Task: attack_reconstruction (flaws_cloudtrail)
Prompt: An IAM credential appears to have been reused from an unfamiliar client, with a brief identity check followed by broad account discovery and a privileged change. Identify the responsible principal, the MITRE ATT&CK technique that best fits the activity, the supporting CloudTrail record_ids for each phase of the chain, and the impacted AWS assets. Return a JSON object matching the AttackReconstructionAnswer schema. Use principal.arn for primary_actor, the MITRE ATT&CK ID (e.g. T1530) for technique, and group the supporting CloudTrail record_ids by attack phase. List the AWS asset identifiers (bucket names, role/user names, trail names, ARNs) the attack acted on as impacted_assets.
Answer schema: attack_reconstruction_answer

CloudTrail records:
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "77ad9f76-d0e7-4a97-b0af-15c5afa70d8a", "record_id": "flaws_cloudtrail:0000000:77ad9f76-d0e7-4a97-b0af-15c5afa70d8a", "row_index": 0, "timestamp": "2019-07-18T15:30:06Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "220.81.220.103", "user_agent": "aws-cli/1.16.170 Python/3.7.4 Darwin/18.6.0 botocore/1.12.160", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1079, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "77ad9f76-d0e7-4a97-b0af-15c5afa70d8a", "eventTime": "2019-07-18T15:30:06Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "220.81.220.103", "userAgent": "aws-cli/1.16.170 Python/3.7.4 Darwin/18.6.0 botocore/1.12.160", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"nextToken": "eyJ2IjoiMiIsImMiOiJzWjkxbzBXdklraTVvNWRBbXdOMTFTc1VBYkxzT2xpSnBSSTA5SGlBU21HTExzdmp0WHRabjIySHh6Qjlsc3lRVWZ6emRHTktibytXMjFuYUQvNzA2aDZvbmpkVjgrOE0zZVNtQXUwajh5RTZmT295UzlvbjA2eFE5MVRJY2p0Q21nRmhLWC90RzBxV0tSMzBPTEJDNU5tNlpSVEVsMHVBMTVNdit3NFFvd2lCNkhYTXAvUUtkdmpvUjgyTzF1c1NSUzlob3pKeHc1Q2Vndz09IiwicyI6IjEifQ==", "maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "0d079c77-c779-483b-9460-3b8c043689ac3", "record_id": "flaws_cloudtrail:0000001:0d079c77-c779-483b-9460-3b8c043689ac3", "row_index": 1, "timestamp": "2019-07-18T15:30:08Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "220.81.220.103", "user_agent": "aws-cli/1.16.170 Python/3.7.4 Darwin/18.6.0 botocore/1.12.160", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1081, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "0d079c77-c779-483b-9460-3b8c043689ac3", "eventTime": "2019-07-18T15:30:08Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "220.81.220.103", "userAgent": "aws-cli/1.16.170 Python/3.7.4 Darwin/18.6.0 botocore/1.12.160", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"nextToken": "eyJ2IjoiMiIsImMiOiJXNXE0Z3FkODhpU0paemZpZGsvbmZPSlE1UmkrR0R6VVVMeWI3bm9FK1Q5TDJoZS9QMURLTkdPQXlhUGFVa2czd2tIeGN1bVJLK08vR0docWFlL2N4cXpYbUFQN3ZIWmlQQUNyK1lhWGtRY3lJRGdXdmdlWEljL3FUcTlEZ1JXV0VnMU1vN3dmV1NUZ09YVEFJclFqUDFGVHdIQ2dxblgxQXBWSlZLbUVCdmppeWRybzlWWENmcmlLSjdabTQ3S1JQK3RlcUpBRTFzZGZ4UT09IiwicyI6IjEifQ==", "maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "0d079c77-c779-483b-9460-3b8c043689ac3", "record_id": "flaws_cloudtrail:0000002:0d079c77-c779-483b-9460-3b8c043689ac3", "row_index": 2, "timestamp": "2019-07-18T15:30:08Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "220.81.220.103", "user_agent": "aws-cli/1.16.170 Python/3.7.4 Darwin/18.6.0 botocore/1.12.160", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1081, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "0d079c77-c779-483b-9460-3b8c043689ac3", "eventTime": "2019-07-18T15:30:08Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "220.81.220.103", "userAgent": "aws-cli/1.16.170 Python/3.7.4 Darwin/18.6.0 botocore/1.12.160", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"nextToken": "eyJ2IjoiMiIsImMiOiJXNXE0Z3FkODhpU0paemZpZGsvbmZPSlE1UmkrR0R6VVVMeWI3bm9FK1Q5TDJoZS9QMURLTkdPQXlhUGFVa2czd2tIeGN1bVJLK08vR0docWFlL2N4cXpYbUFQN3ZIWmlQQUNyK1lhWGtRY3lJRGdXdmdlWEljL3FUcTlEZ1JXV0VnMU1vN3dmV1NUZ09YVEFJclFqUDFGVHdIQ2dxblgxQXBWSlZLbUVCdmppeWRybzlWWENmcmlLSjdabTQ3S1JQK3RlcUpBRTFzZGZ4UT09IiwicyI6IjEifQ==", "maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "305b0ec5-8b73-4dc0-89b5-90c28c2d120d", "record_id": "flaws_cloudtrail:0000003:305b0ec5-8b73-4dc0-89b5-90c28c2d120d", "row_index": 3, "timestamp": "2019-07-18T15:30:10Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "220.81.220.103", "user_agent": "aws-cli/1.16.170 Python/3.7.4 Darwin/18.6.0 botocore/1.12.160", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1072, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "305b0ec5-8b73-4dc0-89b5-90c28c2d120d", "eventTime": "2019-07-18T15:30:10Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "220.81.220.103", "userAgent": "aws-cli/1.16.170 Python/3.7.4 Darwin/18.6.0 botocore/1.12.160", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"nextToken": "eyJ2IjoiMiIsImMiOiJ1Y1pmaWhBTFpIQXFoU0VzZldLb3ZLaS8rODFuTkpPTGkvcFowd1ZtK0h5NGl4VDJlbG5jbTZ5V3hUNWRmOUtiTlVJeGRwNjJibHk2cEZWck82Sm5KNlVFR0J4UndUM3dNMFZCMzhsTmZHVWcrcHNJR2ZSVEZGT0Y5Q29SUDdrRkVORHNTQlVpYk9jTkE3b1hzSjF2Tk1jaWRJcHpFK1RBU3BBZjZuVmNWcE1kZ29jdkNJUFpVYjY2eXNkak9lb0JiTE02a1ZNT2NWOD0iLCJzIjoiMSJ9", "maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "305b0ec5-8b73-4dc0-89b5-90c28c2d120d", "record_id": "flaws_cloudtrail:0000004:305b0ec5-8b73-4dc0-89b5-90c28c2d120d", "row_index": 4, "timestamp": "2019-07-18T15:30:10Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "220.81.220.103", "user_agent": "aws-cli/1.16.170 Python/3.7.4 Darwin/18.6.0 botocore/1.12.160", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1072, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "305b0ec5-8b73-4dc0-89b5-90c28c2d120d", "eventTime": "2019-07-18T15:30:10Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "220.81.220.103", "userAgent": "aws-cli/1.16.170 Python/3.7.4 Darwin/18.6.0 botocore/1.12.160", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"nextToken": "eyJ2IjoiMiIsImMiOiJ1Y1pmaWhBTFpIQXFoU0VzZldLb3ZLaS8rODFuTkpPTGkvcFowd1ZtK0h5NGl4VDJlbG5jbTZ5V3hUNWRmOUtiTlVJeGRwNjJibHk2cEZWck82Sm5KNlVFR0J4UndUM3dNMFZCMzhsTmZHVWcrcHNJR2ZSVEZGT0Y5Q29SUDdrRkVORHNTQlVpYk9jTkE3b1hzSjF2Tk1jaWRJcHpFK1RBU3BBZjZuVmNWcE1kZ29jdkNJUFpVYjY2eXNkak9lb0JiTE02a1ZNT2NWOD0iLCJzIjoiMSJ9", "maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "2208ee8c-5689-4fce-b7e6-73ffb17215f", "record_id": "flaws_cloudtrail:0000005:2208ee8c-5689-4fce-b7e6-73ffb17215f", "row_index": 5, "timestamp": "2019-07-18T15:30:12Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "220.81.220.103", "user_agent": "aws-cli/1.16.170 Python/3.7.4 Darwin/18.6.0 botocore/1.12.160", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1079, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "2208ee8c-5689-4fce-b7e6-73ffb17215f", "eventTime": "2019-07-18T15:30:12Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "220.81.220.103", "userAgent": "aws-cli/1.16.170 Python/3.7.4 Darwin/18.6.0 botocore/1.12.160", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"nextToken": "eyJ2IjoiMiIsImMiOiJpajBha2RVVGRQVEtzN1JvOUl5WFhUQzY5ZWRpTjJiTVNvMm8rQk5wSENUcWdUTm5xSTRPU3EyT1lpdGhvazNlVklXOG85Z2U5d0NnL0Ric2huVVlUUTI2aU56NWkwUXJtSGpTVUI2WHh0L1M3cTJJQ1EzS3V2dlZjOWJ5cjhGR2tJR09SYS95dE1hTFZxZG1qb29YTWJwNlZweU5FWmFjdjY3VU1uRytHRUhHZWdRWEw4UkxSUGRTazZYSzZMTmgyWVVZaCs5ZmJLY3FHUT09IiwicyI6IjEifQ==", "maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "2208ee8c-5689-4fce-b7e6-73ffb17215f", "record_id": "flaws_cloudtrail:0000006:2208ee8c-5689-4fce-b7e6-73ffb17215f", "row_index": 6, "timestamp": "2019-07-18T15:30:12Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "220.81.220.103", "user_agent": "aws-cli/1.16.170 Python/3.7.4 Darwin/18.6.0 botocore/1.12.160", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1079, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "2208ee8c-5689-4fce-b7e6-73ffb17215f", "eventTime": "2019-07-18T15:30:12Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "220.81.220.103", "userAgent": "aws-cli/1.16.170 Python/3.7.4 Darwin/18.6.0 botocore/1.12.160", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"nextToken": "eyJ2IjoiMiIsImMiOiJpajBha2RVVGRQVEtzN1JvOUl5WFhUQzY5ZWRpTjJiTVNvMm8rQk5wSENUcWdUTm5xSTRPU3EyT1lpdGhvazNlVklXOG85Z2U5d0NnL0Ric2huVVlUUTI2aU56NWkwUXJtSGpTVUI2WHh0L1M3cTJJQ1EzS3V2dlZjOWJ5cjhGR2tJR09SYS95dE1hTFZxZG1qb29YTWJwNlZweU5FWmFjdjY3VU1uRytHRUhHZWdRWEw4UkxSUGRTazZYSzZMTmgyWVVZaCs5ZmJLY3FHUT09IiwicyI6IjEifQ==", "maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "e2bcf8f5-3196-41d4-8743-f00cbfb23065", "record_id": "flaws_cloudtrail:0000007:e2bcf8f5-3196-41d4-8743-f00cbfb23065", "row_index": 7, "timestamp": "2019-07-18T15:30:13Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "220.81.220.103", "user_agent": "aws-cli/1.16.170 Python/3.7.4 Darwin/18.6.0 botocore/1.12.160", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1072, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "e2bcf8f5-3196-41d4-8743-f00cbfb23065", "eventTime": "2019-07-18T15:30:13Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "220.81.220.103", "userAgent": "aws-cli/1.16.170 Python/3.7.4 Darwin/18.6.0 botocore/1.12.160", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"nextToken": "eyJ2IjoiMiIsImMiOiJUeDhDWnlzMU9tU1BKbGx6ZG5YOFNuaXBxSDdCaXJpcUJCSXY0Vi9iY3dEZURrZThFQlM0aHlnTGhKYlU4dllUaXI4NSt3aCsxTWRFTmduQmtlMnpaTlhaenlQQys5WG41akZLaFhkTEJkdi9NdlZlVjJXSzVMdUlEcGp0ZWQxRjdKOEpKTGpOeHNjQ09EcDFYbXFMUXgyMGZGQjVQeWVJNDl6K2xUNmVkWkVGbXduWDJIQVpnbzlyNUhjLzhmN3h3VXZVeFVSTHd3PT0iLCJzIjoiMSJ9", "maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "e2bcf8f5-3196-41d4-8743-f00cbfb23065", "record_id": "flaws_cloudtrail:0000008:e2bcf8f5-3196-41d4-8743-f00cbfb23065", "row_index": 8, "timestamp": "2019-07-18T15:30:13Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "220.81.220.103", "user_agent": "aws-cli/1.16.170 Python/3.7.4 Darwin/18.6.0 botocore/1.12.160", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1072, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "e2bcf8f5-3196-41d4-8743-f00cbfb23065", "eventTime": "2019-07-18T15:30:13Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "220.81.220.103", "userAgent": "aws-cli/1.16.170 Python/3.7.4 Darwin/18.6.0 botocore/1.12.160", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"nextToken": "eyJ2IjoiMiIsImMiOiJUeDhDWnlzMU9tU1BKbGx6ZG5YOFNuaXBxSDdCaXJpcUJCSXY0Vi9iY3dEZURrZThFQlM0aHlnTGhKYlU4dllUaXI4NSt3aCsxTWRFTmduQmtlMnpaTlhaenlQQys5WG41akZLaFhkTEJkdi9NdlZlVjJXSzVMdUlEcGp0ZWQxRjdKOEpKTGpOeHNjQ09EcDFYbXFMUXgyMGZGQjVQeWVJNDl6K2xUNmVkWkVGbXduWDJIQVpnbzlyNUhjLzhmN3h3VXZVeFVSTHd3PT0iLCJzIjoiMSJ9", "maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "2586d582-6708-4152-ac92-87254d3ae4e0", "record_id": "flaws_cloudtrail:0000009:2586d582-6708-4152-ac92-87254d3ae4e0", "row_index": 9, "timestamp": "2019-07-18T15:30:15Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "220.81.220.103", "user_agent": "aws-cli/1.16.170 Python/3.7.4 Darwin/18.6.0 botocore/1.12.160", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1080, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "2586d582-6708-4152-ac92-87254d3ae4e0", "eventTime": "2019-07-18T15:30:15Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "220.81.220.103", "userAgent": "aws-cli/1.16.170 Python/3.7.4 Darwin/18.6.0 botocore/1.12.160", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"nextToken": "eyJ2IjoiMiIsImMiOiJaMitlMUhiVHJBbGVGU0NiQnU5QWJWdjEwYVBkVW0xalVMQVpOazA1L09xeVZ1U0V2eC9DeUVTMFNLSDZFTCtML0ZUek1LTWx1Tnc5Nm9Uc0lOVW5UNFk0TDA2UEdROHh0N2lkamtGcGxlTHdBQnI4S2lrdTJUUTdlMkNVL2RBcTlsanNVd25BcFExSk5CSUpXSzljZExOZFFUci9JcC80aGFpY3ZjRVBKbXBQVDRnQUZYdGNSaldsTUxjOCtITUtzcjMrQytTdERaOTdUQT09IiwicyI6IjEifQ==", "maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "2586d582-6708-4152-ac92-87254d3ae4e0", "record_id": "flaws_cloudtrail:0000010:2586d582-6708-4152-ac92-87254d3ae4e0", "row_index": 10, "timestamp": "2019-07-18T15:30:15Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "220.81.220.103", "user_agent": "aws-cli/1.16.170 Python/3.7.4 Darwin/18.6.0 botocore/1.12.160", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1080, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "2586d582-6708-4152-ac92-87254d3ae4e0", "eventTime": "2019-07-18T15:30:15Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "220.81.220.103", "userAgent": "aws-cli/1.16.170 Python/3.7.4 Darwin/18.6.0 botocore/1.12.160", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"nextToken": "eyJ2IjoiMiIsImMiOiJaMitlMUhiVHJBbGVGU0NiQnU5QWJWdjEwYVBkVW0xalVMQVpOazA1L09xeVZ1U0V2eC9DeUVTMFNLSDZFTCtML0ZUek1LTWx1Tnc5Nm9Uc0lOVW5UNFk0TDA2UEdROHh0N2lkamtGcGxlTHdBQnI4S2lrdTJUUTdlMkNVL2RBcTlsanNVd25BcFExSk5CSUpXSzljZExOZFFUci9JcC80aGFpY3ZjRVBKbXBQVDRnQUZYdGNSaldsTUxjOCtITUtzcjMrQytTdERaOTdUQT09IiwicyI6IjEifQ==", "maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "64e19ee0-5d39-48d9-96ad-734fc2a7361e", "record_id": "flaws_cloudtrail:0000011:64e19ee0-5d39-48d9-96ad-734fc2a7361e", "row_index": 11, "timestamp": "2019-07-18T15:30:17Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "220.81.220.103", "user_agent": "aws-cli/1.16.170 Python/3.7.4 Darwin/18.6.0 botocore/1.12.160", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1080, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "64e19ee0-5d39-48d9-96ad-734fc2a7361e", "eventTime": "2019-07-18T15:30:17Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "220.81.220.103", "userAgent": "aws-cli/1.16.170 Python/3.7.4 Darwin/18.6.0 botocore/1.12.160", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"nextToken": "eyJ2IjoiMiIsImMiOiJWYk5LUWZkOEJOSkhibGMyNmFJS3JPdm14c290VENhQjBhdzNEbmhKN1FDaU1Ic0N1Q2pURFpkSHlEOERidjB0L2c4ZEtQU1duTC9EUnhCRjhISS9DL0cyZGIxMTNtUGM1WmM1blN4cmlmQ0duOWYrNnJlRGR2U2RUOGUwT2c5dmVtZ0ZKUFdORUl4SkUvVEg4czI2eGhGMXpHdmFLU2FrMm5DaWZIR3cxWHFYcjJNbDFoSnpYYjQwQVNwR3FFT042Y21sQjhzbUFTdmhYUT09IiwicyI6IjEifQ==", "maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "64e19ee0-5d39-48d9-96ad-734fc2a7361e", "record_id": "flaws_cloudtrail:0000012:64e19ee0-5d39-48d9-96ad-734fc2a7361e", "row_index": 12, "timestamp": "2019-07-18T15:30:17Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "220.81.220.103", "user_agent": "aws-cli/1.16.170 Python/3.7.4 Darwin/18.6.0 botocore/1.12.160", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1080, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "64e19ee0-5d39-48d9-96ad-734fc2a7361e", "eventTime": "2019-07-18T15:30:17Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "220.81.220.103", "userAgent": "aws-cli/1.16.170 Python/3.7.4 Darwin/18.6.0 botocore/1.12.160", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"nextToken": "eyJ2IjoiMiIsImMiOiJWYk5LUWZkOEJOSkhibGMyNmFJS3JPdm14c290VENhQjBhdzNEbmhKN1FDaU1Ic0N1Q2pURFpkSHlEOERidjB0L2c4ZEtQU1duTC9EUnhCRjhISS9DL0cyZGIxMTNtUGM1WmM1blN4cmlmQ0duOWYrNnJlRGR2U2RUOGUwT2c5dmVtZ0ZKUFdORUl4SkUvVEg4czI2eGhGMXpHdmFLU2FrMm5DaWZIR3cxWHFYcjJNbDFoSnpYYjQwQVNwR3FFT042Y21sQjhzbUFTdmhYUT09IiwicyI6IjEifQ==", "maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "bf78b0c4-6f79-4bd4-93c1-f54b90c3c86b", "record_id": "flaws_cloudtrail:0000013:bf78b0c4-6f79-4bd4-93c1-f54b90c3c86b", "row_index": 13, "timestamp": "2019-07-18T15:30:19Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "220.81.220.103", "user_agent": "aws-cli/1.16.170 Python/3.7.4 Darwin/18.6.0 botocore/1.12.160", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1080, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "bf78b0c4-6f79-4bd4-93c1-f54b90c3c86b", "eventTime": "2019-07-18T15:30:19Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "220.81.220.103", "userAgent": "aws-cli/1.16.170 Python/3.7.4 Darwin/18.6.0 botocore/1.12.160", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"nextToken": "eyJ2IjoiMiIsImMiOiJGalNQSDRuVFZVOCt5czNvLzRER1cvVFVvMC9PY09WRE1NdHhoZzFqMmxOSlFXeGx2VS9QL3FKK1RqRXNOd1NXZUkxSkdPZ3dyb0FxOXFqbjAveGlzOTNVWlZaNFFmT29pMzlhSFZaVGJCNUY4RStHWG5oVmlhZEJIUFRhTWFsOFc1b3BJVlkrTFVJN3lZOHlQT3o2NWVHc2puU25CZ1p2NlgzVzNpdjM0QXZqYk5SdllLK0xUWkVlZklkVk1jMXpBQzdBdmY2OEFPbzl5Zz09IiwicyI6IjEifQ==", "maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "bf78b0c4-6f79-4bd4-93c1-f54b90c3c86b", "record_id": "flaws_cloudtrail:0000014:bf78b0c4-6f79-4bd4-93c1-f54b90c3c86b", "row_index": 14, "timestamp": "2019-07-18T15:30:19Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "220.81.220.103", "user_agent": "aws-cli/1.16.170 Python/3.7.4 Darwin/18.6.0 botocore/1.12.160", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1080, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "bf78b0c4-6f79-4bd4-93c1-f54b90c3c86b", "eventTime": "2019-07-18T15:30:19Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "220.81.220.103", "userAgent": "aws-cli/1.16.170 Python/3.7.4 Darwin/18.6.0 botocore/1.12.160", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"nextToken": "eyJ2IjoiMiIsImMiOiJGalNQSDRuVFZVOCt5czNvLzRER1cvVFVvMC9PY09WRE1NdHhoZzFqMmxOSlFXeGx2VS9QL3FKK1RqRXNOd1NXZUkxSkdPZ3dyb0FxOXFqbjAveGlzOTNVWlZaNFFmT29pMzlhSFZaVGJCNUY4RStHWG5oVmlhZEJIUFRhTWFsOFc1b3BJVlkrTFVJN3lZOHlQT3o2NWVHc2puU25CZ1p2NlgzVzNpdjM0QXZqYk5SdllLK0xUWkVlZklkVk1jMXpBQzdBdmY2OEFPbzl5Zz09IiwicyI6IjEifQ==", "maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "9a288ca8-f4fe-4317-890a-414bd41a3c7c", "record_id": "flaws_cloudtrail:0000015:9a288ca8-f4fe-4317-890a-414bd41a3c7c", "row_index": 15, "timestamp": "2019-07-18T15:30:20Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "220.81.220.103", "user_agent": "aws-cli/1.16.170 Python/3.7.4 Darwin/18.6.0 botocore/1.12.160", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1078, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "9a288ca8-f4fe-4317-890a-414bd41a3c7c", "eventTime": "2019-07-18T15:30:20Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "220.81.220.103", "userAgent": "aws-cli/1.16.170 Python/3.7.4 Darwin/18.6.0 botocore/1.12.160", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"nextToken": "eyJ2IjoiMiIsImMiOiJ2czQ2ZmFDbEtxZTUxa01HbDVDOHFNSjVUOFRLa1N2cUJRVDdEZFZPVGZ5UWlvTjA0QjRBcXZXcXAwaTh3MWdtWHBHVjlPSnY4R21ucFpMQjdBMjNIOWpQK2toYy9YbHlORTF6L2ZCZDBodEtVck1EVzZqOXFic044UVUwTERrRGFjaUhyY3NWNlpjWE9FcGZFR1pZT05qS0ZQaVYyNG5VYXM2OWFTVm5NcGFyaG1UMm1PemlnWWlmY1NkRGd2Nysxb0paYUZ3QWNGVVg1QT09IiwicyI6IjEifQ==", "maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "9a288ca8-f4fe-4317-890a-414bd41a3c7c", "record_id": "flaws_cloudtrail:0000016:9a288ca8-f4fe-4317-890a-414bd41a3c7c", "row_index": 16, "timestamp": "2019-07-18T15:30:20Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "220.81.220.103", "user_agent": "aws-cli/1.16.170 Python/3.7.4 Darwin/18.6.0 botocore/1.12.160", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1078, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "9a288ca8-f4fe-4317-890a-414bd41a3c7c", "eventTime": "2019-07-18T15:30:20Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "220.81.220.103", "userAgent": "aws-cli/1.16.170 Python/3.7.4 Darwin/18.6.0 botocore/1.12.160", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"nextToken": "eyJ2IjoiMiIsImMiOiJ2czQ2ZmFDbEtxZTUxa01HbDVDOHFNSjVUOFRLa1N2cUJRVDdEZFZPVGZ5UWlvTjA0QjRBcXZXcXAwaTh3MWdtWHBHVjlPSnY4R21ucFpMQjdBMjNIOWpQK2toYy9YbHlORTF6L2ZCZDBodEtVck1EVzZqOXFic044UVUwTERrRGFjaUhyY3NWNlpjWE9FcGZFR1pZT05qS0ZQaVYyNG5VYXM2OWFTVm5NcGFyaG1UMm1PemlnWWlmY1NkRGd2Nysxb0paYUZ3QWNGVVg1QT09IiwicyI6IjEifQ==", "maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "2d3567a7-1e41-45e1-82f8-c7e0ea36ef6f", "record_id": "flaws_cloudtrail:0000017:2d3567a7-1e41-45e1-82f8-c7e0ea36ef6f", "row_index": 17, "timestamp": "2019-07-18T15:30:22Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "220.81.220.103", "user_agent": "aws-cli/1.16.170 Python/3.7.4 Darwin/18.6.0 botocore/1.12.160", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1100, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "2d3567a7-1e41-45e1-82f8-c7e0ea36ef6f", "eventTime": "2019-07-18T15:30:22Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "220.81.220.103", "userAgent": "aws-cli/1.16.170 Python/3.7.4 Darwin/18.6.0 botocore/1.12.160", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"nextToken": "eyJ2IjoiMiIsImMiOiJzSjl3N3BLNzZET1RUUVh3M2RjSHpQVm9KS2ZjRG93TFU3bk44YmROVTBiTEk4akw1cVNpVDNCTU5aM2NjTHRrTm9uUDJic0FZeDI0M29GdDQrejVTN0NJSVJNcGoyakR5ZkdpUWthdlpjRUlrU09EMDFDdTMzYkhkMlpoMCs0SmJLeTMyTDgvc0NaZ3RVQTV2K0hmVmxXQW16aUFaNDJXNUVjdWZiSVFiYlhPOFBkbjNKck9qUXhiODh3RGNxVnVpaDg0bGtPUWUyQ01kVHg0QUZXemFYbEw1blR5N05nPSIsInMiOiIxIn0=", "maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "2d3567a7-1e41-45e1-82f8-c7e0ea36ef6f", "record_id": "flaws_cloudtrail:0000018:2d3567a7-1e41-45e1-82f8-c7e0ea36ef6f", "row_index": 18, "timestamp": "2019-07-18T15:30:22Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "220.81.220.103", "user_agent": "aws-cli/1.16.170 Python/3.7.4 Darwin/18.6.0 botocore/1.12.160", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1100, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "2d3567a7-1e41-45e1-82f8-c7e0ea36ef6f", "eventTime": "2019-07-18T15:30:22Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "220.81.220.103", "userAgent": "aws-cli/1.16.170 Python/3.7.4 Darwin/18.6.0 botocore/1.12.160", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"nextToken": "eyJ2IjoiMiIsImMiOiJzSjl3N3BLNzZET1RUUVh3M2RjSHpQVm9KS2ZjRG93TFU3bk44YmROVTBiTEk4akw1cVNpVDNCTU5aM2NjTHRrTm9uUDJic0FZeDI0M29GdDQrejVTN0NJSVJNcGoyakR5ZkdpUWthdlpjRUlrU09EMDFDdTMzYkhkMlpoMCs0SmJLeTMyTDgvc0NaZ3RVQTV2K0hmVmxXQW16aUFaNDJXNUVjdWZiSVFiYlhPOFBkbjNKck9qUXhiODh3RGNxVnVpaDg0bGtPUWUyQ01kVHg0QUZXemFYbEw1blR5N05nPSIsInMiOiIxIn0=", "maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "db08fa34-d7d9-4366-8f6b-bc97835fad77", "record_id": "flaws_cloudtrail:0000019:db08fa34-d7d9-4366-8f6b-bc97835fad77", "row_index": 19, "timestamp": "2019-07-18T15:30:23Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "220.81.220.103", "user_agent": "aws-cli/1.16.170 Python/3.7.4 Darwin/18.6.0 botocore/1.12.160", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1088, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "db08fa34-d7d9-4366-8f6b-bc97835fad77", "eventTime": "2019-07-18T15:30:23Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "220.81.220.103", "userAgent": "aws-cli/1.16.170 Python/3.7.4 Darwin/18.6.0 botocore/1.12.160", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"nextToken": "eyJ2IjoiMiIsImMiOiI1YjIyeGZhd1VjM0dsSldqakNMY1QvMzJRSis4M2xrL2kwdlc2QzB6WU1xS2ZrcjlSZE8xc0NNTGZDVmc2dHlYOHV0dzdxL1U5UW9FYjgyRWUyV011emlBV3B6aGJYQy9sT0k5WDdueU1uNjByeHJFYTI4dTVPelhHUVpzTUJJVDM4UU5hdEtjR3NwQU1iUVZSMXdCR0lSa0Qra25HQ0l3bFM0RDFmVUJKZENEVlZOY3pPSDcrbzdFT1AxK3UwWGwzaVBOTFdaM0gxZ2dyNEMzMk1pdG93PT0iLCJzIjoiMSJ9", "maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "db08fa34-d7d9-4366-8f6b-bc97835fad77", "record_id": "flaws_cloudtrail:0000020:db08fa34-d7d9-4366-8f6b-bc97835fad77", "row_index": 20, "timestamp": "2019-07-18T15:30:23Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "220.81.220.103", "user_agent": "aws-cli/1.16.170 Python/3.7.4 Darwin/18.6.0 botocore/1.12.160", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1088, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "db08fa34-d7d9-4366-8f6b-bc97835fad77", "eventTime": "2019-07-18T15:30:23Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "220.81.220.103", "userAgent": "aws-cli/1.16.170 Python/3.7.4 Darwin/18.6.0 botocore/1.12.160", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"nextToken": "eyJ2IjoiMiIsImMiOiI1YjIyeGZhd1VjM0dsSldqakNMY1QvMzJRSis4M2xrL2kwdlc2QzB6WU1xS2ZrcjlSZE8xc0NNTGZDVmc2dHlYOHV0dzdxL1U5UW9FYjgyRWUyV011emlBV3B6aGJYQy9sT0k5WDdueU1uNjByeHJFYTI4dTVPelhHUVpzTUJJVDM4UU5hdEtjR3NwQU1iUVZSMXdCR0lSa0Qra25HQ0l3bFM0RDFmVUJKZENEVlZOY3pPSDcrbzdFT1AxK3UwWGwzaVBOTFdaM0gxZ2dyNEMzMk1pdG93PT0iLCJzIjoiMSJ9", "maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "aabcea4e-57ff-4036-a7c8-7f855e18439", "record_id": "flaws_cloudtrail:0000021:aabcea4e-57ff-4036-a7c8-7f855e18439", "row_index": 21, "timestamp": "2019-07-18T15:30:24Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "220.81.220.103", "user_agent": "aws-cli/1.16.170 Python/3.7.4 Darwin/18.6.0 botocore/1.12.160", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1100, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "aabcea4e-57ff-4036-a7c8-7f855e18439", "eventTime": "2019-07-18T15:30:24Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "220.81.220.103", "userAgent": "aws-cli/1.16.170 Python/3.7.4 Darwin/18.6.0 botocore/1.12.160", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"nextToken": "eyJ2IjoiMiIsImMiOiJTU3laaHFXS1hHVTRETjZFd0NJaXpBTUtZTXVHc1hKbk1IeHVic0JEVFVOMXhlajkxdTZOVkhmc095WnlVTFlUZlpSMWNBekNpRWJFZUgxdU1NblZyZ0U5VXN0WmlleTZGcWVmQWo0dkh2RkhycVRuU0NVVm93TjlyTlRBdi9vWlQxa0tLU2VyNFdVajRxWVNSVUNFbjVEM0xsTU1GMEthZUlOMkkzdk8xSXV5dy9KK0UvbTRLUk1PVnRuY0tHWloxM3lhUER3TXVkVFFuMkVaTFl5Z1dOMjY3b091RWVRPSIsInMiOiIxIn0=", "maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "aabcea4e-57ff-4036-a7c8-7f855e18439", "record_id": "flaws_cloudtrail:0000022:aabcea4e-57ff-4036-a7c8-7f855e18439", "row_index": 22, "timestamp": "2019-07-18T15:30:24Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "220.81.220.103", "user_agent": "aws-cli/1.16.170 Python/3.7.4 Darwin/18.6.0 botocore/1.12.160", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1100, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "aabcea4e-57ff-4036-a7c8-7f855e18439", "eventTime": "2019-07-18T15:30:24Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "220.81.220.103", "userAgent": "aws-cli/1.16.170 Python/3.7.4 Darwin/18.6.0 botocore/1.12.160", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"nextToken": "eyJ2IjoiMiIsImMiOiJTU3laaHFXS1hHVTRETjZFd0NJaXpBTUtZTXVHc1hKbk1IeHVic0JEVFVOMXhlajkxdTZOVkhmc095WnlVTFlUZlpSMWNBekNpRWJFZUgxdU1NblZyZ0U5VXN0WmlleTZGcWVmQWo0dkh2RkhycVRuU0NVVm93TjlyTlRBdi9vWlQxa0tLU2VyNFdVajRxWVNSVUNFbjVEM0xsTU1GMEthZUlOMkkzdk8xSXV5dy9KK0UvbTRLUk1PVnRuY0tHWloxM3lhUER3TXVkVFFuMkVaTFl5Z1dOMjY3b091RWVRPSIsInMiOiIxIn0=", "maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "befeac31-eff9-436d-8729-3c053701b185", "record_id": "flaws_cloudtrail:0000023:befeac31-eff9-436d-8729-3c053701b185", "row_index": 23, "timestamp": "2019-07-18T15:30:25Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "220.81.220.103", "user_agent": "aws-cli/1.16.170 Python/3.7.4 Darwin/18.6.0 botocore/1.12.160", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1056, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "befeac31-eff9-436d-8729-3c053701b185", "eventTime": "2019-07-18T15:30:25Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "220.81.220.103", "userAgent": "aws-cli/1.16.170 Python/3.7.4 Darwin/18.6.0 botocore/1.12.160", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"nextToken": "eyJ2IjoiMiIsImMiOiJVOWd2ayt1aVZIa3EzaG1RZWcrTGpVOFlPSG5TUkxZSG5mM0JsenhQQnNIeDBoRE0wTGFBVnhwM2pSVnU2YitEcnpPc2lDdDVLMFpzeDZPTUdQVGNiYnJNdnQ2S1EzYk92aThZTEJrUXdRQ0dKbTBHNi8yS0ZLdUh5QTQ1ZjRVajE0eXJHL25EWmYvRkRXZE54SWh0VllBR1d3YVlTVEJqL05lNERXa29odGFaWWFBRWJ1RmNBaVUzbDM2VkltTT0iLCJzIjoiMSJ9", "maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "befeac31-eff9-436d-8729-3c053701b185", "record_id": "flaws_cloudtrail:0000024:befeac31-eff9-436d-8729-3c053701b185", "row_index": 24, "timestamp": "2019-07-18T15:30:25Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "220.81.220.103", "user_agent": "aws-cli/1.16.170 Python/3.7.4 Darwin/18.6.0 botocore/1.12.160", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1056, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "befeac31-eff9-436d-8729-3c053701b185", "eventTime": "2019-07-18T15:30:25Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "220.81.220.103", "userAgent": "aws-cli/1.16.170 Python/3.7.4 Darwin/18.6.0 botocore/1.12.160", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"nextToken": "eyJ2IjoiMiIsImMiOiJVOWd2ayt1aVZIa3EzaG1RZWcrTGpVOFlPSG5TUkxZSG5mM0JsenhQQnNIeDBoRE0wTGFBVnhwM2pSVnU2YitEcnpPc2lDdDVLMFpzeDZPTUdQVGNiYnJNdnQ2S1EzYk92aThZTEJrUXdRQ0dKbTBHNi8yS0ZLdUh5QTQ1ZjRVajE0eXJHL25EWmYvRkRXZE54SWh0VllBR1d3YVlTVEJqL05lNERXa29odGFaWWFBRWJ1RmNBaVUzbDM2VkltTT0iLCJzIjoiMSJ9", "maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "f8c2e6fc-ab31-4431-831a-932e5ba8fafa", "record_id": "flaws_cloudtrail:0000025:f8c2e6fc-ab31-4431-831a-932e5ba8fafa", "row_index": 25, "timestamp": "2019-07-18T15:30:26Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "220.81.220.103", "user_agent": "aws-cli/1.16.170 Python/3.7.4 Darwin/18.6.0 botocore/1.12.160", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1098, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "f8c2e6fc-ab31-4431-831a-932e5ba8fafa", "eventTime": "2019-07-18T15:30:26Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "220.81.220.103", "userAgent": "aws-cli/1.16.170 Python/3.7.4 Darwin/18.6.0 botocore/1.12.160", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"nextToken": "eyJ2IjoiMiIsImMiOiJLN3dWR3YyQlVvTzN5Vjc3cVpJeUJWb2tqYUFHQTgrMDY3cHphWU5jc2hlQ2dLdW8zMWJKbVFjOWZBSmh0Tys5b2Z5U3NyMHJ1Wkw3UndKYkRrWWhpV1hDaXdrcjdFWGF3YUtNUFA0NlVsMjdWTjZBTTg2VTIxNDhUaDl5ZlIwdkowcnZsUmM0NXE4a1dkbmFsRXdRdUhwTEh5MG55N2NseGFlbWtPZWtDVTNLVzVnTGltWmM4TFdtL2FBNUVkUFl5K1BjTDM0bGd5bzBrZUVOcXFMR2hzK0MyNGNpeXBRPSIsInMiOiIxIn0=", "maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "f8c2e6fc-ab31-4431-831a-932e5ba8fafa", "record_id": "flaws_cloudtrail:0000026:f8c2e6fc-ab31-4431-831a-932e5ba8fafa", "row_index": 26, "timestamp": "2019-07-18T15:30:26Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "220.81.220.103", "user_agent": "aws-cli/1.16.170 Python/3.7.4 Darwin/18.6.0 botocore/1.12.160", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1098, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "f8c2e6fc-ab31-4431-831a-932e5ba8fafa", "eventTime": "2019-07-18T15:30:26Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "220.81.220.103", "userAgent": "aws-cli/1.16.170 Python/3.7.4 Darwin/18.6.0 botocore/1.12.160", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"nextToken": "eyJ2IjoiMiIsImMiOiJLN3dWR3YyQlVvTzN5Vjc3cVpJeUJWb2tqYUFHQTgrMDY3cHphWU5jc2hlQ2dLdW8zMWJKbVFjOWZBSmh0Tys5b2Z5U3NyMHJ1Wkw3UndKYkRrWWhpV1hDaXdrcjdFWGF3YUtNUFA0NlVsMjdWTjZBTTg2VTIxNDhUaDl5ZlIwdkowcnZsUmM0NXE4a1dkbmFsRXdRdUhwTEh5MG55N2NseGFlbWtPZWtDVTNLVzVnTGltWmM4TFdtL2FBNUVkUFl5K1BjTDM0bGd5bzBrZUVOcXFMR2hzK0MyNGNpeXBRPSIsInMiOiIxIn0=", "maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "c3eabbb2-9c8b-490e-9411-e7da2256a74a", "record_id": "flaws_cloudtrail:0000027:c3eabbb2-9c8b-490e-9411-e7da2256a74a", "row_index": 27, "timestamp": "2019-07-18T15:30:28Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "220.81.220.103", "user_agent": "aws-cli/1.16.170 Python/3.7.4 Darwin/18.6.0 botocore/1.12.160", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1085, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "c3eabbb2-9c8b-490e-9411-e7da2256a74a", "eventTime": "2019-07-18T15:30:28Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "220.81.220.103", "userAgent": "aws-cli/1.16.170 Python/3.7.4 Darwin/18.6.0 botocore/1.12.160", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"nextToken": "eyJ2IjoiMiIsImMiOiJYY2x3aFFPWTlvVFpPa3ZGa0FVTHdTTk9kQVI2aUZaYjAvUTA3c21jVnZtTThKWkU0OVFxVGlyNGtmVk1kRks4RTQ5d0xQcmhqR3BENkNkdWV0aXhQZldHZVVrd2V1ZFBqZjdraXhDYm9JWTUzRVhEaVhqRWFuWjdTVUlRQVpXRTMwSkk0ZlVzWUdnSzUyS0l2T3kxYzlWSTFvVWM1TG0zL0Jwdjd3Ynk2emg3L3M4ZDFvZmhvL0JIWHp5NUFFaFJlM2V1NHBTbVVpenA5bW1NV2NHbG5nPT0iLCJzIjoiMSJ9", "maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "c3eabbb2-9c8b-490e-9411-e7da2256a74a", "record_id": "flaws_cloudtrail:0000028:c3eabbb2-9c8b-490e-9411-e7da2256a74a", "row_index": 28, "timestamp": "2019-07-18T15:30:28Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "220.81.220.103", "user_agent": "aws-cli/1.16.170 Python/3.7.4 Darwin/18.6.0 botocore/1.12.160", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1085, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "c3eabbb2-9c8b-490e-9411-e7da2256a74a", "eventTime": "2019-07-18T15:30:28Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "220.81.220.103", "userAgent": "aws-cli/1.16.170 Python/3.7.4 Darwin/18.6.0 botocore/1.12.160", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"nextToken": "eyJ2IjoiMiIsImMiOiJYY2x3aFFPWTlvVFpPa3ZGa0FVTHdTTk9kQVI2aUZaYjAvUTA3c21jVnZtTThKWkU0OVFxVGlyNGtmVk1kRks4RTQ5d0xQcmhqR3BENkNkdWV0aXhQZldHZVVrd2V1ZFBqZjdraXhDYm9JWTUzRVhEaVhqRWFuWjdTVUlRQVpXRTMwSkk0ZlVzWUdnSzUyS0l2T3kxYzlWSTFvVWM1TG0zL0Jwdjd3Ynk2emg3L3M4ZDFvZmhvL0JIWHp5NUFFaFJlM2V1NHBTbVVpenA5bW1NV2NHbG5nPT0iLCJzIjoiMSJ9", "maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "b898d211-79dc-4f24-b9af-a23b28f7da74", "record_id": "flaws_cloudtrail:0000029:b898d211-79dc-4f24-b9af-a23b28f7da74", "row_index": 29, "timestamp": "2019-07-18T15:30:29Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "220.81.220.103", "user_agent": "aws-cli/1.16.170 Python/3.7.4 Darwin/18.6.0 botocore/1.12.160", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1100, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "b898d211-79dc-4f24-b9af-a23b28f7da74", "eventTime": "2019-07-18T15:30:29Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "220.81.220.103", "userAgent": "aws-cli/1.16.170 Python/3.7.4 Darwin/18.6.0 botocore/1.12.160", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"nextToken": "eyJ2IjoiMiIsImMiOiJzb0hBS2tlVFlBOExlWEpDTHlHalBKc0Z3ank5S1ZaN2ZLUVZ6M0NKMVFiRkZWSXppTU5NNE4wT2pST3Avc29qMGJWVTNlSExhd0pEQVZ4ZlVEekU3UTc0ZkFyOGZXVG9RVXdBZG8vVURNazdvWkdGSFpUdUtGSkxJS1JEZmc5a3lHQkJnNGZFK2EvWjc4ZVlPclFKL2l6WlRTbnhoUythQUtUU3lYQzZMU3VWV0lLUkJhVm16T2lyMjJEVU9ZUHE2SFRFNU85V3p1RUFGVkhWZ2doaDdMVmNQR3lGNXpRPSIsInMiOiIxIn0=", "maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "b898d211-79dc-4f24-b9af-a23b28f7da74", "record_id": "flaws_cloudtrail:0000030:b898d211-79dc-4f24-b9af-a23b28f7da74", "row_index": 30, "timestamp": "2019-07-18T15:30:29Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "220.81.220.103", "user_agent": "aws-cli/1.16.170 Python/3.7.4 Darwin/18.6.0 botocore/1.12.160", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1100, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "b898d211-79dc-4f24-b9af-a23b28f7da74", "eventTime": "2019-07-18T15:30:29Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "220.81.220.103", "userAgent": "aws-cli/1.16.170 Python/3.7.4 Darwin/18.6.0 botocore/1.12.160", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"nextToken": "eyJ2IjoiMiIsImMiOiJzb0hBS2tlVFlBOExlWEpDTHlHalBKc0Z3ank5S1ZaN2ZLUVZ6M0NKMVFiRkZWSXppTU5NNE4wT2pST3Avc29qMGJWVTNlSExhd0pEQVZ4ZlVEekU3UTc0ZkFyOGZXVG9RVXdBZG8vVURNazdvWkdGSFpUdUtGSkxJS1JEZmc5a3lHQkJnNGZFK2EvWjc4ZVlPclFKL2l6WlRTbnhoUythQUtUU3lYQzZMU3VWV0lLUkJhVm16T2lyMjJEVU9ZUHE2SFRFNU85V3p1RUFGVkhWZ2doaDdMVmNQR3lGNXpRPSIsInMiOiIxIn0=", "maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "d11866f7-d401-48c7-93ce-1ecfc2309042", "record_id": "flaws_cloudtrail:0000031:d11866f7-d401-48c7-93ce-1ecfc2309042", "row_index": 31, "timestamp": "2019-07-18T15:30:31Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "220.81.220.103", "user_agent": "aws-cli/1.16.170 Python/3.7.4 Darwin/18.6.0 botocore/1.12.160", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1088, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "d11866f7-d401-48c7-93ce-1ecfc2309042", "eventTime": "2019-07-18T15:30:31Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "220.81.220.103", "userAgent": "aws-cli/1.16.170 Python/3.7.4 Darwin/18.6.0 botocore/1.12.160", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"nextToken": "eyJ2IjoiMiIsImMiOiJ5L2NGcWYrNE9qR2lwcDBpOGlxb3B5c09KbWdCcFF0UGZHTkI0Q3pHZ1ZMUi9pemFtdTZCbHVid0Ixa3JudU9xakJKVVMyd2FsWFBvaVFENnZRSldUMVhxbEYxbDBwc2Z3RkwrMFk2R3p3QTdnejhIMzNraS9TZUxBMWxmanJ4N3U2N3V4K2VEN3h3R1RpaXZXaWJhR2s1OGJEUUNGRFNhb3VVRE54QjlPWTFVZlZQU3hTNTJ4RlVkNzFjcUJiQXN4eDd3ajFWZ3RoNGdESTlYd2FBSENRPT0iLCJzIjoiMSJ9", "maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "d11866f7-d401-48c7-93ce-1ecfc2309042", "record_id": "flaws_cloudtrail:0000032:d11866f7-d401-48c7-93ce-1ecfc2309042", "row_index": 32, "timestamp": "2019-07-18T15:30:31Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "220.81.220.103", "user_agent": "aws-cli/1.16.170 Python/3.7.4 Darwin/18.6.0 botocore/1.12.160", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1088, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "d11866f7-d401-48c7-93ce-1ecfc2309042", "eventTime": "2019-07-18T15:30:31Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "220.81.220.103", "userAgent": "aws-cli/1.16.170 Python/3.7.4 Darwin/18.6.0 botocore/1.12.160", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"nextToken": "eyJ2IjoiMiIsImMiOiJ5L2NGcWYrNE9qR2lwcDBpOGlxb3B5c09KbWdCcFF0UGZHTkI0Q3pHZ1ZMUi9pemFtdTZCbHVid0Ixa3JudU9xakJKVVMyd2FsWFBvaVFENnZRSldUMVhxbEYxbDBwc2Z3RkwrMFk2R3p3QTdnejhIMzNraS9TZUxBMWxmanJ4N3U2N3V4K2VEN3h3R1RpaXZXaWJhR2s1OGJEUUNGRFNhb3VVRE54QjlPWTFVZlZQU3hTNTJ4RlVkNzFjcUJiQXN4eDd3ajFWZ3RoNGdESTlYd2FBSENRPT0iLCJzIjoiMSJ9", "maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "4cbbd788-ff1d-47c0-9e63-6d1636e7a9ee", "record_id": "flaws_cloudtrail:0000033:4cbbd788-ff1d-47c0-9e63-6d1636e7a9ee", "row_index": 33, "timestamp": "2019-07-18T15:30:32Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "220.81.220.103", "user_agent": "aws-cli/1.16.170 Python/3.7.4 Darwin/18.6.0 botocore/1.12.160", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1100, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "4cbbd788-ff1d-47c0-9e63-6d1636e7a9ee", "eventTime": "2019-07-18T15:30:32Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "220.81.220.103", "userAgent": "aws-cli/1.16.170 Python/3.7.4 Darwin/18.6.0 botocore/1.12.160", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"nextToken": "eyJ2IjoiMiIsImMiOiJQOWRKNUxOK3BWUkRZbGN6SWZyc2FoekdIWmdoak1vcUUraGlzYkFZWVM4UEtLYXFLdk9hdFZsVFRtSXNiZ2doUW93ZUlmTjJLLzJrTjJtN0Q3NlMvdUEzeDJaNkQ2QXJpNXljOVJuZ2hPLy9tbjlIWnVmYzB5VmVEemF1S2tnWUxoVy9kSGJkeStlcURpZWpoc0orRXJXdkhiZk5HT2NMRXdyU1p2TWVrYS92OHZrcGt5elFZT1c2RjBpYnc4aDE1bUphbW11U0FTTkdBb0swU1lpWFFqZll3Q0lqaFQ0PSIsInMiOiIxIn0=", "maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "4cbbd788-ff1d-47c0-9e63-6d1636e7a9ee", "record_id": "flaws_cloudtrail:0000034:4cbbd788-ff1d-47c0-9e63-6d1636e7a9ee", "row_index": 34, "timestamp": "2019-07-18T15:30:32Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "220.81.220.103", "user_agent": "aws-cli/1.16.170 Python/3.7.4 Darwin/18.6.0 botocore/1.12.160", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1100, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "4cbbd788-ff1d-47c0-9e63-6d1636e7a9ee", "eventTime": "2019-07-18T15:30:32Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "220.81.220.103", "userAgent": "aws-cli/1.16.170 Python/3.7.4 Darwin/18.6.0 botocore/1.12.160", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"nextToken": "eyJ2IjoiMiIsImMiOiJQOWRKNUxOK3BWUkRZbGN6SWZyc2FoekdIWmdoak1vcUUraGlzYkFZWVM4UEtLYXFLdk9hdFZsVFRtSXNiZ2doUW93ZUlmTjJLLzJrTjJtN0Q3NlMvdUEzeDJaNkQ2QXJpNXljOVJuZ2hPLy9tbjlIWnVmYzB5VmVEemF1S2tnWUxoVy9kSGJkeStlcURpZWpoc0orRXJXdkhiZk5HT2NMRXdyU1p2TWVrYS92OHZrcGt5elFZT1c2RjBpYnc4aDE1bUphbW11U0FTTkdBb0swU1lpWFFqZll3Q0lqaFQ0PSIsInMiOiIxIn0=", "maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "b4b3a6c9-3efe-4f01-b2f0-2b7f092bc6ad", "record_id": "flaws_cloudtrail:0000035:b4b3a6c9-3efe-4f01-b2f0-2b7f092bc6ad", "row_index": 35, "timestamp": "2019-07-18T15:30:33Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "220.81.220.103", "user_agent": "aws-cli/1.16.170 Python/3.7.4 Darwin/18.6.0 botocore/1.12.160", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1052, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "b4b3a6c9-3efe-4f01-b2f0-2b7f092bc6ad", "eventTime": "2019-07-18T15:30:33Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "220.81.220.103", "userAgent": "aws-cli/1.16.170 Python/3.7.4 Darwin/18.6.0 botocore/1.12.160", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"nextToken": "eyJ2IjoiMiIsImMiOiIxcnhaZ0dRMWNCdWxOT3pZVVVWdDFhQUJORWEvbHVMclJwWDNXZkhaMmlkcDJka2FnL1dxUlNZSVlXSUYzYW56Z01RNHRlSk40TFR3SmNIeUZWcCtUYW9IczdRSUQwei9nVnJ5aTRoQVJYREVLcUFIQkpXc2tadzFuTG8zZ3dRQm5nazI0U25VTm9MbE8wN1VadTFSbzJEcDdQR2IwVlZWdzQ1V1NwbkZ2akhyRzZoMkk3WHhPV3dhWnNycGV6VT0iLCJzIjoiMSJ9", "maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "b4b3a6c9-3efe-4f01-b2f0-2b7f092bc6ad", "record_id": "flaws_cloudtrail:0000036:b4b3a6c9-3efe-4f01-b2f0-2b7f092bc6ad", "row_index": 36, "timestamp": "2019-07-18T15:30:33Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "220.81.220.103", "user_agent": "aws-cli/1.16.170 Python/3.7.4 Darwin/18.6.0 botocore/1.12.160", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1052, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "b4b3a6c9-3efe-4f01-b2f0-2b7f092bc6ad", "eventTime": "2019-07-18T15:30:33Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "220.81.220.103", "userAgent": "aws-cli/1.16.170 Python/3.7.4 Darwin/18.6.0 botocore/1.12.160", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"nextToken": "eyJ2IjoiMiIsImMiOiIxcnhaZ0dRMWNCdWxOT3pZVVVWdDFhQUJORWEvbHVMclJwWDNXZkhaMmlkcDJka2FnL1dxUlNZSVlXSUYzYW56Z01RNHRlSk40TFR3SmNIeUZWcCtUYW9IczdRSUQwei9nVnJ5aTRoQVJYREVLcUFIQkpXc2tadzFuTG8zZ3dRQm5nazI0U25VTm9MbE8wN1VadTFSbzJEcDdQR2IwVlZWdzQ1V1NwbkZ2akhyRzZoMkk3WHhPV3dhWnNycGV6VT0iLCJzIjoiMSJ9", "maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "b152951e-569c-48d6-a50e-ae5856be735d", "record_id": "flaws_cloudtrail:0000037:b152951e-569c-48d6-a50e-ae5856be735d", "row_index": 37, "timestamp": "2019-07-18T15:31:15Z", "event_type": "AssumeRole", "event_source": "sts.amazonaws.com", "principal": {"type": "AWSService", "arn": null, "account_id": null, "principal_id": null, "user_name": null, "access_key_id": null, "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "ec2.amazonaws.com", "user_agent": "ec2.amazonaws.com", "aws_region": "us-west-2"}, "resource_arns": ["arn:aws:iam::811596193553:role/flaws"], "raw_record_size_bytes": 1882, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "resources", "responseElements", "sharedEventID", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "b152951e-569c-48d6-a50e-ae5856be735d", "eventTime": "2019-07-18T15:31:15Z", "eventName": "AssumeRole", "eventSource": "sts.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "ec2.amazonaws.com", "userAgent": "ec2.amazonaws.com", "awsRegion": "us-west-2", "userIdentity": {"type": "AWSService", "invokedBy": "ec2.amazonaws.com"}, "requestParameters": {"roleSessionName": "i-aa2d3b42e5c6e801a", "roleArn": "arn:aws:iam::811596193553:role/flaws"}, "responseElements": {"credentials": {"accessKeyId": "ASIAU8EZXXWO4KSWJE6M", "expiration": "Jul 18, 2019 9:32:01 PM", "sessionToken": "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"}}, "resources": [{"ARN": "arn:aws:iam::811596193553:role/flaws", "accountId": "811596193553", "type": "AWS::IAM::Role"}]}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "b152951e-569c-48d6-a50e-ae5856be735d", "record_id": "flaws_cloudtrail:0000038:b152951e-569c-48d6-a50e-ae5856be735d", "row_index": 38, "timestamp": "2019-07-18T15:31:15Z", "event_type": "AssumeRole", "event_source": "sts.amazonaws.com", "principal": {"type": "AWSService", "arn": null, "account_id": null, "principal_id": null, "user_name": null, "access_key_id": null, "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "ec2.amazonaws.com", "user_agent": "ec2.amazonaws.com", "aws_region": "us-west-2"}, "resource_arns": ["arn:aws:iam::811596193553:role/flaws"], "raw_record_size_bytes": 1882, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "resources", "responseElements", "sharedEventID", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "b152951e-569c-48d6-a50e-ae5856be735d", "eventTime": "2019-07-18T15:31:15Z", "eventName": "AssumeRole", "eventSource": "sts.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "ec2.amazonaws.com", "userAgent": "ec2.amazonaws.com", "awsRegion": "us-west-2", "userIdentity": {"type": "AWSService", "invokedBy": "ec2.amazonaws.com"}, "requestParameters": {"roleSessionName": "i-aa2d3b42e5c6e801a", "roleArn": "arn:aws:iam::811596193553:role/flaws"}, "responseElements": {"credentials": {"accessKeyId": "ASIAU8EZXXWO4KSWJE6M", "expiration": "Jul 18, 2019 9:32:01 PM", "sessionToken": "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"}}, "resources": [{"ARN": "arn:aws:iam::811596193553:role/flaws", "accountId": "811596193553", "type": "AWS::IAM::Role"}]}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "adee65df-0844-4a5d-8e4e-2b38143ba8b9", "record_id": "flaws_cloudtrail:0000039:adee65df-0844-4a5d-8e4e-2b38143ba8b9", "row_index": 39, "timestamp": "2019-07-18T15:31:19Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "227.252.83.216", "user_agent": "aws-cli/1.16.90 Python/3.7.2 Darwin/18.6.0 botocore/1.12.80", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 785, "raw_record_depth": 5, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "adee65df-0844-4a5d-8e4e-2b38143ba8b9", "eventTime": "2019-07-18T15:31:19Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "227.252.83.216", "userAgent": "aws-cli/1.16.90 Python/3.7.2 Darwin/18.6.0 botocore/1.12.80", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"maxResults": 1000, "snapshotSet": {}, "ownersSet": {"items": [{"owner": "811596193553"}]}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "adee65df-0844-4a5d-8e4e-2b38143ba8b9", "record_id": "flaws_cloudtrail:0000040:adee65df-0844-4a5d-8e4e-2b38143ba8b9", "row_index": 40, "timestamp": "2019-07-18T15:31:19Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "227.252.83.216", "user_agent": "aws-cli/1.16.90 Python/3.7.2 Darwin/18.6.0 botocore/1.12.80", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 785, "raw_record_depth": 5, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "adee65df-0844-4a5d-8e4e-2b38143ba8b9", "eventTime": "2019-07-18T15:31:19Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "227.252.83.216", "userAgent": "aws-cli/1.16.90 Python/3.7.2 Darwin/18.6.0 botocore/1.12.80", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"maxResults": 1000, "snapshotSet": {}, "ownersSet": {"items": [{"owner": "811596193553"}]}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "559675-2bac-46e1-b81d-a81c6b6a81b2", "record_id": "flaws_cloudtrail:0000041:559675-2bac-46e1-b81d-a81c6b6a81b2", "row_index": 41, "timestamp": "2019-07-18T15:31:50Z", "event_type": "DescribeInstances", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "220.81.220.103", "user_agent": "aws-cli/1.16.170 Python/3.7.4 Darwin/18.6.0 botocore/1.12.160", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 699, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "559675-2bac-46e1-b81d-a81c6b6a81b2", "eventTime": "2019-07-18T15:31:50Z", "eventName": "DescribeInstances", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "220.81.220.103", "userAgent": "aws-cli/1.16.170 Python/3.7.4 Darwin/18.6.0 botocore/1.12.160", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"instancesSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "559675-2bac-46e1-b81d-a81c6b6a81b2", "record_id": "flaws_cloudtrail:0000042:559675-2bac-46e1-b81d-a81c6b6a81b2", "row_index": 42, "timestamp": "2019-07-18T15:31:50Z", "event_type": "DescribeInstances", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "220.81.220.103", "user_agent": "aws-cli/1.16.170 Python/3.7.4 Darwin/18.6.0 botocore/1.12.160", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 699, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "559675-2bac-46e1-b81d-a81c6b6a81b2", "eventTime": "2019-07-18T15:31:50Z", "eventName": "DescribeInstances", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "220.81.220.103", "userAgent": "aws-cli/1.16.170 Python/3.7.4 Darwin/18.6.0 botocore/1.12.160", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"instancesSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "529f929d-301e-4876-a0b6-b535a91703e", "record_id": "flaws_cloudtrail:0000043:529f929d-301e-4876-a0b6-b535a91703e", "row_index": 43, "timestamp": "2019-07-18T15:32:18Z", "event_type": "DescribeInstances", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "220.81.220.103", "user_agent": "aws-cli/1.16.170 Python/3.7.4 Darwin/18.6.0 botocore/1.12.160", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 748, "raw_record_depth": 5, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "529f929d-301e-4876-a0b6-b535a91703e", "eventTime": "2019-07-18T15:32:18Z", "eventName": "DescribeInstances", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "220.81.220.103", "userAgent": "aws-cli/1.16.170 Python/3.7.4 Darwin/18.6.0 botocore/1.12.160", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"instancesSet": {"items": [{"instanceId": "i-aa2d3b42e5c6e801a"}]}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "529f929d-301e-4876-a0b6-b535a91703e", "record_id": "flaws_cloudtrail:0000044:529f929d-301e-4876-a0b6-b535a91703e", "row_index": 44, "timestamp": "2019-07-18T15:32:18Z", "event_type": "DescribeInstances", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "220.81.220.103", "user_agent": "aws-cli/1.16.170 Python/3.7.4 Darwin/18.6.0 botocore/1.12.160", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 748, "raw_record_depth": 5, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "529f929d-301e-4876-a0b6-b535a91703e", "eventTime": "2019-07-18T15:32:18Z", "eventName": "DescribeInstances", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "220.81.220.103", "userAgent": "aws-cli/1.16.170 Python/3.7.4 Darwin/18.6.0 botocore/1.12.160", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"instancesSet": {"items": [{"instanceId": "i-aa2d3b42e5c6e801a"}]}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "19a0db9c-db0a-468b-a15b-eb965d88f153", "record_id": "flaws_cloudtrail:0000045:19a0db9c-db0a-468b-a15b-eb965d88f153", "row_index": 45, "timestamp": "2019-07-18T15:33:39Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "220.81.220.103", "user_agent": "aws-cli/1.16.170 Python/3.7.4 Darwin/18.6.0 botocore/1.12.160", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 787, "raw_record_depth": 5, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "19a0db9c-db0a-468b-a15b-eb965d88f153", "eventTime": "2019-07-18T15:33:39Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "220.81.220.103", "userAgent": "aws-cli/1.16.170 Python/3.7.4 Darwin/18.6.0 botocore/1.12.160", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"maxResults": 1000, "snapshotSet": {}, "ownersSet": {"items": [{"owner": "811596193553"}]}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "19a0db9c-db0a-468b-a15b-eb965d88f153", "record_id": "flaws_cloudtrail:0000046:19a0db9c-db0a-468b-a15b-eb965d88f153", "row_index": 46, "timestamp": "2019-07-18T15:33:39Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "220.81.220.103", "user_agent": "aws-cli/1.16.170 Python/3.7.4 Darwin/18.6.0 botocore/1.12.160", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 787, "raw_record_depth": 5, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "19a0db9c-db0a-468b-a15b-eb965d88f153", "eventTime": "2019-07-18T15:33:39Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "220.81.220.103", "userAgent": "aws-cli/1.16.170 Python/3.7.4 Darwin/18.6.0 botocore/1.12.160", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"maxResults": 1000, "snapshotSet": {}, "ownersSet": {"items": [{"owner": "811596193553"}]}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "07abcc01-6755-4d99-a4c9-e39260a8a4e0", "record_id": "flaws_cloudtrail:0000047:07abcc01-6755-4d99-a4c9-e39260a8a4e0", "row_index": 47, "timestamp": "2019-07-18T15:39:29Z", "event_type": "ListBuckets", "event_source": "s3.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "220.81.220.103", "user_agent": "[aws-cli/1.16.170 Python/3.7.4 Darwin/18.6.0 botocore/1.12.160]", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 802, "raw_record_depth": 3, "raw_record_top_level_keys": ["additionalEventData", "awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "07abcc01-6755-4d99-a4c9-e39260a8a4e0", "eventTime": "2019-07-18T15:39:29Z", "eventName": "ListBuckets", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "220.81.220.103", "userAgent": "[aws-cli/1.16.170 Python/3.7.4 Darwin/18.6.0 botocore/1.12.160]", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"host": ["s3.amazonaws.com"]}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "07abcc01-6755-4d99-a4c9-e39260a8a4e0", "record_id": "flaws_cloudtrail:0000048:07abcc01-6755-4d99-a4c9-e39260a8a4e0", "row_index": 48, "timestamp": "2019-07-18T15:39:29Z", "event_type": "ListBuckets", "event_source": "s3.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "220.81.220.103", "user_agent": "[aws-cli/1.16.170 Python/3.7.4 Darwin/18.6.0 botocore/1.12.160]", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 802, "raw_record_depth": 3, "raw_record_top_level_keys": ["additionalEventData", "awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "07abcc01-6755-4d99-a4c9-e39260a8a4e0", "eventTime": "2019-07-18T15:39:29Z", "eventName": "ListBuckets", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "220.81.220.103", "userAgent": "[aws-cli/1.16.170 Python/3.7.4 Darwin/18.6.0 botocore/1.12.160]", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"host": ["s3.amazonaws.com"]}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "db9c8f09-6181-4a2c-9bf3-3fd0f49323", "record_id": "flaws_cloudtrail:0000049:db9c8f09-6181-4a2c-9bf3-3fd0f49323", "row_index": 49, "timestamp": "2019-07-18T15:40:20Z", "event_type": "DescribeInstances", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "220.81.220.103", "user_agent": "aws-cli/1.16.170 Python/3.7.4 Darwin/18.6.0 botocore/1.12.160", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 745, "raw_record_depth": 5, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "db9c8f09-6181-4a2c-9bf3-3fd0f49323", "eventTime": "2019-07-18T15:40:20Z", "eventName": "DescribeInstances", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "220.81.220.103", "userAgent": "aws-cli/1.16.170 Python/3.7.4 Darwin/18.6.0 botocore/1.12.160", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"instancesSet": {"items": [{"instanceId": "i-aa2d3b42e5c6e801a"}]}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "db9c8f09-6181-4a2c-9bf3-3fd0f49323", "record_id": "flaws_cloudtrail:0000050:db9c8f09-6181-4a2c-9bf3-3fd0f49323", "row_index": 50, "timestamp": "2019-07-18T15:40:20Z", "event_type": "DescribeInstances", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "220.81.220.103", "user_agent": "aws-cli/1.16.170 Python/3.7.4 Darwin/18.6.0 botocore/1.12.160", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 745, "raw_record_depth": 5, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "db9c8f09-6181-4a2c-9bf3-3fd0f49323", "eventTime": "2019-07-18T15:40:20Z", "eventName": "DescribeInstances", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "220.81.220.103", "userAgent": "aws-cli/1.16.170 Python/3.7.4 Darwin/18.6.0 botocore/1.12.160", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"instancesSet": {"items": [{"instanceId": "i-aa2d3b42e5c6e801a"}]}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "09078dc6-5918-48da-bccf-53cbe48ca56e", "record_id": "flaws_cloudtrail:0000051:09078dc6-5918-48da-bccf-53cbe48ca56e", "row_index": 51, "timestamp": "2019-07-18T15:41:19Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "220.81.220.103", "user_agent": "aws-cli/1.16.170 Python/3.7.4 Darwin/18.6.0 botocore/1.12.160", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 787, "raw_record_depth": 5, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "09078dc6-5918-48da-bccf-53cbe48ca56e", "eventTime": "2019-07-18T15:41:19Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "220.81.220.103", "userAgent": "aws-cli/1.16.170 Python/3.7.4 Darwin/18.6.0 botocore/1.12.160", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"maxResults": 1000, "snapshotSet": {}, "ownersSet": {"items": [{"owner": "811596193553"}]}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "09078dc6-5918-48da-bccf-53cbe48ca56e", "record_id": "flaws_cloudtrail:0000052:09078dc6-5918-48da-bccf-53cbe48ca56e", "row_index": 52, "timestamp": "2019-07-18T15:41:19Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "220.81.220.103", "user_agent": "aws-cli/1.16.170 Python/3.7.4 Darwin/18.6.0 botocore/1.12.160", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 787, "raw_record_depth": 5, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "09078dc6-5918-48da-bccf-53cbe48ca56e", "eventTime": "2019-07-18T15:41:19Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "220.81.220.103", "userAgent": "aws-cli/1.16.170 Python/3.7.4 Darwin/18.6.0 botocore/1.12.160", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"maxResults": 1000, "snapshotSet": {}, "ownersSet": {"items": [{"owner": "811596193553"}]}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "03ca4be6-d9f7-46b3-83fc-358c449bd4ad", "record_id": "flaws_cloudtrail:0000053:03ca4be6-d9f7-46b3-83fc-358c449bd4ad", "row_index": 53, "timestamp": "2019-07-18T15:42:32Z", "event_type": "DescribeVolumes", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "220.81.220.103", "user_agent": "aws-cli/1.16.170 Python/3.7.4 Darwin/18.6.0 botocore/1.12.160", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 714, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "03ca4be6-d9f7-46b3-83fc-358c449bd4ad", "eventTime": "2019-07-18T15:42:32Z", "eventName": "DescribeVolumes", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "220.81.220.103", "userAgent": "aws-cli/1.16.170 Python/3.7.4 Darwin/18.6.0 botocore/1.12.160", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"maxResults": 1000, "volumeSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "03ca4be6-d9f7-46b3-83fc-358c449bd4ad", "record_id": "flaws_cloudtrail:0000054:03ca4be6-d9f7-46b3-83fc-358c449bd4ad", "row_index": 54, "timestamp": "2019-07-18T15:42:32Z", "event_type": "DescribeVolumes", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "220.81.220.103", "user_agent": "aws-cli/1.16.170 Python/3.7.4 Darwin/18.6.0 botocore/1.12.160", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 714, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "03ca4be6-d9f7-46b3-83fc-358c449bd4ad", "eventTime": "2019-07-18T15:42:32Z", "eventName": "DescribeVolumes", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "220.81.220.103", "userAgent": "aws-cli/1.16.170 Python/3.7.4 Darwin/18.6.0 botocore/1.12.160", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"maxResults": 1000, "volumeSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "b36f8915-9f79-433c-9746-01a4ac94d74e", "record_id": "flaws_cloudtrail:0000055:b36f8915-9f79-433c-9746-01a4ac94d74e", "row_index": 55, "timestamp": "2019-07-18T15:42:52Z", "event_type": "DescribeInstances", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "227.252.83.216", "user_agent": "aws-cli/1.16.90 Python/3.7.2 Darwin/18.6.0 botocore/1.12.80", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 700, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "b36f8915-9f79-433c-9746-01a4ac94d74e", "eventTime": "2019-07-18T15:42:52Z", "eventName": "DescribeInstances", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "227.252.83.216", "userAgent": "aws-cli/1.16.90 Python/3.7.2 Darwin/18.6.0 botocore/1.12.80", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"instancesSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "b36f8915-9f79-433c-9746-01a4ac94d74e", "record_id": "flaws_cloudtrail:0000056:b36f8915-9f79-433c-9746-01a4ac94d74e", "row_index": 56, "timestamp": "2019-07-18T15:42:52Z", "event_type": "DescribeInstances", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "227.252.83.216", "user_agent": "aws-cli/1.16.90 Python/3.7.2 Darwin/18.6.0 botocore/1.12.80", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 700, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "b36f8915-9f79-433c-9746-01a4ac94d74e", "eventTime": "2019-07-18T15:42:52Z", "eventName": "DescribeInstances", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "227.252.83.216", "userAgent": "aws-cli/1.16.90 Python/3.7.2 Darwin/18.6.0 botocore/1.12.80", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"instancesSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "d2cfd723-0e61-4782-ada3-8e74bd0f2013", "record_id": "flaws_cloudtrail:0000057:d2cfd723-0e61-4782-ada3-8e74bd0f2013", "row_index": 57, "timestamp": "2019-07-18T15:44:14Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "220.81.220.103", "user_agent": "aws-cli/1.16.170 Python/3.7.4 Darwin/18.6.0 botocore/1.12.160", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 784, "raw_record_depth": 5, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "d2cfd723-0e61-4782-ada3-8e74bd0f2013", "eventTime": "2019-07-18T15:44:14Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "220.81.220.103", "userAgent": "aws-cli/1.16.170 Python/3.7.4 Darwin/18.6.0 botocore/1.12.160", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"snapshotSet": {"items": [{"snapshotId": "snap-2f6b292187c2304c2"}]}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "d2cfd723-0e61-4782-ada3-8e74bd0f2013", "record_id": "flaws_cloudtrail:0000058:d2cfd723-0e61-4782-ada3-8e74bd0f2013", "row_index": 58, "timestamp": "2019-07-18T15:44:14Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "220.81.220.103", "user_agent": "aws-cli/1.16.170 Python/3.7.4 Darwin/18.6.0 botocore/1.12.160", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 784, "raw_record_depth": 5, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "d2cfd723-0e61-4782-ada3-8e74bd0f2013", "eventTime": "2019-07-18T15:44:14Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "220.81.220.103", "userAgent": "aws-cli/1.16.170 Python/3.7.4 Darwin/18.6.0 botocore/1.12.160", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"snapshotSet": {"items": [{"snapshotId": "snap-2f6b292187c2304c2"}]}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "326d8254-b036-48db-9df2-5628ced0e6d5", "record_id": "flaws_cloudtrail:0000059:326d8254-b036-48db-9df2-5628ced0e6d5", "row_index": 59, "timestamp": "2019-07-18T15:55:10Z", "event_type": "DescribeInstances", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "220.81.220.103", "user_agent": "aws-cli/1.16.170 Python/3.7.4 Darwin/18.6.0 botocore/1.12.160", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 701, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "326d8254-b036-48db-9df2-5628ced0e6d5", "eventTime": "2019-07-18T15:55:10Z", "eventName": "DescribeInstances", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "220.81.220.103", "userAgent": "aws-cli/1.16.170 Python/3.7.4 Darwin/18.6.0 botocore/1.12.160", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"instancesSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "326d8254-b036-48db-9df2-5628ced0e6d5", "record_id": "flaws_cloudtrail:0000060:326d8254-b036-48db-9df2-5628ced0e6d5", "row_index": 60, "timestamp": "2019-07-18T15:55:10Z", "event_type": "DescribeInstances", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "220.81.220.103", "user_agent": "aws-cli/1.16.170 Python/3.7.4 Darwin/18.6.0 botocore/1.12.160", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 701, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "326d8254-b036-48db-9df2-5628ced0e6d5", "eventTime": "2019-07-18T15:55:10Z", "eventName": "DescribeInstances", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "220.81.220.103", "userAgent": "aws-cli/1.16.170 Python/3.7.4 Darwin/18.6.0 botocore/1.12.160", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"instancesSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "a06ec867-41d3-489b-86bc-d50a796098b4", "record_id": "flaws_cloudtrail:0000061:a06ec867-41d3-489b-86bc-d50a796098b4", "row_index": 61, "timestamp": "2019-07-18T15:57:11Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "220.81.220.103", "user_agent": "aws-cli/1.16.170 Python/3.7.4 Darwin/18.6.0 botocore/1.12.160", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 823, "raw_record_depth": 8, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "a06ec867-41d3-489b-86bc-d50a796098b4", "eventTime": "2019-07-18T15:57:11Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "220.81.220.103", "userAgent": "aws-cli/1.16.170 Python/3.7.4 Darwin/18.6.0 botocore/1.12.160", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {"items": [{"name": "volume-id", "valueSet": {"items": {"__truncated_type": "list"}}}]}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "a06ec867-41d3-489b-86bc-d50a796098b4", "record_id": "flaws_cloudtrail:0000062:a06ec867-41d3-489b-86bc-d50a796098b4", "row_index": 62, "timestamp": "2019-07-18T15:57:11Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "220.81.220.103", "user_agent": "aws-cli/1.16.170 Python/3.7.4 Darwin/18.6.0 botocore/1.12.160", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 823, "raw_record_depth": 8, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "a06ec867-41d3-489b-86bc-d50a796098b4", "eventTime": "2019-07-18T15:57:11Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "220.81.220.103", "userAgent": "aws-cli/1.16.170 Python/3.7.4 Darwin/18.6.0 botocore/1.12.160", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {"items": [{"name": "volume-id", "valueSet": {"items": {"__truncated_type": "list"}}}]}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "84234a49-6117-4288-8dab-ff3ebeb4563b", "record_id": "flaws_cloudtrail:0000063:84234a49-6117-4288-8dab-ff3ebeb4563b", "row_index": 63, "timestamp": "2019-07-18T16:09:22Z", "event_type": "DescribeSnapshotAttribute", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "227.252.83.216", "user_agent": "aws-cli/1.16.90 Python/3.7.2 Darwin/18.6.0 botocore/1.12.80", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 755, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "84234a49-6117-4288-8dab-ff3ebeb4563b", "eventTime": "2019-07-18T16:09:22Z", "eventName": "DescribeSnapshotAttribute", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "227.252.83.216", "userAgent": "aws-cli/1.16.90 Python/3.7.2 Darwin/18.6.0 botocore/1.12.80", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"snapshotId": "snap-83d15d668fb2941db", "attributeType": "CREATE_VOLUME_PERMISSION"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "84234a49-6117-4288-8dab-ff3ebeb4563b", "record_id": "flaws_cloudtrail:0000064:84234a49-6117-4288-8dab-ff3ebeb4563b", "row_index": 64, "timestamp": "2019-07-18T16:09:22Z", "event_type": "DescribeSnapshotAttribute", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "227.252.83.216", "user_agent": "aws-cli/1.16.90 Python/3.7.2 Darwin/18.6.0 botocore/1.12.80", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 755, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "84234a49-6117-4288-8dab-ff3ebeb4563b", "eventTime": "2019-07-18T16:09:22Z", "eventName": "DescribeSnapshotAttribute", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "227.252.83.216", "userAgent": "aws-cli/1.16.90 Python/3.7.2 Darwin/18.6.0 botocore/1.12.80", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"snapshotId": "snap-83d15d668fb2941db", "attributeType": "CREATE_VOLUME_PERMISSION"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "7a4e1695-273b-47ac-acfd-831c21abc44e", "record_id": "flaws_cloudtrail:0000065:7a4e1695-273b-47ac-acfd-831c21abc44e", "row_index": 65, "timestamp": "2019-07-18T16:10:03Z", "event_type": "DescribeInstances", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "220.81.220.103", "user_agent": "aws-cli/1.16.170 Python/3.7.4 Darwin/18.6.0 botocore/1.12.160", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 700, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "7a4e1695-273b-47ac-acfd-831c21abc44e", "eventTime": "2019-07-18T16:10:03Z", "eventName": "DescribeInstances", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "220.81.220.103", "userAgent": "aws-cli/1.16.170 Python/3.7.4 Darwin/18.6.0 botocore/1.12.160", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"instancesSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "7a4e1695-273b-47ac-acfd-831c21abc44e", "record_id": "flaws_cloudtrail:0000066:7a4e1695-273b-47ac-acfd-831c21abc44e", "row_index": 66, "timestamp": "2019-07-18T16:10:03Z", "event_type": "DescribeInstances", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "220.81.220.103", "user_agent": "aws-cli/1.16.170 Python/3.7.4 Darwin/18.6.0 botocore/1.12.160", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 700, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "7a4e1695-273b-47ac-acfd-831c21abc44e", "eventTime": "2019-07-18T16:10:03Z", "eventName": "DescribeInstances", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "220.81.220.103", "userAgent": "aws-cli/1.16.170 Python/3.7.4 Darwin/18.6.0 botocore/1.12.160", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"instancesSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "01de2975-ffdc-4a37-a1a1-b95ca4d4a009", "record_id": "flaws_cloudtrail:0000067:01de2975-ffdc-4a37-a1a1-b95ca4d4a009", "row_index": 67, "timestamp": "2019-07-18T16:15:22Z", "event_type": "ListBuckets", "event_source": "s3.amazonaws.com", "principal": {"type": "AssumedRole", "arn": "arn:aws:sts::811596193553:assumed-role/flaws/i-aa2d3b42e5c6e801a", "account_id": "811596193553", "principal_id": "AROACW5CSA8C8WHOB3O7Q:i-aa2d3b42e5c6e801a", "user_name": null, "access_key_id": "ASIAU8EZXXWO4KSWJE6M", "session_issuer_arn": "arn:aws:iam::811596193553:role/flaws", "session_issuer_user_name": "flaws"}, "network": {"source_ip": "220.81.220.103", "user_agent": "[aws-cli/1.16.170 Python/3.7.4 Darwin/18.6.0 botocore/1.12.160]", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 1151, "raw_record_depth": 4, "raw_record_top_level_keys": ["additionalEventData", "awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "01de2975-ffdc-4a37-a1a1-b95ca4d4a009", "eventTime": "2019-07-18T16:15:22Z", "eventName": "ListBuckets", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "220.81.220.103", "userAgent": "[aws-cli/1.16.170 Python/3.7.4 Darwin/18.6.0 botocore/1.12.160]", "awsRegion": "us-east-1", "errorCode": "AccessDenied", "errorMessage": "Access Denied", "userIdentity": {"type": "AssumedRole", "principalId": "AROACW5CSA8C8WHOB3O7Q:i-aa2d3b42e5c6e801a", "arn": "arn:aws:sts::811596193553:assumed-role/flaws/i-aa2d3b42e5c6e801a", "accountId": "811596193553", "accessKeyId": "ASIAU8EZXXWO4KSWJE6M", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2019-07-18T15:31:15Z"}, "sessionIssuer": {"type": "Role", "principalId": "AROACW5CSA8C8WHOB3O7Q", "arn": "arn:aws:iam::811596193553:role/flaws", "accountId": "811596193553", "userName": "flaws"}}}, "requestParameters": {"host": ["s3.amazonaws.com"]}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "01de2975-ffdc-4a37-a1a1-b95ca4d4a009", "record_id": "flaws_cloudtrail:0000068:01de2975-ffdc-4a37-a1a1-b95ca4d4a009", "row_index": 68, "timestamp": "2019-07-18T16:15:22Z", "event_type": "ListBuckets", "event_source": "s3.amazonaws.com", "principal": {"type": "AssumedRole", "arn": "arn:aws:sts::811596193553:assumed-role/flaws/i-aa2d3b42e5c6e801a", "account_id": "811596193553", "principal_id": "AROACW5CSA8C8WHOB3O7Q:i-aa2d3b42e5c6e801a", "user_name": null, "access_key_id": "ASIAU8EZXXWO4KSWJE6M", "session_issuer_arn": "arn:aws:iam::811596193553:role/flaws", "session_issuer_user_name": "flaws"}, "network": {"source_ip": "220.81.220.103", "user_agent": "[aws-cli/1.16.170 Python/3.7.4 Darwin/18.6.0 botocore/1.12.160]", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 1151, "raw_record_depth": 4, "raw_record_top_level_keys": ["additionalEventData", "awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "01de2975-ffdc-4a37-a1a1-b95ca4d4a009", "eventTime": "2019-07-18T16:15:22Z", "eventName": "ListBuckets", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "220.81.220.103", "userAgent": "[aws-cli/1.16.170 Python/3.7.4 Darwin/18.6.0 botocore/1.12.160]", "awsRegion": "us-east-1", "errorCode": "AccessDenied", "errorMessage": "Access Denied", "userIdentity": {"type": "AssumedRole", "principalId": "AROACW5CSA8C8WHOB3O7Q:i-aa2d3b42e5c6e801a", "arn": "arn:aws:sts::811596193553:assumed-role/flaws/i-aa2d3b42e5c6e801a", "accountId": "811596193553", "accessKeyId": "ASIAU8EZXXWO4KSWJE6M", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2019-07-18T15:31:15Z"}, "sessionIssuer": {"type": "Role", "principalId": "AROACW5CSA8C8WHOB3O7Q", "arn": "arn:aws:iam::811596193553:role/flaws", "accountId": "811596193553", "userName": "flaws"}}}, "requestParameters": {"host": ["s3.amazonaws.com"]}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "95b3b18f-e11d-4c03-809f-96f81825c9d5", "record_id": "flaws_cloudtrail:0000069:95b3b18f-e11d-4c03-809f-96f81825c9d5", "row_index": 69, "timestamp": "2019-07-18T16:25:19Z", "event_type": "GetCallerIdentity", "event_source": "sts.amazonaws.com", "principal": {"type": "AssumedRole", "arn": "arn:aws:sts::811596193553:assumed-role/flaws/i-aa2d3b42e5c6e801a", "account_id": "811596193553", "principal_id": "AROACW5CSA8C8WHOB3O7Q:i-aa2d3b42e5c6e801a", "user_name": null, "access_key_id": "ASIAU8EZXXWO4KSWJE6M", "session_issuer_arn": "arn:aws:iam::811596193553:role/flaws", "session_issuer_user_name": "flaws"}, "network": {"source_ip": "220.81.220.103", "user_agent": "Boto3/1.9.189 Python/3.7.4 Darwin/18.6.0 Botocore/1.12.189", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 1107, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "95b3b18f-e11d-4c03-809f-96f81825c9d5", "eventTime": "2019-07-18T16:25:19Z", "eventName": "GetCallerIdentity", "eventSource": "sts.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "220.81.220.103", "userAgent": "Boto3/1.9.189 Python/3.7.4 Darwin/18.6.0 Botocore/1.12.189", "awsRegion": "us-east-1", "userIdentity": {"type": "AssumedRole", "principalId": "AROACW5CSA8C8WHOB3O7Q:i-aa2d3b42e5c6e801a", "arn": "arn:aws:sts::811596193553:assumed-role/flaws/i-aa2d3b42e5c6e801a", "accountId": "811596193553", "accessKeyId": "ASIAU8EZXXWO4KSWJE6M", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2019-07-18T15:31:15Z"}, "sessionIssuer": {"type": "Role", "principalId": "AROACW5CSA8C8WHOB3O7Q", "arn": "arn:aws:iam::811596193553:role/flaws", "accountId": "811596193553", "userName": "flaws"}}}, "responseElements": {"userId": "AROACW5CSA8C8WHOB3O7Q:i-aa2d3b42e5c6e801a", "account": "811596193553", "arn": "arn:aws:sts::811596193553:assumed-role/flaws/i-aa2d3b42e5c6e801a"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "95b3b18f-e11d-4c03-809f-96f81825c9d5", "record_id": "flaws_cloudtrail:0000070:95b3b18f-e11d-4c03-809f-96f81825c9d5", "row_index": 70, "timestamp": "2019-07-18T16:25:19Z", "event_type": "GetCallerIdentity", "event_source": "sts.amazonaws.com", "principal": {"type": "AssumedRole", "arn": "arn:aws:sts::811596193553:assumed-role/flaws/i-aa2d3b42e5c6e801a", "account_id": "811596193553", "principal_id": "AROACW5CSA8C8WHOB3O7Q:i-aa2d3b42e5c6e801a", "user_name": null, "access_key_id": "ASIAU8EZXXWO4KSWJE6M", "session_issuer_arn": "arn:aws:iam::811596193553:role/flaws", "session_issuer_user_name": "flaws"}, "network": {"source_ip": "220.81.220.103", "user_agent": "Boto3/1.9.189 Python/3.7.4 Darwin/18.6.0 Botocore/1.12.189", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 1107, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "95b3b18f-e11d-4c03-809f-96f81825c9d5", "eventTime": "2019-07-18T16:25:19Z", "eventName": "GetCallerIdentity", "eventSource": "sts.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "220.81.220.103", "userAgent": "Boto3/1.9.189 Python/3.7.4 Darwin/18.6.0 Botocore/1.12.189", "awsRegion": "us-east-1", "userIdentity": {"type": "AssumedRole", "principalId": "AROACW5CSA8C8WHOB3O7Q:i-aa2d3b42e5c6e801a", "arn": "arn:aws:sts::811596193553:assumed-role/flaws/i-aa2d3b42e5c6e801a", "accountId": "811596193553", "accessKeyId": "ASIAU8EZXXWO4KSWJE6M", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2019-07-18T15:31:15Z"}, "sessionIssuer": {"type": "Role", "principalId": "AROACW5CSA8C8WHOB3O7Q", "arn": "arn:aws:iam::811596193553:role/flaws", "accountId": "811596193553", "userName": "flaws"}}}, "responseElements": {"userId": "AROACW5CSA8C8WHOB3O7Q:i-aa2d3b42e5c6e801a", "account": "811596193553", "arn": "arn:aws:sts::811596193553:assumed-role/flaws/i-aa2d3b42e5c6e801a"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "3ae32134-5f1a-4952-8c96-c88107cab", "record_id": "flaws_cloudtrail:0000071:3ae32134-5f1a-4952-8c96-c88107cab", "row_index": 71, "timestamp": "2019-07-18T16:25:45Z", "event_type": "ListBuckets", "event_source": "s3.amazonaws.com", "principal": {"type": "AssumedRole", "arn": "arn:aws:sts::811596193553:assumed-role/flaws/i-aa2d3b42e5c6e801a", "account_id": "811596193553", "principal_id": "AROACW5CSA8C8WHOB3O7Q:i-aa2d3b42e5c6e801a", "user_name": null, "access_key_id": "ASIAU8EZXXWO4KSWJE6M", "session_issuer_arn": "arn:aws:iam::811596193553:role/flaws", "session_issuer_user_name": "flaws"}, "network": {"source_ip": "220.81.220.103", "user_agent": "[Boto3/1.9.189 Python/3.7.4 Darwin/18.6.0 Botocore/1.12.189]", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 1140, "raw_record_depth": 4, "raw_record_top_level_keys": ["additionalEventData", "awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "3ae32134-5f1a-4952-8c96-c88107cab", "eventTime": "2019-07-18T16:25:45Z", "eventName": "ListBuckets", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "220.81.220.103", "userAgent": "[Boto3/1.9.189 Python/3.7.4 Darwin/18.6.0 Botocore/1.12.189]", "awsRegion": "us-east-1", "errorCode": "AccessDenied", "errorMessage": "Access Denied", "userIdentity": {"type": "AssumedRole", "principalId": "AROACW5CSA8C8WHOB3O7Q:i-aa2d3b42e5c6e801a", "arn": "arn:aws:sts::811596193553:assumed-role/flaws/i-aa2d3b42e5c6e801a", "accountId": "811596193553", "accessKeyId": "ASIAU8EZXXWO4KSWJE6M", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2019-07-18T15:31:15Z"}, "sessionIssuer": {"type": "Role", "principalId": "AROACW5CSA8C8WHOB3O7Q", "arn": "arn:aws:iam::811596193553:role/flaws", "accountId": "811596193553", "userName": "flaws"}}}, "requestParameters": {"host": ["s3.amazonaws.com"]}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "3ae32134-5f1a-4952-8c96-c88107cab", "record_id": "flaws_cloudtrail:0000072:3ae32134-5f1a-4952-8c96-c88107cab", "row_index": 72, "timestamp": "2019-07-18T16:25:45Z", "event_type": "ListBuckets", "event_source": "s3.amazonaws.com", "principal": {"type": "AssumedRole", "arn": "arn:aws:sts::811596193553:assumed-role/flaws/i-aa2d3b42e5c6e801a", "account_id": "811596193553", "principal_id": "AROACW5CSA8C8WHOB3O7Q:i-aa2d3b42e5c6e801a", "user_name": null, "access_key_id": "ASIAU8EZXXWO4KSWJE6M", "session_issuer_arn": "arn:aws:iam::811596193553:role/flaws", "session_issuer_user_name": "flaws"}, "network": {"source_ip": "220.81.220.103", "user_agent": "[Boto3/1.9.189 Python/3.7.4 Darwin/18.6.0 Botocore/1.12.189]", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 1140, "raw_record_depth": 4, "raw_record_top_level_keys": ["additionalEventData", "awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "3ae32134-5f1a-4952-8c96-c88107cab", "eventTime": "2019-07-18T16:25:45Z", "eventName": "ListBuckets", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "220.81.220.103", "userAgent": "[Boto3/1.9.189 Python/3.7.4 Darwin/18.6.0 Botocore/1.12.189]", "awsRegion": "us-east-1", "errorCode": "AccessDenied", "errorMessage": "Access Denied", "userIdentity": {"type": "AssumedRole", "principalId": "AROACW5CSA8C8WHOB3O7Q:i-aa2d3b42e5c6e801a", "arn": "arn:aws:sts::811596193553:assumed-role/flaws/i-aa2d3b42e5c6e801a", "accountId": "811596193553", "accessKeyId": "ASIAU8EZXXWO4KSWJE6M", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2019-07-18T15:31:15Z"}, "sessionIssuer": {"type": "Role", "principalId": "AROACW5CSA8C8WHOB3O7Q", "arn": "arn:aws:iam::811596193553:role/flaws", "accountId": "811596193553", "userName": "flaws"}}}, "requestParameters": {"host": ["s3.amazonaws.com"]}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "6fa6545c-82e3-4079-b80e-9cf68ff50ce5", "record_id": "flaws_cloudtrail:0000073:6fa6545c-82e3-4079-b80e-9cf68ff50ce5", "row_index": 73, "timestamp": "2019-07-18T16:27:58Z", "event_type": "GetRolePolicy", "event_source": "iam.