaux", "accountId": "811596193553", "accessKeyId": "ASIA97AFJX4A1GZJI08P", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2017-05-27T05:00:19Z"}, "sessionIssuer": {"type": "Role", "principalId": "AROAUB2AA5FQRGAHITW4A", "arn": "arn:aws:iam::811596193553:role/SecurityMonkey", "accountId": "811596193553", "userName": "SecurityMonkey"}}}, "requestParameters": {"logging": [""], "bucketName": "level5-8dbc21dbbd6129208d054061ef063f04.flaws.cloud"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "d6f442be-d01d-49ce-bfb8-a2f9c764167ae", "record_id": "flaws_cloudtrail:0000592:d6f442be-d01d-49ce-bfb8-a2f9c764167ae", "row_index": 592, "timestamp": "2017-05-27T05:00:27Z", "event_type": "GetBucketCors", "event_source": "s3.amazonaws.com", "principal": {"type": "AssumedRole", "arn": "arn:aws:sts::811596193553:assumed-role/SecurityMonkey/cloudaux", "account_id": "811596193553", "principal_id": "AROAUB2AA5FQRGAHITW4A:cloudaux", "user_name": null, "access_key_id": "ASIA97AFJX4A1GZJI08P", "session_issuer_arn": "arn:aws:iam::811596193553:role/SecurityMonkey", "session_issuer_user_name": "SecurityMonkey"}, "network": {"source_ip": "255.253.125.115", "user_agent": "[Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56]", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1117, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "d6f442be-d01d-49ce-bfb8-a2f9c764167ae", "eventTime": "2017-05-27T05:00:27Z", "eventName": "GetBucketCors", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.253.125.115", "userAgent": "[Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56]", "awsRegion": "us-west-2", "errorCode": "NoSuchCORSConfiguration", "errorMessage": "The CORS configuration does not exist", "userIdentity": {"type": "AssumedRole", "principalId": "AROAUB2AA5FQRGAHITW4A:cloudaux", "arn": "arn:aws:sts::811596193553:assumed-role/SecurityMonkey/cloudaux", "accountId": "811596193553", "accessKeyId": "ASIA97AFJX4A1GZJI08P", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2017-05-27T05:00:19Z"}, "sessionIssuer": {"type": "Role", "principalId": "AROAUB2AA5FQRGAHITW4A", "arn": "arn:aws:iam::811596193553:role/SecurityMonkey", "accountId": "811596193553", "userName": "SecurityMonkey"}}}, "requestParameters": {"bucketName": "level5-8dbc21dbbd6129208d054061ef063f04.flaws.cloud", "cors": [""]}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "1074db20-d318-4afd-8c81-a046d3a645dc", "record_id": "flaws_cloudtrail:0000593:1074db20-d318-4afd-8c81-a046d3a645dc", "row_index": 593, "timestamp": "2017-05-27T05:00:27Z", "event_type": "GetBucketAcl", "event_source": "s3.amazonaws.com", "principal": {"type": "AssumedRole", "arn": "arn:aws:sts::811596193553:assumed-role/SecurityMonkey/cloudaux", "account_id": "811596193553", "principal_id": "AROAUB2AA5FQRGAHITW4A:cloudaux", "user_name": null, "access_key_id": "ASIA97AFJX4A1GZJI08P", "session_issuer_arn": "arn:aws:iam::811596193553:role/SecurityMonkey", "session_issuer_user_name": "SecurityMonkey"}, "network": {"source_ip": "255.253.125.115", "user_agent": "[Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56]", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1022, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "1074db20-d318-4afd-8c81-a046d3a645dc", "eventTime": "2017-05-27T05:00:27Z", "eventName": "GetBucketAcl", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.253.125.115", "userAgent": "[Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56]", "awsRegion": "us-west-2", "userIdentity": {"type": "AssumedRole", "principalId": "AROAUB2AA5FQRGAHITW4A:cloudaux", "arn": "arn:aws:sts::811596193553:assumed-role/SecurityMonkey/cloudaux", "accountId": "811596193553", "accessKeyId": "ASIA97AFJX4A1GZJI08P", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2017-05-27T05:00:19Z"}, "sessionIssuer": {"type": "Role", "principalId": "AROAUB2AA5FQRGAHITW4A", "arn": "arn:aws:iam::811596193553:role/SecurityMonkey", "accountId": "811596193553", "userName": "SecurityMonkey"}}}, "requestParameters": {"bucketName": "level5-8dbc21dbbd6129208d054061ef063f04.flaws.cloud", "acl": [""]}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "7250e862-2fb9-45e0-a7ed-fdf14d9c52ce", "record_id": "flaws_cloudtrail:0000594:7250e862-2fb9-45e0-a7ed-fdf14d9c52ce", "row_index": 