Task: attack_reconstruction (flaws_cloudtrail)
Prompt: Review the CloudTrail records for a session-credentialed principal that moves from storage discovery into object access against an S3 bucket. Identify the responsible principal, the applicable MITRE ATT&CK technique, the supporting CloudTrail record_ids for each phase of the chain you reconstruct, and the impacted AWS assets. Return a JSON object matching the AttackReconstructionAnswer schema. Use principal.arn for primary_actor, the MITRE ATT&CK ID (e.g. T1530) for technique, and group the supporting CloudTrail record_ids by attack phase. List the AWS asset identifiers (bucket names, role/user names, trail names, ARNs) the attack acted on as impacted_assets.
Answer schema: attack_reconstruction_answer

CloudTrail records:
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "b41e008c-80b0-4679-9338-615594aae276", "record_id": "flaws_cloudtrail:0000000:b41e008c-80b0-4679-9338-615594aae276", "row_index": 0, "timestamp": "2019-03-01T00:22:01Z", "event_type": "DescribeDBSnapshots", "event_source": "rds.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "155.251.168.5", "user_agent": "Boto3/1.9.105 Python/2.7.16rc1 Linux/4.19.0-kali3-amd64 Botocore/1.12.105", "aws_region": "us-east-2"}, "resource_arns": [], "raw_record_size_bytes": 726, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "b41e008c-80b0-4679-9338-615594aae276", "eventTime": "2019-03-01T00:22:01Z", "eventName": "DescribeDBSnapshots", "eventSource": "rds.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "155.251.168.5", "userAgent": "Boto3/1.9.105 Python/2.7.16rc1 Linux/4.19.0-kali3-amd64 Botocore/1.12.105", "awsRegion": "us-east-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"includePublic": false, "includeShared": false}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "524168f-1cc9-4521-a5a5-c710ed954ec5", "record_id": "flaws_cloudtrail:0000001:524168f-1cc9-4521-a5a5-c710ed954ec5", "row_index": 1, "timestamp": "2019-03-01T00:22:01Z", "event_type": "DescribeDBSecurityGroups", "event_source": "rds.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "155.251.168.5", "user_agent": "Boto3/1.9.105 Python/2.7.16rc1 Linux/4.19.0-kali3-amd64 Botocore/1.12.105", "aws_region": "us-east-2"}, "resource_arns": [], "raw_record_size_bytes": 689, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "524168f-1cc9-4521-a5a5-c710ed954ec5", "eventTime": "2019-03-01T00:22:01Z", "eventName": "DescribeDBSecurityGroups", "eventSource": "rds.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "155.251.168.5", "userAgent": "Boto3/1.9.105 Python/2.7.16rc1 Linux/4.19.0-kali3-amd64 Botocore/1.12.105", "awsRegion": "us-east-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "85858cbd-de1f-44ec-b2df-48c93dbea9b0", "record_id": "flaws_cloudtrail:0000002:85858cbd-de1f-44ec-b2df-48c93dbea9b0", "row_index": 2, "timestamp": "2019-03-01T00:22:01Z", "event_type": "DescribeDBParameterGroups", "event_source": "rds.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "155.251.168.5", "user_agent": "Boto3/1.9.105 Python/2.7.16rc1 Linux/4.19.0-kali3-amd64 Botocore/1.12.105", "aws_region": "sa-east-1"}, "resource_arns": [], "raw_record_size_bytes": 691, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "85858cbd-de1f-44ec-b2df-48c93dbea9b0", "eventTime": "2019-03-01T00:22:01Z", "eventName": "DescribeDBParameterGroups", "eventSource": "rds.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "155.251.168.5", "userAgent": "Boto3/1.9.105 Python/2.7.16rc1 Linux/4.19.0-kali3-amd64 Botocore/1.12.105", "awsRegion": "sa-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "24724f91-c1b1-4ea6-a16d-8dc5a9bac014", "record_id": "flaws_cloudtrail:0000003:24724f91-c1b1-4ea6-a16d-8dc5a9bac014", "row_index": 3, "timestamp": "2019-03-01T00:22:01Z", "event_type": "DescribeDBInstances", "event_source": "rds.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "155.251.168.5", "user_agent": "Boto3/1.9.105 Python/2.7.16rc1 Linux/4.19.0-kali3-amd64 Botocore/1.12.105", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 684, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "24724f91-c1b1-4ea6-a16d-8dc5a9bac014", "eventTime": "2019-03-01T00:22:01Z", "eventName": "DescribeDBInstances", "eventSource": "rds.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "155.251.168.5", "userAgent": "Boto3/1.9.105 Python/2.7.16rc1 Linux/4.19.0-kali3-amd64 Botocore/1.12.105", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "8b2be302-9964-4d00-832a-4199ed6ab058", "record_id": "flaws_cloudtrail:0000004:8b2be302-9964-4d00-832a-4199ed6ab058", "row_index": 4, "timestamp": "2019-03-01T00:22:01Z", "event_type": "DescribeDBParameterGroups", "event_source": "rds.