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "220.81.220.103", "user_agent": "aws-cli/1.16.170 Python/3.7.4 Darwin/18.6.0 botocore/1.12.160", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 824, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "6fa6545c-82e3-4079-b80e-9cf68ff50ce5", "eventTime": "2019-07-18T16:27:58Z", "eventName": "GetRolePolicy", "eventSource": "iam.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "220.81.220.103", "userAgent": "aws-cli/1.16.170 Python/3.7.4 Darwin/18.6.0 botocore/1.12.160", "awsRegion": "us-east-1", "errorCode": "AccessDenied", "errorMessage": "User: arn:aws:iam::811596193553:user/backup is not authorized to perform: iam:GetRolePolicy on resource: role flaws", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "6fa6545c-82e3-4079-b80e-9cf68ff50ce5", "record_id": "flaws_cloudtrail:0000074:6fa6545c-82e3-4079-b80e-9cf68ff50ce5", "row_index": 74, "timestamp": "2019-07-18T16:27:58Z", "event_type": "GetRolePolicy", "event_source": "iam.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "220.81.220.103", "user_agent": "aws-cli/1.16.170 Python/3.7.4 Darwin/18.6.0 botocore/1.12.160", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 824, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "6fa6545c-82e3-4079-b80e-9cf68ff50ce5", "eventTime": "2019-07-18T16:27:58Z", "eventName": "GetRolePolicy", "eventSource": "iam.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "220.81.220.103", "userAgent": "aws-cli/1.16.170 Python/3.7.4 Darwin/18.6.0 botocore/1.12.160", "awsRegion": "us-east-1", "errorCode": "AccessDenied", "errorMessage": "User: arn:aws:iam::811596193553:user/backup is not authorized to perform: iam:GetRolePolicy on resource: role flaws", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "9f84bb77-2442-45bb-a855-d45c140289", "record_id": "flaws_cloudtrail:0000075:9f84bb77-2442-45bb-a855-d45c140289", "row_index": 75, "timestamp": "2019-07-18T16:28:47Z", "event_type": "ListBuckets", "event_source": "s3.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "220.81.220.103", "user_agent": "[aws-cli/1.16.170 Python/3.7.4 Darwin/18.6.0 botocore/1.12.160]", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 800, "raw_record_depth": 3, "raw_record_top_level_keys": ["additionalEventData", "awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "9f84bb77-2442-45bb-a855-d45c140289", "eventTime": "2019-07-18T16:28:47Z", "eventName": "ListBuckets", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "220.81.220.103", "userAgent": "[aws-cli/1.16.170 Python/3.7.4 Darwin/18.6.0 botocore/1.12.160]", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"host": ["s3.amazonaws.com"]}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "9f84bb77-2442-45bb-a855-d45c140289", "record_id": "flaws_cloudtrail:0000076:9f84bb77-2442-45bb-a855-d45c140289", "row_index": 76, "timestamp": "2019-07-18T16:28:47Z", "event_type": "ListBuckets", "event_source": "s3.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "220.81.220.103", "user_agent": "[aws-cli/1.16.170 Python/3.7.4 Darwin/18.6.0 botocore/1.12.160]", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 800, "raw_record_depth": 3, "raw_record_top_level_keys": ["additionalEventData", "awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "9f84bb77-2442-45bb-a855-d45c140289", "eventTime": "2019-07-18T16:28:47Z", "eventName": "ListBuckets", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "220.81.220.103", "userAgent": "[aws-cli/1.16.170 Python/3.7.4 Darwin/18.6.0 botocore/1.12.160]", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"host": ["s3.amazonaws.com"]}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "d422d1c9-b0be-4bbb-93a2-ea07337d7e29", "record_id": "flaws_cloudtrail:0000077:d422d1c9-b0be-4bbb-93a2-ea07337d7e29", "row_index": 77, "timestamp": "2019-07-18T16:31:15Z", "event_type": "AssumeRole", "event_source": "sts.amazonaws.com", "principal": {"type": "AWSService", "arn": null, "account_id": null, "principal_id": null, "user_name": null, "access_key_id": null, "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "ec2.amazonaws.com", "user_agent": "ec2.amazonaws.com", "aws_region": "us-west-2"}, "resource_arns": ["arn:aws:iam::811596193553:role/flaws"], "raw_record_size_bytes": 1882, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "resources", "responseElements", "sharedEventID", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "d422d1c9-b0be-4bbb-93a2-ea07337d7e29", "eventTime": "2019-07-18T16:31:15Z", "eventName": "AssumeRole", "eventSource": "sts.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "ec2.amazonaws.com", "userAgent": "ec2.amazonaws.com", "awsRegion": "us-west-2", "userIdentity": {"type": "AWSService", "invokedBy": "ec2.amazonaws.com"}, "requestParameters": {"roleSessionName": "i-aa2d3b42e5c6e801a", "roleArn": "arn:aws:iam::811596193553:role/flaws"}, "responseElements": {"credentials": {"accessKeyId": "ASIAOYDUVM7GFC5RBEPN", "expiration": "Jul 18, 2019 10:41:32 PM", "sessionToken": "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"}}, "resources": [{"ARN": "arn:aws:iam::811596193553:role/flaws", "accountId": "811596193553", "type": "AWS::IAM::Role"}]}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "d422d1c9-b0be-4bbb-93a2-ea07337d7e29", "record_id": "flaws_cloudtrail:0000078:d422d1c9-b0be-4bbb-93a2-ea07337d7e29", "row_index": 78, "timestamp": "2019-07-18T16:31:15Z", "event_type": "AssumeRole", "event_source": "sts.amazonaws.com", "principal": {"type": "AWSService", "arn": null, "account_id": null, "principal_id": null, "user_name": null, "access_key_id": null, "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "ec2.amazonaws.com", "user_agent": "ec2.amazonaws.com", "aws_region": "us-west-2"}, "resource_arns": ["arn:aws:iam::811596193553:role/flaws"], "raw_record_size_bytes": 1882, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "resources", "responseElements", "sharedEventID", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "d422d1c9-b0be-4bbb-93a2-ea07337d7e29", "eventTime": "2019-07-18T16:31:15Z", "eventName": "AssumeRole", "eventSource": "sts.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "ec2.amazonaws.com", "userAgent": "ec2.amazonaws.com", "awsRegion": "us-west-2", "userIdentity": {"type": "AWSService", "invokedBy": "ec2.amazonaws.com"}, "requestParameters": {"roleSessionName": "i-aa2d3b42e5c6e801a", "roleArn": "arn:aws:iam::811596193553:role/flaws"}, "responseElements": {"credentials": {"accessKeyId": "ASIAOYDUVM7GFC5RBEPN", "expiration": "Jul 18, 2019 10:41:32 PM", "sessionToken": "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"}}, "resources": [{"ARN": "arn:aws:iam::811596193553:role/flaws", "accountId": "811596193553", "type": "AWS::IAM::Role"}]}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "b166bb8c-c414-4db3-8fcc-5ab9a0a6ddd1", "record_id": "flaws_cloudtrail:0000079:b166bb8c-c414-4db3-8fcc-5ab9a0a6ddd1", "row_index": 79, "timestamp": "2019-07-18T16:37:53Z", "event_type": "ListBuckets", "event_source": "s3.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "220.81.220.103", "user_agent": "[aws-cli/1.16.170 Python/3.7.4 Darwin/18.6.0 botocore/1.12.160]", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 802, "raw_record_depth": 3, "raw_record_top_level_keys": ["additionalEventData", "awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "b166bb8c-c414-4db3-8fcc-5ab9a0a6ddd1", "eventTime": "2019-07-18T16:37:53Z", "eventName": "ListBuckets", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "220.81.220.103", "userAgent": "[aws-cli/1.16.170 Python/3.7.4 Darwin/18.6.0 botocore/1.12.160]", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"host": ["s3.amazonaws.com"]}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "b166bb8c-c414-4db3-8fcc-5ab9a0a6ddd1", "record_id": "flaws_cloudtrail:0000080:b166bb8c-c414-4db3-8fcc-5ab9a0a6ddd1", "row_index": 80, "timestamp": "2019-07-18T16:37:53Z", "event_type": "ListBuckets", "event_source": "s3.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "220.81.220.103", "user_agent": "[aws-cli/1.16.170 Python/3.7.4 Darwin/18.6.0 botocore/1.12.160]", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 802, "raw_record_depth": 3, "raw_record_top_level_keys": ["additionalEventData", "awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "b166bb8c-c414-4db3-8fcc-5ab9a0a6ddd1", "eventTime": "2019-07-18T16:37:53Z", "eventName": "ListBuckets", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "220.81.220.103", "userAgent": "[aws-cli/1.16.170 Python/3.7.4 Darwin/18.6.0 botocore/1.12.160]", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"host": ["s3.amazonaws.com"]}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "d4ee53da-42e1-42b0-9037-d44b3043aea7", "record_id": "flaws_cloudtrail:0000081:d4ee53da-42e1-42b0-9037-d44b3043aea7", "row_index": 81, "timestamp": "2019-07-18T16:39:04Z", "event_type": "GetCallerIdentity", "event_source": "sts.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "220.81.220.103", "user_agent": "aws-cli/1.16.170 Python/3.7.4 Darwin/18.6.0 botocore/1.12.160", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 772, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "d4ee53da-42e1-42b0-9037-d44b3043aea7", "eventTime": "2019-07-18T16:39:04Z", "eventName": "GetCallerIdentity", "eventSource": "sts.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "220.81.220.103", "userAgent": "aws-cli/1.16.170 Python/3.7.4 Darwin/18.6.0 botocore/1.12.160", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "responseElements": {"userId": "AIDADO2GQD0K8TEF7KW1V", "account": "811596193553", "arn": "arn:aws:iam::811596193553:user/Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "d4ee53da-42e1-42b0-9037-d44b3043aea7", "record_id": "flaws_cloudtrail:0000082:d4ee53da-42e1-42b0-9037-d44b3043aea7", "row_index": 82, "timestamp": "2019-07-18T16:39:04Z", "event_type": "GetCallerIdentity", "event_source": "sts.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "220.81.220.103", "user_agent": "aws-cli/1.16.170 Python/3.7.4 Darwin/18.6.0 botocore/1.12.160", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 772, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "d4ee53da-42e1-42b0-9037-d44b3043aea7", "eventTime": "2019-07-18T16:39:04Z", "eventName": "GetCallerIdentity", "eventSource": "sts.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "220.81.220.103", "userAgent": "aws-cli/1.16.170 Python/3.7.4 Darwin/18.6.0 botocore/1.12.160", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "responseElements": {"userId": "AIDADO2GQD0K8TEF7KW1V", "account": "811596193553", "arn": "arn:aws:iam::811596193553:user/Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "8a400834f-c6dd-4058-a8db-6d965fd11a64", "record_id": "flaws_cloudtrail:0000083:8a400834f-c6dd-4058-a8db-6d965fd11a64", "row_index": 83, "timestamp": "2019-07-18T16:40:18Z", "event_type": "ListUserPolicies", "event_source": "iam.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "220.81.220.103", "user_agent": "aws-cli/1.16.170 Python/3.7.4 Darwin/18.6.0 botocore/1.12.160", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 685, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "8a400834f-c6dd-4058-a8db-6d965fd11a64", "eventTime": "2019-07-18T16:40:18Z", "eventName": "ListUserPolicies", "eventSource": "iam.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "220.81.220.103", "userAgent": "aws-cli/1.16.170 Python/3.7.4 Darwin/18.6.0 botocore/1.12.160", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"userName": "Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "8a400834f-c6dd-4058-a8db-6d965fd11a64", "record_id": "flaws_cloudtrail:0000084:8a400834f-c6dd-4058-a8db-6d965fd11a64", "row_index": 84, "timestamp": "2019-07-18T16:40:18Z", "event_type": "ListUserPolicies", "event_source": "iam.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "220.81.220.103", "user_agent": "aws-cli/1.16.170 Python/3.7.4 Darwin/18.6.0 botocore/1.12.160", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 685, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "8a400834f-c6dd-4058-a8db-6d965fd11a64", "eventTime": "2019-07-18T16:40:18Z", "eventName": "ListUserPolicies", "eventSource": "iam.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "220.81.220.103", "userAgent": "aws-cli/1.16.170 Python/3.7.4 Darwin/18.6.0 botocore/1.12.160", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"userName": "Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "aeea0752-09f4-47be-8bad-e2d89703a08f", "record_id": "flaws_cloudtrail:0000085:aeea0752-09f4-47be-8bad-e2d89703a08f", "row_index": 85, "timestamp": "2019-07-18T16:40:24Z", "event_type": "ListUsers", "event_source": "iam.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "220.81.220.103", "user_agent": "aws-cli/1.16.170 Python/3.7.4 Darwin/18.6.0 botocore/1.12.160", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 663, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "aeea0752-09f4-47be-8bad-e2d89703a08f", "eventTime": "2019-07-18T16:40:24Z", "eventName": "ListUsers", "eventSource": "iam.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "220.81.220.103", "userAgent": "aws-cli/1.16.170 Python/3.7.4 Darwin/18.6.0 botocore/1.12.160", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "aeea0752-09f4-47be-8bad-e2d89703a08f", "record_id": "flaws_cloudtrail:0000086:aeea0752-09f4-47be-8bad-e2d89703a08f", "row_index": 86, "timestamp": "2019-07-18T16:40:24Z", "event_type": "ListUsers", "event_source": "iam.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "220.81.220.103", "user_agent": "aws-cli/1.16.170 Python/3.7.4 Darwin/18.6.0 botocore/1.12.160", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 663, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "aeea0752-09f4-47be-8bad-e2d89703a08f", "eventTime": "2019-07-18T16:40:24Z", "eventName": "ListUsers", "eventSource": "iam.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "220.81.220.103", "userAgent": "aws-cli/1.16.170 Python/3.7.4 Darwin/18.6.0 botocore/1.12.160", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "a1fdf805-592e-4d59-a527-355c96f72fde", "record_id": "flaws_cloudtrail:0000087:a1fdf805-592e-4d59-a527-355c96f72fde", "row_index": 87, "timestamp": "2019-07-18T16:40:50Z", "event_type": "GetCallerIdentity", "event_source": "sts.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "220.81.220.103", "user_agent": "aws-cli/1.16.170 Python/3.7.4 Darwin/18.6.0 botocore/1.12.160", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 772, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "a1fdf805-592e-4d59-a527-355c96f72fde", "eventTime": "2019-07-18T16:40:50Z", "eventName": "GetCallerIdentity", "eventSource": "sts.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "220.81.220.103", "userAgent": "aws-cli/1.16.170 Python/3.7.4 Darwin/18.6.0 botocore/1.12.160", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "responseElements": {"userId": "AIDA9BO36HFBHKGJAO9C1", "account": "811596193553", "arn": "arn:aws:iam::811596193553:user/backup"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "a1fdf805-592e-4d59-a527-355c96f72fde", "record_id": "flaws_cloudtrail:0000088:a1fdf805-592e-4d59-a527-355c96f72fde", "row_index": 88, "timestamp": "2019-07-18T16:40:50Z", "event_type": "GetCallerIdentity", "event_source": "sts.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "220.81.220.103", "user_agent": "aws-cli/1.16.170 Python/3.7.4 Darwin/18.6.0 botocore/1.12.160", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 772, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "a1fdf805-592e-4d59-a527-355c96f72fde", "eventTime": "2019-07-18T16:40:50Z", "eventName": "GetCallerIdentity", "eventSource": "sts.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "220.81.220.103", "userAgent": "aws-cli/1.16.170 Python/3.7.4 Darwin/18.6.0 botocore/1.12.160", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "responseElements": {"userId": "AIDA9BO36HFBHKGJAO9C1", "account": "811596193553", "arn": "arn:aws:iam::811596193553:user/backup"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "d118ecbd-f180-42ee-b0be-09bf3d67434c", "record_id": "flaws_cloudtrail:0000089:d118ecbd-f180-42ee-b0be-09bf3d67434c", "row_index": 89, "timestamp": "2019-07-18T16:41:55Z", "event_type": "GetBucketAcl", "event_source": "s3.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "220.81.220.103", "user_agent": "[aws-cli/1.16.170 Python/3.7.4 Darwin/18.6.0 botocore/1.12.160]", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 949, "raw_record_depth": 3, "raw_record_top_level_keys": ["additionalEventData", "awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "d118ecbd-f180-42ee-b0be-09bf3d67434c", "eventTime": "2019-07-18T16:41:55Z", "eventName": "GetBucketAcl", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "220.81.220.103", "userAgent": "[aws-cli/1.16.170 Python/3.7.4 Darwin/18.6.0 botocore/1.12.160]", "awsRegion": "us-west-2", "errorCode": "AccessDenied", "errorMessage": "Access Denied", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"host": ["s3.us-west-2.amazonaws.com"], "bucketName": "theend-c1aad500c62e2a57cf12cebf93b282cf.flaws.cloud", "acl": [""]}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "d118ecbd-f180-42ee-b0be-09bf3d67434c", "record_id": "flaws_cloudtrail:0000090:d118ecbd-f180-42ee-b0be-09bf3d67434c", "row_index": 90, "timestamp": "2019-07-18T16:41:55Z", "event_type": "GetBucketAcl", "event_source": "s3.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "220.81.220.103", "user_agent": "[aws-cli/1.16.170 Python/3.7.4 Darwin/18.6.0 botocore/1.12.160]", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 949, "raw_record_depth": 3, "raw_record_top_level_keys": ["additionalEventData", "awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "d118ecbd-f180-42ee-b0be-09bf3d67434c", "eventTime": "2019-07-18T16:41:55Z", "eventName": "GetBucketAcl", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "220.81.220.103", "userAgent": "[aws-cli/1.16.170 Python/3.7.4 Darwin/18.6.0 botocore/1.12.160]", "awsRegion": "us-west-2", "errorCode": "AccessDenied", "errorMessage": "Access Denied", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"host": ["s3.us-west-2.amazonaws.com"], "bucketName": "theend-c1aad500c62e2a57cf12cebf93b282cf.flaws.cloud", "acl": [""]}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "baf2df75-f8f5-4b36-abea-f6d542ab79f5", "record_id": "flaws_cloudtrail:0000091:baf2df75-f8f5-4b36-abea-f6d542ab79f5", "row_index": 91, "timestamp": "2019-07-18T16:42:46Z", "event_type": "ListBuckets", "event_source": "s3.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "220.81.220.103", "user_agent": "[aws-cli/1.16.170 Python/3.7.4 Darwin/18.6.0 botocore/1.12.160]", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 802, "raw_record_depth": 3, "raw_record_top_level_keys": ["additionalEventData", "awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "baf2df75-f8f5-4b36-abea-f6d542ab79f5", "eventTime": "2019-07-18T16:42:46Z", "eventName": "ListBuckets", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "220.81.220.103", "userAgent": "[aws-cli/1.16.170 Python/3.7.4 Darwin/18.6.0 botocore/1.12.160]", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"host": ["s3.amazonaws.com"]}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "baf2df75-f8f5-4b36-abea-f6d542ab79f5", "record_id": "flaws_cloudtrail:0000092:baf2df75-f8f5-4b36-abea-f6d542ab79f5", "row_index": 92, "timestamp": "2019-07-18T16:42:46Z", "event_type": "ListBuckets", "event_source": "s3.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "220.81.220.103", "user_agent": "[aws-cli/1.16.170 Python/3.7.4 Darwin/18.6.0 botocore/1.12.160]", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 802, "raw_record_depth": 3, "raw_record_top_level_keys": ["additionalEventData", "awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "baf2df75-f8f5-4b36-abea-f6d542ab79f5", "eventTime": "2019-07-18T16:42:46Z", "eventName": "ListBuckets", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "220.81.220.103", "userAgent": "[aws-cli/1.16.170 Python/3.7.4 Darwin/18.6.0 botocore/1.12.160]", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"host": ["s3.amazonaws.com"]}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "ff96f051-1302-4a3b-ae30-f818b0baefd3", "record_id": "flaws_cloudtrail:0000093:ff96f051-1302-4a3b-ae30-f818b0baefd3", "row_index": 93, "timestamp": "2019-07-18T16:43:50Z", "event_type": "ListBuckets", "event_source": "s3.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "220.81.220.103", "user_agent": "[aws-cli/1.16.170 Python/3.7.4 Darwin/18.6.0 botocore/1.12.160]", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 801, "raw_record_depth": 3, "raw_record_top_level_keys": ["additionalEventData", "awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "ff96f051-1302-4a3b-ae30-f818b0baefd3", "eventTime": "2019-07-18T16:43:50Z", "eventName": "ListBuckets", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "220.81.220.103", "userAgent": "[aws-cli/1.16.170 Python/3.7.4 Darwin/18.6.0 botocore/1.12.160]", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"host": ["s3.amazonaws.com"]}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "ff96f051-1302-4a3b-ae30-f818b0baefd3", "record_id": "flaws_cloudtrail:0000094:ff96f051-1302-4a3b-ae30-f818b0baefd3", "row_index": 94, "timestamp": "2019-07-18T16:43:50Z", "event_type": "ListBuckets", "event_source": "s3.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "220.81.220.103", "user_agent": "[aws-cli/1.16.170 Python/3.7.4 Darwin/18.6.0 botocore/1.12.160]", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 801, "raw_record_depth": 3, "raw_record_top_level_keys": ["additionalEventData", "awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "ff96f051-1302-4a3b-ae30-f818b0baefd3", "eventTime": "2019-07-18T16:43:50Z", "eventName": "ListBuckets", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "220.81.220.103", "userAgent": "[aws-cli/1.16.170 Python/3.7.4 Darwin/18.6.0 botocore/1.12.160]", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"host": ["s3.amazonaws.com"]}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "120c6a67-79fa-4b7d-901e-7ebc4b42b916", "record_id": "flaws_cloudtrail:0000095:120c6a67-79fa-4b7d-901e-7ebc4b42b916", "row_index": 95, "timestamp": "2019-07-18T16:44:44Z", "event_type": "GetBucketLifecycle", "event_source": "s3.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "220.81.220.103", "user_agent": "[aws-cli/1.16.170 Python/3.7.4 Darwin/18.6.0 botocore/1.12.160]", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 903, "raw_record_depth": 3, "raw_record_top_level_keys": ["additionalEventData", "awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "120c6a67-79fa-4b7d-901e-7ebc4b42b916", "eventTime": "2019-07-18T16:44:44Z", "eventName": "GetBucketLifecycle", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "220.81.220.103", "userAgent": "[aws-cli/1.16.170 Python/3.7.4 Darwin/18.6.0 botocore/1.12.160]", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"lifecycle": [""], "host": ["s3.us-west-2.amazonaws.com"], "bucketName": "theend-c1aad500c62e2a57cf12cebf93b282cf.flaws.cloud"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "120c6a67-79fa-4b7d-901e-7ebc4b42b916", "record_id": "flaws_cloudtrail:0000096:120c6a67-79fa-4b7d-901e-7ebc4b42b916", "row_index": 96, "timestamp": "2019-07-18T16:44:44Z", "event_type": "GetBucketLifecycle", "event_source": "s3.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "220.81.220.103", "user_agent": "[aws-cli/1.16.170 Python/3.7.4 Darwin/18.6.0 botocore/1.12.160]", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 903, "raw_record_depth": 3, "raw_record_top_level_keys": ["additionalEventData", "awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "120c6a67-79fa-4b7d-901e-7ebc4b42b916", "eventTime": "2019-07-18T16:44:44Z", "eventName": "GetBucketLifecycle", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "220.81.220.103", "userAgent": "[aws-cli/1.16.170 Python/3.7.4 Darwin/18.6.0 botocore/1.12.160]", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"lifecycle": [""], "host": ["s3.us-west-2.amazonaws.com"], "bucketName": "theend-c1aad500c62e2a57cf12cebf93b282cf.flaws.cloud"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "f483ee81-7c5e-4c66-ab09-4966f5c0f19c", "record_id": "flaws_cloudtrail:0000097:f483ee81-7c5e-4c66-ab09-4966f5c0f19c", "row_index": 97, "timestamp": "2019-07-18T16:45:03Z", "event_type": "GetCallerIdentity", "event_source": "sts.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "220.81.220.103", "user_agent": "aws-cli/1.16.170 Python/3.7.4 Darwin/18.6.0 botocore/1.12.160", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 772, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "f483ee81-7c5e-4c66-ab09-4966f5c0f19c", "eventTime": "2019-07-18T16:45:03Z", "eventName": "GetCallerIdentity", "eventSource": "sts.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "220.81.220.103", "userAgent": "aws-cli/1.16.170 Python/3.7.4 Darwin/18.6.0 botocore/1.12.160", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "responseElements": {"userId": "AIDADO2GQD0K8TEF7KW1V", "account": "811596193553", "arn": "arn:aws:iam::811596193553:user/Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "f483ee81-7c5e-4c66-ab09-4966f5c0f19c", "record_id": "flaws_cloudtrail:0000098:f483ee81-7c5e-4c66-ab09-4966f5c0f19c", "row_index": 98, "timestamp": "2019-07-18T16:45:03Z", "event_type": "GetCallerIdentity", "event_source": "sts.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "220.81.220.103", "user_agent": "aws-cli/1.16.170 Python/3.7.4 Darwin/18.6.0 botocore/1.12.160", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 772, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "f483ee81-7c5e-4c66-ab09-4966f5c0f19c", "eventTime": "2019-07-18T16:45:03Z", "eventName": "GetCallerIdentity", "eventSource": "sts.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "220.81.220.103", "userAgent": "aws-cli/1.16.170 Python/3.7.4 Darwin/18.6.0 botocore/1.12.160", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "responseElements": {"userId": "AIDADO2GQD0K8TEF7KW1V", "account": "811596193553", "arn": "arn:aws:iam::811596193553:user/Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "0384ff6d-461c-415e-80dd-17ce4c780c4e", "record_id": "flaws_cloudtrail:0000099:0384ff6d-461c-415e-80dd-17ce4c780c4e", "row_index": 99, "timestamp": "2019-07-18T16:47:14Z", "event_type": "ListGroups", "event_source": "iam.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "220.81.220.103", "user_agent": "aws-cli/1.16.170 Python/3.7.4 Darwin/18.6.0 botocore/1.12.160", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 664, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "0384ff6d-461c-415e-80dd-17ce4c780c4e", "eventTime": "2019-07-18T16:47:14Z", "eventName": "ListGroups", "eventSource": "iam.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "220.81.220.103", "userAgent": "aws-cli/1.16.170 Python/3.7.4 Darwin/18.6.0 botocore/1.12.160", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "0384ff6d-461c-415e-80dd-17ce4c780c4e", "record_id": "flaws_cloudtrail:0000100:0384ff6d-461c-415e-80dd-17ce4c780c4e", "row_index": 100, "timestamp": "2019-07-18T16:47:14Z", "event_type": "ListGroups", "event_source": "iam.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "220.81.220.103", "user_agent": "aws-cli/1.16.170 Python/3.7.4 Darwin/18.6.0 botocore/1.12.160", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 664, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "0384ff6d-461c-415e-80dd-17ce4c780c4e", "eventTime": "2019-07-18T16:47:14Z", "eventName": "ListGroups", "eventSource": "iam.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "220.81.220.103", "userAgent": "aws-cli/1.16.170 Python/3.7.4 Darwin/18.6.0 botocore/1.12.160", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "b9ea2a13-5b47-48ce-8f22-95e1dbf64abb", "record_id": "flaws_cloudtrail:0000101:b9ea2a13-5b47-48ce-8f22-95e1dbf64abb", "row_index": 101, "timestamp": "2019-07-18T16:47:19Z", "event_type": "ListUsers", "event_source": "iam.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "220.81.220.103", "user_agent": "aws-cli/1.16.170 Python/3.7.4 Darwin/18.6.0 botocore/1.12.160", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 663, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "b9ea2a13-5b47-48ce-8f22-95e1dbf64abb", "eventTime": "2019-07-18T16:47:19Z", "eventName": "ListUsers", "eventSource": "iam.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "220.81.220.103", "userAgent": "aws-cli/1.16.170 Python/3.7.4 Darwin/18.6.0 botocore/1.12.160", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "b9ea2a13-5b47-48ce-8f22-95e1dbf64abb", "record_id": "flaws_cloudtrail:0000102:b9ea2a13-5b47-48ce-8f22-95e1dbf64abb", "row_index": 102, "timestamp": "2019-07-18T16:47:19Z", "event_type": "ListUsers", "event_source": "iam.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "220.81.220.103", "user_agent": "aws-cli/1.16.170 Python/3.7.4 Darwin/18.6.0 botocore/1.12.160", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 663, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "b9ea2a13-5b47-48ce-8f22-95e1dbf64abb", "eventTime": "2019-07-18T16:47:19Z", "eventName": "ListUsers", "eventSource": "iam.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "220.81.220.103", "userAgent": "aws-cli/1.16.170 Python/3.7.4 Darwin/18.6.0 botocore/1.12.160", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "47b776b6-c536-4540-87b3-6055c8cd28ab", "record_id": "flaws_cloudtrail:0000103:47b776b6-c536-4540-87b3-6055c8cd28ab", "row_index": 103, "timestamp": "2019-07-18T16:47:28Z", "event_type": "ListPolicies", "event_source": "iam.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "220.81.220.103", "user_agent": "aws-cli/1.16.170 Python/3.7.4 Darwin/18.6.0 botocore/1.12.160", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 808, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "47b776b6-c536-4540-87b3-6055c8cd28ab", "eventTime": "2019-07-18T16:47:28Z", "eventName": "ListPolicies", "eventSource": "iam.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "220.81.220.103", "userAgent": "aws-cli/1.16.170 Python/3.7.4 Darwin/18.6.0 botocore/1.12.160", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"marker": "ACNiRw6Z4xBeaTAnGDObhRRk4gYlR6IVvxr+QcHPwg3vXXhr162WrlYgHnBKAShwpx1/LJVAsK7XsY9zqta1WFW6mSAb7damcXIKqTw7iszAgw==", "onlyAttached": false}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "c05b0425-d650-4c2d-9192-4a2c22f45591", "record_id": "flaws_cloudtrail:0000104:c05b0425-d650-4c2d-9192-4a2c22f45591", "row_index": 104, "timestamp": "2019-07-18T16:47:28Z", "event_type": "ListPolicies", "event_source": "iam.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "220.81.220.103", "user_agent": "aws-cli/1.16.170 Python/3.7.4 Darwin/18.6.0 botocore/1.12.160", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 684, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "c05b0425-d650-4c2d-9192-4a2c22f45591", "eventTime": "2019-07-18T16:47:28Z", "eventName": "ListPolicies", "eventSource": "iam.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "220.81.220.103", "userAgent": "aws-cli/1.16.170 Python/3.7.4 Darwin/18.6.0 botocore/1.12.160", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"onlyAttached": false}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "47b776b6-c536-4540-87b3-6055c8cd28ab", "record_id": "flaws_cloudtrail:0000105:47b776b6-c536-4540-87b3-6055c8cd28ab", "row_index": 105, "timestamp": "2019-07-18T16:47:28Z", "event_type": "ListPolicies", "event_source": "iam.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "220.81.220.103", "user_agent": "aws-cli/1.16.170 Python/3.7.4 Darwin/18.6.0 botocore/1.12.160", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 808, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "47b776b6-c536-4540-87b3-6055c8cd28ab", "eventTime": "2019-07-18T16:47:28Z", "eventName": "ListPolicies", "eventSource": "iam.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "220.81.220.103", "userAgent": "aws-cli/1.16.170 Python/3.7.4 Darwin/18.6.0 botocore/1.12.160", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"marker": "ACNiRw6Z4xBeaTAnGDObhRRk4gYlR6IVvxr+QcHPwg3vXXhr162WrlYgHnBKAShwpx1/LJVAsK7XsY9zqta1WFW6mSAb7damcXIKqTw7iszAgw==", "onlyAttached": false}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "c05b0425-d650-4c2d-9192-4a2c22f45591", "record_id": "flaws_cloudtrail:0000106:c05b0425-d650-4c2d-9192-4a2c22f45591", "row_index": 106, "timestamp": "2019-07-18T16:47:28Z", "event_type": "ListPolicies", "event_source": "iam.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "220.81.220.103", "user_agent": "aws-cli/1.16.170 Python/3.7.4 Darwin/18.6.0 botocore/1.12.160", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 684, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "c05b0425-d650-4c2d-9192-4a2c22f45591", "eventTime": "2019-07-18T16:47:28Z", "eventName": "ListPolicies", "eventSource": "iam.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "220.81.220.103", "userAgent": "aws-cli/1.16.170 Python/3.7.4 Darwin/18.6.0 botocore/1.12.160", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"onlyAttached": false}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "bd0c8fa8-f758-4166-a62e-deaaa46df976", "record_id": "flaws_cloudtrail:0000107:bd0c8fa8-f758-4166-a62e-deaaa46df976", "row_index": 107, "timestamp": "2019-07-18T16:47:29Z", "event_type": "ListPolicies", "event_source": "iam.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "220.81.220.103", "user_agent": "aws-cli/1.16.170 Python/3.7.4 Darwin/18.6.0 botocore/1.12.160", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 808, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "bd0c8fa8-f758-4166-a62e-deaaa46df976", "eventTime": "2019-07-18T16:47:29Z", "eventName": "ListPolicies", "eventSource": "iam.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "220.81.220.103", "userAgent": "aws-cli/1.16.170 Python/3.7.4 Darwin/18.6.0 botocore/1.12.160", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"marker": "ACl9bo0acPRUL7bIhapVexTqy0RqQVdOlz4PDqyy74lqZQkAvmRTGHyfXjZFrKr/USgIl/0JBWh4R+nJlDPhK37JYGE1+BC3/lxD5LZBmUDtNw==", "onlyAttached": false}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "bd0c8fa8-f758-4166-a62e-deaaa46df976", "record_id": "flaws_cloudtrail:0000108:bd0c8fa8-f758-4166-a62e-deaaa46df976", "row_index": 108, "timestamp": "2019-07-18T16:47:29Z", "event_type": "ListPolicies", "event_source": "iam.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "220.81.220.103", "user_agent": "aws-cli/1.16.170 Python/3.7.4 Darwin/18.6.0 botocore/1.12.160", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 808, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "bd0c8fa8-f758-4166-a62e-deaaa46df976", "eventTime": "2019-07-18T16:47:29Z", "eventName": "ListPolicies", "eventSource": "iam.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "220.81.220.103", "userAgent": "aws-cli/1.16.170 Python/3.7.4 Darwin/18.6.0 botocore/1.12.160", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"marker": "ACl9bo0acPRUL7bIhapVexTqy0RqQVdOlz4PDqyy74lqZQkAvmRTGHyfXjZFrKr/USgIl/0JBWh4R+nJlDPhK37JYGE1+BC3/lxD5LZBmUDtNw==", "onlyAttached": false}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "1c5b3c2d-9e64-4c81-96a3-246bfa76b7d8", "record_id": "flaws_cloudtrail:0000109:1c5b3c2d-9e64-4c81-96a3-246bfa76b7d8", "row_index": 109, "timestamp": "2019-07-18T16:47:30Z", "event_type": "ListPolicies", "event_source": "iam.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "220.81.220.103", "user_agent": "aws-cli/1.16.170 Python/3.7.4 Darwin/18.6.0 botocore/1.12.160", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 808, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "1c5b3c2d-9e64-4c81-96a3-246bfa76b7d8", "eventTime": "2019-07-18T16:47:30Z", "eventName": "ListPolicies", "eventSource": "iam.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "220.81.220.103", "userAgent": "aws-cli/1.16.170 Python/3.7.4 Darwin/18.6.0 botocore/1.12.160", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"marker": "ABlya7l3ozHBCuoZF7vYWQKEl+b1gmwspKT4HB7pBaVA6QgP4WK1foF7ZOU1FfN6fdverv6/b/CqgXLDrptyj2OM3ROcVH25nmlmAGfkI+us7w==", "onlyAttached": false}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "6e4a7943-d393-4f92-806f-b23e848c5279", "record_id": "flaws_cloudtrail:0000110:6e4a7943-d393-4f92-806f-b23e848c5279", "row_index": 110, "timestamp": "2019-07-18T16:47:30Z", "event_type": "ListPolicies", "event_source": "iam.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "220.81.220.103", "user_agent": "aws-cli/1.16.170 Python/3.7.4 Darwin/18.6.0 botocore/1.12.160", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 808, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "6e4a7943-d393-4f92-806f-b23e848c5279", "eventTime": "2019-07-18T16:47:30Z", "eventName": "ListPolicies", "eventSource": "iam.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "220.81.220.103", "userAgent": "aws-cli/1.16.170 Python/3.7.4 Darwin/18.6.0 botocore/1.12.160", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"marker": "ABVp1gjsuV1pllO3+IF8HAVHGzr2n9ehkXl8hyMi5SN+GZqNWz5h7ObOWXrCSNf+7oDwNl7hGh0mlwLhm9w3rIBW+dwobmNJVdHNO2HsclImtw==", "onlyAttached": false}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "1c5b3c2d-9e64-4c81-96a3-246bfa76b7d8", "record_id": "flaws_cloudtrail:0000111:1c5b3c2d-9e64-4c81-96a3-246bfa76b7d8", "row_index": 111, "timestamp": "2019-07-18T16:47:30Z", "event_type": "ListPolicies", "event_source": "iam.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "220.81.220.103", "user_agent": "aws-cli/1.16.170 Python/3.7.4 Darwin/18.6.0 botocore/1.12.160", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 808, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "1c5b3c2d-9e64-4c81-96a3-246bfa76b7d8", "eventTime": "2019-07-18T16:47:30Z", "eventName": "ListPolicies", "eventSource": "iam.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "220.81.220.103", "userAgent": "aws-cli/1.16.170 Python/3.7.4 Darwin/18.6.0 botocore/1.12.160", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"marker": "ABlya7l3ozHBCuoZF7vYWQKEl+b1gmwspKT4HB7pBaVA6QgP4WK1foF7ZOU1FfN6fdverv6/b/CqgXLDrptyj2OM3ROcVH25nmlmAGfkI+us7w==", "onlyAttached": false}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "6e4a7943-d393-4f92-806f-b23e848c5279", "record_id": "flaws_cloudtrail:0000112:6e4a7943-d393-4f92-806f-b23e848c5279", "row_index": 112, "timestamp": "2019-07-18T16:47:30Z", "event_type": "ListPolicies", "event_source": "iam.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "220.81.220.103", "user_agent": "aws-cli/1.16.170 Python/3.7.4 Darwin/18.6.0 botocore/1.12.160", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 808, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "6e4a7943-d393-4f92-806f-b23e848c5279", "eventTime": "2019-07-18T16:47:30Z", "eventName": "ListPolicies", "eventSource": "iam.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "220.81.220.103", "userAgent": "aws-cli/1.16.170 Python/3.7.4 Darwin/18.6.0 botocore/1.12.160", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"marker": "ABVp1gjsuV1pllO3+IF8HAVHGzr2n9ehkXl8hyMi5SN+GZqNWz5h7ObOWXrCSNf+7oDwNl7hGh0mlwLhm9w3rIBW+dwobmNJVdHNO2HsclImtw==", "onlyAttached": false}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "b0124e81-2f13-498e-a151-29c2d930830", "record_id": "flaws_cloudtrail:0000113:b0124e81-2f13-498e-a151-29c2d930830", "row_index": 113, "timestamp": "2019-07-18T16:47:31Z", "event_type": "ListPolicies", "event_source": "iam.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "220.81.220.103", "user_agent": "aws-cli/1.16.170 Python/3.7.4 Darwin/18.6.0 botocore/1.12.160", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 807, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "b0124e81-2f13-498e-a151-29c2d930830", "eventTime": "2019-07-18T16:47:31Z", "eventName": "ListPolicies", "eventSource": "iam.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "220.81.220.103", "userAgent": "aws-cli/1.16.170 Python/3.7.4 Darwin/18.6.0 botocore/1.12.160", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"marker": "ACprqvosznQzk6r04y2IIRSPIywWMAKXPm3l4GqmD3c4ETFW5T+iu870SkZtsaHFNHz+DC+yF94N295EpvuQ3V3CYVQETllB+ZArvnsP8yy6yA==", "onlyAttached": false}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "b0124e81-2f13-498e-a151-29c2d930830", "record_id": "flaws_cloudtrail:0000114:b0124e81-2f13-498e-a151-29c2d930830", "row_index": 114, "timestamp": "2019-07-18T16:47:31Z", "event_type": "ListPolicies", "event_source": "iam.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "220.81.220.103", "user_agent": "aws-cli/1.16.170 Python/3.7.4 Darwin/18.6.0 botocore/1.12.160", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 807, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "b0124e81-2f13-498e-a151-29c2d930830", "eventTime": "2019-07-18T16:47:31Z", "eventName": "ListPolicies", "eventSource": "iam.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "220.81.220.103", "userAgent": "aws-cli/1.16.170 Python/3.7.4 Darwin/18.6.0 botocore/1.12.160", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"marker": "ACprqvosznQzk6r04y2IIRSPIywWMAKXPm3l4GqmD3c4ETFW5T+iu870SkZtsaHFNHz+DC+yF94N295EpvuQ3V3CYVQETllB+ZArvnsP8yy6yA==", "onlyAttached": false}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "7240d281-52db-4c97-a94e-d94801fcbb4b", "record_id": "flaws_cloudtrail:0000115:7240d281-52db-4c97-a94e-d94801fcbb4b", "row_index": 115, "timestamp": "2019-07-18T16:47:43Z", "event_type": "ListPolicies", "event_source": "iam.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "220.81.220.103", "user_agent": "aws-cli/1.16.170 Python/3.7.4 Darwin/18.6.0 botocore/1.12.160", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 683, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "7240d281-52db-4c97-a94e-d94801fcbb4b", "eventTime": "2019-07-18T16:47:43Z", "eventName": "ListPolicies", "eventSource": "iam.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "220.81.220.103", "userAgent": "aws-cli/1.16.170 Python/3.7.4 Darwin/18.6.0 botocore/1.12.160", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"onlyAttached": false}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "7240d281-52db-4c97-a94e-d94801fcbb4b", "record_id": "flaws_cloudtrail:0000116:7240d281-52db-4c97-a94e-d94801fcbb4b", "row_index": 116, "timestamp": "2019-07-18T16:47:43Z", "event_type": "ListPolicies", "event_source": "iam.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "220.81.220.103", "user_agent": "aws-cli/1.16.170 Python/3.7.4 Darwin/18.6.0 botocore/1.12.160", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 683, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "7240d281-52db-4c97-a94e-d94801fcbb4b", "eventTime": "2019-07-18T16:47:43Z", "eventName": "ListPolicies", "eventSource": "iam.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "220.81.220.103", "userAgent": "aws-cli/1.16.170 Python/3.7.4 Darwin/18.6.0 botocore/1.12.160", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"onlyAttached": false}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "83168a-e63a-4be9-88fb-b75ee6628cbb", "record_id": "flaws_cloudtrail:0000117:83168a-e63a-4be9-88fb-b75ee6628cbb", "row_index": 117, "timestamp": "2019-07-18T16:47:44Z", "event_type": "ListPolicies", "event_source": "iam.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "220.81.220.103", "user_agent": "aws-cli/1.16.170 Python/3.7.4 Darwin/18.6.0 botocore/1.12.160", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 805, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "83168a-e63a-4be9-88fb-b75ee6628cbb", "eventTime": "2019-07-18T16:47:44Z", "eventName": "ListPolicies", "eventSource": "iam.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "220.81.220.103", "userAgent": "aws-cli/1.16.170 Python/3.7.4 Darwin/18.6.0 botocore/1.12.160", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"marker": "ADL1VehZnbk185ED2MP+s1MB/PQT5gmWKZqW/LUUr1s+VsLzbUjlMO+ouiYCkHj9/DRu0VvzZ3nyeT3i12uH+wGvnvGdRF7HU/4SUQ8tTXV/+A==", "onlyAttached": false}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "a4b2d92d-87d7-4555-9bba-c31af1cd48d5", "record_id": "flaws_cloudtrail:0000118:a4b2d92d-87d7-4555-9bba-c31af1cd48d5", "row_index": 118, "timestamp": "2019-07-18T16:47:44Z", "event_type": "ListPolicies", "event_source": "iam.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "220.81.220.103", "user_agent": "aws-cli/1.16.170 Python/3.7.4 Darwin/18.6.0 botocore/1.12.160", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 807, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "a4b2d92d-87d7-4555-9bba-c31af1cd48d5", "eventTime": "2019-07-18T16:47:44Z", "eventName": "ListPolicies", "eventSource": "iam.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "220.81.220.103", "userAgent": "aws-cli/1.16.170 Python/3.7.4 Darwin/18.6.0 botocore/1.12.160", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"marker": "ABNEINOYQjKoXy0IQg4Ld7lT3j0NDJjcsYNvIpp725IyFIkxIg+0n72YyCspURQBrW9WDC/Iar3MOvUhW6mOuvNvg6HChgLLX/RHqgnD+cchBw==", "onlyAttached": false}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "16d1deb2-efa2-49c8-8a76-f42b633c4efa", "record_id": "flaws_cloudtrail:0000119:16d1deb2-efa2-49c8-8a76-f42b633c4efa", "row_index": 119, "timestamp": "2019-07-18T16:47:44Z", "event_type": "ListPolicies", "event_source": "iam.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "220.81.220.103", "user_agent": "aws-cli/1.16.170 Python/3.7.4 Darwin/18.6.0 botocore/1.12.160", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 807, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "16d1deb2-efa2-49c8-8a76-f42b633c4efa", "eventTime": "2019-07-18T16:47:44Z", "eventName": "ListPolicies", "eventSource": "iam.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "220.81.220.103", "userAgent": "aws-cli/1.16.170 Python/3.7.4 Darwin/18.6.0 botocore/1.12.160", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"marker": "ABdzPpJjDdiZ/e2y6d50RTdZbZ/hl6HeZegk0EsXkCBXnOYIOVfPXYBFT0VgGuO5UXz/Ylm5jyMfdFTq0QwixPaM+LD0Ah4rTYbuaQJYpAruUQ==", "onlyAttached": false}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "83168a-e63a-4be9-88fb-b75ee6628cbb", "record_id": "flaws_cloudtrail:0000120:83168a-e63a-4be9-88fb-b75ee6628cbb", "row_index": 120, "timestamp": "2019-07-18T16:47:44Z", "event_type": "ListPolicies", "event_source": "iam.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "220.81.220.103", "user_agent": "aws-cli/1.16.170 Python/3.7.4 Darwin/18.6.0 botocore/1.12.160", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 805, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "83168a-e63a-4be9-88fb-b75ee6628cbb", "eventTime": "2019-07-18T16:47:44Z", "eventName": "ListPolicies", "eventSource": "iam.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "220.81.220.103", "userAgent": "aws-cli/1.16.170 Python/3.7.4 Darwin/18.6.0 botocore/1.12.160", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"marker": "ADL1VehZnbk185ED2MP+s1MB/PQT5gmWKZqW/LUUr1s+VsLzbUjlMO+ouiYCkHj9/DRu0VvzZ3nyeT3i12uH+wGvnvGdRF7HU/4SUQ8tTXV/+A==", "onlyAttached": false}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "a4b2d92d-87d7-4555-9bba-c31af1cd48d5", "record_id": "flaws_cloudtrail:0000121:a4b2d92d-87d7-4555-9bba-c31af1cd48d5", "row_index": 121, "timestamp": "2019-07-18T16:47:44Z", "event_type": "ListPolicies", "event_source": "iam.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "220.81.220.103", "user_agent": "aws-cli/1.16.170 Python/3.7.4 Darwin/18.6.0 botocore/1.12.160", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 807, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "a4b2d92d-87d7-4555-9bba-c31af1cd48d5", "eventTime": "2019-07-18T16:47:44Z", "eventName": "ListPolicies", "eventSource": "iam.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "220.81.220.103", "userAgent": "aws-cli/1.16.170 Python/3.7.4 Darwin/18.6.0 botocore/1.12.160", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"marker": "ABNEINOYQjKoXy0IQg4Ld7lT3j0NDJjcsYNvIpp725IyFIkxIg+0n72YyCspURQBrW9WDC/Iar3MOvUhW6mOuvNvg6HChgLLX/RHqgnD+cchBw==", "onlyAttached": false}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "16d1deb2-efa2-49c8-8a76-f42b633c4efa", "record_id": "flaws_cloudtrail:0000122:16d1deb2-efa2-49c8-8a76-f42b633c4efa", "row_index": 122, "timestamp": "2019-07-18T16:47:44Z", "event_type": "ListPolicies", "event_source": "iam.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "220.81.220.103", "user_agent": "aws-cli/1.16.170 Python/3.7.4 Darwin/18.6.0 botocore/1.12.160", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 807, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "16d1deb2-efa2-49c8-8a76-f42b633c4efa", "eventTime": "2019-07-18T16:47:44Z", "eventName": "ListPolicies", "eventSource": "iam.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "220.81.220.103", "userAgent": "aws-cli/1.16.170 Python/3.7.4 Darwin/18.6.0 botocore/1.12.160", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"marker": "ABdzPpJjDdiZ/e2y6d50RTdZbZ/hl6HeZegk0EsXkCBXnOYIOVfPXYBFT0VgGuO5UXz/Ylm5jyMfdFTq0QwixPaM+LD0Ah4rTYbuaQJYpAruUQ==", "onlyAttached": false}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "7462faef-ad05-4180-96e4-c7921d1db5b0", "record_id": "flaws_cloudtrail:0000123:7462faef-ad05-4180-96e4-c7921d1db5b0", "row_index": 123, "timestamp": "2019-07-18T16:47:45Z", "event_type": "ListPolicies", "event_source": "iam.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "220.81.220.103", "user_agent": "aws-cli/1.16.170 Python/3.7.4 Darwin/18.6.0 botocore/1.12.160", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 807, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "7462faef-ad05-4180-96e4-c7921d1db5b0", "eventTime": "2019-07-18T16:47:45Z", "eventName": "ListPolicies", "eventSource": "iam.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "220.81.220.103", "userAgent": "aws-cli/1.16.170 Python/3.7.4 Darwin/18.6.0 botocore/1.12.160", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"marker": "ACAUbpYexaPEcm7pp4iyNYZGWqS5Wi+SrGsOmqs7nmqND8bKJs1mAlu2wP2VrM3Y4a0nJaUiTr8I2Y6r77HZtZLPMhEyG11/P1kQ0qI041rM/A==", "onlyAttached": false}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "209a9e5d-9fbb-4c0b-9ac6-b6e1c778f605", "record_id": "flaws_cloudtrail:0000124:209a9e5d-9fbb-4c0b-9ac6-b6e1c778f605", "row_index": 124, "timestamp": "2019-07-18T16:47:45Z", "event_type": "ListPolicies", "event_source": "iam.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "220.81.220.103", "user_agent": "aws-cli/1.16.170 Python/3.7.4 Darwin/18.6.0 botocore/1.12.160", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 807, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "209a9e5d-9fbb-4c0b-9ac6-b6e1c778f605", "eventTime": "2019-07-18T16:47:45Z", "eventName": "ListPolicies", "eventSource": "iam.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "220.81.220.103", "userAgent": "aws-cli/1.16.170 Python/3.7.4 Darwin/18.6.0 botocore/1.12.160", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"marker": "ACOx8UuVuSUzgqTITDD/uN/QToZXjVuFhZvL5hSNefc/+oUhXqyXqoU7lgYoI94kJ0LWZ1+oZirAecHzS+knAS4uJ4ZxjVokg14Mh6OgNBqM2A==", "onlyAttached": false}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "7462faef-ad05-4180-96e4-c7921d1db5b0", "record_id": "flaws_cloudtrail:0000125:7462faef-ad05-4180-96e4-c7921d1db5b0", "row_index": 125, "timestamp": "2019-07-18T16:47:45Z", "event_type": "ListPolicies", "event_source": "iam.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "220.81.220.103", "user_agent": "aws-cli/1.16.170 Python/3.7.4 Darwin/18.6.0 botocore/1.12.160", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 807, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "7462faef-ad05-4180-96e4-c7921d1db5b0", "eventTime": "2019-07-18T16:47:45Z", "eventName": "ListPolicies", "eventSource": "iam.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "220.81.220.103", "userAgent": "aws-cli/1.16.170 Python/3.7.4 Darwin/18.6.0 botocore/1.12.160", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"marker": "ACAUbpYexaPEcm7pp4iyNYZGWqS5Wi+SrGsOmqs7nmqND8bKJs1mAlu2wP2VrM3Y4a0nJaUiTr8I2Y6r77HZtZLPMhEyG11/P1kQ0qI041rM/A==", "onlyAttached": false}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "209a9e5d-9fbb-4c0b-9ac6-b6e1c778f605", "record_id": "flaws_cloudtrail:0000126:209a9e5d-9fbb-4c0b-9ac6-b6e1c778f605", "row_index": 126, "timestamp": "2019-07-18T16:47:45Z", "event_type": "ListPolicies", "event_source": "iam.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "220.81.220.103", "user_agent": "aws-cli/1.16.170 Python/3.7.4 Darwin/18.6.0 botocore/1.12.160", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 807, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "209a9e5d-9fbb-4c0b-9ac6-b6e1c778f605", "eventTime": "2019-07-18T16:47:45Z", "eventName": "ListPolicies", "eventSource": "iam.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "220.81.220.103", "userAgent": "aws-cli/1.16.170 Python/3.7.4 Darwin/18.6.0 botocore/1.12.160", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"marker": "ACOx8UuVuSUzgqTITDD/uN/QToZXjVuFhZvL5hSNefc/+oUhXqyXqoU7lgYoI94kJ0LWZ1+oZirAecHzS+knAS4uJ4ZxjVokg14Mh6OgNBqM2A==", "onlyAttached": false}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "27d10a89-02d1-481e-8a6f-a153ac50f8d1", "record_id": "flaws_cloudtrail:0000127:27d10a89-02d1-481e-8a6f-a153ac50f8d1", "row_index": 127, "timestamp": "2019-07-18T16:49:10Z", "event_type": "ListUserPolicies", "event_source": "iam.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "220.81.220.103", "user_agent": "aws-cli/1.16.170 Python/3.7.4 Darwin/18.6.0 botocore/1.12.160", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 686, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "27d10a89-02d1-481e-8a6f-a153ac50f8d1", "eventTime": "2019-07-18T16:49:10Z", "eventName": "ListUserPolicies", "eventSource": "iam.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "220.81.220.103", "userAgent": "aws-cli/1.16.170 Python/3.7.4 Darwin/18.6.0 botocore/1.12.160", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"userName": "Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "27d10a89-02d1-481e-8a6f-a153ac50f8d1", "record_id": "flaws_cloudtrail:0000128:27d10a89-02d1-481e-8a6f-a153ac50f8d1", "row_index": 128, "timestamp": "2019-07-18T16:49:10Z", "event_type": "ListUserPolicies", "event_source": "iam.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "220.81.220.103", "user_agent": "aws-cli/1.16.170 Python/3.7.4 Darwin/18.6.0 botocore/1.12.160", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 686, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "27d10a89-02d1-481e-8a6f-a153ac50f8d1", "eventTime": "2019-07-18T16:49:10Z", "eventName": "ListUserPolicies", "eventSource": "iam.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "220.81.220.103", "userAgent": "aws-cli/1.16.170 Python/3.7.4 Darwin/18.6.0 botocore/1.12.160", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"userName": "Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "2835ed8a-3e0b-4b19-8792-9b20bbefbfb2", "record_id": "flaws_cloudtrail:0000129:2835ed8a-3e0b-4b19-8792-9b20bbefbfb2", "row_index": 129, "timestamp": "2019-07-18T16:49:28Z", "event_type": "ListUserTags", "event_source": "iam.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "220.81.220.103", "user_agent": "aws-cli/1.16.170 Python/3.7.4 Darwin/18.6.0 botocore/1.12.160", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 683, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "2835ed8a-3e0b-4b19-8792-9b20bbefbfb2", "eventTime": "2019-07-18T16:49:28Z", "eventName": "ListUserTags", "eventSource": "iam.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "220.81.220.103", "userAgent": "aws-cli/1.16.170 Python/3.7.4 Darwin/18.6.0 botocore/1.12.160", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"userName": "Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "2835ed8a-3e0b-4b19-8792-9b20bbefbfb2", "record_id": "flaws_cloudtrail:0000130:2835ed8a-3e0b-4b19-8792-9b20bbefbfb2", "row_index": 130, "timestamp": "2019-07-18T16:49:28Z", "event_type": "ListUserTags", "event_source": "iam.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "220.81.220.103", "user_agent": "aws-cli/1.16.170 Python/3.7.4 Darwin/18.6.0 botocore/1.12.160", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 683, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "2835ed8a-3e0b-4b19-8792-9b20bbefbfb2", "eventTime": "2019-07-18T16:49:28Z", "eventName": "ListUserTags", "eventSource": "iam.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "220.81.220.103", "userAgent": "aws-cli/1.16.170 Python/3.7.4 Darwin/18.6.0 botocore/1.12.160", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"userName": "Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "cadd5587-417f-4724-a526-d3cae7794af2", "record_id": "flaws_cloudtrail:0000131:cadd5587-417f-4724-a526-d3cae7794af2", "row_index": 131, "timestamp": "2019-07-18T16:49:45Z", "event_type": "ListGroupsForUser", "event_source": "iam.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "220.81.220.103", "user_agent": "aws-cli/1.16.170 Python/3.7.4 Darwin/18.6.0 botocore/1.12.160", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 688, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "cadd5587-417f-4724-a526-d3cae7794af2", "eventTime": "2019-07-18T16:49:45Z", "eventName": "ListGroupsForUser", "eventSource": "iam.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "220.81.220.103", "userAgent": "aws-cli/1.16.170 Python/3.7.4 Darwin/18.6.0 botocore/1.12.160", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"userName": "Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "cadd5587-417f-4724-a526-d3cae7794af2", "record_id": "flaws_cloudtrail:0000132:cadd5587-417f-4724-a526-d3cae7794af2", "row_index": 132, "timestamp": "2019-07-18T16:49:45Z", "event_type": "ListGroupsForUser", "event_source": "iam.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "220.81.220.103", "user_agent": "aws-cli/1.16.170 Python/3.7.4 Darwin/18.6.0 botocore/1.12.160", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 688, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "cadd5587-417f-4724-a526-d3cae7794af2", "eventTime": "2019-07-18T16:49:45Z", "eventName": "ListGroupsForUser", "eventSource": "iam.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "220.81.220.103", "userAgent": "aws-cli/1.16.170 Python/3.7.4 Darwin/18.6.0 botocore/1.12.160", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"userName": "Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "bcf082494-79a7-49b7-b45f-07dcd74e35bf", "record_id": "flaws_cloudtrail:0000133:bcf082494-79a7-49b7-b45f-07dcd74e35bf", "row_index": 133, "timestamp": "2019-07-18T16:50:11Z", "event_type": "ListRolePolicies", "event_source": "iam.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "220.81.220.103", "user_agent": "aws-cli/1.16.170 Python/3.7.4 Darwin/18.6.0 botocore/1.12.160", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 688, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "bcf082494-79a7-49b7-b45f-07dcd74e35bf", "eventTime": "2019-07-18T16:50:11Z", "eventName": "ListRolePolicies", "eventSource": "iam.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "220.81.220.103", "userAgent": "aws-cli/1.16.170 Python/3.7.4 Darwin/18.6.0 botocore/1.12.160", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"roleName": "Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "bcf082494-79a7-49b7-b45f-07dcd74e35bf", "record_id": "flaws_cloudtrail:0000134:bcf082494-79a7-49b7-b45f-07dcd74e35bf", "row_index": 134, "timestamp": "2019-07-18T16:50:11Z", "event_type": "ListRolePolicies", "event_source": "iam.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "220.81.220.103", "user_agent": "aws-cli/1.16.170 Python/3.7.4 Darwin/18.6.0 botocore/1.12.160", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 688, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "bcf082494-79a7-49b7-b45f-07dcd74e35bf", "eventTime": "2019-07-18T16:50:11Z", "eventName": "ListRolePolicies", "eventSource": "iam.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "220.81.220.103", "userAgent": "aws-cli/1.16.170 Python/3.7.4 Darwin/18.6.0 botocore/1.12.160", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"roleName": "Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "609f680b-1a68-4b16-96d5-34dab7f27da8", "record_id": "flaws_cloudtrail:0000135:609f680b-1a68-4b16-96d5-34dab7f27da8", "row_index": 135, "timestamp": "2019-07-18T16:50:20Z", "event_type": "ListRolePolicies", "event_source": "iam.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "220.81.220.103", "user_agent": "aws-cli/1.16.170 Python/3.7.4 Darwin/18.6.0 botocore/1.12.160", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 779, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "609f680b-1a68-4b16-96d5-34dab7f27da8", "eventTime": "2019-07-18T16:50:20Z", "eventName": "ListRolePolicies", "eventSource": "iam.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "220.81.220.103", "userAgent": "aws-cli/1.16.170 Python/3.7.4 Darwin/18.6.0 botocore/1.12.160", "awsRegion": "us-east-1", "errorCode": "NoSuchEntityException", "errorMessage": "The role with name asdf cannot be found.", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"roleName": "asdf"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "609f680b-1a68-4b16-96d5-34dab7f27da8", "record_id": "flaws_cloudtrail:0000136:609f680b-1a68-4b16-96d5-34dab7f27da8", "row_index": 136, "timestamp": "2019-07-18T16:50:20Z", "event_type": "ListRolePolicies", "event_source": "iam.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "220.81.220.103", "user_agent": "aws-cli/1.16.170 Python/3.7.4 Darwin/18.6.0 botocore/1.12.160", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 779, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "609f680b-1a68-4b16-96d5-34dab7f27da8", "eventTime": "2019-07-18T16:50:20Z", "eventName": "ListRolePolicies", "eventSource": "iam.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "220.81.220.103", "userAgent": "aws-cli/1.16.170 Python/3.7.4 Darwin/18.6.0 botocore/1.12.160", "awsRegion": "us-east-1", "errorCode": "NoSuchEntityException", "errorMessage": "The role with name asdf cannot be found.", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"roleName": "asdf"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "a072783e9-590e-4571-9af0-ab244d4803f4", "record_id": "flaws_cloudtrail:0000137:a072783e9-590e-4571-9af0-ab244d4803f4", "row_index": 137, "timestamp": "2019-07-18T16:50:59Z", "event_type": "ListAttachedUserPolicies", "event_source": "iam.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "220.81.220.103", "user_agent": "aws-cli/1.16.170 Python/3.7.4 Darwin/18.6.0 botocore/1.12.160", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 694, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "a072783e9-590e-4571-9af0-ab244d4803f4", "eventTime": "2019-07-18T16:50:59Z", "eventName": "ListAttachedUserPolicies", "eventSource": "iam.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "220.81.220.103", "userAgent": "aws-cli/1.16.170 Python/3.7.4 Darwin/18.6.0 botocore/1.12.160", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"userName": "Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "a072783e9-590e-4571-9af0-ab244d4803f4", "record_id": "flaws_cloudtrail:0000138:a072783e9-590e-4571-9af0-ab244d4803f4", "row_index": 138, "timestamp": "2019-07-18T16:50:59Z", "event_type": "ListAttachedUserPolicies", "event_source": "iam.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "220.81.220.103", "user_agent": "aws-cli/1.16.170 Python/3.7.4 Darwin/18.6.0 botocore/1.12.160", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 694, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "a072783e9-590e-4571-9af0-ab244d4803f4", "eventTime": "2019-07-18T16:50:59Z", "eventName": "ListAttachedUserPolicies", "eventSource": "iam.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "220.81.220.103", "userAgent": "aws-cli/1.16.170 Python/3.7.4 Darwin/18.6.0 botocore/1.12.160", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"userName": "Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "c5292f0c-945f-4266-b511-44caa655db75", "record_id": "flaws_cloudtrail:0000139:c5292f0c-945f-4266-b511-44caa655db75", "row_index": 139, "timestamp": "2019-07-18T16:51:26Z", "event_type": "GetPolicy", "event_source": "iam.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "220.81.220.103", "user_agent": "aws-cli/1.16.170 Python/3.7.4 Darwin/18.6.0 botocore/1.12.160", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 724, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "c5292f0c-945f-4266-b511-44caa655db75", "eventTime": "2019-07-18T16:51:26Z", "eventName": "GetPolicy", "eventSource": "iam.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "220.81.220.103", "userAgent": "aws-cli/1.16.170 Python/3.7.4 Darwin/18.6.0 botocore/1.12.160", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"policyArn": "arn:aws:iam::811596193553:policy/list_apigateways"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "c5292f0c-945f-4266-b511-44caa655db75", "record_id": "flaws_cloudtrail:0000140:c5292f0c-945f-4266-b511-44caa655db75", "row_index": 140, "timestamp": "2019-07-18T16:51:26Z", "event_type": "GetPolicy", "event_source": "iam.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "220.81.220.103", "user_agent": "aws-cli/1.16.170 Python/3.7.4 Darwin/18.6.0 botocore/1.12.160", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 724, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "c5292f0c-945f-4266-b511-44caa655db75", "eventTime": "2019-07-18T16:51:26Z", "eventName": "GetPolicy", "eventSource": "iam.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "220.81.220.103", "userAgent": "aws-cli/1.16.170 Python/3.7.4 Darwin/18.6.0 botocore/1.12.160", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"policyArn": "arn:aws:iam::811596193553:policy/list_apigateways"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "816a6d64-9361-4754-907d-0119e7345d8f", "record_id": "flaws_cloudtrail:0000141:816a6d64-9361-4754-907d-0119e7345d8f", "row_index": 141, "timestamp": "2019-07-18T16:53:14Z", "event_type": "GetPolicyVersion", "event_source": "iam.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "220.81.220.103", "user_agent": "aws-cli/1.16.170 Python/3.7.4 Darwin/18.6.0 botocore/1.12.160", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 748, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "816a6d64-9361-4754-907d-0119e7345d8f", "eventTime": "2019-07-18T16:53:14Z", "eventName": "GetPolicyVersion", "eventSource": "iam.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "220.81.220.103", "userAgent": "aws-cli/1.16.170 Python/3.7.4 Darwin/18.6.0 botocore/1.12.160", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"policyArn": "arn:aws:iam::811596193553:policy/list_apigateways", "versionId": "v4"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "816a6d64-9361-4754-907d-0119e7345d8f", "record_id": "flaws_cloudtrail:0000142:816a6d64-9361-4754-907d-0119e7345d8f", "row_index": 142, "timestamp": "2019-07-18T16:53:14Z", "event_type": "GetPolicyVersion", "event_source": "iam.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "220.81.220.103", "user_agent": "aws-cli/1.16.170 Python/3.7.4 Darwin/18.6.0 botocore/1.12.160", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 748, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "816a6d64-9361-4754-907d-0119e7345d8f", "eventTime": "2019-07-18T16:53:14Z", "eventName": "GetPolicyVersion", "eventSource": "iam.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "220.81.220.103", "userAgent": "aws-cli/1.16.170 Python/3.7.4 Darwin/18.6.0 botocore/1.12.160", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"policyArn": "arn:aws:iam::811596193553:policy/list_apigateways", "versionId": "v4"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "b3f88c09-5664-4db3-8d75-922c997f61e2", "record_id": "flaws_cloudtrail:0000143:b3f88c09-5664-4db3-8d75-922c997f61e2", "row_index": 143, "timestamp": "2019-07-18T16:53:50Z", "event_type": "GetPolicy", "event_source": "iam.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "220.81.220.103", "user_agent": "aws-cli/1.16.170 Python/3.7.4 Darwin/18.6.0 botocore/1.12.160", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 724, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "b3f88c09-5664-4db3-8d75-922c997f61e2", "eventTime": "2019-07-18T16:53:50Z", "eventName": "GetPolicy", "eventSource": "iam.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "220.81.220.103", "userAgent": "aws-cli/1.16.170 Python/3.7.4 Darwin/18.6.0 botocore/1.12.160", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"policyArn": "arn:aws:iam::811596193553:policy/MySecurityAudit"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "b3f88c09-5664-4db3-8d75-922c997f61e2", "record_id": "flaws_cloudtrail:0000144:b3f88c09-5664-4db3-8d75-922c997f61e2", "row_index": 144, "timestamp": "2019-07-18T16:53:50Z", "event_type": "GetPolicy", "event_source": "iam.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "220.81.220.103", "user_agent": "aws-cli/1.16.170 Python/3.7.4 Darwin/18.6.0 botocore/1.12.160", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 724, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "b3f88c09-5664-4db3-8d75-922c997f61e2", "eventTime": "2019-07-18T16:53:50Z", "eventName": "GetPolicy", "eventSource": "iam.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "220.81.220.103", "userAgent": "aws-cli/1.16.170 Python/3.7.4 Darwin/18.6.0 botocore/1.12.160", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"policyArn": "arn:aws:iam::811596193553:policy/MySecurityAudit"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "fbfe4327-8956-46ac-baf5-f86c8ef8f7d8", "record_id": "flaws_cloudtrail:0000145:fbfe4327-8956-46ac-baf5-f86c8ef8f7d8", "row_index": 145, "timestamp": "2019-07-18T16:54:10Z", "event_type": "GetPolicyVersion", "event_source": "iam.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "220.81.220.103", "user_agent": "aws-cli/1.16.170 Python/3.7.4 Darwin/18.6.0 botocore/1.12.160", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 747, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "fbfe4327-8956-46ac-baf5-f86c8ef8f7d8", "eventTime": "2019-07-18T16:54:10Z", "eventName": "GetPolicyVersion", "eventSource": "iam.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "220.81.220.103", "userAgent": "aws-cli/1.16.170 Python/3.7.4 Darwin/18.6.0 botocore/1.12.160", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"policyArn": "arn:aws:iam::811596193553:policy/MySecurityAudit", "versionId": "v1"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "fbfe4327-8956-46ac-baf5-f86c8ef8f7d8", "record_id": "flaws_cloudtrail:0000146:fbfe4327-8956-46ac-baf5-f86c8ef8f7d8", "row_index": 146, "timestamp": "2019-07-18T16:54:10Z", "event_type": "GetPolicyVersion", "event_source": "iam.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "220.81.220.103", "user_agent": "aws-cli/1.16.170 Python/3.7.4 Darwin/18.6.0 botocore/1.12.160", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 747, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "fbfe4327-8956-46ac-baf5-f86c8ef8f7d8", "eventTime": "2019-07-18T16:54:10Z", "eventName": "GetPolicyVersion", "eventSource": "iam.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "220.81.220.103", "userAgent": "aws-cli/1.16.170 Python/3.7.4 Darwin/18.6.0 botocore/1.12.160", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"policyArn": "arn:aws:iam::811596193553:policy/MySecurityAudit", "versionId": "v1"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "f5932a3b-d897-4e37-a2d8-5a9a3ff46f85", "record_id": "flaws_cloudtrail:0000147:f5932a3b-d897-4e37-a2d8-5a9a3ff46f85", "row_index": 147, "timestamp": "2019-07-18T16:56:31Z", "event_type": "GetApiKeys", "event_source": "apigateway.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "220.81.220.103", "user_agent": "aws-cli/1.16.170 Python/3.7.4 Darwin/18.6.0 botocore/1.12.160", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 856, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "f5932a3b-d897-4e37-a2d8-5a9a3ff46f85", "eventTime": "2019-07-18T16:56:31Z", "eventName": "GetApiKeys", "eventSource": "apigateway.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "220.81.220.103", "userAgent": "aws-cli/1.16.170 Python/3.7.4 Darwin/18.6.0 botocore/1.12.160", "awsRegion": "us-east-1", "errorCode": "AccessDenied", "errorMessage": "User: arn:aws:iam::811596193553:user/Level6 is not authorized to perform: apigateway:GET on resource: arn:aws:apigateway:us-east-1::/apikeys", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "f5932a3b-d897-4e37-a2d8-5a9a3ff46f85", "record_id": "flaws_cloudtrail:0000148:f5932a3b-d897-4e37-a2d8-5a9a3ff46f85", "row_index": 148, "timestamp": "2019-07-18T16:56:31Z", "event_type": "GetApiKeys", "event_source": "apigateway.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "220.81.220.103", "user_agent": "aws-cli/1.16.170 Python/3.7.4 Darwin/18.6.0 botocore/1.12.160", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 856, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "f5932a3b-d897-4e37-a2d8-5a9a3ff46f85", "eventTime": "2019-07-18T16:56:31Z", "eventName": "GetApiKeys", "eventSource": "apigateway.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "220.81.220.103", "userAgent": "aws-cli/1.16.170 Python/3.7.4 Darwin/18.6.0 botocore/1.12.160", "awsRegion": "us-east-1", "errorCode": "AccessDenied", "errorMessage": "User: arn:aws:iam::811596193553:user/Level6 is not authorized to perform: apigateway:GET on resource: arn:aws:apigateway:us-east-1::/apikeys", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "1bfb019a-e524-48a1-8813-b2009a93f48f", "record_id": "flaws_cloudtrail:0000149:1bfb019a-e524-48a1-8813-b2009a93f48f", "row_index": 149, "timestamp": "2019-07-18T16:56:57Z", "event_type": "GetRestApis", "event_source": "apigateway.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "220.81.220.103", "user_agent": "aws-cli/1.16.170 Python/3.7.4 Darwin/18.6.0 botocore/1.12.160", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 858, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "1bfb019a-e524-48a1-8813-b2009a93f48f", "eventTime": "2019-07-18T16:56:57Z", "eventName": "GetRestApis", "eventSource": "apigateway.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "220.81.220.103", "userAgent": "aws-cli/1.16.170 Python/3.7.4 Darwin/18.6.0 botocore/1.12.160", "awsRegion": "us-east-1", "errorCode": "AccessDenied", "errorMessage": "User: arn:aws:iam::811596193553:user/Level6 is not authorized to perform: apigateway:GET on resource: arn:aws:apigateway:us-east-1::/restapis", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "1bfb019a-e524-48a1-8813-b2009a93f48f", "record_id": "flaws_cloudtrail:0000150:1bfb019a-e524-48a1-8813-b2009a93f48f", "row_index": 150, "timestamp": "2019-07-18T16:56:57Z", "event_type": "GetRestApis", "event_source": "apigateway.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "220.81.220.103", "user_agent": "aws-cli/1.16.170 Python/3.7.4 Darwin/18.6.0 botocore/1.12.160", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 858, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "1bfb019a-e524-48a1-8813-b2009a93f48f", "eventTime": "2019-07-18T16:56:57Z", "eventName": "GetRestApis", "eventSource": "apigateway.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "220.81.220.103", "userAgent": "aws-cli/1.16.170 Python/3.7.4 Darwin/18.6.0 botocore/1.12.160", "awsRegion": "us-east-1", "errorCode": "AccessDenied", "errorMessage": "User: arn:aws:iam::811596193553:user/Level6 is not authorized to perform: apigateway:GET on resource: arn:aws:apigateway:us-east-1::/restapis", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "4ad2bb4e-a5f7-4552-a3f6-485c960ef481", "record_id": "flaws_cloudtrail:0000151:4ad2bb4e-a5f7-4552-a3f6-485c960ef481", "row_index": 151, "timestamp": "2019-07-18T16:57:25Z", "event_type": "GetRestApis", "event_source": "apigateway.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "220.81.220.103", "user_agent": "aws-cli/1.16.170 Python/3.7.4 Darwin/18.6.0 botocore/1.12.160", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 858, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "4ad2bb4e-a5f7-4552-a3f6-485c960ef481", "eventTime": "2019-07-18T16:57:25Z", "eventName": "GetRestApis", "eventSource": "apigateway.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "220.81.220.103", "userAgent": "aws-cli/1.16.170 Python/3.7.4 Darwin/18.6.0 botocore/1.12.160", "awsRegion": "us-west-2", "errorCode": "AccessDenied", "errorMessage": "User: arn:aws:iam::811596193553:user/Level6 is not authorized to perform: apigateway:GET on resource: arn:aws:apigateway:us-west-2::/restapis", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "4ad2bb4e-a5f7-4552-a3f6-485c960ef481", "record_id": "flaws_cloudtrail:0000152:4ad2bb4e-a5f7-4552-a3f6-485c960ef481", "row_index": 152, "timestamp": "2019-07-18T16:57:25Z", "event_type": "GetRestApis", "event_source": "apigateway.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "220.81.220.103", "user_agent": "aws-cli/1.16.170 Python/3.7.4 Darwin/18.6.0 botocore/1.12.160", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 858, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "4ad2bb4e-a5f7-4552-a3f6-485c960ef481", "eventTime": "2019-07-18T16:57:25Z", "eventName": "GetRestApis", "eventSource": "apigateway.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "220.81.220.103", "userAgent": "aws-cli/1.16.170 Python/3.7.4 Darwin/18.6.0 botocore/1.12.160", "awsRegion": "us-west-2", "errorCode": "AccessDenied", "errorMessage": "User: arn:aws:iam::811596193553:user/Level6 is not authorized to perform: apigateway:GET on resource: arn:aws:apigateway:us-west-2::/restapis", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "01cd19c9-9235-480b-9082-9d891c30a1aa", "record_id": "flaws_cloudtrail:0000153:01cd19c9-9235-480b-9082-9d891c30a1aa", "row_index": 153, "timestamp": "2019-07-18T16:58:06Z", "event_type": "GetRestApis", "event_source": "apigateway.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "220.81.220.103", "user_agent": "aws-cli/1.16.170 Python/3.7.4 Darwin/18.6.0 botocore/1.12.160", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 858, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "01cd19c9-9235-480b-9082-9d891c30a1aa", "eventTime": "2019-07-18T16:58:06Z", "eventName": "GetRestApis", "eventSource": "apigateway.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "220.81.220.103", "userAgent": "aws-cli/1.16.170 Python/3.7.4 Darwin/18.6.0 botocore/1.12.160", "awsRegion": "us-west-2", "errorCode": "AccessDenied", "errorMessage": "User: arn:aws:iam::811596193553:user/Level6 is not authorized to perform: apigateway:GET on resource: arn:aws:apigateway:us-west-2::/restapis", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "01cd19c9-9235-480b-9082-9d891c30a1aa", "record_id": "flaws_cloudtrail:0000154:01cd19c9-9235-480b-9082-9d891c30a1aa", "row_index": 154, "timestamp": "2019-07-18T16:58:06Z", "event_type": "GetRestApis", "event_source": "apigateway.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "220.81.220.103", "user_agent": "aws-cli/1.16.170 Python/3.7.4 Darwin/18.6.0 botocore/1.12.160", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 858, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "01cd19c9-9235-480b-9082-9d891c30a1aa", "eventTime": "2019-07-18T16:58:06Z", "eventName": "GetRestApis", "eventSource": "apigateway.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "220.81.220.103", "userAgent": "aws-cli/1.16.170 Python/3.7.4 Darwin/18.6.0 botocore/1.12.160", "awsRegion": "us-west-2", "errorCode": "AccessDenied", "errorMessage": "User: arn:aws:iam::811596193553:user/Level6 is not authorized to perform: apigateway:GET on resource: arn:aws:apigateway:us-west-2::/restapis", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "64eb1585-e1f1-407d-a412-e0d73a51e39d", "record_id": "flaws_cloudtrail:0000155:64eb1585-e1f1-407d-a412-e0d73a51e39d", "row_index": 155, "timestamp": "2019-07-18T16:58:56Z", "event_type": "GetRestApis", "event_source": "apigateway.