594, "timestamp": "2017-05-27T05:00:28Z", "event_type": "DescribeLoadBalancers", "event_source": "elasticloadbalancing.amazonaws.com", "principal": {"type": "AssumedRole", "arn": "arn:aws:sts::811596193553:assumed-role/SecurityMonkey/cloudaux", "account_id": "811596193553", "principal_id": "AROAUB2AA5FQRGAHITW4A:cloudaux", "user_name": null, "access_key_id": "ASIAPO0A8QZKSUTA115R", "session_issuer_arn": "arn:aws:iam::811596193553:role/SecurityMonkey", "session_issuer_user_name": "SecurityMonkey"}, "network": {"source_ip": "255.253.125.115", "user_agent": "Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56", "aws_region": "ap-south-1"}, "resource_arns": [], "raw_record_size_bytes": 1035, "raw_record_depth": 4, "raw_record_top_level_keys": ["apiVersion", "awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "7250e862-2fb9-45e0-a7ed-fdf14d9c52ce", "eventTime": "2017-05-27T05:00:28Z", "eventName": "DescribeLoadBalancers", "eventSource": "elasticloadbalancing.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.253.125.115", "userAgent": "Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56", "awsRegion": "ap-south-1", "userIdentity": {"type": "AssumedRole", "principalId": "AROAUB2AA5FQRGAHITW4A:cloudaux", "arn": "arn:aws:sts::811596193553:assumed-role/SecurityMonkey/cloudaux", "accountId": "811596193553", "accessKeyId": "ASIAPO0A8QZKSUTA115R", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2017-05-27T05:00:27Z"}, "sessionIssuer": {"type": "Role", "principalId": "AROAUB2AA5FQRGAHITW4A", "arn": "arn:aws:iam::811596193553:role/SecurityMonkey", "accountId": "811596193553", "userName": "SecurityMonkey"}}}, "responseElements": {"loadBalancers": []}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "24b60a04-280d-4efd-9dca-44eca68b2249", "record_id": "flaws_cloudtrail:0000595:24b60a04-280d-4efd-9dca-44eca68b2249", "row_index": 595, "timestamp": "2017-05-27T05:00:28Z", "event_type": "GetBucketWebsite", "event_source": "s3.amazonaws.com", "principal": {"type": "AssumedRole", "arn": "arn:aws:sts::811596193553:assumed-role/SecurityMonkey/cloudaux", "account_id": "811596193553", "principal_id": "AROAUB2AA5FQRGAHITW4A:cloudaux", "user_name": null, "access_key_id": "ASIA97AFJX4A1GZJI08P", "session_issuer_arn": "arn:aws:iam::811596193553:role/SecurityMonkey", "session_issuer_user_name": "SecurityMonkey"}, "network": {"source_ip": "255.253.125.115", "user_agent": "[Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56]", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1030, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "24b60a04-280d-4efd-9dca-44eca68b2249", "eventTime": "2017-05-27T05:00:28Z", "eventName": "GetBucketWebsite", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.253.125.115", "userAgent": "[Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56]", "awsRegion": "us-west-2", "userIdentity": {"type": "AssumedRole", "principalId": "AROAUB2AA5FQRGAHITW4A:cloudaux", "arn": "arn:aws:sts::811596193553:assumed-role/SecurityMonkey/cloudaux", "accountId": "811596193553", "accessKeyId": "ASIA97AFJX4A1GZJI08P", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2017-05-27T05:00:19Z"}, "sessionIssuer": {"type": "Role", "principalId": "AROAUB2AA5FQRGAHITW4A", "arn": "arn:aws:iam::811596193553:role/SecurityMonkey", "accountId": "811596193553", "userName": "SecurityMonkey"}}}, "requestParameters": {"bucketName": "level6-588e81908c84e62a6dd8202d535469dd.flaws.cloud", "website": [""]}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "4ad6a4d0-4599-4456-ae55-e2d902281", "record_id": "flaws_cloudtrail:0000596:4ad6a4d0-4599-4456-ae55-e2d902281", "row_index": 