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "155.251.168.5", "user_agent": "Boto3/1.9.105 Python/2.7.16rc1 Linux/4.19.0-kali3-amd64 Botocore/1.12.105", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 684, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "8b2be302-9964-4d00-832a-4199ed6ab058", "eventTime": "2019-03-01T00:22:01Z", "eventName": "DescribeDBParameterGroups", "eventSource": "rds.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "155.251.168.5", "userAgent": "Boto3/1.9.105 Python/2.7.16rc1 Linux/4.19.0-kali3-amd64 Botocore/1.12.105", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "d06331-d7bb-4800-a8a6-8009de5a8178", "record_id": "flaws_cloudtrail:0000005:d06331-d7bb-4800-a8a6-8009de5a8178", "row_index": 5, "timestamp": "2019-03-01T00:22:01Z", "event_type": "DescribeDBSecurityGroups", "event_source": "rds.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "155.251.168.5", "user_agent": "Boto3/1.9.105 Python/2.7.16rc1 Linux/4.19.0-kali3-amd64 Botocore/1.12.105", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 686, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "d06331-d7bb-4800-a8a6-8009de5a8178", "eventTime": "2019-03-01T00:22:01Z", "eventName": "DescribeDBSecurityGroups", "eventSource": "rds.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "155.251.168.5", "userAgent": "Boto3/1.9.105 Python/2.7.16rc1 Linux/4.19.0-kali3-amd64 Botocore/1.12.105", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "c39fc052-b649-40bf-83a6-b3217bbfb9f9", "record_id": "flaws_cloudtrail:0000006:c39fc052-b649-40bf-83a6-b3217bbfb9f9", "row_index": 6, "timestamp": "2019-03-01T00:22:01Z", "event_type": "DescribeDBSnapshots", "event_source": "rds.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "155.251.168.5", "user_agent": "Boto3/1.9.105 Python/2.7.16rc1 Linux/4.19.0-kali3-amd64 Botocore/1.12.105", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 725, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "c39fc052-b649-40bf-83a6-b3217bbfb9f9", "eventTime": "2019-03-01T00:22:01Z", "eventName": "DescribeDBSnapshots", "eventSource": "rds.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "155.251.168.5", "userAgent": "Boto3/1.9.105 Python/2.7.16rc1 Linux/4.19.0-kali3-amd64 Botocore/1.12.105", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"includePublic": false, "includeShared": false}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "a81538e-e72d-4ce8-8c4e-95bcfe5bd9d8", "record_id": "flaws_cloudtrail:0000007:a81538e-e72d-4ce8-8c4e-95bcfe5bd9d8", "row_index": 7, "timestamp": "2019-03-01T00:22:01Z", "event_type": "DescribeDBSubnetGroups", "event_source": "rds.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "155.251.168.5", "user_agent": "Boto3/1.9.105 Python/2.7.16rc1 Linux/4.19.0-kali3-amd64 Botocore/1.12.105", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 686, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "a81538e-e72d-4ce8-8c4e-95bcfe5bd9d8", "eventTime": "2019-03-01T00:22:01Z", "eventName": "DescribeDBSubnetGroups", "eventSource": "rds.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "155.251.168.5", "userAgent": "Boto3/1.9.105 Python/2.7.16rc1 Linux/4.19.0-kali3-amd64 Botocore/1.12.105", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "07c0babd-17b3-4e8a-b256-927456d5ebd01", "record_id": "flaws_cloudtrail:0000008:07c0babd-17b3-4e8a-b256-927456d5ebd01", "row_index": 8, "timestamp": "2019-03-01T00:22:01Z", "event_type": "DescribeDBSubnetGroups", "event_source": "rds.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "155.251.168.5", "user_agent": "Boto3/1.9.105 Python/2.7.16rc1 Linux/4.19.0-kali3-amd64 Botocore/1.12.105", "aws_region": "us-east-2"}, "resource_arns": [], "raw_record_size_bytes": 688, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "07c0babd-17b3-4e8a-b256-927456d5ebd01", "eventTime": "2019-03-01T00:22:01Z", "eventName": "DescribeDBSubnetGroups", "eventSource": "rds.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "155.251.168.5", "userAgent": "Boto3/1.9.105 Python/2.7.16rc1 Linux/4.19.0-kali3-amd64 Botocore/1.12.105", "awsRegion": "us-east-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "3d39ed5b-51b7-44ac-84ad-dc2c370d5d85", "record_id": "flaws_cloudtrail:0000009:3d39ed5b-51b7-44ac-84ad-dc2c370d5d85", "row_index": 9, "timestamp": "2019-03-01T00:22:01Z", "event_type": "DescribeDBInstances", "event_source": "rds.