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "220.81.220.103", "user_agent": "aws-cli/1.16.170 Python/3.7.4 Darwin/18.6.0 botocore/1.12.160", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 858, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "64eb1585-e1f1-407d-a412-e0d73a51e39d", "eventTime": "2019-07-18T16:58:56Z", "eventName": "GetRestApis", "eventSource": "apigateway.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "220.81.220.103", "userAgent": "aws-cli/1.16.170 Python/3.7.4 Darwin/18.6.0 botocore/1.12.160", "awsRegion": "us-west-2", "errorCode": "AccessDenied", "errorMessage": "User: arn:aws:iam::811596193553:user/Level6 is not authorized to perform: apigateway:GET on resource: arn:aws:apigateway:us-west-2::/restapis", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "64eb1585-e1f1-407d-a412-e0d73a51e39d", "record_id": "flaws_cloudtrail:0000156:64eb1585-e1f1-407d-a412-e0d73a51e39d", "row_index": 156, "timestamp": "2019-07-18T16:58:56Z", "event_type": "GetRestApis", "event_source": "apigateway.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "220.81.220.103", "user_agent": "aws-cli/1.16.170 Python/3.7.4 Darwin/18.6.0 botocore/1.12.160", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 858, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "64eb1585-e1f1-407d-a412-e0d73a51e39d", "eventTime": "2019-07-18T16:58:56Z", "eventName": "GetRestApis", "eventSource": "apigateway.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "220.81.220.103", "userAgent": "aws-cli/1.16.170 Python/3.7.4 Darwin/18.6.0 botocore/1.12.160", "awsRegion": "us-west-2", "errorCode": "AccessDenied", "errorMessage": "User: arn:aws:iam::811596193553:user/Level6 is not authorized to perform: apigateway:GET on resource: arn:aws:apigateway:us-west-2::/restapis", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "0baad553-39fa-47eb-85ea-555d31b93a58", "record_id": "flaws_cloudtrail:0000157:0baad553-39fa-47eb-85ea-555d31b93a58", "row_index": 157, "timestamp": "2019-07-18T17:00:03Z", "event_type": "GetRestApi", "event_source": "apigateway.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "220.81.220.103", "user_agent": "aws-cli/1.16.170 Python/3.7.4 Darwin/18.6.0 botocore/1.12.160", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 820, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "readOnly", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "0baad553-39fa-47eb-85ea-555d31b93a58", "eventTime": "2019-07-18T17:00:03Z", "eventName": "GetRestApi", "eventSource": "apigateway.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "220.81.220.103", "userAgent": "aws-cli/1.16.170 Python/3.7.4 Darwin/18.6.0 botocore/1.12.160", "awsRegion": "us-west-2", "errorCode": "NotFoundException", "errorMessage": "Invalid API identifier specified 811596193553:asdf", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"restApiId": "asdf", "template": false}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "0baad553-39fa-47eb-85ea-555d31b93a58", "record_id": "flaws_cloudtrail:0000158:0baad553-39fa-47eb-85ea-555d31b93a58", "row_index": 158, "timestamp": "2019-07-18T17:00:03Z", "event_type": "GetRestApi", "event_source": "apigateway.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "220.81.220.103", "user_agent": "aws-cli/1.16.170 Python/3.7.4 Darwin/18.6.0 botocore/1.12.160", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 820, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "readOnly", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "0baad553-39fa-47eb-85ea-555d31b93a58", "eventTime": "2019-07-18T17:00:03Z", "eventName": "GetRestApi", "eventSource": "apigateway.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "220.81.220.103", "userAgent": "aws-cli/1.16.170 Python/3.7.4 Darwin/18.6.0 botocore/1.12.160", "awsRegion": "us-west-2", "errorCode": "NotFoundException", "errorMessage": "Invalid API identifier specified 811596193553:asdf", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"restApiId": "asdf", "template": false}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "617e25c3-5a62-4ee4-b7c9-081b88a62d8f", "record_id": "flaws_cloudtrail:0000159:617e25c3-5a62-4ee4-b7c9-081b88a62d8f", "row_index": 159, "timestamp": "2019-07-18T17:00:18Z", "event_type": "GetRestApi", "event_source": "apigateway.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "220.81.220.103", "user_agent": "aws-cli/1.16.170 Python/3.7.4 Darwin/18.6.0 botocore/1.12.160", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 814, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "readOnly", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "617e25c3-5a62-4ee4-b7c9-081b88a62d8f", "eventTime": "2019-07-18T17:00:18Z", "eventName": "GetRestApi", "eventSource": "apigateway.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "220.81.220.103", "userAgent": "aws-cli/1.16.170 Python/3.7.4 Darwin/18.6.0 botocore/1.12.160", "awsRegion": "us-west-2", "errorCode": "NotFoundException", "errorMessage": "Invalid API identifier specified 811596193553:*", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"restApiId": "*", "template": false}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "617e25c3-5a62-4ee4-b7c9-081b88a62d8f", "record_id": "flaws_cloudtrail:0000160:617e25c3-5a62-4ee4-b7c9-081b88a62d8f", "row_index": 160, "timestamp": "2019-07-18T17:00:18Z", "event_type": "GetRestApi", "event_source": "apigateway.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "220.81.220.103", "user_agent": "aws-cli/1.16.170 Python/3.7.4 Darwin/18.6.0 botocore/1.12.160", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 814, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "readOnly", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "617e25c3-5a62-4ee4-b7c9-081b88a62d8f", "eventTime": "2019-07-18T17:00:18Z", "eventName": "GetRestApi", "eventSource": "apigateway.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "220.81.220.103", "userAgent": "aws-cli/1.16.170 Python/3.7.4 Darwin/18.6.0 botocore/1.12.160", "awsRegion": "us-west-2", "errorCode": "NotFoundException", "errorMessage": "Invalid API identifier specified 811596193553:*", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"restApiId": "*", "template": false}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "f16ac07e-00d8-4cec-b8ec-f66b9ed4c3be", "record_id": "flaws_cloudtrail:0000161:f16ac07e-00d8-4cec-b8ec-f66b9ed4c3be", "row_index": 161, "timestamp": "2019-07-18T17:00:27Z", "event_type": "GetRestApi", "event_source": "apigateway.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "220.81.220.103", "user_agent": "aws-cli/1.16.170 Python/3.7.4 Darwin/18.6.0 botocore/1.12.160", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 824, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "readOnly", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "f16ac07e-00d8-4cec-b8ec-f66b9ed4c3be", "eventTime": "2019-07-18T17:00:27Z", "eventName": "GetRestApi", "eventSource": "apigateway.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "220.81.220.103", "userAgent": "aws-cli/1.16.170 Python/3.7.4 Darwin/18.6.0 botocore/1.12.160", "awsRegion": "us-west-2", "errorCode": "NotFoundException", "errorMessage": "Invalid API identifier specified 811596193553:TheEnd", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"restApiId": "TheEnd", "template": false}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "f16ac07e-00d8-4cec-b8ec-f66b9ed4c3be", "record_id": "flaws_cloudtrail:0000162:f16ac07e-00d8-4cec-b8ec-f66b9ed4c3be", "row_index": 162, "timestamp": "2019-07-18T17:00:27Z", "event_type": "GetRestApi", "event_source": "apigateway.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "220.81.220.103", "user_agent": "aws-cli/1.16.170 Python/3.7.4 Darwin/18.6.0 botocore/1.12.160", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 824, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "readOnly", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "f16ac07e-00d8-4cec-b8ec-f66b9ed4c3be", "eventTime": "2019-07-18T17:00:27Z", "eventName": "GetRestApi", "eventSource": "apigateway.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "220.81.220.103", "userAgent": "aws-cli/1.16.170 Python/3.7.4 Darwin/18.6.0 botocore/1.12.160", "awsRegion": "us-west-2", "errorCode": "NotFoundException", "errorMessage": "Invalid API identifier specified 811596193553:TheEnd", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"restApiId": "TheEnd", "template": false}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "9975c1ff-e27e-49ad-a9fc-701956339126", "record_id": "flaws_cloudtrail:0000163:9975c1ff-e27e-49ad-a9fc-701956339126", "row_index": 163, "timestamp": "2019-07-18T17:01:28Z", "event_type": "ListHostedZones", "event_source": "route53.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "220.81.220.103", "user_agent": "aws-cli/1.16.170 Python/3.7.4 Darwin/18.6.0 botocore/1.12.160", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 699, "raw_record_depth": 2, "raw_record_top_level_keys": ["apiVersion", "awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "9975c1ff-e27e-49ad-a9fc-701956339126", "eventTime": "2019-07-18T17:01:28Z", "eventName": "ListHostedZones", "eventSource": "route53.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "220.81.220.103", "userAgent": "aws-cli/1.16.170 Python/3.7.4 Darwin/18.6.0 botocore/1.12.160", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "9975c1ff-e27e-49ad-a9fc-701956339126", "record_id": "flaws_cloudtrail:0000164:9975c1ff-e27e-49ad-a9fc-701956339126", "row_index": 164, "timestamp": "2019-07-18T17:01:28Z", "event_type": "ListHostedZones", "event_source": "route53.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "220.81.220.103", "user_agent": "aws-cli/1.16.170 Python/3.7.4 Darwin/18.6.0 botocore/1.12.160", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 699, "raw_record_depth": 2, "raw_record_top_level_keys": ["apiVersion", "awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "9975c1ff-e27e-49ad-a9fc-701956339126", "eventTime": "2019-07-18T17:01:28Z", "eventName": "ListHostedZones", "eventSource": "route53.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "220.81.220.103", "userAgent": "aws-cli/1.16.170 Python/3.7.4 Darwin/18.6.0 botocore/1.12.160", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "a03810d-5dab-43fa-8b27-f381995e0de", "record_id": "flaws_cloudtrail:0000165:a03810d-5dab-43fa-8b27-f381995e0de", "row_index": 165, "timestamp": "2019-07-18T17:03:11Z", "event_type": "ListDomains", "event_source": "route53domains.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "ASIAKU864WB4PTLEKB0V", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "AWS Internal", "user_agent": "AWS Internal", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 745, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "a03810d-5dab-43fa-8b27-f381995e0de", "eventTime": "2019-07-18T17:03:11Z", "eventName": "ListDomains", "eventSource": "route53domains.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "AWS Internal", "userAgent": "AWS Internal", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "ASIAKU864WB4PTLEKB0V", "userName": "Level6", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2019-07-18T17:03:11Z"}}, "invokedBy": "AWS Internal"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "a03810d-5dab-43fa-8b27-f381995e0de", "record_id": "flaws_cloudtrail:0000166:a03810d-5dab-43fa-8b27-f381995e0de", "row_index": 166, "timestamp": "2019-07-18T17:03:11Z", "event_type": "ListDomains", "event_source": "route53domains.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "ASIAKU864WB4PTLEKB0V", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "AWS Internal", "user_agent": "AWS Internal", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 745, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "a03810d-5dab-43fa-8b27-f381995e0de", "eventTime": "2019-07-18T17:03:11Z", "eventName": "ListDomains", "eventSource": "route53domains.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "AWS Internal", "userAgent": "AWS Internal", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "ASIAKU864WB4PTLEKB0V", "userName": "Level6", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2019-07-18T17:03:11Z"}}, "invokedBy": "AWS Internal"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "3b470e6f-39f0-4fb9-840a-d2d4d498ef4f", "record_id": "flaws_cloudtrail:0000167:3b470e6f-39f0-4fb9-840a-d2d4d498ef4f", "row_index": 167, "timestamp": "2019-07-18T17:04:09Z", "event_type": "ListFunctions202224", "event_source": "lambda.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "220.81.220.103", "user_agent": "aws-cli/1.16.170 Python/3.7.4 Darwin/18.6.0 botocore/1.12.160", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 676, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "3b470e6f-39f0-4fb9-840a-d2d4d498ef4f", "eventTime": "2019-07-18T17:04:09Z", "eventName": "ListFunctions202224", "eventSource": "lambda.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "220.81.220.103", "userAgent": "aws-cli/1.16.170 Python/3.7.4 Darwin/18.6.0 botocore/1.12.160", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "3b470e6f-39f0-4fb9-840a-d2d4d498ef4f", "record_id": "flaws_cloudtrail:0000168:3b470e6f-39f0-4fb9-840a-d2d4d498ef4f", "row_index": 168, "timestamp": "2019-07-18T17:04:09Z", "event_type": "ListFunctions202224", "event_source": "lambda.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "220.81.220.103", "user_agent": "aws-cli/1.16.170 Python/3.7.4 Darwin/18.6.0 botocore/1.12.160", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 676, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "3b470e6f-39f0-4fb9-840a-d2d4d498ef4f", "eventTime": "2019-07-18T17:04:09Z", "eventName": "ListFunctions202224", "eventSource": "lambda.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "220.81.220.103", "userAgent": "aws-cli/1.16.170 Python/3.7.4 Darwin/18.6.0 botocore/1.12.160", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "dc5fa78c-6083-4464-a09b-492367af18c8", "record_id": "flaws_cloudtrail:0000169:dc5fa78c-6083-4464-a09b-492367af18c8", "row_index": 169, "timestamp": "2019-07-18T17:05:12Z", "event_type": "GetFunction202224v2", "event_source": "lambda.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "220.81.220.103", "user_agent": "aws-cli/1.16.170 Python/3.7.4 Darwin/18.6.0 botocore/1.12.160", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 880, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "dc5fa78c-6083-4464-a09b-492367af18c8", "eventTime": "2019-07-18T17:05:12Z", "eventName": "GetFunction202224v2", "eventSource": "lambda.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "220.81.220.103", "userAgent": "aws-cli/1.16.170 Python/3.7.4 Darwin/18.6.0 botocore/1.12.160", "awsRegion": "us-west-2", "errorCode": "AccessDenied", "errorMessage": "User: arn:aws:iam::811596193553:user/Level6 is not authorized to perform: lambda:GetFunction on resource: arn:aws:lambda:us-west-2:811596193553:function:Level6", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "dc5fa78c-6083-4464-a09b-492367af18c8", "record_id": "flaws_cloudtrail:0000170:dc5fa78c-6083-4464-a09b-492367af18c8", "row_index": 170, "timestamp": "2019-07-18T17:05:12Z", "event_type": "GetFunction202224v2", "event_source": "lambda.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "220.81.220.103", "user_agent": "aws-cli/1.16.170 Python/3.7.4 Darwin/18.6.0 botocore/1.12.160", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 880, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "dc5fa78c-6083-4464-a09b-492367af18c8", "eventTime": "2019-07-18T17:05:12Z", "eventName": "GetFunction202224v2", "eventSource": "lambda.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "220.81.220.103", "userAgent": "aws-cli/1.16.170 Python/3.7.4 Darwin/18.6.0 botocore/1.12.160", "awsRegion": "us-west-2", "errorCode": "AccessDenied", "errorMessage": "User: arn:aws:iam::811596193553:user/Level6 is not authorized to perform: lambda:GetFunction on resource: arn:aws:lambda:us-west-2:811596193553:function:Level6", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "62cb76b3-91e4-4853-b000-7074dbe511fb", "record_id": "flaws_cloudtrail:0000171:62cb76b3-91e4-4853-b000-7074dbe511fb", "row_index": 171, "timestamp": "2019-07-18T17:06:05Z", "event_type": "GetFunctionConfiguration202224v2", "event_source": "lambda.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "220.81.220.103", "user_agent": "aws-cli/1.16.170 Python/3.7.4 Darwin/18.6.0 botocore/1.12.160", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 906, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "62cb76b3-91e4-4853-b000-7074dbe511fb", "eventTime": "2019-07-18T17:06:05Z", "eventName": "GetFunctionConfiguration202224v2", "eventSource": "lambda.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "220.81.220.103", "userAgent": "aws-cli/1.16.170 Python/3.7.4 Darwin/18.6.0 botocore/1.12.160", "awsRegion": "us-west-2", "errorCode": "AccessDenied", "errorMessage": "User: arn:aws:iam::811596193553:user/Level6 is not authorized to perform: lambda:GetFunctionConfiguration on resource: arn:aws:lambda:us-west-2:811596193553:function:Level6", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "62cb76b3-91e4-4853-b000-7074dbe511fb", "record_id": "flaws_cloudtrail:0000172:62cb76b3-91e4-4853-b000-7074dbe511fb", "row_index": 172, "timestamp": "2019-07-18T17:06:05Z", "event_type": "GetFunctionConfiguration202224v2", "event_source": "lambda.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "220.81.220.103", "user_agent": "aws-cli/1.16.170 Python/3.7.4 Darwin/18.6.0 botocore/1.12.160", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 906, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "62cb76b3-91e4-4853-b000-7074dbe511fb", "eventTime": "2019-07-18T17:06:05Z", "eventName": "GetFunctionConfiguration202224v2", "eventSource": "lambda.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "220.81.220.103", "userAgent": "aws-cli/1.16.170 Python/3.7.4 Darwin/18.6.0 botocore/1.12.160", "awsRegion": "us-west-2", "errorCode": "AccessDenied", "errorMessage": "User: arn:aws:iam::811596193553:user/Level6 is not authorized to perform: lambda:GetFunctionConfiguration on resource: arn:aws:lambda:us-west-2:811596193553:function:Level6", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "96576b8-0001-437b-95a2-b128e524e643", "record_id": "flaws_cloudtrail:0000173:96576b8-0001-437b-95a2-b128e524e643", "row_index": 173, "timestamp": "2019-07-18T17:07:01Z", "event_type": "GetPolicy202224v2", "event_source": "lambda.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "220.81.220.103", "user_agent": "aws-cli/1.16.170 Python/3.7.4 Darwin/18.6.0 botocore/1.12.160", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 694, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "96576b8-0001-437b-95a2-b128e524e643", "eventTime": "2019-07-18T17:07:01Z", "eventName": "GetPolicy202224v2", "eventSource": "lambda.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "220.81.220.103", "userAgent": "aws-cli/1.16.170 Python/3.7.4 Darwin/18.6.0 botocore/1.12.160", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"functionName": "Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "96576b8-0001-437b-95a2-b128e524e643", "record_id": "flaws_cloudtrail:0000174:96576b8-0001-437b-95a2-b128e524e643", "row_index": 174, "timestamp": "2019-07-18T17:07:01Z", "event_type": "GetPolicy202224v2", "event_source": "lambda.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "220.81.220.103", "user_agent": "aws-cli/1.16.170 Python/3.7.4 Darwin/18.6.0 botocore/1.12.160", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 694, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "96576b8-0001-437b-95a2-b128e524e643", "eventTime": "2019-07-18T17:07:01Z", "eventName": "GetPolicy202224v2", "eventSource": "lambda.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "220.81.220.103", "userAgent": "aws-cli/1.16.170 Python/3.7.4 Darwin/18.6.0 botocore/1.12.160", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"functionName": "Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "d24f6e41-0a00-4184-b790-1f861048", "record_id": "flaws_cloudtrail:0000175:d24f6e41-0a00-4184-b790-1f861048", "row_index": 175, "timestamp": "2019-07-18T17:07:55Z", "event_type": "GetRestApi", "event_source": "apigateway.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "220.81.220.103", "user_agent": "aws-cli/1.16.170 Python/3.7.4 Darwin/18.6.0 botocore/1.12.160", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 722, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "readOnly", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "d24f6e41-0a00-4184-b790-1f861048", "eventTime": "2019-07-18T17:07:55Z", "eventName": "GetRestApi", "eventSource": "apigateway.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "220.81.220.103", "userAgent": "aws-cli/1.16.170 Python/3.7.4 Darwin/18.6.0 botocore/1.12.160", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"restApiId": "s33ppypa75", "template": false}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "d24f6e41-0a00-4184-b790-1f861048", "record_id": "flaws_cloudtrail:0000176:d24f6e41-0a00-4184-b790-1f861048", "row_index": 176, "timestamp": "2019-07-18T17:07:55Z", "event_type": "GetRestApi", "event_source": "apigateway.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "220.81.220.103", "user_agent": "aws-cli/1.16.170 Python/3.7.4 Darwin/18.6.0 botocore/1.12.160", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 722, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "readOnly", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "d24f6e41-0a00-4184-b790-1f861048", "eventTime": "2019-07-18T17:07:55Z", "eventName": "GetRestApi", "eventSource": "apigateway.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "220.81.220.103", "userAgent": "aws-cli/1.16.170 Python/3.7.4 Darwin/18.6.0 botocore/1.12.160", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"restApiId": "s33ppypa75", "template": false}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "23ef406e-7691-4c6a-b829-a08f548467", "record_id": "flaws_cloudtrail:0000177:23ef406e-7691-4c6a-b829-a08f548467", "row_index": 177, "timestamp": "2019-07-18T17:11:40Z", "event_type": "GetDomainNames", "event_source": "apigateway.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "220.81.220.103", "user_agent": "aws-cli/1.16.170 Python/3.7.4 Darwin/18.6.0 botocore/1.12.160", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 862, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "23ef406e-7691-4c6a-b829-a08f548467", "eventTime": "2019-07-18T17:11:40Z", "eventName": "GetDomainNames", "eventSource": "apigateway.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "220.81.220.103", "userAgent": "aws-cli/1.16.170 Python/3.7.4 Darwin/18.6.0 botocore/1.12.160", "awsRegion": "us-west-2", "errorCode": "AccessDenied", "errorMessage": "User: arn:aws:iam::811596193553:user/Level6 is not authorized to perform: apigateway:GET on resource: arn:aws:apigateway:us-west-2::/domainnames", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "23ef406e-7691-4c6a-b829-a08f548467", "record_id": "flaws_cloudtrail:0000178:23ef406e-7691-4c6a-b829-a08f548467", "row_index": 178, "timestamp": "2019-07-18T17:11:40Z", "event_type": "GetDomainNames", "event_source": "apigateway.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "220.81.220.103", "user_agent": "aws-cli/1.16.170 Python/3.7.4 Darwin/18.6.0 botocore/1.12.160", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 862, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "23ef406e-7691-4c6a-b829-a08f548467", "eventTime": "2019-07-18T17:11:40Z", "eventName": "GetDomainNames", "eventSource": "apigateway.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "220.81.220.103", "userAgent": "aws-cli/1.16.170 Python/3.7.4 Darwin/18.6.0 botocore/1.12.160", "awsRegion": "us-west-2", "errorCode": "AccessDenied", "errorMessage": "User: arn:aws:iam::811596193553:user/Level6 is not authorized to perform: apigateway:GET on resource: arn:aws:apigateway:us-west-2::/domainnames", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "2e358913-8cba-4428-b7db-4c14d308ba3e", "record_id": "flaws_cloudtrail:0000179:2e358913-8cba-4428-b7db-4c14d308ba3e", "row_index": 179, "timestamp": "2019-07-18T17:12:39Z", "event_type": "GetStages", "event_source": "apigateway.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "220.81.220.103", "user_agent": "aws-cli/1.16.170 Python/3.7.4 Darwin/18.6.0 botocore/1.12.160", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 725, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "readOnly", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "2e358913-8cba-4428-b7db-4c14d308ba3e", "eventTime": "2019-07-18T17:12:39Z", "eventName": "GetStages", "eventSource": "apigateway.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "220.81.220.103", "userAgent": "aws-cli/1.16.170 Python/3.7.4 Darwin/18.6.0 botocore/1.12.160", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"restApiId": "s33ppypa75", "template": false}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "2e358913-8cba-4428-b7db-4c14d308ba3e", "record_id": "flaws_cloudtrail:0000180:2e358913-8cba-4428-b7db-4c14d308ba3e", "row_index": 180, "timestamp": "2019-07-18T17:12:39Z", "event_type": "GetStages", "event_source": "apigateway.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "220.81.220.103", "user_agent": "aws-cli/1.16.170 Python/3.7.4 Darwin/18.6.0 botocore/1.12.160", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 725, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "readOnly", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "2e358913-8cba-4428-b7db-4c14d308ba3e", "eventTime": "2019-07-18T17:12:39Z", "eventName": "GetStages", "eventSource": "apigateway.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "220.81.220.103", "userAgent": "aws-cli/1.16.170 Python/3.7.4 Darwin/18.6.0 botocore/1.12.160", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"restApiId": "s33ppypa75", "template": false}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "3d3c820d-eb52-4acc-85c6-0878f8b15814", "record_id": "flaws_cloudtrail:0000181:3d3c820d-eb52-4acc-85c6-0878f8b15814", "row_index": 181, "timestamp": "2019-07-18T17:14:12Z", "event_type": "AssumeRole", "event_source": "sts.amazonaws.com", "principal": {"type": "AWSService", "arn": null, "account_id": null, "principal_id": null, "user_name": null, "access_key_id": null, "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "lambda.amazonaws.com", "user_agent": "lambda.amazonaws.com", "aws_region": "us-west-2"}, "resource_arns": ["arn:aws:iam::811596193553:role/service-role/Level6"], "raw_record_size_bytes": 1618, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "resources", "responseElements", "sharedEventID", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "3d3c820d-eb52-4acc-85c6-0878f8b15814", "eventTime": "2019-07-18T17:14:12Z", "eventName": "AssumeRole", "eventSource": "sts.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "lambda.amazonaws.com", "userAgent": "lambda.amazonaws.com", "awsRegion": "us-west-2", "userIdentity": {"type": "AWSService", "invokedBy": "lambda.amazonaws.com"}, "requestParameters": {"roleSessionName": "Level6", "roleArn": "arn:aws:iam::811596193553:role/service-role/Level6"}, "responseElements": {"credentials": {"accessKeyId": "ASIAPUZH0EGWLAXH7XOS", "expiration": "Jul 19, 2019 5:14:12 AM", "sessionToken": "AgoJb3JpZ2luX2VjEPn//////////wEaCXVzLXdlc3QtMiJHMEUCIQDglWvptDhgtNYZTr2dXF6MidkrQGyZKjuMpMYMMqBvxQIgU3RzDwdtpBFcq58s1kxiKacrflA3hE1AePoXi75wh/EqggIIYhAAGgw5NzU0MjYyNjIwMjkiDOGaY4OcOd341w2cUirfAQnHniepO7/P0tQ5y45eU2lzVwPKxd8HyJm/bFXQpgJWvCxDEYdlvOt92FsjD370U/dgetTAlsejzfrW1dBGXHmPSknc+paRMGVMY+nqLootV4dQ6hLQ817Gn6f6TJNgdkclDwxLYTy7eIcLNXuLoJtqur1tB6KhEj+N1qzeivAI+X249DS+pxZytMM1qZ44DivATqZ4SZ0vdcW7M95inC1jbkwl0Ppa4U42LT9M8Xql8do8F5mHhHhx6aASTZtf3AGZ4BnBr7K7h+GKcCYtIiJw/m3pHiHKBjTFJTCFMdEw5NHC6QU6tAGujnF0ZVP76F64KYgtODu3Q8f4jelA5E0jJnD+aaQSmI57qlo6F7IkF0R8KuwtB5DjwoTlrkgkM4X3umZLGAv9cJ1InqEi04IV0r6KMD1YbaRbXtC1kXQEb0/cyGIadKNxLDagChTonVoko9nFEHo9WnX5gnD+4P1vZ+WBfAx1MUmX7cqKiDd9bJmHufZ8l/GA76bndbFZnTTwZmF/lmAdLi+CJIb5a1rxu3abBiOrTsWim8o="}}, "resources": [{"ARN": "arn:aws:iam::811596193553:role/service-role/Level6", "accountId": "811596193553", "type": "AWS::IAM::Role"}]}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "36e323e2-6da4-4779-aa6a-6e46b4b7267f", "record_id": "flaws_cloudtrail:0000182:36e323e2-6da4-4779-aa6a-6e46b4b7267f", "row_index": 182, "timestamp": "2019-07-18T17:14:12Z", "event_type": "AssumeRole", "event_source": "sts.amazonaws.com", "principal": {"type": "AWSService", "arn": null, "account_id": null, "principal_id": null, "user_name": null, "access_key_id": null, "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "lambda.amazonaws.com", "user_agent": "lambda.amazonaws.com", "aws_region": "us-west-2"}, "resource_arns": ["arn:aws:iam::811596193553:role/service-role/Level6"], "raw_record_size_bytes": 1618, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "resources", "responseElements", "sharedEventID", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "36e323e2-6da4-4779-aa6a-6e46b4b7267f", "eventTime": "2019-07-18T17:14:12Z", "eventName": "AssumeRole", "eventSource": "sts.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "lambda.amazonaws.com", "userAgent": "lambda.amazonaws.com", "awsRegion": "us-west-2", "userIdentity": {"type": "AWSService", "invokedBy": "lambda.amazonaws.com"}, "requestParameters": {"roleSessionName": "Level6", "roleArn": "arn:aws:iam::811596193553:role/service-role/Level6"}, "responseElements": {"credentials": {"accessKeyId": "ASIAKZ4GUVNWEV3W6OP6", "expiration": "Jul 19, 2019 5:14:12 AM", "sessionToken": "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"}}, "resources": [{"ARN": "arn:aws:iam::811596193553:role/service-role/Level6", "accountId": "811596193553", "type": "AWS::IAM::Role"}]}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "4ad0e85d-f7c8-47e7-aa7c-20dbe5f6093a", "record_id": "flaws_cloudtrail:0000183:4ad0e85d-f7c8-47e7-aa7c-20dbe5f6093a", "row_index": 183, "timestamp": "2019-07-18T17:14:12Z", "event_type": "CreateLogStream", "event_source": "logs.amazonaws.com", "principal": {"type": "AssumedRole", "arn": "arn:aws:sts::811596193553:assumed-role/Level6/Level6", "account_id": "811596193553", "principal_id": "AROAI4E1FBACLY3FPC6BB:Level6", "user_name": null, "access_key_id": "ASIAPUZH0EGWLAXH7XOS", "session_issuer_arn": "arn:aws:iam::811596193553:role/service-role/Level6", "session_issuer_user_name": "Level6"}, "network": {"source_ip": "251.245.1.11", "user_agent": "awslambda-worker", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1028, "raw_record_depth": 4, "raw_record_top_level_keys": ["apiVersion", "awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "4ad0e85d-f7c8-47e7-aa7c-20dbe5f6093a", "eventTime": "2019-07-18T17:14:12Z", "eventName": "CreateLogStream", "eventSource": "logs.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "251.245.1.11", "userAgent": "awslambda-worker", "awsRegion": "us-west-2", "userIdentity": {"type": "AssumedRole", "principalId": "AROAI4E1FBACLY3FPC6BB:Level6", "arn": "arn:aws:sts::811596193553:assumed-role/Level6/Level6", "accountId": "811596193553", "accessKeyId": "ASIAPUZH0EGWLAXH7XOS", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2019-07-18T17:14:12Z"}, "sessionIssuer": {"type": "Role", "principalId": "AROAI4E1FBACLY3FPC6BB", "arn": "arn:aws:iam::811596193553:role/service-role/Level6", "accountId": "811596193553", "userName": "Level6"}}}, "requestParameters": {"logStreamName": "2019/07/18/[$LATEST]82869da39fc711ebef681e0f0ae7bef9", "logGroupName": "/aws/lambda/Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "3d3c820d-eb52-4acc-85c6-0878f8b15814", "record_id": "flaws_cloudtrail:0000184:3d3c820d-eb52-4acc-85c6-0878f8b15814", "row_index": 184, "timestamp": "2019-07-18T17:14:12Z", "event_type": "AssumeRole", "event_source": "sts.amazonaws.com", "principal": {"type": "AWSService", "arn": null, "account_id": null, "principal_id": null, "user_name": null, "access_key_id": null, "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "lambda.amazonaws.com", "user_agent": "lambda.amazonaws.com", "aws_region": "us-west-2"}, "resource_arns": ["arn:aws:iam::811596193553:role/service-role/Level6"], "raw_record_size_bytes": 1618, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "resources", "responseElements", "sharedEventID", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "3d3c820d-eb52-4acc-85c6-0878f8b15814", "eventTime": "2019-07-18T17:14:12Z", "eventName": "AssumeRole", "eventSource": "sts.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "lambda.amazonaws.com", "userAgent": "lambda.amazonaws.com", "awsRegion": "us-west-2", "userIdentity": {"type": "AWSService", "invokedBy": "lambda.amazonaws.com"}, "requestParameters": {"roleSessionName": "Level6", "roleArn": "arn:aws:iam::811596193553:role/service-role/Level6"}, "responseElements": {"credentials": {"accessKeyId": "ASIAPUZH0EGWLAXH7XOS", "expiration": "Jul 19, 2019 5:14:12 AM", "sessionToken": "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"}}, "resources": [{"ARN": "arn:aws:iam::811596193553:role/service-role/Level6", "accountId": "811596193553", "type": "AWS::IAM::Role"}]}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "36e323e2-6da4-4779-aa6a-6e46b4b7267f", "record_id": "flaws_cloudtrail:0000185:36e323e2-6da4-4779-aa6a-6e46b4b7267f", "row_index": 185, "timestamp": "2019-07-18T17:14:12Z", "event_type": "AssumeRole", "event_source": "sts.amazonaws.com", "principal": {"type": "AWSService", "arn": null, "account_id": null, "principal_id": null, "user_name": null, "access_key_id": null, "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "lambda.amazonaws.com", "user_agent": "lambda.amazonaws.com", "aws_region": "us-west-2"}, "resource_arns": ["arn:aws:iam::811596193553:role/service-role/Level6"], "raw_record_size_bytes": 1618, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "resources", "responseElements", "sharedEventID", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "36e323e2-6da4-4779-aa6a-6e46b4b7267f", "eventTime": "2019-07-18T17:14:12Z", "eventName": "AssumeRole", "eventSource": "sts.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "lambda.amazonaws.com", "userAgent": "lambda.amazonaws.com", "awsRegion": "us-west-2", "userIdentity": {"type": "AWSService", "invokedBy": "lambda.amazonaws.com"}, "requestParameters": {"roleSessionName": "Level6", "roleArn": "arn:aws:iam::811596193553:role/service-role/Level6"}, "responseElements": {"credentials": {"accessKeyId": "ASIAKZ4GUVNWEV3W6OP6", "expiration": "Jul 19, 2019 5:14:12 AM", "sessionToken": "AgoJb3JpZ2luX2VjEPn//////////wEaCXVzLXdlc3QtMiJIMEYCIQDbkcdMukfWBPui/v0qhSLayfEJex4HMTlRXesqQwF2vQIhAJ0YvkQgcZUYmVvFLNa3HMRDWE7VFyy5dbX+tpGc0lkeKoICCGIQABoMOTc1NDI2MjYyMDI5IgwoQ7hzZ2n7K/g5HQ0q3wHov0akLqWWY7Ne5gd9DmL8As5jYgFbmLKlcGfUDmDdQmM+OHXmS20uUVEIkbF3E+SNux6kI/Dnfp30iDGDE2XmhncZ/fDyYwuqiKn5Aw5WmmJtn5twEjMX0KU3c7unyiz7cL8w20L6GBJzqv3H/1U1CNSJn2uFz+Pjpr27MjPrsObyU7TMyR7SyAqt5yFIbrx0irPNRSRhILNbyopRW7XY4T8tTj7Cpt6yBbyWgIHt/9kfQXDdXeMAC/1/o7oQWvBSESaEaVisBF+atopq/2FuzF4HtS51FAKB9gV1TKf+MOTRwukFOrMBOLbWZBq0VYF+KhRaNPN6+tV1B8vSC/RpuTJ/Tbfjr6qe0x0Eg6bEd7F8o5v76dbJbU2dLiVhDQ5/oKoTNVNsAAmo/HbsIBHPkVHWaL7QOk2gplmcxj/bGthIvKdZgW9MXj/1ZVstSuM/VMFY/eS2W6opN+z2mb8Cd8vJ2EQVzm7L8ec7MVsE38ALMcK6rL0/J8D9MPbpcIs4nm2XFBuqzXWjn+sz6Tlnzu852wTsrC1WB6s="}}, "resources": [{"ARN": "arn:aws:iam::811596193553:role/service-role/Level6", "accountId": "811596193553", "type": "AWS::IAM::Role"}]}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "4ad0e85d-f7c8-47e7-aa7c-20dbe5f6093a", "record_id": "flaws_cloudtrail:0000186:4ad0e85d-f7c8-47e7-aa7c-20dbe5f6093a", "row_index": 186, "timestamp": "2019-07-18T17:14:12Z", "event_type": "CreateLogStream", "event_source": "logs.amazonaws.com", "principal": {"type": "AssumedRole", "arn": "arn:aws:sts::811596193553:assumed-role/Level6/Level6", "account_id": "811596193553", "principal_id": "AROAI4E1FBACLY3FPC6BB:Level6", "user_name": null, "access_key_id": "ASIAPUZH0EGWLAXH7XOS", "session_issuer_arn": "arn:aws:iam::811596193553:role/service-role/Level6", "session_issuer_user_name": "Level6"}, "network": {"source_ip": "251.245.1.11", "user_agent": "awslambda-worker", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1028, "raw_record_depth": 4, "raw_record_top_level_keys": ["apiVersion", "awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "4ad0e85d-f7c8-47e7-aa7c-20dbe5f6093a", "eventTime": "2019-07-18T17:14:12Z", "eventName": "CreateLogStream", "eventSource": "logs.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "251.245.1.11", "userAgent": "awslambda-worker", "awsRegion": "us-west-2", "userIdentity": {"type": "AssumedRole", "principalId": "AROAI4E1FBACLY3FPC6BB:Level6", "arn": "arn:aws:sts::811596193553:assumed-role/Level6/Level6", "accountId": "811596193553", "accessKeyId": "ASIAPUZH0EGWLAXH7XOS", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2019-07-18T17:14:12Z"}, "sessionIssuer": {"type": "Role", "principalId": "AROAI4E1FBACLY3FPC6BB", "arn": "arn:aws:iam::811596193553:role/service-role/Level6", "accountId": "811596193553", "userName": "Level6"}}}, "requestParameters": {"logStreamName": "2019/07/18/[$LATEST]82869da39fc711ebef681e0f0ae7bef9", "logGroupName": "/aws/lambda/Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "06beb111-9c1c-4d46-952d-4cd281cc71e8", "record_id": "flaws_cloudtrail:0000187:06beb111-9c1c-4d46-952d-4cd281cc71e8", "row_index": 187, "timestamp": "2019-07-18T17:31:15Z", "event_type": "AssumeRole", "event_source": "sts.amazonaws.com", "principal": {"type": "AWSService", "arn": null, "account_id": null, "principal_id": null, "user_name": null, "access_key_id": null, "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "ec2.amazonaws.com", "user_agent": "ec2.amazonaws.com", "aws_region": "us-west-2"}, "resource_arns": ["arn:aws:iam::811596193553:role/flaws"], "raw_record_size_bytes": 1882, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "resources", "responseElements", "sharedEventID", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "06beb111-9c1c-4d46-952d-4cd281cc71e8", "eventTime": "2019-07-18T17:31:15Z", "eventName": "AssumeRole", "eventSource": "sts.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "ec2.amazonaws.com", "userAgent": "ec2.amazonaws.com", "awsRegion": "us-west-2", "userIdentity": {"type": "AWSService", "invokedBy": "ec2.amazonaws.com"}, "requestParameters": {"roleSessionName": "i-aa2d3b42e5c6e801a", "roleArn": "arn:aws:iam::811596193553:role/flaws"}, "responseElements": {"credentials": {"accessKeyId": "ASIA2W3SVO9XZFJ0H5L9", "expiration": "Jul 18, 2019 11:35:21 PM", "sessionToken": "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"}}, "resources": [{"ARN": "arn:aws:iam::811596193553:role/flaws", "accountId": "811596193553", "type": "AWS::IAM::Role"}]}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "06beb111-9c1c-4d46-952d-4cd281cc71e8", "record_id": "flaws_cloudtrail:0000188:06beb111-9c1c-4d46-952d-4cd281cc71e8", "row_index": 188, "timestamp": "2019-07-18T17:31:15Z", "event_type": "AssumeRole", "event_source": "sts.amazonaws.com", "principal": {"type": "AWSService", "arn": null, "account_id": null, "principal_id": null, "user_name": null, "access_key_id": null, "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "ec2.amazonaws.com", "user_agent": "ec2.amazonaws.com", "aws_region": "us-west-2"}, "resource_arns": ["arn:aws:iam::811596193553:role/flaws"], "raw_record_size_bytes": 1882, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "resources", "responseElements", "sharedEventID", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "06beb111-9c1c-4d46-952d-4cd281cc71e8", "eventTime": "2019-07-18T17:31:15Z", "eventName": "AssumeRole", "eventSource": "sts.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "ec2.amazonaws.com", "userAgent": "ec2.amazonaws.com", "awsRegion": "us-west-2", "userIdentity": {"type": "AWSService", "invokedBy": "ec2.amazonaws.com"}, "requestParameters": {"roleSessionName": "i-aa2d3b42e5c6e801a", "roleArn": "arn:aws:iam::811596193553:role/flaws"}, "responseElements": {"credentials": {"accessKeyId": "ASIA2W3SVO9XZFJ0H5L9", "expiration": "Jul 18, 2019 11:35:21 PM", "sessionToken": "AgoJb3JpZ2luX2VjEPr//////////wEaCXVzLXdlc3QtMiJGMEQCIH9ulx0LFmzhRuX3JMWDZ7zu+msihfQgza3CcdGgufiRAiAPxsKT4XHiqhuq0aWzZ5JJOfhegLvYAB0Ippnxrnif4yraAwhjEAAaDDk3NTQyNjI2MjAyOSIMmJDN8tQE60b+MTocKrcDepL3ILzoxIFcWRbUm2WRLLVeRii3mMthCRFIomFV9OGnFvhxbclEClyXqo6jGA99fdsyuaNhl9lKn0J+ylJP0gYjQJjiASlX+xR+yjIg7cEMs7CLku8j3gToHj7Si3oqfKPR/ld3TcDBO8pReGFS9P1JMwBc4LxsQ8X0EFkR/q9kQn3VAAeXbnwRpqLgcR1bCHz2IzEwLoVGdALZKG9cJoYPxDZMO0yrz8S6dzmxHiquJF+/7rLPcg1Nqvcw6fGBxid5QGdsVWXKbyjN0qGZ51xX3eBgzH7y2WT5ZhJZ1rMZdRHdPJFAkUlEGzQLtXsM7S4FxJgyliAT/bfR7GYBwWN93kKan5edaPoBcZo1Oaw6lD3pLbRA3nx2xinK4eFW7ZTRWSnf5+b6ZNcxigHWPafGuk6GuuPSq4zUoqSUQh9nM3tADH1y7TyscSMoIqmV3+BSy6r0dVHCRH0koV/ZcIa7BgzwUj7gOALOrafp7oAMBRkwKongf6PPo4gkyNAdUADm8oXfvddof/OJHsReQrfcNQNvPjgDK5FtN2HyhS8rT4izhs/LK2j21BIf3haelnjjyhdNKjDj2cLpBTq1AbMF1Cpe+eU+bBai1qT7UkQP3MHpJzBKXXGZ10E1ffJRdwFkUeoCLbNnzhFI4DNsKM7Q779j+UO1d22A9ComwPZq9eXp+1z8UoBWyJ0xa+hJpYp9X9AxhlAqIi2+d/KdBvhdiHymp0awB0GCST1T6BkDj6paq5FyUPggMDxEH7S61BvUNqGx3EwUQL0kKJ8559tAbGfB3ogVw5sPCMFtGipMS/hU/PxP/BOBx/UozX+jZO6q+Z4="}}, "resources": [{"ARN": "arn:aws:iam::811596193553:role/flaws", "accountId": "811596193553", "type": "AWS::IAM::Role"}]}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "33542a5f-1f0d-432a-a38b-12fa1e950e92", "record_id": "flaws_cloudtrail:0000189:33542a5f-1f0d-432a-a38b-12fa1e950e92", "row_index": 189, "timestamp": "2019-07-18T18:21:58Z", "event_type": "AssumeRole", "event_source": "sts.amazonaws.com", "principal": {"type": "AWSService", "arn": null, "account_id": null, "principal_id": null, "user_name": null, "access_key_id": null, "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "config.amazonaws.com", "user_agent": "config.amazonaws.com", "aws_region": "us-west-2"}, "resource_arns": ["arn:aws:iam::811596193553:role/service-role/config-role-us-west-2"], "raw_record_size_bytes": 1935, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "resources", "responseElements", "sharedEventID", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "33542a5f-1f0d-432a-a38b-12fa1e950e92", "eventTime": "2019-07-18T18:21:58Z", "eventName": "AssumeRole", "eventSource": "sts.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "config.amazonaws.com", "userAgent": "config.amazonaws.com", "awsRegion": "us-west-2", "userIdentity": {"type": "AWSService", "invokedBy": "config.amazonaws.com"}, "requestParameters": {"roleArn": "arn:aws:iam::811596193553:role/service-role/config-role-us-west-2", "roleSessionName": "AWSConfig"}, "responseElements": {"credentials": {"accessKeyId": "ASIA9RLYGZY7W645RG8L", "expiration": "Jul 18, 2019 7:21:58 PM", "sessionToken": "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"}, "assumedRoleUser": {"assumedRoleId": "AROASM3HWKK95VDO4HH81:AWSConfig", "arn": "arn:aws:sts::811596193553:assumed-role/config-role-us-west-2/AWSConfig"}}, "resources": [{"ARN": "arn:aws:iam::811596193553:role/service-role/config-role-us-west-2", "accountId": "811596193553", "type": "AWS::IAM::Role"}]}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "33542a5f-1f0d-432a-a38b-12fa1e950e92", "record_id": "flaws_cloudtrail:0000190:33542a5f-1f0d-432a-a38b-12fa1e950e92", "row_index": 190, "timestamp": "2019-07-18T18:21:58Z", "event_type": "AssumeRole", "event_source": "sts.amazonaws.com", "principal": {"type": "AWSService", "arn": null, "account_id": null, "principal_id": null, "user_name": null, "access_key_id": null, "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "config.amazonaws.com", "user_agent": "config.amazonaws.com", "aws_region": "us-west-2"}, "resource_arns": ["arn:aws:iam::811596193553:role/service-role/config-role-us-west-2"], "raw_record_size_bytes": 1935, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "resources", "responseElements", "sharedEventID", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "33542a5f-1f0d-432a-a38b-12fa1e950e92", "eventTime": "2019-07-18T18:21:58Z", "eventName": "AssumeRole", "eventSource": "sts.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "config.amazonaws.com", "userAgent": "config.amazonaws.com", "awsRegion": "us-west-2", "userIdentity": {"type": "AWSService", "invokedBy": "config.amazonaws.com"}, "requestParameters": {"roleArn": "arn:aws:iam::811596193553:role/service-role/config-role-us-west-2", "roleSessionName": "AWSConfig"}, "responseElements": {"credentials": {"accessKeyId": "ASIA9RLYGZY7W645RG8L", "expiration": "Jul 18, 2019 7:21:58 PM", "sessionToken": "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"}, "assumedRoleUser": {"assumedRoleId": "AROASM3HWKK95VDO4HH81:AWSConfig", "arn": "arn:aws:sts::811596193553:assumed-role/config-role-us-west-2/AWSConfig"}}, "resources": [{"ARN": "arn:aws:iam::811596193553:role/service-role/config-role-us-west-2", "accountId": "811596193553", "type": "AWS::IAM::Role"}]}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "bc4e8b75-c602-4cdc-8f51-aacc3b07db1f", "record_id": "flaws_cloudtrail:0000191:bc4e8b75-c602-4cdc-8f51-aacc3b07db1f", "row_index": 191, "timestamp": "2019-07-18T18:31:15Z", "event_type": "AssumeRole", "event_source": "sts.amazonaws.com", "principal": {"type": "AWSService", "arn": null, "account_id": null, "principal_id": null, "user_name": null, "access_key_id": null, "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "ec2.amazonaws.com", "user_agent": "ec2.amazonaws.com", "aws_region": "us-west-2"}, "resource_arns": ["arn:aws:iam::811596193553:role/flaws"], "raw_record_size_bytes": 1882, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "resources", "responseElements", "sharedEventID", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "bc4e8b75-c602-4cdc-8f51-aacc3b07db1f", "eventTime": "2019-07-18T18:31:15Z", "eventName": "AssumeRole", "eventSource": "sts.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "ec2.amazonaws.com", "userAgent": "ec2.amazonaws.com", "awsRegion": "us-west-2", "userIdentity": {"type": "AWSService", "invokedBy": "ec2.amazonaws.com"}, "requestParameters": {"roleSessionName": "i-aa2d3b42e5c6e801a", "roleArn": "arn:aws:iam::811596193553:role/flaws"}, "responseElements": {"credentials": {"accessKeyId": "ASIAQHPV95HUVIPOT4EC", "expiration": "Jul 19, 2019 1:00:42 AM", "sessionToken": "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"}}, "resources": [{"ARN": "arn:aws:iam::811596193553:role/flaws", "accountId": "811596193553", "type": "AWS::IAM::Role"}]}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "bc4e8b75-c602-4cdc-8f51-aacc3b07db1f", "record_id": "flaws_cloudtrail:0000192:bc4e8b75-c602-4cdc-8f51-aacc3b07db1f", "row_index": 192, "timestamp": "2019-07-18T18:31:15Z", "event_type": "AssumeRole", "event_source": "sts.amazonaws.com", "principal": {"type": "AWSService", "arn": null, "account_id": null, "principal_id": null, "user_name": null, "access_key_id": null, "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "ec2.amazonaws.com", "user_agent": "ec2.amazonaws.com", "aws_region": "us-west-2"}, "resource_arns": ["arn:aws:iam::811596193553:role/flaws"], "raw_record_size_bytes": 1882, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "resources", "responseElements", "sharedEventID", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "bc4e8b75-c602-4cdc-8f51-aacc3b07db1f", "eventTime": "2019-07-18T18:31:15Z", "eventName": "AssumeRole", "eventSource": "sts.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "ec2.amazonaws.com", "userAgent": "ec2.amazonaws.com", "awsRegion": "us-west-2", "userIdentity": {"type": "AWSService", "invokedBy": "ec2.amazonaws.com"}, "requestParameters": {"roleSessionName": "i-aa2d3b42e5c6e801a", "roleArn": "arn:aws:iam::811596193553:role/flaws"}, "responseElements": {"credentials": {"accessKeyId": "ASIAQHPV95HUVIPOT4EC", "expiration": "Jul 19, 2019 1:00:42 AM", "sessionToken": "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"}}, "resources": [{"ARN": "arn:aws:iam::811596193553:role/flaws", "accountId": "811596193553", "type": "AWS::IAM::Role"}]}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "d00f4e17-606f-48f1-a7e4-7bd96f83678", "record_id": "flaws_cloudtrail:0000193:d00f4e17-606f-48f1-a7e4-7bd96f83678", "row_index": 193, "timestamp": "2019-07-18T19:12:47Z", "event_type": "ListBuckets", "event_source": "s3.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "4.254.15.47", "user_agent": "[aws-cli/1.16.183 Python/3.5.2 Linux/4.4.0-112-generic botocore/1.12.173]", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 808, "raw_record_depth": 3, "raw_record_top_level_keys": ["additionalEventData", "awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "d00f4e17-606f-48f1-a7e4-7bd96f83678", "eventTime": "2019-07-18T19:12:47Z", "eventName": "ListBuckets", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "4.254.15.47", "userAgent": "[aws-cli/1.16.183 Python/3.5.2 Linux/4.4.0-112-generic botocore/1.12.173]", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"host": ["s3.amazonaws.com"]}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "d00f4e17-606f-48f1-a7e4-7bd96f83678", "record_id": "flaws_cloudtrail:0000194:d00f4e17-606f-48f1-a7e4-7bd96f83678", "row_index": 194, "timestamp": "2019-07-18T19:12:47Z", "event_type": "ListBuckets", "event_source": "s3.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "4.254.15.47", "user_agent": "[aws-cli/1.16.183 Python/3.5.2 Linux/4.4.0-112-generic botocore/1.12.173]", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 808, "raw_record_depth": 3, "raw_record_top_level_keys": ["additionalEventData", "awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "d00f4e17-606f-48f1-a7e4-7bd96f83678", "eventTime": "2019-07-18T19:12:47Z", "eventName": "ListBuckets", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "4.254.15.47", "userAgent": "[aws-cli/1.16.183 Python/3.5.2 Linux/4.4.0-112-generic botocore/1.12.173]", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"host": ["s3.amazonaws.com"]}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "91d8358b-037e-4e70-99a5-82f896eef5d0", "record_id": "flaws_cloudtrail:0000195:91d8358b-037e-4e70-99a5-82f896eef5d0", "row_index": 195, "timestamp": "2019-07-18T19:16:50Z", "event_type": "DescribeInstances", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "4.254.15.47", "user_agent": "aws-cli/1.16.183 Python/3.5.2 Linux/4.4.0-112-generic botocore/1.12.173", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 707, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "91d8358b-037e-4e70-99a5-82f896eef5d0", "eventTime": "2019-07-18T19:16:50Z", "eventName": "DescribeInstances", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "4.254.15.47", "userAgent": "aws-cli/1.16.183 Python/3.5.2 Linux/4.4.0-112-generic botocore/1.12.173", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"instancesSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "91d8358b-037e-4e70-99a5-82f896eef5d0", "record_id": "flaws_cloudtrail:0000196:91d8358b-037e-4e70-99a5-82f896eef5d0", "row_index": 196, "timestamp": "2019-07-18T19:16:50Z", "event_type": "DescribeInstances", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "4.254.15.47", "user_agent": "aws-cli/1.16.183 Python/3.5.2 Linux/4.4.0-112-generic botocore/1.12.173", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 707, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "91d8358b-037e-4e70-99a5-82f896eef5d0", "eventTime": "2019-07-18T19:16:50Z", "eventName": "DescribeInstances", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "4.254.15.47", "userAgent": "aws-cli/1.16.183 Python/3.5.2 Linux/4.4.0-112-generic botocore/1.12.173", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"instancesSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "6c0c2576-4f56-4930-acb6-cfba72b5e846", "record_id": "flaws_cloudtrail:0000197:6c0c2576-4f56-4930-acb6-cfba72b5e846", "row_index": 197, "timestamp": "2019-07-18T19:17:33Z", "event_type": "GetCallerIdentity", "event_source": "sts.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIAKRAYPPJT59T3DG3O", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "36.187.170.43", "user_agent": "Boto3/1.14.7 Python/3.6.10 Linux/4.14.181-142.260.amzn2.x86_64 Botocore/1.17.7", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 529, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "6c0c2576-4f56-4930-acb6-cfba72b5e846", "eventTime": "2019-07-18T19:17:33Z", "eventName": "GetCallerIdentity", "eventSource": "sts.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "36.187.170.43", "userAgent": "Boto3/1.14.7 Python/3.6.10 Linux/4.14.181-142.260.amzn2.x86_64 Botocore/1.17.7", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIAKRAYPPJT59T3DG3O", "userName": "Level6"}}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "ed7f99d2-fcdb-4cac-90ed-ec21cdbae44d", "record_id": "flaws_cloudtrail:0000198:ed7f99d2-fcdb-4cac-90ed-ec21cdbae44d", "row_index": 198, "timestamp": "2019-07-18T19:18:29Z", "event_type": "GetCallerIdentity", "event_source": "sts.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "4.254.15.47", "user_agent": "aws-cli/1.16.183 Python/3.5.2 Linux/4.4.0-112-generic botocore/1.12.173", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 779, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "ed7f99d2-fcdb-4cac-90ed-ec21cdbae44d", "eventTime": "2019-07-18T19:18:29Z", "eventName": "GetCallerIdentity", "eventSource": "sts.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "4.254.15.47", "userAgent": "aws-cli/1.16.183 Python/3.5.2 Linux/4.4.0-112-generic botocore/1.12.173", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "responseElements": {"userId": "AIDA9BO36HFBHKGJAO9C1", "account": "811596193553", "arn": "arn:aws:iam::811596193553:user/backup"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "ed7f99d2-fcdb-4cac-90ed-ec21cdbae44d", "record_id": "flaws_cloudtrail:0000199:ed7f99d2-fcdb-4cac-90ed-ec21cdbae44d", "row_index": 199, "timestamp": "2019-07-18T19:18:29Z", "event_type": "GetCallerIdentity", "event_source": "sts.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "4.254.15.47", "user_agent": "aws-cli/1.16.183 Python/3.5.2 Linux/4.4.0-112-generic botocore/1.12.173", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 779, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "ed7f99d2-fcdb-4cac-90ed-ec21cdbae44d", "eventTime": "2019-07-18T19:18:29Z", "eventName": "GetCallerIdentity", "eventSource": "sts.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "4.254.15.47", "userAgent": "aws-cli/1.16.183 Python/3.5.2 Linux/4.4.0-112-generic botocore/1.12.173", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "responseElements": {"userId": "AIDA9BO36HFBHKGJAO9C1", "account": "811596193553", "arn": "arn:aws:iam::811596193553:user/backup"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "56aca99e-5ea5-4222-ab6d-a66f41e3972b", "record_id": "flaws_cloudtrail:0000200:56aca99e-5ea5-4222-ab6d-a66f41e3972b", "row_index": 200, "timestamp": "2019-07-18T19:18:52Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "4.254.15.47", "user_agent": "aws-cli/1.16.183 Python/3.5.2 Linux/4.4.0-112-generic botocore/1.12.173", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 793, "raw_record_depth": 5, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "56aca99e-5ea5-4222-ab6d-a66f41e3972b", "eventTime": "2019-07-18T19:18:52Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "4.254.15.47", "userAgent": "aws-cli/1.16.183 Python/3.5.2 Linux/4.4.0-112-generic botocore/1.12.173", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"maxResults": 1000, "snapshotSet": {}, "ownersSet": {"items": [{"owner": "811596193553"}]}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "56aca99e-5ea5-4222-ab6d-a66f41e3972b", "record_id": "flaws_cloudtrail:0000201:56aca99e-5ea5-4222-ab6d-a66f41e3972b", "row_index": 201, "timestamp": "2019-07-18T19:18:52Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "4.254.15.47", "user_agent": "aws-cli/1.16.183 Python/3.5.2 Linux/4.4.0-112-generic botocore/1.12.173", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 793, "raw_record_depth": 5, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "56aca99e-5ea5-4222-ab6d-a66f41e3972b", "eventTime": "2019-07-18T19:18:52Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "4.254.15.47", "userAgent": "aws-cli/1.16.183 Python/3.5.2 Linux/4.4.0-112-generic botocore/1.12.173", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"maxResults": 1000, "snapshotSet": {}, "ownersSet": {"items": [{"owner": "811596193553"}]}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "0fac8361-66dd-4d7c-a836-96764424480f", "record_id": "flaws_cloudtrail:0000202:0fac8361-66dd-4d7c-a836-96764424480f", "row_index": 202, "timestamp": "2019-07-18T19:18:59Z", "event_type": "ListUsers", "event_source": "iam.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIAKRAYPPJT59T3DG3O", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "36.187.170.43", "user_agent": "Boto3/1.14.7 Python/3.6.10 Linux/4.14.181-142.260.amzn2.x86_64 Botocore/1.17.7", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 558, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "requestParameters", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "0fac8361-66dd-4d7c-a836-96764424480f", "eventTime": "2019-07-18T19:18:59Z", "eventName": "ListUsers", "eventSource": "iam.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "36.187.170.43", "userAgent": "Boto3/1.14.7 Python/3.6.10 Linux/4.14.181-142.260.amzn2.x86_64 Botocore/1.17.7", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIAKRAYPPJT59T3DG3O", "userName": "Level6"}, "requestParameters": {"maxItems": 100}}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "cb610d53-1dfc-4469-9647-495683da6db49", "record_id": "flaws_cloudtrail:0000203:cb610d53-1dfc-4469-9647-495683da6db49", "row_index": 203, "timestamp": "2019-07-18T19:19:13Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "4.254.15.47", "user_agent": "aws-cli/1.16.183 Python/3.5.2 Linux/4.4.0-112-generic botocore/1.12.173", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 761, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "cb610d53-1dfc-4469-9647-495683da6db49", "eventTime": "2019-07-18T19:19:13Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "4.254.15.47", "userAgent": "aws-cli/1.16.183 Python/3.5.2 Linux/4.4.0-112-generic botocore/1.12.173", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "cb610d53-1dfc-4469-9647-495683da6db49", "record_id": "flaws_cloudtrail:0000204:cb610d53-1dfc-4469-9647-495683da6db49", "row_index": 204, "timestamp": "2019-07-18T19:19:13Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "4.254.15.47", "user_agent": "aws-cli/1.16.183 Python/3.5.2 Linux/4.4.0-112-generic botocore/1.12.173", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 761, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "cb610d53-1dfc-4469-9647-495683da6db49", "eventTime": "2019-07-18T19:19:13Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "4.254.15.47", "userAgent": "aws-cli/1.16.183 Python/3.5.2 Linux/4.4.0-112-generic botocore/1.12.173", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "8e289cfd-ecf3-4415-b63f-23159ee6c329", "record_id": "flaws_cloudtrail:0000205:8e289cfd-ecf3-4415-b63f-23159ee6c329", "row_index": 205, "timestamp": "2019-07-18T19:19:15Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "4.254.15.47", "user_agent": "aws-cli/1.16.183 Python/3.5.2 Linux/4.4.0-112-generic botocore/1.12.173", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 1087, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "8e289cfd-ecf3-4415-b63f-23159ee6c329", "eventTime": "2019-07-18T19:19:15Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "4.254.15.47", "userAgent": "aws-cli/1.16.183 Python/3.5.2 Linux/4.4.0-112-generic botocore/1.12.173", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"nextToken": "eyJ2IjoiMiIsImMiOiJXZzRQT0x1NXNXeDN2bUI0cmM2WHpQSjVxL0kzVldyRXlNTXArV01vaDFtVHdqNjdSVzBNaGtGN2JFR1BTWTkxblN1RVBEVUZrRkRFV0YyQkVKRVRNV3FoVWtTYnBNY2RqY1luMzE0b3hxU3ZhbnRFN0dpTHQ0NmUwc3g2M04ySjJlbXpSU0t5ZDVsN3pqY3FPRkF1U2ZzbWlGK0VSUFlpVktBdGN3WHRhSWJUak9MZFJnT0Z0VVVrSXZzLzF3MEltb0RaVnV0ZHh0clNmdz09IiwicyI6IjEifQ==", "maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "8e289cfd-ecf3-4415-b63f-23159ee6c329", "record_id": "flaws_cloudtrail:0000206:8e289cfd-ecf3-4415-b63f-23159ee6c329", "row_index": 206, "timestamp": "2019-07-18T19:19:15Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "4.254.15.47", "user_agent": "aws-cli/1.16.183 Python/3.5.2 Linux/4.4.0-112-generic botocore/1.12.173", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 1087, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "8e289cfd-ecf3-4415-b63f-23159ee6c329", "eventTime": "2019-07-18T19:19:15Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "4.254.15.47", "userAgent": "aws-cli/1.16.183 Python/3.5.2 Linux/4.4.0-112-generic botocore/1.12.173", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"nextToken": "eyJ2IjoiMiIsImMiOiJXZzRQT0x1NXNXeDN2bUI0cmM2WHpQSjVxL0kzVldyRXlNTXArV01vaDFtVHdqNjdSVzBNaGtGN2JFR1BTWTkxblN1RVBEVUZrRkRFV0YyQkVKRVRNV3FoVWtTYnBNY2RqY1luMzE0b3hxU3ZhbnRFN0dpTHQ0NmUwc3g2M04ySjJlbXpSU0t5ZDVsN3pqY3FPRkF1U2ZzbWlGK0VSUFlpVktBdGN3WHRhSWJUak9MZFJnT0Z0VVVrSXZzLzF3MEltb0RaVnV0ZHh0clNmdz09IiwicyI6IjEifQ==", "maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "0f19ed76-8ae0-4eaf-a363-0e19628be048", "record_id": "flaws_cloudtrail:0000207:0f19ed76-8ae0-4eaf-a363-0e19628be048", "row_index": 207, "timestamp": "2019-07-18T19:19:17Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "4.254.15.47", "user_agent": "aws-cli/1.16.183 Python/3.5.2 Linux/4.4.0-112-generic botocore/1.12.173", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 1087, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "0f19ed76-8ae0-4eaf-a363-0e19628be048", "eventTime": "2019-07-18T19:19:17Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "4.254.15.47", "userAgent": "aws-cli/1.16.183 Python/3.5.2 Linux/4.4.0-112-generic botocore/1.12.173", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"nextToken": "eyJ2IjoiMiIsImMiOiJBMHIwd0VyZE00Rkh5MVJOQkJadU04RUtwUGJmTDhNcitpaHhwRnI5QkErZFdKV1dvUFQ2UE5UZkoyNExQVWhBQjVKUTlSZTJmamtEUVZhTVh2RUZqaDBJQU84K1RMeUNvSGk4eG0vUWp6M0tpTExHTFdEb0lXRHZSQmlVK2JrVVhqR3VkZCtrMlluR1huTlJqK2JaTzZMclNTOWhnM0RaM1BJMVV2eUJZMEtGU1J6SWo0b205YWg3V2xnRkk1VXVuQzJyY0VQSGtYWncrdz09IiwicyI6IjEifQ==", "maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "0f19ed76-8ae0-4eaf-a363-0e19628be048", "record_id": "flaws_cloudtrail:0000208:0f19ed76-8ae0-4eaf-a363-0e19628be048", "row_index": 208, "timestamp": "2019-07-18T19:19:17Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "4.254.15.47", "user_agent": "aws-cli/1.16.183 Python/3.5.2 Linux/4.4.0-112-generic botocore/1.12.173", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 1087, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "0f19ed76-8ae0-4eaf-a363-0e19628be048", "eventTime": "2019-07-18T19:19:17Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "4.254.15.47", "userAgent": "aws-cli/1.16.183 Python/3.5.2 Linux/4.4.0-112-generic botocore/1.12.173", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"nextToken": "eyJ2IjoiMiIsImMiOiJBMHIwd0VyZE00Rkh5MVJOQkJadU04RUtwUGJmTDhNcitpaHhwRnI5QkErZFdKV1dvUFQ2UE5UZkoyNExQVWhBQjVKUTlSZTJmamtEUVZhTVh2RUZqaDBJQU84K1RMeUNvSGk4eG0vUWp6M0tpTExHTFdEb0lXRHZSQmlVK2JrVVhqR3VkZCtrMlluR1huTlJqK2JaTzZMclNTOWhnM0RaM1BJMVV2eUJZMEtGU1J6SWo0b205YWg3V2xnRkk1VXVuQzJyY0VQSGtYWncrdz09IiwicyI6IjEifQ==", "maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "7df0ef0b-c3e9-4f1b-afe5-13f71a43744", "record_id": "flaws_cloudtrail:0000209:7df0ef0b-c3e9-4f1b-afe5-13f71a43744", "row_index": 209, "timestamp": "2019-07-18T19:19:18Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "4.254.15.47", "user_agent": "aws-cli/1.16.183 Python/3.5.2 Linux/4.4.0-112-generic botocore/1.12.173", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 1082, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "7df0ef0b-c3e9-4f1b-afe5-13f71a43744", "eventTime": "2019-07-18T19:19:18Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "4.254.15.47", "userAgent": "aws-cli/1.16.183 Python/3.5.2 Linux/4.4.0-112-generic botocore/1.12.173", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"nextToken": "eyJ2IjoiMiIsImMiOiIyYUp1dVM4R3kzU3RGdld6TnByU2VKUlcxQWRRVFVpdGNPVmM5QUZKL1Y4eUhBOTIzV2dEZFMrRlFKak5qdVhVR0tueGsreHROY0JCOG9wQkZacm5YNHBZdGVTcGtuVjZzNk5xR1hMbFNidXpXUHJmazBKVWVmT3VWem1sL0xUc0tOQldoZ0o0aTdsbzdBZEkzWnVpOEc5Nnd3ODRGYlRKR210dVBBLzdxUzg2NWZORkdqTWROdGN5eUJRQWRCWDVjNEJXNXJuVVU2aTN5Zz09IiwicyI6IjEifQ==", "maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "7df0ef0b-c3e9-4f1b-afe5-13f71a43744", "record_id": "flaws_cloudtrail:0000210:7df0ef0b-c3e9-4f1b-afe5-13f71a43744", "row_index": 210, "timestamp": "2019-07-18T19:19:18Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "4.254.15.47", "user_agent": "aws-cli/1.16.183 Python/3.5.2 Linux/4.4.0-112-generic botocore/1.12.173", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 1082, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "7df0ef0b-c3e9-4f1b-afe5-13f71a43744", "eventTime": "2019-07-18T19:19:18Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "4.254.15.47", "userAgent": "aws-cli/1.16.183 Python/3.5.2 Linux/4.4.0-112-generic botocore/1.12.173", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"nextToken": "eyJ2IjoiMiIsImMiOiIyYUp1dVM4R3kzU3RGdld6TnByU2VKUlcxQWRRVFVpdGNPVmM5QUZKL1Y4eUhBOTIzV2dEZFMrRlFKak5qdVhVR0tueGsreHROY0JCOG9wQkZacm5YNHBZdGVTcGtuVjZzNk5xR1hMbFNidXpXUHJmazBKVWVmT3VWem1sL0xUc0tOQldoZ0o0aTdsbzdBZEkzWnVpOEc5Nnd3ODRGYlRKR210dVBBLzdxUzg2NWZORkdqTWROdGN5eUJRQWRCWDVjNEJXNXJuVVU2aTN5Zz09IiwicyI6IjEifQ==", "maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "9b175428-2874-4a69-b21a-46ec20a8b625", "record_id": "flaws_cloudtrail:0000211:9b175428-2874-4a69-b21a-46ec20a8b625", "row_index": 211, "timestamp": "2019-07-18T19:19:19Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "4.254.15.47", "user_agent": "aws-cli/1.16.183 Python/3.5.2 Linux/4.4.0-112-generic botocore/1.12.173", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 1079, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "9b175428-2874-4a69-b21a-46ec20a8b625", "eventTime": "2019-07-18T19:19:19Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "4.254.15.47", "userAgent": "aws-cli/1.16.183 Python/3.5.2 Linux/4.4.0-112-generic botocore/1.12.173", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"nextToken": "eyJ2IjoiMiIsImMiOiJ3ZWZ3TVM3RXZLcE82eTJqYWh6clFuRzlqZ05DeGgraENhU0JaRFNLeTUzRHozdTZDWnVxR2t1T2s0SDAwOXR4bjlINWhUYktnRTdxNW1LVnR6WHY0OUZMQk1wU1pXN0RER3d1aytZbENLKzlURkhtSFE3ai8yUjE0RGJrWEcxYWI5d05TRC92TmFKNnZySmZOVVJrQk4xVVo3V3V6djR0dnZOWlpwamV0QkxsSllRdmZCdUlKQTJKbktTcHFmNkxDa0NlZ2ZPZWFRPT0iLCJzIjoiMSJ9", "maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "9b175428-2874-4a69-b21a-46ec20a8b625", "record_id": "flaws_cloudtrail:0000212:9b175428-2874-4a69-b21a-46ec20a8b625", "row_index": 212, "timestamp": "2019-07-18T19:19:19Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "4.254.15.47", "user_agent": "aws-cli/1.16.183 Python/3.5.2 Linux/4.4.0-112-generic botocore/1.12.173", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 1079, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "9b175428-2874-4a69-b21a-46ec20a8b625", "eventTime": "2019-07-18T19:19:19Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "4.254.15.47", "userAgent": "aws-cli/1.16.183 Python/3.5.2 Linux/4.4.0-112-generic botocore/1.12.173", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"nextToken": "eyJ2IjoiMiIsImMiOiJ3ZWZ3TVM3RXZLcE82eTJqYWh6clFuRzlqZ05DeGgraENhU0JaRFNLeTUzRHozdTZDWnVxR2t1T2s0SDAwOXR4bjlINWhUYktnRTdxNW1LVnR6WHY0OUZMQk1wU1pXN0RER3d1aytZbENLKzlURkhtSFE3ai8yUjE0RGJrWEcxYWI5d05TRC92TmFKNnZySmZOVVJrQk4xVVo3V3V6djR0dnZOWlpwamV0QkxsSllRdmZCdUlKQTJKbktTcHFmNkxDa0NlZ2ZPZWFRPT0iLCJzIjoiMSJ9", "maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "b9eb9c1b-5337-49ab-94cf-679791c9f911", "record_id": "flaws_cloudtrail:0000213:b9eb9c1b-5337-49ab-94cf-679791c9f911", "row_index": 213, "timestamp": "2019-07-18T19:19:20Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "4.254.15.47", "user_agent": "aws-cli/1.16.183 Python/3.5.2 Linux/4.4.0-112-generic botocore/1.12.173", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 1087, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "b9eb9c1b-5337-49ab-94cf-679791c9f911", "eventTime": "2019-07-18T19:19:20Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "4.254.15.47", "userAgent": "aws-cli/1.16.183 Python/3.5.2 Linux/4.4.0-112-generic botocore/1.12.173", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"nextToken": "eyJ2IjoiMiIsImMiOiJpYm5lcWNld2xWTjA0TGlmOXBDdmgyVFFTUE01UVNpNHNPZDg2ZjdxaDhZSVZKQ2d3OHJwY2QrZ1NRMTFaSnJTN21MUjFPaUsxUjkwdjZqWDdvSDEzVkZOc0hpZXpjUlltdURaMk8zSzFBbmZQM0xDenR2ODRkb0pRb3ErS1R5TkdtNEthRlNQTFdMR1piSFBMTVorN0JLSmYrbjB0SldWS3AvVFNHOFBQdS9wbENSMTY4UWUwK04rdzIwS2I2NXBtckh3TkhxMkdKRnBZQT09IiwicyI6IjEifQ==", "maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "b9eb9c1b-5337-49ab-94cf-679791c9f911", "record_id": "flaws_cloudtrail:0000214:b9eb9c1b-5337-49ab-94cf-679791c9f911", "row_index": 214, "timestamp": "2019-07-18T19:19:20Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "4.254.15.47", "user_agent": "aws-cli/1.16.183 Python/3.5.2 Linux/4.4.0-112-generic botocore/1.12.173", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 1087, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "b9eb9c1b-5337-49ab-94cf-679791c9f911", "eventTime": "2019-07-18T19:19:20Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "4.254.15.47", "userAgent": "aws-cli/1.16.183 Python/3.5.2 Linux/4.4.0-112-generic botocore/1.12.173", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"nextToken": "eyJ2IjoiMiIsImMiOiJpYm5lcWNld2xWTjA0TGlmOXBDdmgyVFFTUE01UVNpNHNPZDg2ZjdxaDhZSVZKQ2d3OHJwY2QrZ1NRMTFaSnJTN21MUjFPaUsxUjkwdjZqWDdvSDEzVkZOc0hpZXpjUlltdURaMk8zSzFBbmZQM0xDenR2ODRkb0pRb3ErS1R5TkdtNEthRlNQTFdMR1piSFBMTVorN0JLSmYrbjB0SldWS3AvVFNHOFBQdS9wbENSMTY4UWUwK04rdzIwS2I2NXBtckh3TkhxMkdKRnBZQT09IiwicyI6IjEifQ==", "maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "5da025c8-5406-4a8e-b72b-5a0715387d70", "record_id": "flaws_cloudtrail:0000215:5da025c8-5406-4a8e-b72b-5a0715387d70", "row_index": 215, "timestamp": "2019-07-18T19:19:21Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "4.254.15.47", "user_agent": "aws-cli/1.16.183 Python/3.5.2 Linux/4.4.0-112-generic botocore/1.12.173", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 1088, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "5da025c8-5406-4a8e-b72b-5a0715387d70", "eventTime": "2019-07-18T19:19:21Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "4.254.15.47", "userAgent": "aws-cli/1.16.183 Python/3.5.2 Linux/4.4.0-112-generic botocore/1.12.173", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"nextToken": "eyJ2IjoiMiIsImMiOiJvNUJNRGhlaFRQWlM5L0FHbzFLV0VCclpsMU5LZFVNNjhmMk1ycWZxMndJek0vOFh4V2tEVjVndkNsWVJpWkRJdGdRNlZCMzlYN0g5YkJjaldXQnB0UzIvUndYR1B6N2RiWHZWNzZSTmdRaUYxSVRHc1JVVFVmRjdzbFYzdWV6eWhTdUdKN2JPbUgyM241dnV6MFBsc2xYR0QxMzY1aDhxNVBXdUNSYlM2cWRPREJ3MzR4dysvcWo0YllicXR6TkhOK0gyWHI0Q2QwMW9rQT09IiwicyI6IjEifQ==", "maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "5da025c8-5406-4a8e-b72b-5a0715387d70", "record_id": "flaws_cloudtrail:0000216:5da025c8-5406-4a8e-b72b-5a0715387d70", "row_index": 216, "timestamp": "2019-07-18T19:19:21Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "4.254.15.47", "user_agent": "aws-cli/1.16.183 Python/3.5.2 Linux/4.4.0-112-generic botocore/1.12.173", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 1088, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "5da025c8-5406-4a8e-b72b-5a0715387d70", "eventTime": "2019-07-18T19:19:21Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "4.254.15.47", "userAgent": "aws-cli/1.16.183 Python/3.5.2 Linux/4.4.0-112-generic botocore/1.12.173", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"nextToken": "eyJ2IjoiMiIsImMiOiJvNUJNRGhlaFRQWlM5L0FHbzFLV0VCclpsMU5LZFVNNjhmMk1ycWZxMndJek0vOFh4V2tEVjVndkNsWVJpWkRJdGdRNlZCMzlYN0g5YkJjaldXQnB0UzIvUndYR1B6N2RiWHZWNzZSTmdRaUYxSVRHc1JVVFVmRjdzbFYzdWV6eWhTdUdKN2JPbUgyM241dnV6MFBsc2xYR0QxMzY1aDhxNVBXdUNSYlM2cWRPREJ3MzR4dysvcWo0YllicXR6TkhOK0gyWHI0Q2QwMW9rQT09IiwicyI6IjEifQ==", "maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "4e2327cf-f674-4508-bcfb-8c4e26f4eb37", "record_id": "flaws_cloudtrail:0000217:4e2327cf-f674-4508-bcfb-8c4e26f4eb37", "row_index": 217, "timestamp": "2019-07-18T19:19:22Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "4.254.15.47", "user_agent": "aws-cli/1.16.183 Python/3.5.2 Linux/4.4.0-112-generic botocore/1.12.173", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 1087, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "4e2327cf-f674-4508-bcfb-8c4e26f4eb37", "eventTime": "2019-07-18T19:19:22Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "4.254.15.47", "userAgent": "aws-cli/1.16.183 Python/3.5.2 Linux/4.4.0-112-generic botocore/1.12.173", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"nextToken": "eyJ2IjoiMiIsImMiOiJKbEdWT1hrQ1RaNEFERWsxWm4xQys1eEdWalFqK25HbkxINXUwSFFwYmFUY2wyRzdBQ1RYNDViVWRPS2FXWURsYVZFb1JCYW9JTXZ0NnVscWJHMVJsTWJBR2xVbjB4RmRkTXVuNW0waHUzcjlXMXFNMnJpQlhEblpuN2hQcWd4b2JhTVEvNWVxNzRQYjk2YXdFQ1dzU0xDemkwb2czTExJNmF6M2lTbGRoaE5SMmd2QkZnc1J4SEVFOGJBTUc0YXBlbTdBbDRPa0tYWUJaZz09IiwicyI6IjEifQ==", "maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "4e2327cf-f674-4508-bcfb-8c4e26f4eb37", "record_id": "flaws_cloudtrail:0000218:4e2327cf-f674-4508-bcfb-8c4e26f4eb37", "row_index": 218, "timestamp": "2019-07-18T19:19:22Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "4.254.15.47", "user_agent": "aws-cli/1.16.183 Python/3.5.2 Linux/4.4.0-112-generic botocore/1.12.173", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 1087, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "4e2327cf-f674-4508-bcfb-8c4e26f4eb37", "eventTime": "2019-07-18T19:19:22Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "4.254.15.47", "userAgent": "aws-cli/1.16.183 Python/3.5.2 Linux/4.4.0-112-generic botocore/1.12.173", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"nextToken": "eyJ2IjoiMiIsImMiOiJKbEdWT1hrQ1RaNEFERWsxWm4xQys1eEdWalFqK25HbkxINXUwSFFwYmFUY2wyRzdBQ1RYNDViVWRPS2FXWURsYVZFb1JCYW9JTXZ0NnVscWJHMVJsTWJBR2xVbjB4RmRkTXVuNW0waHUzcjlXMXFNMnJpQlhEblpuN2hQcWd4b2JhTVEvNWVxNzRQYjk2YXdFQ1dzU0xDemkwb2czTExJNmF6M2lTbGRoaE5SMmd2QkZnc1J4SEVFOGJBTUc0YXBlbTdBbDRPa0tYWUJaZz09IiwicyI6IjEifQ==", "maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "96f338747-9f61-42a9-b48c-5361d994eba8", "record_id": "flaws_cloudtrail:0000219:96f338747-9f61-42a9-b48c-5361d994eba8", "row_index": 219, "timestamp": "2019-07-18T19:19:23Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "4.254.15.47", "user_agent": "aws-cli/1.16.183 Python/3.5.2 Linux/4.4.0-112-generic botocore/1.12.173", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 1086, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "96f338747-9f61-42a9-b48c-5361d994eba8", "eventTime": "2019-07-18T19:19:23Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "4.254.15.47", "userAgent": "aws-cli/1.16.183 Python/3.5.2 Linux/4.4.0-112-generic botocore/1.12.173", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"nextToken": "eyJ2IjoiMiIsImMiOiJXa25LNE11UVBDNm90ZXVLelZKUkROamZKMnZVV0RhSGkvcmZaeUJwSG5PUU81YUNmdGRQd3E0MEZtNjU5SEUxaUdKMVVnSHI1KzZtM05CNkMzQ3ZsKzVCK0ViV0FjZGMyeXF4aXA1VGNUVyt5WnpWNElxMXV4YXpUT1R2aUNMNElySFdMUC8ybk5NcGFIbWs0OUtNQ25KUWRqYWdFODczcWN1UytMc3FMY1dLN1NkYm0wdjY5ellVRWM4MGdJT1VPWWlNMERBbk9tQnFPQT09IiwicyI6IjEifQ==", "maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "96f338747-9f61-42a9-b48c-5361d994eba8", "record_id": "flaws_cloudtrail:0000220:96f338747-9f61-42a9-b48c-5361d994eba8", "row_index": 220, "timestamp": "2019-07-18T19:19:23Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "4.254.15.47", "user_agent": "aws-cli/1.16.183 Python/3.5.2 Linux/4.4.0-112-generic botocore/1.12.173", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 1086, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "96f338747-9f61-42a9-b48c-5361d994eba8", "eventTime": "2019-07-18T19:19:23Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "4.254.15.47", "userAgent": "aws-cli/1.16.183 Python/3.5.2 Linux/4.4.0-112-generic botocore/1.12.173", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"nextToken": "eyJ2IjoiMiIsImMiOiJXa25LNE11UVBDNm90ZXVLelZKUkROamZKMnZVV0RhSGkvcmZaeUJwSG5PUU81YUNmdGRQd3E0MEZtNjU5SEUxaUdKMVVnSHI1KzZtM05CNkMzQ3ZsKzVCK0ViV0FjZGMyeXF4aXA1VGNUVyt5WnpWNElxMXV4YXpUT1R2aUNMNElySFdMUC8ybk5NcGFIbWs0OUtNQ25KUWRqYWdFODczcWN1UytMc3FMY1dLN1NkYm0wdjY5ellVRWM4MGdJT1VPWWlNMERBbk9tQnFPQT09IiwicyI6IjEifQ==", "maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "59f37ee3-c061-4347-baac-28984322e187", "record_id": "flaws_cloudtrail:0000221:59f37ee3-c061-4347-baac-28984322e187", "row_index": 221, "timestamp": "2019-07-18T19:19:24Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "4.254.15.47", "user_agent": "aws-cli/1.16.183 Python/3.5.2 Linux/4.4.0-112-generic botocore/1.12.173", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 1087, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "59f37ee3-c061-4347-baac-28984322e187", "eventTime": "2019-07-18T19:19:24Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "4.254.15.47", "userAgent": "aws-cli/1.16.183 Python/3.5.2 Linux/4.4.0-112-generic botocore/1.12.173", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"nextToken": "eyJ2IjoiMiIsImMiOiJ3SXIzb0xnZWxzdStRd0tPb1RzNlVLc1JYZXM2RUdHKzNYcitHMEFRbE1PQlo2ZEJDeVl0M3phNlRCL3FnNmRzbzkzNm9iV3pGNm9La2w3WG5FVWtOZlp4b05MbzhoaHhXOXZxUGRJTVUvUDRlczVWWXpkMWpEWHIwZ25hTjFhbE9heS9PTWRuVklDTHd2T2Y3Q0d0RFBSdHRpS2tWalZvc1pzUHBVSFVrUE1iQmNBSVN4M283Y2RIOGxXU2tWa1RxckxOcGgrU3Z6c0NXUT09IiwicyI6IjEifQ==", "maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "59f37ee3-c061-4347-baac-28984322e187", "record_id": "flaws_cloudtrail:0000222:59f37ee3-c061-4347-baac-28984322e187", "row_index": 222, "timestamp": "2019-07-18T19:19:24Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "4.254.15.47", "user_agent": "aws-cli/1.16.183 Python/3.5.2 Linux/4.4.0-112-generic botocore/1.12.173", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 1087, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "59f37ee3-c061-4347-baac-28984322e187", "eventTime": "2019-07-18T19:19:24Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "4.254.15.47", "userAgent": "aws-cli/1.16.183 Python/3.5.2 Linux/4.4.0-112-generic botocore/1.12.173", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"nextToken": "eyJ2IjoiMiIsImMiOiJ3SXIzb0xnZWxzdStRd0tPb1RzNlVLc1JYZXM2RUdHKzNYcitHMEFRbE1PQlo2ZEJDeVl0M3phNlRCL3FnNmRzbzkzNm9iV3pGNm9La2w3WG5FVWtOZlp4b05MbzhoaHhXOXZxUGRJTVUvUDRlczVWWXpkMWpEWHIwZ25hTjFhbE9heS9PTWRuVklDTHd2T2Y3Q0d0RFBSdHRpS2tWalZvc1pzUHBVSFVrUE1iQmNBSVN4M283Y2RIOGxXU2tWa1RxckxOcGgrU3Z6c0NXUT09IiwicyI6IjEifQ==", "maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "8b9fd012-f053-4802-bf13-6a4da34bf9dc", "record_id": "flaws_cloudtrail:0000223:8b9fd012-f053-4802-bf13-6a4da34bf9dc", "row_index": 223, "timestamp": "2019-07-18T19:19:25Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "4.254.15.47", "user_agent": "aws-cli/1.16.183 Python/3.5.2 Linux/4.4.0-112-generic botocore/1.12.173", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 1087, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "8b9fd012-f053-4802-bf13-6a4da34bf9dc", "eventTime": "2019-07-18T19:19:25Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "4.254.15.47", "userAgent": "aws-cli/1.16.183 Python/3.5.2 Linux/4.4.0-112-generic botocore/1.12.173", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"nextToken": "eyJ2IjoiMiIsImMiOiIzMzV2UXdyOHRGa0RtTFZvQVo5VGhhSjhIc0JyZWI3WU5QZEI2WkJZUFdmdmI5THM0c1FkK2VuZDlUNC91ZDVMRnJRcUJDQUM5elM0bGV3dkphOTJEeEFjOTRiTE1UODZENi9qRGMrRWlYZG5nWVJHNkZMdC9hcFZTWktMcFlPUHQ2L2RUUzRmK3dreXBQeEY2UnRNa3V2eFpabDkzNnVmTENoQng3SkNNMmpRTExVeFgxYWZmeW11cmdpbUxTcW5HRmk0cTdWM1BXSmRQdz09IiwicyI6IjEifQ==", "maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "8b9fd012-f053-4802-bf13-6a4da34bf9dc", "record_id": "flaws_cloudtrail:0000224:8b9fd012-f053-4802-bf13-6a4da34bf9dc", "row_index": 