596, "timestamp": "2017-05-27T05:00:28Z", "event_type": "GetBucketReplication", "event_source": "s3.amazonaws.com", "principal": {"type": "AssumedRole", "arn": "arn:aws:sts::811596193553:assumed-role/SecurityMonkey/cloudaux", "account_id": "811596193553", "principal_id": "AROAUB2AA5FQRGAHITW4A:cloudaux", "user_name": null, "access_key_id": "ASIA97AFJX4A1GZJI08P", "session_issuer_arn": "arn:aws:iam::811596193553:role/SecurityMonkey", "session_issuer_user_name": "SecurityMonkey"}, "network": {"source_ip": "255.253.125.115", "user_agent": "[Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56]", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1148, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "4ad6a4d0-4599-4456-ae55-e2d902281", "eventTime": "2017-05-27T05:00:28Z", "eventName": "GetBucketReplication", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.253.125.115", "userAgent": "[Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56]", "awsRegion": "us-west-2", "errorCode": "ReplicationConfigurationNotFoundError", "errorMessage": "The replication configuration was not found", "userIdentity": {"type": "AssumedRole", "principalId": "AROAUB2AA5FQRGAHITW4A:cloudaux", "arn": "arn:aws:sts::811596193553:assumed-role/SecurityMonkey/cloudaux", "accountId": "811596193553", "accessKeyId": "ASIA97AFJX4A1GZJI08P", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2017-05-27T05:00:19Z"}, "sessionIssuer": {"type": "Role", "principalId": "AROAUB2AA5FQRGAHITW4A", "arn": "arn:aws:iam::811596193553:role/SecurityMonkey", "accountId": "811596193553", "userName": "SecurityMonkey"}}}, "requestParameters": {"replication": [""], "bucketName": "level6-588e81908c84e62a6dd8202d535469dd.flaws.cloud"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "563e3945-6cee-414e-9de3-27af865b7e9f", "record_id": "flaws_cloudtrail:0000597:563e3945-6cee-414e-9de3-27af865b7e9f", "row_index": 597, "timestamp": "2017-05-27T05:00:28Z", "event_type": "GetBucketPolicy", "event_source": "s3.amazonaws.com", "principal": {"type": "AssumedRole", "arn": "arn:aws:sts::811596193553:assumed-role/SecurityMonkey/cloudaux", "account_id": "811596193553", "principal_id": "AROAUB2AA5FQRGAHITW4A:cloudaux", "user_name": null, "access_key_id": "ASIA97AFJX4A1GZJI08P", "session_issuer_arn": "arn:aws:iam::811596193553:role/SecurityMonkey", "session_issuer_user_name": "SecurityMonkey"}, "network": {"source_ip": "255.253.125.115", "user_agent": "[Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56]", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1028, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "563e3945-6cee-414e-9de3-27af865b7e9f", "eventTime": "2017-05-27T05:00:28Z", "eventName": "GetBucketPolicy", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.253.125.115", "userAgent": "[Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56]", "awsRegion": "us-west-2", "userIdentity": {"type": "AssumedRole", "principalId": "AROAUB2AA5FQRGAHITW4A:cloudaux", "arn": "arn:aws:sts::811596193553:assumed-role/SecurityMonkey/cloudaux", "accountId": "811596193553", "accessKeyId": "ASIA97AFJX4A1GZJI08P", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2017-05-27T05:00:19Z"}, "sessionIssuer": {"type": "Role", "principalId": "AROAUB2AA5FQRGAHITW4A", "arn": "arn:aws:iam::811596193553:role/SecurityMonkey", "accountId": "811596193553", "userName": "SecurityMonkey"}}}, "requestParameters": {"bucketName": "level6-588e81908c84e62a6dd8202d535469dd.flaws.cloud", "policy": [""]}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "1ec2753f-2616-4a2d-96d3-446100fd0401", "record_id": "flaws_cloudtrail:0000598:1ec2753f-2616-4a2d-96d3-446100fd0401", "row_index": 