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "155.251.168.5", "user_agent": "Boto3/1.9.105 Python/2.7.16rc1 Linux/4.19.0-kali3-amd64 Botocore/1.12.105", "aws_region": "us-east-2"}, "resource_arns": [], "raw_record_size_bytes": 684, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "3d39ed5b-51b7-44ac-84ad-dc2c370d5d85", "eventTime": "2019-03-01T00:22:01Z", "eventName": "DescribeDBInstances", "eventSource": "rds.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "155.251.168.5", "userAgent": "Boto3/1.9.105 Python/2.7.16rc1 Linux/4.19.0-kali3-amd64 Botocore/1.12.105", "awsRegion": "us-east-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "566b7e22-e91d-40ae-831e-9977c1c544e1", "record_id": "flaws_cloudtrail:0000010:566b7e22-e91d-40ae-831e-9977c1c544e1", "row_index": 10, "timestamp": "2019-03-01T00:22:01Z", "event_type": "DescribeDBParameterGroups", "event_source": "rds.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "155.251.168.5", "user_agent": "Boto3/1.9.105 Python/2.7.16rc1 Linux/4.19.0-kali3-amd64 Botocore/1.12.105", "aws_region": "us-east-2"}, "resource_arns": [], "raw_record_size_bytes": 690, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "566b7e22-e91d-40ae-831e-9977c1c544e1", "eventTime": "2019-03-01T00:22:01Z", "eventName": "DescribeDBParameterGroups", "eventSource": "rds.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "155.251.168.5", "userAgent": "Boto3/1.9.105 Python/2.7.16rc1 Linux/4.19.0-kali3-amd64 Botocore/1.12.105", "awsRegion": "us-east-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "b41e008c-80b0-4679-9338-615594aae276", "record_id": "flaws_cloudtrail:0000011:b41e008c-80b0-4679-9338-615594aae276", "row_index": 11, "timestamp": "2019-03-01T00:22:01Z", "event_type": "DescribeDBSnapshots", "event_source": "rds.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "155.251.168.5", "user_agent": "Boto3/1.9.105 Python/2.7.16rc1 Linux/4.19.0-kali3-amd64 Botocore/1.12.105", "aws_region": "us-east-2"}, "resource_arns": [], "raw_record_size_bytes": 726, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "b41e008c-80b0-4679-9338-615594aae276", "eventTime": "2019-03-01T00:22:01Z", "eventName": "DescribeDBSnapshots", "eventSource": "rds.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "155.251.168.5", "userAgent": "Boto3/1.9.105 Python/2.7.16rc1 Linux/4.19.0-kali3-amd64 Botocore/1.12.105", "awsRegion": "us-east-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"includePublic": false, "includeShared": false}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "524168f-1cc9-4521-a5a5-c710ed954ec5", "record_id": "flaws_cloudtrail:0000012:524168f-1cc9-4521-a5a5-c710ed954ec5", "row_index": 12, "timestamp": "2019-03-01T00:22:01Z", "event_type": "DescribeDBSecurityGroups", "event_source": "rds.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "155.251.168.5", "user_agent": "Boto3/1.9.105 Python/2.7.16rc1 Linux/4.19.0-kali3-amd64 Botocore/1.12.105", "aws_region": "us-east-2"}, "resource_arns": [], "raw_record_size_bytes": 689, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "524168f-1cc9-4521-a5a5-c710ed954ec5", "eventTime": "2019-03-01T00:22:01Z", "eventName": "DescribeDBSecurityGroups", "eventSource": "rds.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "155.251.168.5", "userAgent": "Boto3/1.9.105 Python/2.7.16rc1 Linux/4.19.0-kali3-amd64 Botocore/1.12.105", "awsRegion": "us-east-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "22c29a48-ccb5-474f-b2a8-ee7df8a1b969", "record_id": "flaws_cloudtrail:0000013:22c29a48-ccb5-474f-b2a8-ee7df8a1b969", "row_index": 13, "timestamp": "2019-03-01T00:22:02Z", "event_type": "DescribeDBSubnetGroups", "event_source": "rds.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "155.251.168.5", "user_agent": "Boto3/1.9.105 Python/2.7.16rc1 Linux/4.19.0-kali3-amd64 Botocore/1.12.105", "aws_region": "sa-east-1"}, "resource_arns": [], "raw_record_size_bytes": 687, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "22c29a48-ccb5-474f-b2a8-ee7df8a1b969", "eventTime": "2019-03-01T00:22:02Z", "eventName": "DescribeDBSubnetGroups", "eventSource": "rds.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "155.251.168.5", "userAgent": "Boto3/1.9.105 Python/2.7.16rc1 Linux/4.19.0-kali3-amd64 Botocore/1.12.105", "awsRegion": "sa-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "a91669b7-09b4-4758-9879-89ccb640792d7", "record_id": "flaws_cloudtrail:0000014:a91669b7-09b4-4758-9879-89ccb640792d7", "row_index": 14, "timestamp": "2019-03-01T00:22:02Z", "event_type": "DescribeDBInstances", "event_source": "rds.