224, "timestamp": "2019-07-18T19:19:25Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "4.254.15.47", "user_agent": "aws-cli/1.16.183 Python/3.5.2 Linux/4.4.0-112-generic botocore/1.12.173", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 1087, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "8b9fd012-f053-4802-bf13-6a4da34bf9dc", "eventTime": "2019-07-18T19:19:25Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "4.254.15.47", "userAgent": "aws-cli/1.16.183 Python/3.5.2 Linux/4.4.0-112-generic botocore/1.12.173", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"nextToken": "eyJ2IjoiMiIsImMiOiIzMzV2UXdyOHRGa0RtTFZvQVo5VGhhSjhIc0JyZWI3WU5QZEI2WkJZUFdmdmI5THM0c1FkK2VuZDlUNC91ZDVMRnJRcUJDQUM5elM0bGV3dkphOTJEeEFjOTRiTE1UODZENi9qRGMrRWlYZG5nWVJHNkZMdC9hcFZTWktMcFlPUHQ2L2RUUzRmK3dreXBQeEY2UnRNa3V2eFpabDkzNnVmTENoQng3SkNNMmpRTExVeFgxYWZmeW11cmdpbUxTcW5HRmk0cTdWM1BXSmRQdz09IiwicyI6IjEifQ==", "maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "a57e8d27-23ca-480a-a4ea-aebadb744ba3", "record_id": "flaws_cloudtrail:0000225:a57e8d27-23ca-480a-a4ea-aebadb744ba3", "row_index": 225, "timestamp": "2019-07-18T19:19:26Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "4.254.15.47", "user_agent": "aws-cli/1.16.183 Python/3.5.2 Linux/4.4.0-112-generic botocore/1.12.173", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 1087, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "a57e8d27-23ca-480a-a4ea-aebadb744ba3", "eventTime": "2019-07-18T19:19:26Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "4.254.15.47", "userAgent": "aws-cli/1.16.183 Python/3.5.2 Linux/4.4.0-112-generic botocore/1.12.173", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"nextToken": "eyJ2IjoiMiIsImMiOiJTdXREVk9NRlNUVkErK0duOXorZm5PdGdXSDV3dHZ2OU9XMnJMYmw1b28wMlMzWFNxeTkvMWcyMnZPTkM2YzhDSmU1dHFQdmQ1QTRTUHhrU3llcjVRUHFNSXdaSDlMS0hrelZKaS96aEdWWk5YcmJ6TFd6YTlYTHBkQXRWTjg3SDFxWHZIektoaU5QUWdrbTk1c2UxdGVrTkJIVWJ0VFZWeGRUcWNUb0JkRnlDdFB3cXNQbk9wcHhKM015NWlZTmJMQmY3ek1uZFQ4V3pZdz09IiwicyI6IjEifQ==", "maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "a57e8d27-23ca-480a-a4ea-aebadb744ba3", "record_id": "flaws_cloudtrail:0000226:a57e8d27-23ca-480a-a4ea-aebadb744ba3", "row_index": 226, "timestamp": "2019-07-18T19:19:26Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "4.254.15.47", "user_agent": "aws-cli/1.16.183 Python/3.5.2 Linux/4.4.0-112-generic botocore/1.12.173", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 1087, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "a57e8d27-23ca-480a-a4ea-aebadb744ba3", "eventTime": "2019-07-18T19:19:26Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "4.254.15.47", "userAgent": "aws-cli/1.16.183 Python/3.5.2 Linux/4.4.0-112-generic botocore/1.12.173", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"nextToken": "eyJ2IjoiMiIsImMiOiJTdXREVk9NRlNUVkErK0duOXorZm5PdGdXSDV3dHZ2OU9XMnJMYmw1b28wMlMzWFNxeTkvMWcyMnZPTkM2YzhDSmU1dHFQdmQ1QTRTUHhrU3llcjVRUHFNSXdaSDlMS0hrelZKaS96aEdWWk5YcmJ6TFd6YTlYTHBkQXRWTjg3SDFxWHZIektoaU5QUWdrbTk1c2UxdGVrTkJIVWJ0VFZWeGRUcWNUb0JkRnlDdFB3cXNQbk9wcHhKM015NWlZTmJMQmY3ek1uZFQ4V3pZdz09IiwicyI6IjEifQ==", "maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "e326ff2f-4c3d-44d3-91a3-ef770084", "record_id": "flaws_cloudtrail:0000227:e326ff2f-4c3d-44d3-91a3-ef770084", "row_index": 227, "timestamp": "2019-07-18T19:19:27Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "4.254.15.47", "user_agent": "aws-cli/1.16.183 Python/3.5.2 Linux/4.4.0-112-generic botocore/1.12.173", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 1083, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "e326ff2f-4c3d-44d3-91a3-ef770084", "eventTime": "2019-07-18T19:19:27Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "4.254.15.47", "userAgent": "aws-cli/1.16.183 Python/3.5.2 Linux/4.4.0-112-generic botocore/1.12.173", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"nextToken": "eyJ2IjoiMiIsImMiOiIya1R4QkpXV01lSGFYdEJoTHFDMjhHVlh1SmR4bERmcVk2Um9PRUFVYTM0c1FuVk9GZnUwWVgrcFRiTVZXbkxUaTROZW93UUNlNXExaEVaQlJ2VVA0c0I3dWNQY2tmL0wwdHdXZFVFUllMaWpCUkVvYzd1OTNSOWdSYlpuQnBaY3gyMkpZc21DSEllTkR0enpYUWt2Z1FRZFpUY1d4bGQvb1AvaW5CMXVieVg4d1pOSFBKK1JRL0t6Z0hMWFFYL2lKcTJScTUrS1VyVngrdz09IiwicyI6IjEifQ==", "maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "e326ff2f-4c3d-44d3-91a3-ef770084", "record_id": "flaws_cloudtrail:0000228:e326ff2f-4c3d-44d3-91a3-ef770084", "row_index": 228, "timestamp": "2019-07-18T19:19:27Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "4.254.15.47", "user_agent": "aws-cli/1.16.183 Python/3.5.2 Linux/4.4.0-112-generic botocore/1.12.173", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 1083, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "e326ff2f-4c3d-44d3-91a3-ef770084", "eventTime": "2019-07-18T19:19:27Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "4.254.15.47", "userAgent": "aws-cli/1.16.183 Python/3.5.2 Linux/4.4.0-112-generic botocore/1.12.173", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"nextToken": "eyJ2IjoiMiIsImMiOiIya1R4QkpXV01lSGFYdEJoTHFDMjhHVlh1SmR4bERmcVk2Um9PRUFVYTM0c1FuVk9GZnUwWVgrcFRiTVZXbkxUaTROZW93UUNlNXExaEVaQlJ2VVA0c0I3dWNQY2tmL0wwdHdXZFVFUllMaWpCUkVvYzd1OTNSOWdSYlpuQnBaY3gyMkpZc21DSEllTkR0enpYUWt2Z1FRZFpUY1d4bGQvb1AvaW5CMXVieVg4d1pOSFBKK1JRL0t6Z0hMWFFYL2lKcTJScTUrS1VyVngrdz09IiwicyI6IjEifQ==", "maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "0d108540d-d072-4832-959b-98f763013a8c", "record_id": "flaws_cloudtrail:0000229:0d108540d-d072-4832-959b-98f763013a8c", "row_index": 229, "timestamp": "2019-07-18T19:19:28Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "4.254.15.47", "user_agent": "aws-cli/1.16.183 Python/3.5.2 Linux/4.4.0-112-generic botocore/1.12.173", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 1089, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "0d108540d-d072-4832-959b-98f763013a8c", "eventTime": "2019-07-18T19:19:28Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "4.254.15.47", "userAgent": "aws-cli/1.16.183 Python/3.5.2 Linux/4.4.0-112-generic botocore/1.12.173", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"nextToken": "eyJ2IjoiMiIsImMiOiJEZ1o3cVdPRVpMbFZ0VHROSG05clY2V0srSnJ0YXEzM1BXMWhXOTJQS2VDeGZ6STJmUUdDS3JkLzdUandYalRaWSs1YXQ3dndEY3F5Y2U4a29WWlRqYjNRa2RUQkFuOXBheXpEclVETjFuRnltTUEzUkk2cWkwQWU2cjFHTlRtU01Ua3p2aGJESzVEWVBCZzNHbkdBSDRKU1FERzhmc1lKSW9lTUlXZXdOSmFXUVNSMXJ1OXFhR0pnaThoNHo2a3VJdThkbllRRStoS0pOUT09IiwicyI6IjEifQ==", "maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "0d108540d-d072-4832-959b-98f763013a8c", "record_id": "flaws_cloudtrail:0000230:0d108540d-d072-4832-959b-98f763013a8c", "row_index": 230, "timestamp": "2019-07-18T19:19:28Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "4.254.15.47", "user_agent": "aws-cli/1.16.183 Python/3.5.2 Linux/4.4.0-112-generic botocore/1.12.173", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 1089, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "0d108540d-d072-4832-959b-98f763013a8c", "eventTime": "2019-07-18T19:19:28Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "4.254.15.47", "userAgent": "aws-cli/1.16.183 Python/3.5.2 Linux/4.4.0-112-generic botocore/1.12.173", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"nextToken": "eyJ2IjoiMiIsImMiOiJEZ1o3cVdPRVpMbFZ0VHROSG05clY2V0srSnJ0YXEzM1BXMWhXOTJQS2VDeGZ6STJmUUdDS3JkLzdUandYalRaWSs1YXQ3dndEY3F5Y2U4a29WWlRqYjNRa2RUQkFuOXBheXpEclVETjFuRnltTUEzUkk2cWkwQWU2cjFHTlRtU01Ua3p2aGJESzVEWVBCZzNHbkdBSDRKU1FERzhmc1lKSW9lTUlXZXdOSmFXUVNSMXJ1OXFhR0pnaThoNHo2a3VJdThkbllRRStoS0pOUT09IiwicyI6IjEifQ==", "maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "1dd0dac5-9eba-46b4-aecd-da4244555de1", "record_id": "flaws_cloudtrail:0000231:1dd0dac5-9eba-46b4-aecd-da4244555de1", "row_index": 231, "timestamp": "2019-07-18T19:19:29Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "4.254.15.47", "user_agent": "aws-cli/1.16.183 Python/3.5.2 Linux/4.4.0-112-generic botocore/1.12.173", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 1087, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "1dd0dac5-9eba-46b4-aecd-da4244555de1", "eventTime": "2019-07-18T19:19:29Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "4.254.15.47", "userAgent": "aws-cli/1.16.183 Python/3.5.2 Linux/4.4.0-112-generic botocore/1.12.173", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"nextToken": "eyJ2IjoiMiIsImMiOiJFMUw5VFJNb1lQNGJsN2hsZjB4Nm4zd2JMUzR0YWFVcmJDdGd6V0NSU3hoV001Tk5nem5RRXlnVTNGenFJQzNmcVY2dmxDVzFLQ1ZraUYyQlczUUNITW5PdjRydzBMdk13K3laNDN0YWV4eUZwejVTb3NkRDV3dHUxV0tUZ2hYOW1oOHZ6VWRxZCtXU0tZWUJESEVPVy83N0d0WEc3SlppeS96NStXQ1U5elQ3bVdkTUhKV1dJTytFb3FLVS9xaVJsTkg0bzF4RkpZNUs3QT09IiwicyI6IjEifQ==", "maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "1dd0dac5-9eba-46b4-aecd-da4244555de1", "record_id": "flaws_cloudtrail:0000232:1dd0dac5-9eba-46b4-aecd-da4244555de1", "row_index": 232, "timestamp": "2019-07-18T19:19:29Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "4.254.15.47", "user_agent": "aws-cli/1.16.183 Python/3.5.2 Linux/4.4.0-112-generic botocore/1.12.173", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 1087, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "1dd0dac5-9eba-46b4-aecd-da4244555de1", "eventTime": "2019-07-18T19:19:29Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "4.254.15.47", "userAgent": "aws-cli/1.16.183 Python/3.5.2 Linux/4.4.0-112-generic botocore/1.12.173", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"nextToken": "eyJ2IjoiMiIsImMiOiJFMUw5VFJNb1lQNGJsN2hsZjB4Nm4zd2JMUzR0YWFVcmJDdGd6V0NSU3hoV001Tk5nem5RRXlnVTNGenFJQzNmcVY2dmxDVzFLQ1ZraUYyQlczUUNITW5PdjRydzBMdk13K3laNDN0YWV4eUZwejVTb3NkRDV3dHUxV0tUZ2hYOW1oOHZ6VWRxZCtXU0tZWUJESEVPVy83N0d0WEc3SlppeS96NStXQ1U5elQ3bVdkTUhKV1dJTytFb3FLVS9xaVJsTkg0bzF4RkpZNUs3QT09IiwicyI6IjEifQ==", "maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "dedac6c5-f142-4fd9-9cae-3306d43b9398", "record_id": "flaws_cloudtrail:0000233:dedac6c5-f142-4fd9-9cae-3306d43b9398", "row_index": 233, "timestamp": "2019-07-18T19:19:30Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "4.254.15.47", "user_agent": "aws-cli/1.16.183 Python/3.5.2 Linux/4.4.0-112-generic botocore/1.12.173", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 1087, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "dedac6c5-f142-4fd9-9cae-3306d43b9398", "eventTime": "2019-07-18T19:19:30Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "4.254.15.47", "userAgent": "aws-cli/1.16.183 Python/3.5.2 Linux/4.4.0-112-generic botocore/1.12.173", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"nextToken": "eyJ2IjoiMiIsImMiOiIzRE1VQkthVS8rNXFobkg1MWVvN3hlYSswcnJpWUNTNWpLbDRjK2VqWTRuNFE3MVBiSGw1ODJxL0FSTU1lbHl0c3gwNXhVT04ycFBjRTZBSkJvRzg4WjJ0bjhjZzhibkRzQ1BCRVU1eXo4NWc5REwyUHVpeEpCUlBrY2xIdEgxWisvSUViVW1NWTJJS3JZUG1DRlZ6aTIyZVZyeUEyRXc1TjdsbGZBK2p4S2Y4QlZyRXl4bmptUFZqUkIvMmgxak9PZDExYzRUN0ZzaUhQZz09IiwicyI6IjEifQ==", "maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "dedac6c5-f142-4fd9-9cae-3306d43b9398", "record_id": "flaws_cloudtrail:0000234:dedac6c5-f142-4fd9-9cae-3306d43b9398", "row_index": 234, "timestamp": "2019-07-18T19:19:30Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "4.254.15.47", "user_agent": "aws-cli/1.16.183 Python/3.5.2 Linux/4.4.0-112-generic botocore/1.12.173", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 1087, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "dedac6c5-f142-4fd9-9cae-3306d43b9398", "eventTime": "2019-07-18T19:19:30Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "4.254.15.47", "userAgent": "aws-cli/1.16.183 Python/3.5.2 Linux/4.4.0-112-generic botocore/1.12.173", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"nextToken": "eyJ2IjoiMiIsImMiOiIzRE1VQkthVS8rNXFobkg1MWVvN3hlYSswcnJpWUNTNWpLbDRjK2VqWTRuNFE3MVBiSGw1ODJxL0FSTU1lbHl0c3gwNXhVT04ycFBjRTZBSkJvRzg4WjJ0bjhjZzhibkRzQ1BCRVU1eXo4NWc5REwyUHVpeEpCUlBrY2xIdEgxWisvSUViVW1NWTJJS3JZUG1DRlZ6aTIyZVZyeUEyRXc1TjdsbGZBK2p4S2Y4QlZyRXl4bmptUFZqUkIvMmgxak9PZDExYzRUN0ZzaUhQZz09IiwicyI6IjEifQ==", "maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "9dd5c340-d590-4ddc-ad93-2fb4ba1f1b79", "record_id": "flaws_cloudtrail:0000235:9dd5c340-d590-4ddc-ad93-2fb4ba1f1b79", "row_index": 235, "timestamp": "2019-07-18T19:19:31Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "4.254.15.47", "user_agent": "aws-cli/1.16.183 Python/3.5.2 Linux/4.4.0-112-generic botocore/1.12.173", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 1086, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "9dd5c340-d590-4ddc-ad93-2fb4ba1f1b79", "eventTime": "2019-07-18T19:19:31Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "4.254.15.47", "userAgent": "aws-cli/1.16.183 Python/3.5.2 Linux/4.4.0-112-generic botocore/1.12.173", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"nextToken": "eyJ2IjoiMiIsImMiOiJqd0k1KzVTUGxML2U1aHJZTmJjTU5hRk9rMFNQMFJvNlkwVDJpakptZzlXdUx0L09sMWU2U2x1WXNROE1WeXBraGNCRHRQTzlIN2gxQng5aXlibmMvM0d0clRhQjN1WE5ZR0pndWQrYmE4a0p5N1g0WFEzVkNBcXZhWlVOdkMzYzBXdHo0VUNoRjBuQUNSODBmSzlnVlhudXREMjdQK2VoY2RhZ3lmZFdPWGhwZ1Fvdk1reVROQ3Z1WkJFeU9zeWpqa05WU2RTU1lYUS9FQT09IiwicyI6IjEifQ==", "maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "9dd5c340-d590-4ddc-ad93-2fb4ba1f1b79", "record_id": "flaws_cloudtrail:0000236:9dd5c340-d590-4ddc-ad93-2fb4ba1f1b79", "row_index": 236, "timestamp": "2019-07-18T19:19:31Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "4.254.15.47", "user_agent": "aws-cli/1.16.183 Python/3.5.2 Linux/4.4.0-112-generic botocore/1.12.173", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 1086, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "9dd5c340-d590-4ddc-ad93-2fb4ba1f1b79", "eventTime": "2019-07-18T19:19:31Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "4.254.15.47", "userAgent": "aws-cli/1.16.183 Python/3.5.2 Linux/4.4.0-112-generic botocore/1.12.173", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"nextToken": "eyJ2IjoiMiIsImMiOiJqd0k1KzVTUGxML2U1aHJZTmJjTU5hRk9rMFNQMFJvNlkwVDJpakptZzlXdUx0L09sMWU2U2x1WXNROE1WeXBraGNCRHRQTzlIN2gxQng5aXlibmMvM0d0clRhQjN1WE5ZR0pndWQrYmE4a0p5N1g0WFEzVkNBcXZhWlVOdkMzYzBXdHo0VUNoRjBuQUNSODBmSzlnVlhudXREMjdQK2VoY2RhZ3lmZFdPWGhwZ1Fvdk1reVROQ3Z1WkJFeU9zeWpqa05WU2RTU1lYUS9FQT09IiwicyI6IjEifQ==", "maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "be1f634a-5529-4d5f-82a7-254709e5ca3d", "record_id": "flaws_cloudtrail:0000237:be1f634a-5529-4d5f-82a7-254709e5ca3d", "row_index": 237, "timestamp": "2019-07-18T19:19:32Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "4.254.15.47", "user_agent": "aws-cli/1.16.183 Python/3.5.2 Linux/4.4.0-112-generic botocore/1.12.173", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 1087, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "be1f634a-5529-4d5f-82a7-254709e5ca3d", "eventTime": "2019-07-18T19:19:32Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "4.254.15.47", "userAgent": "aws-cli/1.16.183 Python/3.5.2 Linux/4.4.0-112-generic botocore/1.12.173", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"nextToken": "eyJ2IjoiMiIsImMiOiJTT2JsbDdzaHBIemhvb0hWcmRIS2swazB4UDlIK0FZaDNmcHJhUFFpVFBLY1FneGNVVkJnczYvSkk2d3htUVNscUpVcTkzMUt1anBHSmFZREtwWEJYL2NBeVZMZHlkSGxBMlUzaUg3cXIyYWx3dGk1YUloY2V0N3QrdTdOS1YxTlAvQ2drMGd4OVpENFh2ZXB6Q1VhajE2OVp6VTk1bzhDUTloMVBTWkhlVjQrY2dhd2tpck42WE1TOVgycDRPNVc5Q1lWb3doMWUvYlFOZz09IiwicyI6IjEifQ==", "maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "be1f634a-5529-4d5f-82a7-254709e5ca3d", "record_id": "flaws_cloudtrail:0000238:be1f634a-5529-4d5f-82a7-254709e5ca3d", "row_index": 238, "timestamp": "2019-07-18T19:19:32Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "4.254.15.47", "user_agent": "aws-cli/1.16.183 Python/3.5.2 Linux/4.4.0-112-generic botocore/1.12.173", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 1087, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "be1f634a-5529-4d5f-82a7-254709e5ca3d", "eventTime": "2019-07-18T19:19:32Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "4.254.15.47", "userAgent": "aws-cli/1.16.183 Python/3.5.2 Linux/4.4.0-112-generic botocore/1.12.173", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"nextToken": "eyJ2IjoiMiIsImMiOiJTT2JsbDdzaHBIemhvb0hWcmRIS2swazB4UDlIK0FZaDNmcHJhUFFpVFBLY1FneGNVVkJnczYvSkk2d3htUVNscUpVcTkzMUt1anBHSmFZREtwWEJYL2NBeVZMZHlkSGxBMlUzaUg3cXIyYWx3dGk1YUloY2V0N3QrdTdOS1YxTlAvQ2drMGd4OVpENFh2ZXB6Q1VhajE2OVp6VTk1bzhDUTloMVBTWkhlVjQrY2dhd2tpck42WE1TOVgycDRPNVc5Q1lWb3doMWUvYlFOZz09IiwicyI6IjEifQ==", "maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "aac6a4fc-83b4-459d-9597-0c594699be", "record_id": "flaws_cloudtrail:0000239:aac6a4fc-83b4-459d-9597-0c594699be", "row_index": 239, "timestamp": "2019-07-18T19:19:33Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "4.254.15.47", "user_agent": "aws-cli/1.16.183 Python/3.5.2 Linux/4.4.0-112-generic botocore/1.12.173", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 1085, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "aac6a4fc-83b4-459d-9597-0c594699be", "eventTime": "2019-07-18T19:19:33Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "4.254.15.47", "userAgent": "aws-cli/1.16.183 Python/3.5.2 Linux/4.4.0-112-generic botocore/1.12.173", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"nextToken": "eyJ2IjoiMiIsImMiOiIwc2tqT3QxV2h6M3VQdDFOOWo4ckhuRmE3MXNHdDVwM2cySGp6c3NXTm5sNzJSdG9xWHBseXZ6T0NZSnFwZUFOT2ZjTkxHOVBWbndqNmkzYnN5OGJ3MlR3b1FYZVlleG93WENCaEt0TXlIckNVZ2c4M0kvMENLdjZxMzRseUVEREJkby92VXF3ZkJ4eEVBQUZ6SzlLcm8ycnJzZmtrRHk3Y1VQSDVuZUhtN0NJVVBVMEFMRE91SzBYS2EzSU5jZUxwdk1OK09hdE4xZXIyUT09IiwicyI6IjEifQ==", "maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "aac6a4fc-83b4-459d-9597-0c594699be", "record_id": "flaws_cloudtrail:0000240:aac6a4fc-83b4-459d-9597-0c594699be", "row_index": 240, "timestamp": "2019-07-18T19:19:33Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "4.254.15.47", "user_agent": "aws-cli/1.16.183 Python/3.5.2 Linux/4.4.0-112-generic botocore/1.12.173", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 1085, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "aac6a4fc-83b4-459d-9597-0c594699be", "eventTime": "2019-07-18T19:19:33Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "4.254.15.47", "userAgent": "aws-cli/1.16.183 Python/3.5.2 Linux/4.4.0-112-generic botocore/1.12.173", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"nextToken": "eyJ2IjoiMiIsImMiOiIwc2tqT3QxV2h6M3VQdDFOOWo4ckhuRmE3MXNHdDVwM2cySGp6c3NXTm5sNzJSdG9xWHBseXZ6T0NZSnFwZUFOT2ZjTkxHOVBWbndqNmkzYnN5OGJ3MlR3b1FYZVlleG93WENCaEt0TXlIckNVZ2c4M0kvMENLdjZxMzRseUVEREJkby92VXF3ZkJ4eEVBQUZ6SzlLcm8ycnJzZmtrRHk3Y1VQSDVuZUhtN0NJVVBVMEFMRE91SzBYS2EzSU5jZUxwdk1OK09hdE4xZXIyUT09IiwicyI6IjEifQ==", "maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "9fe5121b-8266-4fb1-bd7e-6b62f29fa040", "record_id": "flaws_cloudtrail:0000241:9fe5121b-8266-4fb1-bd7e-6b62f29fa040", "row_index": 241, "timestamp": "2019-07-18T19:19:34Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "4.254.15.47", "user_agent": "aws-cli/1.16.183 Python/3.5.2 Linux/4.4.0-112-generic botocore/1.12.173", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 1087, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "9fe5121b-8266-4fb1-bd7e-6b62f29fa040", "eventTime": "2019-07-18T19:19:34Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "4.254.15.47", "userAgent": "aws-cli/1.16.183 Python/3.5.2 Linux/4.4.0-112-generic botocore/1.12.173", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"nextToken": "eyJ2IjoiMiIsImMiOiJSWnNzbWVMeG5RSjUvQ0NucXNUNCtwTG1YK1ZwSzhOWHMrcW9GbEw0TmE0blI1UngzZ2FtY3Zwb3d2TGY3bEhUaW5RQUN6WitKcWZPcTFuSy9Nc0lpeGZVMmU0WUhQSjAxQStPY1BTTUNOWUwwUjhZRjgwWDl6ekJrMlZxUEhFaU11U1BQRjZLWkxwM3YrTVpaMHp0TEdTUU0yOGNvSHZjNkpKRUNUNHc5WEZyaCtSb21SOC9WRFNBSzJkMWQ2NUV0WCsxMHRWQ3pLK0Zqdz09IiwicyI6IjEifQ==", "maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "6067e825-5f98-4337-9304-9d16a7bbfee9", "record_id": "flaws_cloudtrail:0000242:6067e825-5f98-4337-9304-9d16a7bbfee9", "row_index": 242, "timestamp": "2019-07-18T19:19:34Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "4.254.15.47", "user_agent": "aws-cli/1.16.183 Python/3.5.2 Linux/4.4.0-112-generic botocore/1.12.173", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 1065, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "6067e825-5f98-4337-9304-9d16a7bbfee9", "eventTime": "2019-07-18T19:19:34Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "4.254.15.47", "userAgent": "aws-cli/1.16.183 Python/3.5.2 Linux/4.4.0-112-generic botocore/1.12.173", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"nextToken": "eyJ2IjoiMiIsImMiOiJyUis0cEF6TisyMlZ4cC9BN0RtVSt2V3V5Tk9CQUdtd3ZaeU9lbE50aVB1WXdvaklBcGN6ZDJaOFJNVmdRMTI3aFk0dWtOZWQzcWlJU3FYOEMrSWh6bXBRTkd2QzdOMXYwZXdXOGJDa09CZE1DeE9SNTBpdm00ZDZ0dldqVTJ3L3Jmc3Y0Y2NkSG9xSDNPOGJQY09VTlFSWVJkUFkyNmNwdk1Lc2gxSzBaOUk0dWtIQkxCL0tOQ0srVjFCbWlBPT0iLCJzIjoiMSJ9", "maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "9fe5121b-8266-4fb1-bd7e-6b62f29fa040", "record_id": "flaws_cloudtrail:0000243:9fe5121b-8266-4fb1-bd7e-6b62f29fa040", "row_index": 243, "timestamp": "2019-07-18T19:19:34Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "4.254.15.47", "user_agent": "aws-cli/1.16.183 Python/3.5.2 Linux/4.4.0-112-generic botocore/1.12.173", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 1087, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "9fe5121b-8266-4fb1-bd7e-6b62f29fa040", "eventTime": "2019-07-18T19:19:34Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "4.254.15.47", "userAgent": "aws-cli/1.16.183 Python/3.5.2 Linux/4.4.0-112-generic botocore/1.12.173", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"nextToken": "eyJ2IjoiMiIsImMiOiJSWnNzbWVMeG5RSjUvQ0NucXNUNCtwTG1YK1ZwSzhOWHMrcW9GbEw0TmE0blI1UngzZ2FtY3Zwb3d2TGY3bEhUaW5RQUN6WitKcWZPcTFuSy9Nc0lpeGZVMmU0WUhQSjAxQStPY1BTTUNOWUwwUjhZRjgwWDl6ekJrMlZxUEhFaU11U1BQRjZLWkxwM3YrTVpaMHp0TEdTUU0yOGNvSHZjNkpKRUNUNHc5WEZyaCtSb21SOC9WRFNBSzJkMWQ2NUV0WCsxMHRWQ3pLK0Zqdz09IiwicyI6IjEifQ==", "maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "6067e825-5f98-4337-9304-9d16a7bbfee9", "record_id": "flaws_cloudtrail:0000244:6067e825-5f98-4337-9304-9d16a7bbfee9", "row_index": 244, "timestamp": "2019-07-18T19:19:34Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "4.254.15.47", "user_agent": "aws-cli/1.16.183 Python/3.5.2 Linux/4.4.0-112-generic botocore/1.12.173", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 1065, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "6067e825-5f98-4337-9304-9d16a7bbfee9", "eventTime": "2019-07-18T19:19:34Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "4.254.15.47", "userAgent": "aws-cli/1.16.183 Python/3.5.2 Linux/4.4.0-112-generic botocore/1.12.173", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"nextToken": "eyJ2IjoiMiIsImMiOiJyUis0cEF6TisyMlZ4cC9BN0RtVSt2V3V5Tk9CQUdtd3ZaeU9lbE50aVB1WXdvaklBcGN6ZDJaOFJNVmdRMTI3aFk0dWtOZWQzcWlJU3FYOEMrSWh6bXBRTkd2QzdOMXYwZXdXOGJDa09CZE1DeE9SNTBpdm00ZDZ0dldqVTJ3L3Jmc3Y0Y2NkSG9xSDNPOGJQY09VTlFSWVJkUFkyNmNwdk1Lc2gxSzBaOUk0dWtIQkxCL0tOQ0srVjFCbWlBPT0iLCJzIjoiMSJ9", "maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "9a30bb07-d5da-466a-bd42-c5adbbcf237d", "record_id": "flaws_cloudtrail:0000245:9a30bb07-d5da-466a-bd42-c5adbbcf237d", "row_index": 245, "timestamp": "2019-07-18T19:19:35Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "4.254.15.47", "user_agent": "aws-cli/1.16.183 Python/3.5.2 Linux/4.4.0-112-generic botocore/1.12.173", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 1107, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "9a30bb07-d5da-466a-bd42-c5adbbcf237d", "eventTime": "2019-07-18T19:19:35Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "4.254.15.47", "userAgent": "aws-cli/1.16.183 Python/3.5.2 Linux/4.4.0-112-generic botocore/1.12.173", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"nextToken": "eyJ2IjoiMiIsImMiOiJPQzMycFZPRWlBWmpmQ0QvTnZXOEhTK2d0OXVJaVN4ZG43OThXdTI0MWNFeUo2cm1IckxaMDAyWXlFajdkM09VZkVzeGJ1bC94cnVpMTV3R09SM1ZwczJpdXdIWWlIN1BsTm9PTCtCcm4xQ3p0Ykd5b2ZPVVhiMytIMUJXTDdwS01JalBrdlZPdTRnZ3RUTjkzc29wK3NXazlPUWhWQ1VPdk5wRXEzTSsxKzlkczlxUnYrTjhmYno1M0xrT1p5NWVxejREZzFueW02L0RLNHBBOEJBdC9zNkkzRmZiQVVFPSIsInMiOiIxIn0=", "maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "9a30bb07-d5da-466a-bd42-c5adbbcf237d", "record_id": "flaws_cloudtrail:0000246:9a30bb07-d5da-466a-bd42-c5adbbcf237d", "row_index": 246, "timestamp": "2019-07-18T19:19:35Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "4.254.15.47", "user_agent": "aws-cli/1.16.183 Python/3.5.2 Linux/4.4.0-112-generic botocore/1.12.173", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 1107, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "9a30bb07-d5da-466a-bd42-c5adbbcf237d", "eventTime": "2019-07-18T19:19:35Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "4.254.15.47", "userAgent": "aws-cli/1.16.183 Python/3.5.2 Linux/4.4.0-112-generic botocore/1.12.173", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"nextToken": "eyJ2IjoiMiIsImMiOiJPQzMycFZPRWlBWmpmQ0QvTnZXOEhTK2d0OXVJaVN4ZG43OThXdTI0MWNFeUo2cm1IckxaMDAyWXlFajdkM09VZkVzeGJ1bC94cnVpMTV3R09SM1ZwczJpdXdIWWlIN1BsTm9PTCtCcm4xQ3p0Ykd5b2ZPVVhiMytIMUJXTDdwS01JalBrdlZPdTRnZ3RUTjkzc29wK3NXazlPUWhWQ1VPdk5wRXEzTSsxKzlkczlxUnYrTjhmYno1M0xrT1p5NWVxejREZzFueW02L0RLNHBBOEJBdC9zNkkzRmZiQVVFPSIsInMiOiIxIn0=", "maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "e71e727f-b266-4272-8e88-e55156ad", "record_id": "flaws_cloudtrail:0000247:e71e727f-b266-4272-8e88-e55156ad", "row_index": 247, "timestamp": "2019-07-18T19:19:43Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "4.254.15.47", "user_agent": "aws-cli/1.16.183 Python/3.5.2 Linux/4.4.0-112-generic botocore/1.12.173", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 790, "raw_record_depth": 5, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "e71e727f-b266-4272-8e88-e55156ad", "eventTime": "2019-07-18T19:19:43Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "4.254.15.47", "userAgent": "aws-cli/1.16.183 Python/3.5.2 Linux/4.4.0-112-generic botocore/1.12.173", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"maxResults": 1000, "snapshotSet": {}, "ownersSet": {"items": [{"owner": "811596193553"}]}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "e71e727f-b266-4272-8e88-e55156ad", "record_id": "flaws_cloudtrail:0000248:e71e727f-b266-4272-8e88-e55156ad", "row_index": 248, "timestamp": "2019-07-18T19:19:43Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "4.254.15.47", "user_agent": "aws-cli/1.16.183 Python/3.5.2 Linux/4.4.0-112-generic botocore/1.12.173", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 790, "raw_record_depth": 5, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "e71e727f-b266-4272-8e88-e55156ad", "eventTime": "2019-07-18T19:19:43Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "4.254.15.47", "userAgent": "aws-cli/1.16.183 Python/3.5.2 Linux/4.4.0-112-generic botocore/1.12.173", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"maxResults": 1000, "snapshotSet": {}, "ownersSet": {"items": [{"owner": "811596193553"}]}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "96c87e49-48d8-4940-9f8c-00ed9ed994ef", "record_id": "flaws_cloudtrail:0000249:96c87e49-48d8-4940-9f8c-00ed9ed994ef", "row_index": 249, "timestamp": "2019-07-18T19:21:12Z", "event_type": "CopySnapshot", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "4.254.15.47", "user_agent": "aws-cli/1.16.183 Python/3.5.2 Linux/4.4.0-112-generic botocore/1.12.173", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 1329, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "96c87e49-48d8-4940-9f8c-00ed9ed994ef", "eventTime": "2019-07-18T19:21:12Z", "eventName": "CopySnapshot", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "4.254.15.47", "userAgent": "aws-cli/1.16.183 Python/3.5.2 Linux/4.4.0-112-generic botocore/1.12.173", "awsRegion": "us-east-1", "errorCode": "Client.UnauthorizedOperation", "errorMessage": "You are not authorized to perform this operation.", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"sourceRegion": "us-west-2", "sourceSnapshotId": "snap-83d15d668fb2941db", "destinationRegion": "us-east-1", "presignedUrl": "https://ec2.us-west-2.amazonaws.com/?DestinationRegion=us-east-1&SourceSnapshotId=snap-83d15d668fb2941db&Action=CopySnapshot&Version=2016-11-15&SourceRegion=us-west-2&X-Amz-Credential=AKIA01U43UX3RBRDXF4Q%2F63110%2Fus-west-2%2Fec2%2Faws4_request&X-Amz-Date=63110T723923Z&X-Amz-Algorithm=AWS4-HMAC-SHA256&X-Amz-SignedHeaders=host&X-Amz-Expires=3600&X-Amz-Signature=e2347ef5eb73cd72f794d6ca995cbab3a7d2ae3bfbda25b2eaf7c35637108ad9"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "96c87e49-48d8-4940-9f8c-00ed9ed994ef", "record_id": "flaws_cloudtrail:0000250:96c87e49-48d8-4940-9f8c-00ed9ed994ef", "row_index": 250, "timestamp": "2019-07-18T19:21:12Z", "event_type": "CopySnapshot", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "4.254.15.47", "user_agent": "aws-cli/1.16.183 Python/3.5.2 Linux/4.4.0-112-generic botocore/1.12.173", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 1329, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "96c87e49-48d8-4940-9f8c-00ed9ed994ef", "eventTime": "2019-07-18T19:21:12Z", "eventName": "CopySnapshot", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "4.254.15.47", "userAgent": "aws-cli/1.16.183 Python/3.5.2 Linux/4.4.0-112-generic botocore/1.12.173", "awsRegion": "us-east-1", "errorCode": "Client.UnauthorizedOperation", "errorMessage": "You are not authorized to perform this operation.", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"sourceRegion": "us-west-2", "sourceSnapshotId": "snap-83d15d668fb2941db", "destinationRegion": "us-east-1", "presignedUrl": "https://ec2.us-west-2.amazonaws.com/?DestinationRegion=us-east-1&SourceSnapshotId=snap-83d15d668fb2941db&Action=CopySnapshot&Version=2016-11-15&SourceRegion=us-west-2&X-Amz-Credential=AKIA01U43UX3RBRDXF4Q%2F63110%2Fus-west-2%2Fec2%2Faws4_request&X-Amz-Date=63110T723923Z&X-Amz-Algorithm=AWS4-HMAC-SHA256&X-Amz-SignedHeaders=host&X-Amz-Expires=3600&X-Amz-Signature=e2347ef5eb73cd72f794d6ca995cbab3a7d2ae3bfbda25b2eaf7c35637108ad9"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "d2f596fe-6fff-462f-808c-2ddb9e4d326f", "record_id": "flaws_cloudtrail:0000251:d2f596fe-6fff-462f-808c-2ddb9e4d326f", "row_index": 251, "timestamp": "2019-07-18T19:21:22Z", "event_type": "ListAttachedUserPolicies", "event_source": "iam.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIAKRAYPPJT59T3DG3O", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "36.187.170.43", "user_agent": "Boto3/1.14.7 Python/3.6.10 Linux/4.14.181-142.260.amzn2.x86_64 Botocore/1.17.7", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 578, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "requestParameters", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "d2f596fe-6fff-462f-808c-2ddb9e4d326f", "eventTime": "2019-07-18T19:21:22Z", "eventName": "ListAttachedUserPolicies", "eventSource": "iam.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "36.187.170.43", "userAgent": "Boto3/1.14.7 Python/3.6.10 Linux/4.14.181-142.260.amzn2.x86_64 Botocore/1.17.7", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIAKRAYPPJT59T3DG3O", "userName": "Level6"}, "requestParameters": {"userName": "Level6"}}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "873a31a7-891c-4bc9-8604-2c57e5b83c36", "record_id": "flaws_cloudtrail:0000252:873a31a7-891c-4bc9-8604-2c57e5b83c36", "row_index": 252, "timestamp": "2019-07-18T19:24:11Z", "event_type": "GetUser", "event_source": "iam.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIAKRAYPPJT59T3DG3O", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "36.187.170.43", "user_agent": "Boto3/1.14.7 Python/3.6.10 Linux/4.14.181-142.260.amzn2.x86_64 Botocore/1.17.7", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 561, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "requestParameters", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "873a31a7-891c-4bc9-8604-2c57e5b83c36", "eventTime": "2019-07-18T19:24:11Z", "eventName": "GetUser", "eventSource": "iam.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "36.187.170.43", "userAgent": "Boto3/1.14.7 Python/3.6.10 Linux/4.14.181-142.260.amzn2.x86_64 Botocore/1.17.7", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIAKRAYPPJT59T3DG3O", "userName": "Level6"}, "requestParameters": {"userName": "Level6"}}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "108888b-34d8-4ca5-894e-b3a308780ac4", "record_id": "flaws_cloudtrail:0000253:108888b-34d8-4ca5-894e-b3a308780ac4", "row_index": 253, "timestamp": "2019-07-18T19:31:15Z", "event_type": "AssumeRole", "event_source": "sts.amazonaws.com", "principal": {"type": "AWSService", "arn": null, "account_id": null, "principal_id": null, "user_name": null, "access_key_id": null, "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "ec2.amazonaws.com", "user_agent": "ec2.amazonaws.com", "aws_region": "us-west-2"}, "resource_arns": ["arn:aws:iam::811596193553:role/flaws"], "raw_record_size_bytes": 1878, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "resources", "responseElements", "sharedEventID", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "108888b-34d8-4ca5-894e-b3a308780ac4", "eventTime": "2019-07-18T19:31:15Z", "eventName": "AssumeRole", "eventSource": "sts.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "ec2.amazonaws.com", "userAgent": "ec2.amazonaws.com", "awsRegion": "us-west-2", "userIdentity": {"type": "AWSService", "invokedBy": "ec2.amazonaws.com"}, "requestParameters": {"roleSessionName": "i-aa2d3b42e5c6e801a", "roleArn": "arn:aws:iam::811596193553:role/flaws"}, "responseElements": {"credentials": {"accessKeyId": "ASIAF7C3BG6F3J78NR0Q", "expiration": "Jul 19, 2019 1:40:23 AM", "sessionToken": "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"}}, "resources": [{"ARN": "arn:aws:iam::811596193553:role/flaws", "accountId": "811596193553", "type": "AWS::IAM::Role"}]}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "108888b-34d8-4ca5-894e-b3a308780ac4", "record_id": "flaws_cloudtrail:0000254:108888b-34d8-4ca5-894e-b3a308780ac4", "row_index": 254, "timestamp": "2019-07-18T19:31:15Z", "event_type": "AssumeRole", "event_source": "sts.amazonaws.com", "principal": {"type": "AWSService", "arn": null, "account_id": null, "principal_id": null, "user_name": null, "access_key_id": null, "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "ec2.amazonaws.com", "user_agent": "ec2.amazonaws.com", "aws_region": "us-west-2"}, "resource_arns": ["arn:aws:iam::811596193553:role/flaws"], "raw_record_size_bytes": 1878, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "resources", "responseElements", "sharedEventID", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "108888b-34d8-4ca5-894e-b3a308780ac4", "eventTime": "2019-07-18T19:31:15Z", "eventName": "AssumeRole", "eventSource": "sts.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "ec2.amazonaws.com", "userAgent": "ec2.amazonaws.com", "awsRegion": "us-west-2", "userIdentity": {"type": "AWSService", "invokedBy": "ec2.amazonaws.com"}, "requestParameters": {"roleSessionName": "i-aa2d3b42e5c6e801a", "roleArn": "arn:aws:iam::811596193553:role/flaws"}, "responseElements": {"credentials": {"accessKeyId": "ASIAF7C3BG6F3J78NR0Q", "expiration": "Jul 19, 2019 1:40:23 AM", "sessionToken": "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"}}, "resources": [{"ARN": "arn:aws:iam::811596193553:role/flaws", "accountId": "811596193553", "type": "AWS::IAM::Role"}]}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "596aa64a-2559-49c3-94d4-5262a9522457", "record_id": "flaws_cloudtrail:0000255:596aa64a-2559-49c3-94d4-5262a9522457", "row_index": 255, "timestamp": "2019-07-18T19:31:44Z", "event_type": "AssumeRole", "event_source": "sts.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIAKRAYPPJT59T3DG3O", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "36.187.170.43", "user_agent": "Boto3/1.14.7 Python/3.6.10 Linux/4.14.181-142.260.amzn2.x86_64 Botocore/1.17.7", "aws_region": "us-east-1"}, "resource_arns": ["arn:aws:iam::811596193553:role/Level6-elevated-75"], "raw_record_size_bytes": 715, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "requestParameters", "resources", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "596aa64a-2559-49c3-94d4-5262a9522457", "eventTime": "2019-07-18T19:31:44Z", "eventName": "AssumeRole", "eventSource": "sts.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "36.187.170.43", "userAgent": "Boto3/1.14.7 Python/3.6.10 Linux/4.14.181-142.260.amzn2.x86_64 Botocore/1.17.7", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIAKRAYPPJT59T3DG3O", "userName": "Level6"}, "requestParameters": {"roleArn": "arn:aws:iam::811596193553:role/Level6-elevated-75", "roleSessionName": "Level6-session"}, "resources": [{"ARN": "arn:aws:iam::811596193553:role/Level6-elevated-75"}]}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "9550809e-d26f-4f31-9287-96567d9b11ac", "record_id": "flaws_cloudtrail:0000256:9550809e-d26f-4f31-9287-96567d9b11ac", "row_index": 256, "timestamp": "2019-07-18T19:33:34Z", "event_type": "GetObject", "event_source": "s3.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIAKRAYPPJT59T3DG3O", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "36.187.170.43", "user_agent": "Boto3/1.14.7 Python/3.6.10 Linux/4.14.181-142.260.amzn2.x86_64 Botocore/1.17.7", "aws_region": "us-east-1"}, "resource_arns": ["arn:aws:s3:::prod-data-3797"], "raw_record_size_bytes": 648, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "requestParameters", "resources", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "9550809e-d26f-4f31-9287-96567d9b11ac", "eventTime": "2019-07-18T19:33:34Z", "eventName": "GetObject", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "36.187.170.43", "userAgent": "Boto3/1.14.7 Python/3.6.10 Linux/4.14.181-142.260.amzn2.x86_64 Botocore/1.17.7", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIAKRAYPPJT59T3DG3O", "userName": "Level6"}, "requestParameters": {"bucketName": "prod-data-3797", "key": "reports/912.csv"}, "resources": [{"ARN": "arn:aws:s3:::prod-data-3797"}]}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "c98b0af0-3644-481f-b8b6-3e91e227c00b", "record_id": "flaws_cloudtrail:0000257:c98b0af0-3644-481f-b8b6-3e91e227c00b", "row_index": 257, "timestamp": "2019-07-18T19:37:29Z", "event_type": "ListBuckets", "event_source": "s3.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "237.25.162.210", "user_agent": "[aws-cli/1.16.14 Python/2.7.15 Darwin/18.6.0 botocore/1.12.185]", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 802, "raw_record_depth": 3, "raw_record_top_level_keys": ["additionalEventData", "awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "c98b0af0-3644-481f-b8b6-3e91e227c00b", "eventTime": "2019-07-18T19:37:29Z", "eventName": "ListBuckets", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "237.25.162.210", "userAgent": "[aws-cli/1.16.14 Python/2.7.15 Darwin/18.6.0 botocore/1.12.185]", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"host": ["s3.amazonaws.com"]}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "c98b0af0-3644-481f-b8b6-3e91e227c00b", "record_id": "flaws_cloudtrail:0000258:c98b0af0-3644-481f-b8b6-3e91e227c00b", "row_index": 258, "timestamp": "2019-07-18T19:37:29Z", "event_type": "ListBuckets", "event_source": "s3.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "237.25.162.210", "user_agent": "[aws-cli/1.16.14 Python/2.7.15 Darwin/18.6.0 botocore/1.12.185]", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 802, "raw_record_depth": 3, "raw_record_top_level_keys": ["additionalEventData", "awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "c98b0af0-3644-481f-b8b6-3e91e227c00b", "eventTime": "2019-07-18T19:37:29Z", "eventName": "ListBuckets", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "237.25.162.210", "userAgent": "[aws-cli/1.16.14 Python/2.7.15 Darwin/18.6.0 botocore/1.12.185]", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"host": ["s3.amazonaws.com"]}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "55184ce4-b150-4544-89d0-962f817fe4c0", "record_id": "flaws_cloudtrail:0000259:55184ce4-b150-4544-89d0-962f817fe4c0", "row_index": 259, "timestamp": "2019-07-18T19:38:55Z", "event_type": "ListBuckets", "event_source": "s3.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "237.25.162.210", "user_agent": "[aws-cli/1.16.106 Python/2.7.16 Darwin/18.6.0 botocore/1.12.96]", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 802, "raw_record_depth": 3, "raw_record_top_level_keys": ["additionalEventData", "awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "55184ce4-b150-4544-89d0-962f817fe4c0", "eventTime": "2019-07-18T19:38:55Z", "eventName": "ListBuckets", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "237.25.162.210", "userAgent": "[aws-cli/1.16.106 Python/2.7.16 Darwin/18.6.0 botocore/1.12.96]", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"host": ["s3.amazonaws.com"]}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "55184ce4-b150-4544-89d0-962f817fe4c0", "record_id": "flaws_cloudtrail:0000260:55184ce4-b150-4544-89d0-962f817fe4c0", "row_index": 260, "timestamp": "2019-07-18T19:38:55Z", "event_type": "ListBuckets", "event_source": "s3.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "237.25.162.210", "user_agent": "[aws-cli/1.16.106 Python/2.7.16 Darwin/18.6.0 botocore/1.12.96]", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 802, "raw_record_depth": 3, "raw_record_top_level_keys": ["additionalEventData", "awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "55184ce4-b150-4544-89d0-962f817fe4c0", "eventTime": "2019-07-18T19:38:55Z", "eventName": "ListBuckets", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "237.25.162.210", "userAgent": "[aws-cli/1.16.106 Python/2.7.16 Darwin/18.6.0 botocore/1.12.96]", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"host": ["s3.amazonaws.com"]}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "966f2dcf-9cdd-4185-b11c-5ee77a4034d0", "record_id": "flaws_cloudtrail:0000261:966f2dcf-9cdd-4185-b11c-5ee77a4034d0", "row_index": 261, "timestamp": "2019-07-18T19:42:36Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "237.25.162.210", "user_agent": "aws-cli/1.16.14 Python/2.7.15 Darwin/18.6.0 botocore/1.12.185", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 787, "raw_record_depth": 5, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "966f2dcf-9cdd-4185-b11c-5ee77a4034d0", "eventTime": "2019-07-18T19:42:36Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "237.25.162.210", "userAgent": "aws-cli/1.16.14 Python/2.7.15 Darwin/18.6.0 botocore/1.12.185", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"maxResults": 1000, "snapshotSet": {}, "ownersSet": {"items": [{"owner": "811596193553"}]}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "966f2dcf-9cdd-4185-b11c-5ee77a4034d0", "record_id": "flaws_cloudtrail:0000262:966f2dcf-9cdd-4185-b11c-5ee77a4034d0", "row_index": 262, "timestamp": "2019-07-18T19:42:36Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "237.25.162.210", "user_agent": "aws-cli/1.16.14 Python/2.7.15 Darwin/18.6.0 botocore/1.12.185", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 787, "raw_record_depth": 5, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "966f2dcf-9cdd-4185-b11c-5ee77a4034d0", "eventTime": "2019-07-18T19:42:36Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "237.25.162.210", "userAgent": "aws-cli/1.16.14 Python/2.7.15 Darwin/18.6.0 botocore/1.12.185", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"maxResults": 1000, "snapshotSet": {}, "ownersSet": {"items": [{"owner": "811596193553"}]}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "6319a445-9a81-4e0b-96ed-faf6e4a93b36", "record_id": "flaws_cloudtrail:0000263:6319a445-9a81-4e0b-96ed-faf6e4a93b36", "row_index": 263, "timestamp": "2019-07-18T19:43:41Z", "event_type": "GetCallerIdentity", "event_source": "sts.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "237.25.162.210", "user_agent": "aws-cli/1.16.106 Python/2.7.16 Darwin/18.6.0 botocore/1.12.96", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 770, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "6319a445-9a81-4e0b-96ed-faf6e4a93b36", "eventTime": "2019-07-18T19:43:41Z", "eventName": "GetCallerIdentity", "eventSource": "sts.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "237.25.162.210", "userAgent": "aws-cli/1.16.106 Python/2.7.16 Darwin/18.6.0 botocore/1.12.96", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "responseElements": {"userId": "AIDA9BO36HFBHKGJAO9C1", "account": "811596193553", "arn": "arn:aws:iam::811596193553:user/backup"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "6319a445-9a81-4e0b-96ed-faf6e4a93b36", "record_id": "flaws_cloudtrail:0000264:6319a445-9a81-4e0b-96ed-faf6e4a93b36", "row_index": 264, "timestamp": "2019-07-18T19:43:41Z", "event_type": "GetCallerIdentity", "event_source": "sts.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "237.25.162.210", "user_agent": "aws-cli/1.16.106 Python/2.7.16 Darwin/18.6.0 botocore/1.12.96", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 770, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "6319a445-9a81-4e0b-96ed-faf6e4a93b36", "eventTime": "2019-07-18T19:43:41Z", "eventName": "GetCallerIdentity", "eventSource": "sts.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "237.25.162.210", "userAgent": "aws-cli/1.16.106 Python/2.7.16 Darwin/18.6.0 botocore/1.12.96", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "responseElements": {"userId": "AIDA9BO36HFBHKGJAO9C1", "account": "811596193553", "arn": "arn:aws:iam::811596193553:user/backup"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "83f227dd-d81e-422c-a488-4f4ea705188", "record_id": "flaws_cloudtrail:0000265:83f227dd-d81e-422c-a488-4f4ea705188", "row_index": 265, "timestamp": "2019-07-18T19:44:08Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "237.25.162.210", "user_agent": "aws-cli/1.16.106 Python/2.7.16 Darwin/18.6.0 botocore/1.12.96", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 784, "raw_record_depth": 5, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "83f227dd-d81e-422c-a488-4f4ea705188", "eventTime": "2019-07-18T19:44:08Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "237.25.162.210", "userAgent": "aws-cli/1.16.106 Python/2.7.16 Darwin/18.6.0 botocore/1.12.96", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"maxResults": 1000, "snapshotSet": {}, "ownersSet": {"items": [{"owner": "811596193553"}]}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "83f227dd-d81e-422c-a488-4f4ea705188", "record_id": "flaws_cloudtrail:0000266:83f227dd-d81e-422c-a488-4f4ea705188", "row_index": 266, "timestamp": "2019-07-18T19:44:08Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "237.25.162.210", "user_agent": "aws-cli/1.16.106 Python/2.7.16 Darwin/18.6.0 botocore/1.12.96", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 784, "raw_record_depth": 5, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "83f227dd-d81e-422c-a488-4f4ea705188", "eventTime": "2019-07-18T19:44:08Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "237.25.162.210", "userAgent": "aws-cli/1.16.106 Python/2.7.16 Darwin/18.6.0 botocore/1.12.96", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"maxResults": 1000, "snapshotSet": {}, "ownersSet": {"items": [{"owner": "811596193553"}]}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "546272b7-0282-4310-8355-503561401994", "record_id": "flaws_cloudtrail:0000267:546272b7-0282-4310-8355-503561401994", "row_index": 267, "timestamp": "2019-07-18T19:44:50Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "237.25.162.210", "user_agent": "aws-cli/1.16.106 Python/2.7.16 Darwin/18.6.0 botocore/1.12.96", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 753, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "546272b7-0282-4310-8355-503561401994", "eventTime": "2019-07-18T19:44:50Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "237.25.162.210", "userAgent": "aws-cli/1.16.106 Python/2.7.16 Darwin/18.6.0 botocore/1.12.96", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "546272b7-0282-4310-8355-503561401994", "record_id": "flaws_cloudtrail:0000268:546272b7-0282-4310-8355-503561401994", "row_index": 268, "timestamp": "2019-07-18T19:44:50Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "237.25.162.210", "user_agent": "aws-cli/1.16.106 Python/2.7.16 Darwin/18.6.0 botocore/1.12.96", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 753, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "546272b7-0282-4310-8355-503561401994", "eventTime": "2019-07-18T19:44:50Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "237.25.162.210", "userAgent": "aws-cli/1.16.106 Python/2.7.16 Darwin/18.6.0 botocore/1.12.96", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "309ecbfd-5af9-4718-a429-454176ee97102", "record_id": "flaws_cloudtrail:0000269:309ecbfd-5af9-4718-a429-454176ee97102", "row_index": 269, "timestamp": "2019-07-18T19:44:52Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "237.25.162.210", "user_agent": "aws-cli/1.16.106 Python/2.7.16 Darwin/18.6.0 botocore/1.12.96", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 1081, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "309ecbfd-5af9-4718-a429-454176ee97102", "eventTime": "2019-07-18T19:44:52Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "237.25.162.210", "userAgent": "aws-cli/1.16.106 Python/2.7.16 Darwin/18.6.0 botocore/1.12.96", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"nextToken": "eyJ2IjoiMiIsImMiOiI3bGFZK2E0L2UrOXhFTlQrbHpVS0IvaEtOclEwNkJ3dkM5NDM5K2FLT1NmUEhEOTlHS28ybDBkOEFUSXQ2WlVTVzlZUjNPb1dFZ0lrK0txSXVSOWVpT2kvSmRYR3htWGw1VFZ4cUhFcTM2NDBGVXl6RVZzR0lOL25PTWJpakR4V3ZPTmxvcEYxREhDNW5oM0ErRW9OVDZlZk1FcDl0QnVnWWRkNWcrR1kzdmowZ1N2SG95VTB2RGE4eHRqZ29ENElsYjM2VlZhMVE0MG5Odz09IiwicyI6IjEifQ==", "maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "309ecbfd-5af9-4718-a429-454176ee97102", "record_id": "flaws_cloudtrail:0000270:309ecbfd-5af9-4718-a429-454176ee97102", "row_index": 270, "timestamp": "2019-07-18T19:44:52Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "237.25.162.210", "user_agent": "aws-cli/1.16.106 Python/2.7.16 Darwin/18.6.0 botocore/1.12.96", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 1081, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "309ecbfd-5af9-4718-a429-454176ee97102", "eventTime": "2019-07-18T19:44:52Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "237.25.162.210", "userAgent": "aws-cli/1.16.106 Python/2.7.16 Darwin/18.6.0 botocore/1.12.96", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"nextToken": "eyJ2IjoiMiIsImMiOiI3bGFZK2E0L2UrOXhFTlQrbHpVS0IvaEtOclEwNkJ3dkM5NDM5K2FLT1NmUEhEOTlHS28ybDBkOEFUSXQ2WlVTVzlZUjNPb1dFZ0lrK0txSXVSOWVpT2kvSmRYR3htWGw1VFZ4cUhFcTM2NDBGVXl6RVZzR0lOL25PTWJpakR4V3ZPTmxvcEYxREhDNW5oM0ErRW9OVDZlZk1FcDl0QnVnWWRkNWcrR1kzdmowZ1N2SG95VTB2RGE4eHRqZ29ENElsYjM2VlZhMVE0MG5Odz09IiwicyI6IjEifQ==", "maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "f598838-4cc9-4b59-b0cf-89e1eba1e18f", "record_id": "flaws_cloudtrail:0000271:f598838-4cc9-4b59-b0cf-89e1eba1e18f", "row_index": 271, "timestamp": "2019-07-18T19:44:54Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "237.25.162.210", "user_agent": "aws-cli/1.16.106 Python/2.7.16 Darwin/18.6.0 botocore/1.12.96", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 1079, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "f598838-4cc9-4b59-b0cf-89e1eba1e18f", "eventTime": "2019-07-18T19:44:54Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "237.25.162.210", "userAgent": "aws-cli/1.16.106 Python/2.7.16 Darwin/18.6.0 botocore/1.12.96", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"nextToken": "eyJ2IjoiMiIsImMiOiJERko1ZzI2NFpxR293ckIyRjRicVZ6dHpkUGhTQlJRTUpWeTJhRHNIZEIwTDcvdHArUHRzK0VoMUJkZUxWdnJ6VGYzalZVRENveWlxYklWYnRqRFdQUHRMRHZkY1ZqOFVXL2xnTEMzM0ZPbWdIVlVFM3VBdDZkUEYvRUJqR3EzMDQ5Tkh3eDdrT251b3MvVFhEV2xESmtBT2txTzRiUFAyYllZRFRTUm5FK29MbUJmaVVYb25sd3liU2Uzb3E4ME9DTFdkaWR5SEJOTHF2UT09IiwicyI6IjEifQ==", "maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "f598838-4cc9-4b59-b0cf-89e1eba1e18f", "record_id": "flaws_cloudtrail:0000272:f598838-4cc9-4b59-b0cf-89e1eba1e18f", "row_index": 272, "timestamp": "2019-07-18T19:44:54Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "237.25.162.210", "user_agent": "aws-cli/1.16.106 Python/2.7.16 Darwin/18.6.0 botocore/1.12.96", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 1079, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "f598838-4cc9-4b59-b0cf-89e1eba1e18f", "eventTime": "2019-07-18T19:44:54Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "237.25.162.210", "userAgent": "aws-cli/1.16.106 Python/2.7.16 Darwin/18.6.0 botocore/1.12.96", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"nextToken": "eyJ2IjoiMiIsImMiOiJERko1ZzI2NFpxR293ckIyRjRicVZ6dHpkUGhTQlJRTUpWeTJhRHNIZEIwTDcvdHArUHRzK0VoMUJkZUxWdnJ6VGYzalZVRENveWlxYklWYnRqRFdQUHRMRHZkY1ZqOFVXL2xnTEMzM0ZPbWdIVlVFM3VBdDZkUEYvRUJqR3EzMDQ5Tkh3eDdrT251b3MvVFhEV2xESmtBT2txTzRiUFAyYllZRFRTUm5FK29MbUJmaVVYb25sd3liU2Uzb3E4ME9DTFdkaWR5SEJOTHF2UT09IiwicyI6IjEifQ==", "maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "a5e5bd93-072b-47f6-b91d-0d99140dabf2", "record_id": "flaws_cloudtrail:0000273:a5e5bd93-072b-47f6-b91d-0d99140dabf2", "row_index": 273, "timestamp": "2019-07-18T19:44:56Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "237.25.162.210", "user_agent": "aws-cli/1.16.106 Python/2.7.16 Darwin/18.6.0 botocore/1.12.96", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 1080, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "a5e5bd93-072b-47f6-b91d-0d99140dabf2", "eventTime": "2019-07-18T19:44:56Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "237.25.162.210", "userAgent": "aws-cli/1.16.106 Python/2.7.16 Darwin/18.6.0 botocore/1.12.96", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"nextToken": "eyJ2IjoiMiIsImMiOiI2RUxscmliZFFNT1NHeXJWYzZjS0Y5aDAyRUVudU5QZktXeWNFKzdZcDlFYlFaSU42QlFTaElLOStvMHFoaGVTV3lIaHI0ai9DOS9LNkk0ajE4SkZiUXFIbG1tQ2RYdkFvUW5XWlBSVEU4amRxSDhBZWE2dWNCRzdPQmRod0o2WXE5ZkpjamxCN1YyT2lRMm9vRlpwNHlqbEZmUERsTklDVm1RcGZmZ2RSYmdCNXg0eklDMlgwK1hTVlgxVmpJblUwbjFNNithV3A5cHM2Zz09IiwicyI6IjEifQ==", "maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "a5e5bd93-072b-47f6-b91d-0d99140dabf2", "record_id": "flaws_cloudtrail:0000274:a5e5bd93-072b-47f6-b91d-0d99140dabf2", "row_index": 274, "timestamp": "2019-07-18T19:44:56Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "237.25.162.210", "user_agent": "aws-cli/1.16.106 Python/2.7.16 Darwin/18.6.0 botocore/1.12.96", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 1080, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "a5e5bd93-072b-47f6-b91d-0d99140dabf2", "eventTime": "2019-07-18T19:44:56Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "237.25.162.210", "userAgent": "aws-cli/1.16.106 Python/2.7.16 Darwin/18.6.0 botocore/1.12.96", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"nextToken": "eyJ2IjoiMiIsImMiOiI2RUxscmliZFFNT1NHeXJWYzZjS0Y5aDAyRUVudU5QZktXeWNFKzdZcDlFYlFaSU42QlFTaElLOStvMHFoaGVTV3lIaHI0ai9DOS9LNkk0ajE4SkZiUXFIbG1tQ2RYdkFvUW5XWlBSVEU4amRxSDhBZWE2dWNCRzdPQmRod0o2WXE5ZkpjamxCN1YyT2lRMm9vRlpwNHlqbEZmUERsTklDVm1RcGZmZ2RSYmdCNXg0eklDMlgwK1hTVlgxVmpJblUwbjFNNithV3A5cHM2Zz09IiwicyI6IjEifQ==", "maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "291ab68d-be72-469c-9b8b-65f16596d33b", "record_id": "flaws_cloudtrail:0000275:291ab68d-be72-469c-9b8b-65f16596d33b", "row_index": 275, "timestamp": "2019-07-18T19:44:58Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "237.25.162.210", "user_agent": "aws-cli/1.16.106 Python/2.7.16 Darwin/18.6.0 botocore/1.12.96", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 1069, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "291ab68d-be72-469c-9b8b-65f16596d33b", "eventTime": "2019-07-18T19:44:58Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "237.25.162.210", "userAgent": "aws-cli/1.16.106 Python/2.7.16 Darwin/18.6.0 botocore/1.12.96", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"nextToken": "eyJ2IjoiMiIsImMiOiJRMXl1cVRxeHRkVHRsWEVoa3l4OVRBTG1kUnJndUpQMmtsRDJ2THB0Tk1LK2NOeWZDT0dqL0tUWHRITVBXUUM4bzcybXJQdWxvekltWCs5MTNJcjFCRW4weDhnaVVpL1l3ZmcrK1h5Y0ErOEdoTzZBOVpPZ002Smw1UVltVGFDekFDbmdnWWM3ekZKYS9PNW1ubUlyNEt4M0dUaTRRQ0hJQzRxY0N6dVRXL0tQTVZnOXZKV09SV0tacmd2ZGZ4cFg0TW9Jcjl2K0x3PT0iLCJzIjoiMSJ9", "maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "291ab68d-be72-469c-9b8b-65f16596d33b", "record_id": "flaws_cloudtrail:0000276:291ab68d-be72-469c-9b8b-65f16596d33b", "row_index": 276, "timestamp": "2019-07-18T19:44:58Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "237.25.162.210", "user_agent": "aws-cli/1.16.106 Python/2.7.16 Darwin/18.6.0 botocore/1.12.96", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 1069, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "291ab68d-be72-469c-9b8b-65f16596d33b", "eventTime": "2019-07-18T19:44:58Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "237.25.162.210", "userAgent": "aws-cli/1.16.106 Python/2.7.16 Darwin/18.6.0 botocore/1.12.96", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"nextToken": "eyJ2IjoiMiIsImMiOiJRMXl1cVRxeHRkVHRsWEVoa3l4OVRBTG1kUnJndUpQMmtsRDJ2THB0Tk1LK2NOeWZDT0dqL0tUWHRITVBXUUM4bzcybXJQdWxvekltWCs5MTNJcjFCRW4weDhnaVVpL1l3ZmcrK1h5Y0ErOEdoTzZBOVpPZ002Smw1UVltVGFDekFDbmdnWWM3ekZKYS9PNW1ubUlyNEt4M0dUaTRRQ0hJQzRxY0N6dVRXL0tQTVZnOXZKV09SV0tacmd2ZGZ4cFg0TW9Jcjl2K0x3PT0iLCJzIjoiMSJ9", "maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "708ae408-21f5-4579-b94b-7d1409e455bd", "record_id": "flaws_cloudtrail:0000277:708ae408-21f5-4579-b94b-7d1409e455bd", "row_index": 277, "timestamp": "2019-07-18T19:45:00Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "237.25.162.210", "user_agent": "aws-cli/1.16.106 Python/2.7.16 Darwin/18.6.0 botocore/1.12.96", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 1080, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "708ae408-21f5-4579-b94b-7d1409e455bd", "eventTime": "2019-07-18T19:45:00Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "237.25.162.210", "userAgent": "aws-cli/1.16.106 Python/2.7.16 Darwin/18.6.0 botocore/1.12.96", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"nextToken": "eyJ2IjoiMiIsImMiOiI1RVdJeEowOENxd1N2M1NqNVRJa1JWamJoL1J2cWM0QXdqNkRFRzV1M3ljbUVnb29qZTZ5K0Rwc1I3NExSMGNsVlJpR3Q5MnJ5RE5PVzFxVnZJSnNCR08wMmRTM1RBdmtDdEt6am00N1huanNIdXJWY1FkTXpkTVBpYlRMNWtDUVlHMTB1Nm9SVGFlejcwN3R2VjdjNDFRQ05hUXFhOGhrdWM0bkFvWnN0QjJBZ2t1cXZXcFcyYlVEemlvMzI5ZXVPaGdmZ1V0SWFCK2QvZz09IiwicyI6IjEifQ==", "maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "708ae408-21f5-4579-b94b-7d1409e455bd", "record_id": "flaws_cloudtrail:0000278:708ae408-21f5-4579-b94b-7d1409e455bd", "row_index": 278, "timestamp": "2019-07-18T19:45:00Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "237.25.162.210", "user_agent": "aws-cli/1.16.106 Python/2.7.16 Darwin/18.6.0 botocore/1.12.96", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 1080, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "708ae408-21f5-4579-b94b-7d1409e455bd", "eventTime": "2019-07-18T19:45:00Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "237.25.162.210", "userAgent": "aws-cli/1.16.106 Python/2.7.16 Darwin/18.6.0 botocore/1.12.96", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"nextToken": "eyJ2IjoiMiIsImMiOiI1RVdJeEowOENxd1N2M1NqNVRJa1JWamJoL1J2cWM0QXdqNkRFRzV1M3ljbUVnb29qZTZ5K0Rwc1I3NExSMGNsVlJpR3Q5MnJ5RE5PVzFxVnZJSnNCR08wMmRTM1RBdmtDdEt6am00N1huanNIdXJWY1FkTXpkTVBpYlRMNWtDUVlHMTB1Nm9SVGFlejcwN3R2VjdjNDFRQ05hUXFhOGhrdWM0bkFvWnN0QjJBZ2t1cXZXcFcyYlVEemlvMzI5ZXVPaGdmZ1V0SWFCK2QvZz09IiwicyI6IjEifQ==", "maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "969861df-7072-49c3-800c-bd3025b7f09c", "record_id": "flaws_cloudtrail:0000279:969861df-7072-49c3-800c-bd3025b7f09c", "row_index": 279, "timestamp": "2019-07-18T19:45:01Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "237.25.162.210", "user_agent": "aws-cli/1.16.106 Python/2.7.16 Darwin/18.6.0 botocore/1.12.96", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 1080, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "969861df-7072-49c3-800c-bd3025b7f09c", "eventTime": "2019-07-18T19:45:01Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "237.25.162.210", "userAgent": "aws-cli/1.16.106 Python/2.7.16 Darwin/18.6.0 botocore/1.12.96", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"nextToken": "eyJ2IjoiMiIsImMiOiJZN2VCU2ZRRHl4VHpvWTd6dE5OSWVvRTJRWnJSeXFSdHZkVjFmOVNNMTllVXl6MVMvc2toZm91ZlFzVWMwUEVyVnBPcHVMMjVOZnVIN3ZVQUpzTHNwQ2k2bUd2VURMQkRPVXB1MlBrOGZ3TkF1NG03Y0l1bUZKNkE3U3poSFVhb0Z3a0tyRWF1ZEc3VWl6WlBXYmovbFY5V25GRjhtOVBzZmppRlgyaisxTktnZ3RTekVEMnArNGprS1pUdjh4ZHR0bjdxOWFBcHdPRXFjdz09IiwicyI6IjEifQ==", "maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "969861df-7072-49c3-800c-bd3025b7f09c", "record_id": "flaws_cloudtrail:0000280:969861df-7072-49c3-800c-bd3025b7f09c", "row_index": 280, "timestamp": "2019-07-18T19:45:01Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "237.25.162.210", "user_agent": "aws-cli/1.16.106 Python/2.7.16 Darwin/18.6.0 botocore/1.12.96", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 1080, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "969861df-7072-49c3-800c-bd3025b7f09c", "eventTime": "2019-07-18T19:45:01Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "237.25.162.210", "userAgent": "aws-cli/1.16.106 Python/2.7.16 Darwin/18.6.0 botocore/1.12.96", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"nextToken": "eyJ2IjoiMiIsImMiOiJZN2VCU2ZRRHl4VHpvWTd6dE5OSWVvRTJRWnJSeXFSdHZkVjFmOVNNMTllVXl6MVMvc2toZm91ZlFzVWMwUEVyVnBPcHVMMjVOZnVIN3ZVQUpzTHNwQ2k2bUd2VURMQkRPVXB1MlBrOGZ3TkF1NG03Y0l1bUZKNkE3U3poSFVhb0Z3a0tyRWF1ZEc3VWl6WlBXYmovbFY5V25GRjhtOVBzZmppRlgyaisxTktnZ3RTekVEMnArNGprS1pUdjh4ZHR0bjdxOWFBcHdPRXFjdz09IiwicyI6IjEifQ==", "maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "f1e1629e-2abe-4681-9f1a-ed13453b49a1", "record_id": "flaws_cloudtrail:0000281:f1e1629e-2abe-4681-9f1a-ed13453b49a1", "row_index": 281, "timestamp": "2019-07-18T19:45:03Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "237.25.162.210", "user_agent": "aws-cli/1.16.106 Python/2.7.16 Darwin/18.6.0 botocore/1.12.96", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 1080, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "f1e1629e-2abe-4681-9f1a-ed13453b49a1", "eventTime": "2019-07-18T19:45:03Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "237.25.162.210", "userAgent": "aws-cli/1.16.106 Python/2.7.16 Darwin/18.6.0 botocore/1.12.96", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"nextToken": "eyJ2IjoiMiIsImMiOiJLR0d2amRUYnRIU05hMFBobU5RMUtmL01tSTZmcFdQM0ViOXA0TWZGNmI2QXNKWTdYTHpPYXFXQytiMG9PRitzTXFNTXFDbkp4UVdDaWtDUW9UdXVic1FTb1pQSUlsZllXYnFVTW5uYmJJMHMzSGtZdmZSbXFGbkhuZ29DSVBsWlVROG51a2lmejNMRm5Tc1hXTFJDRDhMU0tjeXk2dWg1SlRUZzRuZFVjbnV5ZVk4STdreUd6SG80TmFRYk9RV3RsVUZnQmJwN2J6UFFLZz09IiwicyI6IjEifQ==", "maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "f1e1629e-2abe-4681-9f1a-ed13453b49a1", "record_id": "flaws_cloudtrail:0000282:f1e1629e-2abe-4681-9f1a-ed13453b49a1", "row_index": 282, "timestamp": "2019-07-18T19:45:03Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "237.25.162.210", "user_agent": "aws-cli/1.16.106 Python/2.7.16 Darwin/18.6.0 botocore/1.12.96", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 1080, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "f1e1629e-2abe-4681-9f1a-ed13453b49a1", "eventTime": "2019-07-18T19:45:03Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "237.25.162.210", "userAgent": "aws-cli/1.16.106 Python/2.7.16 Darwin/18.6.0 botocore/1.12.96", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"nextToken": "eyJ2IjoiMiIsImMiOiJLR0d2amRUYnRIU05hMFBobU5RMUtmL01tSTZmcFdQM0ViOXA0TWZGNmI2QXNKWTdYTHpPYXFXQytiMG9PRitzTXFNTXFDbkp4UVdDaWtDUW9UdXVic1FTb1pQSUlsZllXYnFVTW5uYmJJMHMzSGtZdmZSbXFGbkhuZ29DSVBsWlVROG51a2lmejNMRm5Tc1hXTFJDRDhMU0tjeXk2dWg1SlRUZzRuZFVjbnV5ZVk4STdreUd6SG80TmFRYk9RV3RsVUZnQmJwN2J6UFFLZz09IiwicyI6IjEifQ==", "maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "87cd57a9-39a6-485e-ae9d-1756bbb9f388", "record_id": "flaws_cloudtrail:0000283:87cd57a9-39a6-485e-ae9d-1756bbb9f388", "row_index": 283, "timestamp": "2019-07-18T19:45:05Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "237.25.162.210", "user_agent": "aws-cli/1.16.106 Python/2.7.16 Darwin/18.6.0 botocore/1.12.96", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 1080, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "87cd57a9-39a6-485e-ae9d-1756bbb9f388", "eventTime": "2019-07-18T19:45:05Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "237.25.162.210", "userAgent": "aws-cli/1.16.106 Python/2.7.16 Darwin/18.6.0 botocore/1.12.96", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"nextToken": "eyJ2IjoiMiIsImMiOiJnY1VyS1dqQWVKd0JaT2RVUnk4SjdsS21UM1h6MjJEbGhmMGM3cEs0L3g4Q1B1UHJqV0tCc2NRV1pQZVlnOUtOSlpaVGZmcnBVa0FHQXdkVVFQZVlLNGUyby9CV20rdXhFN0puV1FXcHVVdzBQaXRzZTFiM0lQcUVuN0ZWLzI1TmxETTRUU3BXT0o0QVFKTXJSYnpPclgwdTJRN3Qxc3pzK0VxUGI0aHRTWFo0U0pJUjBmektlYVVGWmQzWUNYLytKTWdEZE91TndxSXJ4UT09IiwicyI6IjEifQ==", "maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "87cd57a9-39a6-485e-ae9d-1756bbb9f388", "record_id": "flaws_cloudtrail:0000284:87cd57a9-39a6-485e-ae9d-1756bbb9f388", "row_index": 284, "timestamp": "2019-07-18T19:45:05Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "237.25.162.210", "user_agent": "aws-cli/1.16.106 Python/2.7.16 Darwin/18.6.0 botocore/1.12.96", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 1080, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "87cd57a9-39a6-485e-ae9d-1756bbb9f388", "eventTime": "2019-07-18T19:45:05Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "237.25.162.210", "userAgent": "aws-cli/1.16.106 Python/2.7.16 Darwin/18.6.0 botocore/1.12.96", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"nextToken": "eyJ2IjoiMiIsImMiOiJnY1VyS1dqQWVKd0JaT2RVUnk4SjdsS21UM1h6MjJEbGhmMGM3cEs0L3g4Q1B1UHJqV0tCc2NRV1pQZVlnOUtOSlpaVGZmcnBVa0FHQXdkVVFQZVlLNGUyby9CV20rdXhFN0puV1FXcHVVdzBQaXRzZTFiM0lQcUVuN0ZWLzI1TmxETTRUU3BXT0o0QVFKTXJSYnpPclgwdTJRN3Qxc3pzK0VxUGI0aHRTWFo0U0pJUjBmektlYVVGWmQzWUNYLytKTWdEZE91TndxSXJ4UT09IiwicyI6IjEifQ==", "maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "71ececb1-d057-4ebd-b81e-b33dbbcaa3ae", "record_id": "flaws_cloudtrail:0000285:71ececb1-d057-4ebd-b81e-b33dbbcaa3ae", "row_index": 285, "timestamp": "2019-07-18T19:45:07Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "237.25.162.210", "user_agent": "aws-cli/1.16.106 Python/2.7.16 Darwin/18.6.0 botocore/1.12.96", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 1081, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "71ececb1-d057-4ebd-b81e-b33dbbcaa3ae", "eventTime": "2019-07-18T19:45:07Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "237.25.162.210", "userAgent": "aws-cli/1.16.106 Python/2.7.16 Darwin/18.6.0 botocore/1.12.96", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"nextToken": "eyJ2IjoiMiIsImMiOiIvWTNRN2FONHZCTGkyK1hBUkFJR0cyQys0V2hGSkdzbFhUdXdpTk9ZbWVJUy93NUJvcWR0Q0RjZ2VmYjAvclo4NEZhUGxyaUMzSEYxNHVHYnlnRytVQmQ1dzRzcmZsUHVoUytheXFYY1c2RVg0MEs4T1YwbWhhclB6RUs2VE9NY2tWOHo5L3lWL3lRaXk3NGZ3L0FDSzd2eTVPbnZQNXFoSkNPVDJyZGRTRFNzYktncXk0UWJsZXBDQlBqY2FKdjR6UXFuM0l0SEF4OEFjdz09IiwicyI6IjEifQ==", "maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "71ececb1-d057-4ebd-b81e-b33dbbcaa3ae", "record_id": "flaws_cloudtrail:0000286:71ececb1-d057-4ebd-b81e-b33dbbcaa3ae", "row_index": 286, "timestamp": "2019-07-18T19:45:07Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "237.25.162.210", "user_agent": "aws-cli/1.16.106 Python/2.7.16 Darwin/18.6.0 botocore/1.12.96", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 1081, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "71ececb1-d057-4ebd-b81e-b33dbbcaa3ae", "eventTime": "2019-07-18T19:45:07Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "237.25.162.210", "userAgent": "aws-cli/1.16.106 Python/2.7.16 Darwin/18.6.0 botocore/1.12.96", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"nextToken": "eyJ2IjoiMiIsImMiOiIvWTNRN2FONHZCTGkyK1hBUkFJR0cyQys0V2hGSkdzbFhUdXdpTk9ZbWVJUy93NUJvcWR0Q0RjZ2VmYjAvclo4NEZhUGxyaUMzSEYxNHVHYnlnRytVQmQ1dzRzcmZsUHVoUytheXFYY1c2RVg0MEs4T1YwbWhhclB6RUs2VE9NY2tWOHo5L3lWL3lRaXk3NGZ3L0FDSzd2eTVPbnZQNXFoSkNPVDJyZGRTRFNzYktncXk0UWJsZXBDQlBqY2FKdjR6UXFuM0l0SEF4OEFjdz09IiwicyI6IjEifQ==", "maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "e85afa73-cd14-4938-a4f2-e349807", "record_id": "flaws_cloudtrail:0000287:e85afa73-cd14-4938-a4f2-e349807", "row_index": 287, "timestamp": "2019-07-18T19:45:08Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "237.25.162.210", "user_agent": "aws-cli/1.16.106 Python/2.7.16 Darwin/18.6.0 botocore/1.12.96", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 1075, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "e85afa73-cd14-4938-a4f2-e349807", "eventTime": "2019-07-18T19:45:08Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "237.25.162.210", "userAgent": "aws-cli/1.16.106 Python/2.7.16 Darwin/18.6.0 botocore/1.12.96", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"nextToken": "eyJ2IjoiMiIsImMiOiJMQnBMWVFxSkMwRXc3NmdZN05vRmRsSDF3SEJkRFArakNjcXNWTGYydXI2ekN2MVdGdGlNWGRjUlc1RTl6WFZxbXZpY0NUb2pkbnF5cE5pUWdXeU5iVnZUOXUyZW5Pb3UxRnU5bXJkdk5PTnozcXVwV1RzZlFjNjRkL3FxK3RGTlgvUlRtN3pNaE1OTVNxZ29FUDlBczhDcXNxTURhNWMvdmlnRHNJUEFuVjY5RFQ4aWNhSURXYnhEVTdpSG51anlVVjZVL1JtUFVCN0lQUT09IiwicyI6IjEifQ==", "maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "e85afa73-cd14-4938-a4f2-e349807", "record_id": "flaws_cloudtrail:0000288:e85afa73-cd14-4938-a4f2-e349807", "row_index": 288, "timestamp": "2019-07-18T19:45:08Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "237.25.162.210", "user_agent": "aws-cli/1.16.106 Python/2.7.16 Darwin/18.6.0 botocore/1.12.96", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 1075, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "e85afa73-cd14-4938-a4f2-e349807", "eventTime": "2019-07-18T19:45:08Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "237.25.162.210", "userAgent": "aws-cli/1.16.106 Python/2.7.16 Darwin/18.6.0 botocore/1.12.96", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"nextToken": "eyJ2IjoiMiIsImMiOiJMQnBMWVFxSkMwRXc3NmdZN05vRmRsSDF3SEJkRFArakNjcXNWTGYydXI2ekN2MVdGdGlNWGRjUlc1RTl6WFZxbXZpY0NUb2pkbnF5cE5pUWdXeU5iVnZUOXUyZW5Pb3UxRnU5bXJkdk5PTnozcXVwV1RzZlFjNjRkL3FxK3RGTlgvUlRtN3pNaE1OTVNxZ29FUDlBczhDcXNxTURhNWMvdmlnRHNJUEFuVjY5RFQ4aWNhSURXYnhEVTdpSG51anlVVjZVL1JtUFVCN0lQUT09IiwicyI6IjEifQ==", "maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "21cc942f-8a09-48ee-9a0d-25f1998d72a5", "record_id": "flaws_cloudtrail:0000289:21cc942f-8a09-48ee-9a0d-25f1998d72a5", "row_index": 289, "timestamp": "2019-07-18T19:45:10Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "237.25.162.210", "user_agent": "aws-cli/1.16.106 Python/2.7.16 Darwin/18.6.0 botocore/1.12.96", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 1080, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "21cc942f-8a09-48ee-9a0d-25f1998d72a5", "eventTime": "2019-07-18T19:45:10Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "237.25.162.210", "userAgent": "aws-cli/1.16.106 Python/2.7.16 Darwin/18.6.0 botocore/1.12.96", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"nextToken": "eyJ2IjoiMiIsImMiOiJTR2JoWUFtVTB6d0VSN3piZTNqS25Rbnczd1Y3ejFobUJ2TlVMQ011enlma0g2N0VYSTVMOU9SQ1lobFRBZDRqWGRYZFQ3NTZFOSsrdkpIalB2NnRsNENvYWFUSTdXYnZvVGNpd3pQL0g3ck9XMDhFa1NHS0lubkRWS2JHdEgxcXdlMjlZckNucjFMZUdVYkQ0SHFPSXJET09ESk9mejNXQjBGRUxsRXBDdWo2SVZIdkE0cU5HMzY5VlBxdzRZQ3NSeXpibXpTOC9nNGRTUT09IiwicyI6IjEifQ==", "maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "21cc942f-8a09-48ee-9a0d-25f1998d72a5", "record_id": "flaws_cloudtrail:0000290:21cc942f-8a09-48ee-9a0d-25f1998d72a5", "row_index": 290, "timestamp": "2019-07-18T19:45:10Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "237.25.162.210", "user_agent": "aws-cli/1.16.106 Python/2.7.16 Darwin/18.6.0 botocore/1.12.96", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 1080, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "21cc942f-8a09-48ee-9a0d-25f1998d72a5", "eventTime": "2019-07-18T19:45:10Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "237.25.162.210", "userAgent": "aws-cli/1.16.106 Python/2.7.16 Darwin/18.6.0 botocore/1.12.96", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"nextToken": "eyJ2IjoiMiIsImMiOiJTR2JoWUFtVTB6d0VSN3piZTNqS25Rbnczd1Y3ejFobUJ2TlVMQ011enlma0g2N0VYSTVMOU9SQ1lobFRBZDRqWGRYZFQ3NTZFOSsrdkpIalB2NnRsNENvYWFUSTdXYnZvVGNpd3pQL0g3ck9XMDhFa1NHS0lubkRWS2JHdEgxcXdlMjlZckNucjFMZUdVYkQ0SHFPSXJET09ESk9mejNXQjBGRUxsRXBDdWo2SVZIdkE0cU5HMzY5VlBxdzRZQ3NSeXpibXpTOC9nNGRTUT09IiwicyI6IjEifQ==", "maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "1547a714-4c1d-4c57-8cf3-661e15f732e6", "record_id": "flaws_cloudtrail:0000291:1547a714-4c1d-4c57-8cf3-661e15f732e6", "row_index": 291, "timestamp": "2019-07-18T19:45:12Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "237.25.162.210", "user_agent": "aws-cli/1.16.106 Python/2.7.16 Darwin/18.6.0 botocore/1.12.96", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 1080, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "1547a714-4c1d-4c57-8cf3-661e15f732e6", "eventTime": "2019-07-18T19:45:12Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "237.25.162.210", "userAgent": "aws-cli/1.16.106 Python/2.7.16 Darwin/18.6.0 botocore/1.12.96", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"nextToken": "eyJ2IjoiMiIsImMiOiJMb256ZXhxMnBPOHJLWlAyRmttaXVjTjUwSnh5T0pEcVN1RmFJQ20vbkJzeTVKMS81NTNiYkdSL0VGdi9mSmlWZVI2YXI3YnVCN1Y2Z05aaTlJS0lwTElwN3ozdFNmL2VLRDdVQktJUThmMkVVZkRZTUxxbVNVVTF3YWM3OGUzY0Z2Yy94TGhRc0krZ2lLekZIS1dlMUg5djFvZHZNOEV2cGZFQjZkckQ4NUJKWnpVVW1jTG5FNmJURkdkR0wrT2lkcThYbmpIdEFva1RTQT09IiwicyI6IjEifQ==", "maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "1547a714-4c1d-4c57-8cf3-661e15f732e6", "record_id": "flaws_cloudtrail:0000292:1547a714-4c1d-4c57-8cf3-661e15f732e6", "row_index": 292, "timestamp": "2019-07-18T19:45:12Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "237.25.162.210", "user_agent": "aws-cli/1.16.106 Python/2.7.16 Darwin/18.6.0 botocore/1.12.96", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 1080, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "1547a714-4c1d-4c57-8cf3-661e15f732e6", "eventTime": "2019-07-18T19:45:12Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "237.25.162.210", "userAgent": "aws-cli/1.16.106 Python/2.7.16 Darwin/18.6.0 botocore/1.12.96", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"nextToken": "eyJ2IjoiMiIsImMiOiJMb256ZXhxMnBPOHJLWlAyRmttaXVjTjUwSnh5T0pEcVN1RmFJQ20vbkJzeTVKMS81NTNiYkdSL0VGdi9mSmlWZVI2YXI3YnVCN1Y2Z05aaTlJS0lwTElwN3ozdFNmL2VLRDdVQktJUThmMkVVZkRZTUxxbVNVVTF3YWM3OGUzY0Z2Yy94TGhRc0krZ2lLekZIS1dlMUg5djFvZHZNOEV2cGZFQjZkckQ4NUJKWnpVVW1jTG5FNmJURkdkR0wrT2lkcThYbmpIdEFva1RTQT09IiwicyI6IjEifQ==", "maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "a1f91ce6-c7b2-4ad1-a99c-1f6c2b1aa630", "record_id": "flaws_cloudtrail:0000293:a1f91ce6-c7b2-4ad1-a99c-1f6c2b1aa630", "row_index": 293, "timestamp": "2019-07-18T19:45:13Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "237.25.162.210", "user_agent": "aws-cli/1.16.106 Python/2.7.16 Darwin/18.6.0 botocore/1.12.96", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 1080, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "a1f91ce6-c7b2-4ad1-a99c-1f6c2b1aa630", "eventTime": "2019-07-18T19:45:13Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "237.25.162.210", "userAgent": "aws-cli/1.16.106 Python/2.7.16 Darwin/18.6.0 botocore/1.12.96", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"nextToken": "eyJ2IjoiMiIsImMiOiJ4bURRZGx4Y1U1V09SZXhQQ1FxYW1ZUGw1aEY5NUZicHFUSjZsUnBUdTkvNitUbzNBL3hyV2pDU3BCS1FlOC9JbEU2NmRoWVd1N1lIQ3U2OFVnQXA4QlJXSHdsZFp1OWEzdzFTU0ZEdUpYbkxFbGFuL1dsaWlJM0lFcEdQZmY2ZTd5OXdrYTcrRk5uN0pham5KaDJjcmdiK2ZTWU5sMjMzV0VqVzNjN1RVSmZaK2JDUVdibHl5VWNCd09oZkN3RXJsL2ZJc0dOZG9HRUpjdz09IiwicyI6IjEifQ==", "maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "a1f91ce6-c7b2-4ad1-a99c-1f6c2b1aa630", "record_id": "flaws_cloudtrail:0000294:a1f91ce6-c7b2-4ad1-a99c-1f6c2b1aa630", "row_index": 294, "timestamp": "2019-07-18T19:45:13Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "237.25.162.210", "user_agent": "aws-cli/1.16.106 Python/2.7.16 Darwin/18.6.0 botocore/1.12.96", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 1080, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "a1f91ce6-c7b2-4ad1-a99c-1f6c2b1aa630", "eventTime": "2019-07-18T19:45:13Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "237.25.162.210", "userAgent": "aws-cli/1.16.106 Python/2.7.16 Darwin/18.6.0 botocore/1.12.96", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"nextToken": "eyJ2IjoiMiIsImMiOiJ4bURRZGx4Y1U1V09SZXhQQ1FxYW1ZUGw1aEY5NUZicHFUSjZsUnBUdTkvNitUbzNBL3hyV2pDU3BCS1FlOC9JbEU2NmRoWVd1N1lIQ3U2OFVnQXA4QlJXSHdsZFp1OWEzdzFTU0ZEdUpYbkxFbGFuL1dsaWlJM0lFcEdQZmY2ZTd5OXdrYTcrRk5uN0pham5KaDJjcmdiK2ZTWU5sMjMzV0VqVzNjN1RVSmZaK2JDUVdibHl5VWNCd09oZkN3RXJsL2ZJc0dOZG9HRUpjdz09IiwicyI6IjEifQ==", "maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "3a0491f8-a417-47d3-9d18-6e77acb6faf5", "record_id": "flaws_cloudtrail:0000295:3a0491f8-a417-47d3-9d18-6e77acb6faf5", "row_index": 295, "timestamp": "2019-07-18T19:45:15Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "237.25.162.210", "user_agent": "aws-cli/1.16.106 Python/2.7.16 Darwin/18.6.0 botocore/1.12.96", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 1080, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "3a0491f8-a417-47d3-9d18-6e77acb6faf5", "eventTime": "2019-07-18T19:45:15Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "237.25.162.210", "userAgent": "aws-cli/1.16.106 Python/2.7.16 Darwin/18.6.0 botocore/1.12.96", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"nextToken": "eyJ2IjoiMiIsImMiOiJqQWNubTRaTWNCSXFqcll0ZkVXaVgxeHFxb0JBU25LRGZFbCszd2xzbDdVUVVEUFcxRU1QK3RRMEdOZXRWNHduc2VueFRIZUg3MHhWQXNwb2VDQ0pQMjZDMXB0KzNqM0g5SmhrdnR5OHpJenpLNWJpU05WdElEMkpmczN6UFlaSERSS3l5c21ZRnpzSkFRaVI1bVpOcngrSlRvZmZ4clZxQ2xQR2hucWx4YUpIcjVSQXA2dW9zeGVxVkdwd2llRWh1ZklJSmp5V0pZbEk3QT09IiwicyI6IjEifQ==", "maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "3a0491f8-a417-47d3-9d18-6e77acb6faf5", "record_id": "flaws_cloudtrail:0000296:3a0491f8-a417-47d3-9d18-6e77acb6faf5", "row_index": 296, "timestamp": "2019-07-18T19:45:15Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "237.25.162.210", "user_agent": "aws-cli/1.16.106 Python/2.7.16 Darwin/18.6.0 botocore/1.12.96", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 1080, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "3a0491f8-a417-47d3-9d18-6e77acb6faf5", "eventTime": "2019-07-18T19:45:15Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "237.25.162.210", "userAgent": "aws-cli/1.16.106 Python/2.7.16 Darwin/18.6.0 botocore/1.12.96", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"nextToken": "eyJ2IjoiMiIsImMiOiJqQWNubTRaTWNCSXFqcll0ZkVXaVgxeHFxb0JBU25LRGZFbCszd2xzbDdVUVVEUFcxRU1QK3RRMEdOZXRWNHduc2VueFRIZUg3MHhWQXNwb2VDQ0pQMjZDMXB0KzNqM0g5SmhrdnR5OHpJenpLNWJpU05WdElEMkpmczN6UFlaSERSS3l5c21ZRnpzSkFRaVI1bVpOcngrSlRvZmZ4clZxQ2xQR2hucWx4YUpIcjVSQXA2dW9zeGVxVkdwd2llRWh1ZklJSmp5V0pZbEk3QT09IiwicyI6IjEifQ==", "maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "9cd76feb-d6c6-4a54-b696-513c0ff29e57", "record_id": "flaws_cloudtrail:0000297:9cd76feb-d6c6-4a54-b696-513c0ff29e57", "row_index": 297, "timestamp": "2019-07-18T19:45:16Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "237.25.162.210", "user_agent": "aws-cli/1.16.106 Python/2.7.16 Darwin/18.6.0 botocore/1.12.96", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 1080, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "9cd76feb-d6c6-4a54-b696-513c0ff29e57", "eventTime": "2019-07-18T19:45:16Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "237.25.162.210", "userAgent": "aws-cli/1.16.106 Python/2.7.16 Darwin/18.6.0 