598, "timestamp": "2017-05-27T05:00:28Z", "event_type": "GetBucketAcl", "event_source": "s3.amazonaws.com", "principal": {"type": "AssumedRole", "arn": "arn:aws:sts::811596193553:assumed-role/SecurityMonkey/cloudaux", "account_id": "811596193553", "principal_id": "AROAUB2AA5FQRGAHITW4A:cloudaux", "user_name": null, "access_key_id": "ASIA97AFJX4A1GZJI08P", "session_issuer_arn": "arn:aws:iam::811596193553:role/SecurityMonkey", "session_issuer_user_name": "SecurityMonkey"}, "network": {"source_ip": "255.253.125.115", "user_agent": "[Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56]", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1020, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "1ec2753f-2616-4a2d-96d3-446100fd0401", "eventTime": "2017-05-27T05:00:28Z", "eventName": "GetBucketAcl", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.253.125.115", "userAgent": "[Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56]", "awsRegion": "us-west-2", "userIdentity": {"type": "AssumedRole", "principalId": "AROAUB2AA5FQRGAHITW4A:cloudaux", "arn": "arn:aws:sts::811596193553:assumed-role/SecurityMonkey/cloudaux", "accountId": "811596193553", "accessKeyId": "ASIA97AFJX4A1GZJI08P", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2017-05-27T05:00:19Z"}, "sessionIssuer": {"type": "Role", "principalId": "AROAUB2AA5FQRGAHITW4A", "arn": "arn:aws:iam::811596193553:role/SecurityMonkey", "accountId": "811596193553", "userName": "SecurityMonkey"}}}, "requestParameters": {"bucketName": "level6-588e81908c84e62a6dd8202d535469dd.flaws.cloud", "acl": [""]}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "7f136121f-6b1f-4c68-ade1-4427f64604", "record_id": "flaws_cloudtrail:0000599:7f136121f-6b1f-4c68-ade1-4427f64604", "row_index": 599, "timestamp": "2017-05-27T05:00:28Z", "event_type": "GetBucketLifecycle", "event_source": "s3.amazonaws.com", "principal": {"type": "AssumedRole", "arn": "arn:aws:sts::811596193553:assumed-role/SecurityMonkey/cloudaux", "account_id": "811596193553", "principal_id": "AROAUB2AA5FQRGAHITW4A:cloudaux", "user_name": null, "access_key_id": "ASIA97AFJX4A1GZJI08P", "session_issuer_arn": "arn:aws:iam::811596193553:role/SecurityMonkey", "session_issuer_user_name": "SecurityMonkey"}, "network": {"source_ip": "255.253.125.115", "user_agent": "[Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56]", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1135, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "7f136121f-6b1f-4c68-ade1-4427f64604", "eventTime": "2017-05-27T05:00:28Z", "eventName": "GetBucketLifecycle", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.253.125.115", "userAgent": "[Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56]", "awsRegion": "us-west-2", "errorCode": "NoSuchLifecycleConfiguration", "errorMessage": "The lifecycle configuration does not exist", "userIdentity": {"type": "AssumedRole", "principalId": "AROAUB2AA5FQRGAHITW4A:cloudaux", "arn": "arn:aws:sts::811596193553:assumed-role/SecurityMonkey/cloudaux", "accountId": "811596193553", "accessKeyId": "ASIA97AFJX4A1GZJI08P", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2017-05-27T05:00:19Z"}, "sessionIssuer": {"type": "Role", "principalId": "AROAUB2AA5FQRGAHITW4A", "arn": "arn:aws:iam::811596193553:role/SecurityMonkey", "accountId": "811596193553", "userName": "SecurityMonkey"}}}, "requestParameters": {"lifecycle": [""], "bucketName": "level6-588e81908c84e62a6dd8202d535469dd.flaws.cloud"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "ffc653681-71a3-44d2-bb35-65b5f67946", "record_id": "flaws_cloudtrail:0000600:ffc653681-71a3-44d2-bb35-65b5f67946", "row_index": 600, "timestamp": "2017-05-27T05:00:28Z", "event_type": "GetBucketLogging", "event_source": "s3.amazonaws.com", "principal": {"type": "AssumedRole", "arn": "arn:aws:sts::811596193553:assumed-role/SecurityMonkey/cloudaux", "account_id": "811596193553", "principal_id": "AROAUB2AA5FQRGAHITW4A:cloudaux", "user_name": null, "access_key_id": "ASIA97AFJX4A1GZJI08P", "session_issuer_arn": "arn:aws:iam::811596193553:role/SecurityMonkey", "session_issuer_user_name": "SecurityMonkey"}, "network": {"source_ip": "255.253.125.115", "user_agent": "[Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56]", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1030, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "ffc653681-71a3-44d2-bb35-65b5f67946", "eventTime": "2017-05-27T05:00:28Z", "eventName": "GetBucketLogging", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