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "155.251.168.5", "user_agent": "Boto3/1.9.105 Python/2.7.16rc1 Linux/4.19.0-kali3-amd64 Botocore/1.12.105", "aws_region": "sa-east-1"}, "resource_arns": [], "raw_record_size_bytes": 685, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "a91669b7-09b4-4758-9879-89ccb640792d7", "eventTime": "2019-03-01T00:22:02Z", "eventName": "DescribeDBInstances", "eventSource": "rds.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "155.251.168.5", "userAgent": "Boto3/1.9.105 Python/2.7.16rc1 Linux/4.19.0-kali3-amd64 Botocore/1.12.105", "awsRegion": "sa-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "d5e2f83f-e592-4b50-8d65-6f971a9afb27", "record_id": "flaws_cloudtrail:0000015:d5e2f83f-e592-4b50-8d65-6f971a9afb27", "row_index": 15, "timestamp": "2019-03-01T00:22:02Z", "event_type": "DescribeDBSnapshots", "event_source": "rds.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "155.251.168.5", "user_agent": "Boto3/1.9.105 Python/2.7.16rc1 Linux/4.19.0-kali3-amd64 Botocore/1.12.105", "aws_region": "sa-east-1"}, "resource_arns": [], "raw_record_size_bytes": 725, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "d5e2f83f-e592-4b50-8d65-6f971a9afb27", "eventTime": "2019-03-01T00:22:02Z", "eventName": "DescribeDBSnapshots", "eventSource": "rds.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "155.251.168.5", "userAgent": "Boto3/1.9.105 Python/2.7.16rc1 Linux/4.19.0-kali3-amd64 Botocore/1.12.105", "awsRegion": "sa-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"includeShared": false, "includePublic": false}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "993678d5-5f32-4aa7-a66f-d7d65c064113", "record_id": "flaws_cloudtrail:0000016:993678d5-5f32-4aa7-a66f-d7d65c064113", "row_index": 16, "timestamp": "2019-03-01T00:22:02Z", "event_type": "DescribeDBSecurityGroups", "event_source": "rds.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "155.251.168.5", "user_agent": "Boto3/1.9.105 Python/2.7.16rc1 Linux/4.19.0-kali3-amd64 Botocore/1.12.105", "aws_region": "sa-east-1"}, "resource_arns": [], "raw_record_size_bytes": 689, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "993678d5-5f32-4aa7-a66f-d7d65c064113", "eventTime": "2019-03-01T00:22:02Z", "eventName": "DescribeDBSecurityGroups", "eventSource": "rds.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "155.251.168.5", "userAgent": "Boto3/1.9.105 Python/2.7.16rc1 Linux/4.19.0-kali3-amd64 Botocore/1.12.105", "awsRegion": "sa-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "7a28849-9985-4de9-a619-5913dd5d1918", "record_id": "flaws_cloudtrail:0000017:7a28849-9985-4de9-a619-5913dd5d1918", "row_index": 17, "timestamp": "2019-03-01T00:22:02Z", "event_type": "DescribeDBSecurityGroups", "event_source": "rds.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "155.251.168.5", "user_agent": "Boto3/1.9.105 Python/2.7.16rc1 Linux/4.19.0-kali3-amd64 Botocore/1.12.105", "aws_region": "us-west-1"}, "resource_arns": [], "raw_record_size_bytes": 688, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "7a28849-9985-4de9-a619-5913dd5d1918", "eventTime": "2019-03-01T00:22:02Z", "eventName": "DescribeDBSecurityGroups", "eventSource": "rds.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "155.251.168.5", "userAgent": "Boto3/1.9.105 Python/2.7.16rc1 Linux/4.19.0-kali3-amd64 Botocore/1.12.105", "awsRegion": "us-west-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "acef9fea-8cde-4fed-a14a-c0b78ff25ea0", "record_id": "flaws_cloudtrail:0000018:acef9fea-8cde-4fed-a14a-c0b78ff25ea0", "row_index": 18, "timestamp": "2019-03-01T00:22:02Z", "event_type": "DescribeDBParameterGroups", "event_source": "rds.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "155.251.168.5", "user_agent": "Boto3/1.9.105 Python/2.7.16rc1 Linux/4.19.0-kali3-amd64 Botocore/1.12.105", "aws_region": "us-west-1"}, "resource_arns": [], "raw_record_size_bytes": 690, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "acef9fea-8cde-4fed-a14a-c0b78ff25ea0", "eventTime": "2019-03-01T00:22:02Z", "eventName": "DescribeDBParameterGroups", "eventSource": "rds.