botocore/1.12.96", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"nextToken": "eyJ2IjoiMiIsImMiOiJTWnBMa3RScDhLMUN2eDVyZ2NXNDNZOHAzeEQ2TVdYS0psMDFGMGEra0pkVDhWNWhLVXJCeHdQZnljQ1c4M0lQbUdFZkMxdE9ockxUUkdRSVozdllWNkU5cnlLZGFWZEVmK2pET1ZacWl6cGJWQUxLSEVFZDh0bExoWGI0NEdha3BQR1ZBeURHTGFrSTlTTlI1UGJESitIeTY4QVB1MFFNVytta3hQZXFwUStFbnp1dXJBRktQanhGUGJCN0hTRkNFYTc3N3NBcUFZeEcwUT09IiwicyI6IjEifQ==", "maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "9cd76feb-d6c6-4a54-b696-513c0ff29e57", "record_id": "flaws_cloudtrail:0000298:9cd76feb-d6c6-4a54-b696-513c0ff29e57", "row_index": 298, "timestamp": "2019-07-18T19:45:16Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "237.25.162.210", "user_agent": "aws-cli/1.16.106 Python/2.7.16 Darwin/18.6.0 botocore/1.12.96", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 1080, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "9cd76feb-d6c6-4a54-b696-513c0ff29e57", "eventTime": "2019-07-18T19:45:16Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "237.25.162.210", "userAgent": "aws-cli/1.16.106 Python/2.7.16 Darwin/18.6.0 botocore/1.12.96", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"nextToken": "eyJ2IjoiMiIsImMiOiJTWnBMa3RScDhLMUN2eDVyZ2NXNDNZOHAzeEQ2TVdYS0psMDFGMGEra0pkVDhWNWhLVXJCeHdQZnljQ1c4M0lQbUdFZkMxdE9ockxUUkdRSVozdllWNkU5cnlLZGFWZEVmK2pET1ZacWl6cGJWQUxLSEVFZDh0bExoWGI0NEdha3BQR1ZBeURHTGFrSTlTTlI1UGJESitIeTY4QVB1MFFNVytta3hQZXFwUStFbnp1dXJBRktQanhGUGJCN0hTRkNFYTc3N3NBcUFZeEcwUT09IiwicyI6IjEifQ==", "maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "5e0105a8-ac74-46fb-8914-5061ee97718", "record_id": "flaws_cloudtrail:0000299:5e0105a8-ac74-46fb-8914-5061ee97718", "row_index": 299, "timestamp": "2019-07-18T19:45:17Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "237.25.162.210", "user_agent": "aws-cli/1.16.106 Python/2.7.16 Darwin/18.6.0 botocore/1.12.96", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 1079, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "5e0105a8-ac74-46fb-8914-5061ee97718", "eventTime": "2019-07-18T19:45:17Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "237.25.162.210", "userAgent": "aws-cli/1.16.106 Python/2.7.16 Darwin/18.6.0 botocore/1.12.96", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"nextToken": "eyJ2IjoiMiIsImMiOiJwdFVIRXVjUlpvNmdyYVlKTmNvWjVuOHlSQVN0VG1zbTUvU3pBZmRNYVMrd2NEYnF1K2JkdmJSN29oakhJT0NSRVo4RExKVXhlUEdBVTI0VGNCcWZyVldHWmRUS3lHSy95L2dSZTl4L1pIc29aQkpPbSszbnR6SWpYNFpmU0V0OTRTMFpZdzdPanBEclFmMWFSWFRTbHdPN2M2bENPMktjT3dmQnVUWFlxRFg0dlEyUHROTDFoT1cvMGVoalNXNm96WXZmaEQ0eGkxN3VPdz09IiwicyI6IjEifQ==", "maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "5e0105a8-ac74-46fb-8914-5061ee97718", "record_id": "flaws_cloudtrail:0000300:5e0105a8-ac74-46fb-8914-5061ee97718", "row_index": 300, "timestamp": "2019-07-18T19:45:17Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "237.25.162.210", "user_agent": "aws-cli/1.16.106 Python/2.7.16 Darwin/18.6.0 botocore/1.12.96", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 1079, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "5e0105a8-ac74-46fb-8914-5061ee97718", "eventTime": "2019-07-18T19:45:17Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "237.25.162.210", "userAgent": "aws-cli/1.16.106 Python/2.7.16 Darwin/18.6.0 botocore/1.12.96", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"nextToken": "eyJ2IjoiMiIsImMiOiJwdFVIRXVjUlpvNmdyYVlKTmNvWjVuOHlSQVN0VG1zbTUvU3pBZmRNYVMrd2NEYnF1K2JkdmJSN29oakhJT0NSRVo4RExKVXhlUEdBVTI0VGNCcWZyVldHWmRUS3lHSy95L2dSZTl4L1pIc29aQkpPbSszbnR6SWpYNFpmU0V0OTRTMFpZdzdPanBEclFmMWFSWFRTbHdPN2M2bENPMktjT3dmQnVUWFlxRFg0dlEyUHROTDFoT1cvMGVoalNXNm96WXZmaEQ0eGkxN3VPdz09IiwicyI6IjEifQ==", "maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "7bd3c715-fa01-4642-b776-48eea50000f5", "record_id": "flaws_cloudtrail:0000301:7bd3c715-fa01-4642-b776-48eea50000f5", "row_index": 301, "timestamp": "2019-07-18T19:45:19Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "237.25.162.210", "user_agent": "aws-cli/1.16.106 Python/2.7.16 Darwin/18.6.0 botocore/1.12.96", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 1080, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "7bd3c715-fa01-4642-b776-48eea50000f5", "eventTime": "2019-07-18T19:45:19Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "237.25.162.210", "userAgent": "aws-cli/1.16.106 Python/2.7.16 Darwin/18.6.0 botocore/1.12.96", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"nextToken": "eyJ2IjoiMiIsImMiOiJreWhCVjRDcTdFd0RYR201Wlk0Q3VENE1KS2ZYelNpVVBIVWlRa1RCd1ViMjhOK0JxVTNJSVpTemZiUGs0Tm9CMlVqTTdibUQyVUtYbDJKeC9pZVduMnNQK3YzaCsyWEFVVmZzTjhNaHZZcFBucy9mTWtHaXllWUE0VWRQUDM1bDJGcjBRQlhmMHFtc2cxUy9JbVNDZFJIQzBmbm1DZnlCSUdvT2JLSU41cHFVeUZXZnc2Z1YwME51ejViZnVkbjRHd0ZITVV3MnhRaHBBdz09IiwicyI6IjEifQ==", "maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "7bd3c715-fa01-4642-b776-48eea50000f5", "record_id": "flaws_cloudtrail:0000302:7bd3c715-fa01-4642-b776-48eea50000f5", "row_index": 302, "timestamp": "2019-07-18T19:45:19Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "237.25.162.210", "user_agent": "aws-cli/1.16.106 Python/2.7.16 Darwin/18.6.0 botocore/1.12.96", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 1080, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "7bd3c715-fa01-4642-b776-48eea50000f5", "eventTime": "2019-07-18T19:45:19Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "237.25.162.210", "userAgent": "aws-cli/1.16.106 Python/2.7.16 Darwin/18.6.0 botocore/1.12.96", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"nextToken": "eyJ2IjoiMiIsImMiOiJreWhCVjRDcTdFd0RYR201Wlk0Q3VENE1KS2ZYelNpVVBIVWlRa1RCd1ViMjhOK0JxVTNJSVpTemZiUGs0Tm9CMlVqTTdibUQyVUtYbDJKeC9pZVduMnNQK3YzaCsyWEFVVmZzTjhNaHZZcFBucy9mTWtHaXllWUE0VWRQUDM1bDJGcjBRQlhmMHFtc2cxUy9JbVNDZFJIQzBmbm1DZnlCSUdvT2JLSU41cHFVeUZXZnc2Z1YwME51ejViZnVkbjRHd0ZITVV3MnhRaHBBdz09IiwicyI6IjEifQ==", "maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "9ae7f81a-59d6-4727-994d-240e681239f3", "record_id": "flaws_cloudtrail:0000303:9ae7f81a-59d6-4727-994d-240e681239f3", "row_index": 303, "timestamp": "2019-07-18T19:45:20Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "237.25.162.210", "user_agent": "aws-cli/1.16.106 Python/2.7.16 Darwin/18.6.0 botocore/1.12.96", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 1080, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "9ae7f81a-59d6-4727-994d-240e681239f3", "eventTime": "2019-07-18T19:45:20Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "237.25.162.210", "userAgent": "aws-cli/1.16.106 Python/2.7.16 Darwin/18.6.0 botocore/1.12.96", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"nextToken": "eyJ2IjoiMiIsImMiOiJGUkVLd2VqZ3JKdE5QUm5CVlpWeWlIWWdsRzNHT3hwQ0RpcndSU1hkSk1ZV3pzNW5NdHFYcjcxbTlhRU5POTR0a0VMc0RLOFR1bWx5OC9XYUxISVNKWTZyaXlDL1UrMHhoK2pDY1ZzM0lmbXdQaG8zQ0t2UG9EVWZlanBpY243RzYzK1Z5RE5ObE9SN0QxaDViMmxCdnFVZlowT2I3My81ajdNdFhlNkw3amNoV1ZRWlNVeWhsSzloMDNPZGRyT1g3NzRQdGY4QmlyMDFSUT09IiwicyI6IjEifQ==", "maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "9ae7f81a-59d6-4727-994d-240e681239f3", "record_id": "flaws_cloudtrail:0000304:9ae7f81a-59d6-4727-994d-240e681239f3", "row_index": 304, "timestamp": "2019-07-18T19:45:20Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "237.25.162.210", "user_agent": "aws-cli/1.16.106 Python/2.7.16 Darwin/18.6.0 botocore/1.12.96", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 1080, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "9ae7f81a-59d6-4727-994d-240e681239f3", "eventTime": "2019-07-18T19:45:20Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "237.25.162.210", "userAgent": "aws-cli/1.16.106 Python/2.7.16 Darwin/18.6.0 botocore/1.12.96", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"nextToken": "eyJ2IjoiMiIsImMiOiJGUkVLd2VqZ3JKdE5QUm5CVlpWeWlIWWdsRzNHT3hwQ0RpcndSU1hkSk1ZV3pzNW5NdHFYcjcxbTlhRU5POTR0a0VMc0RLOFR1bWx5OC9XYUxISVNKWTZyaXlDL1UrMHhoK2pDY1ZzM0lmbXdQaG8zQ0t2UG9EVWZlanBpY243RzYzK1Z5RE5ObE9SN0QxaDViMmxCdnFVZlowT2I3My81ajdNdFhlNkw3amNoV1ZRWlNVeWhsSzloMDNPZGRyT1g3NzRQdGY4QmlyMDFSUT09IiwicyI6IjEifQ==", "maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "95ad3879-72ea-434b-9ed3-fbc74635a", "record_id": "flaws_cloudtrail:0000305:95ad3879-72ea-434b-9ed3-fbc74635a", "row_index": 305, "timestamp": "2019-07-18T19:45:22Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "237.25.162.210", "user_agent": "aws-cli/1.16.106 Python/2.7.16 Darwin/18.6.0 botocore/1.12.96", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 1077, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "95ad3879-72ea-434b-9ed3-fbc74635a", "eventTime": "2019-07-18T19:45:22Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "237.25.162.210", "userAgent": "aws-cli/1.16.106 Python/2.7.16 Darwin/18.6.0 botocore/1.12.96", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"nextToken": "eyJ2IjoiMiIsImMiOiJpUXo4MSsvbjF4Zm9VbVdyRTErRGFVWC9TSFVDWnhYYyt6SXhqUGwydTdkN0JSdnB4VVJmcDZHOXhaY2VxQlVoZFlYejVxcU1uMTZaYlZxM21vRlBUYmRQNHdBYnZ6ZVU3TXJ4YlQ3R25rR1E5MkRINUd1b2tjQ1ROck9LSW9NVitpS3NZcHBkU3N4U21lVkc1UzdQL3VHNFBsZ2JoSTVBSWpaM2c4QVhVNnhMZUJSdHZZcjNCdlNMaEN6bE1FcDRydlUyTWdSYXdzSjNlUT09IiwicyI6IjEifQ==", "maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "2ad458922-a4f5-49e7-aaf0-ce13bcae233c", "record_id": "flaws_cloudtrail:0000306:2ad458922-a4f5-49e7-aaf0-ce13bcae233c", "row_index": 306, "timestamp": "2019-07-18T19:45:22Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "237.25.162.210", "user_agent": "aws-cli/1.16.106 Python/2.7.16 Darwin/18.6.0 botocore/1.12.96", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 1057, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "2ad458922-a4f5-49e7-aaf0-ce13bcae233c", "eventTime": "2019-07-18T19:45:22Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "237.25.162.210", "userAgent": "aws-cli/1.16.106 Python/2.7.16 Darwin/18.6.0 botocore/1.12.96", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"nextToken": "eyJ2IjoiMiIsImMiOiI1TEljVGJUM0NUaGJyUUZXSjB3OHZ0QTJPSzFjc3lvaS9VdGo1eXZSWHRGS1NUWTFrYUE0ZnROU3NLTlRQZzhEeTc3U1hCeDQ3OG9HdmFNODBQWm1YSlpZWTBWSW4vWGZsNjg5R3diVjNQZVY2L3UvLzBnaWRObFo1Q1pXeG0xdDBENVJKcUpGcldEWWY0Z1FRYlVBZGh2MlNhRzdnVkE4SjV6c3lQNlhwSllVdnNwNWd3NnAxQnoyZlUxbUxRPT0iLCJzIjoiMSJ9", "maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "95ad3879-72ea-434b-9ed3-fbc74635a", "record_id": "flaws_cloudtrail:0000307:95ad3879-72ea-434b-9ed3-fbc74635a", "row_index": 307, "timestamp": "2019-07-18T19:45:22Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "237.25.162.210", "user_agent": "aws-cli/1.16.106 Python/2.7.16 Darwin/18.6.0 botocore/1.12.96", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 1077, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "95ad3879-72ea-434b-9ed3-fbc74635a", "eventTime": "2019-07-18T19:45:22Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "237.25.162.210", "userAgent": "aws-cli/1.16.106 Python/2.7.16 Darwin/18.6.0 botocore/1.12.96", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"nextToken": "eyJ2IjoiMiIsImMiOiJpUXo4MSsvbjF4Zm9VbVdyRTErRGFVWC9TSFVDWnhYYyt6SXhqUGwydTdkN0JSdnB4VVJmcDZHOXhaY2VxQlVoZFlYejVxcU1uMTZaYlZxM21vRlBUYmRQNHdBYnZ6ZVU3TXJ4YlQ3R25rR1E5MkRINUd1b2tjQ1ROck9LSW9NVitpS3NZcHBkU3N4U21lVkc1UzdQL3VHNFBsZ2JoSTVBSWpaM2c4QVhVNnhMZUJSdHZZcjNCdlNMaEN6bE1FcDRydlUyTWdSYXdzSjNlUT09IiwicyI6IjEifQ==", "maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "2ad458922-a4f5-49e7-aaf0-ce13bcae233c", "record_id": "flaws_cloudtrail:0000308:2ad458922-a4f5-49e7-aaf0-ce13bcae233c", "row_index": 308, "timestamp": "2019-07-18T19:45:22Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "237.25.162.210", "user_agent": "aws-cli/1.16.106 Python/2.7.16 Darwin/18.6.0 botocore/1.12.96", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 1057, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "2ad458922-a4f5-49e7-aaf0-ce13bcae233c", "eventTime": "2019-07-18T19:45:22Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "237.25.162.210", "userAgent": "aws-cli/1.16.106 Python/2.7.16 Darwin/18.6.0 botocore/1.12.96", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"nextToken": "eyJ2IjoiMiIsImMiOiI1TEljVGJUM0NUaGJyUUZXSjB3OHZ0QTJPSzFjc3lvaS9VdGo1eXZSWHRGS1NUWTFrYUE0ZnROU3NLTlRQZzhEeTc3U1hCeDQ3OG9HdmFNODBQWm1YSlpZWTBWSW4vWGZsNjg5R3diVjNQZVY2L3UvLzBnaWRObFo1Q1pXeG0xdDBENVJKcUpGcldEWWY0Z1FRYlVBZGh2MlNhRzdnVkE4SjV6c3lQNlhwSllVdnNwNWd3NnAxQnoyZlUxbUxRPT0iLCJzIjoiMSJ9", "maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "dab6311a-f407-431f-989f-c3e5bad7261e", "record_id": "flaws_cloudtrail:0000309:dab6311a-f407-431f-989f-c3e5bad7261e", "row_index": 309, "timestamp": "2019-07-18T19:45:23Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "237.25.162.210", "user_agent": "aws-cli/1.16.106 Python/2.7.16 Darwin/18.6.0 botocore/1.12.96", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 1100, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "dab6311a-f407-431f-989f-c3e5bad7261e", "eventTime": "2019-07-18T19:45:23Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "237.25.162.210", "userAgent": "aws-cli/1.16.106 Python/2.7.16 Darwin/18.6.0 botocore/1.12.96", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"nextToken": "eyJ2IjoiMiIsImMiOiJnQ0ZhbTdOT0pkN0VuTVNwOGxUNlVuZnRlSEREbFVwU0p4V3lGVXZvbVhMdU5xU21mZkFwZnZuVHBpWnVZMjF5Vld4a0tNYm1SM2FseFUreW5zWlFVN2V2bkkzOXpwNDRnTjJVV1gvVkhlTkt2UW5FNDk4TFdVRisrOHovakhmTGROZzRqb05JOFZmVVBQWEhidGZmNEFxMlU5NHNWbnQ3aDR1dUx6RklFazAzbDhBaE1mLy90NDBnSTkwVkFSdmpabU9CeTYxanNoUDZtZGJMOVJmVkpDVEFIWDZBakRNPSIsInMiOiIxIn0=", "maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "dab6311a-f407-431f-989f-c3e5bad7261e", "record_id": "flaws_cloudtrail:0000310:dab6311a-f407-431f-989f-c3e5bad7261e", "row_index": 310, "timestamp": "2019-07-18T19:45:23Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "237.25.162.210", "user_agent": "aws-cli/1.16.106 Python/2.7.16 Darwin/18.6.0 botocore/1.12.96", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 1100, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "dab6311a-f407-431f-989f-c3e5bad7261e", "eventTime": "2019-07-18T19:45:23Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "237.25.162.210", "userAgent": "aws-cli/1.16.106 Python/2.7.16 Darwin/18.6.0 botocore/1.12.96", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"nextToken": "eyJ2IjoiMiIsImMiOiJnQ0ZhbTdOT0pkN0VuTVNwOGxUNlVuZnRlSEREbFVwU0p4V3lGVXZvbVhMdU5xU21mZkFwZnZuVHBpWnVZMjF5Vld4a0tNYm1SM2FseFUreW5zWlFVN2V2bkkzOXpwNDRnTjJVV1gvVkhlTkt2UW5FNDk4TFdVRisrOHovakhmTGROZzRqb05JOFZmVVBQWEhidGZmNEFxMlU5NHNWbnQ3aDR1dUx6RklFazAzbDhBaE1mLy90NDBnSTkwVkFSdmpabU9CeTYxanNoUDZtZGJMOVJmVkpDVEFIWDZBakRNPSIsInMiOiIxIn0=", "maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "465f313a-b4e7-43af-8d6f-4a74c5c4c547", "record_id": "flaws_cloudtrail:0000311:465f313a-b4e7-43af-8d6f-4a74c5c4c547", "row_index": 311, "timestamp": "2019-07-18T19:45:24Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "237.25.162.210", "user_agent": "aws-cli/1.16.106 Python/2.7.16 Darwin/18.6.0 botocore/1.12.96", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 1056, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "465f313a-b4e7-43af-8d6f-4a74c5c4c547", "eventTime": "2019-07-18T19:45:24Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "237.25.162.210", "userAgent": "aws-cli/1.16.106 Python/2.7.16 Darwin/18.6.0 botocore/1.12.96", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"nextToken": "eyJ2IjoiMiIsImMiOiJHYXB0TFFpMDVuZkNvSjdocjNLTm0yM1lhZGZTYnF6TDUzZzJxODFCVndqMkRLNzRVcHJFeW1Yckx0MnlPaXhzNU42OHY4bUNGeE0wQkZhYXBOK1dnS2FaQms4TTBYUi9BVDREblg5N2d5NGRzR0dzRE5oUkpGZDBUVndxMG83bjNBVUlFUEEvbjNMSjlPL1lBMWozRExnRGNaQnZzMWVEVHo4Sml1WFVBaHd5Um1zVEo1Um14ZElrbWxrOVdBND0iLCJzIjoiMSJ9", "maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "465f313a-b4e7-43af-8d6f-4a74c5c4c547", "record_id": "flaws_cloudtrail:0000312:465f313a-b4e7-43af-8d6f-4a74c5c4c547", "row_index": 312, "timestamp": "2019-07-18T19:45:24Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "237.25.162.210", "user_agent": "aws-cli/1.16.106 Python/2.7.16 Darwin/18.6.0 botocore/1.12.96", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 1056, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "465f313a-b4e7-43af-8d6f-4a74c5c4c547", "eventTime": "2019-07-18T19:45:24Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "237.25.162.210", "userAgent": "aws-cli/1.16.106 Python/2.7.16 Darwin/18.6.0 botocore/1.12.96", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"nextToken": "eyJ2IjoiMiIsImMiOiJHYXB0TFFpMDVuZkNvSjdocjNLTm0yM1lhZGZTYnF6TDUzZzJxODFCVndqMkRLNzRVcHJFeW1Yckx0MnlPaXhzNU42OHY4bUNGeE0wQkZhYXBOK1dnS2FaQms4TTBYUi9BVDREblg5N2d5NGRzR0dzRE5oUkpGZDBUVndxMG83bjNBVUlFUEEvbjNMSjlPL1lBMWozRExnRGNaQnZzMWVEVHo4Sml1WFVBaHd5Um1zVEo1Um14ZElrbWxrOVdBND0iLCJzIjoiMSJ9", "maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "5ef44eaf-f159-4779-b53f-534e3c4da295", "record_id": "flaws_cloudtrail:0000313:5ef44eaf-f159-4779-b53f-534e3c4da295", "row_index": 313, "timestamp": "2019-07-18T19:45:25Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "237.25.162.210", "user_agent": "aws-cli/1.16.106 Python/2.7.16 Darwin/18.6.0 botocore/1.12.96", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 1100, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "5ef44eaf-f159-4779-b53f-534e3c4da295", "eventTime": "2019-07-18T19:45:25Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "237.25.162.210", "userAgent": "aws-cli/1.16.106 Python/2.7.16 Darwin/18.6.0 botocore/1.12.96", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"nextToken": "eyJ2IjoiMiIsImMiOiJneTlkSkdnM1ZFU2wwRXE5cXBkTmYyWXA2SUxocUtqbXhVZEVxcXU0eC9iblN6V3FrOHdCYXhvV1BjZDQvTEVKUWFpaGV1RmQ3Ty91Zk04QVRtc2lxOGwxdXhmWFF6dlgyd1FpMWVYQ1JSVE1UaE1LRkFzY1U2OGpTL1B0aldVS3FWMkhCMHRqdUIzOXR6aHBuZmdKekg5ZDVSNWkxMlhiRUZPQTYraDZiaThQdThpVkhCdjZDVmpoejJqelVmWEQ5QU0wOENtSC9SdlVmSlhIbE5mV0lwV1hrOHNZZzRjPSIsInMiOiIxIn0=", "maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "b55412f-315a-4a36-925c-40dd527863b1", "record_id": "flaws_cloudtrail:0000314:b55412f-315a-4a36-925c-40dd527863b1", "row_index": 314, "timestamp": "2019-07-18T19:45:25Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "237.25.162.210", "user_agent": "aws-cli/1.16.106 Python/2.7.16 Darwin/18.6.0 botocore/1.12.96", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 1055, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "b55412f-315a-4a36-925c-40dd527863b1", "eventTime": "2019-07-18T19:45:25Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "237.25.162.210", "userAgent": "aws-cli/1.16.106 Python/2.7.16 Darwin/18.6.0 botocore/1.12.96", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"nextToken": "eyJ2IjoiMiIsImMiOiJuN3VDNG5CdlB1dzJTS3VNZ3I1aGswSWxqbVpaNEZIWS8rNmZoNTk0R2JvOUlmVTdsTlZHbDc1akM2a2VodGFNVlM3b3NaVEc4OFNaVTF2dHpZcnM5cG95V1ZTb1hNYmlFdEhXdU9yVmVpMS96ZDRUQmNtczFkVnpkT2IrUGhKU0RUUDlRVXRiWTZJRXhPcEIxNld0dlNqMWVGWU83WStET0s5MTRGWDRqcTVGN2tCa3BiWnhNSEJMQzVnWEVwbz0iLCJzIjoiMSJ9", "maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "5ef44eaf-f159-4779-b53f-534e3c4da295", "record_id": "flaws_cloudtrail:0000315:5ef44eaf-f159-4779-b53f-534e3c4da295", "row_index": 315, "timestamp": "2019-07-18T19:45:25Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "237.25.162.210", "user_agent": "aws-cli/1.16.106 Python/2.7.16 Darwin/18.6.0 botocore/1.12.96", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 1100, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "5ef44eaf-f159-4779-b53f-534e3c4da295", "eventTime": "2019-07-18T19:45:25Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "237.25.162.210", "userAgent": "aws-cli/1.16.106 Python/2.7.16 Darwin/18.6.0 botocore/1.12.96", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"nextToken": "eyJ2IjoiMiIsImMiOiJneTlkSkdnM1ZFU2wwRXE5cXBkTmYyWXA2SUxocUtqbXhVZEVxcXU0eC9iblN6V3FrOHdCYXhvV1BjZDQvTEVKUWFpaGV1RmQ3Ty91Zk04QVRtc2lxOGwxdXhmWFF6dlgyd1FpMWVYQ1JSVE1UaE1LRkFzY1U2OGpTL1B0aldVS3FWMkhCMHRqdUIzOXR6aHBuZmdKekg5ZDVSNWkxMlhiRUZPQTYraDZiaThQdThpVkhCdjZDVmpoejJqelVmWEQ5QU0wOENtSC9SdlVmSlhIbE5mV0lwV1hrOHNZZzRjPSIsInMiOiIxIn0=", "maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "b55412f-315a-4a36-925c-40dd527863b1", "record_id": "flaws_cloudtrail:0000316:b55412f-315a-4a36-925c-40dd527863b1", "row_index": 316, "timestamp": "2019-07-18T19:45:25Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "237.25.162.210", "user_agent": "aws-cli/1.16.106 Python/2.7.16 Darwin/18.6.0 botocore/1.12.96", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 1055, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "b55412f-315a-4a36-925c-40dd527863b1", "eventTime": "2019-07-18T19:45:25Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "237.25.162.210", "userAgent": "aws-cli/1.16.106 Python/2.7.16 Darwin/18.6.0 botocore/1.12.96", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"nextToken": "eyJ2IjoiMiIsImMiOiJuN3VDNG5CdlB1dzJTS3VNZ3I1aGswSWxqbVpaNEZIWS8rNmZoNTk0R2JvOUlmVTdsTlZHbDc1akM2a2VodGFNVlM3b3NaVEc4OFNaVTF2dHpZcnM5cG95V1ZTb1hNYmlFdEhXdU9yVmVpMS96ZDRUQmNtczFkVnpkT2IrUGhKU0RUUDlRVXRiWTZJRXhPcEIxNld0dlNqMWVGWU83WStET0s5MTRGWDRqcTVGN2tCa3BiWnhNSEJMQzVnWEVwbz0iLCJzIjoiMSJ9", "maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "304f94d5-0263-4cae-94f6-0493fd977256", "record_id": "flaws_cloudtrail:0000317:304f94d5-0263-4cae-94f6-0493fd977256", "row_index": 317, "timestamp": "2019-07-18T19:45:26Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "237.25.162.210", "user_agent": "aws-cli/1.16.106 Python/2.7.16 Darwin/18.6.0 botocore/1.12.96", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 1057, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "304f94d5-0263-4cae-94f6-0493fd977256", "eventTime": "2019-07-18T19:45:26Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "237.25.162.210", "userAgent": "aws-cli/1.16.106 Python/2.7.16 Darwin/18.6.0 botocore/1.12.96", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"nextToken": "eyJ2IjoiMiIsImMiOiJ2amZGT0RkVFhXenpkbkliczZGdEZ5Z3pQcGpodE1ZVzhiTmN0WHpXWUt5Q1lrakYrVlNEbm5McDVtTVppbGtob2JqczF3NHQ1aWZ0YkVnblMwRnBQUlJBOW04clcwRHNtbjlFOTZsbnFwbFZRenk2SU5PSTlneHRQb2sya3FvNEtCNFVneVVYaVFFM1JOdkR2WkdwV3pKVDJObmNDUU5XcTh5cHYrNlF4QUpjU0JUMms2Q3JpQmNVMFNSOXgrOD0iLCJzIjoiMSJ9", "maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "ae0b7a35-b330-456f-9e12-c70701ee08f0", "record_id": "flaws_cloudtrail:0000318:ae0b7a35-b330-456f-9e12-c70701ee08f0", "row_index": 318, "timestamp": "2019-07-18T19:45:26Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "237.25.162.210", "user_agent": "aws-cli/1.16.106 Python/2.7.16 Darwin/18.6.0 botocore/1.12.96", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 1099, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "ae0b7a35-b330-456f-9e12-c70701ee08f0", "eventTime": "2019-07-18T19:45:26Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "237.25.162.210", "userAgent": "aws-cli/1.16.106 Python/2.7.16 Darwin/18.6.0 botocore/1.12.96", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"nextToken": "eyJ2IjoiMiIsImMiOiJ6Z04vOCt2c09kdkIvT0h0eHJpWE1xbFFzSUZUVFhJcGRnVk9uSFVsMXB0QkpUdXRyN0hSZytickZDUEFlRkoxcnpVN2VIVVlnbURsTFhlOEQwcDZySFF3SDZ2YXYyNFVYeDNEelpDakt3RzAxNnVBeUNsOHQ3d2JoZlBHUC9FQTlWVU16cHRkSzhsdURDSW9qdFNQVGMwMXNLR3IrVm1RbkxadnVOQkxsbjZQYXJYQUpyS1VzaEtrdC9YZlg0ejU3MlhCd01JdjV3TzJ0MmgzZ3FQSDUxZzRyakd2V3pvPSIsInMiOiIxIn0=", "maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "304f94d5-0263-4cae-94f6-0493fd977256", "record_id": "flaws_cloudtrail:0000319:304f94d5-0263-4cae-94f6-0493fd977256", "row_index": 319, "timestamp": "2019-07-18T19:45:26Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "237.25.162.210", "user_agent": "aws-cli/1.16.106 Python/2.7.16 Darwin/18.6.0 botocore/1.12.96", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 1057, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "304f94d5-0263-4cae-94f6-0493fd977256", "eventTime": "2019-07-18T19:45:26Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "237.25.162.210", "userAgent": "aws-cli/1.16.106 Python/2.7.16 Darwin/18.6.0 botocore/1.12.96", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"nextToken": "eyJ2IjoiMiIsImMiOiJ2amZGT0RkVFhXenpkbkliczZGdEZ5Z3pQcGpodE1ZVzhiTmN0WHpXWUt5Q1lrakYrVlNEbm5McDVtTVppbGtob2JqczF3NHQ1aWZ0YkVnblMwRnBQUlJBOW04clcwRHNtbjlFOTZsbnFwbFZRenk2SU5PSTlneHRQb2sya3FvNEtCNFVneVVYaVFFM1JOdkR2WkdwV3pKVDJObmNDUU5XcTh5cHYrNlF4QUpjU0JUMms2Q3JpQmNVMFNSOXgrOD0iLCJzIjoiMSJ9", "maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "ae0b7a35-b330-456f-9e12-c70701ee08f0", "record_id": "flaws_cloudtrail:0000320:ae0b7a35-b330-456f-9e12-c70701ee08f0", "row_index": 320, "timestamp": "2019-07-18T19:45:26Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "237.25.162.210", "user_agent": "aws-cli/1.16.106 Python/2.7.16 Darwin/18.6.0 botocore/1.12.96", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 1099, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "ae0b7a35-b330-456f-9e12-c70701ee08f0", "eventTime": "2019-07-18T19:45:26Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "237.25.162.210", "userAgent": "aws-cli/1.16.106 Python/2.7.16 Darwin/18.6.0 botocore/1.12.96", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"nextToken": "eyJ2IjoiMiIsImMiOiJ6Z04vOCt2c09kdkIvT0h0eHJpWE1xbFFzSUZUVFhJcGRnVk9uSFVsMXB0QkpUdXRyN0hSZytickZDUEFlRkoxcnpVN2VIVVlnbURsTFhlOEQwcDZySFF3SDZ2YXYyNFVYeDNEelpDakt3RzAxNnVBeUNsOHQ3d2JoZlBHUC9FQTlWVU16cHRkSzhsdURDSW9qdFNQVGMwMXNLR3IrVm1RbkxadnVOQkxsbjZQYXJYQUpyS1VzaEtrdC9YZlg0ejU3MlhCd01JdjV3TzJ0MmgzZ3FQSDUxZzRyakd2V3pvPSIsInMiOiIxIn0=", "maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "f68609c-c571-4772-8645-37dcf47753b", "record_id": "flaws_cloudtrail:0000321:f68609c-c571-4772-8645-37dcf47753b", "row_index": 321, "timestamp": "2019-07-18T19:45:27Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "237.25.162.210", "user_agent": "aws-cli/1.16.106 Python/2.7.16 Darwin/18.6.0 botocore/1.12.96", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 1098, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "f68609c-c571-4772-8645-37dcf47753b", "eventTime": "2019-07-18T19:45:27Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "237.25.162.210", "userAgent": "aws-cli/1.16.106 Python/2.7.16 Darwin/18.6.0 botocore/1.12.96", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"nextToken": "eyJ2IjoiMiIsImMiOiJYVkpQczd1TFBuc1VvWks4UktvRjMrNU1EYlhpRklvN2N6NHBHbVdVRUZlVmMwcXh0RHFra2FBZ0lpejdpanVqd1ZGKzVLNVNFTWdXSUFmS240WnJaOXBLNTM2d1g3QjBCeGsxdDBUblljWTdhaExQMHNRSVVYMjJkWnl1R1NIL0crTHU3STFsbEhFeXZDeFRNdlc1eVNDQVRWZTJaR0duS2FuMVJZb3R6eEs3MTFTRlNUSTdCUStaTEU5YXpHcVRHcElzdEVvc0lobEZKa0Q4RzkrSjBRQmEwWG9qRFJNPSIsInMiOiIxIn0=", "maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "f68609c-c571-4772-8645-37dcf47753b", "record_id": "flaws_cloudtrail:0000322:f68609c-c571-4772-8645-37dcf47753b", "row_index": 322, "timestamp": "2019-07-18T19:45:27Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "237.25.162.210", "user_agent": "aws-cli/1.16.106 Python/2.7.16 Darwin/18.6.0 botocore/1.12.96", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 1098, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "f68609c-c571-4772-8645-37dcf47753b", "eventTime": "2019-07-18T19:45:27Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "237.25.162.210", "userAgent": "aws-cli/1.16.106 Python/2.7.16 Darwin/18.6.0 botocore/1.12.96", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"nextToken": "eyJ2IjoiMiIsImMiOiJYVkpQczd1TFBuc1VvWks4UktvRjMrNU1EYlhpRklvN2N6NHBHbVdVRUZlVmMwcXh0RHFra2FBZ0lpejdpanVqd1ZGKzVLNVNFTWdXSUFmS240WnJaOXBLNTM2d1g3QjBCeGsxdDBUblljWTdhaExQMHNRSVVYMjJkWnl1R1NIL0crTHU3STFsbEhFeXZDeFRNdlc1eVNDQVRWZTJaR0duS2FuMVJZb3R6eEs3MTFTRlNUSTdCUStaTEU5YXpHcVRHcElzdEVvc0lobEZKa0Q4RzkrSjBRQmEwWG9qRFJNPSIsInMiOiIxIn0=", "maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "cc389f51-5b39-4f72-bd7a-09ff900d188f", "record_id": "flaws_cloudtrail:0000323:cc389f51-5b39-4f72-bd7a-09ff900d188f", "row_index": 323, "timestamp": "2019-07-18T19:45:28Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "237.25.162.210", "user_agent": "aws-cli/1.16.106 Python/2.7.16 Darwin/18.6.0 botocore/1.12.96", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 1101, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "cc389f51-5b39-4f72-bd7a-09ff900d188f", "eventTime": "2019-07-18T19:45:28Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "237.25.162.210", "userAgent": "aws-cli/1.16.106 Python/2.7.16 Darwin/18.6.0 botocore/1.12.96", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"nextToken": "eyJ2IjoiMiIsImMiOiJSU3A1YVlONFFDcHN2NEhjUS9pQlNhM0VEL3k1Q1RNaE0wcHdEd3EyUUNITkpvSi80VEJ3RlVFVC9OaHI4MWpNSGVUOTRjcDQ3bFVnQjZUL0Vic3l6NmVOV0RrdTNGcUhDRUJOcFVuOE1kNEtYa3V4WUViMWpSTXFSS1JKVmttUWJUdjhkaElvdVUvcmVia1hvYlBEQUcweDV3OHdvSytwbitRRWZDYWNNU0F6WFY2cnVFN0RvYm43WTQxN2Y2WXR6c0o5WmQ4WENyNG55S2hrQnk5TjRZOERMcStkbHE0PSIsInMiOiIxIn0=", "maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "0832a1c6-4902-451c-879e-5400317093c2", "record_id": "flaws_cloudtrail:0000324:0832a1c6-4902-451c-879e-5400317093c2", "row_index": 324, "timestamp": "2019-07-18T19:45:28Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "237.25.162.210", "user_agent": "aws-cli/1.16.106 Python/2.7.16 Darwin/18.6.0 botocore/1.12.96", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 1055, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "0832a1c6-4902-451c-879e-5400317093c2", "eventTime": "2019-07-18T19:45:28Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "237.25.162.210", "userAgent": "aws-cli/1.16.106 Python/2.7.16 Darwin/18.6.0 botocore/1.12.96", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"nextToken": "eyJ2IjoiMiIsImMiOiI2N3VXdWRMUnJQelhTQStOeE9QWHpITmlQSERFUG4zcXZNSWJEZlMydDhmYjhvR1N5bDFGZ2RHNVFnc2ZlbG12NXhhV2ZyRHgxOVpOblY2TFZNbXRHd3V1Q1VBOTVkeGFndXpGMlYzQ3NCSzlSMjUyWXpPcGRCbWJpMDFMclkyVkFBSG9DVWxIM2RJZm5ZSUZ0Y3pDWFlmbWdiS2JyV2E1OFYrbTRkNkdZYjh5NWU1bnArbkNwQi9rV1NacjlDWT0iLCJzIjoiMSJ9", "maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "cc389f51-5b39-4f72-bd7a-09ff900d188f", "record_id": "flaws_cloudtrail:0000325:cc389f51-5b39-4f72-bd7a-09ff900d188f", "row_index": 325, "timestamp": "2019-07-18T19:45:28Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "237.25.162.210", "user_agent": "aws-cli/1.16.106 Python/2.7.16 Darwin/18.6.0 botocore/1.12.96", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 1101, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "cc389f51-5b39-4f72-bd7a-09ff900d188f", "eventTime": "2019-07-18T19:45:28Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "237.25.162.210", "userAgent": "aws-cli/1.16.106 Python/2.7.16 Darwin/18.6.0 botocore/1.12.96", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"nextToken": "eyJ2IjoiMiIsImMiOiJSU3A1YVlONFFDcHN2NEhjUS9pQlNhM0VEL3k1Q1RNaE0wcHdEd3EyUUNITkpvSi80VEJ3RlVFVC9OaHI4MWpNSGVUOTRjcDQ3bFVnQjZUL0Vic3l6NmVOV0RrdTNGcUhDRUJOcFVuOE1kNEtYa3V4WUViMWpSTXFSS1JKVmttUWJUdjhkaElvdVUvcmVia1hvYlBEQUcweDV3OHdvSytwbitRRWZDYWNNU0F6WFY2cnVFN0RvYm43WTQxN2Y2WXR6c0o5WmQ4WENyNG55S2hrQnk5TjRZOERMcStkbHE0PSIsInMiOiIxIn0=", "maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "0832a1c6-4902-451c-879e-5400317093c2", "record_id": "flaws_cloudtrail:0000326:0832a1c6-4902-451c-879e-5400317093c2", "row_index": 326, "timestamp": "2019-07-18T19:45:28Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "237.25.162.210", "user_agent": "aws-cli/1.16.106 Python/2.7.16 Darwin/18.6.0 botocore/1.12.96", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 1055, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "0832a1c6-4902-451c-879e-5400317093c2", "eventTime": "2019-07-18T19:45:28Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "237.25.162.210", "userAgent": "aws-cli/1.16.106 Python/2.7.16 Darwin/18.6.0 botocore/1.12.96", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"nextToken": "eyJ2IjoiMiIsImMiOiI2N3VXdWRMUnJQelhTQStOeE9QWHpITmlQSERFUG4zcXZNSWJEZlMydDhmYjhvR1N5bDFGZ2RHNVFnc2ZlbG12NXhhV2ZyRHgxOVpOblY2TFZNbXRHd3V1Q1VBOTVkeGFndXpGMlYzQ3NCSzlSMjUyWXpPcGRCbWJpMDFMclkyVkFBSG9DVWxIM2RJZm5ZSUZ0Y3pDWFlmbWdiS2JyV2E1OFYrbTRkNkdZYjh5NWU1bnArbkNwQi9rV1NacjlDWT0iLCJzIjoiMSJ9", "maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "812cbdd5-bc71-4d00-847e-02857fbf662b", "record_id": "flaws_cloudtrail:0000327:812cbdd5-bc71-4d00-847e-02857fbf662b", "row_index": 327, "timestamp": "2019-07-18T19:45:29Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "237.25.162.210", "user_agent": "aws-cli/1.16.106 Python/2.7.16 Darwin/18.6.0 botocore/1.12.96", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 1053, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "812cbdd5-bc71-4d00-847e-02857fbf662b", "eventTime": "2019-07-18T19:45:29Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "237.25.162.210", "userAgent": "aws-cli/1.16.106 Python/2.7.16 Darwin/18.6.0 botocore/1.12.96", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"nextToken": "eyJ2IjoiMiIsImMiOiJOTVMvajhXMHEwMGxQcFF2b05rckR0V3gwR3RQK2RyQWk2TXRlbVlHR2pjRVVyVGt3Qm5sbmRwWmZ4bEQ3TVlVckxYYUJWbFQ1WVE2bHViZkRzekdQVFlXa2hQVDJ3T2ZCT1JWejJnbmxnSFh5aEg0K2VjM28xdHRiVk9jMVNrWGx6VTNGYlJDQ3hla3dCcnB5Z250OUNwd01oUHFmdFU4b1d6T1lHb094d0tvWkFhYmJ3SjlCRVNlQnJrZUZEQT0iLCJzIjoiMSJ9", "maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "e8d3a4a5-7cff-4dba-b2ce-c3db8533f377", "record_id": "flaws_cloudtrail:0000328:e8d3a4a5-7cff-4dba-b2ce-c3db8533f377", "row_index": 328, "timestamp": "2019-07-18T19:45:29Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "237.25.162.210", "user_agent": "aws-cli/1.16.106 Python/2.7.16 Darwin/18.6.0 botocore/1.12.96", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 1100, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "e8d3a4a5-7cff-4dba-b2ce-c3db8533f377", "eventTime": "2019-07-18T19:45:29Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "237.25.162.210", "userAgent": "aws-cli/1.16.106 Python/2.7.16 Darwin/18.6.0 botocore/1.12.96", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"nextToken": "eyJ2IjoiMiIsImMiOiJQdnRNQXc4aStOREkwZzJFcll3R3FMRmh3cTVQdWNuV2hlMXN4RTNxb3hJbm1QQnZqR1lNa2xEQStrWFcwajZxMUNlL0xWWXhLRUxzNWxzM2xpeHZ1bXBQUjVDNDNUVHR2YnZKZVJ2UjBka2FSYktIZEo5TFg4WXY2OVFRK1FPM2N4Mk5xVDE4QTBGNStRZk5wSWZFNTNSdzNpdGxwa05zRGRvRUVlQUFTUVBpRGVaeGdpY0ZyQXNlKzU4NkdhZjJwaVBYZ3NXNG01d1VhUTZjTnBPa1FEbDF3cHFoK2FVPSIsInMiOiIxIn0=", "maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "812cbdd5-bc71-4d00-847e-02857fbf662b", "record_id": "flaws_cloudtrail:0000329:812cbdd5-bc71-4d00-847e-02857fbf662b", "row_index": 329, "timestamp": "2019-07-18T19:45:29Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "237.25.162.210", "user_agent": "aws-cli/1.16.106 Python/2.7.16 Darwin/18.6.0 botocore/1.12.96", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 1053, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "812cbdd5-bc71-4d00-847e-02857fbf662b", "eventTime": "2019-07-18T19:45:29Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "237.25.162.210", "userAgent": "aws-cli/1.16.106 Python/2.7.16 Darwin/18.6.0 botocore/1.12.96", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"nextToken": "eyJ2IjoiMiIsImMiOiJOTVMvajhXMHEwMGxQcFF2b05rckR0V3gwR3RQK2RyQWk2TXRlbVlHR2pjRVVyVGt3Qm5sbmRwWmZ4bEQ3TVlVckxYYUJWbFQ1WVE2bHViZkRzekdQVFlXa2hQVDJ3T2ZCT1JWejJnbmxnSFh5aEg0K2VjM28xdHRiVk9jMVNrWGx6VTNGYlJDQ3hla3dCcnB5Z250OUNwd01oUHFmdFU4b1d6T1lHb094d0tvWkFhYmJ3SjlCRVNlQnJrZUZEQT0iLCJzIjoiMSJ9", "maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "e8d3a4a5-7cff-4dba-b2ce-c3db8533f377", "record_id": "flaws_cloudtrail:0000330:e8d3a4a5-7cff-4dba-b2ce-c3db8533f377", "row_index": 330, "timestamp": "2019-07-18T19:45:29Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "237.25.162.210", "user_agent": "aws-cli/1.16.106 Python/2.7.16 Darwin/18.6.0 botocore/1.12.96", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 1100, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "e8d3a4a5-7cff-4dba-b2ce-c3db8533f377", "eventTime": "2019-07-18T19:45:29Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "237.25.162.210", "userAgent": "aws-cli/1.16.106 Python/2.7.16 Darwin/18.6.0 botocore/1.12.96", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"nextToken": "eyJ2IjoiMiIsImMiOiJQdnRNQXc4aStOREkwZzJFcll3R3FMRmh3cTVQdWNuV2hlMXN4RTNxb3hJbm1QQnZqR1lNa2xEQStrWFcwajZxMUNlL0xWWXhLRUxzNWxzM2xpeHZ1bXBQUjVDNDNUVHR2YnZKZVJ2UjBka2FSYktIZEo5TFg4WXY2OVFRK1FPM2N4Mk5xVDE4QTBGNStRZk5wSWZFNTNSdzNpdGxwa05zRGRvRUVlQUFTUVBpRGVaeGdpY0ZyQXNlKzU4NkdhZjJwaVBYZ3NXNG01d1VhUTZjTnBPa1FEbDF3cHFoK2FVPSIsInMiOiIxIn0=", "maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "4a0c72dd-826e-43bf-aaa4-0f6bf5a521d2", "record_id": "flaws_cloudtrail:0000331:4a0c72dd-826e-43bf-aaa4-0f6bf5a521d2", "row_index": 331, "timestamp": "2019-07-18T19:45:30Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "237.25.162.210", "user_agent": "aws-cli/1.16.106 Python/2.7.16 Darwin/18.6.0 botocore/1.12.96", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 1100, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "4a0c72dd-826e-43bf-aaa4-0f6bf5a521d2", "eventTime": "2019-07-18T19:45:30Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "237.25.162.210", "userAgent": "aws-cli/1.16.106 Python/2.7.16 Darwin/18.6.0 botocore/1.12.96", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"nextToken": "eyJ2IjoiMiIsImMiOiJ6d0p2QUxTTnRUUFVFWmZIK21DZWd0UEFYUlNaSi9QelVtT1lLS0ZKWXlhTUVVbGJPQWZTb3BDRkd2MEtLTnVydHdRMndsL3gxNGo0b1pIbW5RdUVRKzFZMkd0ekJ0TVl6bzBYNVl5UC9mb1VXdm9hYVZvQUUzTGZpdVJWSEpjeW1YMVNWUnhla21ZRzVUUE8rb1djdzZ1MkVpRHFEZmVrNHJmNUVBamJqd0hTV1RhM1VHYTVsSkxsVTVmTlpOL215Ky9Pa0pOQmN6QlZ6UkdZK05xeVZYdlhuMFJ4KzFFPSIsInMiOiIxIn0=", "maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "4a0c72dd-826e-43bf-aaa4-0f6bf5a521d2", "record_id": "flaws_cloudtrail:0000332:4a0c72dd-826e-43bf-aaa4-0f6bf5a521d2", "row_index": 332, "timestamp": "2019-07-18T19:45:30Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "237.25.162.210", "user_agent": "aws-cli/1.16.106 Python/2.7.16 Darwin/18.6.0 botocore/1.12.96", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 1100, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "4a0c72dd-826e-43bf-aaa4-0f6bf5a521d2", "eventTime": "2019-07-18T19:45:30Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "237.25.162.210", "userAgent": "aws-cli/1.16.106 Python/2.7.16 Darwin/18.6.0 botocore/1.12.96", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"nextToken": "eyJ2IjoiMiIsImMiOiJ6d0p2QUxTTnRUUFVFWmZIK21DZWd0UEFYUlNaSi9QelVtT1lLS0ZKWXlhTUVVbGJPQWZTb3BDRkd2MEtLTnVydHdRMndsL3gxNGo0b1pIbW5RdUVRKzFZMkd0ekJ0TVl6bzBYNVl5UC9mb1VXdm9hYVZvQUUzTGZpdVJWSEpjeW1YMVNWUnhla21ZRzVUUE8rb1djdzZ1MkVpRHFEZmVrNHJmNUVBamJqd0hTV1RhM1VHYTVsSkxsVTVmTlpOL215Ky9Pa0pOQmN6QlZ6UkdZK05xeVZYdlhuMFJ4KzFFPSIsInMiOiIxIn0=", "maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "c3f86ed6-5fec-42b8-8b9f-34ba318b444e", "record_id": "flaws_cloudtrail:0000333:c3f86ed6-5fec-42b8-8b9f-34ba318b444e", "row_index": 333, "timestamp": "2019-07-18T19:45:31Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "237.25.162.210", "user_agent": "aws-cli/1.16.106 Python/2.7.16 Darwin/18.6.0 botocore/1.12.96", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 1056, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "c3f86ed6-5fec-42b8-8b9f-34ba318b444e", "eventTime": "2019-07-18T19:45:31Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "237.25.162.210", "userAgent": "aws-cli/1.16.106 Python/2.7.16 Darwin/18.6.0 botocore/1.12.96", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"nextToken": "eyJ2IjoiMiIsImMiOiJ2Qy9nbGd3SkZQdEFERXBsVCs2RWNLOWhiNCtUeFEzY1piYlNIUm4xNE1vRTBNYVFCallQZ24rcWt4TFRJUkRwcVZIR0dGKzhqckZsL3prZ0VMdzNDSmRDb0owNGUxREZROHFWR0VFN0tVOUswMCtrTzlSeUtuZEtLRExCbUcwd0cvVks1eFdwNnY3T1JyT1FEbjhhSVFjbXJXS2dFdWlnQVI4NXFKZkFhTCtXZlNUTkY0bnVFUTM3RnY3YVg0dz0iLCJzIjoiMSJ9", "maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "c3f86ed6-5fec-42b8-8b9f-34ba318b444e", "record_id": "flaws_cloudtrail:0000334:c3f86ed6-5fec-42b8-8b9f-34ba318b444e", "row_index": 334, "timestamp": "2019-07-18T19:45:31Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "237.25.162.210", "user_agent": "aws-cli/1.16.106 Python/2.7.16 Darwin/18.6.0 botocore/1.12.96", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 1056, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "c3f86ed6-5fec-42b8-8b9f-34ba318b444e", "eventTime": "2019-07-18T19:45:31Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "237.25.162.210", "userAgent": "aws-cli/1.16.106 Python/2.7.16 Darwin/18.6.0 botocore/1.12.96", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"nextToken": "eyJ2IjoiMiIsImMiOiJ2Qy9nbGd3SkZQdEFERXBsVCs2RWNLOWhiNCtUeFEzY1piYlNIUm4xNE1vRTBNYVFCallQZ24rcWt4TFRJUkRwcVZIR0dGKzhqckZsL3prZ0VMdzNDSmRDb0owNGUxREZROHFWR0VFN0tVOUswMCtrTzlSeUtuZEtLRExCbUcwd0cvVks1eFdwNnY3T1JyT1FEbjhhSVFjbXJXS2dFdWlnQVI4NXFKZkFhTCtXZlNUTkY0bnVFUTM3RnY3YVg0dz0iLCJzIjoiMSJ9", "maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "389a66b9-870a-4001-aaad-2af700bb881d", "record_id": "flaws_cloudtrail:0000335:389a66b9-870a-4001-aaad-2af700bb881d", "row_index": 335, "timestamp": "2019-07-18T19:57:49Z", "event_type": "DescribeInstanceStatus", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "237.25.162.210", "user_agent": "aws-cli/1.16.130 Python/3.7.3 Darwin/17.7.0 botocore/1.12.120", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 940, "raw_record_depth": 5, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "389a66b9-870a-4001-aaad-2af700bb881d", "eventTime": "2019-07-18T19:57:49Z", "eventName": "DescribeInstanceStatus", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "237.25.162.210", "userAgent": "aws-cli/1.16.130 Python/3.7.3 Darwin/17.7.0 botocore/1.12.120", "awsRegion": "us-west-2", "errorCode": "Client.InvalidInstanceID.Malformed", "errorMessage": "Invalid id: \"ec2-35-165-182-7.us-west-2.compute.amazonaws.com\"", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"instancesSet": {"items": [{"instanceId": "ec2-35-165-182-7.us-west-2.compute.amazonaws.com"}]}, "filterSet": {}, "includeAllInstances": false}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "389a66b9-870a-4001-aaad-2af700bb881d", "record_id": "flaws_cloudtrail:0000336:389a66b9-870a-4001-aaad-2af700bb881d", "row_index": 336, "timestamp": "2019-07-18T19:57:49Z", "event_type": "DescribeInstanceStatus", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "237.25.162.210", "user_agent": "aws-cli/1.16.130 Python/3.7.3 Darwin/17.7.0 botocore/1.12.120", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 940, "raw_record_depth": 5, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "389a66b9-870a-4001-aaad-2af700bb881d", "eventTime": "2019-07-18T19:57:49Z", "eventName": "DescribeInstanceStatus", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "237.25.162.210", "userAgent": "aws-cli/1.16.130 Python/3.7.3 Darwin/17.7.0 botocore/1.12.120", "awsRegion": "us-west-2", "errorCode": "Client.InvalidInstanceID.Malformed", "errorMessage": "Invalid id: \"ec2-35-165-182-7.us-west-2.compute.amazonaws.com\"", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"instancesSet": {"items": [{"instanceId": "ec2-35-165-182-7.us-west-2.compute.amazonaws.com"}]}, "filterSet": {}, "includeAllInstances": false}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "f26c1f09-bc22-4862-ab40-aa4644a420df", "record_id": "flaws_cloudtrail:0000337:f26c1f09-bc22-4862-ab40-aa4644a420df", "row_index": 337, "timestamp": "2019-07-18T19:57:58Z", "event_type": "DescribeInstances", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "237.25.162.210", "user_agent": "aws-cli/1.16.130 Python/3.7.3 Darwin/17.7.0 botocore/1.12.120", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 701, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "f26c1f09-bc22-4862-ab40-aa4644a420df", "eventTime": "2019-07-18T19:57:58Z", "eventName": "DescribeInstances", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "237.25.162.210", "userAgent": "aws-cli/1.16.130 Python/3.7.3 Darwin/17.7.0 botocore/1.12.120", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"instancesSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "f26c1f09-bc22-4862-ab40-aa4644a420df", "record_id": "flaws_cloudtrail:0000338:f26c1f09-bc22-4862-ab40-aa4644a420df", "row_index": 338, "timestamp": "2019-07-18T19:57:58Z", "event_type": "DescribeInstances", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "237.25.162.210", "user_agent": "aws-cli/1.16.130 Python/3.7.3 Darwin/17.7.0 botocore/1.12.120", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 701, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "f26c1f09-bc22-4862-ab40-aa4644a420df", "eventTime": "2019-07-18T19:57:58Z", "eventName": "DescribeInstances", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "237.25.162.210", "userAgent": "aws-cli/1.16.130 Python/3.7.3 Darwin/17.7.0 botocore/1.12.120", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"instancesSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "38dc1fa8-520b-4359-bd26-d93affbd4f1b", "record_id": "flaws_cloudtrail:0000339:38dc1fa8-520b-4359-bd26-d93affbd4f1b", "row_index": 339, "timestamp": "2019-07-18T19:58:15Z", "event_type": "DescribeInstances", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "237.25.162.210", "user_agent": "aws-cli/1.16.130 Python/3.7.3 Darwin/17.7.0 botocore/1.12.120", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 701, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "38dc1fa8-520b-4359-bd26-d93affbd4f1b", "eventTime": "2019-07-18T19:58:15Z", "eventName": "DescribeInstances", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "237.25.162.210", "userAgent": "aws-cli/1.16.130 Python/3.7.3 Darwin/17.7.0 botocore/1.12.120", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"instancesSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "38dc1fa8-520b-4359-bd26-d93affbd4f1b", "record_id": "flaws_cloudtrail:0000340:38dc1fa8-520b-4359-bd26-d93affbd4f1b", "row_index": 340, "timestamp": "2019-07-18T19:58:15Z", "event_type": "DescribeInstances", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "237.25.162.210", "user_agent": "aws-cli/1.16.130 Python/3.7.3 Darwin/17.7.0 botocore/1.12.120", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 701, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "38dc1fa8-520b-4359-bd26-d93affbd4f1b", "eventTime": "2019-07-18T19:58:15Z", "eventName": "DescribeInstances", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "237.25.162.210", "userAgent": "aws-cli/1.16.130 Python/3.7.3 Darwin/17.7.0 botocore/1.12.120", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"instancesSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "8dc301418-f13c-4e54-a5cd-e6245f8ac88a", "record_id": "flaws_cloudtrail:0000341:8dc301418-f13c-4e54-a5cd-e6245f8ac88a", "row_index": 341, "timestamp": "2019-07-18T19:58:29Z", "event_type": "DescribeInstances", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "237.25.162.210", "user_agent": "aws-cli/1.16.130 Python/3.7.3 Darwin/17.7.0 botocore/1.12.120", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 702, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "8dc301418-f13c-4e54-a5cd-e6245f8ac88a", "eventTime": "2019-07-18T19:58:29Z", "eventName": "DescribeInstances", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "237.25.162.210", "userAgent": "aws-cli/1.16.130 Python/3.7.3 Darwin/17.7.0 botocore/1.12.120", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"instancesSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "8dc301418-f13c-4e54-a5cd-e6245f8ac88a", "record_id": "flaws_cloudtrail:0000342:8dc301418-f13c-4e54-a5cd-e6245f8ac88a", "row_index": 342, "timestamp": "2019-07-18T19:58:29Z", "event_type": "DescribeInstances", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "237.25.162.210", "user_agent": "aws-cli/1.16.130 Python/3.7.3 Darwin/17.7.0 botocore/1.12.120", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 702, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "8dc301418-f13c-4e54-a5cd-e6245f8ac88a", "eventTime": "2019-07-18T19:58:29Z", "eventName": "DescribeInstances", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "237.25.162.210", "userAgent": "aws-cli/1.16.130 Python/3.7.3 Darwin/17.7.0 botocore/1.12.120", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"instancesSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "34ab8712-2db4-44c9-944c-57d1f2a55062", "record_id": "flaws_cloudtrail:0000343:34ab8712-2db4-44c9-944c-57d1f2a55062", "row_index": 343, "timestamp": "2019-07-18T19:58:33Z", "event_type": "ListBuckets", "event_source": "s3.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "48.242.79.253", "user_agent": "[aws-cli/1.16.160 Python/3.7.3 Darwin/18.6.0 botocore/1.12.150]", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 802, "raw_record_depth": 3, "raw_record_top_level_keys": ["additionalEventData", "awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "34ab8712-2db4-44c9-944c-57d1f2a55062", "eventTime": "2019-07-18T19:58:33Z", "eventName": "ListBuckets", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "48.242.79.253", "userAgent": "[aws-cli/1.16.160 Python/3.7.3 Darwin/18.6.0 botocore/1.12.150]", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"host": ["s3.amazonaws.com"]}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "34ab8712-2db4-44c9-944c-57d1f2a55062", "record_id": "flaws_cloudtrail:0000344:34ab8712-2db4-44c9-944c-57d1f2a55062", "row_index": 344, "timestamp": "2019-07-18T19:58:33Z", "event_type": "ListBuckets", "event_source": "s3.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "48.242.79.253", "user_agent": "[aws-cli/1.16.160 Python/3.7.3 Darwin/18.6.0 botocore/1.12.150]", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 802, "raw_record_depth": 3, "raw_record_top_level_keys": ["additionalEventData", "awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "34ab8712-2db4-44c9-944c-57d1f2a55062", "eventTime": "2019-07-18T19:58:33Z", "eventName": "ListBuckets", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "48.242.79.253", "userAgent": "[aws-cli/1.16.160 Python/3.7.3 Darwin/18.6.0 botocore/1.12.150]", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"host": ["s3.amazonaws.com"]}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "f6e02ce4-4d09-4432-8c78-5a05160b6032", "record_id": "flaws_cloudtrail:0000345:f6e02ce4-4d09-4432-8c78-5a05160b6032", "row_index": 345, "timestamp": "2019-07-18T19:58:44Z", "event_type": "DescribeInstances", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "237.25.162.210", "user_agent": "aws-cli/1.16.130 Python/3.7.3 Darwin/17.7.0 botocore/1.12.120", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 701, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "f6e02ce4-4d09-4432-8c78-5a05160b6032", "eventTime": "2019-07-18T19:58:44Z", "eventName": "DescribeInstances", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "237.25.162.210", "userAgent": "aws-cli/1.16.130 Python/3.7.3 Darwin/17.7.0 botocore/1.12.120", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"instancesSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "f6e02ce4-4d09-4432-8c78-5a05160b6032", "record_id": "flaws_cloudtrail:0000346:f6e02ce4-4d09-4432-8c78-5a05160b6032", "row_index": 346, "timestamp": "2019-07-18T19:58:44Z", "event_type": "DescribeInstances", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "237.25.162.210", "user_agent": "aws-cli/1.16.130 Python/3.7.3 Darwin/17.7.0 botocore/1.12.120", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 701, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "f6e02ce4-4d09-4432-8c78-5a05160b6032", "eventTime": "2019-07-18T19:58:44Z", "eventName": "DescribeInstances", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "237.25.162.210", "userAgent": "aws-cli/1.16.130 Python/3.7.3 Darwin/17.7.0 botocore/1.12.120", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"instancesSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "f9d66d0d-468e-49f5-b3e2-fa7d57a94004", "record_id": "flaws_cloudtrail:0000347:f9d66d0d-468e-49f5-b3e2-fa7d57a94004", "row_index": 347, "timestamp": "2019-07-18T19:58:50Z", "event_type": "DescribeInstances", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "237.25.162.210", "user_agent": "aws-cli/1.16.130 Python/3.7.3 Darwin/17.7.0 botocore/1.12.120", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 701, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "f9d66d0d-468e-49f5-b3e2-fa7d57a94004", "eventTime": "2019-07-18T19:58:50Z", "eventName": "DescribeInstances", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "237.25.162.210", "userAgent": "aws-cli/1.16.130 Python/3.7.3 Darwin/17.7.0 botocore/1.12.120", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"instancesSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "f9d66d0d-468e-49f5-b3e2-fa7d57a94004", "record_id": "flaws_cloudtrail:0000348:f9d66d0d-468e-49f5-b3e2-fa7d57a94004", "row_index": 348, "timestamp": "2019-07-18T19:58:50Z", "event_type": "DescribeInstances", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "237.25.162.210", "user_agent": "aws-cli/1.16.130 Python/3.7.3 Darwin/17.7.0 botocore/1.12.120", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 701, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "f9d66d0d-468e-49f5-b3e2-fa7d57a94004", "eventTime": "2019-07-18T19:58:50Z", "eventName": "DescribeInstances", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "237.25.162.210", "userAgent": "aws-cli/1.16.130 Python/3.7.3 Darwin/17.7.0 botocore/1.12.120", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"instancesSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "6449a15b-5544-4bb1-90d9-0bb6c95acabf", "record_id": "flaws_cloudtrail:0000349:6449a15b-5544-4bb1-90d9-0bb6c95acabf", "row_index": 349, "timestamp": "2019-07-18T19:58:54Z", "event_type": "DescribeInstances", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "237.25.162.210", "user_agent": "aws-cli/1.16.130 Python/3.7.3 Darwin/17.7.0 botocore/1.12.120", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 701, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "6449a15b-5544-4bb1-90d9-0bb6c95acabf", "eventTime": "2019-07-18T19:58:54Z", "eventName": "DescribeInstances", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "237.25.162.210", "userAgent": "aws-cli/1.16.130 Python/3.7.3 Darwin/17.7.0 botocore/1.12.120", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"instancesSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "6449a15b-5544-4bb1-90d9-0bb6c95acabf", "record_id": "flaws_cloudtrail:0000350:6449a15b-5544-4bb1-90d9-0bb6c95acabf", "row_index": 350, "timestamp": "2019-07-18T19:58:54Z", "event_type": "DescribeInstances", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "237.25.162.210", "user_agent": "aws-cli/1.16.130 Python/3.7.3 Darwin/17.7.0 botocore/1.12.120", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 701, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "6449a15b-5544-4bb1-90d9-0bb6c95acabf", "eventTime": "2019-07-18T19:58:54Z", "eventName": "DescribeInstances", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "237.25.162.210", "userAgent": "aws-cli/1.16.130 Python/3.7.3 Darwin/17.7.0 botocore/1.12.120", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"instancesSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "4aaabf1c-1223-40f6-9562-3a13e01c5c00", "record_id": "flaws_cloudtrail:0000351:4aaabf1c-1223-40f6-9562-3a13e01c5c00", "row_index": 351, "timestamp": "2019-07-18T19:59:01Z", "event_type": "DescribeInstances", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "237.25.162.210", "user_agent": "aws-cli/1.16.130 Python/3.7.3 Darwin/17.7.0 botocore/1.12.120", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 701, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "4aaabf1c-1223-40f6-9562-3a13e01c5c00", "eventTime": "2019-07-18T19:59:01Z", "eventName": "DescribeInstances", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "237.25.162.210", "userAgent": "aws-cli/1.16.130 Python/3.7.3 Darwin/17.7.0 botocore/1.12.120", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"instancesSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "4aaabf1c-1223-40f6-9562-3a13e01c5c00", "record_id": "flaws_cloudtrail:0000352:4aaabf1c-1223-40f6-9562-3a13e01c5c00", "row_index": 352, "timestamp": "2019-07-18T19:59:01Z", "event_type": "DescribeInstances", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "237.25.162.210", "user_agent": "aws-cli/1.16.130 Python/3.7.3 Darwin/17.7.0 botocore/1.12.120", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 701, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "4aaabf1c-1223-40f6-9562-3a13e01c5c00", "eventTime": "2019-07-18T19:59:01Z", "eventName": "DescribeInstances", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "237.25.162.210", "userAgent": "aws-cli/1.16.130 Python/3.7.3 Darwin/17.7.0 botocore/1.12.120", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"instancesSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "5db564985-019b-4e7f-8251-e2defe35c044", "record_id": "flaws_cloudtrail:0000353:5db564985-019b-4e7f-8251-e2defe35c044", "row_index": 353, "timestamp": "2019-07-18T19:59:06Z", "event_type": "DescribeInstances", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "237.25.162.210", "user_agent": "aws-cli/1.16.130 Python/3.7.3 Darwin/17.7.0 botocore/1.12.120", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 702, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "5db564985-019b-4e7f-8251-e2defe35c044", "eventTime": "2019-07-18T19:59:06Z", "eventName": "DescribeInstances", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "237.25.162.210", "userAgent": "aws-cli/1.16.130 Python/3.7.3 Darwin/17.7.0 botocore/1.12.120", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"instancesSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "5db564985-019b-4e7f-8251-e2defe35c044", "record_id": "flaws_cloudtrail:0000354:5db564985-019b-4e7f-8251-e2defe35c044", "row_index": 354, "timestamp": "2019-07-18T19:59:06Z", "event_type": "DescribeInstances", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "237.25.162.210", "user_agent": "aws-cli/1.16.130 Python/3.7.3 Darwin/17.7.0 botocore/1.12.120", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 702, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "5db564985-019b-4e7f-8251-e2defe35c044", "eventTime": "2019-07-18T19:59:06Z", "eventName": "DescribeInstances", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "237.25.162.210", "userAgent": "aws-cli/1.16.130 Python/3.7.3 Darwin/17.7.0 botocore/1.12.120", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"instancesSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "7cff0462-be2d-4e54-a846-b866dfd9eb99", "record_id": "flaws_cloudtrail:0000355:7cff0462-be2d-4e54-a846-b866dfd9eb99", "row_index": 355, "timestamp": "2019-07-18T19:59:09Z", "event_type": "DescribeInstances", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "237.25.162.210", "user_agent": "aws-cli/1.16.130 Python/3.7.3 Darwin/17.7.0 botocore/1.12.120", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 701, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "7cff0462-be2d-4e54-a846-b866dfd9eb99", "eventTime": "2019-07-18T19:59:09Z", "eventName": "DescribeInstances", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "237.25.162.210", "userAgent": "aws-cli/1.16.130 Python/3.7.3 Darwin/17.7.0 botocore/1.12.120", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"instancesSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "7cff0462-be2d-4e54-a846-b866dfd9eb99", "record_id": "flaws_cloudtrail:0000356:7cff0462-be2d-4e54-a846-b866dfd9eb99", "row_index": 356, "timestamp": "2019-07-18T19:59:09Z", "event_type": "DescribeInstances", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "237.25.162.210", "user_agent": "aws-cli/1.16.130 Python/3.7.3 Darwin/17.7.0 botocore/1.12.120", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 701, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "7cff0462-be2d-4e54-a846-b866dfd9eb99", "eventTime": "2019-07-18T19:59:09Z", "eventName": "DescribeInstances", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "237.25.162.210", "userAgent": "aws-cli/1.16.130 Python/3.7.3 Darwin/17.7.0 botocore/1.12.120", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"instancesSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "c52827-8114-473e-bd05-fa35be57af6e", "record_id": "flaws_cloudtrail:0000357:c52827-8114-473e-bd05-fa35be57af6e", "row_index": 357, "timestamp": "2019-07-18T19:59:14Z", "event_type": "DescribeInstances", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "237.25.162.210", "user_agent": "aws-cli/1.16.130 Python/3.7.3 Darwin/17.7.0 botocore/1.12.120", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 700, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "c52827-8114-473e-bd05-fa35be57af6e", "eventTime": "2019-07-18T19:59:14Z", "eventName": "DescribeInstances", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "237.25.162.210", "userAgent": "aws-cli/1.16.130 Python/3.7.3 Darwin/17.7.0 botocore/1.12.120", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"instancesSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "c52827-8114-473e-bd05-fa35be57af6e", "record_id": "flaws_cloudtrail:0000358:c52827-8114-473e-bd05-fa35be57af6e", "row_index": 358, "timestamp": "2019-07-18T19:59:14Z", "event_type": "DescribeInstances", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "237.25.162.210", "user_agent": "aws-cli/1.16.130 Python/3.7.3 Darwin/17.7.0 botocore/1.12.120", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 700, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "c52827-8114-473e-bd05-fa35be57af6e", "eventTime": "2019-07-18T19:59:14Z", "eventName": "DescribeInstances", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "237.25.162.210", "userAgent": "aws-cli/1.16.130 Python/3.7.3 Darwin/17.7.0 botocore/1.12.120", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"instancesSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "fdf953e1-bfdc-413f-83d6-85d609c402a8", "record_id": "flaws_cloudtrail:0000359:fdf953e1-bfdc-413f-83d6-85d609c402a8", "row_index": 359, "timestamp": "2019-07-18T20:01:30Z", "event_type": "DescribeFleets", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "48.242.79.253", "user_agent": "aws-cli/1.16.160 Python/3.7.3 Darwin/18.6.0 botocore/1.12.150", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 691, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "fdf953e1-bfdc-413f-83d6-85d609c402a8", "eventTime": "2019-07-18T20:01:30Z", "eventName": "DescribeFleets", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "48.242.79.253", "userAgent": "aws-cli/1.16.160 Python/3.7.3 Darwin/18.6.0 botocore/1.12.150", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"DescribeFleetsRequest": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "fdf953e1-bfdc-413f-83d6-85d609c402a8", "record_id": "flaws_cloudtrail:0000360:fdf953e1-bfdc-413f-83d6-85d609c402a8", "row_index": 360, "timestamp": "2019-07-18T20:01:30Z", "event_type": "DescribeFleets", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "48.242.79.253", "user_agent": "aws-cli/1.16.160 Python/3.7.3 Darwin/18.6.0 botocore/1.12.150", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 691, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "fdf953e1-bfdc-413f-83d6-85d609c402a8", "eventTime": "2019-07-18T20:01:30Z", "eventName": "DescribeFleets", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "48.242.79.253", "userAgent": "aws-cli/1.16.160 Python/3.7.3 Darwin/18.6.0 botocore/1.12.150", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"DescribeFleetsRequest": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "cea4052c-df59-46b3-9c20-e51c79db5a3e", "record_id": "flaws_cloudtrail:0000361:cea4052c-df59-46b3-9c20-e51c79db5a3e", "row_index": 361, "timestamp": "2019-07-18T20:01:41Z", "event_type": "DescribeVpcs", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "48.242.79.253", "user_agent": "aws-cli/1.16.160 Python/3.7.3 Darwin/18.6.0 botocore/1.12.150", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 689, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "cea4052c-df59-46b3-9c20-e51c79db5a3e", "eventTime": "2019-07-18T20:01:41Z", "eventName": "DescribeVpcs", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "48.242.79.253", "userAgent": "aws-cli/1.16.160 Python/3.7.3 Darwin/18.6.0 botocore/1.12.150", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"vpcSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "cea4052c-df59-46b3-9c20-e51c79db5a3e", "record_id": "flaws_cloudtrail:0000362:cea4052c-df59-46b3-9c20-e51c79db5a3e", "row_index": 362, "timestamp": "2019-07-18T20:01:41Z", "event_type": "DescribeVpcs", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "48.242.79.253", "user_agent": "aws-cli/1.16.160 Python/3.7.3 Darwin/18.6.0 botocore/1.12.150", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 689, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "cea4052c-df59-46b3-9c20-e51c79db5a3e", "eventTime": "2019-07-18T20:01:41Z", "eventName": "DescribeVpcs", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "48.242.79.253", "userAgent": "aws-cli/1.16.160 Python/3.7.3 Darwin/18.6.0 botocore/1.12.150", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"vpcSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "678fd608-14b2-4084-9807-b3e3508bd2e0", "record_id": "flaws_cloudtrail:0000363:678fd608-14b2-4084-9807-b3e3508bd2e0", "row_index": 363, "timestamp": "2019-07-18T20:01:53Z", "event_type": "DescribeInstances", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "48.242.79.253", "user_agent": "aws-cli/1.16.160 Python/3.7.3 Darwin/18.6.0 botocore/1.12.150", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 700, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "678fd608-14b2-4084-9807-b3e3508bd2e0", "eventTime": "2019-07-18T20:01:53Z", "eventName": "DescribeInstances", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "48.242.79.253", "userAgent": "aws-cli/1.16.160 Python/3.7.3 Darwin/18.6.0 botocore/1.12.150", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"instancesSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "678fd608-14b2-4084-9807-b3e3508bd2e0", "record_id": "flaws_cloudtrail:0000364:678fd608-14b2-4084-9807-b3e3508bd2e0", "row_index": 364, "timestamp": "2019-07-18T20:01:53Z", "event_type": "DescribeInstances", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "48.242.79.253", "user_agent": "aws-cli/1.16.160 Python/3.7.3 Darwin/18.6.0 botocore/1.12.150", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 700, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "678fd608-14b2-4084-9807-b3e3508bd2e0", "eventTime": "2019-07-18T20:01:53Z", "eventName": "DescribeInstances", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "48.242.79.253", "userAgent": "aws-cli/1.16.160 Python/3.7.3 Darwin/18.6.0 botocore/1.12.150", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"instancesSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "201bcc18-cb46-481a-a959-8e517d274e83", "record_id": "flaws_cloudtrail:0000365:201bcc18-cb46-481a-a959-8e517d274e83", "row_index": 365, "timestamp": "2019-07-18T20:02:07Z", "event_type": "DescribeHosts", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "48.242.79.253", "user_agent": "aws-cli/1.16.160 Python/3.7.3 Darwin/18.6.0 botocore/1.12.150", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 689, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "201bcc18-cb46-481a-a959-8e517d274e83", "eventTime": "2019-07-18T20:02:07Z", "eventName": "DescribeHosts", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "48.242.79.253", "userAgent": "aws-cli/1.16.160 Python/3.7.3 Darwin/18.6.0 botocore/1.12.150", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"DescribeHostsRequest": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "201bcc18-cb46-481a-a959-8e517d274e83", "record_id": "flaws_cloudtrail:0000366:201bcc18-cb46-481a-a959-8e517d274e83", "row_index": 366, "timestamp": "2019-07-18T20:02:07Z", "event_type": "DescribeHosts", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "48.242.79.253", "user_agent": "aws-cli/1.16.160 Python/3.7.3 Darwin/18.6.0 botocore/1.12.150", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 689, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "201bcc18-cb46-481a-a959-8e517d274e83", "eventTime": "2019-07-18T20:02:07Z", "eventName": "DescribeHosts", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "48.242.79.253", "userAgent": "aws-cli/1.16.160 Python/3.7.3 Darwin/18.6.0 botocore/1.12.150", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"DescribeHostsRequest": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "6f2fd739-51c6-47fe-8f74-eb0eced2777c", "record_id": "flaws_cloudtrail:0000367:6f2fd739-51c6-47fe-8f74-eb0eced2777c", "row_index": 367, "timestamp": "2019-07-18T20:02:22Z", "event_type": "DescribeVolumes", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "237.25.162.210", "user_agent": "aws-cli/1.16.130 Python/3.7.3 Darwin/17.7.0 botocore/1.12.120", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 714, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "6f2fd739-51c6-47fe-8f74-eb0eced2777c", "eventTime": "2019-07-18T20:02:22Z", "eventName": "DescribeVolumes", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "237.25.162.210", "userAgent": "aws-cli/1.16.130 Python/3.7.3 Darwin/17.7.0 botocore/1.12.120", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"maxResults": 1000, "volumeSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "6f2fd739-51c6-47fe-8f74-eb0eced2777c", "record_id": "flaws_cloudtrail:0000368:6f2fd739-51c6-47fe-8f74-eb0eced2777c", "row_index": 368, "timestamp": "2019-07-18T20:02:22Z", "event_type": "DescribeVolumes", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "237.25.162.210", "user_agent": "aws-cli/1.16.130 Python/3.7.3 Darwin/17.7.0 botocore/1.12.120", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 714, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "6f2fd739-51c6-47fe-8f74-eb0eced2777c", "eventTime": "2019-07-18T20:02:22Z", "eventName": "DescribeVolumes", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "237.25.162.210", "userAgent": "aws-cli/1.16.130 Python/3.7.3 Darwin/17.7.0 botocore/1.12.120", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"maxResults": 1000, "volumeSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "f93032e0-14c1-4b6f-b6ed-d146c9452825", "record_id": "flaws_cloudtrail:0000369:f93032e0-14c1-4b6f-b6ed-d146c9452825", "row_index": 369, "timestamp": "2019-07-18T20:03:43Z", "event_type": "DescribeInstances", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "48.242.79.253", "user_agent": "aws-cli/1.16.160 Python/3.7.3 Darwin/18.6.0 botocore/1.12.150", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 700, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "f93032e0-14c1-4b6f-b6ed-d146c9452825", "eventTime": "2019-07-18T20:03:43Z", "eventName": "DescribeInstances", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "48.242.79.253", "userAgent": "aws-cli/1.16.160 Python/3.7.3 Darwin/18.6.0 botocore/1.12.150", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"instancesSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "f93032e0-14c1-4b6f-b6ed-d146c9452825", "record_id": "flaws_cloudtrail:0000370:f93032e0-14c1-4b6f-b6ed-d146c9452825", "row_index": 370, "timestamp": "2019-07-18T20:03:43Z", "event_type": "DescribeInstances", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "48.242.79.253", "user_agent": "aws-cli/1.16.160 Python/3.7.3 Darwin/18.6.0 botocore/1.12.150", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 700, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "f93032e0-14c1-4b6f-b6ed-d146c9452825", "eventTime": "2019-07-18T20:03:43Z", "eventName": "DescribeInstances", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "48.242.79.253", "userAgent": "aws-cli/1.16.160 Python/3.7.3 Darwin/18.6.0 botocore/1.12.150", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"instancesSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "7a51cb18-be4b-442a-8ef2-58a1db631cc9", "record_id": "flaws_cloudtrail:0000371:7a51cb18-be4b-442a-8ef2-58a1db631cc9", "row_index": 371, "timestamp": "2019-07-18T20:03:55Z", "event_type": "DescribeInstances", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "48.242.79.253", "user_agent": "aws-cli/1.16.160 Python/3.7.3 Darwin/18.6.0 botocore/1.12.150", "aws_region": "us-east-2"}, "resource_arns": [], "raw_record_size_bytes": 700, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "7a51cb18-be4b-442a-8ef2-58a1db631cc9", "eventTime": "2019-07-18T20:03:55Z", "eventName": "DescribeInstances", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "48.242.79.253", "userAgent": "aws-cli/1.16.160 Python/3.7.3 Darwin/18.6.0 botocore/1.12.150", "awsRegion": "us-east-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"instancesSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "7a51cb18-be4b-442a-8ef2-58a1db631cc9", "record_id": "flaws_cloudtrail:0000372:7a51cb18-be4b-442a-8ef2-58a1db631cc9", "row_index": 372, "timestamp": "2019-07-18T20:03:55Z", "event_type": "DescribeInstances", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "48.242.79.253", "user_agent": "aws-cli/1.16.160 Python/3.7.3 Darwin/18.6.0 botocore/1.12.150", "aws_region": "us-east-2"}, "resource_arns": [], "raw_record_size_bytes": 700, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "7a51cb18-be4b-442a-8ef2-58a1db631cc9", "eventTime": "2019-07-18T20:03:55Z", "eventName": "DescribeInstances", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "48.242.79.253", "userAgent": "aws-cli/1.16.160 Python/3.7.3 Darwin/18.6.0 botocore/1.12.150", "awsRegion": "us-east-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"instancesSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "f67645b-9e0c-453b-a487-1fb86d211722", "record_id": "flaws_cloudtrail:0000373:f67645b-9e0c-453b-a487-1fb86d211722", "row_index": 373, "timestamp": "2019-07-18T20:04:01Z", "event_type": "DescribeInstances", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "48.242.79.253", "user_agent": "aws-cli/1.16.160 Python/3.7.3 Darwin/18.6.0 botocore/1.12.150", "aws_region": "us-west-1"}, "resource_arns": [], "raw_record_size_bytes": 699, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "f67645b-9e0c-453b-a487-1fb86d211722", "eventTime": "2019-07-18T20:04:01Z", "eventName": "DescribeInstances", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "48.242.79.253", "userAgent": "aws-cli/1.16.160 Python/3.7.3 Darwin/18.6.0 botocore/1.12.150", "awsRegion": "us-west-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"instancesSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "f67645b-9e0c-453b-a487-1fb86d211722", "record_id": "flaws_cloudtrail:0000374:f67645b-9e0c-453b-a487-1fb86d211722", "row_index": 374, "timestamp": "2019-07-18T20:04:01Z", "event_type": "DescribeInstances", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "48.242.79.253", "user_agent": "aws-cli/1.16.160 Python/3.7.3 Darwin/18.6.0 botocore/1.12.150", "aws_region": "us-west-1"}, "resource_arns": [], "raw_record_size_bytes": 699, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "f67645b-9e0c-453b-a487-1fb86d211722", "eventTime": "2019-07-18T20:04:01Z", "eventName": "DescribeInstances", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "48.242.79.253", "userAgent": "aws-cli/1.16.160 Python/3.7.3 Darwin/18.6.0 botocore/1.12.150", "awsRegion": "us-west-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"instancesSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "01d2a403-15bc-48d4-9a51-a6c4d67ccba5", "record_id": "flaws_cloudtrail:0000375:01d2a403-15bc-48d4-9a51-a6c4d67ccba5", "row_index": 375, "timestamp": "2019-07-18T20:04:41Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "237.25.162.210", "user_agent": "aws-cli/1.16.130 Python/3.7.3 Darwin/17.7.0 botocore/1.12.120", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 753, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "01d2a403-15bc-48d4-9a51-a6c4d67ccba5", "eventTime": "2019-07-18T20:04:41Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "237.25.162.210", "userAgent": "aws-cli/1.16.130 Python/3.7.3 Darwin/17.7.0 botocore/1.12.120", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "01d2a403-15bc-48d4-9a51-a6c4d67ccba5", "record_id": "flaws_cloudtrail:0000376:01d2a403-15bc-48d4-9a51-a6c4d67ccba5", "row_index": 376, "timestamp": "2019-07-18T20:04:41Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "237.25.162.210", "user_agent": "aws-cli/1.16.130 Python/3.7.3 Darwin/17.7.0 botocore/1.12.120", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 753, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "01d2a403-15bc-48d4-9a51-a6c4d67ccba5", "eventTime": "2019-07-18T20:04:41Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "237.25.162.210", "userAgent": "aws-cli/1.16.130 Python/3.7.3 Darwin/17.7.0 botocore/1.12.120", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "33d44ffa-b054-44b3-9993-ae199a9cf772", "record_id": "flaws_cloudtrail:0000377:33d44ffa-b054-44b3-9993-ae199a9cf772", "row_index": 377, "timestamp": "2019-07-18T20:04:42Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "237.25.162.210", "user_agent": "aws-cli/1.16.130 Python/3.7.3 Darwin/17.7.0 botocore/1.12.120", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1080, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "33d44ffa-b054-44b3-9993-ae199a9cf772", "eventTime": "2019-07-18T20:04:42Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "237.25.162.210", "userAgent": "aws-cli/1.16.130 Python/3.7.3 Darwin/17.7.0 botocore/1.12.120", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"nextToken": "eyJ2IjoiMiIsImMiOiJtSjY1OFpxRXNQUGE4WHczWFkrSUZRYXZhaEZrQzlRL2Q4TXNwUHFDTDFJaUI1Rk11RUR1bkdaZHFTeXpNZ1NvTHNyTExCa0FrNGNBT2loOTdiVWJQSEJ2engyQ3hkb2FoTDgxLy9XNVE0cFhDeWloWjNMRTU5U29NS3Fham51TGVkU0dRSWRuWFVhc3RVZDUwSWpvWmNGU0J4NzFxc0FBSEFjT3RDZ1FwRUVSR3BCTk1STXgzQkx5VlQ4Yit3OHBGdmRic0tzRkl3Ykw1QT09IiwicyI6IjEifQ==", "maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "33d44ffa-b054-44b3-9993-ae199a9cf772", "record_id": "flaws_cloudtrail:0000378:33d44ffa-b054-44b3-9993-ae199a9cf772", "row_index": 378, "timestamp": "2019-07-18T20:04:42Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "237.25.162.210", "user_agent": "aws-cli/1.16.130 Python/3.7.3 Darwin/17.7.0 botocore/1.12.120", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1080, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "33d44ffa-b054-44b3-9993-ae199a9cf772", "eventTime": "2019-07-18T20:04:42Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "237.25.162.210", "userAgent": "aws-cli/1.16.130 Python/3.7.3 Darwin/17.7.0 botocore/1.12.120", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"nextToken": "eyJ2IjoiMiIsImMiOiJtSjY1OFpxRXNQUGE4WHczWFkrSUZRYXZhaEZrQzlRL2Q4TXNwUHFDTDFJaUI1Rk11RUR1bkdaZHFTeXpNZ1NvTHNyTExCa0FrNGNBT2loOTdiVWJQSEJ2engyQ3hkb2FoTDgxLy9XNVE0cFhDeWloWjNMRTU5U29NS3Fham51TGVkU0dRSWRuWFVhc3RVZDUwSWpvWmNGU0J4NzFxc0FBSEFjT3RDZ1FwRUVSR3BCTk1STXgzQkx5VlQ4Yit3OHBGdmRic0tzRkl3Ykw1QT09IiwicyI6IjEifQ==", "maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "f74c8e46-add8-423d-82b5-1b052cf672332", "record_id": "flaws_cloudtrail:0000379:f74c8e46-add8-423d-82b5-1b052cf672332", "row_index": 379, "timestamp": "2019-07-18T20:04:43Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "237.25.162.210", "user_agent": "aws-cli/1.16.130 Python/3.7.3 Darwin/17.7.0 botocore/1.12.120", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1081, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "f74c8e46-add8-423d-82b5-1b052cf672332", "eventTime": "2019-07-18T20:04:43Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "237.25.162.210", "userAgent": "aws-cli/1.16.130 Python/3.7.3 Darwin/17.7.0 botocore/1.12.120", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"nextToken": "eyJ2IjoiMiIsImMiOiI2RWlESWRkdmdxMU5KQnkrc2lqQ0xvcGdZL1pkbHV4NE4vZ0tZUHg3aG1FeTFpNXdReEN1TEROSHN5c3BDemlaSHdPeXN2c1llYVlWeEFLcEEwY3BSTHNSSXFYYWRVYTc4SVYxRTNPN0wrLy8vWlVXeDgrWkZiclc1RVhUT1YvM28vMGtxc24zK2JrK2NMdjdMSTNlMGJZSGt3OE9ZV3MvSUVGVkVOZVFqWGxCYVlvaHd6N2RKMkhrSGVyQmRaNjFkdW9IeUgrcDMxY3lXdz09IiwicyI6IjEifQ==", "maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "f74c8e46-add8-423d-82b5-1b052cf672332", "record_id": "flaws_cloudtrail:0000380:f74c8e46-add8-423d-82b5-1b052cf672332", "row_index": 380, "timestamp": "2019-07-18T20:04:43Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "237.25.162.210", "user_agent": "aws-cli/1.16.130 Python/3.7.3 Darwin/17.7.0 