.253.125.115", "userAgent": "[Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56]", "awsRegion": "us-west-2", "userIdentity": {"type": "AssumedRole", "principalId": "AROAUB2AA5FQRGAHITW4A:cloudaux", "arn": "arn:aws:sts::811596193553:assumed-role/SecurityMonkey/cloudaux", "accountId": "811596193553", "accessKeyId": "ASIA97AFJX4A1GZJI08P", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2017-05-27T05:00:19Z"}, "sessionIssuer": {"type": "Role", "principalId": "AROAUB2AA5FQRGAHITW4A", "arn": "arn:aws:iam::811596193553:role/SecurityMonkey", "accountId": "811596193553", "userName": "SecurityMonkey"}}}, "requestParameters": {"logging": [""], "bucketName": "level6-588e81908c84e62a6dd8202d535469dd.flaws.cloud"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "a41ddcef-3903-4b73-a53d-bbafdd773aa1", "record_id": "flaws_cloudtrail:0000601:a41ddcef-3903-4b73-a53d-bbafdd773aa1", "row_index": 601, "timestamp": "2017-05-27T05:00:28Z", "event_type": "GetBucketVersioning", "event_source": "s3.amazonaws.com", "principal": {"type": "AssumedRole", "arn": "arn:aws:sts::811596193553:assumed-role/SecurityMonkey/cloudaux", "account_id": "811596193553", "principal_id": "AROAUB2AA5FQRGAHITW4A:cloudaux", "user_name": null, "access_key_id": "ASIA97AFJX4A1GZJI08P", "session_issuer_arn": "arn:aws:iam::811596193553:role/SecurityMonkey", "session_issuer_user_name": "SecurityMonkey"}, "network": {"source_ip": "255.253.125.115", "user_agent": "[Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56]", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1037, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "a41ddcef-3903-4b73-a53d-bbafdd773aa1", "eventTime": "2017-05-27T05:00:28Z", "eventName": "GetBucketVersioning", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.253.125.115", "userAgent": "[Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56]", "awsRegion": "us-west-2", "userIdentity": {"type": "AssumedRole", "principalId": "AROAUB2AA5FQRGAHITW4A:cloudaux", "arn": "arn:aws:sts::811596193553:assumed-role/SecurityMonkey/cloudaux", "accountId": "811596193553", "accessKeyId": "ASIA97AFJX4A1GZJI08P", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2017-05-27T05:00:19Z"}, "sessionIssuer": {"type": "Role", "principalId": "AROAUB2AA5FQRGAHITW4A", "arn": "arn:aws:iam::811596193553:role/SecurityMonkey", "accountId": "811596193553", "userName": "SecurityMonkey"}}}, "requestParameters": {"bucketName": "level6-588e81908c84e62a6dd8202d535469dd.flaws.cloud", "versioning": [""]}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "7ec04349-589d-448b-83e4-e68b2797c759", "record_id": "flaws_cloudtrail:0000602:7ec04349-589d-448b-83e4-e68b2797c759", "row_index": 602, "timestamp": "2017-05-27T05:00:28Z", "event_type": "GetBucketNotification", "event_source": "s3.amazonaws.com", "principal": {"type": "AssumedRole", "arn": "arn:aws:sts::811596193553:assumed-role/SecurityMonkey/cloudaux", "account_id": "811596193553", "principal_id": "AROAUB2AA5FQRGAHITW4A:cloudaux", "user_name": null, "access_key_id": "ASIA97AFJX4A1GZJI08P", "session_issuer_arn": "arn:aws:iam::811596193553:role/SecurityMonkey", "session_issuer_user_name": "SecurityMonkey"}, "network": {"source_ip": "255.253.125.115", "user_agent": "[Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56]", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1038, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "7ec04349-589d-448b-83e4-e68b2797c759", "eventTime": "2017-05-27T05:00:28Z", "eventName": "GetBucketNotification", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.253.125.115", "userAgent": "[Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56]", "awsRegion": "us-west-2", "userIdentity": {"type": "AssumedRole", "principalId": "AROAUB2AA5FQRGAHITW4A:cloudaux", "arn": "arn:aws:sts::811596193553:assumed-role/SecurityMonkey/cloudaux", "accountId": "811596193553", "accessKeyId": "ASIA97AFJX4A1GZJI08P", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2017-05-27T05:00:19Z"}, "sessionIssuer": {"type": "Role", "principalId": "AROAUB2AA5FQRGAHITW4A", "arn": "arn:aws:iam::811596193553:role/SecurityMonkey", "accountId": "811596193553", "userName": "SecurityMonkey"}}}, "requestParameters": {"notification": [""], "bucketName": "level6-588e81908c84e62a6dd8202d535469dd.flaws.cloud"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "34ef2181-810a-45a7-9bac-09780c636368", "record_id": "flaws_cloudtrail:0000603:34ef2181-810a-45a7-9bac-09780c636368", "row_index": 