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "155.251.168.5", "userAgent": "Boto3/1.9.105 Python/2.7.16rc1 Linux/4.19.0-kali3-amd64 Botocore/1.12.105", "awsRegion": "us-west-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "0171f4ce-ac4c-4f35-bcbf-b5bf0009702e", "record_id": "flaws_cloudtrail:0000019:0171f4ce-ac4c-4f35-bcbf-b5bf0009702e", "row_index": 19, "timestamp": "2019-03-01T00:22:02Z", "event_type": "DescribeDBInstances", "event_source": "rds.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "155.251.168.5", "user_agent": "Boto3/1.9.105 Python/2.7.16rc1 Linux/4.19.0-kali3-amd64 Botocore/1.12.105", "aws_region": "us-west-1"}, "resource_arns": [], "raw_record_size_bytes": 684, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "0171f4ce-ac4c-4f35-bcbf-b5bf0009702e", "eventTime": "2019-03-01T00:22:02Z", "eventName": "DescribeDBInstances", "eventSource": "rds.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "155.251.168.5", "userAgent": "Boto3/1.9.105 Python/2.7.16rc1 Linux/4.19.0-kali3-amd64 Botocore/1.12.105", "awsRegion": "us-west-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "277b7ebe-5c81-4876-8a30-beab1535a304", "record_id": "flaws_cloudtrail:0000020:277b7ebe-5c81-4876-8a30-beab1535a304", "row_index": 20, "timestamp": "2019-03-01T00:22:02Z", "event_type": "DescribeDBSnapshots", "event_source": "rds.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "155.251.168.5", "user_agent": "Boto3/1.9.105 Python/2.7.16rc1 Linux/4.19.0-kali3-amd64 Botocore/1.12.105", "aws_region": "us-west-1"}, "resource_arns": [], "raw_record_size_bytes": 723, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "277b7ebe-5c81-4876-8a30-beab1535a304", "eventTime": "2019-03-01T00:22:02Z", "eventName": "DescribeDBSnapshots", "eventSource": "rds.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "155.251.168.5", "userAgent": "Boto3/1.9.105 Python/2.7.16rc1 Linux/4.19.0-kali3-amd64 Botocore/1.12.105", "awsRegion": "us-west-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"includePublic": false, "includeShared": false}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "411be721-60d5-4e78-8190-ef15dd50cc06", "record_id": "flaws_cloudtrail:0000021:411be721-60d5-4e78-8190-ef15dd50cc06", "row_index": 21, "timestamp": "2019-03-01T00:22:02Z", "event_type": "DescribeDBSubnetGroups", "event_source": "rds.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "155.251.168.5", "user_agent": "Boto3/1.9.105 Python/2.7.16rc1 Linux/4.19.0-kali3-amd64 Botocore/1.12.105", "aws_region": "us-west-1"}, "resource_arns": [], "raw_record_size_bytes": 685, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "411be721-60d5-4e78-8190-ef15dd50cc06", "eventTime": "2019-03-01T00:22:02Z", "eventName": "DescribeDBSubnetGroups", "eventSource": "rds.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "155.251.168.5", "userAgent": "Boto3/1.9.105 Python/2.7.16rc1 Linux/4.19.0-kali3-amd64 Botocore/1.12.105", "awsRegion": "us-west-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "88476f19-f368-4804-8ba1-6d19d70f97ee", "record_id": "flaws_cloudtrail:0000022:88476f19-f368-4804-8ba1-6d19d70f97ee", "row_index": 22, "timestamp": "2019-03-01T00:22:02Z", "event_type": "DescribeDBSnapshots", "event_source": "rds.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "155.251.168.5", "user_agent": "Boto3/1.9.105 Python/2.7.16rc1 Linux/4.19.0-kali3-amd64 Botocore/1.12.105", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 725, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "88476f19-f368-4804-8ba1-6d19d70f97ee", "eventTime": "2019-03-01T00:22:02Z", "eventName": "DescribeDBSnapshots", "eventSource": "rds.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "155.251.168.5", "userAgent": "Boto3/1.9.105 Python/2.7.16rc1 Linux/4.19.0-kali3-amd64 Botocore/1.12.105", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"includePublic": false, "includeShared": false}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "50046-22c0-4700-bf89-36b75f52804f", "record_id": "flaws_cloudtrail:0000023:50046-22c0-4700-bf89-36b75f52804f", "row_index": 23, "timestamp": "2019-03-01T00:22:02Z", "event_type": "DescribeDBParameterGroups", "event_source": "rds.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "155.251.168.5", "user_agent": "Boto3/1.9.105 Python/2.7.16rc1 Linux/4.19.0-kali3-amd64 Botocore/1.12.105", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 687, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "50046-22c0-4700-bf89-36b75f52804f", "eventTime": "2019-03-01T00:22:02Z", "eventName": "DescribeDBParameterGroups", "eventSource": "rds.