botocore/1.12.120", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1081, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "f74c8e46-add8-423d-82b5-1b052cf672332", "eventTime": "2019-07-18T20:04:43Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "237.25.162.210", "userAgent": "aws-cli/1.16.130 Python/3.7.3 Darwin/17.7.0 botocore/1.12.120", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"nextToken": "eyJ2IjoiMiIsImMiOiI2RWlESWRkdmdxMU5KQnkrc2lqQ0xvcGdZL1pkbHV4NE4vZ0tZUHg3aG1FeTFpNXdReEN1TEROSHN5c3BDemlaSHdPeXN2c1llYVlWeEFLcEEwY3BSTHNSSXFYYWRVYTc4SVYxRTNPN0wrLy8vWlVXeDgrWkZiclc1RVhUT1YvM28vMGtxc24zK2JrK2NMdjdMSTNlMGJZSGt3OE9ZV3MvSUVGVkVOZVFqWGxCYVlvaHd6N2RKMkhrSGVyQmRaNjFkdW9IeUgrcDMxY3lXdz09IiwicyI6IjEifQ==", "maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "96ab68de-3714-4147-97cf-1c62122f610f", "record_id": "flaws_cloudtrail:0000381:96ab68de-3714-4147-97cf-1c62122f610f", "row_index": 381, "timestamp": "2019-07-18T20:04:44Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "237.25.162.210", "user_agent": "aws-cli/1.16.130 Python/3.7.3 Darwin/17.7.0 botocore/1.12.120", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1080, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "96ab68de-3714-4147-97cf-1c62122f610f", "eventTime": "2019-07-18T20:04:44Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "237.25.162.210", "userAgent": "aws-cli/1.16.130 Python/3.7.3 Darwin/17.7.0 botocore/1.12.120", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"nextToken": "eyJ2IjoiMiIsImMiOiJHczhseElnUFFzYmdTa0hOTkVack1ud1pqbUJub3BkREhtUHRrNE1GaHpvOE9JbndFN1RPOXFwS0pCUy9hSFlWSlk1MGRRd29xcjA1Qk84UjBpR1lnV2JidnhKMnlyVFFFT2g3S29zYlc0K1hxNmE3K0NCQVVZbFlIbHlIZ1BHWDFYcHdLOFQvN0VabE51T2dXTTNiT0Y2Rjc4Z1B4bXVpUEJXVFhVUkQzNUVsMExDVWZKTThZMG5WT1VISUl4L3BLdk56VnI5dWJmZ0V0dz09IiwicyI6IjEifQ==", "maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "96ab68de-3714-4147-97cf-1c62122f610f", "record_id": "flaws_cloudtrail:0000382:96ab68de-3714-4147-97cf-1c62122f610f", "row_index": 382, "timestamp": "2019-07-18T20:04:44Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "237.25.162.210", "user_agent": "aws-cli/1.16.130 Python/3.7.3 Darwin/17.7.0 botocore/1.12.120", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1080, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "96ab68de-3714-4147-97cf-1c62122f610f", "eventTime": "2019-07-18T20:04:44Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "237.25.162.210", "userAgent": "aws-cli/1.16.130 Python/3.7.3 Darwin/17.7.0 botocore/1.12.120", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"nextToken": "eyJ2IjoiMiIsImMiOiJHczhseElnUFFzYmdTa0hOTkVack1ud1pqbUJub3BkREhtUHRrNE1GaHpvOE9JbndFN1RPOXFwS0pCUy9hSFlWSlk1MGRRd29xcjA1Qk84UjBpR1lnV2JidnhKMnlyVFFFT2g3S29zYlc0K1hxNmE3K0NCQVVZbFlIbHlIZ1BHWDFYcHdLOFQvN0VabE51T2dXTTNiT0Y2Rjc4Z1B4bXVpUEJXVFhVUkQzNUVsMExDVWZKTThZMG5WT1VISUl4L3BLdk56VnI5dWJmZ0V0dz09IiwicyI6IjEifQ==", "maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "cc16c2c8-741d-45d0-b813-a6cd5e46cf09", "record_id": "flaws_cloudtrail:0000383:cc16c2c8-741d-45d0-b813-a6cd5e46cf09", "row_index": 383, "timestamp": "2019-07-18T20:04:45Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "237.25.162.210", "user_agent": "aws-cli/1.16.130 Python/3.7.3 Darwin/17.7.0 botocore/1.12.120", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1072, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "cc16c2c8-741d-45d0-b813-a6cd5e46cf09", "eventTime": "2019-07-18T20:04:45Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "237.25.162.210", "userAgent": "aws-cli/1.16.130 Python/3.7.3 Darwin/17.7.0 botocore/1.12.120", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"nextToken": "eyJ2IjoiMiIsImMiOiJZblZjZUd6K3BJQi9VVjFyUjlVNFdjQlhHQlRnbVR2QWJrdC9oVUVlMmNjcFZiTEM1ZXZHWGNRcDl5eW50MW9BRXNpY2ZtRC82WWM0LzE4dnJPZ1NjaWpvQ1ViYktkVi9JVkZmeTFRUHdHb1RLT0t6S3hHZTVoUmo2eGVwMFpWMmV3RjB0dGcxdmI1RW1tSGNjd05vcllXeXl3NnRqc05DbEN4bjAwUWk1S2xuSWwxVWd1ak43d0NrM0diMnUzSnZsN002WnB4RE5RPT0iLCJzIjoiMSJ9", "maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "cc16c2c8-741d-45d0-b813-a6cd5e46cf09", "record_id": "flaws_cloudtrail:0000384:cc16c2c8-741d-45d0-b813-a6cd5e46cf09", "row_index": 384, "timestamp": "2019-07-18T20:04:45Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "237.25.162.210", "user_agent": "aws-cli/1.16.130 Python/3.7.3 Darwin/17.7.0 botocore/1.12.120", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1072, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "cc16c2c8-741d-45d0-b813-a6cd5e46cf09", "eventTime": "2019-07-18T20:04:45Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "237.25.162.210", "userAgent": "aws-cli/1.16.130 Python/3.7.3 Darwin/17.7.0 botocore/1.12.120", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"nextToken": "eyJ2IjoiMiIsImMiOiJZblZjZUd6K3BJQi9VVjFyUjlVNFdjQlhHQlRnbVR2QWJrdC9oVUVlMmNjcFZiTEM1ZXZHWGNRcDl5eW50MW9BRXNpY2ZtRC82WWM0LzE4dnJPZ1NjaWpvQ1ViYktkVi9JVkZmeTFRUHdHb1RLT0t6S3hHZTVoUmo2eGVwMFpWMmV3RjB0dGcxdmI1RW1tSGNjd05vcllXeXl3NnRqc05DbEN4bjAwUWk1S2xuSWwxVWd1ak43d0NrM0diMnUzSnZsN002WnB4RE5RPT0iLCJzIjoiMSJ9", "maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "866399-3c30-492e-8096-3ac39b6d05af", "record_id": "flaws_cloudtrail:0000385:866399-3c30-492e-8096-3ac39b6d05af", "row_index": 385, "timestamp": "2019-07-18T20:04:46Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "237.25.162.210", "user_agent": "aws-cli/1.16.130 Python/3.7.3 Darwin/17.7.0 botocore/1.12.120", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1079, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "866399-3c30-492e-8096-3ac39b6d05af", "eventTime": "2019-07-18T20:04:46Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "237.25.162.210", "userAgent": "aws-cli/1.16.130 Python/3.7.3 Darwin/17.7.0 botocore/1.12.120", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"nextToken": "eyJ2IjoiMiIsImMiOiI2K2lxU2lBRmhTTU5XRFpDZi9ENHh6bEttbHcwNFkzT2NpYnk4dytvQ3F6YU5LQnlvNjBpWmNvWktxd1MwWTl4VFdza3BobldESm5xM1RzQzg4dUQ5UTJwR2NhYi9sVC85OXZ6NjZrMUJidUloNFo3V01zVG1GTUxqRHpoaG1ONWYvbHN5YlpZNnI4bGRoWFpjOS80SGV6SmdLUnRsOHg2S3J3aEpBMHh3ZkNPREZzODlXdW9EL1dtSHg4YjZ0czZPRlhYQUs5SVJXUGhVdz09IiwicyI6IjEifQ==", "maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "866399-3c30-492e-8096-3ac39b6d05af", "record_id": "flaws_cloudtrail:0000386:866399-3c30-492e-8096-3ac39b6d05af", "row_index": 386, "timestamp": "2019-07-18T20:04:46Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "237.25.162.210", "user_agent": "aws-cli/1.16.130 Python/3.7.3 Darwin/17.7.0 botocore/1.12.120", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1079, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "866399-3c30-492e-8096-3ac39b6d05af", "eventTime": "2019-07-18T20:04:46Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "237.25.162.210", "userAgent": "aws-cli/1.16.130 Python/3.7.3 Darwin/17.7.0 botocore/1.12.120", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"nextToken": "eyJ2IjoiMiIsImMiOiI2K2lxU2lBRmhTTU5XRFpDZi9ENHh6bEttbHcwNFkzT2NpYnk4dytvQ3F6YU5LQnlvNjBpWmNvWktxd1MwWTl4VFdza3BobldESm5xM1RzQzg4dUQ5UTJwR2NhYi9sVC85OXZ6NjZrMUJidUloNFo3V01zVG1GTUxqRHpoaG1ONWYvbHN5YlpZNnI4bGRoWFpjOS80SGV6SmdLUnRsOHg2S3J3aEpBMHh3ZkNPREZzODlXdW9EL1dtSHg4YjZ0czZPRlhYQUs5SVJXUGhVdz09IiwicyI6IjEifQ==", "maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "adffc09e-1834-4c03-abea-4785fb0b5932", "record_id": "flaws_cloudtrail:0000387:adffc09e-1834-4c03-abea-4785fb0b5932", "row_index": 387, "timestamp": "2019-07-18T20:04:47Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "237.25.162.210", "user_agent": "aws-cli/1.16.130 Python/3.7.3 Darwin/17.7.0 botocore/1.12.120", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1081, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "adffc09e-1834-4c03-abea-4785fb0b5932", "eventTime": "2019-07-18T20:04:47Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "237.25.162.210", "userAgent": "aws-cli/1.16.130 Python/3.7.3 Darwin/17.7.0 botocore/1.12.120", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"nextToken": "eyJ2IjoiMiIsImMiOiJ0Q1N5THp6cW0yTzBiVkRBL2ZCS21kb0V3aUpXSEhGWVc1VGhqTHRRcEhOTnE1ZGNEVUlWYmtJSUFUWVVWci83V2oxMkltSmdMWTlGalpiWEFWOGVVQ0x3SmZ2cE5ULytZcWJhSWpMd3N5R1BOdWRBUFVHSHMyMkhzNXhGTkZYSTdPKzZqb3FXS3MxTWplSXRPZzczMDgvRGprWVFrb2VYOFZVM2prclRsQytVM2U1MCtYUE0wWnpFWkN3L2ZvT3ZxSktFUmlOVTd5Wi9Rdz09IiwicyI6IjEifQ==", "maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "adffc09e-1834-4c03-abea-4785fb0b5932", "record_id": "flaws_cloudtrail:0000388:adffc09e-1834-4c03-abea-4785fb0b5932", "row_index": 388, "timestamp": "2019-07-18T20:04:47Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "237.25.162.210", "user_agent": "aws-cli/1.16.130 Python/3.7.3 Darwin/17.7.0 botocore/1.12.120", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1081, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "adffc09e-1834-4c03-abea-4785fb0b5932", "eventTime": "2019-07-18T20:04:47Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "237.25.162.210", "userAgent": "aws-cli/1.16.130 Python/3.7.3 Darwin/17.7.0 botocore/1.12.120", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"nextToken": "eyJ2IjoiMiIsImMiOiJ0Q1N5THp6cW0yTzBiVkRBL2ZCS21kb0V3aUpXSEhGWVc1VGhqTHRRcEhOTnE1ZGNEVUlWYmtJSUFUWVVWci83V2oxMkltSmdMWTlGalpiWEFWOGVVQ0x3SmZ2cE5ULytZcWJhSWpMd3N5R1BOdWRBUFVHSHMyMkhzNXhGTkZYSTdPKzZqb3FXS3MxTWplSXRPZzczMDgvRGprWVFrb2VYOFZVM2prclRsQytVM2U1MCtYUE0wWnpFWkN3L2ZvT3ZxSktFUmlOVTd5Wi9Rdz09IiwicyI6IjEifQ==", "maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "ff00e952-cb0d-499e-9717-f833892", "record_id": "flaws_cloudtrail:0000389:ff00e952-cb0d-499e-9717-f833892", "row_index": 389, "timestamp": "2019-07-18T20:04:48Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "237.25.162.210", "user_agent": "aws-cli/1.16.130 Python/3.7.3 Darwin/17.7.0 botocore/1.12.120", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1067, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "ff00e952-cb0d-499e-9717-f833892", "eventTime": "2019-07-18T20:04:48Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "237.25.162.210", "userAgent": "aws-cli/1.16.130 Python/3.7.3 Darwin/17.7.0 botocore/1.12.120", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"nextToken": "eyJ2IjoiMiIsImMiOiJYYjJzc2FVVmhxSUZnd2FyY0laK1M5bVlHcWt5WHdRUGFBV2FTdEgwUng4Y1ErZkllQllSRGw2cEhDdmExL1FYVlZ0R1ZDdE8zV3kvOHRQYnpJSVpFNThkTG41aEFyOWE0ZFI0MVpaaTRqcHRNcWtRMUxzR3E2dXo1dUZHT3Z5SXF1bUZyaHUxTC9EekNLNWRnSnZRVSswT2xWSE15VmhERExpcDVzN1p3N1lmalhLcWFWbHpnM1NBTlJwdk43ZmNFL2VYZ0M2YkMyYz0iLCJzIjoiMSJ9", "maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "ff00e952-cb0d-499e-9717-f833892", "record_id": "flaws_cloudtrail:0000390:ff00e952-cb0d-499e-9717-f833892", "row_index": 390, "timestamp": "2019-07-18T20:04:48Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "237.25.162.210", "user_agent": "aws-cli/1.16.130 Python/3.7.3 Darwin/17.7.0 botocore/1.12.120", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1067, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "ff00e952-cb0d-499e-9717-f833892", "eventTime": "2019-07-18T20:04:48Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "237.25.162.210", "userAgent": "aws-cli/1.16.130 Python/3.7.3 Darwin/17.7.0 botocore/1.12.120", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"nextToken": "eyJ2IjoiMiIsImMiOiJYYjJzc2FVVmhxSUZnd2FyY0laK1M5bVlHcWt5WHdRUGFBV2FTdEgwUng4Y1ErZkllQllSRGw2cEhDdmExL1FYVlZ0R1ZDdE8zV3kvOHRQYnpJSVpFNThkTG41aEFyOWE0ZFI0MVpaaTRqcHRNcWtRMUxzR3E2dXo1dUZHT3Z5SXF1bUZyaHUxTC9EekNLNWRnSnZRVSswT2xWSE15VmhERExpcDVzN1p3N1lmalhLcWFWbHpnM1NBTlJwdk43ZmNFL2VYZ0M2YkMyYz0iLCJzIjoiMSJ9", "maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "7592b5b7-a07d-4d13-a14d-acb6f69181dd", "record_id": "flaws_cloudtrail:0000391:7592b5b7-a07d-4d13-a14d-acb6f69181dd", "row_index": 391, "timestamp": "2019-07-18T20:04:49Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "237.25.162.210", "user_agent": "aws-cli/1.16.130 Python/3.7.3 Darwin/17.7.0 botocore/1.12.120", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1079, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "7592b5b7-a07d-4d13-a14d-acb6f69181dd", "eventTime": "2019-07-18T20:04:49Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "237.25.162.210", "userAgent": "aws-cli/1.16.130 Python/3.7.3 Darwin/17.7.0 botocore/1.12.120", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"nextToken": "eyJ2IjoiMiIsImMiOiJWMFBHWkdORHRMSGFYM2JQRDdaNnpndXMzWC9aQis1Tlhtc3pMeE9LdUk0aW9Hbk91b2VVVEtOc0l1d1U2QUl3THhxenp3OGwwR3dtUWdsczA1SGE5elZqank3Qnk0aTVMNTVSV1V5d2dhZ3diZXl1Z1pJU1c2Q3U5VzJWMWhVWkNUQ0xRdTNqelQ3QzkwaHFQOFlSMXNQK1BqYURncDM5SkM1YmwrdU55MUVZSE9vT09udkNDZDFHVEdOTUhlN0R2MEUzN2wwcmY4VHFkZz09IiwicyI6IjEifQ==", "maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "7592b5b7-a07d-4d13-a14d-acb6f69181dd", "record_id": "flaws_cloudtrail:0000392:7592b5b7-a07d-4d13-a14d-acb6f69181dd", "row_index": 392, "timestamp": "2019-07-18T20:04:49Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "237.25.162.210", "user_agent": "aws-cli/1.16.130 Python/3.7.3 Darwin/17.7.0 botocore/1.12.120", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1079, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "7592b5b7-a07d-4d13-a14d-acb6f69181dd", "eventTime": "2019-07-18T20:04:49Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "237.25.162.210", "userAgent": "aws-cli/1.16.130 Python/3.7.3 Darwin/17.7.0 botocore/1.12.120", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"nextToken": "eyJ2IjoiMiIsImMiOiJWMFBHWkdORHRMSGFYM2JQRDdaNnpndXMzWC9aQis1Tlhtc3pMeE9LdUk0aW9Hbk91b2VVVEtOc0l1d1U2QUl3THhxenp3OGwwR3dtUWdsczA1SGE5elZqank3Qnk0aTVMNTVSV1V5d2dhZ3diZXl1Z1pJU1c2Q3U5VzJWMWhVWkNUQ0xRdTNqelQ3QzkwaHFQOFlSMXNQK1BqYURncDM5SkM1YmwrdU55MUVZSE9vT09udkNDZDFHVEdOTUhlN0R2MEUzN2wwcmY4VHFkZz09IiwicyI6IjEifQ==", "maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "469db7f7-7254-40c3-9c57-2d1dcdcc2e5d", "record_id": "flaws_cloudtrail:0000393:469db7f7-7254-40c3-9c57-2d1dcdcc2e5d", "row_index": 393, "timestamp": "2019-07-18T20:04:51Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "237.25.162.210", "user_agent": "aws-cli/1.16.130 Python/3.7.3 Darwin/17.7.0 botocore/1.12.120", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1072, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "469db7f7-7254-40c3-9c57-2d1dcdcc2e5d", "eventTime": "2019-07-18T20:04:51Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "237.25.162.210", "userAgent": "aws-cli/1.16.130 Python/3.7.3 Darwin/17.7.0 botocore/1.12.120", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"nextToken": "eyJ2IjoiMiIsImMiOiJ3eGpXYlRwMXBYaTdDVDc0ck14bVc0bGZ3RW51cGhiVVZjVzllTC9DZ0FVL3NlOW96a3hoTFFqT3gzSFdqZWtXZjFNK3p6Y0NqNU9tUGF0VkcyWXE1TjFyVFZkVy9mSjhOL2cvb0l4YmRnMjFZQW1QRHZxbDJnWC9mRHp6UWJwNkdQNEdmUjBFSEpDOFZuTGxubVRGWmdQdTFUOHVVSEwvWTNKalZRRkFlYXpBVEVHVTNzS01TZDFCR1g2WmxXOU9kait2RkFxbkN3PT0iLCJzIjoiMSJ9", "maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "469db7f7-7254-40c3-9c57-2d1dcdcc2e5d", "record_id": "flaws_cloudtrail:0000394:469db7f7-7254-40c3-9c57-2d1dcdcc2e5d", "row_index": 394, "timestamp": "2019-07-18T20:04:51Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "237.25.162.210", "user_agent": "aws-cli/1.16.130 Python/3.7.3 Darwin/17.7.0 botocore/1.12.120", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1072, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "469db7f7-7254-40c3-9c57-2d1dcdcc2e5d", "eventTime": "2019-07-18T20:04:51Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "237.25.162.210", "userAgent": "aws-cli/1.16.130 Python/3.7.3 Darwin/17.7.0 botocore/1.12.120", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"nextToken": "eyJ2IjoiMiIsImMiOiJ3eGpXYlRwMXBYaTdDVDc0ck14bVc0bGZ3RW51cGhiVVZjVzllTC9DZ0FVL3NlOW96a3hoTFFqT3gzSFdqZWtXZjFNK3p6Y0NqNU9tUGF0VkcyWXE1TjFyVFZkVy9mSjhOL2cvb0l4YmRnMjFZQW1QRHZxbDJnWC9mRHp6UWJwNkdQNEdmUjBFSEpDOFZuTGxubVRGWmdQdTFUOHVVSEwvWTNKalZRRkFlYXpBVEVHVTNzS01TZDFCR1g2WmxXOU9kait2RkFxbkN3PT0iLCJzIjoiMSJ9", "maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "378903f80-e561-4ea4-93e9-424caf475e2b", "record_id": "flaws_cloudtrail:0000395:378903f80-e561-4ea4-93e9-424caf475e2b", "row_index": 395, "timestamp": "2019-07-18T20:04:52Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "237.25.162.210", "user_agent": "aws-cli/1.16.130 Python/3.7.3 Darwin/17.7.0 botocore/1.12.120", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1081, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "378903f80-e561-4ea4-93e9-424caf475e2b", "eventTime": "2019-07-18T20:04:52Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "237.25.162.210", "userAgent": "aws-cli/1.16.130 Python/3.7.3 Darwin/17.7.0 botocore/1.12.120", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"nextToken": "eyJ2IjoiMiIsImMiOiJkVUs3UnAyaUNmTnB2cE93RlRoQlhXT3RnVDd2MXkzSFdkckpzT1VWbXhHa3h2cHNlaWZ4NkgzUkhLKytNamV0NEZybHY2emVtZGZSL3lPeVpJdUdtb3g5YXd1WFdpMlErQnJPTDVQem1FcXJtRWM1YVZvRlRTTndkOHRFaHprM09iTFpFeXFuOHRSMjI2Nnh2aDZPbVFFRUNZejc0WVd4ZGowTDAvWXdBbFBicm9VcGt5TzM1NkVXS3ZjaDBsK1U4WEd5M3Y4RDJGODBPUT09IiwicyI6IjEifQ==", "maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "378903f80-e561-4ea4-93e9-424caf475e2b", "record_id": "flaws_cloudtrail:0000396:378903f80-e561-4ea4-93e9-424caf475e2b", "row_index": 396, "timestamp": "2019-07-18T20:04:52Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "237.25.162.210", "user_agent": "aws-cli/1.16.130 Python/3.7.3 Darwin/17.7.0 botocore/1.12.120", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1081, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "378903f80-e561-4ea4-93e9-424caf475e2b", "eventTime": "2019-07-18T20:04:52Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "237.25.162.210", "userAgent": "aws-cli/1.16.130 Python/3.7.3 Darwin/17.7.0 botocore/1.12.120", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"nextToken": "eyJ2IjoiMiIsImMiOiJkVUs3UnAyaUNmTnB2cE93RlRoQlhXT3RnVDd2MXkzSFdkckpzT1VWbXhHa3h2cHNlaWZ4NkgzUkhLKytNamV0NEZybHY2emVtZGZSL3lPeVpJdUdtb3g5YXd1WFdpMlErQnJPTDVQem1FcXJtRWM1YVZvRlRTTndkOHRFaHprM09iTFpFeXFuOHRSMjI2Nnh2aDZPbVFFRUNZejc0WVd4ZGowTDAvWXdBbFBicm9VcGt5TzM1NkVXS3ZjaDBsK1U4WEd5M3Y4RDJGODBPUT09IiwicyI6IjEifQ==", "maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "909b62b0-40d4-4b9e-963c-8a32dedf509e", "record_id": "flaws_cloudtrail:0000397:909b62b0-40d4-4b9e-963c-8a32dedf509e", "row_index": 397, "timestamp": "2019-07-18T20:04:56Z", "event_type": "DescribeVolumes", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "237.25.162.210", "user_agent": "aws-cli/1.16.130 Python/3.7.3 Darwin/17.7.0 botocore/1.12.120", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 714, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "909b62b0-40d4-4b9e-963c-8a32dedf509e", "eventTime": "2019-07-18T20:04:56Z", "eventName": "DescribeVolumes", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "237.25.162.210", "userAgent": "aws-cli/1.16.130 Python/3.7.3 Darwin/17.7.0 botocore/1.12.120", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"maxResults": 1000, "volumeSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "909b62b0-40d4-4b9e-963c-8a32dedf509e", "record_id": "flaws_cloudtrail:0000398:909b62b0-40d4-4b9e-963c-8a32dedf509e", "row_index": 398, "timestamp": "2019-07-18T20:04:56Z", "event_type": "DescribeVolumes", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "237.25.162.210", "user_agent": "aws-cli/1.16.130 Python/3.7.3 Darwin/17.7.0 botocore/1.12.120", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 714, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "909b62b0-40d4-4b9e-963c-8a32dedf509e", "eventTime": "2019-07-18T20:04:56Z", "eventName": "DescribeVolumes", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "237.25.162.210", "userAgent": "aws-cli/1.16.130 Python/3.7.3 Darwin/17.7.0 botocore/1.12.120", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"maxResults": 1000, "volumeSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "2d6b3e2e-5a42-40d6-9a6f-f7d6c16d0021", "record_id": "flaws_cloudtrail:0000399:2d6b3e2e-5a42-40d6-9a6f-f7d6c16d0021", "row_index": 399, "timestamp": "2019-07-18T20:06:32Z", "event_type": "DescribeInstances", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "48.242.79.253", "user_agent": "aws-cli/1.16.160 Python/3.7.3 Darwin/18.6.0 botocore/1.12.150", "aws_region": "us-east-2"}, "resource_arns": [], "raw_record_size_bytes": 700, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "2d6b3e2e-5a42-40d6-9a6f-f7d6c16d0021", "eventTime": "2019-07-18T20:06:32Z", "eventName": "DescribeInstances", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "48.242.79.253", "userAgent": "aws-cli/1.16.160 Python/3.7.3 Darwin/18.6.0 botocore/1.12.150", "awsRegion": "us-east-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"instancesSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "2d6b3e2e-5a42-40d6-9a6f-f7d6c16d0021", "record_id": "flaws_cloudtrail:0000400:2d6b3e2e-5a42-40d6-9a6f-f7d6c16d0021", "row_index": 400, "timestamp": "2019-07-18T20:06:32Z", "event_type": "DescribeInstances", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "48.242.79.253", "user_agent": "aws-cli/1.16.160 Python/3.7.3 Darwin/18.6.0 botocore/1.12.150", "aws_region": "us-east-2"}, "resource_arns": [], "raw_record_size_bytes": 700, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "2d6b3e2e-5a42-40d6-9a6f-f7d6c16d0021", "eventTime": "2019-07-18T20:06:32Z", "eventName": "DescribeInstances", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "48.242.79.253", "userAgent": "aws-cli/1.16.160 Python/3.7.3 Darwin/18.6.0 botocore/1.12.150", "awsRegion": "us-east-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"instancesSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "1231b37a-67d9-4e8c-a2c9-f3d1bc43ff0a", "record_id": "flaws_cloudtrail:0000401:1231b37a-67d9-4e8c-a2c9-f3d1bc43ff0a", "row_index": 401, "timestamp": "2019-07-18T20:06:34Z", "event_type": "DescribeInstances", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "48.242.79.253", "user_agent": "aws-cli/1.16.160 Python/3.7.3 Darwin/18.6.0 botocore/1.12.150", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 699, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "1231b37a-67d9-4e8c-a2c9-f3d1bc43ff0a", "eventTime": "2019-07-18T20:06:34Z", "eventName": "DescribeInstances", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "48.242.79.253", "userAgent": "aws-cli/1.16.160 Python/3.7.3 Darwin/18.6.0 botocore/1.12.150", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"instancesSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "1231b37a-67d9-4e8c-a2c9-f3d1bc43ff0a", "record_id": "flaws_cloudtrail:0000402:1231b37a-67d9-4e8c-a2c9-f3d1bc43ff0a", "row_index": 402, "timestamp": "2019-07-18T20:06:34Z", "event_type": "DescribeInstances", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "48.242.79.253", "user_agent": "aws-cli/1.16.160 Python/3.7.3 Darwin/18.6.0 botocore/1.12.150", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 699, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "1231b37a-67d9-4e8c-a2c9-f3d1bc43ff0a", "eventTime": "2019-07-18T20:06:34Z", "eventName": "DescribeInstances", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "48.242.79.253", "userAgent": "aws-cli/1.16.160 Python/3.7.3 Darwin/18.6.0 botocore/1.12.150", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"instancesSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "2d6f701c-0601-405c-84c2-9e93d6864d6e", "record_id": "flaws_cloudtrail:0000403:2d6f701c-0601-405c-84c2-9e93d6864d6e", "row_index": 403, "timestamp": "2019-07-18T20:06:35Z", "event_type": "DescribeInstances", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "48.242.79.253", "user_agent": "aws-cli/1.16.160 Python/3.7.3 Darwin/18.6.0 botocore/1.12.150", "aws_region": "us-west-1"}, "resource_arns": [], "raw_record_size_bytes": 700, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "2d6f701c-0601-405c-84c2-9e93d6864d6e", "eventTime": "2019-07-18T20:06:35Z", "eventName": "DescribeInstances", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "48.242.79.253", "userAgent": "aws-cli/1.16.160 Python/3.7.3 Darwin/18.6.0 botocore/1.12.150", "awsRegion": "us-west-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"instancesSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "2d6f701c-0601-405c-84c2-9e93d6864d6e", "record_id": "flaws_cloudtrail:0000404:2d6f701c-0601-405c-84c2-9e93d6864d6e", "row_index": 404, "timestamp": "2019-07-18T20:06:35Z", "event_type": "DescribeInstances", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "48.242.79.253", "user_agent": "aws-cli/1.16.160 Python/3.7.3 Darwin/18.6.0 botocore/1.12.150", "aws_region": "us-west-1"}, "resource_arns": [], "raw_record_size_bytes": 700, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "2d6f701c-0601-405c-84c2-9e93d6864d6e", "eventTime": "2019-07-18T20:06:35Z", "eventName": "DescribeInstances", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "48.242.79.253", "userAgent": "aws-cli/1.16.160 Python/3.7.3 Darwin/18.6.0 botocore/1.12.150", "awsRegion": "us-west-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"instancesSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "b12be651-010a-406b-b7a6-26ace0b3944a", "record_id": "flaws_cloudtrail:0000405:b12be651-010a-406b-b7a6-26ace0b3944a", "row_index": 405, "timestamp": "2019-07-18T20:06:37Z", "event_type": "DescribeInstances", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "48.242.79.253", "user_agent": "aws-cli/1.16.160 Python/3.7.3 Darwin/18.6.0 botocore/1.12.150", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 700, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "b12be651-010a-406b-b7a6-26ace0b3944a", "eventTime": "2019-07-18T20:06:37Z", "eventName": "DescribeInstances", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "48.242.79.253", "userAgent": "aws-cli/1.16.160 Python/3.7.3 Darwin/18.6.0 botocore/1.12.150", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"instancesSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "b12be651-010a-406b-b7a6-26ace0b3944a", "record_id": "flaws_cloudtrail:0000406:b12be651-010a-406b-b7a6-26ace0b3944a", "row_index": 406, "timestamp": "2019-07-18T20:06:37Z", "event_type": "DescribeInstances", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "48.242.79.253", "user_agent": "aws-cli/1.16.160 Python/3.7.3 Darwin/18.6.0 botocore/1.12.150", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 700, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "b12be651-010a-406b-b7a6-26ace0b3944a", "eventTime": "2019-07-18T20:06:37Z", "eventName": "DescribeInstances", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "48.242.79.253", "userAgent": "aws-cli/1.16.160 Python/3.7.3 Darwin/18.6.0 botocore/1.12.150", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"instancesSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "05eac6d5-226c-4019-b2af-ca7e599a50fb", "record_id": "flaws_cloudtrail:0000407:05eac6d5-226c-4019-b2af-ca7e599a50fb", "row_index": 407, "timestamp": "2019-07-18T20:06:41Z", "event_type": "DescribeInstances", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "48.242.79.253", "user_agent": "aws-cli/1.16.160 Python/3.7.3 Darwin/18.6.0 botocore/1.12.150", "aws_region": "ap-south-1"}, "resource_arns": [], "raw_record_size_bytes": 701, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "05eac6d5-226c-4019-b2af-ca7e599a50fb", "eventTime": "2019-07-18T20:06:41Z", "eventName": "DescribeInstances", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "48.242.79.253", "userAgent": "aws-cli/1.16.160 Python/3.7.3 Darwin/18.6.0 botocore/1.12.150", "awsRegion": "ap-south-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"instancesSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "05eac6d5-226c-4019-b2af-ca7e599a50fb", "record_id": "flaws_cloudtrail:0000408:05eac6d5-226c-4019-b2af-ca7e599a50fb", "row_index": 408, "timestamp": "2019-07-18T20:06:41Z", "event_type": "DescribeInstances", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "48.242.79.253", "user_agent": "aws-cli/1.16.160 Python/3.7.3 Darwin/18.6.0 botocore/1.12.150", "aws_region": "ap-south-1"}, "resource_arns": [], "raw_record_size_bytes": 701, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "05eac6d5-226c-4019-b2af-ca7e599a50fb", "eventTime": "2019-07-18T20:06:41Z", "eventName": "DescribeInstances", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "48.242.79.253", "userAgent": "aws-cli/1.16.160 Python/3.7.3 Darwin/18.6.0 botocore/1.12.150", "awsRegion": "ap-south-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"instancesSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "021795d9-f62e-4543-b4cd-5f257d4774c3", "record_id": "flaws_cloudtrail:0000409:021795d9-f62e-4543-b4cd-5f257d4774c3", "row_index": 409, "timestamp": "2019-07-18T20:06:43Z", "event_type": "DescribeInstances", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "48.242.79.253", "user_agent": "aws-cli/1.16.160 Python/3.7.3 Darwin/18.6.0 botocore/1.12.150", "aws_region": "ap-northeast-2"}, "resource_arns": [], "raw_record_size_bytes": 705, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "021795d9-f62e-4543-b4cd-5f257d4774c3", "eventTime": "2019-07-18T20:06:43Z", "eventName": "DescribeInstances", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "48.242.79.253", "userAgent": "aws-cli/1.16.160 Python/3.7.3 Darwin/18.6.0 botocore/1.12.150", "awsRegion": "ap-northeast-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"instancesSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "021795d9-f62e-4543-b4cd-5f257d4774c3", "record_id": "flaws_cloudtrail:0000410:021795d9-f62e-4543-b4cd-5f257d4774c3", "row_index": 410, "timestamp": "2019-07-18T20:06:43Z", "event_type": "DescribeInstances", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "48.242.79.253", "user_agent": "aws-cli/1.16.160 Python/3.7.3 Darwin/18.6.0 botocore/1.12.150", "aws_region": "ap-northeast-2"}, "resource_arns": [], "raw_record_size_bytes": 705, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "021795d9-f62e-4543-b4cd-5f257d4774c3", "eventTime": "2019-07-18T20:06:43Z", "eventName": "DescribeInstances", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "48.242.79.253", "userAgent": "aws-cli/1.16.160 Python/3.7.3 Darwin/18.6.0 botocore/1.12.150", "awsRegion": "ap-northeast-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"instancesSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "aeeab0a2-0d30-49ed-b9de-4612f68fba70", "record_id": "flaws_cloudtrail:0000411:aeeab0a2-0d30-49ed-b9de-4612f68fba70", "row_index": 411, "timestamp": "2019-07-18T20:06:45Z", "event_type": "DescribeInstances", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "48.242.79.253", "user_agent": "aws-cli/1.16.160 Python/3.7.3 Darwin/18.6.0 botocore/1.12.150", "aws_region": "ap-southeast-2"}, "resource_arns": [], "raw_record_size_bytes": 705, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "aeeab0a2-0d30-49ed-b9de-4612f68fba70", "eventTime": "2019-07-18T20:06:45Z", "eventName": "DescribeInstances", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "48.242.79.253", "userAgent": "aws-cli/1.16.160 Python/3.7.3 Darwin/18.6.0 botocore/1.12.150", "awsRegion": "ap-southeast-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"instancesSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "aeeab0a2-0d30-49ed-b9de-4612f68fba70", "record_id": "flaws_cloudtrail:0000412:aeeab0a2-0d30-49ed-b9de-4612f68fba70", "row_index": 412, "timestamp": "2019-07-18T20:06:45Z", "event_type": "DescribeInstances", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "48.242.79.253", "user_agent": "aws-cli/1.16.160 Python/3.7.3 Darwin/18.6.0 botocore/1.12.150", "aws_region": "ap-southeast-2"}, "resource_arns": [], "raw_record_size_bytes": 705, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "aeeab0a2-0d30-49ed-b9de-4612f68fba70", "eventTime": "2019-07-18T20:06:45Z", "eventName": "DescribeInstances", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "48.242.79.253", "userAgent": "aws-cli/1.16.160 Python/3.7.3 Darwin/18.6.0 botocore/1.12.150", "awsRegion": "ap-southeast-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"instancesSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "faa160477-bd88-4350-8772-339c76ab0e44", "record_id": "flaws_cloudtrail:0000413:faa160477-bd88-4350-8772-339c76ab0e44", "row_index": 413, "timestamp": "2019-07-18T20:06:46Z", "event_type": "DescribeInstances", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "237.25.162.210", "user_agent": "aws-cli/1.16.130 Python/3.7.3 Darwin/17.7.0 botocore/1.12.120", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 702, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "faa160477-bd88-4350-8772-339c76ab0e44", "eventTime": "2019-07-18T20:06:46Z", "eventName": "DescribeInstances", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "237.25.162.210", "userAgent": "aws-cli/1.16.130 Python/3.7.3 Darwin/17.7.0 botocore/1.12.120", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"instancesSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "faa160477-bd88-4350-8772-339c76ab0e44", "record_id": "flaws_cloudtrail:0000414:faa160477-bd88-4350-8772-339c76ab0e44", "row_index": 414, "timestamp": "2019-07-18T20:06:46Z", "event_type": "DescribeInstances", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "237.25.162.210", "user_agent": "aws-cli/1.16.130 Python/3.7.3 Darwin/17.7.0 botocore/1.12.120", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 702, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "faa160477-bd88-4350-8772-339c76ab0e44", "eventTime": "2019-07-18T20:06:46Z", "eventName": "DescribeInstances", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "237.25.162.210", "userAgent": "aws-cli/1.16.130 Python/3.7.3 Darwin/17.7.0 botocore/1.12.120", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"instancesSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "0c0e0582-afc1-4e99-874d-56a6f322b962", "record_id": "flaws_cloudtrail:0000415:0c0e0582-afc1-4e99-874d-56a6f322b962", "row_index": 415, "timestamp": "2019-07-18T20:06:48Z", "event_type": "DescribeInstances", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "48.242.79.253", "user_agent": "aws-cli/1.16.160 Python/3.7.3 Darwin/18.6.0 botocore/1.12.150", "aws_region": "ap-northeast-1"}, "resource_arns": [], "raw_record_size_bytes": 705, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "0c0e0582-afc1-4e99-874d-56a6f322b962", "eventTime": "2019-07-18T20:06:48Z", "eventName": "DescribeInstances", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "48.242.79.253", "userAgent": "aws-cli/1.16.160 Python/3.7.3 Darwin/18.6.0 botocore/1.12.150", "awsRegion": "ap-northeast-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"instancesSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "0c0e0582-afc1-4e99-874d-56a6f322b962", "record_id": "flaws_cloudtrail:0000416:0c0e0582-afc1-4e99-874d-56a6f322b962", "row_index": 416, "timestamp": "2019-07-18T20:06:48Z", "event_type": "DescribeInstances", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "48.242.79.253", "user_agent": "aws-cli/1.16.160 Python/3.7.3 Darwin/18.6.0 botocore/1.12.150", "aws_region": "ap-northeast-1"}, "resource_arns": [], "raw_record_size_bytes": 705, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "0c0e0582-afc1-4e99-874d-56a6f322b962", "eventTime": "2019-07-18T20:06:48Z", "eventName": "DescribeInstances", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "48.242.79.253", "userAgent": "aws-cli/1.16.160 Python/3.7.3 Darwin/18.6.0 botocore/1.12.150", "awsRegion": "ap-northeast-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"instancesSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "0eec59ef-8288-4ccf-aff7-2fe5bd6c7a55", "record_id": "flaws_cloudtrail:0000417:0eec59ef-8288-4ccf-aff7-2fe5bd6c7a55", "row_index": 417, "timestamp": "2019-07-18T20:06:50Z", "event_type": "DescribeInstances", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "48.242.79.253", "user_agent": "aws-cli/1.16.160 Python/3.7.3 Darwin/18.6.0 botocore/1.12.150", "aws_region": "ca-central-1"}, "resource_arns": [], "raw_record_size_bytes": 703, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "0eec59ef-8288-4ccf-aff7-2fe5bd6c7a55", "eventTime": "2019-07-18T20:06:50Z", "eventName": "DescribeInstances", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "48.242.79.253", "userAgent": "aws-cli/1.16.160 Python/3.7.3 Darwin/18.6.0 botocore/1.12.150", "awsRegion": "ca-central-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"instancesSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "0eec59ef-8288-4ccf-aff7-2fe5bd6c7a55", "record_id": "flaws_cloudtrail:0000418:0eec59ef-8288-4ccf-aff7-2fe5bd6c7a55", "row_index": 418, "timestamp": "2019-07-18T20:06:50Z", "event_type": "DescribeInstances", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "48.242.79.253", "user_agent": "aws-cli/1.16.160 Python/3.7.3 Darwin/18.6.0 botocore/1.12.150", "aws_region": "ca-central-1"}, "resource_arns": [], "raw_record_size_bytes": 703, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "0eec59ef-8288-4ccf-aff7-2fe5bd6c7a55", "eventTime": "2019-07-18T20:06:50Z", "eventName": "DescribeInstances", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "48.242.79.253", "userAgent": "aws-cli/1.16.160 Python/3.7.3 Darwin/18.6.0 botocore/1.12.150", "awsRegion": "ca-central-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"instancesSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "8250a0f1-df94-467d-8573-37acb67d7c15", "record_id": "flaws_cloudtrail:0000419:8250a0f1-df94-467d-8573-37acb67d7c15", "row_index": 419, "timestamp": "2019-07-18T20:07:21Z", "event_type": "DescribeInstances", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "48.242.79.253", "user_agent": "aws-cli/1.16.160 Python/3.7.3 Darwin/18.6.0 botocore/1.12.150", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 700, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "8250a0f1-df94-467d-8573-37acb67d7c15", "eventTime": "2019-07-18T20:07:21Z", "eventName": "DescribeInstances", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "48.242.79.253", "userAgent": "aws-cli/1.16.160 Python/3.7.3 Darwin/18.6.0 botocore/1.12.150", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"instancesSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "8250a0f1-df94-467d-8573-37acb67d7c15", "record_id": "flaws_cloudtrail:0000420:8250a0f1-df94-467d-8573-37acb67d7c15", "row_index": 420, "timestamp": "2019-07-18T20:07:21Z", "event_type": "DescribeInstances", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "48.242.79.253", "user_agent": "aws-cli/1.16.160 Python/3.7.3 Darwin/18.6.0 botocore/1.12.150", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 700, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "8250a0f1-df94-467d-8573-37acb67d7c15", "eventTime": "2019-07-18T20:07:21Z", "eventName": "DescribeInstances", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "48.242.79.253", "userAgent": "aws-cli/1.16.160 Python/3.7.3 Darwin/18.6.0 botocore/1.12.150", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"instancesSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "d4613ac2-6f23-42a2-9f8b-a6d9269a3f7a", "record_id": "flaws_cloudtrail:0000421:d4613ac2-6f23-42a2-9f8b-a6d9269a3f7a", "row_index": 421, "timestamp": "2019-07-18T20:07:25Z", "event_type": "ListBuckets", "event_source": "s3.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "237.25.162.210", "user_agent": "[aws-cli/1.16.199 Python/2.7.15 Darwin/16.7.0 botocore/1.12.189]", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 804, "raw_record_depth": 3, "raw_record_top_level_keys": ["additionalEventData", "awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "d4613ac2-6f23-42a2-9f8b-a6d9269a3f7a", "eventTime": "2019-07-18T20:07:25Z", "eventName": "ListBuckets", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "237.25.162.210", "userAgent": "[aws-cli/1.16.199 Python/2.7.15 Darwin/16.7.0 botocore/1.12.189]", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"host": ["s3.amazonaws.com"]}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "d4613ac2-6f23-42a2-9f8b-a6d9269a3f7a", "record_id": "flaws_cloudtrail:0000422:d4613ac2-6f23-42a2-9f8b-a6d9269a3f7a", "row_index": 422, "timestamp": "2019-07-18T20:07:25Z", "event_type": "ListBuckets", "event_source": "s3.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "237.25.162.210", "user_agent": "[aws-cli/1.16.199 Python/2.7.15 Darwin/16.7.0 botocore/1.12.189]", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 804, "raw_record_depth": 3, "raw_record_top_level_keys": ["additionalEventData", "awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "d4613ac2-6f23-42a2-9f8b-a6d9269a3f7a", "eventTime": "2019-07-18T20:07:25Z", "eventName": "ListBuckets", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "237.25.162.210", "userAgent": "[aws-cli/1.16.199 Python/2.7.15 Darwin/16.7.0 botocore/1.12.189]", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"host": ["s3.amazonaws.com"]}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "34aff3bf-d31b-474a-b3a8-a3b9a6a073242", "record_id": "flaws_cloudtrail:0000423:34aff3bf-d31b-474a-b3a8-a3b9a6a073242", "row_index": 423, "timestamp": "2019-07-18T20:08:08Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "48.242.79.253", "user_agent": "aws-cli/1.16.160 Python/3.7.3 Darwin/18.6.0 botocore/1.12.150", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 753, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "34aff3bf-d31b-474a-b3a8-a3b9a6a073242", "eventTime": "2019-07-18T20:08:08Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "48.242.79.253", "userAgent": "aws-cli/1.16.160 Python/3.7.3 Darwin/18.6.0 botocore/1.12.150", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "34aff3bf-d31b-474a-b3a8-a3b9a6a073242", "record_id": "flaws_cloudtrail:0000424:34aff3bf-d31b-474a-b3a8-a3b9a6a073242", "row_index": 424, "timestamp": "2019-07-18T20:08:08Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "48.242.79.253", "user_agent": "aws-cli/1.16.160 Python/3.7.3 Darwin/18.6.0 botocore/1.12.150", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 753, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "34aff3bf-d31b-474a-b3a8-a3b9a6a073242", "eventTime": "2019-07-18T20:08:08Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "48.242.79.253", "userAgent": "aws-cli/1.16.160 Python/3.7.3 Darwin/18.6.0 botocore/1.12.150", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "8f1245ae-2cc1-42b8-af00-92cb89c0a0cc", "record_id": "flaws_cloudtrail:0000425:8f1245ae-2cc1-42b8-af00-92cb89c0a0cc", "row_index": 425, "timestamp": "2019-07-18T20:08:15Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "48.242.79.253", "user_agent": "aws-cli/1.16.160 Python/3.7.3 Darwin/18.6.0 botocore/1.12.150", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1079, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "8f1245ae-2cc1-42b8-af00-92cb89c0a0cc", "eventTime": "2019-07-18T20:08:15Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "48.242.79.253", "userAgent": "aws-cli/1.16.160 Python/3.7.3 Darwin/18.6.0 botocore/1.12.150", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"nextToken": "eyJ2IjoiMiIsImMiOiJTVlJpcHFPV2tzclRvaVhFcDVRak1mNll5T1dwUlBqRER2S0FGRDEydFhlaWpLV3hNOWxXblJ4aU1sdDFsQi8ycXB2Z1B6bktTS201Q3RDSTFSTEdDVHZVTllpOWcxUU9YNXhxa2YvUzEvYk04dWEzcU9HUUNhcWZjQW93MXF4QnNTQVpjYzN0NXA2ZFlMLzdYNXloWUx4MGxpckhzdE9PdERVMlRGai9QRnJSSTdpUDdac2g3Z0gyMklKVUFsOUQxMHhSNmJ4S0tPTGFmdz09IiwicyI6IjEifQ==", "maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "8f1245ae-2cc1-42b8-af00-92cb89c0a0cc", "record_id": "flaws_cloudtrail:0000426:8f1245ae-2cc1-42b8-af00-92cb89c0a0cc", "row_index": 426, "timestamp": "2019-07-18T20:08:15Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "48.242.79.253", "user_agent": "aws-cli/1.16.160 Python/3.7.3 Darwin/18.6.0 botocore/1.12.150", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1079, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "8f1245ae-2cc1-42b8-af00-92cb89c0a0cc", "eventTime": "2019-07-18T20:08:15Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "48.242.79.253", "userAgent": "aws-cli/1.16.160 Python/3.7.3 Darwin/18.6.0 botocore/1.12.150", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"nextToken": "eyJ2IjoiMiIsImMiOiJTVlJpcHFPV2tzclRvaVhFcDVRak1mNll5T1dwUlBqRER2S0FGRDEydFhlaWpLV3hNOWxXblJ4aU1sdDFsQi8ycXB2Z1B6bktTS201Q3RDSTFSTEdDVHZVTllpOWcxUU9YNXhxa2YvUzEvYk04dWEzcU9HUUNhcWZjQW93MXF4QnNTQVpjYzN0NXA2ZFlMLzdYNXloWUx4MGxpckhzdE9PdERVMlRGai9QRnJSSTdpUDdac2g3Z0gyMklKVUFsOUQxMHhSNmJ4S0tPTGFmdz09IiwicyI6IjEifQ==", "maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "18fa5d3a-afa1-424a-be9d-f7729534c3b8", "record_id": "flaws_cloudtrail:0000427:18fa5d3a-afa1-424a-be9d-f7729534c3b8", "row_index": 427, "timestamp": "2019-07-18T20:08:20Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "48.242.79.253", "user_agent": "aws-cli/1.16.160 Python/3.7.3 Darwin/18.6.0 botocore/1.12.150", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1080, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "18fa5d3a-afa1-424a-be9d-f7729534c3b8", "eventTime": "2019-07-18T20:08:20Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "48.242.79.253", "userAgent": "aws-cli/1.16.160 Python/3.7.3 Darwin/18.6.0 botocore/1.12.150", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"nextToken": "eyJ2IjoiMiIsImMiOiJIcGpaOUlFWno2WkFKUDBEOXU0UFBHRER0WStTSDkxNVJOdCtuOEluOWg2SzlSSEJuTE1FWXI4ekxRQUs5c0NldFgzVjhhc1cweWhjdU1NNE9JUDRDMFJqbkJqYlNubVdoSzZ4emg1UTFDaE1xQWlSQ2J0c3RGSDBBRlFHUXhrdmRSM3h0OEp0Y3lONkZ4QUVucU1LRVpYcm55VUpkWCt6ZFVvdHo4MzFGcE5aRG0wdDFaOXdaM215ODV3VHNsaHpEczJ2MGUxbmh6R3lxQT09IiwicyI6IjEifQ==", "maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "18fa5d3a-afa1-424a-be9d-f7729534c3b8", "record_id": "flaws_cloudtrail:0000428:18fa5d3a-afa1-424a-be9d-f7729534c3b8", "row_index": 428, "timestamp": "2019-07-18T20:08:20Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "48.242.79.253", "user_agent": "aws-cli/1.16.160 Python/3.7.3 Darwin/18.6.0 botocore/1.12.150", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1080, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "18fa5d3a-afa1-424a-be9d-f7729534c3b8", "eventTime": "2019-07-18T20:08:20Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "48.242.79.253", "userAgent": "aws-cli/1.16.160 Python/3.7.3 Darwin/18.6.0 botocore/1.12.150", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"nextToken": "eyJ2IjoiMiIsImMiOiJIcGpaOUlFWno2WkFKUDBEOXU0UFBHRER0WStTSDkxNVJOdCtuOEluOWg2SzlSSEJuTE1FWXI4ekxRQUs5c0NldFgzVjhhc1cweWhjdU1NNE9JUDRDMFJqbkJqYlNubVdoSzZ4emg1UTFDaE1xQWlSQ2J0c3RGSDBBRlFHUXhrdmRSM3h0OEp0Y3lONkZ4QUVucU1LRVpYcm55VUpkWCt6ZFVvdHo4MzFGcE5aRG0wdDFaOXdaM215ODV3VHNsaHpEczJ2MGUxbmh6R3lxQT09IiwicyI6IjEifQ==", "maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "06000-8fde-47c0-ad25-594cf1da0cf2", "record_id": "flaws_cloudtrail:0000429:06000-8fde-47c0-ad25-594cf1da0cf2", "row_index": 429, "timestamp": "2019-07-18T20:08:24Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "48.242.79.253", "user_agent": "aws-cli/1.16.160 Python/3.7.3 Darwin/18.6.0 botocore/1.12.150", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1076, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "06000-8fde-47c0-ad25-594cf1da0cf2", "eventTime": "2019-07-18T20:08:24Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "48.242.79.253", "userAgent": "aws-cli/1.16.160 Python/3.7.3 Darwin/18.6.0 botocore/1.12.150", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"nextToken": "eyJ2IjoiMiIsImMiOiJYSjgzckpBQWkvdENEVnh3SlYxbERGUnVOc3V4M2NaczFHNDQyRzBJaHNGUm95dFA1TzFzN3BUcENRRENhR0xPVmhOQWF4Z1ZPdnZlSCttQkFEMVAxdGJoWGQ3NkVqUmtrTmxsQ3F4WmZISytpM09LYXBGRExUUlcyRFh3aGlQYnp1bDc0RU9sQ0IxaUxIcnVCT2RheURKVDZMTmhvNEVJK0wwdndyK2JVMk1QWVQ3U2NNQXltL1FlZTJUYjJTc0FETUFZd2Y2N2NpYTdMQT09IiwicyI6IjEifQ==", "maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "06000-8fde-47c0-ad25-594cf1da0cf2", "record_id": "flaws_cloudtrail:0000430:06000-8fde-47c0-ad25-594cf1da0cf2", "row_index": 430, "timestamp": "2019-07-18T20:08:24Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "48.242.79.253", "user_agent": "aws-cli/1.16.160 Python/3.7.3 Darwin/18.6.0 botocore/1.12.150", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1076, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "06000-8fde-47c0-ad25-594cf1da0cf2", "eventTime": "2019-07-18T20:08:24Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "48.242.79.253", "userAgent": "aws-cli/1.16.160 Python/3.7.3 Darwin/18.6.0 botocore/1.12.150", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"nextToken": "eyJ2IjoiMiIsImMiOiJYSjgzckpBQWkvdENEVnh3SlYxbERGUnVOc3V4M2NaczFHNDQyRzBJaHNGUm95dFA1TzFzN3BUcENRRENhR0xPVmhOQWF4Z1ZPdnZlSCttQkFEMVAxdGJoWGQ3NkVqUmtrTmxsQ3F4WmZISytpM09LYXBGRExUUlcyRFh3aGlQYnp1bDc0RU9sQ0IxaUxIcnVCT2RheURKVDZMTmhvNEVJK0wwdndyK2JVMk1QWVQ3U2NNQXltL1FlZTJUYjJTc0FETUFZd2Y2N2NpYTdMQT09IiwicyI6IjEifQ==", "maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "a6841a08-5296-4e34-b8ad-1b2e3ee59fe4", "record_id": "flaws_cloudtrail:0000431:a6841a08-5296-4e34-b8ad-1b2e3ee59fe4", "row_index": 431, "timestamp": "2019-07-18T20:08:28Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "48.242.79.253", "user_agent": "aws-cli/1.16.160 Python/3.7.3 Darwin/18.6.0 botocore/1.12.150", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1071, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "a6841a08-5296-4e34-b8ad-1b2e3ee59fe4", "eventTime": "2019-07-18T20:08:28Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "48.242.79.253", "userAgent": "aws-cli/1.16.160 Python/3.7.3 Darwin/18.6.0 botocore/1.12.150", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"nextToken": "eyJ2IjoiMiIsImMiOiJabVpiaFNyZGwzK29DOThLb0RGK2RhYmhPQ3A5NW00ZThQQTVvODRFT0VGZytMcnZDYWxiMXUzNVRkeGxCQ3R0NHlFcitpVm9xZGdBVk1tL1dzRHZEQ25XVDVoWHRqQkU3SW15dURqMnJCclFhcnZXL1I5LzBkYVcwRThobWwzME5Jekl4UWw0ZE83dExTOGpOdmI0dUVScVpMeklnVVlsZW5ydk9Bc0N3NGVFR1QxOVVQOEhzS0lDQi9JZzFMNHFBbFJybkJpNjF3PT0iLCJzIjoiMSJ9", "maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "a6841a08-5296-4e34-b8ad-1b2e3ee59fe4", "record_id": "flaws_cloudtrail:0000432:a6841a08-5296-4e34-b8ad-1b2e3ee59fe4", "row_index": 432, "timestamp": "2019-07-18T20:08:28Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "48.242.79.253", "user_agent": "aws-cli/1.16.160 Python/3.7.3 Darwin/18.6.0 botocore/1.12.150", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1071, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "a6841a08-5296-4e34-b8ad-1b2e3ee59fe4", "eventTime": "2019-07-18T20:08:28Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "48.242.79.253", "userAgent": "aws-cli/1.16.160 Python/3.7.3 Darwin/18.6.0 botocore/1.12.150", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"nextToken": "eyJ2IjoiMiIsImMiOiJabVpiaFNyZGwzK29DOThLb0RGK2RhYmhPQ3A5NW00ZThQQTVvODRFT0VGZytMcnZDYWxiMXUzNVRkeGxCQ3R0NHlFcitpVm9xZGdBVk1tL1dzRHZEQ25XVDVoWHRqQkU3SW15dURqMnJCclFhcnZXL1I5LzBkYVcwRThobWwzME5Jekl4UWw0ZE83dExTOGpOdmI0dUVScVpMeklnVVlsZW5ydk9Bc0N3NGVFR1QxOVVQOEhzS0lDQi9JZzFMNHFBbFJybkJpNjF3PT0iLCJzIjoiMSJ9", "maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "0ed3e5ff-de73-4506-8117-af69a5a0433e", "record_id": "flaws_cloudtrail:0000433:0ed3e5ff-de73-4506-8117-af69a5a0433e", "row_index": 433, "timestamp": "2019-07-18T20:08:34Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "48.242.79.253", "user_agent": "aws-cli/1.16.160 Python/3.7.3 Darwin/18.6.0 botocore/1.12.150", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1079, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "0ed3e5ff-de73-4506-8117-af69a5a0433e", "eventTime": "2019-07-18T20:08:34Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "48.242.79.253", "userAgent": "aws-cli/1.16.160 Python/3.7.3 Darwin/18.6.0 botocore/1.12.150", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"nextToken": "eyJ2IjoiMiIsImMiOiJWcnZ6WTYwaEg1ellhTjdYLzhIbWl4NGhPeXI4MDlVUkt4MmZaUWx4L2lzUlppVkxWenAwM1JzMXYxZE90UlhEZGh1L2g3T3hsUjhjWHNCcTB1MlFCN2o5VlpmVUVIY3VyNjEwN0VnYTF2cnNadnlxZHlIK2ZRV2FtNEU3dkRpaTBPZEpocFVoR1BKZGNGc2VwOEsweXJvNzBqYVJieVpCN3NueDVFUmJEQU1FbzhVTGkwbGVQTWErZy8xVmRwYk9PZ1dsQVRLR1RDdXFiQT09IiwicyI6IjEifQ==", "maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "0ed3e5ff-de73-4506-8117-af69a5a0433e", "record_id": "flaws_cloudtrail:0000434:0ed3e5ff-de73-4506-8117-af69a5a0433e", "row_index": 434, "timestamp": "2019-07-18T20:08:34Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "48.242.79.253", "user_agent": "aws-cli/1.16.160 Python/3.7.3 Darwin/18.6.0 botocore/1.12.150", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1079, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "0ed3e5ff-de73-4506-8117-af69a5a0433e", "eventTime": "2019-07-18T20:08:34Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "48.242.79.253", "userAgent": "aws-cli/1.16.160 Python/3.7.3 Darwin/18.6.0 botocore/1.12.150", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"nextToken": "eyJ2IjoiMiIsImMiOiJWcnZ6WTYwaEg1ellhTjdYLzhIbWl4NGhPeXI4MDlVUkt4MmZaUWx4L2lzUlppVkxWenAwM1JzMXYxZE90UlhEZGh1L2g3T3hsUjhjWHNCcTB1MlFCN2o5VlpmVUVIY3VyNjEwN0VnYTF2cnNadnlxZHlIK2ZRV2FtNEU3dkRpaTBPZEpocFVoR1BKZGNGc2VwOEsweXJvNzBqYVJieVpCN3NueDVFUmJEQU1FbzhVTGkwbGVQTWErZy8xVmRwYk9PZ1dsQVRLR1RDdXFiQT09IiwicyI6IjEifQ==", "maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "a84943c0-44c7-4187-97c0-6c0a57ebc404", "record_id": "flaws_cloudtrail:0000435:a84943c0-44c7-4187-97c0-6c0a57ebc404", "row_index": 435, "timestamp": "2019-07-18T20:08:38Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "48.242.79.253", "user_agent": "aws-cli/1.16.160 Python/3.7.3 Darwin/18.6.0 botocore/1.12.150", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 752, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "a84943c0-44c7-4187-97c0-6c0a57ebc404", "eventTime": "2019-07-18T20:08:38Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "48.242.79.253", "userAgent": "aws-cli/1.16.160 Python/3.7.3 Darwin/18.6.0 botocore/1.12.150", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "a84943c0-44c7-4187-97c0-6c0a57ebc404", "record_id": "flaws_cloudtrail:0000436:a84943c0-44c7-4187-97c0-6c0a57ebc404", "row_index": 436, "timestamp": "2019-07-18T20:08:38Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "48.242.79.253", "user_agent": "aws-cli/1.16.160 Python/3.7.3 Darwin/18.6.0 botocore/1.12.150", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 752, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "a84943c0-44c7-4187-97c0-6c0a57ebc404", "eventTime": "2019-07-18T20:08:38Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "48.242.79.253", "userAgent": "aws-cli/1.16.160 Python/3.7.3 Darwin/18.6.0 botocore/1.12.150", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "c83a3d68-006d-4400-9639-8723b797014bc", "record_id": "flaws_cloudtrail:0000437:c83a3d68-006d-4400-9639-8723b797014bc", "row_index": 437, "timestamp": "2019-07-18T20:08:43Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "48.242.79.253", "user_agent": "aws-cli/1.16.160 Python/3.7.3 Darwin/18.6.0 botocore/1.12.150", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1077, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "c83a3d68-006d-4400-9639-8723b797014bc", "eventTime": "2019-07-18T20:08:43Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "48.242.79.253", "userAgent": "aws-cli/1.16.160 Python/3.7.3 Darwin/18.6.0 botocore/1.12.150", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"nextToken": "eyJ2IjoiMiIsImMiOiI3MHRhWFR4UFZmV05oNStMR3hmdVV2d05mMG9wTGZKYUlob3JrcWxRdnlVdzNFdW82ME1HRmRZODRNTUdQTlhFNzNnZXBtaURURkI4RzlRdURySGpoaVBWbTdmeS9wNmNQa0VoeTUxUUJRZTVoaUo2SmtZNnpab0dCOENpeHZqK1VlREhpR2NBUGQrcVVqKzJ6N2JTb1o3WnUzZ3U4emlnZllUUHdqWmQ1SkV3YlJCVmN5YmhTTWQrMStFemYvWGtCNUpocHd2MEhmWnBKQT09IiwicyI6IjEifQ==", "maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "c83a3d68-006d-4400-9639-8723b797014bc", "record_id": "flaws_cloudtrail:0000438:c83a3d68-006d-4400-9639-8723b797014bc", "row_index": 438, "timestamp": "2019-07-18T20:08:43Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "48.242.79.253", "user_agent": "aws-cli/1.16.160 Python/3.7.3 Darwin/18.6.0 botocore/1.12.150", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1077, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "c83a3d68-006d-4400-9639-8723b797014bc", "eventTime": "2019-07-18T20:08:43Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "48.242.79.253", "userAgent": "aws-cli/1.16.160 Python/3.7.3 Darwin/18.6.0 botocore/1.12.150", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"nextToken": "eyJ2IjoiMiIsImMiOiI3MHRhWFR4UFZmV05oNStMR3hmdVV2d05mMG9wTGZKYUlob3JrcWxRdnlVdzNFdW82ME1HRmRZODRNTUdQTlhFNzNnZXBtaURURkI4RzlRdURySGpoaVBWbTdmeS9wNmNQa0VoeTUxUUJRZTVoaUo2SmtZNnpab0dCOENpeHZqK1VlREhpR2NBUGQrcVVqKzJ6N2JTb1o3WnUzZ3U4emlnZllUUHdqWmQ1SkV3YlJCVmN5YmhTTWQrMStFemYvWGtCNUpocHd2MEhmWnBKQT09IiwicyI6IjEifQ==", "maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "5802c1f8-fe51-4f21-8a7a-a50caa9b0645", "record_id": "flaws_cloudtrail:0000439:5802c1f8-fe51-4f21-8a7a-a50caa9b0645", "row_index": 439, "timestamp": "2019-07-18T20:08:45Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "48.242.79.253", "user_agent": "aws-cli/1.16.160 Python/3.7.3 Darwin/18.6.0 botocore/1.12.150", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1079, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "5802c1f8-fe51-4f21-8a7a-a50caa9b0645", "eventTime": "2019-07-18T20:08:45Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "48.242.79.253", "userAgent": "aws-cli/1.16.160 Python/3.7.3 Darwin/18.6.0 botocore/1.12.150", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"nextToken": "eyJ2IjoiMiIsImMiOiJPeWpMVk96bFdBTkljZVg3ZEJ4N2RiL1Mva1V4MnlBanp2bUVUT0liTmV0b3VTbzAxdldRZlZjQUhRVjhiOG9QVVVadnp2Y09ldi9lWk1WbXl6a1ZCa2FGWEhjNWVLcGRxNUNjTFVIUjJENStqK0haYVN3dWxNdEtJb3JNemErS0lHYVZKV0lnUXFlMUtmZzFKRXNXZUpyaXB6Y25IOVZiNEs3ZEJuVjkrSkNnRWJTOTd0Z2M1cVhMeEREVEJDTXo1anBHY210VkJVWHJ4QT09IiwicyI6IjEifQ==", "maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "5802c1f8-fe51-4f21-8a7a-a50caa9b0645", "record_id": "flaws_cloudtrail:0000440:5802c1f8-fe51-4f21-8a7a-a50caa9b0645", "row_index": 440, "timestamp": "2019-07-18T20:08:45Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "48.242.79.253", "user_agent": "aws-cli/1.16.160 Python/3.7.3 Darwin/18.6.0 botocore/1.12.150", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1079, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "5802c1f8-fe51-4f21-8a7a-a50caa9b0645", "eventTime": "2019-07-18T20:08:45Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "48.242.79.253", "userAgent": "aws-cli/1.16.160 Python/3.7.3 Darwin/18.6.0 botocore/1.12.150", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"nextToken": "eyJ2IjoiMiIsImMiOiJPeWpMVk96bFdBTkljZVg3ZEJ4N2RiL1Mva1V4MnlBanp2bUVUT0liTmV0b3VTbzAxdldRZlZjQUhRVjhiOG9QVVVadnp2Y09ldi9lWk1WbXl6a1ZCa2FGWEhjNWVLcGRxNUNjTFVIUjJENStqK0haYVN3dWxNdEtJb3JNemErS0lHYVZKV0lnUXFlMUtmZzFKRXNXZUpyaXB6Y25IOVZiNEs3ZEJuVjkrSkNnRWJTOTd0Z2M1cVhMeEREVEJDTXo1anBHY210VkJVWHJ4QT09IiwicyI6IjEifQ==", "maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "20e55ef7-0b16-4f04-a1ab-51cc73e1462a", "record_id": "flaws_cloudtrail:0000441:20e55ef7-0b16-4f04-a1ab-51cc73e1462a", "row_index": 441, "timestamp": "2019-07-18T20:08:48Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "48.242.79.253", "user_agent": "aws-cli/1.16.160 Python/3.7.3 Darwin/18.6.0 botocore/1.12.150", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1076, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "20e55ef7-0b16-4f04-a1ab-51cc73e1462a", "eventTime": "2019-07-18T20:08:48Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "48.242.79.253", "userAgent": "aws-cli/1.16.160 Python/3.7.3 Darwin/18.6.0 botocore/1.12.150", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"nextToken": "eyJ2IjoiMiIsImMiOiJCV0Zjd2dONDVMUUs3K2tLVFBZMHpya2g3M0dsTXVUT1hGSzRjOSsyMDdoeFV4b1p4RnB4WVlSci9ZUWQvK0h6K1Z5TWdZcU5FZEFTU3Z0aGM3ZkpPOVl0OE9SUTJXUGtkSWZrOStqRmZndjdocUdYamY4WE1jZC9NQXBXOHdDWm1TN0hoaGROdEptWG44Yy8raFB4YzBMbnFESjQvOVFFR3JiQnpDU3RMbW5zTXdwOTRQYnhzRmpxZjFnUXdwR3M5VmVaM2YwQnYwS1FBQT09IiwicyI6IjEifQ==", "maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "20e55ef7-0b16-4f04-a1ab-51cc73e1462a", "record_id": "flaws_cloudtrail:0000442:20e55ef7-0b16-4f04-a1ab-51cc73e1462a", "row_index": 442, "timestamp": "2019-07-18T20:08:48Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "48.242.79.253", "user_agent": "aws-cli/1.16.160 Python/3.7.3 Darwin/18.6.0 botocore/1.12.150", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1076, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "20e55ef7-0b16-4f04-a1ab-51cc73e1462a", "eventTime": "2019-07-18T20:08:48Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "48.242.79.253", "userAgent": "aws-cli/1.16.160 Python/3.7.3 Darwin/18.6.0 botocore/1.12.150", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"nextToken": "eyJ2IjoiMiIsImMiOiJCV0Zjd2dONDVMUUs3K2tLVFBZMHpya2g3M0dsTXVUT1hGSzRjOSsyMDdoeFV4b1p4RnB4WVlSci9ZUWQvK0h6K1Z5TWdZcU5FZEFTU3Z0aGM3ZkpPOVl0OE9SUTJXUGtkSWZrOStqRmZndjdocUdYamY4WE1jZC9NQXBXOHdDWm1TN0hoaGROdEptWG44Yy8raFB4YzBMbnFESjQvOVFFR3JiQnpDU3RMbW5zTXdwOTRQYnhzRmpxZjFnUXdwR3M5VmVaM2YwQnYwS1FBQT09IiwicyI6IjEifQ==", "maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "f44ef982-06a1-444a-af4b-39561e9de7e6", "record_id": "flaws_cloudtrail:0000443:f44ef982-06a1-444a-af4b-39561e9de7e6", "row_index": 443, "timestamp": "2019-07-18T20:08:51Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "48.242.79.253", "user_agent": "aws-cli/1.16.160 Python/3.7.3 Darwin/18.6.0 botocore/1.12.150", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1071, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "f44ef982-06a1-444a-af4b-39561e9de7e6", "eventTime": "2019-07-18T20:08:51Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "48.242.79.253", "userAgent": "aws-cli/1.16.160 Python/3.7.3 Darwin/18.6.0 botocore/1.12.150", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"nextToken": "eyJ2IjoiMiIsImMiOiJGSEFDaW05Sys2SzBaRWVYT0Rmdy9hVFNDZFQwcGxOM1VDdE1EdlcvODZYb08yazNObE5QMVA1V3NUQUZlYklzQXdCZnI1YVgxVWpxY1Q5TnRoUElKNkoyNXpxekt5MU00cnhINlZoaUUzQytrZTJRVzhYLzJ6c1dzYWFBNStwUDdRQmdscHQ0TkhoYStPdUFEL0hpWFFVcndBZ2FXZXdqbEN5ZnV4SHJ3OUhIdG5IL016djNtczloUnVQMHVlNjUrbWRlZ3RvcUJnPT0iLCJzIjoiMSJ9", "maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "f44ef982-06a1-444a-af4b-39561e9de7e6", "record_id": "flaws_cloudtrail:0000444:f44ef982-06a1-444a-af4b-39561e9de7e6", "row_index": 444, "timestamp": "2019-07-18T20:08:51Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "48.242.79.253", "user_agent": "aws-cli/1.16.160 Python/3.7.3 Darwin/18.6.0 botocore/1.12.150", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1071, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "f44ef982-06a1-444a-af4b-39561e9de7e6", "eventTime": "2019-07-18T20:08:51Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "48.242.79.253", "userAgent": "aws-cli/1.16.160 Python/3.7.3 Darwin/18.6.0 botocore/1.12.150", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"nextToken": "eyJ2IjoiMiIsImMiOiJGSEFDaW05Sys2SzBaRWVYT0Rmdy9hVFNDZFQwcGxOM1VDdE1EdlcvODZYb08yazNObE5QMVA1V3NUQUZlYklzQXdCZnI1YVgxVWpxY1Q5TnRoUElKNkoyNXpxekt5MU00cnhINlZoaUUzQytrZTJRVzhYLzJ6c1dzYWFBNStwUDdRQmdscHQ0TkhoYStPdUFEL0hpWFFVcndBZ2FXZXdqbEN5ZnV4SHJ3OUhIdG5IL016djNtczloUnVQMHVlNjUrbWRlZ3RvcUJnPT0iLCJzIjoiMSJ9", "maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "cdc50472-7e55-4c33-a9ee-7b5e02103b15", "record_id": "flaws_cloudtrail:0000445:cdc50472-7e55-4c33-a9ee-7b5e02103b15", "row_index": 445, "timestamp": "2019-07-18T20:08:54Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "48.242.79.253", "user_agent": "aws-cli/1.16.160 Python/3.7.3 Darwin/18.6.0 botocore/1.12.150", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1079, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "cdc50472-7e55-4c33-a9ee-7b5e02103b15", "eventTime": "2019-07-18T20:08:54Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "48.242.79.253", "userAgent": "aws-cli/1.16.160 Python/3.7.3 Darwin/18.6.0 botocore/1.12.150", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"nextToken": "eyJ2IjoiMiIsImMiOiJvOGFROHFwaU9xWjMvcnQvTnJZejVjcGNXekEzRTY4Wkxaa1VBRHlsckRhYlRKMjZqN0VnaGZoaklHNDU1S3dsVzJ0aFFwdm5YMWtQMGMxUkQ0RGpHQ1JRSlNzSEZ4ZU1IYk9OcUtIT3ZMVW1FcFNnc0psTXpHYmUvK0dGeGZmeXp2RmhOS1lBTVQyRkFrL3M5UUtuVmVqTy9LYjJMcUh6QWxnaHJmR3dEMithMFpUNU9zdGhVczlUVDZlZExMalNIeDhZK2R6RjA2eDhtdz09IiwicyI6IjEifQ==", "maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "cdc50472-7e55-4c33-a9ee-7b5e02103b15", "record_id": "flaws_cloudtrail:0000446:cdc50472-7e55-4c33-a9ee-7b5e02103b15", "row_index": 446, "timestamp": "2019-07-18T20:08:54Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "48.242.79.253", "user_agent": "aws-cli/1.16.160 Python/3.7.3 Darwin/18.6.0 botocore/1.12.150", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1079, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "cdc50472-7e55-4c33-a9ee-7b5e02103b15", "eventTime": "2019-07-18T20:08:54Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "48.242.79.253", "userAgent": "aws-cli/1.16.160 Python/3.7.3 Darwin/18.6.0 botocore/1.12.150", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"nextToken": "eyJ2IjoiMiIsImMiOiJvOGFROHFwaU9xWjMvcnQvTnJZejVjcGNXekEzRTY4Wkxaa1VBRHlsckRhYlRKMjZqN0VnaGZoaklHNDU1S3dsVzJ0aFFwdm5YMWtQMGMxUkQ0RGpHQ1JRSlNzSEZ4ZU1IYk9OcUtIT3ZMVW1FcFNnc0psTXpHYmUvK0dGeGZmeXp2RmhOS1lBTVQyRkFrL3M5UUtuVmVqTy9LYjJMcUh6QWxnaHJmR3dEMithMFpUNU9zdGhVczlUVDZlZExMalNIeDhZK2R6RjA2eDhtdz09IiwicyI6IjEifQ==", "maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "2c38e1e1-787c-4eb6-8b0a-2315d78a710f", "record_id": "flaws_cloudtrail:0000447:2c38e1e1-787c-4eb6-8b0a-2315d78a710f", "row_index": 447, "timestamp": "2019-07-18T20:08:56Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "48.242.79.253", "user_agent": "aws-cli/1.16.160 Python/3.7.3 Darwin/18.6.0 botocore/1.12.150", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1077, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "2c38e1e1-787c-4eb6-8b0a-2315d78a710f", "eventTime": "2019-07-18T20:08:56Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "48.242.79.253", "userAgent": "aws-cli/1.16.160 Python/3.7.3 Darwin/18.6.0 botocore/1.12.150", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"nextToken": "eyJ2IjoiMiIsImMiOiJ6d2ZhTGZEVTkyZFZMdVd6Sk40QmFpZmpZNUdiS1hQR25UdVAwK0lwMytUblJWY3N4NGE3ajkrZWhZRGJZVjN6clRsbSt2amF0eDN1RFN5UUFmRW91c0w5aXBNWWdIcU9rbm5tVnhCalJ0NW5UVFhJeVQxcHlNRWJwSTRMZTYwZ2JobXZnajlIZk5RWEVUckNQMXVudTFlRlVwQWxwNkkrT0RvUVJPcW90S1RVTUNnWGt3RVlxRHNPMWUwY3RrVmNVVjdaU2MwN3krOS9uZz09IiwicyI6IjEifQ==", "maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "2c38e1e1-787c-4eb6-8b0a-2315d78a710f", "record_id": "flaws_cloudtrail:0000448:2c38e1e1-787c-4eb6-8b0a-2315d78a710f", "row_index": 448, "timestamp": "2019-07-18T20:08:56Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "48.242.79.253", "user_agent": "aws-cli/1.16.160 Python/3.7.3 Darwin/18.6.0 botocore/1.12.150", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1077, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "2c38e1e1-787c-4eb6-8b0a-2315d78a710f", "eventTime": "2019-07-18T20:08:56Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "48.242.79.253", "userAgent": "aws-cli/1.16.160 Python/3.7.3 Darwin/18.6.0 botocore/1.12.150", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"nextToken": "eyJ2IjoiMiIsImMiOiJ6d2ZhTGZEVTkyZFZMdVd6Sk40QmFpZmpZNUdiS1hQR25UdVAwK0lwMytUblJWY3N4NGE3ajkrZWhZRGJZVjN6clRsbSt2amF0eDN1RFN5UUFmRW91c0w5aXBNWWdIcU9rbm5tVnhCalJ0NW5UVFhJeVQxcHlNRWJwSTRMZTYwZ2JobXZnajlIZk5RWEVUckNQMXVudTFlRlVwQWxwNkkrT0RvUVJPcW90S1RVTUNnWGt3RVlxRHNPMWUwY3RrVmNVVjdaU2MwN3krOS9uZz09IiwicyI6IjEifQ==", "maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "35603af-7eed-496c-909a-d56f4fc23fcf", "record_id": "flaws_cloudtrail:0000449:35603af-7eed-496c-909a-d56f4fc23fcf", "row_index": 449, "timestamp": "2019-07-18T20:08:58Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "48.242.79.253", "user_agent": "aws-cli/1.16.160 Python/3.7.3 Darwin/18.6.0 botocore/1.12.150", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1066, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "35603af-7eed-496c-909a-d56f4fc23fcf", "eventTime": "2019-07-18T20:08:58Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "48.242.79.253", "userAgent": "aws-cli/1.16.160 Python/3.7.3 Darwin/18.6.0 botocore/1.12.150", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"nextToken": "eyJ2IjoiMiIsImMiOiJLMG5TaG1QbDRFSTNWNUdaZWYvd3UwaFc4Q0gvRDF2UmdHU25Ud1BUWHh6c3NhdGdxYWFNTUNKSFNNU0dmRGppc3ltK0hpc2ZEOXgybDVVT2F1YWlQWHhvZ0VKdEgxcTBKeFZHVjhUYlZXeDRzbEFLc0o5My8vS0tYT1BuK2p1eC8xMm5nME9kYlpLdWw2SXRKMDFFUXRObFBXUi90eXNqRkxrQmtNTkNMT20yWXdCTElaNGo2QkVzejFOMnhYWXQ1SFNDakorVFhPUT0iLCJzIjoiMSJ9", "maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "35603af-7eed-496c-909a-d56f4fc23fcf", "record_id": "flaws_cloudtrail:0000450:35603af-7eed-496c-909a-d56f4fc23fcf", "row_index": 450, "timestamp": "2019-07-18T20:08:58Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "48.242.79.253", "user_agent": "aws-cli/1.16.160 Python/3.7.3 Darwin/18.6.0 botocore/1.12.150", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1066, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "35603af-7eed-496c-909a-d56f4fc23fcf", "eventTime": "2019-07-18T20:08:58Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "48.242.79.253", "userAgent": "aws-cli/1.16.160 Python/3.7.3 Darwin/18.6.0 botocore/1.12.150", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"nextToken": "eyJ2IjoiMiIsImMiOiJLMG5TaG1QbDRFSTNWNUdaZWYvd3UwaFc4Q0gvRDF2UmdHU25Ud1BUWHh6c3NhdGdxYWFNTUNKSFNNU0dmRGppc3ltK0hpc2ZEOXgybDVVT2F1YWlQWHhvZ0VKdEgxcTBKeFZHVjhUYlZXeDRzbEFLc0o5My8vS0tYT1BuK2p1eC8xMm5nME9kYlpLdWw2SXRKMDFFUXRObFBXUi90eXNqRkxrQmtNTkNMT20yWXdCTElaNGo2QkVzejFOMnhYWXQ1SFNDakorVFhPUT0iLCJzIjoiMSJ9", "maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "efadd681-7e61-4382-bef4-0a408635e6ce4", "record_id": "flaws_cloudtrail:0000451:efadd681-7e61-4382-bef4-0a408635e6ce4", "row_index": 451, "timestamp": "2019-07-18T20:09:00Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "48.242.79.253", "user_agent": "aws-cli/1.16.160 Python/3.7.3 Darwin/18.6.0 botocore/1.12.150", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1080, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "efadd681-7e61-4382-bef4-0a408635e6ce4", "eventTime": "2019-07-18T20:09:00Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "48.242.79.253", "userAgent": "aws-cli/1.16.160 Python/3.7.3 Darwin/18.6.0 botocore/1.12.150", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"nextToken": "eyJ2IjoiMiIsImMiOiJsKzJmWUR6bWx3djVJNkRhNFd3ajB4YkNsd2xlemgxek14d1Y1N25KRWJaWXZOQUEzYkx2K2dBMmdzSUZCa2pMaVhZN2R2OWlOekRleVJQdzN3ZzNmNVRFTEtxUDIyZ1U1d1ZFWCtUNXRXYXMyMmhJSGUvUkptUDNGbW9VZG90QWRhbFBnbzhBbWh4ZnhBczJsQS9xMU9HeWYveHJtZnNsVnBjVC9rbmJ1eEU4b2ZYM3UwTSs4ZDhWNXZJMkJhUTNIVGplOFJyL3JrY051dz09IiwicyI6IjEifQ==", "maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "efadd681-7e61-4382-bef4-0a408635e6ce4", "record_id": "flaws_cloudtrail:0000452:efadd681-7e61-4382-bef4-0a408635e6ce4", "row_index": 452, "timestamp": "2019-07-18T20:09:00Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "48.242.79.253", "user_agent": "aws-cli/1.16.160 Python/3.7.3 Darwin/18.6.0 botocore/1.12.150", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1080, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "efadd681-7e61-4382-bef4-0a408635e6ce4", "eventTime": "2019-07-18T20:09:00Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "48.242.79.253", "userAgent": "aws-cli/1.16.160 Python/3.7.3 Darwin/18.6.0 botocore/1.12.150", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"nextToken": "eyJ2IjoiMiIsImMiOiJsKzJmWUR6bWx3djVJNkRhNFd3ajB4YkNsd2xlemgxek14d1Y1N25KRWJaWXZOQUEzYkx2K2dBMmdzSUZCa2pMaVhZN2R2OWlOekRleVJQdzN3ZzNmNVRFTEtxUDIyZ1U1d1ZFWCtUNXRXYXMyMmhJSGUvUkptUDNGbW9VZG90QWRhbFBnbzhBbWh4ZnhBczJsQS9xMU9HeWYveHJtZnNsVnBjVC9rbmJ1eEU4b2ZYM3UwTSs4ZDhWNXZJMkJhUTNIVGplOFJyL3JrY051dz09IiwicyI6IjEifQ==", "maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "614caa44-0bb8-4fd4-ae76-1272efe933e5", "record_id": "flaws_cloudtrail:0000453:614caa44-0bb8-4fd4-ae76-1272efe933e5", "row_index": 453, "timestamp": "2019-07-18T20:09:01Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "48.242.79.253", "user_agent": "aws-cli/1.16.160 Python/3.7.3 Darwin/18.6.0 botocore/1.12.150", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1071, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "614caa44-0bb8-4fd4-ae76-1272efe933e5", "eventTime": "2019-07-18T20:09:01Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "48.242.79.253", "userAgent": "aws-cli/1.16.160 Python/3.7.3 Darwin/18.6.0 botocore/1.12.150", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"nextToken": "eyJ2IjoiMiIsImMiOiJIa2NOVWxVRE5WNCt0dkk1SE1EblRyVUVVUzhhbkd3SS9zU0FPRGtoYlMvWE1oNjZqYVczOGtMT0xac0ROVE95bTl3WkJVYVhpOFIrRStIL0JxNnhOOEJPV0I1eVlLTEpabXNzbk1HTURkdzE0biswZUV5RDRnN3o2Yk9xWE14SXZiRUM5TllhT1drenBVOHV2U1hiTzNyYVl1YkJQWXc1aHlRcEVPc3NFN3lWVk5idk5WUm8raWZBaXR1RGwzeCtUUGJMZXRuWER3PT0iLCJzIjoiMSJ9", "maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "614caa44-0bb8-4fd4-ae76-1272efe933e5", "record_id": "flaws_cloudtrail:0000454:614caa44-0bb8-4fd4-ae76-1272efe933e5", "row_index": 454, "timestamp": "2019-07-18T20:09:01Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "48.242.79.253", "user_agent": "aws-cli/1.16.160 Python/3.7.3 Darwin/18.6.0 botocore/1.12.150", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1071, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "614caa44-0bb8-4fd4-ae76-1272efe933e5", "eventTime": "2019-07-18T20:09:01Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "48.242.79.253", "userAgent": "aws-cli/1.16.160 Python/3.7.3 Darwin/18.6.0 botocore/1.12.150", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"nextToken": "eyJ2IjoiMiIsImMiOiJIa2NOVWxVRE5WNCt0dkk1SE1EblRyVUVVUzhhbkd3SS9zU0FPRGtoYlMvWE1oNjZqYVczOGtMT0xac0ROVE95bTl3WkJVYVhpOFIrRStIL0JxNnhOOEJPV0I1eVlLTEpabXNzbk1HTURkdzE0biswZUV5RDRnN3o2Yk9xWE14SXZiRUM5TllhT1drenBVOHV2U1hiTzNyYVl1YkJQWXc1aHlRcEVPc3NFN3lWVk5idk5WUm8raWZBaXR1RGwzeCtUUGJMZXRuWER3PT0iLCJzIjoiMSJ9", "maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "97815b6-4ef3-49cf-b363-19d7dbc0b2f4", "record_id": "flaws_cloudtrail:0000455:97815b6-4ef3-49cf-b363-19d7dbc0b2f4", "row_index": 455, "timestamp": "2019-07-18T20:09:04Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "48.242.79.253", "user_agent": "aws-cli/1.16.160 Python/3.7.3 Darwin/18.6.0 botocore/1.12.150", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1075, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "97815b6-4ef3-49cf-b363-19d7dbc0b2f4", "eventTime": "2019-07-18T20:09:04Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "48.242.79.253", "userAgent": "aws-cli/1.16.160 Python/3.7.3 Darwin/18.6.0 botocore/1.12.150", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"nextToken": "eyJ2IjoiMiIsImMiOiJxNTh3UGxxQ0t4WmhiUkRTNys4alZxRVQzSjlXQW5yTk9TMVZva3RUOTV1dGVVV2VjVDBYTU45QmhIMFJjZnFzblN0Qi9yblhVdlBnVVhhMXFKaXB6OWF4UktKVDI0WFNsMFhnbm50clFEM2R0MHdFaE1MbzV0N3hoMFNhRE9mcmRKZUxSMitEamVEMkRPVE1ZdGV4bnI4czYzWDg4TzhFM0QvN3pUSXRBNTRRNHRnYzF2VHZkRFdjU2hCc1gvekxab2NKREFEMVlHOW1FQT09IiwicyI6IjEifQ==", "maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "97815b6-4ef3-49cf-b363-19d7dbc0b2f4", "record_id": "flaws_cloudtrail:0000456:97815b6-4ef3-49cf-b363-19d7dbc0b2f4", "row_index": 456, "timestamp": "2019-07-18T20:09:04Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "48.242.79.253", "user_agent": "aws-cli/1.16.160 Python/3.7.3 Darwin/18.6.0 botocore/1.12.150", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1075, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "97815b6-4ef3-49cf-b363-19d7dbc0b2f4", "eventTime": "2019-07-18T20:09:04Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "48.242.79.253", "userAgent": "aws-cli/1.16.160 Python/3.7.3 Darwin/18.6.0 botocore/1.12.150", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"nextToken": "eyJ2IjoiMiIsImMiOiJxNTh3UGxxQ0t4WmhiUkRTNys4alZxRVQzSjlXQW5yTk9TMVZva3RUOTV1dGVVV2VjVDBYTU45QmhIMFJjZnFzblN0Qi9yblhVdlBnVVhhMXFKaXB6OWF4UktKVDI0WFNsMFhnbm50clFEM2R0MHdFaE1MbzV0N3hoMFNhRE9mcmRKZUxSMitEamVEMkRPVE1ZdGV4bnI4czYzWDg4TzhFM0QvN3pUSXRBNTRRNHRnYzF2VHZkRFdjU2hCc1gvekxab2NKREFEMVlHOW1FQT09IiwicyI6IjEifQ==", "maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "008d1e16-7a0a-4ad6-a264-245e853e3e8b", "record_id": "flaws_cloudtrail:0000457:008d1e16-7a0a-4ad6-a264-245e853e3e8b", "row_index": 457, "timestamp": "2019-07-18T20:09:08Z", "event_type": "DescribeInstances", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "48.242.79.253", "user_agent": "aws-cli/1.16.160 Python/3.7.3 Darwin/18.6.0 botocore/1.12.150", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 700, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "008d1e16-7a0a-4ad6-a264-245e853e3e8b", "eventTime": "2019-07-18T20:09:08Z", "eventName": "DescribeInstances", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "48.242.79.253", "userAgent": "aws-cli/1.16.160 Python/3.7.3 Darwin/18.6.0 botocore/1.12.150", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"instancesSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "008d1e16-7a0a-4ad6-a264-245e853e3e8b", "record_id": "flaws_cloudtrail:0000458:008d1e16-7a0a-4ad6-a264-245e853e3e8b", "row_index": 458, "timestamp": "2019-07-18T20:09:08Z", "event_type": "DescribeInstances", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "48.242.79.253", "user_agent": "aws-cli/1.16.160 Python/3.7.3 Darwin/18.6.0 botocore/1.12.150", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 700, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "008d1e16-7a0a-4ad6-a264-245e853e3e8b", "eventTime": "2019-07-18T20:09:08Z", "eventName": "DescribeInstances", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "48.242.79.253", "userAgent": "aws-cli/1.16.160 Python/3.7.3 Darwin/18.6.0 botocore/1.12.150", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"instancesSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "2cc47a09-9c3e-47b4-b320-ec4f6a8946c7", "record_id": "flaws_cloudtrail:0000459:2cc47a09-9c3e-47b4-b320-ec4f6a8946c7", "row_index": 459, "timestamp": "2019-07-18T20:09:25Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "48.242.79.253", "user_agent": "aws-cli/1.16.160 Python/3.7.3 Darwin/18.6.0 botocore/1.12.150", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 752, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "2cc47a09-9c3e-47b4-b320-ec4f6a8946c7", "eventTime": "2019-07-18T20:09:25Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "48.242.79.253", "userAgent": "aws-cli/1.16.160 Python/3.7.3 Darwin/18.6.0 botocore/1.12.150", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "2cc47a09-9c3e-47b4-b320-ec4f6a8946c7", "record_id": "flaws_cloudtrail:0000460:2cc47a09-9c3e-47b4-b320-ec4f6a8946c7", "row_index": 460, "timestamp": "2019-07-18T20:09:25Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "48.242.79.253", "user_agent": "aws-cli/1.16.160 Python/3.7.3 Darwin/18.6.0 botocore/1.12.150", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 752, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "2cc47a09-9c3e-47b4-b320-ec4f6a8946c7", "eventTime": "2019-07-18T20:09:25Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "48.242.79.253", "userAgent": "aws-cli/1.16.160 Python/3.7.3 Darwin/18.6.0 botocore/1.12.150", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "943f9703-8e17-4351-b17c-69c0b9ff0048", "record_id": "flaws_cloudtrail:0000461:943f9703-8e17-4351-b17c-69c0b9ff0048", "row_index": 461, "timestamp": "2019-07-18T20:09:30Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "48.242.79.253", "user_agent": "aws-cli/1.16.160 Python/3.7.3 Darwin/18.6.0 botocore/1.12.150", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1079, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "943f9703-8e17-4351-b17c-69c0b9ff0048", "eventTime": "2019-07-18T20:09:30Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "48.242.79.253", "userAgent": "aws-cli/1.16.160 Python/3.7.3 Darwin/18.6.0 botocore/1.12.150", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"nextToken": "eyJ2IjoiMiIsImMiOiJaWGxhK0pDc2pFbkppZTMxbGVYbmRHNytJN3g4dVBJSE9uNlZoaEJxT0lFako2RGgyTG1YdDRnbVNtTkVWbFgxcDIvYlAwMVJzOGxDNUtMRnlOb2dmZ004d2lSOEJYbmlOWG5zNnlmUUxVcUhzUWZMTWpkNVYvVjNRcERrSG9xSitOcUZidDlDbmdxYm9pT0o0U0RYd3puNlJEWGdQMFZlVFpaNXV1bHlWQVZFSHQwWS9KSkRGUlcvOTB2UDVmQ3BDL0daV2cvMWhYcnNOQT09IiwicyI6IjEifQ==", "maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "943f9703-8e17-4351-b17c-69c0b9ff0048", "record_id": "flaws_cloudtrail:0000462:943f9703-8e17-4351-b17c-69c0b9ff0048", "row_index": 462, "timestamp": "2019-07-18T20:09:30Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "48.242.79.253", "user_agent": "aws-cli/1.16.160 Python/3.7.3 Darwin/18.6.0 botocore/1.12.150", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1079, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "943f9703-8e17-4351-b17c-69c0b9ff0048", "eventTime": "2019-07-18T20:09:30Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "48.242.79.253", "userAgent": "aws-cli/1.16.160 Python/3.7.3 Darwin/18.6.0 botocore/1.12.150", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"nextToken": "eyJ2IjoiMiIsImMiOiJaWGxhK0pDc2pFbkppZTMxbGVYbmRHNytJN3g4dVBJSE9uNlZoaEJxT0lFako2RGgyTG1YdDRnbVNtTkVWbFgxcDIvYlAwMVJzOGxDNUtMRnlOb2dmZ004d2lSOEJYbmlOWG5zNnlmUUxVcUhzUWZMTWpkNVYvVjNRcERrSG9xSitOcUZidDlDbmdxYm9pT0o0U0RYd3puNlJEWGdQMFZlVFpaNXV1bHlWQVZFSHQwWS9KSkRGUlcvOTB2UDVmQ3BDL0daV2cvMWhYcnNOQT09IiwicyI6IjEifQ==", "maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "cbc368ac-64c1-4226-afb7-f04d5991b0fb", "record_id": "flaws_cloudtrail:0000463:cbc368ac-64c1-4226-afb7-f04d5991b0fb", "row_index": 463, "timestamp": "2019-07-18T20:09:31Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "48.242.79.253", "user_agent": "aws-cli/1.16.160 Python/3.7.3 Darwin/18.6.0 botocore/1.12.150", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1079, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "cbc368ac-64c1-4226-afb7-f04d5991b0fb", "eventTime": "2019-07-18T20:09:31Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "48.242.79.253", "userAgent": "aws-cli/1.16.160 Python/3.7.3 Darwin/18.6.0 botocore/1.12.150", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"nextToken": "eyJ2IjoiMiIsImMiOiJBV3NBUGdSVFVLNXdvS1BLa3YxVXdEd2ZKUGhlWWE1TmNrMUQxaHlReTdpWTBjMEZrb25iVWhmV25jN21lUmw3eDV5c2s0Mkh2a0Y5R2VIZk1SNnBrMVhVWWIrblpqSzNFYUhKWkYwMnFQLzBWUW96U2RLTGZzUDdhRWU1MGNFRmp0VGR2T1dpTEZQWjBHWWJxb3dFWTFXZ2NocVhuS0UvUmVRc2ZIbmdhMjhkSjRyaFMyZjlFeDJHSWx1b2dOUGx2UHpHTGs5RTVQdlQxUT09IiwicyI6IjEifQ==", "maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "cbc368ac-64c1-4226-afb7-f04d5991b0fb", "record_id": "flaws_cloudtrail:0000464:cbc368ac-64c1-4226-afb7-f04d5991b0fb", "row_index": 464, "timestamp": "2019-07-18T20:09:31Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "48.242.79.253", "user_agent": "aws-cli/1.16.160 Python/3.7.3 Darwin/18.6.0 botocore/1.12.150", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1079, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "cbc368ac-64c1-4226-afb7-f04d5991b0fb", "eventTime": "2019-07-18T20:09:31Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "48.242.79.253", "userAgent": "aws-cli/1.16.160 Python/3.7.3 Darwin/18.6.0 botocore/1.12.150", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"nextToken": "eyJ2IjoiMiIsImMiOiJBV3NBUGdSVFVLNXdvS1BLa3YxVXdEd2ZKUGhlWWE1TmNrMUQxaHlReTdpWTBjMEZrb25iVWhmV25jN21lUmw3eDV5c2s0Mkh2a0Y5R2VIZk1SNnBrMVhVWWIrblpqSzNFYUhKWkYwMnFQLzBWUW96U2RLTGZzUDdhRWU1MGNFRmp0VGR2T1dpTEZQWjBHWWJxb3dFWTFXZ2NocVhuS0UvUmVRc2ZIbmdhMjhkSjRyaFMyZjlFeDJHSWx1b2dOUGx2UHpHTGs5RTVQdlQxUT09IiwicyI6IjEifQ==", "maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "81f82fe0-0a4a-4258-a4b4-10468bec654", "record_id": "flaws_cloudtrail:0000465:81f82fe0-0a4a-4258-a4b4-10468bec654", "row_index": 465, "timestamp": "2019-07-18T20:09:32Z", "event_type": "GetCallerIdentity", "event_source": "sts.