603, "timestamp": "2017-05-27T05:00:28Z", "event_type": "GetBucketCors", "event_source": "s3.amazonaws.com", "principal": {"type": "AssumedRole", "arn": "arn:aws:sts::811596193553:assumed-role/SecurityMonkey/cloudaux", "account_id": "811596193553", "principal_id": "AROAUB2AA5FQRGAHITW4A:cloudaux", "user_name": null, "access_key_id": "ASIA97AFJX4A1GZJI08P", "session_issuer_arn": "arn:aws:iam::811596193553:role/SecurityMonkey", "session_issuer_user_name": "SecurityMonkey"}, "network": {"source_ip": "255.253.125.115", "user_agent": "[Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56]", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1117, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "34ef2181-810a-45a7-9bac-09780c636368", "eventTime": "2017-05-27T05:00:28Z", "eventName": "GetBucketCors", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.253.125.115", "userAgent": "[Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56]", "awsRegion": "us-west-2", "errorCode": "NoSuchCORSConfiguration", "errorMessage": "The CORS configuration does not exist", "userIdentity": {"type": "AssumedRole", "principalId": "AROAUB2AA5FQRGAHITW4A:cloudaux", "arn": "arn:aws:sts::811596193553:assumed-role/SecurityMonkey/cloudaux", "accountId": "811596193553", "accessKeyId": "ASIA97AFJX4A1GZJI08P", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2017-05-27T05:00:19Z"}, "sessionIssuer": {"type": "Role", "principalId": "AROAUB2AA5FQRGAHITW4A", "arn": "arn:aws:iam::811596193553:role/SecurityMonkey", "accountId": "811596193553", "userName": "SecurityMonkey"}}}, "requestParameters": {"bucketName": "level6-588e81908c84e62a6dd8202d535469dd.flaws.cloud", "cors": [""]}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "af6593b9-8a1d-4b45-b44a-92fb57d1f90d", "record_id": "flaws_cloudtrail:0000604:af6593b9-8a1d-4b45-b44a-92fb57d1f90d", "row_index": 604, "timestamp": "2017-05-27T05:00:28Z", "event_type": "GetBucketTagging", "event_source": "s3.amazonaws.com", "principal": {"type": "AssumedRole", "arn": "arn:aws:sts::811596193553:assumed-role/SecurityMonkey/cloudaux", "account_id": "811596193553", "principal_id": "AROAUB2AA5FQRGAHITW4A:cloudaux", "user_name": null, "access_key_id": "ASIA97AFJX4A1GZJI08P", "session_issuer_arn": "arn:aws:iam::811596193553:role/SecurityMonkey", "session_issuer_user_name": "SecurityMonkey"}, "network": {"source_ip": "255.253.125.115", "user_agent": "[Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56]", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1100, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "af6593b9-8a1d-4b45-b44a-92fb57d1f90d", "eventTime": "2017-05-27T05:00:28Z", "eventName": "GetBucketTagging", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.253.125.115", "userAgent": "[Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56]", "awsRegion": "us-west-2", "errorCode": "NoSuchTagSet", "errorMessage": "The TagSet does not exist", "userIdentity": {"type": "AssumedRole", "principalId": "AROAUB2AA5FQRGAHITW4A:cloudaux", "arn": "arn:aws:sts::811596193553:assumed-role/SecurityMonkey/cloudaux", "accountId": "811596193553", "accessKeyId": "ASIA97AFJX4A1GZJI08P", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2017-05-27T05:00:19Z"}, "sessionIssuer": {"type": "Role", "principalId": "AROAUB2AA5FQRGAHITW4A", "arn": "arn:aws:iam::811596193553:role/SecurityMonkey", "accountId": "811596193553", "userName": "SecurityMonkey"}}}, "requestParameters": {"tagging": [""], "bucketName": "level6-588e81908c84e62a6dd8202d535469dd.flaws.cloud"}, "resources": []}}