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "155.251.168.5", "userAgent": "Boto3/1.9.105 Python/2.7.16rc1 Linux/4.19.0-kali3-amd64 Botocore/1.12.105", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "810bb4bd-8a19-4f5f-ba2c-ea69993158a4", "record_id": "flaws_cloudtrail:0000024:810bb4bd-8a19-4f5f-ba2c-ea69993158a4", "row_index": 24, "timestamp": "2019-03-01T00:22:02Z", "event_type": "DescribeDBSubnetGroups", "event_source": "rds.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "155.251.168.5", "user_agent": "Boto3/1.9.105 Python/2.7.16rc1 Linux/4.19.0-kali3-amd64 Botocore/1.12.105", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 687, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "810bb4bd-8a19-4f5f-ba2c-ea69993158a4", "eventTime": "2019-03-01T00:22:02Z", "eventName": "DescribeDBSubnetGroups", "eventSource": "rds.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "155.251.168.5", "userAgent": "Boto3/1.9.105 Python/2.7.16rc1 Linux/4.19.0-kali3-amd64 Botocore/1.12.105", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "6cacbcfe-2f04-4b1e-b11a-f54e3a5c3b6d", "record_id": "flaws_cloudtrail:0000025:6cacbcfe-2f04-4b1e-b11a-f54e3a5c3b6d", "row_index": 25, "timestamp": "2019-03-01T00:22:02Z", "event_type": "DescribeDBSecurityGroups", "event_source": "rds.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "155.251.168.5", "user_agent": "Boto3/1.9.105 Python/2.7.16rc1 Linux/4.19.0-kali3-amd64 Botocore/1.12.105", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 689, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "6cacbcfe-2f04-4b1e-b11a-f54e3a5c3b6d", "eventTime": "2019-03-01T00:22:02Z", "eventName": "DescribeDBSecurityGroups", "eventSource": "rds.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "155.251.168.5", "userAgent": "Boto3/1.9.105 Python/2.7.16rc1 Linux/4.19.0-kali3-amd64 Botocore/1.12.105", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "32cbadbe-3d91-4e58-9311-e220fefd1800", "record_id": "flaws_cloudtrail:0000026:32cbadbe-3d91-4e58-9311-e220fefd1800", "row_index": 26, "timestamp": "2019-03-01T00:22:02Z", "event_type": "DescribeDBInstances", "event_source": "rds.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "155.251.168.5", "user_agent": "Boto3/1.9.105 Python/2.7.16rc1 Linux/4.19.0-kali3-amd64 Botocore/1.12.105", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 684, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "32cbadbe-3d91-4e58-9311-e220fefd1800", "eventTime": "2019-03-01T00:22:02Z", "eventName": "DescribeDBInstances", "eventSource": "rds.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "155.251.168.5", "userAgent": "Boto3/1.9.105 Python/2.7.16rc1 Linux/4.19.0-kali3-amd64 Botocore/1.12.105", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "22c29a48-ccb5-474f-b2a8-ee7df8a1b969", "record_id": "flaws_cloudtrail:0000027:22c29a48-ccb5-474f-b2a8-ee7df8a1b969", "row_index": 27, "timestamp": "2019-03-01T00:22:02Z", "event_type": "DescribeDBSubnetGroups", "event_source": "rds.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "155.251.168.5", "user_agent": "Boto3/1.9.105 Python/2.7.16rc1 Linux/4.19.0-kali3-amd64 Botocore/1.12.105", "aws_region": "sa-east-1"}, "resource_arns": [], "raw_record_size_bytes": 687, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "22c29a48-ccb5-474f-b2a8-ee7df8a1b969", "eventTime": "2019-03-01T00:22:02Z", "eventName": "DescribeDBSubnetGroups", "eventSource": "rds.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "155.251.168.5", "userAgent": "Boto3/1.9.105 Python/2.7.16rc1 Linux/4.19.0-kali3-amd64 Botocore/1.12.105", "awsRegion": "sa-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "a91669b7-09b4-4758-9879-89ccb640792d7", "record_id": "flaws_cloudtrail:0000028:a91669b7-09b4-4758-9879-89ccb640792d7", "row_index": 28, "timestamp": "2019-03-01T00:22:02Z", "event_type": "DescribeDBInstances", "event_source": "rds.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "155.251.168.5", "user_agent": "Boto3/1.9.105 Python/2.7.16rc1 Linux/4.19.0-kali3-amd64 Botocore/1.12.105", "aws_region": "sa-east-1"}, "resource_arns": [], "raw_record_size_bytes": 685, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "a91669b7-09b4-4758-9879-89ccb640792d7", "eventTime": "2019-03-01T00:22:02Z", "eventName": "DescribeDBInstances", "eventSource": "rds.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "155.251.168.5", "userAgent": "Boto3/1.9.105 Python/2.7.16rc1 Linux/4.19.0-kali3-amd64 Botocore/1.12.105", "awsRegion": "sa-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "d5e2f83f-e592-4b50-8d65-6f971a9afb27", "record_id": "flaws_cloudtrail:0000029:d5e2f83f-e592-4b50-8d65-6f971a9afb27", "row_index": 29, "timestamp": "2019-03-01T00:22:02Z", "event_type": "DescribeDBSnapshots", "event_source": "rds.