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "250.7.156.251", "user_agent": "aws-cli/1.16.199 Python/2.7.15 Darwin/18.6.0 botocore/1.12.189", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 771, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "81f82fe0-0a4a-4258-a4b4-10468bec654", "eventTime": "2019-07-18T20:09:32Z", "eventName": "GetCallerIdentity", "eventSource": "sts.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "250.7.156.251", "userAgent": "aws-cli/1.16.199 Python/2.7.15 Darwin/18.6.0 botocore/1.12.189", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "responseElements": {"userId": "AIDA9BO36HFBHKGJAO9C1", "account": "811596193553", "arn": "arn:aws:iam::811596193553:user/backup"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "81f82fe0-0a4a-4258-a4b4-10468bec654", "record_id": "flaws_cloudtrail:0000466:81f82fe0-0a4a-4258-a4b4-10468bec654", "row_index": 466, "timestamp": "2019-07-18T20:09:32Z", "event_type": "GetCallerIdentity", "event_source": "sts.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "250.7.156.251", "user_agent": "aws-cli/1.16.199 Python/2.7.15 Darwin/18.6.0 botocore/1.12.189", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 771, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "81f82fe0-0a4a-4258-a4b4-10468bec654", "eventTime": "2019-07-18T20:09:32Z", "eventName": "GetCallerIdentity", "eventSource": "sts.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "250.7.156.251", "userAgent": "aws-cli/1.16.199 Python/2.7.15 Darwin/18.6.0 botocore/1.12.189", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "responseElements": {"userId": "AIDA9BO36HFBHKGJAO9C1", "account": "811596193553", "arn": "arn:aws:iam::811596193553:user/backup"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "9b7c941d-2d93-40d5-86e8-5af92c4e24de", "record_id": "flaws_cloudtrail:0000467:9b7c941d-2d93-40d5-86e8-5af92c4e24de", "row_index": 467, "timestamp": "2019-07-18T20:09:33Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "48.242.79.253", "user_agent": "aws-cli/1.16.160 Python/3.7.3 Darwin/18.6.0 botocore/1.12.150", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1080, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "9b7c941d-2d93-40d5-86e8-5af92c4e24de", "eventTime": "2019-07-18T20:09:33Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "48.242.79.253", "userAgent": "aws-cli/1.16.160 Python/3.7.3 Darwin/18.6.0 botocore/1.12.150", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"nextToken": "eyJ2IjoiMiIsImMiOiJVSlRvYkI4cmJjNG1lOVQ3YXhweEcvOWg1MzczRkhVOW9GZC9lYkNvd1pJNm1IZmwrTmI4Q3NRV3NPNXZNZEViRUpLSy8zWXBWS0JkcmFoNUhyNTVtWFhhK3hpNVFtU2oxanQyRDZ6MmlXTGpkRGJ0cmZYRkJSQ3BNMEJlOC91RTloOGVMeEM3cWZOUjMxaWFUUDU4OHpadXAzVXFxVDM5YTZyVWdLc3hCSjYwYVg3aVB5c0JISzVvR2dxVWlDQlVTdmF3aU0vT3ZGczEwUT09IiwicyI6IjEifQ==", "maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "9b7c941d-2d93-40d5-86e8-5af92c4e24de", "record_id": "flaws_cloudtrail:0000468:9b7c941d-2d93-40d5-86e8-5af92c4e24de", "row_index": 468, "timestamp": "2019-07-18T20:09:33Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "48.242.79.253", "user_agent": "aws-cli/1.16.160 Python/3.7.3 Darwin/18.6.0 botocore/1.12.150", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1080, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "9b7c941d-2d93-40d5-86e8-5af92c4e24de", "eventTime": "2019-07-18T20:09:33Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "48.242.79.253", "userAgent": "aws-cli/1.16.160 Python/3.7.3 Darwin/18.6.0 botocore/1.12.150", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"nextToken": "eyJ2IjoiMiIsImMiOiJVSlRvYkI4cmJjNG1lOVQ3YXhweEcvOWg1MzczRkhVOW9GZC9lYkNvd1pJNm1IZmwrTmI4Q3NRV3NPNXZNZEViRUpLSy8zWXBWS0JkcmFoNUhyNTVtWFhhK3hpNVFtU2oxanQyRDZ6MmlXTGpkRGJ0cmZYRkJSQ3BNMEJlOC91RTloOGVMeEM3cWZOUjMxaWFUUDU4OHpadXAzVXFxVDM5YTZyVWdLc3hCSjYwYVg3aVB5c0JISzVvR2dxVWlDQlVTdmF3aU0vT3ZGczEwUT09IiwicyI6IjEifQ==", "maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "e5f2958b-8036-42dd-a658-9a01cb36cb10", "record_id": "flaws_cloudtrail:0000469:e5f2958b-8036-42dd-a658-9a01cb36cb10", "row_index": 469, "timestamp": "2019-07-18T20:09:34Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "48.242.79.253", "user_agent": "aws-cli/1.16.160 Python/3.7.3 Darwin/18.6.0 botocore/1.12.150", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1071, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "e5f2958b-8036-42dd-a658-9a01cb36cb10", "eventTime": "2019-07-18T20:09:34Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "48.242.79.253", "userAgent": "aws-cli/1.16.160 Python/3.7.3 Darwin/18.6.0 botocore/1.12.150", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"nextToken": "eyJ2IjoiMiIsImMiOiJnOFNWaG83VGVCYXRQMDkvWlBISktGRWxBdXdXaEpJNUpiRXVnT1hScytDRkhDLzJDRVV3eVNjQk1NTmg1dDM0N2Erb2RidytoTzkwek5nM1RkSnkyME1xd1kzZy8vZWhmMzNQd1p0TEJ4TlRmZk91azRCYVJQU0JUNllvY0wvQ2E5NHAwc1RHRGpmQUk0MDVNQ1U2K09HL0tjaFpLbm53SFpFOWZiMjdaWjV6ZzJoZVJZTmFiNUFwQS9DNjkzazFQRU1odGpHc2VBPT0iLCJzIjoiMSJ9", "maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "e5f2958b-8036-42dd-a658-9a01cb36cb10", "record_id": "flaws_cloudtrail:0000470:e5f2958b-8036-42dd-a658-9a01cb36cb10", "row_index": 470, "timestamp": "2019-07-18T20:09:34Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "48.242.79.253", "user_agent": "aws-cli/1.16.160 Python/3.7.3 Darwin/18.6.0 botocore/1.12.150", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1071, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "e5f2958b-8036-42dd-a658-9a01cb36cb10", "eventTime": "2019-07-18T20:09:34Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "48.242.79.253", "userAgent": "aws-cli/1.16.160 Python/3.7.3 Darwin/18.6.0 botocore/1.12.150", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"nextToken": "eyJ2IjoiMiIsImMiOiJnOFNWaG83VGVCYXRQMDkvWlBISktGRWxBdXdXaEpJNUpiRXVnT1hScytDRkhDLzJDRVV3eVNjQk1NTmg1dDM0N2Erb2RidytoTzkwek5nM1RkSnkyME1xd1kzZy8vZWhmMzNQd1p0TEJ4TlRmZk91azRCYVJQU0JUNllvY0wvQ2E5NHAwc1RHRGpmQUk0MDVNQ1U2K09HL0tjaFpLbm53SFpFOWZiMjdaWjV6ZzJoZVJZTmFiNUFwQS9DNjkzazFQRU1odGpHc2VBPT0iLCJzIjoiMSJ9", "maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "52f358a7-a292-4a74-b618-82ebb02e6b6f", "record_id": "flaws_cloudtrail:0000471:52f358a7-a292-4a74-b618-82ebb02e6b6f", "row_index": 471, "timestamp": "2019-07-18T20:09:35Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "48.242.79.253", "user_agent": "aws-cli/1.16.160 Python/3.7.3 Darwin/18.6.0 botocore/1.12.150", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1079, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "52f358a7-a292-4a74-b618-82ebb02e6b6f", "eventTime": "2019-07-18T20:09:35Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "48.242.79.253", "userAgent": "aws-cli/1.16.160 Python/3.7.3 Darwin/18.6.0 botocore/1.12.150", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"nextToken": "eyJ2IjoiMiIsImMiOiI5cE1nQ1ZnK2JXM3k3RDZIOXVzaWVVelFrMUxIdFRqWjF3RGVlNFdmdEExNDJKeVZ6aVB1VVZ2aTd4SjRZRkpjV1FLTWY4d3M3OXduNTZQaDBXZytJNjhWYTk5eTdhUGkvbnc3MmQ0cXMxVWdxM2VSaW82YnZ0U1llUFZ2T1Npai9UcFB5VURKM2dIcksxTW9IVk9LR0ZFeE9GVDNpS2hXY3BUVTJhUWR3dmpUbDNWL2VJZ2RSaVRia09tVzQwcG5PKzErQWc0azlaVHd5dz09IiwicyI6IjEifQ==", "maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "52f358a7-a292-4a74-b618-82ebb02e6b6f", "record_id": "flaws_cloudtrail:0000472:52f358a7-a292-4a74-b618-82ebb02e6b6f", "row_index": 472, "timestamp": "2019-07-18T20:09:35Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "48.242.79.253", "user_agent": "aws-cli/1.16.160 Python/3.7.3 Darwin/18.6.0 botocore/1.12.150", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1079, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "52f358a7-a292-4a74-b618-82ebb02e6b6f", "eventTime": "2019-07-18T20:09:35Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "48.242.79.253", "userAgent": "aws-cli/1.16.160 Python/3.7.3 Darwin/18.6.0 botocore/1.12.150", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"nextToken": "eyJ2IjoiMiIsImMiOiI5cE1nQ1ZnK2JXM3k3RDZIOXVzaWVVelFrMUxIdFRqWjF3RGVlNFdmdEExNDJKeVZ6aVB1VVZ2aTd4SjRZRkpjV1FLTWY4d3M3OXduNTZQaDBXZytJNjhWYTk5eTdhUGkvbnc3MmQ0cXMxVWdxM2VSaW82YnZ0U1llUFZ2T1Npai9UcFB5VURKM2dIcksxTW9IVk9LR0ZFeE9GVDNpS2hXY3BUVTJhUWR3dmpUbDNWL2VJZ2RSaVRia09tVzQwcG5PKzErQWc0azlaVHd5dz09IiwicyI6IjEifQ==", "maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "73536fde-faef-433a-9902-fcc353f29888", "record_id": "flaws_cloudtrail:0000473:73536fde-faef-433a-9902-fcc353f29888", "row_index": 473, "timestamp": "2019-07-18T20:09:36Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "48.242.79.253", "user_agent": "aws-cli/1.16.160 Python/3.7.3 Darwin/18.6.0 botocore/1.12.150", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1079, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "73536fde-faef-433a-9902-fcc353f29888", "eventTime": "2019-07-18T20:09:36Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "48.242.79.253", "userAgent": "aws-cli/1.16.160 Python/3.7.3 Darwin/18.6.0 botocore/1.12.150", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"nextToken": "eyJ2IjoiMiIsImMiOiJxU1VvNnBzbXluVGxHdVdhajlpR1RiTGpkMTFwRjdHYlE5UnVLbjZvN1FFc1V3blphRGFicGZxeXhPTUw1VzBXTWF6L0krb0dodVNKUEpvNktRQWptMXNSSU5xUFZydUQ1ZGtQbEJaSDd3a1plekh3dUFEQStFTmdqOWxvUjI0bWxUUGtVeEk5dlhXSmJDZnVWRWVUVkVyZkMyS3pjUC9rTEFMMkJWTzBpZERXNlROSmVKL1czZHkyMVJVWjFjdEphQXRtc3ZmNlgvbU5RZz09IiwicyI6IjEifQ==", "maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "73536fde-faef-433a-9902-fcc353f29888", "record_id": "flaws_cloudtrail:0000474:73536fde-faef-433a-9902-fcc353f29888", "row_index": 474, "timestamp": "2019-07-18T20:09:36Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "48.242.79.253", "user_agent": "aws-cli/1.16.160 Python/3.7.3 Darwin/18.6.0 botocore/1.12.150", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1079, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "73536fde-faef-433a-9902-fcc353f29888", "eventTime": "2019-07-18T20:09:36Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "48.242.79.253", "userAgent": "aws-cli/1.16.160 Python/3.7.3 Darwin/18.6.0 botocore/1.12.150", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"nextToken": "eyJ2IjoiMiIsImMiOiJxU1VvNnBzbXluVGxHdVdhajlpR1RiTGpkMTFwRjdHYlE5UnVLbjZvN1FFc1V3blphRGFicGZxeXhPTUw1VzBXTWF6L0krb0dodVNKUEpvNktRQWptMXNSSU5xUFZydUQ1ZGtQbEJaSDd3a1plekh3dUFEQStFTmdqOWxvUjI0bWxUUGtVeEk5dlhXSmJDZnVWRWVUVkVyZkMyS3pjUC9rTEFMMkJWTzBpZERXNlROSmVKL1czZHkyMVJVWjFjdEphQXRtc3ZmNlgvbU5RZz09IiwicyI6IjEifQ==", "maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "62961d-eb16-4512-86ab-9109985518b7", "record_id": "flaws_cloudtrail:0000475:62961d-eb16-4512-86ab-9109985518b7", "row_index": 475, "timestamp": "2019-07-18T20:09:37Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "48.242.79.253", "user_agent": "aws-cli/1.16.160 Python/3.7.3 Darwin/18.6.0 botocore/1.12.150", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1068, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "62961d-eb16-4512-86ab-9109985518b7", "eventTime": "2019-07-18T20:09:37Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "48.242.79.253", "userAgent": "aws-cli/1.16.160 Python/3.7.3 Darwin/18.6.0 botocore/1.12.150", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"nextToken": "eyJ2IjoiMiIsImMiOiJoblBKYkUzZEtqbjd6MWlWMlNWWW1pNitvemFsZXhyMUVzVEwwNTZaZWR2K01GKzNiUnFPNmZYZi9ONGJ3NUs4RXhVM0E0bUxvUnpYTDMwY2JjdWxDdWpoVFJqbnQyL3FtY2Y1U1R0dWkzQUpwYVkwcFZGNUN6ay9UazROTnVmeUcySGw2YXl5VDVCbUprT0RwdTVWd0UyeTRmN3pJYTFEbm9MdEdEVktrTWliL2pUbVNkZVhsYWRvbSsyOThzcGZvRDdsb1YwNDJqOD0iLCJzIjoiMSJ9", "maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "62961d-eb16-4512-86ab-9109985518b7", "record_id": "flaws_cloudtrail:0000476:62961d-eb16-4512-86ab-9109985518b7", "row_index": 476, "timestamp": "2019-07-18T20:09:37Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "48.242.79.253", "user_agent": "aws-cli/1.16.160 Python/3.7.3 Darwin/18.6.0 botocore/1.12.150", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1068, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "62961d-eb16-4512-86ab-9109985518b7", "eventTime": "2019-07-18T20:09:37Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "48.242.79.253", "userAgent": "aws-cli/1.16.160 Python/3.7.3 Darwin/18.6.0 botocore/1.12.150", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"nextToken": "eyJ2IjoiMiIsImMiOiJoblBKYkUzZEtqbjd6MWlWMlNWWW1pNitvemFsZXhyMUVzVEwwNTZaZWR2K01GKzNiUnFPNmZYZi9ONGJ3NUs4RXhVM0E0bUxvUnpYTDMwY2JjdWxDdWpoVFJqbnQyL3FtY2Y1U1R0dWkzQUpwYVkwcFZGNUN6ay9UazROTnVmeUcySGw2YXl5VDVCbUprT0RwdTVWd0UyeTRmN3pJYTFEbm9MdEdEVktrTWliL2pUbVNkZVhsYWRvbSsyOThzcGZvRDdsb1YwNDJqOD0iLCJzIjoiMSJ9", "maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "8da042ef-ddb9-437c-a324-0455d87e9b8c", "record_id": "flaws_cloudtrail:0000477:8da042ef-ddb9-437c-a324-0455d87e9b8c", "row_index": 477, "timestamp": "2019-07-18T20:09:38Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "48.242.79.253", "user_agent": "aws-cli/1.16.160 Python/3.7.3 Darwin/18.6.0 botocore/1.12.150", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1079, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "8da042ef-ddb9-437c-a324-0455d87e9b8c", "eventTime": "2019-07-18T20:09:38Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "48.242.79.253", "userAgent": "aws-cli/1.16.160 Python/3.7.3 Darwin/18.6.0 botocore/1.12.150", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"nextToken": "eyJ2IjoiMiIsImMiOiI3dDZycEkvdFBIbWQvY1hpMjliMFhYdWIrQVh4Z213WU9hKzNSbm01RnAyRmpmdGlHN1lvVE14cGc2MTZ5MlN1N0N4WDJ1eGdnV0ExcmcwVVNMUEhnNXVuNmd5ZEk3NGJnSVROa0pRWVRYSkNkSDVSWmtWR20weTVHb0l3dllNNlFuVzl4UDM2SnFFNWpCZTdhaFN4cmhtNU5vZUoyTXJ4Z3VhcjhUaTJmNWxEdk04dHZWcnR4ZTFwcEdXeks0SmxpbURCZG1SR1ErUmlrQT09IiwicyI6IjEifQ==", "maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "8da042ef-ddb9-437c-a324-0455d87e9b8c", "record_id": "flaws_cloudtrail:0000478:8da042ef-ddb9-437c-a324-0455d87e9b8c", "row_index": 478, "timestamp": "2019-07-18T20:09:38Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "48.242.79.253", "user_agent": "aws-cli/1.16.160 Python/3.7.3 Darwin/18.6.0 botocore/1.12.150", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1079, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "8da042ef-ddb9-437c-a324-0455d87e9b8c", "eventTime": "2019-07-18T20:09:38Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "48.242.79.253", "userAgent": "aws-cli/1.16.160 Python/3.7.3 Darwin/18.6.0 botocore/1.12.150", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"nextToken": "eyJ2IjoiMiIsImMiOiI3dDZycEkvdFBIbWQvY1hpMjliMFhYdWIrQVh4Z213WU9hKzNSbm01RnAyRmpmdGlHN1lvVE14cGc2MTZ5MlN1N0N4WDJ1eGdnV0ExcmcwVVNMUEhnNXVuNmd5ZEk3NGJnSVROa0pRWVRYSkNkSDVSWmtWR20weTVHb0l3dllNNlFuVzl4UDM2SnFFNWpCZTdhaFN4cmhtNU5vZUoyTXJ4Z3VhcjhUaTJmNWxEdk04dHZWcnR4ZTFwcEdXeks0SmxpbURCZG1SR1ErUmlrQT09IiwicyI6IjEifQ==", "maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "f35e7686-c73f-4f30-ae09-668687d8152c5", "record_id": "flaws_cloudtrail:0000479:f35e7686-c73f-4f30-ae09-668687d8152c5", "row_index": 479, "timestamp": "2019-07-18T20:09:39Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "48.242.79.253", "user_agent": "aws-cli/1.16.160 Python/3.7.3 Darwin/18.6.0 botocore/1.12.150", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1072, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "f35e7686-c73f-4f30-ae09-668687d8152c5", "eventTime": "2019-07-18T20:09:39Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "48.242.79.253", "userAgent": "aws-cli/1.16.160 Python/3.7.3 Darwin/18.6.0 botocore/1.12.150", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"nextToken": "eyJ2IjoiMiIsImMiOiJ0S3lyZDlKRVFJSk1JelZGTndMNzZLcUZzc0lZQjU4WFhEanJvQVZGQ3NzZlNXNmVYb0ZQSjRtNHUzVnN6akc0dVF5eXp1a2cvUWdxUU8yVXRnOEoraFpmdDJwS2xDUmhncGJOQmFLQmtTdWdyNmtXaEJVdXoyTE1QalU1VmltTWo2MkttTEYwVzFieDZSYXlETzlkbTNGNUpLTG9HbDE0N2Z5aEs0eUFrdUozR3M5WERpSHVadVlwd2dxVDZQS1N2V0VEc1NDcS9BPT0iLCJzIjoiMSJ9", "maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "f35e7686-c73f-4f30-ae09-668687d8152c5", "record_id": "flaws_cloudtrail:0000480:f35e7686-c73f-4f30-ae09-668687d8152c5", "row_index": 480, "timestamp": "2019-07-18T20:09:39Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "48.242.79.253", "user_agent": "aws-cli/1.16.160 Python/3.7.3 Darwin/18.6.0 botocore/1.12.150", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1072, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "f35e7686-c73f-4f30-ae09-668687d8152c5", "eventTime": "2019-07-18T20:09:39Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "48.242.79.253", "userAgent": "aws-cli/1.16.160 Python/3.7.3 Darwin/18.6.0 botocore/1.12.150", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"nextToken": "eyJ2IjoiMiIsImMiOiJ0S3lyZDlKRVFJSk1JelZGTndMNzZLcUZzc0lZQjU4WFhEanJvQVZGQ3NzZlNXNmVYb0ZQSjRtNHUzVnN6akc0dVF5eXp1a2cvUWdxUU8yVXRnOEoraFpmdDJwS2xDUmhncGJOQmFLQmtTdWdyNmtXaEJVdXoyTE1QalU1VmltTWo2MkttTEYwVzFieDZSYXlETzlkbTNGNUpLTG9HbDE0N2Z5aEs0eUFrdUozR3M5WERpSHVadVlwd2dxVDZQS1N2V0VEc1NDcS9BPT0iLCJzIjoiMSJ9", "maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "e87c576b-e332-4702-aac2-9c6ceef2e90d", "record_id": "flaws_cloudtrail:0000481:e87c576b-e332-4702-aac2-9c6ceef2e90d", "row_index": 481, "timestamp": "2019-07-18T20:09:40Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "48.242.79.253", "user_agent": "aws-cli/1.16.160 Python/3.7.3 Darwin/18.6.0 botocore/1.12.150", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1079, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "e87c576b-e332-4702-aac2-9c6ceef2e90d", "eventTime": "2019-07-18T20:09:40Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "48.242.79.253", "userAgent": "aws-cli/1.16.160 Python/3.7.3 Darwin/18.6.0 botocore/1.12.150", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"nextToken": "eyJ2IjoiMiIsImMiOiJXTmNHQnBBVDVKS1R0R3doWHJHNmNxQkQ3aUJyRUJ2aFJwLzZkMVRXMG5yZnVEV2s3NkJvUk1vbnVsczZnOGRZOVRiVmRnNUlwQ1U4OWRnVDNBQXVZNXBqTmduVlNEdVpMR1RKTThOYzVKWjJPSzY4WWNjeUpid01pWm05ck5MSHJqZlNaU3NTODNoZHA0aTlQRElRYTEyTzcwamVXcksvdkhiN3k1UkplY3pRaGZ1a2tvSnFycG9NMG1NK3VIeUJ2eXEySFdBTmJ3bGxvUT09IiwicyI6IjEifQ==", "maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "e87c576b-e332-4702-aac2-9c6ceef2e90d", "record_id": "flaws_cloudtrail:0000482:e87c576b-e332-4702-aac2-9c6ceef2e90d", "row_index": 482, "timestamp": "2019-07-18T20:09:40Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "48.242.79.253", "user_agent": "aws-cli/1.16.160 Python/3.7.3 Darwin/18.6.0 botocore/1.12.150", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1079, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "e87c576b-e332-4702-aac2-9c6ceef2e90d", "eventTime": "2019-07-18T20:09:40Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "48.242.79.253", "userAgent": "aws-cli/1.16.160 Python/3.7.3 Darwin/18.6.0 botocore/1.12.150", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"nextToken": "eyJ2IjoiMiIsImMiOiJXTmNHQnBBVDVKS1R0R3doWHJHNmNxQkQ3aUJyRUJ2aFJwLzZkMVRXMG5yZnVEV2s3NkJvUk1vbnVsczZnOGRZOVRiVmRnNUlwQ1U4OWRnVDNBQXVZNXBqTmduVlNEdVpMR1RKTThOYzVKWjJPSzY4WWNjeUpid01pWm05ck5MSHJqZlNaU3NTODNoZHA0aTlQRElRYTEyTzcwamVXcksvdkhiN3k1UkplY3pRaGZ1a2tvSnFycG9NMG1NK3VIeUJ2eXEySFdBTmJ3bGxvUT09IiwicyI6IjEifQ==", "maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "ee31401-d255-43e0-879b-443d366c79a4", "record_id": "flaws_cloudtrail:0000483:ee31401-d255-43e0-879b-443d366c79a4", "row_index": 483, "timestamp": "2019-07-18T20:09:41Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "48.242.79.253", "user_agent": "aws-cli/1.16.160 Python/3.7.3 Darwin/18.6.0 botocore/1.12.150", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1078, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "ee31401-d255-43e0-879b-443d366c79a4", "eventTime": "2019-07-18T20:09:41Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "48.242.79.253", "userAgent": "aws-cli/1.16.160 Python/3.7.3 Darwin/18.6.0 botocore/1.12.150", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"nextToken": "eyJ2IjoiMiIsImMiOiJqTEJ5akhDNy9EUWVtUFl4VStEYW5IM0ptbGd1YklVQmd4ZHdJNE9JRm5YTFR2UmxGcjJTM01vMkxGWWszZ1FPelNlN1FRSDZLdW9LRGFhUGViS3hYRVpmTXFQRnJ5aEtzNjQrMFRFQTlTM2poNGZRKzlxSzdPWmFERDQ0U0RDancvQ1BpQ1ZBNzdUOWhsQjRhTmZkZTVzSXBrL0lpa1lWM2loODJTZ2tUVkphdU9tZ0w4SFFsQlgzeHpYTXVxbVViUExGbHJuQ3lhVnZqZz09IiwicyI6IjEifQ==", "maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "ee31401-d255-43e0-879b-443d366c79a4", "record_id": "flaws_cloudtrail:0000484:ee31401-d255-43e0-879b-443d366c79a4", "row_index": 484, "timestamp": "2019-07-18T20:09:41Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "48.242.79.253", "user_agent": "aws-cli/1.16.160 Python/3.7.3 Darwin/18.6.0 botocore/1.12.150", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1078, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "ee31401-d255-43e0-879b-443d366c79a4", "eventTime": "2019-07-18T20:09:41Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "48.242.79.253", "userAgent": "aws-cli/1.16.160 Python/3.7.3 Darwin/18.6.0 botocore/1.12.150", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"nextToken": "eyJ2IjoiMiIsImMiOiJqTEJ5akhDNy9EUWVtUFl4VStEYW5IM0ptbGd1YklVQmd4ZHdJNE9JRm5YTFR2UmxGcjJTM01vMkxGWWszZ1FPelNlN1FRSDZLdW9LRGFhUGViS3hYRVpmTXFQRnJ5aEtzNjQrMFRFQTlTM2poNGZRKzlxSzdPWmFERDQ0U0RDancvQ1BpQ1ZBNzdUOWhsQjRhTmZkZTVzSXBrL0lpa1lWM2loODJTZ2tUVkphdU9tZ0w4SFFsQlgzeHpYTXVxbVViUExGbHJuQ3lhVnZqZz09IiwicyI6IjEifQ==", "maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "597346bab-25cc-464c-bbb6-171d0f5fddb8", "record_id": "flaws_cloudtrail:0000485:597346bab-25cc-464c-bbb6-171d0f5fddb8", "row_index": 485, "timestamp": "2019-07-18T20:09:43Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "48.242.79.253", "user_agent": "aws-cli/1.16.160 Python/3.7.3 Darwin/18.6.0 botocore/1.12.150", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1080, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "597346bab-25cc-464c-bbb6-171d0f5fddb8", "eventTime": "2019-07-18T20:09:43Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "48.242.79.253", "userAgent": "aws-cli/1.16.160 Python/3.7.3 Darwin/18.6.0 botocore/1.12.150", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"nextToken": "eyJ2IjoiMiIsImMiOiI4Yk5lcjZLYXN2ajkzR2p0WHk5RnFFQXhCWERBZGRYSWFpT1EwdU5aUXEyVDlFN2tHd0hJVzVIVHpOb2x1ZmV1QXFXOEdQQ2txY0pGNDRoY1plZytBNm91QVplc01kMlBnRUZDTXQ4d1V4U2hkb3hLY3R1ZXc2MVg0eHhVSjJFODJVUDFSeVc2TGhVT2NwaXp5aVdKTm0xYUlrRUR2cFk3RnEzR0pxQUpBT25RMWhzVmd0cFlLR214cWdUcytjWEV5Sk1IcjVpaW80SDBNUT09IiwicyI6IjEifQ==", "maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "597346bab-25cc-464c-bbb6-171d0f5fddb8", "record_id": "flaws_cloudtrail:0000486:597346bab-25cc-464c-bbb6-171d0f5fddb8", "row_index": 486, "timestamp": "2019-07-18T20:09:43Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "48.242.79.253", "user_agent": "aws-cli/1.16.160 Python/3.7.3 Darwin/18.6.0 botocore/1.12.150", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1080, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "597346bab-25cc-464c-bbb6-171d0f5fddb8", "eventTime": "2019-07-18T20:09:43Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "48.242.79.253", "userAgent": "aws-cli/1.16.160 Python/3.7.3 Darwin/18.6.0 botocore/1.12.150", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"nextToken": "eyJ2IjoiMiIsImMiOiI4Yk5lcjZLYXN2ajkzR2p0WHk5RnFFQXhCWERBZGRYSWFpT1EwdU5aUXEyVDlFN2tHd0hJVzVIVHpOb2x1ZmV1QXFXOEdQQ2txY0pGNDRoY1plZytBNm91QVplc01kMlBnRUZDTXQ4d1V4U2hkb3hLY3R1ZXc2MVg0eHhVSjJFODJVUDFSeVc2TGhVT2NwaXp5aVdKTm0xYUlrRUR2cFk3RnEzR0pxQUpBT25RMWhzVmd0cFlLR214cWdUcytjWEV5Sk1IcjVpaW80SDBNUT09IiwicyI6IjEifQ==", "maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "506b0c10-a7d5-4084-b011-7630c17a0136", "record_id": "flaws_cloudtrail:0000487:506b0c10-a7d5-4084-b011-7630c17a0136", "row_index": 487, "timestamp": "2019-07-18T20:09:45Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "48.242.79.253", "user_agent": "aws-cli/1.16.160 Python/3.7.3 Darwin/18.6.0 botocore/1.12.150", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1079, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "506b0c10-a7d5-4084-b011-7630c17a0136", "eventTime": "2019-07-18T20:09:45Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "48.242.79.253", "userAgent": "aws-cli/1.16.160 Python/3.7.3 Darwin/18.6.0 botocore/1.12.150", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"nextToken": "eyJ2IjoiMiIsImMiOiJBYlZkSFhZZXlZSE9rcWVSemQvNlNYbC9aekwremRURUdybGttdmg0elNVQVk0Q2xVeHFLVUZTRE5OcWVCQlVFUmdtRmpqK2Zod2VRMWJydUpqNHdQOXFuUE1jaVkxQU5xdE9pdldUbGpST1JBQ3RLbzVHbVVhQ096N090NGpLcTFtM1prLzV2ZURjWkVpOEZrUkJySXZYSE40djdzVkZvRWp4WmZ1eTF1ZDdwOUJYZ1d4cFZBdEh6bzRycGNYK05YN0tCaTZ4d1ZjZjVpQT09IiwicyI6IjEifQ==", "maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "506b0c10-a7d5-4084-b011-7630c17a0136", "record_id": "flaws_cloudtrail:0000488:506b0c10-a7d5-4084-b011-7630c17a0136", "row_index": 488, "timestamp": "2019-07-18T20:09:45Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "48.242.79.253", "user_agent": "aws-cli/1.16.160 Python/3.7.3 Darwin/18.6.0 botocore/1.12.150", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1079, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "506b0c10-a7d5-4084-b011-7630c17a0136", "eventTime": "2019-07-18T20:09:45Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "48.242.79.253", "userAgent": "aws-cli/1.16.160 Python/3.7.3 Darwin/18.6.0 botocore/1.12.150", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"nextToken": "eyJ2IjoiMiIsImMiOiJBYlZkSFhZZXlZSE9rcWVSemQvNlNYbC9aekwremRURUdybGttdmg0elNVQVk0Q2xVeHFLVUZTRE5OcWVCQlVFUmdtRmpqK2Zod2VRMWJydUpqNHdQOXFuUE1jaVkxQU5xdE9pdldUbGpST1JBQ3RLbzVHbVVhQ096N090NGpLcTFtM1prLzV2ZURjWkVpOEZrUkJySXZYSE40djdzVkZvRWp4WmZ1eTF1ZDdwOUJYZ1d4cFZBdEh6bzRycGNYK05YN0tCaTZ4d1ZjZjVpQT09IiwicyI6IjEifQ==", "maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "71fe6882-9901-4406-bd08-a9760c7959ac", "record_id": "flaws_cloudtrail:0000489:71fe6882-9901-4406-bd08-a9760c7959ac", "row_index": 489, "timestamp": "2019-07-18T20:09:46Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "48.242.79.253", "user_agent": "aws-cli/1.16.160 Python/3.7.3 Darwin/18.6.0 botocore/1.12.150", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1099, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "71fe6882-9901-4406-bd08-a9760c7959ac", "eventTime": "2019-07-18T20:09:46Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "48.242.79.253", "userAgent": "aws-cli/1.16.160 Python/3.7.3 Darwin/18.6.0 botocore/1.12.150", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"nextToken": "eyJ2IjoiMiIsImMiOiJ1bVJTelFlZzA3ZXVRblI1SG5nUTlZMXlhMHAwMjFyZG1YU29LSVh1K3ZWYWZWdHhZTDBBV0trc09QSHB0OXk3STBybUtyYjBSaktRTUFqUklvQWpCZFhCQXRaYUhwSzIyS1dQb01maGFKeU9TYkU4UmZVdXNhSmlvNTYzb0JycExNNitad0ozY2xpWEhpMzZPajdPdVN6Ym1zbWdVL1dCUEZoTjA0V1E0aGtkS2trZTI2QUlTRUtCeXdNQVBCMlZaeDZDUVgwQXkzdDVuQ3NFeFNPUDFGNXFIK2RxTkVnPSIsInMiOiIxIn0=", "maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "71fe6882-9901-4406-bd08-a9760c7959ac", "record_id": "flaws_cloudtrail:0000490:71fe6882-9901-4406-bd08-a9760c7959ac", "row_index": 490, "timestamp": "2019-07-18T20:09:46Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "48.242.79.253", "user_agent": "aws-cli/1.16.160 Python/3.7.3 Darwin/18.6.0 botocore/1.12.150", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1099, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "71fe6882-9901-4406-bd08-a9760c7959ac", "eventTime": "2019-07-18T20:09:46Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "48.242.79.253", "userAgent": "aws-cli/1.16.160 Python/3.7.3 Darwin/18.6.0 botocore/1.12.150", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"nextToken": "eyJ2IjoiMiIsImMiOiJ1bVJTelFlZzA3ZXVRblI1SG5nUTlZMXlhMHAwMjFyZG1YU29LSVh1K3ZWYWZWdHhZTDBBV0trc09QSHB0OXk3STBybUtyYjBSaktRTUFqUklvQWpCZFhCQXRaYUhwSzIyS1dQb01maGFKeU9TYkU4UmZVdXNhSmlvNTYzb0JycExNNitad0ozY2xpWEhpMzZPajdPdVN6Ym1zbWdVL1dCUEZoTjA0V1E0aGtkS2trZTI2QUlTRUtCeXdNQVBCMlZaeDZDUVgwQXkzdDVuQ3NFeFNPUDFGNXFIK2RxTkVnPSIsInMiOiIxIn0=", "maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "6cb2086a-260a-4a20-be49-e9f1cbd370dd", "record_id": "flaws_cloudtrail:0000491:6cb2086a-260a-4a20-be49-e9f1cbd370dd", "row_index": 491, "timestamp": "2019-07-18T20:09:47Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "48.242.79.253", "user_agent": "aws-cli/1.16.160 Python/3.7.3 Darwin/18.6.0 botocore/1.12.150", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1084, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "6cb2086a-260a-4a20-be49-e9f1cbd370dd", "eventTime": "2019-07-18T20:09:47Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "48.242.79.253", "userAgent": "aws-cli/1.16.160 Python/3.7.3 Darwin/18.6.0 botocore/1.12.150", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"nextToken": "eyJ2IjoiMiIsImMiOiJTMi9FU0ZxYmkwenQvVEQ3N0xKMVhHVzNWN3YrQVBDRWpJcUtYNHNEWHRQL2lEQjFhK0JBMGpvM2NvZTBOVUdXSUt1N1JLTEM4NG5JeXFHaWhMcXdOR1ZnV2F4ZXN3K0JFSlNWZmMrMlFVaDJ5d0R6dUdQNDR2czhEcGpYc1U2SEhnaTlnUmNJWEh4RUZuY0JlK3k2QVc4dCt6eWJkcUhjeDJMMkpSNnZBM2ZLdS9NOHFzd2l6c1BzUyszU0gzd2s2SzBZUVZBakZpNHd5ZVlVWUVFdEdBPT0iLCJzIjoiMSJ9", "maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "6cb2086a-260a-4a20-be49-e9f1cbd370dd", "record_id": "flaws_cloudtrail:0000492:6cb2086a-260a-4a20-be49-e9f1cbd370dd", "row_index": 492, "timestamp": "2019-07-18T20:09:47Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "48.242.79.253", "user_agent": "aws-cli/1.16.160 Python/3.7.3 Darwin/18.6.0 botocore/1.12.150", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1084, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "6cb2086a-260a-4a20-be49-e9f1cbd370dd", "eventTime": "2019-07-18T20:09:47Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "48.242.79.253", "userAgent": "aws-cli/1.16.160 Python/3.7.3 Darwin/18.6.0 botocore/1.12.150", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"nextToken": "eyJ2IjoiMiIsImMiOiJTMi9FU0ZxYmkwenQvVEQ3N0xKMVhHVzNWN3YrQVBDRWpJcUtYNHNEWHRQL2lEQjFhK0JBMGpvM2NvZTBOVUdXSUt1N1JLTEM4NG5JeXFHaWhMcXdOR1ZnV2F4ZXN3K0JFSlNWZmMrMlFVaDJ5d0R6dUdQNDR2czhEcGpYc1U2SEhnaTlnUmNJWEh4RUZuY0JlK3k2QVc4dCt6eWJkcUhjeDJMMkpSNnZBM2ZLdS9NOHFzd2l6c1BzUyszU0gzd2s2SzBZUVZBakZpNHd5ZVlVWUVFdEdBPT0iLCJzIjoiMSJ9", "maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "cf72928a-2255-4514-869b-7f0676f7bdd6", "record_id": "flaws_cloudtrail:0000493:cf72928a-2255-4514-869b-7f0676f7bdd6", "row_index": 493, "timestamp": "2019-07-18T20:09:48Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "48.242.79.253", "user_agent": "aws-cli/1.16.160 Python/3.7.3 Darwin/18.6.0 botocore/1.12.150", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1097, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "cf72928a-2255-4514-869b-7f0676f7bdd6", "eventTime": "2019-07-18T20:09:48Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "48.242.79.253", "userAgent": "aws-cli/1.16.160 Python/3.7.3 Darwin/18.6.0 botocore/1.12.150", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"nextToken": "eyJ2IjoiMiIsImMiOiIrOVh3YnNnODRWWWh3YXRyb0l0TWJKRmJxSTM3d0k2ajFRZFplZlVkT0F2aU9Qb0JVSzcxTVBlaVM1NFZoUVNHbzlwWXlMNkdPdkxDRlMyek9teEZUSjQzbm5PUWhkQVlmNW9xenB5b2t3djg5U1BySkIxOGV3Smk1aWRhNHp4dWdQbkNWbHh6NG9rNkErMmQzVzIrZFlrVHRwMUV4TjZVWGRneXVoOGx6WFBYT3BuaDd1VU1Oc0tIa05lRWxQcUJBL3B1Zis4d0dEYzBBQVIvN1d3b0gwMndJYXRSSC9VPSIsInMiOiIxIn0=", "maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "cf72928a-2255-4514-869b-7f0676f7bdd6", "record_id": "flaws_cloudtrail:0000494:cf72928a-2255-4514-869b-7f0676f7bdd6", "row_index": 494, "timestamp": "2019-07-18T20:09:48Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "48.242.79.253", "user_agent": "aws-cli/1.16.160 Python/3.7.3 Darwin/18.6.0 botocore/1.12.150", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1097, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "cf72928a-2255-4514-869b-7f0676f7bdd6", "eventTime": "2019-07-18T20:09:48Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "48.242.79.253", "userAgent": "aws-cli/1.16.160 Python/3.7.3 Darwin/18.6.0 botocore/1.12.150", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"nextToken": "eyJ2IjoiMiIsImMiOiIrOVh3YnNnODRWWWh3YXRyb0l0TWJKRmJxSTM3d0k2ajFRZFplZlVkT0F2aU9Qb0JVSzcxTVBlaVM1NFZoUVNHbzlwWXlMNkdPdkxDRlMyek9teEZUSjQzbm5PUWhkQVlmNW9xenB5b2t3djg5U1BySkIxOGV3Smk1aWRhNHp4dWdQbkNWbHh6NG9rNkErMmQzVzIrZFlrVHRwMUV4TjZVWGRneXVoOGx6WFBYT3BuaDd1VU1Oc0tIa05lRWxQcUJBL3B1Zis4d0dEYzBBQVIvN1d3b0gwMndJYXRSSC9VPSIsInMiOiIxIn0=", "maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "988fb659-4e53-432a-bc3f-d71942f7c861", "record_id": "flaws_cloudtrail:0000495:988fb659-4e53-432a-bc3f-d71942f7c861", "row_index": 495, "timestamp": "2019-07-18T20:09:49Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "48.242.79.253", "user_agent": "aws-cli/1.16.160 Python/3.7.3 Darwin/18.6.0 botocore/1.12.150", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1055, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "988fb659-4e53-432a-bc3f-d71942f7c861", "eventTime": "2019-07-18T20:09:49Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "48.242.79.253", "userAgent": "aws-cli/1.16.160 Python/3.7.3 Darwin/18.6.0 botocore/1.12.150", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"nextToken": "eyJ2IjoiMiIsImMiOiJoSFhQZElmNjZDMHBTcXZWd1l1a0hZNHNtNUptYWJZaHd3bE5CNmZsK0FpV1V2QTVZRWkxT1ZKclpRU0E0eHJnQmlldmdOWU1BOTNyQU5pNFFUWmpDYVpQMnE1UGJtTDhFR3VaVkNsblVxazhvNXBxcThXN0NpQ2sxRUNIbU9xWkp0RGpFQ1Axc1FZTjFkS1E2QmpoVVhMZFMydk4wMmViZUtYK21VRWgyS0ZRdW5VeDhFaXpEcENBSWEzYjVkbz0iLCJzIjoiMSJ9", "maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "988fb659-4e53-432a-bc3f-d71942f7c861", "record_id": "flaws_cloudtrail:0000496:988fb659-4e53-432a-bc3f-d71942f7c861", "row_index": 496, "timestamp": "2019-07-18T20:09:49Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "48.242.79.253", "user_agent": "aws-cli/1.16.160 Python/3.7.3 Darwin/18.6.0 botocore/1.12.150", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1055, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "988fb659-4e53-432a-bc3f-d71942f7c861", "eventTime": "2019-07-18T20:09:49Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "48.242.79.253", "userAgent": "aws-cli/1.16.160 Python/3.7.3 Darwin/18.6.0 botocore/1.12.150", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"nextToken": "eyJ2IjoiMiIsImMiOiJoSFhQZElmNjZDMHBTcXZWd1l1a0hZNHNtNUptYWJZaHd3bE5CNmZsK0FpV1V2QTVZRWkxT1ZKclpRU0E0eHJnQmlldmdOWU1BOTNyQU5pNFFUWmpDYVpQMnE1UGJtTDhFR3VaVkNsblVxazhvNXBxcThXN0NpQ2sxRUNIbU9xWkp0RGpFQ1Axc1FZTjFkS1E2QmpoVVhMZFMydk4wMmViZUtYK21VRWgyS0ZRdW5VeDhFaXpEcENBSWEzYjVkbz0iLCJzIjoiMSJ9", "maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "38315e-7c04-4d92-a1cf-92194efe9aa6", "record_id": "flaws_cloudtrail:0000497:38315e-7c04-4d92-a1cf-92194efe9aa6", "row_index": 497, "timestamp": "2019-07-18T20:09:50Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "48.242.79.253", "user_agent": "aws-cli/1.16.160 Python/3.7.3 Darwin/18.6.0 botocore/1.12.150", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1097, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "38315e-7c04-4d92-a1cf-92194efe9aa6", "eventTime": "2019-07-18T20:09:50Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "48.242.79.253", "userAgent": "aws-cli/1.16.160 Python/3.7.3 Darwin/18.6.0 botocore/1.12.150", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"nextToken": "eyJ2IjoiMiIsImMiOiI2QldvdmcrM3hTV2l5ZmUxVDRObWdIZnRTa0kxdVB6UjA3UkFxRElVd1lJRmczYmo5STVkcTYyY0lodlVWUHZUdkhkWllZOC8vZ0ZabDlEbTZRbTFUVFBkcHBqdWNob1lRM2RQMUE1V3BXZ2h2VnpSdTE5MEpQYzRQa21GaUJwRG8rdW9hKzFlYlVyR1dlSmxoaDNwRlRVS2FsU2pOTW1tTGhWamowOFB3c0xKN2lUZ2ZRSDFZQi9XSnRiWGs5Z0hUaW84alhkUk9YakdRbWNTb0Y4ZEFTQkE5NXJMQzU4PSIsInMiOiIxIn0=", "maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "38315e-7c04-4d92-a1cf-92194efe9aa6", "record_id": "flaws_cloudtrail:0000498:38315e-7c04-4d92-a1cf-92194efe9aa6", "row_index": 498, "timestamp": "2019-07-18T20:09:50Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "48.242.79.253", "user_agent": "aws-cli/1.16.160 Python/3.7.3 Darwin/18.6.0 botocore/1.12.150", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1097, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "38315e-7c04-4d92-a1cf-92194efe9aa6", "eventTime": "2019-07-18T20:09:50Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "48.242.79.253", "userAgent": "aws-cli/1.16.160 Python/3.7.3 Darwin/18.6.0 botocore/1.12.150", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"nextToken": "eyJ2IjoiMiIsImMiOiI2QldvdmcrM3hTV2l5ZmUxVDRObWdIZnRTa0kxdVB6UjA3UkFxRElVd1lJRmczYmo5STVkcTYyY0lodlVWUHZUdkhkWllZOC8vZ0ZabDlEbTZRbTFUVFBkcHBqdWNob1lRM2RQMUE1V3BXZ2h2VnpSdTE5MEpQYzRQa21GaUJwRG8rdW9hKzFlYlVyR1dlSmxoaDNwRlRVS2FsU2pOTW1tTGhWamowOFB3c0xKN2lUZ2ZRSDFZQi9XSnRiWGs5Z0hUaW84alhkUk9YakdRbWNTb0Y4ZEFTQkE5NXJMQzU4PSIsInMiOiIxIn0=", "maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "358123e46-0e6d-40c4-9d81-9de7d8e17d6e", "record_id": "flaws_cloudtrail:0000499:358123e46-0e6d-40c4-9d81-9de7d8e17d6e", "row_index": 499, "timestamp": "2019-07-18T20:09:51Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "48.242.79.253", "user_agent": "aws-cli/1.16.160 Python/3.7.3 Darwin/18.6.0 botocore/1.12.150", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1088, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "358123e46-0e6d-40c4-9d81-9de7d8e17d6e", "eventTime": "2019-07-18T20:09:51Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "48.242.79.253", "userAgent": "aws-cli/1.16.160 Python/3.7.3 Darwin/18.6.0 botocore/1.12.150", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"nextToken": "eyJ2IjoiMiIsImMiOiJUeGljTVpTS0hkQ2xwZ0xEai9DUjQ1QmsxQ1FqQ3hLWWlYUmRGYmthM0hhVFdkSU4xZXYyR0JHVzZxS01xQmpkMmhQcjlCTDZDbTkrWnByVy9oVG5vSENBTk8rMXVodldPbmtTVmxCOWxnTTlWcitpSWdTRktldFpleFRMZ3FXQjBaUThuQVl0UFZTaVhDQ09UalhjdEtLRHlkMGVaUkxHM0h6WUpwazNaWENiVEdFOHpKRm9xNWZKRG1pZjJOWDdUTks1MHFTbnFDTkxWdUpWOU5CMmp3PT0iLCJzIjoiMSJ9", "maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "358123e46-0e6d-40c4-9d81-9de7d8e17d6e", "record_id": "flaws_cloudtrail:0000500:358123e46-0e6d-40c4-9d81-9de7d8e17d6e", "row_index": 500, "timestamp": "2019-07-18T20:09:51Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "48.242.79.253", "user_agent": "aws-cli/1.16.160 Python/3.7.3 Darwin/18.6.0 botocore/1.12.150", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1088, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "358123e46-0e6d-40c4-9d81-9de7d8e17d6e", "eventTime": "2019-07-18T20:09:51Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "48.242.79.253", "userAgent": "aws-cli/1.16.160 Python/3.7.3 Darwin/18.6.0 botocore/1.12.150", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"nextToken": "eyJ2IjoiMiIsImMiOiJUeGljTVpTS0hkQ2xwZ0xEai9DUjQ1QmsxQ1FqQ3hLWWlYUmRGYmthM0hhVFdkSU4xZXYyR0JHVzZxS01xQmpkMmhQcjlCTDZDbTkrWnByVy9oVG5vSENBTk8rMXVodldPbmtTVmxCOWxnTTlWcitpSWdTRktldFpleFRMZ3FXQjBaUThuQVl0UFZTaVhDQ09UalhjdEtLRHlkMGVaUkxHM0h6WUpwazNaWENiVEdFOHpKRm9xNWZKRG1pZjJOWDdUTks1MHFTbnFDTkxWdUpWOU5CMmp3PT0iLCJzIjoiMSJ9", "maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "a5659a0c-4080-48d4-bf45-dfb567bcd7bd", "record_id": "flaws_cloudtrail:0000501:a5659a0c-4080-48d4-bf45-dfb567bcd7bd", "row_index": 501, "timestamp": "2019-07-18T20:09:53Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "48.242.79.253", "user_agent": "aws-cli/1.16.160 Python/3.7.3 Darwin/18.6.0 botocore/1.12.150", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1099, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "a5659a0c-4080-48d4-bf45-dfb567bcd7bd", "eventTime": "2019-07-18T20:09:53Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "48.242.79.253", "userAgent": "aws-cli/1.16.160 Python/3.7.3 Darwin/18.6.0 botocore/1.12.150", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"nextToken": "eyJ2IjoiMiIsImMiOiIwdG1GVlFzenUra2F2Y0pWREkvZXNpU3lSM0tqMlJ6MXlkOHRGKzJoWnhCQ2t1eFlVYmtVM1k1Lzd1eWFlb2dFRnRpNDlVVi9BWEMySVJPWE9RVjFhVHUyc0p3amZJU0wwZEVOdmViQkMzaFNyS1A0emZWd2dmUUhPaFVRK2sxUVB3c055RXJsS3grS2RwMmpnZDhPRHFJbzJkMERKa2s2bFFEdGJMdlNJNFl6VHpsaHhFWVk0SkJOZk51QW15a3hkSWhwdnNtVHB4bG9nb1RWODlYaGZyL1lSdE9MaVBJPSIsInMiOiIxIn0=", "maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "a5659a0c-4080-48d4-bf45-dfb567bcd7bd", "record_id": "flaws_cloudtrail:0000502:a5659a0c-4080-48d4-bf45-dfb567bcd7bd", "row_index": 502, "timestamp": "2019-07-18T20:09:53Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "48.242.79.253", "user_agent": "aws-cli/1.16.160 Python/3.7.3 Darwin/18.6.0 botocore/1.12.150", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1099, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "a5659a0c-4080-48d4-bf45-dfb567bcd7bd", "eventTime": "2019-07-18T20:09:53Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "48.242.79.253", "userAgent": "aws-cli/1.16.160 Python/3.7.3 Darwin/18.6.0 botocore/1.12.150", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"nextToken": "eyJ2IjoiMiIsImMiOiIwdG1GVlFzenUra2F2Y0pWREkvZXNpU3lSM0tqMlJ6MXlkOHRGKzJoWnhCQ2t1eFlVYmtVM1k1Lzd1eWFlb2dFRnRpNDlVVi9BWEMySVJPWE9RVjFhVHUyc0p3amZJU0wwZEVOdmViQkMzaFNyS1A0emZWd2dmUUhPaFVRK2sxUVB3c055RXJsS3grS2RwMmpnZDhPRHFJbzJkMERKa2s2bFFEdGJMdlNJNFl6VHpsaHhFWVk0SkJOZk51QW15a3hkSWhwdnNtVHB4bG9nb1RWODlYaGZyL1lSdE9MaVBJPSIsInMiOiIxIn0=", "maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "a947400-30be-4d49-84c3-239ea408149f", "record_id": "flaws_cloudtrail:0000503:a947400-30be-4d49-84c3-239ea408149f", "row_index": 503, "timestamp": "2019-07-18T20:09:54Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "48.242.79.253", "user_agent": "aws-cli/1.16.160 Python/3.7.3 Darwin/18.6.0 botocore/1.12.150", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1085, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "a947400-30be-4d49-84c3-239ea408149f", "eventTime": "2019-07-18T20:09:54Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "48.242.79.253", "userAgent": "aws-cli/1.16.160 Python/3.7.3 Darwin/18.6.0 botocore/1.12.150", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"nextToken": "eyJ2IjoiMiIsImMiOiJ3eFZCbERteWFIYUxBeldnOWRvYmVaOGxvaFROdExBNjJ3TC81NDhHZ2tmajhVMzBoTUxCbXNSNlhNRHBvaE5oSmczM1diVGk4b0g0MG1ibXk0cU5vc3NrdTNnSHNWZFFONUxKSzVkQU5xRTI3QmN5TFIzZVM0bE1DWUFwK1JWejRrM3M5NThUNVBzQ01CSXI2UDgra2lPNVdPYStaM2Y4TWNuY1Fybm9hQnJuYno5Mm9XYWprTFZ2M1JHc2UvUG1rYUdXcEdFZ1pUQ0FzUmJQeXI1Uk93PT0iLCJzIjoiMSJ9", "maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "a947400-30be-4d49-84c3-239ea408149f", "record_id": "flaws_cloudtrail:0000504:a947400-30be-4d49-84c3-239ea408149f", "row_index": 504, "timestamp": "2019-07-18T20:09:54Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "48.242.79.253", "user_agent": "aws-cli/1.16.160 Python/3.7.3 Darwin/18.6.0 botocore/1.12.150", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1085, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "a947400-30be-4d49-84c3-239ea408149f", "eventTime": "2019-07-18T20:09:54Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "48.242.79.253", "userAgent": "aws-cli/1.16.160 Python/3.7.3 Darwin/18.6.0 botocore/1.12.150", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"nextToken": "eyJ2IjoiMiIsImMiOiJ3eFZCbERteWFIYUxBeldnOWRvYmVaOGxvaFROdExBNjJ3TC81NDhHZ2tmajhVMzBoTUxCbXNSNlhNRHBvaE5oSmczM1diVGk4b0g0MG1ibXk0cU5vc3NrdTNnSHNWZFFONUxKSzVkQU5xRTI3QmN5TFIzZVM0bE1DWUFwK1JWejRrM3M5NThUNVBzQ01CSXI2UDgra2lPNVdPYStaM2Y4TWNuY1Fybm9hQnJuYno5Mm9XYWprTFZ2M1JHc2UvUG1rYUdXcEdFZ1pUQ0FzUmJQeXI1Uk93PT0iLCJzIjoiMSJ9", "maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "78be395d-8789-4ace-9e5f-6672f2f3c2ab", "record_id": "flaws_cloudtrail:0000505:78be395d-8789-4ace-9e5f-6672f2f3c2ab", "row_index": 505, "timestamp": "2019-07-18T20:09:55Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "48.242.79.253", "user_agent": "aws-cli/1.16.160 Python/3.7.3 Darwin/18.6.0 botocore/1.12.150", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1099, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "78be395d-8789-4ace-9e5f-6672f2f3c2ab", "eventTime": "2019-07-18T20:09:55Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "48.242.79.253", "userAgent": "aws-cli/1.16.160 Python/3.7.3 Darwin/18.6.0 botocore/1.12.150", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"nextToken": "eyJ2IjoiMiIsImMiOiJrTjMrY0hCYmpma1Y5bGdrS3VyM1J4L2NXNGwvM0hKaE9KY3pYYnF6RUxadkV5b1NsZkxselRMVFVaWlc3RFJheHdtRm9wZlQ3UDU2OWluaExid0RoOWNpNkx5UWd2cE1VcHEwWXlMMVIyRTNpcTNHdFdkZ0MzQTV6cWJlYlIvRjcwbzVONmFQOC85OVM5dGZzTXJpVE5CTmRmTUFtbElGZ2sxMHVnYW1qNzFGeEZObVkwbXRYOTdVNS9HRzB0bUpQRjFyYnFjbitTY21KaGUxL3ZOMWo5RUVTYTUrSTdzPSIsInMiOiIxIn0=", "maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "78be395d-8789-4ace-9e5f-6672f2f3c2ab", "record_id": "flaws_cloudtrail:0000506:78be395d-8789-4ace-9e5f-6672f2f3c2ab", "row_index": 506, "timestamp": "2019-07-18T20:09:55Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "48.242.79.253", "user_agent": "aws-cli/1.16.160 Python/3.7.3 Darwin/18.6.0 botocore/1.12.150", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1099, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "78be395d-8789-4ace-9e5f-6672f2f3c2ab", "eventTime": "2019-07-18T20:09:55Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "48.242.79.253", "userAgent": "aws-cli/1.16.160 Python/3.7.3 Darwin/18.6.0 botocore/1.12.150", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"nextToken": "eyJ2IjoiMiIsImMiOiJrTjMrY0hCYmpma1Y5bGdrS3VyM1J4L2NXNGwvM0hKaE9KY3pYYnF6RUxadkV5b1NsZkxselRMVFVaWlc3RFJheHdtRm9wZlQ3UDU2OWluaExid0RoOWNpNkx5UWd2cE1VcHEwWXlMMVIyRTNpcTNHdFdkZ0MzQTV6cWJlYlIvRjcwbzVONmFQOC85OVM5dGZzTXJpVE5CTmRmTUFtbElGZ2sxMHVnYW1qNzFGeEZObVkwbXRYOTdVNS9HRzB0bUpQRjFyYnFjbitTY21KaGUxL3ZOMWo5RUVTYTUrSTdzPSIsInMiOiIxIn0=", "maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "8de5c047-9435-424f-96da-ff2aae3cfb71", "record_id": "flaws_cloudtrail:0000507:8de5c047-9435-424f-96da-ff2aae3cfb71", "row_index": 507, "timestamp": "2019-07-18T20:09:56Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "48.242.79.253", "user_agent": "aws-cli/1.16.160 Python/3.7.3 Darwin/18.6.0 botocore/1.12.150", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1055, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "8de5c047-9435-424f-96da-ff2aae3cfb71", "eventTime": "2019-07-18T20:09:56Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "48.242.79.253", "userAgent": "aws-cli/1.16.160 Python/3.7.3 Darwin/18.6.0 botocore/1.12.150", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"nextToken": "eyJ2IjoiMiIsImMiOiJsNFZLOW1pWUpGK0xISmRmQ3h4aEllTXNQbXZ2eVdDdXgvRW9tM3hwV1BiOXNsWmp4Y1V0RDVCUmFkMFpQbjFpcU8vQVI5Qkp1YjVSWG1rUDJ6WW1oNGJwU2xUU3F2azNQRDB5RDBYRjFQYnpUMHpSdnhmNHRuQWNBcWlMRXhaR3hYU0pkZlYvaTA1a2psclZON3JrK3M2Y1N4aS8zemJ2TTZydEoralg4alpMUkJiMlR3ejIvcUhzUDYvc3Q1Yz0iLCJzIjoiMSJ9", "maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "8de5c047-9435-424f-96da-ff2aae3cfb71", "record_id": "flaws_cloudtrail:0000508:8de5c047-9435-424f-96da-ff2aae3cfb71", "row_index": 508, "timestamp": "2019-07-18T20:09:56Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "48.242.79.253", "user_agent": "aws-cli/1.16.160 Python/3.7.3 Darwin/18.6.0 botocore/1.12.150", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1055, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "8de5c047-9435-424f-96da-ff2aae3cfb71", "eventTime": "2019-07-18T20:09:56Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "48.242.79.253", "userAgent": "aws-cli/1.16.160 Python/3.7.3 Darwin/18.6.0 botocore/1.12.150", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"nextToken": "eyJ2IjoiMiIsImMiOiJsNFZLOW1pWUpGK0xISmRmQ3h4aEllTXNQbXZ2eVdDdXgvRW9tM3hwV1BiOXNsWmp4Y1V0RDVCUmFkMFpQbjFpcU8vQVI5Qkp1YjVSWG1rUDJ6WW1oNGJwU2xUU3F2azNQRDB5RDBYRjFQYnpUMHpSdnhmNHRuQWNBcWlMRXhaR3hYU0pkZlYvaTA1a2psclZON3JrK3M2Y1N4aS8zemJ2TTZydEoralg4alpMUkJiMlR3ejIvcUhzUDYvc3Q1Yz0iLCJzIjoiMSJ9", "maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "e9c6430b-8c5f-48f7-a387-36568d58a", "record_id": "flaws_cloudtrail:0000509:e9c6430b-8c5f-48f7-a387-36568d58a", "row_index": 509, "timestamp": "2019-07-18T20:10:36Z", "event_type": "GetCallerIdentity", "event_source": "sts.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "237.25.162.210", "user_agent": "aws-cli/1.16.199 Python/2.7.15 Darwin/16.7.0 botocore/1.12.189", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 770, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "e9c6430b-8c5f-48f7-a387-36568d58a", "eventTime": "2019-07-18T20:10:36Z", "eventName": "GetCallerIdentity", "eventSource": "sts.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "237.25.162.210", "userAgent": "aws-cli/1.16.199 Python/2.7.15 Darwin/16.7.0 botocore/1.12.189", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "responseElements": {"userId": "AIDA9BO36HFBHKGJAO9C1", "account": "811596193553", "arn": "arn:aws:iam::811596193553:user/backup"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "e9c6430b-8c5f-48f7-a387-36568d58a", "record_id": "flaws_cloudtrail:0000510:e9c6430b-8c5f-48f7-a387-36568d58a", "row_index": 510, "timestamp": "2019-07-18T20:10:36Z", "event_type": "GetCallerIdentity", "event_source": "sts.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "237.25.162.210", "user_agent": "aws-cli/1.16.199 Python/2.7.15 Darwin/16.7.0 botocore/1.12.189", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 770, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "e9c6430b-8c5f-48f7-a387-36568d58a", "eventTime": "2019-07-18T20:10:36Z", "eventName": "GetCallerIdentity", "eventSource": "sts.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "237.25.162.210", "userAgent": "aws-cli/1.16.199 Python/2.7.15 Darwin/16.7.0 botocore/1.12.189", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "responseElements": {"userId": "AIDA9BO36HFBHKGJAO9C1", "account": "811596193553", "arn": "arn:aws:iam::811596193553:user/backup"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "dfe50d10-961e-44ef-b960-440bf6c601439", "record_id": "flaws_cloudtrail:0000511:dfe50d10-961e-44ef-b960-440bf6c601439", "row_index": 511, "timestamp": "2019-07-18T20:10:58Z", "event_type": "CopySnapshot", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "48.242.79.253", "user_agent": "aws-cli/1.16.160 Python/3.7.3 Darwin/18.6.0 botocore/1.12.150", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1322, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "dfe50d10-961e-44ef-b960-440bf6c601439", "eventTime": "2019-07-18T20:10:58Z", "eventName": "CopySnapshot", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "48.242.79.253", "userAgent": "aws-cli/1.16.160 Python/3.7.3 Darwin/18.6.0 botocore/1.12.150", "awsRegion": "us-west-2", "errorCode": "Client.UnauthorizedOperation", "errorMessage": "You are not authorized to perform this operation.", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"sourceRegion": "us-west-2", "sourceSnapshotId": "snap-ea3ab5d49d144c873", "destinationRegion": "us-west-2", "presignedUrl": "https://ec2.us-west-2.amazonaws.com/?Action=CopySnapshot&Version=2016-11-15&SourceRegion=us-west-2&SourceSnapshotId=snap-ea3ab5d49d144c873&DestinationRegion=us-west-2&X-Amz-Algorithm=AWS4-HMAC-SHA256&X-Amz-Credential=AKIA01U43UX3RBRDXF4Q%2F63110%2Fus-west-2%2Fec2%2Faws4_request&X-Amz-Date=63110T793030Z&X-Amz-Expires=3600&X-Amz-SignedHeaders=host&X-Amz-Signature=f24d4ea5211b852ee8ddef08baf155112f70913947c59df27df304c3f0899fb0"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "dfe50d10-961e-44ef-b960-440bf6c601439", "record_id": "flaws_cloudtrail:0000512:dfe50d10-961e-44ef-b960-440bf6c601439", "row_index": 512, "timestamp": "2019-07-18T20:10:58Z", "event_type": "CopySnapshot", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "48.242.79.253", "user_agent": "aws-cli/1.16.160 Python/3.7.3 Darwin/18.6.0 botocore/1.12.150", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1322, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "dfe50d10-961e-44ef-b960-440bf6c601439", "eventTime": "2019-07-18T20:10:58Z", "eventName": "CopySnapshot", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "48.242.79.253", "userAgent": "aws-cli/1.16.160 Python/3.7.3 Darwin/18.6.0 botocore/1.12.150", "awsRegion": "us-west-2", "errorCode": "Client.UnauthorizedOperation", "errorMessage": "You are not authorized to perform this operation.", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"sourceRegion": "us-west-2", "sourceSnapshotId": "snap-ea3ab5d49d144c873", "destinationRegion": "us-west-2", "presignedUrl": "https://ec2.us-west-2.amazonaws.com/?Action=CopySnapshot&Version=2016-11-15&SourceRegion=us-west-2&SourceSnapshotId=snap-ea3ab5d49d144c873&DestinationRegion=us-west-2&X-Amz-Algorithm=AWS4-HMAC-SHA256&X-Amz-Credential=AKIA01U43UX3RBRDXF4Q%2F63110%2Fus-west-2%2Fec2%2Faws4_request&X-Amz-Date=63110T793030Z&X-Amz-Expires=3600&X-Amz-SignedHeaders=host&X-Amz-Signature=f24d4ea5211b852ee8ddef08baf155112f70913947c59df27df304c3f0899fb0"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "b07c7a0e-eed8-4da5-9e3e-03f15cb90615", "record_id": "flaws_cloudtrail:0000513:b07c7a0e-eed8-4da5-9e3e-03f15cb90615", "row_index": 513, "timestamp": "2019-07-18T20:11:39Z", "event_type": "RunInstances", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "237.25.162.210", "user_agent": "aws-cli/1.16.130 Python/3.7.3 Darwin/17.7.0 botocore/1.12.120", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1676, "raw_record_depth": 5, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "b07c7a0e-eed8-4da5-9e3e-03f15cb90615", "eventTime": "2019-07-18T20:11:39Z", "eventName": "RunInstances", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "237.25.162.210", "userAgent": "aws-cli/1.16.130 Python/3.7.3 Darwin/17.7.0 botocore/1.12.120", "awsRegion": "us-west-2", "errorCode": "Client.UnauthorizedOperation", "errorMessage": "You are not authorized to perform this operation. Encoded authorization failure message: HPFJSWg8vSmNFtw1fZ3jT4iWoAXqD3b3j4cDdGAAcZSZCM7bCEfhzQaMxBxPHcODbPfEvaod3uElHWUEf4xBo1j92Xp-nmmht01TpOSuCR4-9DM7h7_FCPLHYU6Q2T8lNvQyCuxorkDfGrzis7oq6KXfxoBY1Nr9068yqTjFXkdfY5ESUPabcKebw1odmFOUQ0HTQ0-Tn0OGt7HvKBQnRehWjIOyOsGgUCiCtQr6ugNP3YvcdJnve2O34NK19jzdWoE0QFCLDnh67q0wzk_M_ymWQVRXYisvBebLJG-fGZyXkdvTJXn5clxZTHv2Q-aA47fiAdFKi6jp6u_412BKWqNK7TnhwOhpd8kIDmGVejRh644FF2FmyVWwNvdZA4reTeA_-xMRow1BGL5sG-tlN2W7obfoi3IsbMoBCRkEehtoMxBp2ochyKAfVM1laRBTdXTGAkHp8BV8ZOMQ9vN6NpK239T3JkaeaLmuoQVYleQTG_ETKhHzsNvyj2PpOcaWFTTGz79T7T3on8S5_ceMCFbmSQUVjTlMcp36CuAivvHgO4W6fuRk2RjaFEyoYpysu4990P-XeqVAwKvsw89FlZZDXNoJKOToYKBJun2p02u7dBgY3aIKTgrkv9qTBDXKSAi_RHrg4AlHNMH8HYRunt9v5ea0jdj8", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"instancesSet": {"items": [{"imageId": "ami-b9861e36", "minCount": 1, "maxCount": 1}]}, "instanceType": "t2.micro", "monitoring": {"enabled": false}, "disableApiTermination": false}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "b07c7a0e-eed8-4da5-9e3e-03f15cb90615", "record_id": "flaws_cloudtrail:0000514:b07c7a0e-eed8-4da5-9e3e-03f15cb90615", "row_index": 514, "timestamp": "2019-07-18T20:11:39Z", "event_type": "RunInstances", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "237.25.162.210", "user_agent": "aws-cli/1.16.130 Python/3.7.3 Darwin/17.7.0 botocore/1.12.120", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1676, "raw_record_depth": 5, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "b07c7a0e-eed8-4da5-9e3e-03f15cb90615", "eventTime": "2019-07-18T20:11:39Z", "eventName": "RunInstances", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "237.25.162.210", "userAgent": "aws-cli/1.16.130 Python/3.7.3 Darwin/17.7.0 botocore/1.12.120", "awsRegion": "us-west-2", "errorCode": "Client.UnauthorizedOperation", "errorMessage": "You are not authorized to perform this operation. Encoded authorization failure message: HPFJSWg8vSmNFtw1fZ3jT4iWoAXqD3b3j4cDdGAAcZSZCM7bCEfhzQaMxBxPHcODbPfEvaod3uElHWUEf4xBo1j92Xp-nmmht01TpOSuCR4-9DM7h7_FCPLHYU6Q2T8lNvQyCuxorkDfGrzis7oq6KXfxoBY1Nr9068yqTjFXkdfY5ESUPabcKebw1odmFOUQ0HTQ0-Tn0OGt7HvKBQnRehWjIOyOsGgUCiCtQr6ugNP3YvcdJnve2O34NK19jzdWoE0QFCLDnh67q0wzk_M_ymWQVRXYisvBebLJG-fGZyXkdvTJXn5clxZTHv2Q-aA47fiAdFKi6jp6u_412BKWqNK7TnhwOhpd8kIDmGVejRh644FF2FmyVWwNvdZA4reTeA_-xMRow1BGL5sG-tlN2W7obfoi3IsbMoBCRkEehtoMxBp2ochyKAfVM1laRBTdXTGAkHp8BV8ZOMQ9vN6NpK239T3JkaeaLmuoQVYleQTG_ETKhHzsNvyj2PpOcaWFTTGz79T7T3on8S5_ceMCFbmSQUVjTlMcp36CuAivvHgO4W6fuRk2RjaFEyoYpysu4990P-XeqVAwKvsw89FlZZDXNoJKOToYKBJun2p02u7dBgY3aIKTgrkv9qTBDXKSAi_RHrg4AlHNMH8HYRunt9v5ea0jdj8", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"instancesSet": {"items": [{"imageId": "ami-b9861e36", "minCount": 1, "maxCount": 1}]}, "instanceType": "t2.micro", "monitoring": {"enabled": false}, "disableApiTermination": false}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "9c40be2b-e76b-4388-aa21-a0e39a26783", "record_id": "flaws_cloudtrail:0000515:9c40be2b-e76b-4388-aa21-a0e39a26783", "row_index": 515, "timestamp": "2019-07-18T20:11:57Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "237.25.162.210", "user_agent": "aws-cli/1.16.199 Python/2.7.15 Darwin/16.7.0 botocore/1.12.189", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 782, "raw_record_depth": 5, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "9c40be2b-e76b-4388-aa21-a0e39a26783", "eventTime": "2019-07-18T20:11:57Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "237.25.162.210", "userAgent": "aws-cli/1.16.199 Python/2.7.15 Darwin/16.7.0 botocore/1.12.189", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"maxResults": 1000, "snapshotSet": {}, "ownersSet": {"items": [{"owner": "811596193553"}]}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "9c40be2b-e76b-4388-aa21-a0e39a26783", "record_id": "flaws_cloudtrail:0000516:9c40be2b-e76b-4388-aa21-a0e39a26783", "row_index": 516, "timestamp": "2019-07-18T20:11:57Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "237.25.162.210", "user_agent": "aws-cli/1.16.199 Python/2.7.15 Darwin/16.7.0 botocore/1.12.189", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 782, "raw_record_depth": 5, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "9c40be2b-e76b-4388-aa21-a0e39a26783", "eventTime": "2019-07-18T20:11:57Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "237.25.162.210", "userAgent": "aws-cli/1.16.199 Python/2.7.15 Darwin/16.7.0 botocore/1.12.189", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"maxResults": 1000, "snapshotSet": {}, "ownersSet": {"items": [{"owner": "811596193553"}]}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "ee4b144c-ac37-4627-adfa-7cf90502bd83", "record_id": "flaws_cloudtrail:0000517:ee4b144c-ac37-4627-adfa-7cf90502bd83", "row_index": 517, "timestamp": "2019-07-18T20:12:09Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "237.25.162.210", "user_agent": "aws-cli/1.16.199 Python/2.7.15 Darwin/16.7.0 botocore/1.12.189", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 789, "raw_record_depth": 5, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "ee4b144c-ac37-4627-adfa-7cf90502bd83", "eventTime": "2019-07-18T20:12:09Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "237.25.162.210", "userAgent": "aws-cli/1.16.199 Python/2.7.15 Darwin/16.7.0 botocore/1.12.189", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"maxResults": 1000, "snapshotSet": {}, "ownersSet": {"items": [{"owner": "811596193553"}]}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "ee4b144c-ac37-4627-adfa-7cf90502bd83", "record_id": "flaws_cloudtrail:0000518:ee4b144c-ac37-4627-adfa-7cf90502bd83", "row_index": 518, "timestamp": "2019-07-18T20:12:09Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "237.25.162.210", "user_agent": "aws-cli/1.16.199 Python/2.7.15 Darwin/16.7.0 botocore/1.12.189", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 789, "raw_record_depth": 5, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "ee4b144c-ac37-4627-adfa-7cf90502bd83", "eventTime": "2019-07-18T20:12:09Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "237.25.162.210", "userAgent": "aws-cli/1.16.199 Python/2.7.15 Darwin/16.7.0 botocore/1.12.189", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"maxResults": 1000, "snapshotSet": {}, "ownersSet": {"items": [{"owner": "811596193553"}]}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "d228f695-8514-4dfd-9e7c-3a0d2e4896a8", "record_id": "flaws_cloudtrail:0000519:d228f695-8514-4dfd-9e7c-3a0d2e4896a8", "row_index": 519, "timestamp": "2019-07-18T20:12:15Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "250.7.156.251", "user_agent": "aws-cli/1.16.199 Python/2.7.15 Darwin/18.6.0 botocore/1.12.189", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 787, "raw_record_depth": 5, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "d228f695-8514-4dfd-9e7c-3a0d2e4896a8", "eventTime": "2019-07-18T20:12:15Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "250.7.156.251", "userAgent": "aws-cli/1.16.199 Python/2.7.15 Darwin/18.6.0 botocore/1.12.189", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"maxResults": 1000, "snapshotSet": {}, "ownersSet": {"items": [{"owner": "811596193553"}]}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "d228f695-8514-4dfd-9e7c-3a0d2e4896a8", "record_id": "flaws_cloudtrail:0000520:d228f695-8514-4dfd-9e7c-3a0d2e4896a8", "row_index": 520, "timestamp": "2019-07-18T20:12:15Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "250.7.156.251", "user_agent": "aws-cli/1.16.199 Python/2.7.15 Darwin/18.6.0 botocore/1.12.189", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 787, "raw_record_depth": 5, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "d228f695-8514-4dfd-9e7c-3a0d2e4896a8", "eventTime": "2019-07-18T20:12:15Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "250.7.156.251", "userAgent": "aws-cli/1.16.199 Python/2.7.15 Darwin/18.6.0 botocore/1.12.189", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"maxResults": 1000, "snapshotSet": {}, "ownersSet": {"items": [{"owner": "811596193553"}]}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "4ad9a1fd-723d-4afa-87d8-e81c53bd62bb", "record_id": "flaws_cloudtrail:0000521:4ad9a1fd-723d-4afa-87d8-e81c53bd62bb", "row_index": 521, "timestamp": "2019-07-18T20:12:23Z", "event_type": "RunInstances", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "237.25.162.210", "user_agent": "aws-cli/1.16.130 Python/3.7.3 Darwin/17.7.0 botocore/1.12.120", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 763, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "4ad9a1fd-723d-4afa-87d8-e81c53bd62bb", "eventTime": "2019-07-18T20:12:23Z", "eventName": "RunInstances", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "237.25.162.210", "userAgent": "aws-cli/1.16.130 Python/3.7.3 Darwin/17.7.0 botocore/1.12.120", "awsRegion": "us-west-2", "errorCode": "Client.MissingParameter", "errorMessage": "The request must contain the parameter ImageId", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "4ad9a1fd-723d-4afa-87d8-e81c53bd62bb", "record_id": "flaws_cloudtrail:0000522:4ad9a1fd-723d-4afa-87d8-e81c53bd62bb", "row_index": 522, "timestamp": "2019-07-18T20:12:23Z", "event_type": "RunInstances", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "237.25.162.210", "user_agent": "aws-cli/1.16.130 Python/3.7.3 Darwin/17.7.0 botocore/1.12.120", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 763, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "4ad9a1fd-723d-4afa-87d8-e81c53bd62bb", "eventTime": "2019-07-18T20:12:23Z", "eventName": "RunInstances", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "237.25.162.210", "userAgent": "aws-cli/1.16.130 Python/3.7.3 Darwin/17.7.0 botocore/1.12.120", "awsRegion": "us-west-2", "errorCode": "Client.MissingParameter", "errorMessage": "The request must contain the parameter ImageId", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "d779f3dc-a3d8-4d6a-ad4e-80dd5e696ecb", "record_id": "flaws_cloudtrail:0000523:d779f3dc-a3d8-4d6a-ad4e-80dd5e696ecb", "row_index": 523, "timestamp": "2019-07-18T20:12:40Z", "event_type": "RunInstances", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "237.25.162.210", "user_agent": "aws-cli/1.16.130 Python/3.7.3 Darwin/17.7.0 botocore/1.12.120", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1676, "raw_record_depth": 5, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "d779f3dc-a3d8-4d6a-ad4e-80dd5e696ecb", "eventTime": "2019-07-18T20:12:40Z", "eventName": "RunInstances", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "237.25.162.210", "userAgent": "aws-cli/1.16.130 Python/3.7.3 Darwin/17.7.0 botocore/1.12.120", "awsRegion": "us-west-2", "errorCode": "Client.UnauthorizedOperation", "errorMessage": "You are not authorized to perform this operation. Encoded authorization failure message: 2pS_gvx7cU4Gfdbybe41tfD42YoXIZQwAUDdgtyUyGbDCIbqNT9zW27JZrZSkt5OUXAn0FYcNmDSZ5DwtRzxhK8ABRhBA5g08HcXRcDS7QemDyJVTnsrbn5OTD53uiffyZkX-9Og5DOD-iPvycDqh-h-wtWOf8Vga9_PveNmk5qNb3gs1_TzPbp292-6om3l5GdJ9TZg-jKXcDNWF4Nhxx2WOkP9PJ7t3KEqnX4IzUzPgX2ihjhfg8Yme82NtM_ZwZhJsCq02Or5_6GHj9wrYqW5YnItrVs8ph1yyieVWTdQLWUDPm2h3sBsXy_ZSC3VkMiYzshAEJeF_DPxhNUqyfqsws6oA4TPJuE8g-E2EHMuiZ9UD0fRSQWiagXSb78JaqRHU9I1HgpeqzEY_LmYwAcVbPvTCIaW__uPd1yWjLuAkTdn_AzNXUi8KSjX4P5pJvSfnUwycTUe0RJyRAbG1A-wi7WTxV0QqI0GsO2F3prET8kvIjzvTzc59Ni7ueFrvkjwo6S5eNWf2ZKFq2AgavNWcmrvxZ-PZUQPulUjJZ4eHggRXaQol48N8F3Rvzn_xMxBz5m3Luw8ywSgu6J2T-BAsyjB5-8-VIz-oXP8k19owZHP6HHXbUuYkzmLb7cAT3xLosG5yJ1dtqsDYGw12UjldqKeE1BR", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"instancesSet": {"items": [{"imageId": "ami-b9861e36", "minCount": 1, "maxCount": 1}]}, "instanceType": "t2.micro", "monitoring": {"enabled": false}, "disableApiTermination": false}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "d779f3dc-a3d8-4d6a-ad4e-80dd5e696ecb", "record_id": "flaws_cloudtrail:0000524:d779f3dc-a3d8-4d6a-ad4e-80dd5e696ecb", "row_index": 524, "timestamp": "2019-07-18T20:12:40Z", "event_type": "RunInstances", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "237.25.162.210", "user_agent": "aws-cli/1.16.130 Python/3.7.3 Darwin/17.7.0 botocore/1.12.120", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1676, "raw_record_depth": 5, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "d779f3dc-a3d8-4d6a-ad4e-80dd5e696ecb", "eventTime": "2019-07-18T20:12:40Z", "eventName": "RunInstances", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "237.25.162.210", "userAgent": "aws-cli/1.16.130 Python/3.7.3 Darwin/17.7.0 botocore/1.12.120", "awsRegion": "us-west-2", "errorCode": "Client.UnauthorizedOperation", "errorMessage": "You are not authorized to perform this operation. Encoded authorization failure message: 2pS_gvx7cU4Gfdbybe41tfD42YoXIZQwAUDdgtyUyGbDCIbqNT9zW27JZrZSkt5OUXAn0FYcNmDSZ5DwtRzxhK8ABRhBA5g08HcXRcDS7QemDyJVTnsrbn5OTD53uiffyZkX-9Og5DOD-iPvycDqh-h-wtWOf8Vga9_PveNmk5qNb3gs1_TzPbp292-6om3l5GdJ9TZg-jKXcDNWF4Nhxx2WOkP9PJ7t3KEqnX4IzUzPgX2ihjhfg8Yme82NtM_ZwZhJsCq02Or5_6GHj9wrYqW5YnItrVs8ph1yyieVWTdQLWUDPm2h3sBsXy_ZSC3VkMiYzshAEJeF_DPxhNUqyfqsws6oA4TPJuE8g-E2EHMuiZ9UD0fRSQWiagXSb78JaqRHU9I1HgpeqzEY_LmYwAcVbPvTCIaW__uPd1yWjLuAkTdn_AzNXUi8KSjX4P5pJvSfnUwycTUe0RJyRAbG1A-wi7WTxV0QqI0GsO2F3prET8kvIjzvTzc59Ni7ueFrvkjwo6S5eNWf2ZKFq2AgavNWcmrvxZ-PZUQPulUjJZ4eHggRXaQol48N8F3Rvzn_xMxBz5m3Luw8ywSgu6J2T-BAsyjB5-8-VIz-oXP8k19owZHP6HHXbUuYkzmLb7cAT3xLosG5yJ1dtqsDYGw12UjldqKeE1BR", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"instancesSet": {"items": [{"imageId": "ami-b9861e36", "minCount": 1, "maxCount": 1}]}, "instanceType": "t2.micro", "monitoring": {"enabled": false}, "disableApiTermination": false}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "04a303d2-a372-425d-b66c-b00910aae4fd", "record_id": "flaws_cloudtrail:0000525:04a303d2-a372-425d-b66c-b00910aae4fd", "row_index": 525, "timestamp": "2019-07-18T20:12:43Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "237.25.162.210", "user_agent": "aws-cli/1.16.199 Python/2.7.15 Darwin/16.7.0 botocore/1.12.189", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 754, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "04a303d2-a372-425d-b66c-b00910aae4fd", "eventTime": "2019-07-18T20:12:43Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "237.25.162.210", "userAgent": "aws-cli/1.16.199 Python/2.7.15 Darwin/16.7.0 botocore/1.12.189", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "04a303d2-a372-425d-b66c-b00910aae4fd", "record_id": "flaws_cloudtrail:0000526:04a303d2-a372-425d-b66c-b00910aae4fd", "row_index": 526, "timestamp": "2019-07-18T20:12:43Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "237.25.162.210", "user_agent": "aws-cli/1.16.199 Python/2.7.15 Darwin/16.7.0 botocore/1.12.189", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 754, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "04a303d2-a372-425d-b66c-b00910aae4fd", "eventTime": "2019-07-18T20:12:43Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "237.25.162.210", "userAgent": "aws-cli/1.16.199 Python/2.7.15 Darwin/16.7.0 botocore/1.12.189", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "cc55862-7778-4cfa-830a-9e41a2e4212a", "record_id": "flaws_cloudtrail:0000527:cc55862-7778-4cfa-830a-9e41a2e4212a", "row_index": 527, "timestamp": "2019-07-18T20:12:45Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "237.25.162.210", "user_agent": "aws-cli/1.16.199 Python/2.7.15 Darwin/16.7.0 botocore/1.12.189", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 1080, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "cc55862-7778-4cfa-830a-9e41a2e4212a", "eventTime": "2019-07-18T20:12:45Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "237.25.162.210", "userAgent": "aws-cli/1.16.199 Python/2.7.15 Darwin/16.7.0 botocore/1.12.189", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"nextToken": "eyJ2IjoiMiIsImMiOiJZMTQyVzZNTFJZTU95eUhFSEtISHBrWEtjN0pOaGNlWDFZaWtvcXVhSlhVb0w4ZXhwOGdTQ0RmWUs1d0daeGJIQXN6Z0hSRm9zZ3ZNZ3dUemZUOWxYYmFPYUFRMCtYTTZGUUdZQWJCYkV5WUthWjR0SlFQVnVkb3FwWktuYUQydnB5Qys0VDQwT3QxanZZbURzaVRzelhHVXQ1eU4yUzkwb2ZidklQT2EySzVjajNWb0hHeGpPZTRWQXhpUDB6aCtPMGI1c1VycXVxRHNKZz09IiwicyI6IjEifQ==", "maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "cc55862-7778-4cfa-830a-9e41a2e4212a", "record_id": "flaws_cloudtrail:0000528:cc55862-7778-4cfa-830a-9e41a2e4212a", "row_index": 528, "timestamp": "2019-07-18T20:12:45Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "237.25.162.210", "user_agent": "aws-cli/1.16.199 Python/2.7.15 Darwin/16.7.0 botocore/1.12.189", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 1080, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "cc55862-7778-4cfa-830a-9e41a2e4212a", "eventTime": "2019-07-18T20:12:45Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "237.25.162.210", "userAgent": "aws-cli/1.16.199 Python/2.7.15 Darwin/16.7.0 botocore/1.12.189", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"nextToken": "eyJ2IjoiMiIsImMiOiJZMTQyVzZNTFJZTU95eUhFSEtISHBrWEtjN0pOaGNlWDFZaWtvcXVhSlhVb0w4ZXhwOGdTQ0RmWUs1d0daeGJIQXN6Z0hSRm9zZ3ZNZ3dUemZUOWxYYmFPYUFRMCtYTTZGUUdZQWJCYkV5WUthWjR0SlFQVnVkb3FwWktuYUQydnB5Qys0VDQwT3QxanZZbURzaVRzelhHVXQ1eU4yUzkwb2ZidklQT2EySzVjajNWb0hHeGpPZTRWQXhpUDB6aCtPMGI1c1VycXVxRHNKZz09IiwicyI6IjEifQ==", "maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "546763dbb-9e36-4b09-b3dd-d7d62757a763", "record_id": "flaws_cloudtrail:0000529:546763dbb-9e36-4b09-b3dd-d7d62757a763", "row_index": 529, "timestamp": "2019-07-18T20:12:46Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "237.25.162.210", "user_agent": "aws-cli/1.16.199 Python/2.7.15 Darwin/16.7.0 botocore/1.12.189", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 1084, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "546763dbb-9e36-4b09-b3dd-d7d62757a763", "eventTime": "2019-07-18T20:12:46Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "237.25.162.210", "userAgent": "aws-cli/1.16.199 Python/2.7.15 Darwin/16.7.0 botocore/1.12.189", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"nextToken": "eyJ2IjoiMiIsImMiOiJFaUs2YzFDaHNibWhsQmdNcTRFUDF3QnM5YVV0NHFyZGwrUWhFZ0hYZ0NZYUNDbm9sdUVjVU51bnBNTnpZMjAzZk1Vb1liTk1DRUtERlJEKzBGWEtEVVRMVGwxVnBlMjBKSlM4dE1nN3ZLODlrUGVhWFcxcExHcW90Z1lldEk3WXQ2d0cyUHdZWXFJK0pqY0FEY1pRcDB3ckx4U0pqR0x2NTFJaVliRFZxZHBpdlJ6ZkRpUWZydjlwVEs4MkR4YXZST2VYRER1WkIzNGFQZz09IiwicyI6IjEifQ==", "maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "546763dbb-9e36-4b09-b3dd-d7d62757a763", "record_id": "flaws_cloudtrail:0000530:546763dbb-9e36-4b09-b3dd-d7d62757a763", "row_index": 530, "timestamp": "2019-07-18T20:12:46Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "237.25.162.210", "user_agent": "aws-cli/1.16.199 Python/2.7.15 Darwin/16.7.0 botocore/1.12.189", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 1084, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "546763dbb-9e36-4b09-b3dd-d7d62757a763", "eventTime": "2019-07-18T20:12:46Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "237.25.162.210", "userAgent": "aws-cli/1.16.199 Python/2.7.15 Darwin/16.7.0 botocore/1.12.189", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"nextToken": "eyJ2IjoiMiIsImMiOiJFaUs2YzFDaHNibWhsQmdNcTRFUDF3QnM5YVV0NHFyZGwrUWhFZ0hYZ0NZYUNDbm9sdUVjVU51bnBNTnpZMjAzZk1Vb1liTk1DRUtERlJEKzBGWEtEVVRMVGwxVnBlMjBKSlM4dE1nN3ZLODlrUGVhWFcxcExHcW90Z1lldEk3WXQ2d0cyUHdZWXFJK0pqY0FEY1pRcDB3ckx4U0pqR0x2NTFJaVliRFZxZHBpdlJ6ZkRpUWZydjlwVEs4MkR4YXZST2VYRER1WkIzNGFQZz09IiwicyI6IjEifQ==", "maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "b6d073cc-562a-49b4-bccf-2de430076769", "record_id": "flaws_cloudtrail:0000531:b6d073cc-562a-49b4-bccf-2de430076769", "row_index": 531, "timestamp": "2019-07-18T20:12:47Z", "event_type": "RunInstances", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "237.25.162.210", "user_agent": "aws-cli/1.16.130 Python/3.7.3 Darwin/17.7.0 botocore/1.12.120", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1676, "raw_record_depth": 5, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "b6d073cc-562a-49b4-bccf-2de430076769", "eventTime": "2019-07-18T20:12:47Z", "eventName": "RunInstances", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "237.25.162.210", "userAgent": "aws-cli/1.16.130 Python/3.7.3 Darwin/17.7.0 botocore/1.12.120", "awsRegion": "us-west-2", "errorCode": "Client.UnauthorizedOperation", "errorMessage": "You are not authorized to perform this operation. Encoded authorization failure message: 596CQCa5sx86xgHOs0COffl2TPhFUs7oKj8gD9kzWHM6yB-wplX-f1DDGugVeli-9VrrfSIQVGfQDCjso8cMU9SOovwwhLP-lAng3ERc4CGFm2IDOfK23XxNSot93s5P9Ei0r_Y89ieUL4juqo-XcWvepn-7sTeAM0bWLFxKFB9TxrkCjHrEfmhWliGUilLrrM-mlcJBO3HrX_Ijkh3Khsm3cBnyOiwNqAfEVmtNXaMR0TjOXrcIVCtwuEBvDHCGEVlSZyW4t7LdxWABZHJRQGz1l7SdAo1nHHM--tUoD-6OobNlG4u_083x1mByaYvQ0s1YUprXLxzM-e316gS0unsWUcCoGpqPE9xDux82v4ZDRHCjdD7FNeV9G-DQgnEFuMGOe1C9mJ9pdm2jJsa_I3-t_5CbAcle0hq2V7O0B37usfMQjmlJdVlWsrwTB6EBNA9hTtxW2dt0TV14CwwMgyEK_ZGAQhrAiMkihUFm3S0-CGde_JZV2Ea7SmTGkaD8MWYQJuH5cNP6gZga0DEtyt3IqluJl1E8HlrCljNsA0VqWdtVjj3ClETkWAqKzlb1ZxOTyPSUxzs6l2raTGJEPL0Y8PSbwEOM4JpoAg0W9SQXVSC-W_KTD6R7QmMTO73e5QRal_EusxK5ybpUVCwDsSL16jM8NzKN", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"instancesSet": {"items": [{"imageId": "ami-b9861e36", "minCount": 1, "maxCount": 1}]}, "instanceType": "t2.micro", "monitoring": {"enabled": false}, "disableApiTermination": false}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "b6d073cc-562a-49b4-bccf-2de430076769", "record_id": "flaws_cloudtrail:0000532:b6d073cc-562a-49b4-bccf-2de430076769", "row_index": 532, "timestamp": "2019-07-18T20:12:47Z", "event_type": "RunInstances", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "237.25.162.210", "user_agent": "aws-cli/1.16.130 Python/3.7.3 Darwin/17.7.0 botocore/1.12.120", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1676, "raw_record_depth": 5, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "b6d073cc-562a-49b4-bccf-2de430076769", "eventTime": "2019-07-18T20:12:47Z", "eventName": "RunInstances", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "237.25.162.210", "userAgent": "aws-cli/1.16.130 Python/3.7.3 Darwin/17.7.0 botocore/1.12.120", "awsRegion": "us-west-2", "errorCode": "Client.UnauthorizedOperation", "errorMessage": "You are not authorized to perform this operation. Encoded authorization failure message: 596CQCa5sx86xgHOs0COffl2TPhFUs7oKj8gD9kzWHM6yB-wplX-f1DDGugVeli-9VrrfSIQVGfQDCjso8cMU9SOovwwhLP-lAng3ERc4CGFm2IDOfK23XxNSot93s5P9Ei0r_Y89ieUL4juqo-XcWvepn-7sTeAM0bWLFxKFB9TxrkCjHrEfmhWliGUilLrrM-mlcJBO3HrX_Ijkh3Khsm3cBnyOiwNqAfEVmtNXaMR0TjOXrcIVCtwuEBvDHCGEVlSZyW4t7LdxWABZHJRQGz1l7SdAo1nHHM--tUoD-6OobNlG4u_083x1mByaYvQ0s1YUprXLxzM-e316gS0unsWUcCoGpqPE9xDux82v4ZDRHCjdD7FNeV9G-DQgnEFuMGOe1C9mJ9pdm2jJsa_I3-t_5CbAcle0hq2V7O0B37usfMQjmlJdVlWsrwTB6EBNA9hTtxW2dt0TV14CwwMgyEK_ZGAQhrAiMkihUFm3S0-CGde_JZV2Ea7SmTGkaD8MWYQJuH5cNP6gZga0DEtyt3IqluJl1E8HlrCljNsA0VqWdtVjj3ClETkWAqKzlb1ZxOTyPSUxzs6l2raTGJEPL0Y8PSbwEOM4JpoAg0W9SQXVSC-W_KTD6R7QmMTO73e5QRal_EusxK5ybpUVCwDsSL16jM8NzKN", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"instancesSet": {"items": [{"imageId": "ami-b9861e36", "minCount": 1, "maxCount": 