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "155.251.168.5", "user_agent": "Boto3/1.9.105 Python/2.7.16rc1 Linux/4.19.0-kali3-amd64 Botocore/1.12.105", "aws_region": "sa-east-1"}, "resource_arns": [], "raw_record_size_bytes": 725, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "d5e2f83f-e592-4b50-8d65-6f971a9afb27", "eventTime": "2019-03-01T00:22:02Z", "eventName": "DescribeDBSnapshots", "eventSource": "rds.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "155.251.168.5", "userAgent": "Boto3/1.9.105 Python/2.7.16rc1 Linux/4.19.0-kali3-amd64 Botocore/1.12.105", "awsRegion": "sa-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"includeShared": false, "includePublic": false}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "993678d5-5f32-4aa7-a66f-d7d65c064113", "record_id": "flaws_cloudtrail:0000030:993678d5-5f32-4aa7-a66f-d7d65c064113", "row_index": 30, "timestamp": "2019-03-01T00:22:02Z", "event_type": "DescribeDBSecurityGroups", "event_source": "rds.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "155.251.168.5", "user_agent": "Boto3/1.9.105 Python/2.7.16rc1 Linux/4.19.0-kali3-amd64 Botocore/1.12.105", "aws_region": "sa-east-1"}, "resource_arns": [], "raw_record_size_bytes": 689, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "993678d5-5f32-4aa7-a66f-d7d65c064113", "eventTime": "2019-03-01T00:22:02Z", "eventName": "DescribeDBSecurityGroups", "eventSource": "rds.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "155.251.168.5", "userAgent": "Boto3/1.9.105 Python/2.7.16rc1 Linux/4.19.0-kali3-amd64 Botocore/1.12.105", "awsRegion": "sa-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "7a28849-9985-4de9-a619-5913dd5d1918", "record_id": "flaws_cloudtrail:0000031:7a28849-9985-4de9-a619-5913dd5d1918", "row_index": 31, "timestamp": "2019-03-01T00:22:02Z", "event_type": "DescribeDBSecurityGroups", "event_source": "rds.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "155.251.168.5", "user_agent": "Boto3/1.9.105 Python/2.7.16rc1 Linux/4.19.0-kali3-amd64 Botocore/1.12.105", "aws_region": "us-west-1"}, "resource_arns": [], "raw_record_size_bytes": 688, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "7a28849-9985-4de9-a619-5913dd5d1918", "eventTime": "2019-03-01T00:22:02Z", "eventName": "DescribeDBSecurityGroups", "eventSource": "rds.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "155.251.168.5", "userAgent": "Boto3/1.9.105 Python/2.7.16rc1 Linux/4.19.0-kali3-amd64 Botocore/1.12.105", "awsRegion": "us-west-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "acef9fea-8cde-4fed-a14a-c0b78ff25ea0", "record_id": "flaws_cloudtrail:0000032:acef9fea-8cde-4fed-a14a-c0b78ff25ea0", "row_index": 32, "timestamp": "2019-03-01T00:22:02Z", "event_type": "DescribeDBParameterGroups", "event_source": "rds.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "155.251.168.5", "user_agent": "Boto3/1.9.105 Python/2.7.16rc1 Linux/4.19.0-kali3-amd64 Botocore/1.12.105", "aws_region": "us-west-1"}, "resource_arns": [], "raw_record_size_bytes": 690, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "acef9fea-8cde-4fed-a14a-c0b78ff25ea0", "eventTime": "2019-03-01T00:22:02Z", "eventName": "DescribeDBParameterGroups", "eventSource": "rds.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "155.251.168.5", "userAgent": "Boto3/1.9.105 Python/2.7.16rc1 Linux/4.19.0-kali3-amd64 Botocore/1.12.105", "awsRegion": "us-west-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "0171f4ce-ac4c-4f35-bcbf-b5bf0009702e", "record_id": "flaws_cloudtrail:0000033:0171f4ce-ac4c-4f35-bcbf-b5bf0009702e", "row_index": 33, "timestamp": "2019-03-01T00:22:02Z", "event_type": "DescribeDBInstances", "event_source": "rds.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "155.251.168.5", "user_agent": "Boto3/1.9.105 Python/2.7.16rc1 Linux/4.19.0-kali3-amd64 Botocore/1.12.105", "aws_region": "us-west-1"}, "resource_arns": [], "raw_record_size_bytes": 684, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "0171f4ce-ac4c-4f35-bcbf-b5bf0009702e", "eventTime": "2019-03-01T00:22:02Z", "eventName": "DescribeDBInstances", "eventSource": "rds.