1}]}, "instanceType": "t2.micro", "monitoring": {"enabled": false}, "disableApiTermination": false}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "53ca0f9a-d184-4998-b31e-195d41274bae", "record_id": "flaws_cloudtrail:0000533:53ca0f9a-d184-4998-b31e-195d41274bae", "row_index": 533, "timestamp": "2019-07-18T20:12:48Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "237.25.162.210", "user_agent": "aws-cli/1.16.199 Python/2.7.15 Darwin/16.7.0 botocore/1.12.189", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 1081, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "53ca0f9a-d184-4998-b31e-195d41274bae", "eventTime": "2019-07-18T20:12:48Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "237.25.162.210", "userAgent": "aws-cli/1.16.199 Python/2.7.15 Darwin/16.7.0 botocore/1.12.189", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"nextToken": "eyJ2IjoiMiIsImMiOiJxSkF1RGh5UzUwNDNqMUJTbkVZUU5uL1RNYjJDdGxKdCt6NmE0V3MvTHFzYzBYZTVQVzdsNDB3Z0phdUljV3U0N3ViNjhCOGMxTmwrRTU5eVNSSGwrNTZQMVJabEkwK3d1bDRqNDJiN2MxMFFDYzhWL3FNUTlMTUtjTS9IRzF3QzVRNHhPNHpjUURxRG9ucmRUOEtRdzRSRzdqYWFZV2hRNCtZaGl5dldyK1RFSDN6UUxVM3N6QU9GbW9pMnNuakdjaG1xblM5QVZzVlAzdz09IiwicyI6IjEifQ==", "maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "c0548d24-f27e-44c4-8091-d3266a57bbff", "record_id": "flaws_cloudtrail:0000534:c0548d24-f27e-44c4-8091-d3266a57bbff", "row_index": 534, "timestamp": "2019-07-18T20:12:48Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "48.242.79.253", "user_agent": "aws-cli/1.16.160 Python/3.7.3 Darwin/18.6.0 botocore/1.12.150", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 752, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "c0548d24-f27e-44c4-8091-d3266a57bbff", "eventTime": "2019-07-18T20:12:48Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "48.242.79.253", "userAgent": "aws-cli/1.16.160 Python/3.7.3 Darwin/18.6.0 botocore/1.12.150", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "53ca0f9a-d184-4998-b31e-195d41274bae", "record_id": "flaws_cloudtrail:0000535:53ca0f9a-d184-4998-b31e-195d41274bae", "row_index": 535, "timestamp": "2019-07-18T20:12:48Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "237.25.162.210", "user_agent": "aws-cli/1.16.199 Python/2.7.15 Darwin/16.7.0 botocore/1.12.189", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 1081, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "53ca0f9a-d184-4998-b31e-195d41274bae", "eventTime": "2019-07-18T20:12:48Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "237.25.162.210", "userAgent": "aws-cli/1.16.199 Python/2.7.15 Darwin/16.7.0 botocore/1.12.189", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"nextToken": "eyJ2IjoiMiIsImMiOiJxSkF1RGh5UzUwNDNqMUJTbkVZUU5uL1RNYjJDdGxKdCt6NmE0V3MvTHFzYzBYZTVQVzdsNDB3Z0phdUljV3U0N3ViNjhCOGMxTmwrRTU5eVNSSGwrNTZQMVJabEkwK3d1bDRqNDJiN2MxMFFDYzhWL3FNUTlMTUtjTS9IRzF3QzVRNHhPNHpjUURxRG9ucmRUOEtRdzRSRzdqYWFZV2hRNCtZaGl5dldyK1RFSDN6UUxVM3N6QU9GbW9pMnNuakdjaG1xblM5QVZzVlAzdz09IiwicyI6IjEifQ==", "maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "c0548d24-f27e-44c4-8091-d3266a57bbff", "record_id": "flaws_cloudtrail:0000536:c0548d24-f27e-44c4-8091-d3266a57bbff", "row_index": 536, "timestamp": "2019-07-18T20:12:48Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "48.242.79.253", "user_agent": "aws-cli/1.16.160 Python/3.7.3 Darwin/18.6.0 botocore/1.12.150", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 752, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "c0548d24-f27e-44c4-8091-d3266a57bbff", "eventTime": "2019-07-18T20:12:48Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "48.242.79.253", "userAgent": "aws-cli/1.16.160 Python/3.7.3 Darwin/18.6.0 botocore/1.12.150", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "071c22fa-e068-4f03-b159-ca04dc684110", "record_id": "flaws_cloudtrail:0000537:071c22fa-e068-4f03-b159-ca04dc684110", "row_index": 537, "timestamp": "2019-07-18T20:12:49Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "237.25.162.210", "user_agent": "aws-cli/1.16.199 Python/2.7.15 Darwin/16.7.0 botocore/1.12.189", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 1072, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "071c22fa-e068-4f03-b159-ca04dc684110", "eventTime": "2019-07-18T20:12:49Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "237.25.162.210", "userAgent": "aws-cli/1.16.199 Python/2.7.15 Darwin/16.7.0 botocore/1.12.189", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"nextToken": "eyJ2IjoiMiIsImMiOiJEMWxJL0wxNk9SRGdOcmZNTHFLeUc1VXI2SVRGYVd0cVVwTDNtNHIwcTZCVmNoRzR3UXpxL2FlakE0V1hiSjVKTGZtTi9hZ3JGK2lWb2UwQS8xbkZLYk5lSVNrY3NhUEQxTGQ0NGpSN1ltWTcyRi81UXRtSm5BeUx0dmdUcXRCQ3dPRHJtcG51Nzd4aS9PbUdzZWU1NlpLN2tSSnp1V3I4RkpUK0dRK1NKYXhTdnhuYXRYa25ZSHpaQTJVSHFzMjhxTEd1RGQ4M1VRPT0iLCJzIjoiMSJ9", "maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "071c22fa-e068-4f03-b159-ca04dc684110", "record_id": "flaws_cloudtrail:0000538:071c22fa-e068-4f03-b159-ca04dc684110", "row_index": 538, "timestamp": "2019-07-18T20:12:49Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "237.25.162.210", "user_agent": "aws-cli/1.16.199 Python/2.7.15 Darwin/16.7.0 botocore/1.12.189", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 1072, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "071c22fa-e068-4f03-b159-ca04dc684110", "eventTime": "2019-07-18T20:12:49Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "237.25.162.210", "userAgent": "aws-cli/1.16.199 Python/2.7.15 Darwin/16.7.0 botocore/1.12.189", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"nextToken": "eyJ2IjoiMiIsImMiOiJEMWxJL0wxNk9SRGdOcmZNTHFLeUc1VXI2SVRGYVd0cVVwTDNtNHIwcTZCVmNoRzR3UXpxL2FlakE0V1hiSjVKTGZtTi9hZ3JGK2lWb2UwQS8xbkZLYk5lSVNrY3NhUEQxTGQ0NGpSN1ltWTcyRi81UXRtSm5BeUx0dmdUcXRCQ3dPRHJtcG51Nzd4aS9PbUdzZWU1NlpLN2tSSnp1V3I4RkpUK0dRK1NKYXhTdnhuYXRYa25ZSHpaQTJVSHFzMjhxTEd1RGQ4M1VRPT0iLCJzIjoiMSJ9", "maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "3e38a8c0-59cc-4cf1-af03-0e79956aac56", "record_id": "flaws_cloudtrail:0000539:3e38a8c0-59cc-4cf1-af03-0e79956aac56", "row_index": 539, "timestamp": "2019-07-18T20:12:50Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "237.25.162.210", "user_agent": "aws-cli/1.16.199 Python/2.7.15 Darwin/16.7.0 botocore/1.12.189", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 1081, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "3e38a8c0-59cc-4cf1-af03-0e79956aac56", "eventTime": "2019-07-18T20:12:50Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "237.25.162.210", "userAgent": "aws-cli/1.16.199 Python/2.7.15 Darwin/16.7.0 botocore/1.12.189", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"nextToken": "eyJ2IjoiMiIsImMiOiJPeXMxZUlOeWcvMkJOeWFIWHdUVnVlK2V2L1ljSjZxM2dIVTM0MDJFSEVueXVPQ1IzSjBQQWpWbEhYMExnSndaalhGMGxINU83cEt0cDhQaU5tSDg0aEVIT25OSWFGOEtKMjF6UTcwbXhtU002aUVzNEhGa0Q0L1hLLzFRa1ZKQjk2M01nc3p1ZGt0elM3QThXcFFoN2tOTHV5T0YxVkkydHdDbWZBTWpuYnlQSmZPUzJxaXhaY1BiZzdndGZCVnA1NDhmNjBXd3BaSW5ZQT09IiwicyI6IjEifQ==", "maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "3e38a8c0-59cc-4cf1-af03-0e79956aac56", "record_id": "flaws_cloudtrail:0000540:3e38a8c0-59cc-4cf1-af03-0e79956aac56", "row_index": 540, "timestamp": "2019-07-18T20:12:50Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "237.25.162.210", "user_agent": "aws-cli/1.16.199 Python/2.7.15 Darwin/16.7.0 botocore/1.12.189", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 1081, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "3e38a8c0-59cc-4cf1-af03-0e79956aac56", "eventTime": "2019-07-18T20:12:50Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "237.25.162.210", "userAgent": "aws-cli/1.16.199 Python/2.7.15 Darwin/16.7.0 botocore/1.12.189", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"nextToken": "eyJ2IjoiMiIsImMiOiJPeXMxZUlOeWcvMkJOeWFIWHdUVnVlK2V2L1ljSjZxM2dIVTM0MDJFSEVueXVPQ1IzSjBQQWpWbEhYMExnSndaalhGMGxINU83cEt0cDhQaU5tSDg0aEVIT25OSWFGOEtKMjF6UTcwbXhtU002aUVzNEhGa0Q0L1hLLzFRa1ZKQjk2M01nc3p1ZGt0elM3QThXcFFoN2tOTHV5T0YxVkkydHdDbWZBTWpuYnlQSmZPUzJxaXhaY1BiZzdndGZCVnA1NDhmNjBXd3BaSW5ZQT09IiwicyI6IjEifQ==", "maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "b2a18b05-5fa0-4317-87d4-7dddf9629c54", "record_id": "flaws_cloudtrail:0000541:b2a18b05-5fa0-4317-87d4-7dddf9629c54", "row_index": 541, "timestamp": "2019-07-18T20:12:51Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "48.242.79.253", "user_agent": "aws-cli/1.16.160 Python/3.7.3 Darwin/18.6.0 botocore/1.12.150", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1079, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "b2a18b05-5fa0-4317-87d4-7dddf9629c54", "eventTime": "2019-07-18T20:12:51Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "48.242.79.253", "userAgent": "aws-cli/1.16.160 Python/3.7.3 Darwin/18.6.0 botocore/1.12.150", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"nextToken": "eyJ2IjoiMiIsImMiOiI4MmFVWGhwSUZJR3FTZjVnVXU3WGQ3cGxtZ0JTWHUveTM2S052RnIyZGJIL1BwMklpcEt3VmpIR1dwdlNyZEpIemt6RXQ3UGZxMWhlOVp1Ui9qTk5OM1o4clN6VzFOeG85ZEs2VGI1NlBsK2haZ0plRWtESXltdnBWN1lhME1yekZCQjBTZXc5OUlIWitxMElhZVhIUG1SOGQ3eTF4cS9CYVZ4N0ZsQ1RmMzNNaTRUQnRUUzVxNDR1T3J4VUZSWTN3eVhlSDhGSmFia2pnUT09IiwicyI6IjEifQ==", "maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "b2a18b05-5fa0-4317-87d4-7dddf9629c54", "record_id": "flaws_cloudtrail:0000542:b2a18b05-5fa0-4317-87d4-7dddf9629c54", "row_index": 542, "timestamp": "2019-07-18T20:12:51Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "48.242.79.253", "user_agent": "aws-cli/1.16.160 Python/3.7.3 Darwin/18.6.0 botocore/1.12.150", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1079, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "b2a18b05-5fa0-4317-87d4-7dddf9629c54", "eventTime": "2019-07-18T20:12:51Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "48.242.79.253", "userAgent": "aws-cli/1.16.160 Python/3.7.3 Darwin/18.6.0 botocore/1.12.150", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"nextToken": "eyJ2IjoiMiIsImMiOiI4MmFVWGhwSUZJR3FTZjVnVXU3WGQ3cGxtZ0JTWHUveTM2S052RnIyZGJIL1BwMklpcEt3VmpIR1dwdlNyZEpIemt6RXQ3UGZxMWhlOVp1Ui9qTk5OM1o4clN6VzFOeG85ZEs2VGI1NlBsK2haZ0plRWtESXltdnBWN1lhME1yekZCQjBTZXc5OUlIWitxMElhZVhIUG1SOGQ3eTF4cS9CYVZ4N0ZsQ1RmMzNNaTRUQnRUUzVxNDR1T3J4VUZSWTN3eVhlSDhGSmFia2pnUT09IiwicyI6IjEifQ==", "maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "d9a6947f-e002-4c1c-a8b0-b530ba87d517", "record_id": "flaws_cloudtrail:0000543:d9a6947f-e002-4c1c-a8b0-b530ba87d517", "row_index": 543, "timestamp": "2019-07-18T20:12:52Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "237.25.162.210", "user_agent": "aws-cli/1.16.199 Python/2.7.15 Darwin/16.7.0 botocore/1.12.189", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 1081, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "d9a6947f-e002-4c1c-a8b0-b530ba87d517", "eventTime": "2019-07-18T20:12:52Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "237.25.162.210", "userAgent": "aws-cli/1.16.199 Python/2.7.15 Darwin/16.7.0 botocore/1.12.189", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"nextToken": "eyJ2IjoiMiIsImMiOiJTd0NzalJkZ283N0Z0eVh1MTBEOThTSFI4M1o3WUNHVUxnbE1KVk1ZUXVZcS9YeDFYcGhCOTd5YWhMcmZBSk9mTW5pSklHck1TSndnU0p1KzhxZy82WDkybTdEb21nSkRXdWxTV3pxMm0rRVhhV1dzeGtweDkwYWdISVMrVEhtdDVtOHNCY256S3B4SlNLY2ZaR3lrclloc1hpckR1K3c0UGN2RDI2RkNrdUM4NGVXTU03NlVhMHJJcE9HVEthdys5Sys0NmZkRm92VU1oUT09IiwicyI6IjEifQ==", "maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "d9a6947f-e002-4c1c-a8b0-b530ba87d517", "record_id": "flaws_cloudtrail:0000544:d9a6947f-e002-4c1c-a8b0-b530ba87d517", "row_index": 544, "timestamp": "2019-07-18T20:12:52Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "237.25.162.210", "user_agent": "aws-cli/1.16.199 Python/2.7.15 Darwin/16.7.0 botocore/1.12.189", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 1081, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "d9a6947f-e002-4c1c-a8b0-b530ba87d517", "eventTime": "2019-07-18T20:12:52Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "237.25.162.210", "userAgent": "aws-cli/1.16.199 Python/2.7.15 Darwin/16.7.0 botocore/1.12.189", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"nextToken": "eyJ2IjoiMiIsImMiOiJTd0NzalJkZ283N0Z0eVh1MTBEOThTSFI4M1o3WUNHVUxnbE1KVk1ZUXVZcS9YeDFYcGhCOTd5YWhMcmZBSk9mTW5pSklHck1TSndnU0p1KzhxZy82WDkybTdEb21nSkRXdWxTV3pxMm0rRVhhV1dzeGtweDkwYWdISVMrVEhtdDVtOHNCY256S3B4SlNLY2ZaR3lrclloc1hpckR1K3c0UGN2RDI2RkNrdUM4NGVXTU03NlVhMHJJcE9HVEthdys5Sys0NmZkRm92VU1oUT09IiwicyI6IjEifQ==", "maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "2e96780-55e9-4a35-9840-a72952d2e", "record_id": "flaws_cloudtrail:0000545:2e96780-55e9-4a35-9840-a72952d2e", "row_index": 545, "timestamp": "2019-07-18T20:12:53Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "237.25.162.210", "user_agent": "aws-cli/1.16.199 Python/2.7.15 Darwin/16.7.0 botocore/1.12.189", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 1077, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "2e96780-55e9-4a35-9840-a72952d2e", "eventTime": "2019-07-18T20:12:53Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "237.25.162.210", "userAgent": "aws-cli/1.16.199 Python/2.7.15 Darwin/16.7.0 botocore/1.12.189", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"nextToken": "eyJ2IjoiMiIsImMiOiI3UlQ5bHdHYmQrd1ljalZqTTY2SDBPOXdCNjZGNm1GOEpOTVFRRmJqSWRYK0VtbzQxQWxLNDh6MkNVTDFyU3ZqQ0VyOTlSQWkxbzRGbTZHbFhPVEFpUVNTSkZxZURvV1NSSlAxMVZEU1c5VXBzaEMrSm9ZQkdxcXlDdlI4VTFkY25lTzJPa0xCcXlyUXl5KzdqWm1IallxMGU4WWtwS09PVFBnS0tMZE9YMTBlcnlJcjF0QTBQckp2M1VaUHRsQ0dSRmRxZU9CNHNYQ1EyUT09IiwicyI6IjEifQ==", "maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "2e96780-55e9-4a35-9840-a72952d2e", "record_id": "flaws_cloudtrail:0000546:2e96780-55e9-4a35-9840-a72952d2e", "row_index": 546, "timestamp": "2019-07-18T20:12:53Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "237.25.162.210", "user_agent": "aws-cli/1.16.199 Python/2.7.15 Darwin/16.7.0 botocore/1.12.189", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 1077, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "2e96780-55e9-4a35-9840-a72952d2e", "eventTime": "2019-07-18T20:12:53Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "237.25.162.210", "userAgent": "aws-cli/1.16.199 Python/2.7.15 Darwin/16.7.0 botocore/1.12.189", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"nextToken": "eyJ2IjoiMiIsImMiOiI3UlQ5bHdHYmQrd1ljalZqTTY2SDBPOXdCNjZGNm1GOEpOTVFRRmJqSWRYK0VtbzQxQWxLNDh6MkNVTDFyU3ZqQ0VyOTlSQWkxbzRGbTZHbFhPVEFpUVNTSkZxZURvV1NSSlAxMVZEU1c5VXBzaEMrSm9ZQkdxcXlDdlI4VTFkY25lTzJPa0xCcXlyUXl5KzdqWm1IallxMGU4WWtwS09PVFBnS0tMZE9YMTBlcnlJcjF0QTBQckp2M1VaUHRsQ0dSRmRxZU9CNHNYQ1EyUT09IiwicyI6IjEifQ==", "maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "8658c4b5-0c0c-444e-8c9b-975a51baf869", "record_id": "flaws_cloudtrail:0000547:8658c4b5-0c0c-444e-8c9b-975a51baf869", "row_index": 547, "timestamp": "2019-07-18T20:12:54Z", "event_type": "RunInstances", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "237.25.162.210", "user_agent": "aws-cli/1.16.130 Python/3.7.3 Darwin/17.7.0 botocore/1.12.120", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1650, "raw_record_depth": 5, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "8658c4b5-0c0c-444e-8c9b-975a51baf869", "eventTime": "2019-07-18T20:12:54Z", "eventName": "RunInstances", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "237.25.162.210", "userAgent": "aws-cli/1.16.130 Python/3.7.3 Darwin/17.7.0 botocore/1.12.120", "awsRegion": "us-west-2", "errorCode": "Client.UnauthorizedOperation", "errorMessage": "You are not authorized to perform this operation. Encoded authorization failure message: Iam2kfZbeyYL_YWGpCdc9EkMNcZkDGdEgdRfbSHyJx-DurRXXZTfyYMnY4Ec_3Z-RFDi_Rsvt2IVuklxvTNaKbzUmb0wXQZxBGT4rEJMcIXW0LmMwQcDFi4Hq4KH3lPppBSgpXfcevb94AfyHSytB0bNAd5inKFyvAEVfFxRbIqDtnV2hrOQWoHcm40NzdP98MgmLsH3hxITdJW850jzv5ztp57EbcRVzdqtzNjf6pi12LEbLvTTg-aNOfXFeZwqvJZEI6omiG6BpZ3At9Kpb8nYOempX_ruHQBFOO2SXhn3zjwydWS1fGuG4mnQCH5RfA7MpnJIjwQ8A0JAD6X47OikX5nkFfEi79Jsf-aRFZi6450ct1MoH4PzVDYGrLCpd6MEmy4Zs-q7RtDPs1SsGXE7wXhLP8Gun7NV1MHdW-zTLu_nMmlO-ukSka_smSWLHAdQyrSFTqVY6Qxjpar_73nAkDwBLZoCCYGocsxnTT9dFzwtQZJtfCElkdypW6thdPcEHXYuN45LJReGpfgo-dXdpppl-Poju9j--jUjz39P35mnC8bmaN2IHOBKShmJU2QP6ZKs_TXena7gUV8vPHNncMgfrW7SFU037k69nIiym3_2-gof3SAGDaaiMMBmLM9vZsvsOPKWrzJw5T4q7TLwEitaFtgp", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"instancesSet": {"items": [{"imageId": "ami-b9861e36", "minCount": 1, "maxCount": 1}]}, "monitoring": {"enabled": false}, "disableApiTermination": false}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "8658c4b5-0c0c-444e-8c9b-975a51baf869", "record_id": "flaws_cloudtrail:0000548:8658c4b5-0c0c-444e-8c9b-975a51baf869", "row_index": 548, "timestamp": "2019-07-18T20:12:54Z", "event_type": "RunInstances", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "237.25.162.210", "user_agent": "aws-cli/1.16.130 Python/3.7.3 Darwin/17.7.0 botocore/1.12.120", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1650, "raw_record_depth": 5, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "8658c4b5-0c0c-444e-8c9b-975a51baf869", "eventTime": "2019-07-18T20:12:54Z", "eventName": "RunInstances", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "237.25.162.210", "userAgent": "aws-cli/1.16.130 Python/3.7.3 Darwin/17.7.0 botocore/1.12.120", "awsRegion": "us-west-2", "errorCode": "Client.UnauthorizedOperation", "errorMessage": "You are not authorized to perform this operation. Encoded authorization failure message: Iam2kfZbeyYL_YWGpCdc9EkMNcZkDGdEgdRfbSHyJx-DurRXXZTfyYMnY4Ec_3Z-RFDi_Rsvt2IVuklxvTNaKbzUmb0wXQZxBGT4rEJMcIXW0LmMwQcDFi4Hq4KH3lPppBSgpXfcevb94AfyHSytB0bNAd5inKFyvAEVfFxRbIqDtnV2hrOQWoHcm40NzdP98MgmLsH3hxITdJW850jzv5ztp57EbcRVzdqtzNjf6pi12LEbLvTTg-aNOfXFeZwqvJZEI6omiG6BpZ3At9Kpb8nYOempX_ruHQBFOO2SXhn3zjwydWS1fGuG4mnQCH5RfA7MpnJIjwQ8A0JAD6X47OikX5nkFfEi79Jsf-aRFZi6450ct1MoH4PzVDYGrLCpd6MEmy4Zs-q7RtDPs1SsGXE7wXhLP8Gun7NV1MHdW-zTLu_nMmlO-ukSka_smSWLHAdQyrSFTqVY6Qxjpar_73nAkDwBLZoCCYGocsxnTT9dFzwtQZJtfCElkdypW6thdPcEHXYuN45LJReGpfgo-dXdpppl-Poju9j--jUjz39P35mnC8bmaN2IHOBKShmJU2QP6ZKs_TXena7gUV8vPHNncMgfrW7SFU037k69nIiym3_2-gof3SAGDaaiMMBmLM9vZsvsOPKWrzJw5T4q7TLwEitaFtgp", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"instancesSet": {"items": [{"imageId": "ami-b9861e36", "minCount": 1, "maxCount": 1}]}, "monitoring": {"enabled": false}, "disableApiTermination": false}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "996130-4440-403d-8cef-167859aee2f2", "record_id": "flaws_cloudtrail:0000549:996130-4440-403d-8cef-167859aee2f2", "row_index": 549, "timestamp": "2019-07-18T20:12:55Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "237.25.162.210", "user_agent": "aws-cli/1.16.199 Python/2.7.15 Darwin/16.7.0 botocore/1.12.189", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 1079, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "996130-4440-403d-8cef-167859aee2f2", "eventTime": "2019-07-18T20:12:55Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "237.25.162.210", "userAgent": "aws-cli/1.16.199 Python/2.7.15 Darwin/16.7.0 botocore/1.12.189", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"nextToken": "eyJ2IjoiMiIsImMiOiIxK3BYUERiZTA5OSsyVnBqNlk5YkdVZ25nOG9xRUFKNE9OU3ZqWG40bFFKQ3o2YTdMczVNeWJobWdVUnA4bGUwVW5pR2FvTWZsRjBMWG4wZlRDdXRUY1FjajlSZUowbW1WRmsrTlNVUTNuY3BoQjNlUVZGcG9xQjIwRFpueWQrLytJaGd0YjZia29nWVlCZHZ3K0xlZFlacFZLRWdIMStWeUcyWS9EWmVCeU1xQzc2aFFZY25QdmhMS3FkL1d5QkVmOXFlYi8wOHZyN1JYUT09IiwicyI6IjEifQ==", "maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "5f4a7ea2-818a-45e2-a9e7-08f67f482ae0", "record_id": "flaws_cloudtrail:0000550:5f4a7ea2-818a-45e2-a9e7-08f67f482ae0", "row_index": 550, "timestamp": "2019-07-18T20:12:55Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "48.242.79.253", "user_agent": "aws-cli/1.16.160 Python/3.7.3 Darwin/18.6.0 botocore/1.12.150", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1079, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "5f4a7ea2-818a-45e2-a9e7-08f67f482ae0", "eventTime": "2019-07-18T20:12:55Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "48.242.79.253", "userAgent": "aws-cli/1.16.160 Python/3.7.3 Darwin/18.6.0 botocore/1.12.150", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"nextToken": "eyJ2IjoiMiIsImMiOiJ2VDdseVZXc1AyOGd2SXpuci8wcFhKSDhYb0lBZkRDWnBPektjSTVYRWI3bFpGOGFmR3ZodEk0Qy8vL0VpOUZXT0ZTTUIwZTVRYXpmZHN0ZmRIUDFGV09vVDRFeDQ1U2phZWZUTVVqZUpWL1c3S3FWVm9VMG5rbERXM1VWMW5yVW5RdUpmdURhMDFwd3g5NnI5c1RISS96NlErM0prSG1LakcwRFJoMDFoS0x5TDdWbTkxRHdla1p4M3ZqcnIzZmVGbnBhTURlYjRIU0dwdz09IiwicyI6IjEifQ==", "maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "996130-4440-403d-8cef-167859aee2f2", "record_id": "flaws_cloudtrail:0000551:996130-4440-403d-8cef-167859aee2f2", "row_index": 551, "timestamp": "2019-07-18T20:12:55Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "237.25.162.210", "user_agent": "aws-cli/1.16.199 Python/2.7.15 Darwin/16.7.0 botocore/1.12.189", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 1079, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "996130-4440-403d-8cef-167859aee2f2", "eventTime": "2019-07-18T20:12:55Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "237.25.162.210", "userAgent": "aws-cli/1.16.199 Python/2.7.15 Darwin/16.7.0 botocore/1.12.189", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"nextToken": "eyJ2IjoiMiIsImMiOiIxK3BYUERiZTA5OSsyVnBqNlk5YkdVZ25nOG9xRUFKNE9OU3ZqWG40bFFKQ3o2YTdMczVNeWJobWdVUnA4bGUwVW5pR2FvTWZsRjBMWG4wZlRDdXRUY1FjajlSZUowbW1WRmsrTlNVUTNuY3BoQjNlUVZGcG9xQjIwRFpueWQrLytJaGd0YjZia29nWVlCZHZ3K0xlZFlacFZLRWdIMStWeUcyWS9EWmVCeU1xQzc2aFFZY25QdmhMS3FkL1d5QkVmOXFlYi8wOHZyN1JYUT09IiwicyI6IjEifQ==", "maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "5f4a7ea2-818a-45e2-a9e7-08f67f482ae0", "record_id": "flaws_cloudtrail:0000552:5f4a7ea2-818a-45e2-a9e7-08f67f482ae0", "row_index": 552, "timestamp": "2019-07-18T20:12:55Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "48.242.79.253", "user_agent": "aws-cli/1.16.160 Python/3.7.3 Darwin/18.6.0 botocore/1.12.150", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1079, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "5f4a7ea2-818a-45e2-a9e7-08f67f482ae0", "eventTime": "2019-07-18T20:12:55Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "48.242.79.253", "userAgent": "aws-cli/1.16.160 Python/3.7.3 Darwin/18.6.0 botocore/1.12.150", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"nextToken": "eyJ2IjoiMiIsImMiOiJ2VDdseVZXc1AyOGd2SXpuci8wcFhKSDhYb0lBZkRDWnBPektjSTVYRWI3bFpGOGFmR3ZodEk0Qy8vL0VpOUZXT0ZTTUIwZTVRYXpmZHN0ZmRIUDFGV09vVDRFeDQ1U2phZWZUTVVqZUpWL1c3S3FWVm9VMG5rbERXM1VWMW5yVW5RdUpmdURhMDFwd3g5NnI5c1RISS96NlErM0prSG1LakcwRFJoMDFoS0x5TDdWbTkxRHdla1p4M3ZqcnIzZmVGbnBhTURlYjRIU0dwdz09IiwicyI6IjEifQ==", "maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "e4061a40-ec08-420e-9d5a-86b89afe6529", "record_id": "flaws_cloudtrail:0000553:e4061a40-ec08-420e-9d5a-86b89afe6529", "row_index": 553, "timestamp": "2019-07-18T20:12:56Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "237.25.162.210", "user_agent": "aws-cli/1.16.199 Python/2.7.15 Darwin/16.7.0 botocore/1.12.189", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 1082, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "e4061a40-ec08-420e-9d5a-86b89afe6529", "eventTime": "2019-07-18T20:12:56Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "237.25.162.210", "userAgent": "aws-cli/1.16.199 Python/2.7.15 Darwin/16.7.0 botocore/1.12.189", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"nextToken": "eyJ2IjoiMiIsImMiOiJyMTVra01PbkVWVEcvTFFYN01hTDZONWEyRVo3bEh6dnMxM0s2QS9FN0xZNWhoYUROaHI3RFlIdDJlYXlaUytWOTExUU4xSi8zVUgxaHdmYXlzVXNENW13RzEwRkVXS2J0N3RCOE5IZGM5cVY4NFJoUFNxZUZBbThaOWhhYjNzOWRrenhDQlc1VWpscElTTFRSS0JqeUFSU2JReGxmK0NPTVdNYTVTVmNyRy9NeEdDNzZPaEltd3M0VHNLeHE3cDd2MkxhbCtsMGJtT2Y2UT09IiwicyI6IjEifQ==", "maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "e4061a40-ec08-420e-9d5a-86b89afe6529", "record_id": "flaws_cloudtrail:0000554:e4061a40-ec08-420e-9d5a-86b89afe6529", "row_index": 554, "timestamp": "2019-07-18T20:12:56Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "237.25.162.210", "user_agent": "aws-cli/1.16.199 Python/2.7.15 Darwin/16.7.0 botocore/1.12.189", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 1082, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "e4061a40-ec08-420e-9d5a-86b89afe6529", "eventTime": "2019-07-18T20:12:56Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "237.25.162.210", "userAgent": "aws-cli/1.16.199 Python/2.7.15 Darwin/16.7.0 botocore/1.12.189", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"nextToken": "eyJ2IjoiMiIsImMiOiJyMTVra01PbkVWVEcvTFFYN01hTDZONWEyRVo3bEh6dnMxM0s2QS9FN0xZNWhoYUROaHI3RFlIdDJlYXlaUytWOTExUU4xSi8zVUgxaHdmYXlzVXNENW13RzEwRkVXS2J0N3RCOE5IZGM5cVY4NFJoUFNxZUZBbThaOWhhYjNzOWRrenhDQlc1VWpscElTTFRSS0JqeUFSU2JReGxmK0NPTVdNYTVTVmNyRy9NeEdDNzZPaEltd3M0VHNLeHE3cDd2MkxhbCtsMGJtT2Y2UT09IiwicyI6IjEifQ==", "maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "5e98cc44-51f7-4f5c-b840-54cd96f7931f", "record_id": "flaws_cloudtrail:0000555:5e98cc44-51f7-4f5c-b840-54cd96f7931f", "row_index": 555, "timestamp": "2019-07-18T20:12:58Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "237.25.162.210", "user_agent": "aws-cli/1.16.199 Python/2.7.15 Darwin/16.7.0 botocore/1.12.189", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 1081, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "5e98cc44-51f7-4f5c-b840-54cd96f7931f", "eventTime": "2019-07-18T20:12:58Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "237.25.162.210", "userAgent": "aws-cli/1.16.199 Python/2.7.15 Darwin/16.7.0 botocore/1.12.189", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"nextToken": "eyJ2IjoiMiIsImMiOiI0Qitvb042RjJQVHZ2ekpVS2M5TWdrOVBnSlE0WDdRUytGRnhwQmEwWFFBbEpMRENTaHNSOTVsK2RFTmx0cStuOEZma0tVUVA0Z3NiWDA3OGZzcmJwVlQyN0pVOFp1NnBrYmZtQ0h6U0pURGxYS3czb0FOZFptMENrcDJzL1hTWDFVTzRlcmRGcmJVaWU3YVhRMkZhR20zRm84Q0ZxYi82TTlzVXAySU43dm1MQkY0Tko0RjJIUklKWUN2Mm0xcHFqaTU2S2xLZjVOaVJTUT09IiwicyI6IjEifQ==", "maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "1c125e37-e630-434c-b22e-5a5367282dce", "record_id": "flaws_cloudtrail:0000556:1c125e37-e630-434c-b22e-5a5367282dce", "row_index": 556, "timestamp": "2019-07-18T20:12:58Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "48.242.79.253", "user_agent": "aws-cli/1.16.160 Python/3.7.3 Darwin/18.6.0 botocore/1.12.150", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1078, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "1c125e37-e630-434c-b22e-5a5367282dce", "eventTime": "2019-07-18T20:12:58Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "48.242.79.253", "userAgent": "aws-cli/1.16.160 Python/3.7.3 Darwin/18.6.0 botocore/1.12.150", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"nextToken": "eyJ2IjoiMiIsImMiOiJSeDZMZmExUHkxamJGaWpJdktGd0swazJpbjJ3RndFSTNpZ0lhcGl6NU83NDJYSzZMSndOQThzWGRJNjh0cGlDTEJaV0FyYStvRzlzRTRjMHFwWmFsVWgwME9EZlJ2YlRNQTMwK2MyQU45WFJRRTRZZ1Y4S1dvMURMUExGTUIrUlJISVIzaWlNVjE5bUU2YUhMQkdrNlVrU2lNTmF0VHNaZmQ3SVZZTUhNNC9pZUJ1cDloTjdsQzVUcXl6VUdmU1BrL2pBblFWTzlrYkJYQT09IiwicyI6IjEifQ==", "maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "5e98cc44-51f7-4f5c-b840-54cd96f7931f", "record_id": "flaws_cloudtrail:0000557:5e98cc44-51f7-4f5c-b840-54cd96f7931f", "row_index": 557, "timestamp": "2019-07-18T20:12:58Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "237.25.162.210", "user_agent": "aws-cli/1.16.199 Python/2.7.15 Darwin/16.7.0 botocore/1.12.189", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 1081, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "5e98cc44-51f7-4f5c-b840-54cd96f7931f", "eventTime": "2019-07-18T20:12:58Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "237.25.162.210", "userAgent": "aws-cli/1.16.199 Python/2.7.15 Darwin/16.7.0 botocore/1.12.189", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"nextToken": "eyJ2IjoiMiIsImMiOiI0Qitvb042RjJQVHZ2ekpVS2M5TWdrOVBnSlE0WDdRUytGRnhwQmEwWFFBbEpMRENTaHNSOTVsK2RFTmx0cStuOEZma0tVUVA0Z3NiWDA3OGZzcmJwVlQyN0pVOFp1NnBrYmZtQ0h6U0pURGxYS3czb0FOZFptMENrcDJzL1hTWDFVTzRlcmRGcmJVaWU3YVhRMkZhR20zRm84Q0ZxYi82TTlzVXAySU43dm1MQkY0Tko0RjJIUklKWUN2Mm0xcHFqaTU2S2xLZjVOaVJTUT09IiwicyI6IjEifQ==", "maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "1c125e37-e630-434c-b22e-5a5367282dce", "record_id": "flaws_cloudtrail:0000558:1c125e37-e630-434c-b22e-5a5367282dce", "row_index": 558, "timestamp": "2019-07-18T20:12:58Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "48.242.79.253", "user_agent": "aws-cli/1.16.160 Python/3.7.3 Darwin/18.6.0 botocore/1.12.150", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1078, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "1c125e37-e630-434c-b22e-5a5367282dce", "eventTime": "2019-07-18T20:12:58Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "48.242.79.253", "userAgent": "aws-cli/1.16.160 Python/3.7.3 Darwin/18.6.0 botocore/1.12.150", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"nextToken": "eyJ2IjoiMiIsImMiOiJSeDZMZmExUHkxamJGaWpJdktGd0swazJpbjJ3RndFSTNpZ0lhcGl6NU83NDJYSzZMSndOQThzWGRJNjh0cGlDTEJaV0FyYStvRzlzRTRjMHFwWmFsVWgwME9EZlJ2YlRNQTMwK2MyQU45WFJRRTRZZ1Y4S1dvMURMUExGTUIrUlJISVIzaWlNVjE5bUU2YUhMQkdrNlVrU2lNTmF0VHNaZmQ3SVZZTUhNNC9pZUJ1cDloTjdsQzVUcXl6VUdmU1BrL2pBblFWTzlrYkJYQT09IiwicyI6IjEifQ==", "maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "f6dc7dec-4b07-46ff-a1d4-103a33c3f6c3", "record_id": "flaws_cloudtrail:0000559:f6dc7dec-4b07-46ff-a1d4-103a33c3f6c3", "row_index": 559, "timestamp": "2019-07-18T20:12:59Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "237.25.162.210", "user_agent": "aws-cli/1.16.199 Python/2.7.15 Darwin/16.7.0 botocore/1.12.189", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 1081, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "f6dc7dec-4b07-46ff-a1d4-103a33c3f6c3", "eventTime": "2019-07-18T20:12:59Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "237.25.162.210", "userAgent": "aws-cli/1.16.199 Python/2.7.15 Darwin/16.7.0 botocore/1.12.189", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"nextToken": "eyJ2IjoiMiIsImMiOiJTZEdQSGxOK0VyVVZDc1pwZzdsemR3bG4weTBoemxHdzRrUENHZG1HbGVpektjYjlYTy9IRVJhVmRydFBoMEZMNVBUWDZ3b2VLQlVvWXpOWmdXemdDYjA0OUZEalZpcG1KRFU4YzFSZ29ra1lVdUwyZlFSYkcwQnlvY0plbDhoUmRPSjE5TFJyRlpDN2ZxQ0hMSHVKSDNpUWdsbUp5OW94QkYySnhLYi9UT01UY1FYWkFSblRrVVo5Mld6SVlORXdlcHVaWSt2R1ZBY001UT09IiwicyI6IjEifQ==", "maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "f6dc7dec-4b07-46ff-a1d4-103a33c3f6c3", "record_id": "flaws_cloudtrail:0000560:f6dc7dec-4b07-46ff-a1d4-103a33c3f6c3", "row_index": 560, "timestamp": "2019-07-18T20:12:59Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "237.25.162.210", "user_agent": "aws-cli/1.16.199 Python/2.7.15 Darwin/16.7.0 botocore/1.12.189", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 1081, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "f6dc7dec-4b07-46ff-a1d4-103a33c3f6c3", "eventTime": "2019-07-18T20:12:59Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "237.25.162.210", "userAgent": "aws-cli/1.16.199 Python/2.7.15 Darwin/16.7.0 botocore/1.12.189", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"nextToken": "eyJ2IjoiMiIsImMiOiJTZEdQSGxOK0VyVVZDc1pwZzdsemR3bG4weTBoemxHdzRrUENHZG1HbGVpektjYjlYTy9IRVJhVmRydFBoMEZMNVBUWDZ3b2VLQlVvWXpOWmdXemdDYjA0OUZEalZpcG1KRFU4YzFSZ29ra1lVdUwyZlFSYkcwQnlvY0plbDhoUmRPSjE5TFJyRlpDN2ZxQ0hMSHVKSDNpUWdsbUp5OW94QkYySnhLYi9UT01UY1FYWkFSblRrVVo5Mld6SVlORXdlcHVaWSt2R1ZBY001UT09IiwicyI6IjEifQ==", "maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "d6fa715e-91dc-49ba-841c-7fce352d7003", "record_id": "flaws_cloudtrail:0000561:d6fa715e-91dc-49ba-841c-7fce352d7003", "row_index": 561, "timestamp": "2019-07-18T20:13:00Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "48.242.79.253", "user_agent": "aws-cli/1.16.160 Python/3.7.3 Darwin/18.6.0 botocore/1.12.150", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1071, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "d6fa715e-91dc-49ba-841c-7fce352d7003", "eventTime": "2019-07-18T20:13:00Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "48.242.79.253", "userAgent": "aws-cli/1.16.160 Python/3.7.3 Darwin/18.6.0 botocore/1.12.150", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"nextToken": "eyJ2IjoiMiIsImMiOiJYdWFBQnNLaHpzSVVyWXdQWjBQYVZHK3RrWnNtQ3lBVUx5S1ptUGhDbnFQMHJvZzFIMlRSQXdRSkw2NjJNOGZkVURuYi9WOHZqYW1pMXFjNE5uQ29xZkJjRFpockVZWnpBakFJbFhOaUxqTEppUUplWWRMcCtNRXdFV05RZWJNYTFoMWd5QU1EaGVGS0NxS3dXeE9FeVNneXdsVzJqNmVtRDFlYmtCZ0lnSmpicStjY1lsUGJPZGRoeWFlU2o1ZmlUOFZ5QVg4ejJBPT0iLCJzIjoiMSJ9", "maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "d6fa715e-91dc-49ba-841c-7fce352d7003", "record_id": "flaws_cloudtrail:0000562:d6fa715e-91dc-49ba-841c-7fce352d7003", "row_index": 562, "timestamp": "2019-07-18T20:13:00Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "48.242.79.253", "user_agent": "aws-cli/1.16.160 Python/3.7.3 Darwin/18.6.0 botocore/1.12.150", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1071, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "d6fa715e-91dc-49ba-841c-7fce352d7003", "eventTime": "2019-07-18T20:13:00Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "48.242.79.253", "userAgent": "aws-cli/1.16.160 Python/3.7.3 Darwin/18.6.0 botocore/1.12.150", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"nextToken": "eyJ2IjoiMiIsImMiOiJYdWFBQnNLaHpzSVVyWXdQWjBQYVZHK3RrWnNtQ3lBVUx5S1ptUGhDbnFQMHJvZzFIMlRSQXdRSkw2NjJNOGZkVURuYi9WOHZqYW1pMXFjNE5uQ29xZkJjRFpockVZWnpBakFJbFhOaUxqTEppUUplWWRMcCtNRXdFV05RZWJNYTFoMWd5QU1EaGVGS0NxS3dXeE9FeVNneXdsVzJqNmVtRDFlYmtCZ0lnSmpicStjY1lsUGJPZGRoeWFlU2o1ZmlUOFZ5QVg4ejJBPT0iLCJzIjoiMSJ9", "maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "c56463a-bacc-42e9-85ac-c7bf78a99888", "record_id": "flaws_cloudtrail:0000563:c56463a-bacc-42e9-85ac-c7bf78a99888", "row_index": 563, "timestamp": "2019-07-18T20:13:01Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "237.25.162.210", "user_agent": "aws-cli/1.16.199 Python/2.7.15 Darwin/16.7.0 botocore/1.12.189", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 1080, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "c56463a-bacc-42e9-85ac-c7bf78a99888", "eventTime": "2019-07-18T20:13:01Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "237.25.162.210", "userAgent": "aws-cli/1.16.199 Python/2.7.15 Darwin/16.7.0 botocore/1.12.189", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"nextToken": "eyJ2IjoiMiIsImMiOiJJVnIwOWorb0ZDNjd3MEVpZjllSUkrV0pFRm5pcEVqbEIzakw1bFFtNytod0xkWVBYaENWOUQzekJXZGtyNmEyS3l5NC9JRHB0WEhXdTF2N0ZuR3pyWGxQOHpVbVJzSzd1U0FlR3lxcytnclhNd21SNWhhOFhhRUliNjRCSGxUc0VHSkw1QnhNTWJXMmdFeTBueEM3OGh1bXZNOExldTlRZEZYcStSdmNMRjhYaGNyMTFXWnRBTGRteTFGUy9uamdaRENqSDdxQlFzQytUdz09IiwicyI6IjEifQ==", "maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "c56463a-bacc-42e9-85ac-c7bf78a99888", "record_id": "flaws_cloudtrail:0000564:c56463a-bacc-42e9-85ac-c7bf78a99888", "row_index": 564, "timestamp": "2019-07-18T20:13:01Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "237.25.162.210", "user_agent": "aws-cli/1.16.199 Python/2.7.15 Darwin/16.7.0 botocore/1.12.189", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 1080, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "c56463a-bacc-42e9-85ac-c7bf78a99888", "eventTime": "2019-07-18T20:13:01Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "237.25.162.210", "userAgent": "aws-cli/1.16.199 Python/2.7.15 Darwin/16.7.0 botocore/1.12.189", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"nextToken": "eyJ2IjoiMiIsImMiOiJJVnIwOWorb0ZDNjd3MEVpZjllSUkrV0pFRm5pcEVqbEIzakw1bFFtNytod0xkWVBYaENWOUQzekJXZGtyNmEyS3l5NC9JRHB0WEhXdTF2N0ZuR3pyWGxQOHpVbVJzSzd1U0FlR3lxcytnclhNd21SNWhhOFhhRUliNjRCSGxUc0VHSkw1QnhNTWJXMmdFeTBueEM3OGh1bXZNOExldTlRZEZYcStSdmNMRjhYaGNyMTFXWnRBTGRteTFGUy9uamdaRENqSDdxQlFzQytUdz09IiwicyI6IjEifQ==", "maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "bb40745a-59eb-4997-adfd-496731c85a0a", "record_id": "flaws_cloudtrail:0000565:bb40745a-59eb-4997-adfd-496731c85a0a", "row_index": 565, "timestamp": "2019-07-18T20:13:02Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "237.25.162.210", "user_agent": "aws-cli/1.16.199 Python/2.7.15 Darwin/16.7.0 botocore/1.12.189", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 1082, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "bb40745a-59eb-4997-adfd-496731c85a0a", "eventTime": "2019-07-18T20:13:02Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "237.25.162.210", "userAgent": "aws-cli/1.16.199 Python/2.7.15 Darwin/16.7.0 botocore/1.12.189", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"nextToken": "eyJ2IjoiMiIsImMiOiIzc3hUOGhrRXV6KzU2bGlEeG5iNm1rNWZQU2dHTjB1ajhoZUxRVVhrR0V4WVowK2YxdVNEQjNGTldiZ2NOUVUvNTFGS0d4Z3QwRWU2M0taVWFucEdkeXZlTmMrYTd0S3hHWjJOTVVTKzg4RFBkNEIvRVM5Y0xIMmVjN01NUmZ1elZJcHk2ZUdpY3NzaHNNRE82dGpOYThDR3Z1aldaamx3bDBEV0V4dWZIcVI0V3RwTEhxbCs4MnkxVHdGVW9Mdmh5WmNqRWREcFhBeHlOUT09IiwicyI6IjEifQ==", "maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "bb40745a-59eb-4997-adfd-496731c85a0a", "record_id": "flaws_cloudtrail:0000566:bb40745a-59eb-4997-adfd-496731c85a0a", "row_index": 566, "timestamp": "2019-07-18T20:13:02Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "237.25.162.210", "user_agent": "aws-cli/1.16.199 Python/2.7.15 Darwin/16.7.0 botocore/1.12.189", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 1082, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "bb40745a-59eb-4997-adfd-496731c85a0a", "eventTime": "2019-07-18T20:13:02Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "237.25.162.210", "userAgent": "aws-cli/1.16.199 Python/2.7.15 Darwin/16.7.0 botocore/1.12.189", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"nextToken": "eyJ2IjoiMiIsImMiOiIzc3hUOGhrRXV6KzU2bGlEeG5iNm1rNWZQU2dHTjB1ajhoZUxRVVhrR0V4WVowK2YxdVNEQjNGTldiZ2NOUVUvNTFGS0d4Z3QwRWU2M0taVWFucEdkeXZlTmMrYTd0S3hHWjJOTVVTKzg4RFBkNEIvRVM5Y0xIMmVjN01NUmZ1elZJcHk2ZUdpY3NzaHNNRE82dGpOYThDR3Z1aldaamx3bDBEV0V4dWZIcVI0V3RwTEhxbCs4MnkxVHdGVW9Mdmh5WmNqRWREcFhBeHlOUT09IiwicyI6IjEifQ==", "maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "43cd997d-722e-4c42-be69-8e66545", "record_id": "flaws_cloudtrail:0000567:43cd997d-722e-4c42-be69-8e66545", "row_index": 567, "timestamp": "2019-07-18T20:13:03Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "237.25.162.210", "user_agent": "aws-cli/1.16.199 Python/2.7.15 Darwin/16.7.0 botocore/1.12.189", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 1076, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "43cd997d-722e-4c42-be69-8e66545", "eventTime": "2019-07-18T20:13:03Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "237.25.162.210", "userAgent": "aws-cli/1.16.199 Python/2.7.15 Darwin/16.7.0 botocore/1.12.189", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"nextToken": "eyJ2IjoiMiIsImMiOiJOUE5EcEpxYUIwWCtPWDMzdVRSUnh6NGRXUUxOQ0ROaUJaRlB1bmY0T3NGZEs5UkZ6UTkxWXV3NmZVci9xbTRtZHp1dTZmemJ2c28rT1RXUEF5eVprYkR1QTVJdldxTmtqMzRDcUF0N2ZmRUUrWnV4QnlvWFQ1YWwrK245WHZvdmxiQmpaMkp3ajhwMUNmaFVJZS91dCtITUQzUjdxT0hDZk00UTR4QTg3cm01Z1k0eVNON0k0dEsvcS90bnpQc2RLV0JwZTYzLys2WG45Zz09IiwicyI6IjEifQ==", "maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "d580950dc-9e4e-4abe-a20c-c749efec1c0b", "record_id": "flaws_cloudtrail:0000568:d580950dc-9e4e-4abe-a20c-c749efec1c0b", "row_index": 568, "timestamp": "2019-07-18T20:13:03Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "48.242.79.253", "user_agent": "aws-cli/1.16.160 Python/3.7.3 Darwin/18.6.0 botocore/1.12.150", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1078, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "d580950dc-9e4e-4abe-a20c-c749efec1c0b", "eventTime": "2019-07-18T20:13:03Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "48.242.79.253", "userAgent": "aws-cli/1.16.160 Python/3.7.3 Darwin/18.6.0 botocore/1.12.150", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"nextToken": "eyJ2IjoiMiIsImMiOiJWaG03cGxIY0EyNW0xeWk1UHFaclk1MTBMdVFLeCtXODJQL1pKSzZzS0d0ZFBUUHZzbEs2Sm5sZ1JSN3VXeFBLWFJCMGRZY1VvZVlERHBNTkFjSjN3UUtNaFgyYXY2dExBY0RHSmtxYWRUTFRqUDlYR3F3NVE0YWd4akVmRVZUZkxNM3hTR1VmdkNnZTdNNmNCN0RPdmZTZHQ4NmVrazhlWU1JVTkwS014dytWYzU0V3RDS1NFeS9PY1RLMWdkL0NhUHc2MEFkUFVIWCthdz09IiwicyI6IjEifQ==", "maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "43cd997d-722e-4c42-be69-8e66545", "record_id": "flaws_cloudtrail:0000569:43cd997d-722e-4c42-be69-8e66545", "row_index": 569, "timestamp": "2019-07-18T20:13:03Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "237.25.162.210", "user_agent": "aws-cli/1.16.199 Python/2.7.15 Darwin/16.7.0 botocore/1.12.189", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 1076, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "43cd997d-722e-4c42-be69-8e66545", "eventTime": "2019-07-18T20:13:03Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "237.25.162.210", "userAgent": "aws-cli/1.16.199 Python/2.7.15 Darwin/16.7.0 botocore/1.12.189", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"nextToken": "eyJ2IjoiMiIsImMiOiJOUE5EcEpxYUIwWCtPWDMzdVRSUnh6NGRXUUxOQ0ROaUJaRlB1bmY0T3NGZEs5UkZ6UTkxWXV3NmZVci9xbTRtZHp1dTZmemJ2c28rT1RXUEF5eVprYkR1QTVJdldxTmtqMzRDcUF0N2ZmRUUrWnV4QnlvWFQ1YWwrK245WHZvdmxiQmpaMkp3ajhwMUNmaFVJZS91dCtITUQzUjdxT0hDZk00UTR4QTg3cm01Z1k0eVNON0k0dEsvcS90bnpQc2RLV0JwZTYzLys2WG45Zz09IiwicyI6IjEifQ==", "maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "d580950dc-9e4e-4abe-a20c-c749efec1c0b", "record_id": "flaws_cloudtrail:0000570:d580950dc-9e4e-4abe-a20c-c749efec1c0b", "row_index": 570, "timestamp": "2019-07-18T20:13:03Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "48.242.79.253", "user_agent": "aws-cli/1.16.160 Python/3.7.3 Darwin/18.6.0 botocore/1.12.150", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1078, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "d580950dc-9e4e-4abe-a20c-c749efec1c0b", "eventTime": "2019-07-18T20:13:03Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "48.242.79.253", "userAgent": "aws-cli/1.16.160 Python/3.7.3 Darwin/18.6.0 botocore/1.12.150", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"nextToken": "eyJ2IjoiMiIsImMiOiJWaG03cGxIY0EyNW0xeWk1UHFaclk1MTBMdVFLeCtXODJQL1pKSzZzS0d0ZFBUUHZzbEs2Sm5sZ1JSN3VXeFBLWFJCMGRZY1VvZVlERHBNTkFjSjN3UUtNaFgyYXY2dExBY0RHSmtxYWRUTFRqUDlYR3F3NVE0YWd4akVmRVZUZkxNM3hTR1VmdkNnZTdNNmNCN0RPdmZTZHQ4NmVrazhlWU1JVTkwS014dytWYzU0V3RDS1NFeS9PY1RLMWdkL0NhUHc2MEFkUFVIWCthdz09IiwicyI6IjEifQ==", "maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "4b2ff295-3771-45b3-aad7-3c4ae2f30c82", "record_id": "flaws_cloudtrail:0000571:4b2ff295-3771-45b3-aad7-3c4ae2f30c82", "row_index": 571, "timestamp": "2019-07-18T20:13:04Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "237.25.162.210", "user_agent": "aws-cli/1.16.199 Python/2.7.15 Darwin/16.7.0 botocore/1.12.189", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 1081, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "4b2ff295-3771-45b3-aad7-3c4ae2f30c82", "eventTime": "2019-07-18T20:13:04Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "237.25.162.210", "userAgent": "aws-cli/1.16.199 Python/2.7.15 Darwin/16.7.0 botocore/1.12.189", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"nextToken": "eyJ2IjoiMiIsImMiOiJ4RUxLQXptSWc5SWp0c216Nnk3QTdzVFFJYk9QWnNqS1JlRk85QlB4WVF4UmN6cHFwdkdPTzd4dDlVby9CMXpLNDhkQWoyU0tER0N0RUIvU2lWQmlmQzdxTC9MQ0hKTHByL3hUUUJLMDFyeXdQaXlib2pDZHR3MmkvbzRJQU1vaFVlWEEyQkxhMWo1TFp4Rk50cHIwc1JtaWYwY3doVEk5QWwxU2RzQ2V6THFDbmYwdEt6eERNZEJqd0cycTlMSjY1WUVHcVc4MVBicUVWQT09IiwicyI6IjEifQ==", "maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "4b2ff295-3771-45b3-aad7-3c4ae2f30c82", "record_id": "flaws_cloudtrail:0000572:4b2ff295-3771-45b3-aad7-3c4ae2f30c82", "row_index": 572, "timestamp": "2019-07-18T20:13:04Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "237.25.162.210", "user_agent": "aws-cli/1.16.199 Python/2.7.15 Darwin/16.7.0 botocore/1.12.189", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 1081, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "4b2ff295-3771-45b3-aad7-3c4ae2f30c82", "eventTime": "2019-07-18T20:13:04Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "237.25.162.210", "userAgent": "aws-cli/1.16.199 Python/2.7.15 Darwin/16.7.0 botocore/1.12.189", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"nextToken": "eyJ2IjoiMiIsImMiOiJ4RUxLQXptSWc5SWp0c216Nnk3QTdzVFFJYk9QWnNqS1JlRk85QlB4WVF4UmN6cHFwdkdPTzd4dDlVby9CMXpLNDhkQWoyU0tER0N0RUIvU2lWQmlmQzdxTC9MQ0hKTHByL3hUUUJLMDFyeXdQaXlib2pDZHR3MmkvbzRJQU1vaFVlWEEyQkxhMWo1TFp4Rk50cHIwc1JtaWYwY3doVEk5QWwxU2RzQ2V6THFDbmYwdEt6eERNZEJqd0cycTlMSjY1WUVHcVc4MVBicUVWQT09IiwicyI6IjEifQ==", "maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "5f57e126-a09c-46e4-8c7b-bb56ec569923", "record_id": "flaws_cloudtrail:0000573:5f57e126-a09c-46e4-8c7b-bb56ec569923", "row_index": 573, "timestamp": "2019-07-18T20:13:05Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "48.242.79.253", "user_agent": "aws-cli/1.16.160 Python/3.7.3 Darwin/18.6.0 botocore/1.12.150", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1080, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "5f57e126-a09c-46e4-8c7b-bb56ec569923", "eventTime": "2019-07-18T20:13:05Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "48.242.79.253", "userAgent": "aws-cli/1.16.160 Python/3.7.3 Darwin/18.6.0 botocore/1.12.150", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"nextToken": "eyJ2IjoiMiIsImMiOiJJeit0VWo5b05xOVFWakhZVE1QUFV0Y1BZbTlsT2NrbEtETkJiaTA2VW1RKzF3RDNsL1VWQTdXQ1FVVUg4VFBhTGFIZ1RycmlEL0dZRVpPMmR6ZzcrcFJaMVRIVGJ2YndMdFY0ZHNPRy9lM1U2UXZIajFDNXRvRzh1Y0U2NUovam40MngyKzVjdjZQOTFDalBvQ1VkQ3ZFbE52akxuTWNFNjhSb0poUlNNeDBXWm1FazU2bVAzUyt1NmhrSVZrSnJnSzQvTmNuZnhvbjAzUT09IiwicyI6IjEifQ==", "maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "5f57e126-a09c-46e4-8c7b-bb56ec569923", "record_id": "flaws_cloudtrail:0000574:5f57e126-a09c-46e4-8c7b-bb56ec569923", "row_index": 574, "timestamp": "2019-07-18T20:13:05Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "48.242.79.253", "user_agent": "aws-cli/1.16.160 Python/3.7.3 Darwin/18.6.0 botocore/1.12.150", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1080, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "5f57e126-a09c-46e4-8c7b-bb56ec569923", "eventTime": "2019-07-18T20:13:05Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "48.242.79.253", "userAgent": "aws-cli/1.16.160 Python/3.7.3 Darwin/18.6.0 botocore/1.12.150", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"nextToken": "eyJ2IjoiMiIsImMiOiJJeit0VWo5b05xOVFWakhZVE1QUFV0Y1BZbTlsT2NrbEtETkJiaTA2VW1RKzF3RDNsL1VWQTdXQ1FVVUg4VFBhTGFIZ1RycmlEL0dZRVpPMmR6ZzcrcFJaMVRIVGJ2YndMdFY0ZHNPRy9lM1U2UXZIajFDNXRvRzh1Y0U2NUovam40MngyKzVjdjZQOTFDalBvQ1VkQ3ZFbE52akxuTWNFNjhSb0poUlNNeDBXWm1FazU2bVAzUyt1NmhrSVZrSnJnSzQvTmNuZnhvbjAzUT09IiwicyI6IjEifQ==", "maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "65d9c8bb-6e8b-4515-8ee2-6b8bbd104a43", "record_id": "flaws_cloudtrail:0000575:65d9c8bb-6e8b-4515-8ee2-6b8bbd104a43", "row_index": 575, "timestamp": "2019-07-18T20:13:06Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "237.25.162.210", "user_agent": "aws-cli/1.16.199 Python/2.7.15 Darwin/16.7.0 botocore/1.12.189", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 1080, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "65d9c8bb-6e8b-4515-8ee2-6b8bbd104a43", "eventTime": "2019-07-18T20:13:06Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "237.25.162.210", "userAgent": "aws-cli/1.16.199 Python/2.7.15 Darwin/16.7.0 botocore/1.12.189", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"nextToken": "eyJ2IjoiMiIsImMiOiJVRC9TWDE5cTcrSy9jamVvdElxQzZVWEJqMkFTdDM0UE9NQWNYbDVIMGlMUW8ranFLbTYzL3YxcmlySWtRNnF4Y1R2SGQyRDdMN1FLNVNvaDhuQmR0dncwMEtRbFE1TFJtdHhaSzNFdUNrWXpkd3RSM3JpelhZVkVJYWRWbkNSTlVQamdydjExVzQrTGNWZitnL2hpYXFGOGV0cktBdFBldERhckJiRk1PalVaOG0xMk9wLzdhejBTT2dHakx0R2dyTVRna1haYWJxVmQvQT09IiwicyI6IjEifQ==", "maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "65d9c8bb-6e8b-4515-8ee2-6b8bbd104a43", "record_id": "flaws_cloudtrail:0000576:65d9c8bb-6e8b-4515-8ee2-6b8bbd104a43", "row_index": 576, "timestamp": "2019-07-18T20:13:06Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "237.25.162.210", "user_agent": "aws-cli/1.16.199 Python/2.7.15 Darwin/16.7.0 botocore/1.12.189", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 1080, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "65d9c8bb-6e8b-4515-8ee2-6b8bbd104a43", "eventTime": "2019-07-18T20:13:06Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "237.25.162.210", "userAgent": "aws-cli/1.16.199 Python/2.7.15 Darwin/16.7.0 botocore/1.12.189", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"nextToken": "eyJ2IjoiMiIsImMiOiJVRC9TWDE5cTcrSy9jamVvdElxQzZVWEJqMkFTdDM0UE9NQWNYbDVIMGlMUW8ranFLbTYzL3YxcmlySWtRNnF4Y1R2SGQyRDdMN1FLNVNvaDhuQmR0dncwMEtRbFE1TFJtdHhaSzNFdUNrWXpkd3RSM3JpelhZVkVJYWRWbkNSTlVQamdydjExVzQrTGNWZitnL2hpYXFGOGV0cktBdFBldERhckJiRk1PalVaOG0xMk9wLzdhejBTT2dHakx0R2dyTVRna1haYWJxVmQvQT09IiwicyI6IjEifQ==", "maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "bda0202d-e3f8-4f68-beb5-cf4c7201d6fc", "record_id": "flaws_cloudtrail:0000577:bda0202d-e3f8-4f68-beb5-cf4c7201d6fc", "row_index": 577, "timestamp": "2019-07-18T20:13:07Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "237.25.162.210", "user_agent": "aws-cli/1.16.199 Python/2.7.15 Darwin/16.7.0 botocore/1.12.189", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 1081, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "bda0202d-e3f8-4f68-beb5-cf4c7201d6fc", "eventTime": "2019-07-18T20:13:07Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "237.25.162.210", "userAgent": "aws-cli/1.16.199 Python/2.7.15 Darwin/16.7.0 botocore/1.12.189", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"nextToken": "eyJ2IjoiMiIsImMiOiJuR3JBbk9yMVV0cldYWU1RY2czTmRLSVIzaGsvaFNYSFlUekhXdTVRNVljd29EQ1V6UlY1TkhITTh1QkE3dEpoUGtqQUlJRGJINUdKemlTZ1hkUTc5NUV2a3pBRXNMVTVDK0QzRU9CV0JPZDJ2SnplWXhZRjk4VVVxSkFIVzYyNDFBWU93VjVDdllLN1drTXhCWEE2U09xbS9xU2YrZFFGTDRMV3ROeUF2dWdZaWY3UE9CQURocWhmZmE1VENwUHdLbHNuQlFjVkhVemlCdz09IiwicyI6IjEifQ==", "maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "1f3208c6-dee8-4ccf-bebc-b3928532f3b2", "record_id": "flaws_cloudtrail:0000578:1f3208c6-dee8-4ccf-bebc-b3928532f3b2", "row_index": 578, "timestamp": "2019-07-18T20:13:07Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "48.242.79.253", "user_agent": "aws-cli/1.16.160 Python/3.7.3 Darwin/18.6.0 botocore/1.12.150", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1072, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "1f3208c6-dee8-4ccf-bebc-b3928532f3b2", "eventTime": "2019-07-18T20:13:07Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "48.242.79.253", "userAgent": "aws-cli/1.16.160 Python/3.7.3 Darwin/18.6.0 botocore/1.12.150", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"nextToken": "eyJ2IjoiMiIsImMiOiJETEdHS09tUFhaRW8vUlBqNmNXT3dmN2lwVFowNVl1M2ErMk53TllrYWsyOXllelkrZUpyY0kwSkwxR0M4cFEyUTQrcXF1ME43UWFWMXB0TXcvNGw1Z0NEZzZNR3ZBcXlTNHdBZW1CaFRjME9jZks2ME1BTGtXR0RhSmROWjJ3RGV5V1lIb3JIR1QweUJMMExnYXdwSWJKOHBaNlAwdkZUOERZSzNiVXFkM3N1Z21DcGZyRFRtRnkzV3BBMU5OMFVuMW1RZnllOHFjaz0iLCJzIjoiMSJ9", "maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "bda0202d-e3f8-4f68-beb5-cf4c7201d6fc", "record_id": "flaws_cloudtrail:0000579:bda0202d-e3f8-4f68-beb5-cf4c7201d6fc", "row_index": 579, "timestamp": "2019-07-18T20:13:07Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "237.25.162.210", "user_agent": "aws-cli/1.16.199 Python/2.7.15 Darwin/16.7.0 botocore/1.12.189", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 1081, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "bda0202d-e3f8-4f68-beb5-cf4c7201d6fc", "eventTime": "2019-07-18T20:13:07Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "237.25.162.210", "userAgent": "aws-cli/1.16.199 Python/2.7.15 Darwin/16.7.0 botocore/1.12.189", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"nextToken": "eyJ2IjoiMiIsImMiOiJuR3JBbk9yMVV0cldYWU1RY2czTmRLSVIzaGsvaFNYSFlUekhXdTVRNVljd29EQ1V6UlY1TkhITTh1QkE3dEpoUGtqQUlJRGJINUdKemlTZ1hkUTc5NUV2a3pBRXNMVTVDK0QzRU9CV0JPZDJ2SnplWXhZRjk4VVVxSkFIVzYyNDFBWU93VjVDdllLN1drTXhCWEE2U09xbS9xU2YrZFFGTDRMV3ROeUF2dWdZaWY3UE9CQURocWhmZmE1VENwUHdLbHNuQlFjVkhVemlCdz09IiwicyI6IjEifQ==", "maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "1f3208c6-dee8-4ccf-bebc-b3928532f3b2", "record_id": "flaws_cloudtrail:0000580:1f3208c6-dee8-4ccf-bebc-b3928532f3b2", "row_index": 580, "timestamp": "2019-07-18T20:13:07Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "48.242.79.253", "user_agent": "aws-cli/1.16.160 Python/3.7.3 Darwin/18.6.0 botocore/1.12.150", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1072, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "1f3208c6-dee8-4ccf-bebc-b3928532f3b2", "eventTime": "2019-07-18T20:13:07Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "48.242.79.253", "userAgent": "aws-cli/1.16.160 Python/3.7.3 Darwin/18.6.0 botocore/1.12.150", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"nextToken": "eyJ2IjoiMiIsImMiOiJETEdHS09tUFhaRW8vUlBqNmNXT3dmN2lwVFowNVl1M2ErMk53TllrYWsyOXllelkrZUpyY0kwSkwxR0M4cFEyUTQrcXF1ME43UWFWMXB0TXcvNGw1Z0NEZzZNR3ZBcXlTNHdBZW1CaFRjME9jZks2ME1BTGtXR0RhSmROWjJ3RGV5V1lIb3JIR1QweUJMMExnYXdwSWJKOHBaNlAwdkZUOERZSzNiVXFkM3N1Z21DcGZyRFRtRnkzV3BBMU5OMFVuMW1RZnllOHFjaz0iLCJzIjoiMSJ9", "maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "0caeaa80-8c94-4938-888f-76f1fba46ddc", "record_id": "flaws_cloudtrail:0000581:0caeaa80-8c94-4938-888f-76f1fba46ddc", "row_index": 581, "timestamp": "2019-07-18T20:13:09Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "237.25.162.210", "user_agent": "aws-cli/1.16.199 Python/2.7.15 Darwin/16.7.0 botocore/1.12.189", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 1081, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "0caeaa80-8c94-4938-888f-76f1fba46ddc", "eventTime": "2019-07-18T20:13:09Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "237.25.162.210", "userAgent": "aws-cli/1.16.199 Python/2.7.15 Darwin/16.7.0 botocore/1.12.189", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"nextToken": "eyJ2IjoiMiIsImMiOiJpZkdwK2tHemZlYU81TWR0bjU1ZHp5U3Z5YjlzNURnNi9QY3ljSkdhNGJmZm4xYSswS3NUZ0RyMXE0TDZnM0EweXpNaG1kTlVFeUdveWlxdFowVHNwaXl5a1dXVk11QlVXdDIyZzNURjVFRndkUi9wYVVFOG9kTm9kSVkyTmJjTjM4a0luM1NSUkMreGhxRnpHbzRaamJObzFvNmlnVE10WE5RZ0JHRmdyNC82cjNmTmFWZkpyTFVNTDdkSVdyQzJEQ2VnUkRHUEdHb3hzUT09IiwicyI6IjEifQ==", "maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "295f76b0-2f47-4386-9bb8-48fc076028", "record_id": "flaws_cloudtrail:0000582:295f76b0-2f47-4386-9bb8-48fc076028", "row_index": 582, "timestamp": "2019-07-18T20:13:09Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "48.242.79.253", "user_agent": "aws-cli/1.16.160 Python/3.7.3 Darwin/18.6.0 botocore/1.12.150", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1078, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "295f76b0-2f47-4386-9bb8-48fc076028", "eventTime": "2019-07-18T20:13:09Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "48.242.79.253", "userAgent": "aws-cli/1.16.160 Python/3.7.3 Darwin/18.6.0 botocore/1.12.150", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"nextToken": "eyJ2IjoiMiIsImMiOiJhMEVqK0VJL2F1QUYwL09BaWMzYlUrZ1RZTUgzbjJPMEN4SEp0VGdRSWFCS0pCUGxrZGVaMzc2REVBQXg3NXBOOHM3WWcvUkRWUlRoRFZReEQzR2VaUWNwZEV4dEgzeG8ySjByN2xDRlpHWEFBSnBnRWNpT2R6NExIZ2t5YkE1Zjd0TnEzdjZNYmFnSGxkOUs4eUN4Q1FZV1FkcFF3d1U3YWxLc2ppZlZvVDlJN28wL0c3dXpJbHE5TzE5eWRqK0FxR2NZQlczM2R1RFZxZz09IiwicyI6IjEifQ==", "maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "0caeaa80-8c94-4938-888f-76f1fba46ddc", "record_id": "flaws_cloudtrail:0000583:0caeaa80-8c94-4938-888f-76f1fba46ddc", "row_index": 583, "timestamp": "2019-07-18T20:13:09Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "237.25.162.210", "user_agent": "aws-cli/1.16.199 Python/2.7.15 Darwin/16.7.0 botocore/1.12.189", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 1081, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "0caeaa80-8c94-4938-888f-76f1fba46ddc", "eventTime": "2019-07-18T20:13:09Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "237.25.162.210", "userAgent": "aws-cli/1.16.199 Python/2.7.15 Darwin/16.7.0 botocore/1.12.189", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"nextToken": "eyJ2IjoiMiIsImMiOiJpZkdwK2tHemZlYU81TWR0bjU1ZHp5U3Z5YjlzNURnNi9QY3ljSkdhNGJmZm4xYSswS3NUZ0RyMXE0TDZnM0EweXpNaG1kTlVFeUdveWlxdFowVHNwaXl5a1dXVk11QlVXdDIyZzNURjVFRndkUi9wYVVFOG9kTm9kSVkyTmJjTjM4a0luM1NSUkMreGhxRnpHbzRaamJObzFvNmlnVE10WE5RZ0JHRmdyNC82cjNmTmFWZkpyTFVNTDdkSVdyQzJEQ2VnUkRHUEdHb3hzUT09IiwicyI6IjEifQ==", "maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "295f76b0-2f47-4386-9bb8-48fc076028", "record_id": "flaws_cloudtrail:0000584:295f76b0-2f47-4386-9bb8-48fc076028", "row_index": 584, "timestamp": "2019-07-18T20:13:09Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "48.242.79.253", "user_agent": "aws-cli/1.16.160 Python/3.7.3 Darwin/18.6.0 botocore/1.12.150", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1078, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "295f76b0-2f47-4386-9bb8-48fc076028", "eventTime": "2019-07-18T20:13:09Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "48.242.79.253", "userAgent": "aws-cli/1.16.160 Python/3.7.3 Darwin/18.6.0 botocore/1.12.150", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"nextToken": "eyJ2IjoiMiIsImMiOiJhMEVqK0VJL2F1QUYwL09BaWMzYlUrZ1RZTUgzbjJPMEN4SEp0VGdRSWFCS0pCUGxrZGVaMzc2REVBQXg3NXBOOHM3WWcvUkRWUlRoRFZReEQzR2VaUWNwZEV4dEgzeG8ySjByN2xDRlpHWEFBSnBnRWNpT2R6NExIZ2t5YkE1Zjd0TnEzdjZNYmFnSGxkOUs4eUN4Q1FZV1FkcFF3d1U3YWxLc2ppZlZvVDlJN28wL0c3dXpJbHE5TzE5eWRqK0FxR2NZQlczM2R1RFZxZz09IiwicyI6IjEifQ==", "maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "f4c789c4-0102-425d-b4ee-513635749598", "record_id": "flaws_cloudtrail:0000585:f4c789c4-0102-425d-b4ee-513635749598", "row_index": 585, "timestamp": "2019-07-18T20:13:10Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "237.25.162.210", "user_agent": "aws-cli/1.16.199 Python/2.7.15 Darwin/16.7.0 botocore/1.12.189", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 1057, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "f4c789c4-0102-425d-b4ee-513635749598", "eventTime": "2019-07-18T20:13:10Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "237.25.162.210", "userAgent": "aws-cli/1.16.199 Python/2.7.15 Darwin/16.7.0 botocore/1.12.189", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"nextToken": "eyJ2IjoiMiIsImMiOiJ5U1J2SXpJRXNnUjJWVko0L3hFSGxzSCthak1WaWdxYWIxWUFMR00wdEtmTGFpYlREZjFCM0llNnZheldDK1BMU0FYMGs5cE9wdElwWUw0TmV0RmZDU2JEWThSV29xRnRjNkg3V012amN5NERqUTJHTG04dERyOHNRcGQ4dGNTcUNBNlJOeTBGTFJvWU9sTXA1MTBzQ0tuU3RzZ0c5eHBtWktmQ3lFN1hqV0ZhV0x3dloyWmpXQkNtTWV5eDBBPT0iLCJzIjoiMSJ9", "maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "6693d37a-de90-4e94-85db-ab74fee0750e", "record_id": "flaws_cloudtrail:0000586:6693d37a-de90-4e94-85db-ab74fee0750e", "row_index": 586, "timestamp": "2019-07-18T20:13:10Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "237.25.162.210", "user_agent": "aws-cli/1.16.199 Python/2.7.15 Darwin/16.7.0 botocore/1.12.189", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 1081, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "6693d37a-de90-4e94-85db-ab74fee0750e", "eventTime": "2019-07-18T20:13:10Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "237.25.162.210", "userAgent": "aws-cli/1.16.199 Python/2.7.15 Darwin/16.7.0 botocore/1.12.189", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"nextToken": "eyJ2IjoiMiIsImMiOiJkSGkwN1dSWnN6UWFwZlh2ZDBDNXR4RlhGT2tQaERlbVR1Zlg0dDBQQlJkUWY5RUZJS0tZNlVFcFBSa3h5NkhmMStOUWVnVEh0WS9zbmpiVVhLbVNRSmVEM1M0eGlUT1BrTDc3MkZEclFGVWlQN3NxMUYyQkV3Rnh3V29DUkRPNHZEMXFLazJoQnd4T1BjQTEyZXR3YTE5bWN3LzJwWHlxZzhNNnY2QnIyNWFuNDRGZTM5cEdNRHk3VnFQVWl1L2hxaDIxbkR5MEUxQmNaZz09IiwicyI6IjEifQ==", "maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "f4c789c4-0102-425d-b4ee-513635749598", "record_id": "flaws_cloudtrail:0000587:f4c789c4-0102-425d-b4ee-513635749598", "row_index": 587, "timestamp": "2019-07-18T20:13:10Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "237.25.162.210", "user_agent": "aws-cli/1.16.199 Python/2.7.15 Darwin/16.7.0 botocore/1.12.189", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 1057, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "f4c789c4-0102-425d-b4ee-513635749598", "eventTime": "2019-07-18T20:13:10Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "237.25.162.210", "userAgent": "aws-cli/1.16.199 Python/2.7.15 Darwin/16.7.0 botocore/1.12.189", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"nextToken": "eyJ2IjoiMiIsImMiOiJ5U1J2SXpJRXNnUjJWVko0L3hFSGxzSCthak1WaWdxYWIxWUFMR00wdEtmTGFpYlREZjFCM0llNnZheldDK1BMU0FYMGs5cE9wdElwWUw0TmV0RmZDU2JEWThSV29xRnRjNkg3V012amN5NERqUTJHTG04dERyOHNRcGQ4dGNTcUNBNlJOeTBGTFJvWU9sTXA1MTBzQ0tuU3RzZ0c5eHBtWktmQ3lFN1hqV0ZhV0x3dloyWmpXQkNtTWV5eDBBPT0iLCJzIjoiMSJ9", "maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "6693d37a-de90-4e94-85db-ab74fee0750e", "record_id": "flaws_cloudtrail:0000588:6693d37a-de90-4e94-85db-ab74fee0750e", "row_index": 588, "timestamp": "2019-07-18T20:13:10Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "237.25.162.210", "user_agent": "aws-cli/1.16.199 Python/2.7.15 Darwin/16.7.0 botocore/1.12.189", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 1081, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "6693d37a-de90-4e94-85db-ab74fee0750e", "eventTime": "2019-07-18T20:13:10Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "237.25.162.210", "userAgent": "aws-cli/1.16.199 Python/2.7.15 Darwin/16.7.0 botocore/1.12.189", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"nextToken": "eyJ2IjoiMiIsImMiOiJkSGkwN1dSWnN6UWFwZlh2ZDBDNXR4RlhGT2tQaERlbVR1Zlg0dDBQQlJkUWY5RUZJS0tZNlVFcFBSa3h5NkhmMStOUWVnVEh0WS9zbmpiVVhLbVNRSmVEM1M0eGlUT1BrTDc3MkZEclFGVWlQN3NxMUYyQkV3Rnh3V29DUkRPNHZEMXFLazJoQnd4T1BjQTEyZXR3YTE5bWN3LzJwWHlxZzhNNnY2QnIyNWFuNDRGZTM5cEdNRHk3VnFQVWl1L2hxaDIxbkR5MEUxQmNaZz09IiwicyI6IjEifQ==", "maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "0ab720847-3c28-42db-984a-887c98d3b630", "record_id": "flaws_cloudtrail:0000589:0ab720847-3c28-42db-984a-887c98d3b630", "row_index": 589, "timestamp": "2019-07-18T20:13:11Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "237.25.162.210", "user_agent": "aws-cli/1.16.199 Python/2.7.15 Darwin/16.7.0 botocore/1.12.189", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 1102, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "0ab720847-3c28-42db-984a-887c98d3b630", "eventTime": "2019-07-18T20:13:11Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "237.25.162.210", "userAgent": "aws-cli/1.16.199 Python/2.7.15 Darwin/16.7.0 botocore/1.12.189", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"nextToken": "eyJ2IjoiMiIsImMiOiJ0WlpMb3BId1RCdGZtTDQzZVZpVE5jRG0vNkFxemE2TGVNTWQzSkN1YXVkUXdaOTd2MnE0U3ZuUFpGb2pjbmtUYkZTeEU2TmJ1TnVGU1FINUM0NmZYNFJhUFpSdlBhM1B0czhKR0xtbkFBdVdjOTVYSUdLdWs2N1JmcTcxUk5mK1JsV0loR2NMbEJ5TWR2dFh0U3dubUZySW1RYWI4Z28zZnlqV3J1RFpkL211R0wrZFBvbjUzY0p4NkFEYU0vRHZGTk84S3ZRMmNyeEJXN3dwc1JqV2pocVpwMmlBUHZnPSIsInMiOiIxIn0=", "maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "a33c6004-207d-4807-824c-0200956ffc42", "record_id": "flaws_cloudtrail:0000590:a33c6004-207d-4807-824c-0200956ffc42", "row_index": 590, "timestamp": "2019-07-18T20:13:11Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "48.242.79.253", "user_agent": "aws-cli/1.16.160 Python/3.7.3 Darwin/18.6.0 botocore/1.12.150", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1071, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "a33c6004-207d-4807-824c-0200956ffc42", "eventTime": "2019-07-18T20:13:11Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "48.242.79.253", "userAgent": "aws-cli/1.16.160 Python/3.7.3 Darwin/18.6.0 botocore/1.12.150", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"nextToken": "eyJ2IjoiMiIsImMiOiJBdDkxc01jajlGbzkyZHVta0JJRi9Hb0ZkZUpnUUVHZlZPemNVb09yYkZzTmRuNm9zNEU5SDFGckhnZFpWdnFmOHZ4Y0M5eW42czRQVjFTZ096b1c3SCtkTTNlUGZnaEhZK044N2xBT0RUUTlVazI3TDNrbGx2M3VreStkWkU1R0hoeENFcGM2Nk5HYkFmc3dZNldtKzVDWFl1OFZCaCtUTDlieWsvWmpYVWVwLzA1aE8vb0VuZ3I4eW5VNkNkY1JKUTAyZ3lnV1F3PT0iLCJzIjoiMSJ9", "maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "0ab720847-3c28-42db-984a-887c98d3b630", "record_id": "flaws_cloudtrail:0000591:0ab720847-3c28-42db-984a-887c98d3b630", "row_index": 591, "timestamp": "2019-07-18T20:13:11Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "237.25.162.210", "user_agent": "aws-cli/1.16.199 Python/2.7.15 Darwin/16.7.0 botocore/1.12.189", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 1102, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "0ab720847-3c28-42db-984a-887c98d3b630", "eventTime": "2019-07-18T20:13:11Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "237.25.162.210", "userAgent": "aws-cli/1.16.199 Python/2.7.15 Darwin/16.7.0 botocore/1.12.189", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"nextToken": "eyJ2IjoiMiIsImMiOiJ0WlpMb3BId1RCdGZtTDQzZVZpVE5jRG0vNkFxemE2TGVNTWQzSkN1YXVkUXdaOTd2MnE0U3ZuUFpGb2pjbmtUYkZTeEU2TmJ1TnVGU1FINUM0NmZYNFJhUFpSdlBhM1B0czhKR0xtbkFBdVdjOTVYSUdLdWs2N1JmcTcxUk5mK1JsV0loR2NMbEJ5TWR2dFh0U3dubUZySW1RYWI4Z28zZnlqV3J1RFpkL211R0wrZFBvbjUzY0p4NkFEYU0vRHZGTk84S3ZRMmNyeEJXN3dwc1JqV2pocVpwMmlBUHZnPSIsInMiOiIxIn0=", "maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "a33c6004-207d-4807-824c-0200956ffc42", "record_id": "flaws_cloudtrail:0000592:a33c6004-207d-4807-824c-0200956ffc42", "row_index": 592, "timestamp": "2019-07-18T20:13:11Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "48.242.79.253", "user_agent": "aws-cli/1.16.160 Python/3.7.3 Darwin/18.6.0 botocore/1.12.150", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1071, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "a33c6004-207d-4807-824c-0200956ffc42", "eventTime": "2019-07-18T20:13:11Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "48.242.79.253", "userAgent": "aws-cli/1.16.160 Python/3.7.3 Darwin/18.6.0 botocore/1.12.150", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"nextToken": "eyJ2IjoiMiIsImMiOiJBdDkxc01jajlGbzkyZHVta0JJRi9Hb0ZkZUpnUUVHZlZPemNVb09yYkZzTmRuNm9zNEU5SDFGckhnZFpWdnFmOHZ4Y0M5eW42czRQVjFTZ096b1c3SCtkTTNlUGZnaEhZK044N2xBT0RUUTlVazI3TDNrbGx2M3VreStkWkU1R0hoeENFcGM2Nk5HYkFmc3dZNldtKzVDWFl1OFZCaCtUTDlieWsvWmpYVWVwLzA1aE8vb0VuZ3I4eW5VNkNkY1JKUTAyZ3lnV1F3PT0iLCJzIjoiMSJ9", "maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "032b4091-0cc4-4b1f-bc47-b787aea924c8", "record_id": "flaws_cloudtrail:0000593:032b4091-0cc4-4b1f-bc47-b787aea924c8", "row_index": 593, "timestamp": "2019-07-18T20:13:12Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "237.25.162.210", "user_agent": "aws-cli/1.16.199 Python/2.7.15 Darwin/16.7.0 botocore/1.12.189", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 1102, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "032b4091-0cc4-4b1f-bc47-b787aea924c8", "eventTime": "2019-07-18T20:13:12Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "237.25.162.210", "userAgent": "aws-cli/1.16.199 Python/2.7.15 Darwin/16.7.0 botocore/1.12.189", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"nextToken": "eyJ2IjoiMiIsImMiOiJueFVkZXh6RzhrNUhlQnkxUGthL2FWZVpuRmdpdkZsSG1Tbml2dUJUcVRHeG1aTVV2NXhQZC81ZDNaMlhLWWI4OTEveUxRK0tMRjZTU2VnNFlIR0hPb0dOcW14Z0t6b2MvV2tySjhEY2hpSm1XMkZaM3VWWFdTV1Z6QWpFVUpMUGtDVTVzUHhoWXU4eU1iNXNLMjlGWGxJUDlrQkF2RWg4alhXWTZGKzJJU3RqcGlmQzVxQU9ZVE8zQmI0UE95QlV4aml4alNNcjNpYlBLUHZLK0paejcyMFdpRVRVSktRPSIsInMiOiIxIn0=", "maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "7aa56eed-5906-4711-936d-206b19eba285", "record_id": "flaws_cloudtrail:0000594:7aa56eed-5906-4711-936d-206b19eba285", "row_index": 594, "timestamp": "2019-07-18T20:13:12Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "237.25.162.210", "user_agent": "aws-cli/1.16.199 Python/2.7.15 Darwin/16.7.0 botocore/1.12.189", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 1057, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "7aa56eed-5906-4711-936d-206b19eba285", "eventTime": "2019-07-18T20:13:12Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "237.25.162.210", "userAgent": "aws-cli/1.16.199 Python/2.7.15 Darwin/16.7.0 botocore/1.12.189", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"nextToken": "eyJ2IjoiMiIsImMiOiI2bmxzNmt0SXRUdFM4NXRENDN6RTFiclVPdzFjOTlCcXNUV0tkU2pQejRDVEdma1J1eHd5S2lmZlkxeE9VKzJuVXNCRmtPLzRJaFJ2ZjFrN003MTd2U1k5Qkw4M0NrU09GSnZqZGFabVdXWkJyL2dZU2ZXU2MzMkdoM0FSMGQ4MVhjeTY4NXczOGovakdXS2VwU2R6RVR5YThXVXlHQlYvL3hTRUZsU21GVUtXWDI0QVlmM1FIV21pWW1ZcmllZz0iLCJzIjoiMSJ9", "maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "0e22ce99-4e08-43f3-a121-1969f776e014", "record_id": "flaws_cloudtrail:0000595:0e22ce99-4e08-43f3-a121-1969f776e014", "row_index": 595, "timestamp": "2019-07-18T20:13:12Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "48.242.79.253", "user_agent": "aws-cli/1.16.160 Python/3.7.3 Darwin/18.6.0 botocore/1.12.150", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1079, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "0e22ce99-4e08-43f3-a121-1969f776e014", "eventTime": "2019-07-18T20:13:12Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "48.242.79.253", "userAgent": "aws-cli/1.16.160 Python/3.7.3 Darwin/18.6.0 botocore/1.12.150", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"nextToken": "eyJ2IjoiMiIsImMiOiJuTWpFSzFzZUZ2enc0OFJLN3dMTGFRYS9CSkFGTFRWUE9JNnovR0NRL1JPZXIvUGxCS2xvczcwSzBTLzJqNkprc1ROOUticXd6V2ZqVUVGSkJod0ordlhyZzRhd1VKNk0xMjJhbWhtNmFzNTFYYXBDM05xdG55TE9HU2tQaXJhVldYUnUrL3ZqS2pHRWF4UUpQZEdlcHFlZUppeG5WejN2QlVVR1VGTmNtMHZVZVBJZFFGOSt2T2dyeDRDMis3M2hFRnJoYm5GQ0ZPUFNVdz09IiwicyI6IjEifQ==", "maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "032b4091-0cc4-4b1f-bc47-b787aea924c8", "record_id": "flaws_cloudtrail:0000596:032b4091-0cc4-4b1f-bc47-b787aea924c8", "row_index": 596, "timestamp": "2019-07-18T20:13:12Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "237.25.162.210", "user_agent": "aws-cli/1.16.199 Python/2.7.15 Darwin/16.7.0 botocore/1.12.189", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 1102, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "032b4091-0cc4-4b1f-bc47-b787aea924c8", "eventTime": "2019-07-18T20:13:12Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "237.25.162.210", "userAgent": "aws-cli/1.16.199 Python/2.7.15 Darwin/16.7.0 botocore/1.12.189", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"nextToken": "eyJ2IjoiMiIsImMiOiJueFVkZXh6RzhrNUhlQnkxUGthL2FWZVpuRmdpdkZsSG1Tbml2dUJUcVRHeG1aTVV2NXhQZC81ZDNaMlhLWWI4OTEveUxRK0tMRjZTU2VnNFlIR0hPb0dOcW14Z0t6b2MvV2tySjhEY2hpSm1XMkZaM3VWWFdTV1Z6QWpFVUpMUGtDVTVzUHhoWXU4eU1iNXNLMjlGWGxJUDlrQkF2RWg4alhXWTZGKzJJU3RqcGlmQzVxQU9ZVE8zQmI0UE95QlV4aml4alNNcjNpYlBLUHZLK0paejcyMFdpRVRVSktRPSIsInMiOiIxIn0=", "maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "7aa56eed-5906-4711-936d-206b19eba285", "record_id": "flaws_cloudtrail:0000597:7aa56eed-5906-4711-936d-206b19eba285", "row_index": 597, "timestamp": "2019-07-18T20:13:12Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "237.25.162.210", "user_agent": "aws-cli/1.16.199 Python/2.7.15 Darwin/16.7.0 botocore/1.12.189", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 1057, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "7aa56eed-5906-4711-936d-206b19eba285", "eventTime": "2019-07-18T20:13:12Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "237.25.162.210", "userAgent": "aws-cli/1.16.199 Python/2.7.15 Darwin/16.7.0 botocore/1.12.189", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"nextToken": "eyJ2IjoiMiIsImMiOiI2bmxzNmt0SXRUdFM4NXRENDN6RTFiclVPdzFjOTlCcXNUV0tkU2pQejRDVEdma1J1eHd5S2lmZlkxeE9VKzJuVXNCRmtPLzRJaFJ2ZjFrN003MTd2U1k5Qkw4M0NrU09GSnZqZGFabVdXWkJyL2dZU2ZXU2MzMkdoM0FSMGQ4MVhjeTY4NXczOGovakdXS2VwU2R6RVR5YThXVXlHQlYvL3hTRUZsU21GVUtXWDI0QVlmM1FIV21pWW1ZcmllZz0iLCJzIjoiMSJ9", "maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "0e22ce99-4e08-43f3-a121-1969f776e014", "record_id": "flaws_cloudtrail:0000598:0e22ce99-4e08-43f3-a121-1969f776e014", "row_index": 598, "timestamp": "2019-07-18T20:13:12Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "48.242.79.253", "user_agent": "aws-cli/1.16.160 Python/3.7.3 Darwin/18.6.0 botocore/1.12.150", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1079, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "0e22ce99-4e08-43f3-a121-1969f776e014", "eventTime": "2019-07-18T20:13:12Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "48.242.79.253", "userAgent": "aws-cli/1.16.160 Python/3.7.3 Darwin/18.6.0 botocore/1.12.150", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"nextToken": "eyJ2IjoiMiIsImMiOiJuTWpFSzFzZUZ2enc0OFJLN3dMTGFRYS9CSkFGTFRWUE9JNnovR0NRL1JPZXIvUGxCS2xvczcwSzBTLzJqNkprc1ROOUticXd6V2ZqVUVGSkJod0ordlhyZzRhd1VKNk0xMjJhbWhtNmFzNTFYYXBDM05xdG55TE9HU2tQaXJhVldYUnUrL3ZqS2pHRWF4UUpQZEdlcHFlZUppeG5WejN2QlVVR1VGTmNtMHZVZVBJZFFGOSt2T2dyeDRDMis3M2hFRnJoYm5GQ0ZPUFNVdz09IiwicyI6IjEifQ==", "maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "5d64a39f-4a8c-452e-bcd4-04dc2d0f1b2a", "record_id": "flaws_cloudtrail:0000599:5d64a39f-4a8c-452e-bcd4-04dc2d0f1b2a", "row_index": 599, "timestamp": "2019-07-18T20:13:13Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "237.25.162.210", "user_agent": "aws-cli/1.16.199 Python/2.7.15 Darwin/16.7.0 botocore/1.12.189", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 1057, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "5d64a39f-4a8c-452e-bcd4-04dc2d0f1b2a", "eventTime": "2019-07-18T20:13:13Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "237.25.162.210", "userAgent": "aws-cli/1.16.199 Python/2.7.15 Darwin/16.7.0 botocore/1.12.189", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"nextToken": "eyJ2IjoiMiIsImMiOiJ4d0JRVmhKZ3JoZ2o1TzZVRmdnTlRxSW0wOG9VQzI0MjlmRXBZVlZMR3FXeUJhTldnbGdidXdPNmp3aURvVlh3RTdNOXFVMU1NL3FPT0UyMldDV2tWak9LVzF6ck54WitNTlF3WmxiUmUzdXBxOFh6a3QyTGM0TkJ5MExuMnZUbGg5YVloRnZrMWdVQndORnN0Yk1ZN2xpOHA3c0N3OWYveWdyakJGT2xUc2Y3Qmlmclo5d21Cbm5oY1ZnR1J6QT0iLCJzIjoiMSJ9", "maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "5d64a39f-4a8c-452e-bcd4-04dc2d0f1b2a", "record_id": "flaws_cloudtrail:0000600:5d64a39f-4a8c-452e-bcd4-04dc2d0f1b2a", "row_index": 600, "timestamp": "2019-07-18T20:13:13Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "237.25.162.210", "user_agent": "aws-cli/1.16.199 Python/2.7.15 Darwin/16.7.0 botocore/1.12.189", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 1057, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "5d64a39f-4a8c-452e-bcd4-04dc2d0f1b2a", "eventTime": "2019-07-18T20:13:13Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "237.25.162.210", "userAgent": "aws-cli/1.16.199 Python/2.7.15 Darwin/16.7.0 botocore/1.12.189", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"nextToken": "eyJ2IjoiMiIsImMiOiJ4d0JRVmhKZ3JoZ2o1TzZVRmdnTlRxSW0wOG9VQzI0MjlmRXBZVlZMR3FXeUJhTldnbGdidXdPNmp3aURvVlh3RTdNOXFVMU1NL3FPT0UyMldDV2tWak9LVzF6ck54WitNTlF3WmxiUmUzdXBxOFh6a3QyTGM0TkJ5MExuMnZUbGg5YVloRnZrMWdVQndORnN0Yk1ZN2xpOHA3c0N3OWYveWdyakJGT2xUc2Y3Qmlmclo5d21Cbm5oY1ZnR1J6QT0iLCJzIjoiMSJ9", "maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "4825a8bd-f44f-4f6a-a2ae-16f45f054f6f", "record_id": "flaws_cloudtrail:0000601:4825a8bd-f44f-4f6a-a2ae-16f45f054f6f", "row_index": 601, "timestamp": "2019-07-18T20:13:14Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "237.25.162.210", "user_agent": "aws-cli/1.16.199 Python/2.7.15 Darwin/16.7.0 botocore/1.12.189", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 1102, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "4825a8bd-f44f-4f6a-a2ae-16f45f054f6f", "eventTime": "2019-07-18T20:13:14Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "237.25.162.210", "userAgent": "aws-cli/1.16.199 Python/2.7.15 Darwin/16.7.0 botocore/1.12.189", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"nextToken": "eyJ2IjoiMiIsImMiOiJKWmNPYmIrR0RnV3JvYnZiQ052bi9OL2NRamo3dXNadlJjQ3IyYW1rS3FHeGZzOTlxV3dxRVVJMmxEQ0ZqeVZmY0I5YVU4V1piTHJHSmtRNVc1MWEyWURwbjZsQjNnWm43YnJ1MCtYdXdTVjgxSGl4NG9OZDhJZGM1ZGRCcnk4MWdTT1Q1NWpCQzhDUE1YVS8vLzFNeDdPWEk3eHdBcHFTalpPYzlGRk5IeWRTdDQ5NWVidEVYOUxCWjFwMm5pTDE0THd6eld2eXpwbzlBb1lhbXp0S1ZVOXFHWEp0aXBnPSIsInMiOiIxIn0=", "maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "abc410a1-722b-4cd4-a9b5-ec6c3efdd02c", "record_id": "flaws_cloudtrail:0000602:abc410a1-722b-4cd4-a9b5-ec6c3efdd02c", "row_index": 602, "timestamp": "2019-07-18T20:13:14Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "237.25.162.210", "user_agent": "aws-cli/1.16.199 Python/2.7.15 Darwin/16.7.0 botocore/1.12.189", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 1057, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "abc410a1-722b-4cd4-a9b5-ec6c3efdd02c", "eventTime": "2019-07-18T20:13:14Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "237.25.162.210", "userAgent": "aws-cli/1.16.199 Python/2.7.15 Darwin/16.7.0 botocore/1.12.189", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"nextToken": "eyJ2IjoiMiIsImMiOiJWQTRHbFBvZElreUtLRjd6WWZkdHpKRlNZMWQxazVuMnNJVGtsa096Yzh0a3pWTXgyKzJQWUZFV1hrYjZHeTVzU0JFRUhabHc3MDF4UzBPU0I5NHlNN2VtVUlmSGY1TUthcy8wcDRucG5LZ1hvM3dRZlZXcFZLdmU0TTFQbStYa3RJY0VFV0RSM0VleEp5eStZaU90cHNNKzdQL3Y2bXh1ZGdqWUJhVVVKVzh4ZURXVEdSRFNHbzk4U2RzNmtGbz0iLCJzIjoiMSJ9", "maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "a44c08ef-489c-4b52-a117-675cc276464d", "record_id": "flaws_cloudtrail:0000603:a44c08ef-489c-4b52-a117-675cc276464d", "row_index": 603, "timestamp": "2019-07-18T20:13:14Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "48.242.79.253", "user_agent": "aws-cli/1.16.160 Python/3.7.3 Darwin/18.6.0 botocore/1.12.150", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1079, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "a44c08ef-489c-4b52-a117-675cc276464d", "eventTime": "2019-07-18T20:13:14Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "48.242.79.253", "userAgent": "aws-cli/1.16.160 Python/3.7.3 Darwin/18.6.0 botocore/1.12.150", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"nextToken": "eyJ2IjoiMiIsImMiOiIzS2JjSEo4djZnQXdyaEpxdGI1YURpeGVWUFJ0SGx5aDAvUmVlZDBIb0k0RENsTHVzZXNvN3d1RjN3cWVxT0k5WkVGdVprSkhxWCtLU20vNmFNWmVuTUV4VmRGaWxzRmdZSzJMMmpKOThiR2RETnNCWVQvSDZnR043YmNybDhKMzV5aUZPanNJNHVjd0ZCSEErdGpCZld4MGpoSi9nT3cwZ0ZNNlBhUmkyVGlKNWVmT3lwdE9rdEI1SGdqaGtJeVQ4dnN3NUltTG5RalFiUT09IiwicyI6IjEifQ==", "maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "4825a8bd-f44f-4f6a-a2ae-16f45f054f6f", "record_id": "flaws_cloudtrail:0000604:4825a8bd-f44f-4f6a-a2ae-16f45f054f6f", "row_index": 604, "timestamp": "2019-07-18T20:13:14Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "237.25.162.210", "user_agent": "aws-cli/1.16.199 Python/2.7.15 Darwin/16.7.0 botocore/1.12.189", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 1102, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "4825a8bd-f44f-4f6a-a2ae-16f45f054f6f", "eventTime": "2019-07-18T20:13:14Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "237.25.162.210", "userAgent": "aws-cli/1.16.199 Python/2.7.15 Darwin/16.7.0 botocore/1.12.189", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"nextToken": "eyJ2IjoiMiIsImMiOiJKWmNPYmIrR0RnV3JvYnZiQ052bi9OL2NRamo3dXNadlJjQ3IyYW1rS3FHeGZzOTlxV3dxRVVJMmxEQ0ZqeVZmY0I5YVU4V1piTHJHSmtRNVc1MWEyWURwbjZsQjNnWm43YnJ1MCtYdXdTVjgxSGl4NG9OZDhJZGM1ZGRCcnk4MWdTT1Q1NWpCQzhDUE1YVS8vLzFNeDdPWEk3eHdBcHFTalpPYzlGRk5IeWRTdDQ5NWVidEVYOUxCWjFwMm5pTDE0THd6eld2eXpwbzlBb1lhbXp0S1ZVOXFHWEp0aXBnPSIsInMiOiIxIn0=", "maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "abc410a1-722b-4cd4-a9b5-ec6c3efdd02c", "record_id": "flaws_cloudtrail:0000605:abc410a1-722b-4cd4-a9b5-ec6c3efdd02c", "row_index": 605, "timestamp": "2019-07-18T20:13:14Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "237.25.162.210", "user_agent": "aws-cli/1.16.199 Python/2.7.15 Darwin/16.7.0 botocore/1.12.189", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 1057, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "abc410a1-722b-4cd4-a9b5-ec6c3efdd02c", "eventTime": "2019-07-18T20:13:14Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "237.25.162.210", "userAgent": "aws-cli/1.16.199 Python/2.7.15 Darwin/16.7.0 botocore/1.12.189", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"nextToken": "eyJ2IjoiMiIsImMiOiJWQTRHbFBvZElreUtLRjd6WWZkdHpKRlNZMWQxazVuMnNJVGtsa096Yzh0a3pWTXgyKzJQWUZFV1hrYjZHeTVzU0JFRUhabHc3MDF4UzBPU0I5NHlNN2VtVUlmSGY1TUthcy8wcDRucG5LZ1hvM3dRZlZXcFZLdmU0TTFQbStYa3RJY0VFV0RSM0VleEp5eStZaU90cHNNKzdQL3Y2bXh1ZGdqWUJhVVVKVzh4ZURXVEdSRFNHbzk4U2RzNmtGbz0iLCJzIjoiMSJ9", "maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}