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "155.251.168.5", "userAgent": "Boto3/1.9.105 Python/2.7.16rc1 Linux/4.19.0-kali3-amd64 Botocore/1.12.105", "awsRegion": "us-west-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "277b7ebe-5c81-4876-8a30-beab1535a304", "record_id": "flaws_cloudtrail:0000034:277b7ebe-5c81-4876-8a30-beab1535a304", "row_index": 34, "timestamp": "2019-03-01T00:22:02Z", "event_type": "DescribeDBSnapshots", "event_source": "rds.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "155.251.168.5", "user_agent": "Boto3/1.9.105 Python/2.7.16rc1 Linux/4.19.0-kali3-amd64 Botocore/1.12.105", "aws_region": "us-west-1"}, "resource_arns": [], "raw_record_size_bytes": 723, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "277b7ebe-5c81-4876-8a30-beab1535a304", "eventTime": "2019-03-01T00:22:02Z", "eventName": "DescribeDBSnapshots", "eventSource": "rds.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "155.251.168.5", "userAgent": "Boto3/1.9.105 Python/2.7.16rc1 Linux/4.19.0-kali3-amd64 Botocore/1.12.105", "awsRegion": "us-west-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"includePublic": false, "includeShared": false}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "411be721-60d5-4e78-8190-ef15dd50cc06", "record_id": "flaws_cloudtrail:0000035:411be721-60d5-4e78-8190-ef15dd50cc06", "row_index": 35, "timestamp": "2019-03-01T00:22:02Z", "event_type": "DescribeDBSubnetGroups", "event_source": "rds.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "155.251.168.5", "user_agent": "Boto3/1.9.105 Python/2.7.16rc1 Linux/4.19.0-kali3-amd64 Botocore/1.12.105", "aws_region": "us-west-1"}, "resource_arns": [], "raw_record_size_bytes": 685, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "411be721-60d5-4e78-8190-ef15dd50cc06", "eventTime": "2019-03-01T00:22:02Z", "eventName": "DescribeDBSubnetGroups", "eventSource": "rds.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "155.251.168.5", "userAgent": "Boto3/1.9.105 Python/2.7.16rc1 Linux/4.19.0-kali3-amd64 Botocore/1.12.105", "awsRegion": "us-west-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "88476f19-f368-4804-8ba1-6d19d70f97ee", "record_id": "flaws_cloudtrail:0000036:88476f19-f368-4804-8ba1-6d19d70f97ee", "row_index": 36, "timestamp": "2019-03-01T00:22:02Z", "event_type": "DescribeDBSnapshots", "event_source": "rds.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "155.251.168.5", "user_agent": "Boto3/1.9.105 Python/2.7.16rc1 Linux/4.19.0-kali3-amd64 Botocore/1.12.105", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 725, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "88476f19-f368-4804-8ba1-6d19d70f97ee", "eventTime": "2019-03-01T00:22:02Z", "eventName": "DescribeDBSnapshots", "eventSource": "rds.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "155.251.168.5", "userAgent": "Boto3/1.9.105 Python/2.7.16rc1 Linux/4.19.0-kali3-amd64 Botocore/1.12.105", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"includePublic": false, "includeShared": false}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "50046-22c0-4700-bf89-36b75f52804f", "record_id": "flaws_cloudtrail:0000037:50046-22c0-4700-bf89-36b75f52804f", "row_index": 37, "timestamp": "2019-03-01T00:22:02Z", "event_type": "DescribeDBParameterGroups", "event_source": "rds.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "155.251.168.5", "user_agent": "Boto3/1.9.105 Python/2.7.16rc1 Linux/4.19.0-kali3-amd64 Botocore/1.12.105", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 687, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "50046-22c0-4700-bf89-36b75f52804f", "eventTime": "2019-03-01T00:22:02Z", "eventName": "DescribeDBParameterGroups", "eventSource": "rds.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "155.251.168.5", "userAgent": "Boto3/1.9.105 Python/2.7.16rc1 Linux/4.19.0-kali3-amd64 Botocore/1.12.105", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "810bb4bd-8a19-4f5f-ba2c-ea69993158a4", "record_id": "flaws_cloudtrail:0000038:810bb4bd-8a19-4f5f-ba2c-ea69993158a4", "row_index": 38, "timestamp": "2019-03-01T00:22:02Z", "event_type": "DescribeDBSubnetGroups", "event_source": "rds.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "155.251.168.5", "user_agent": "Boto3/1.9.105 Python/2.7.16rc1 Linux/4.19.0-kali3-amd64 Botocore/1.12.105", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 687, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "810bb4bd-8a19-4f5f-ba2c-ea69993158a4", "eventTime": "2019-03-01T00:22:02Z", "eventName": "DescribeDBSubnetGroups", "eventSource": "rds.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "155.251.168.5", "userAgent": "Boto3/1.9.105 Python/2.7.16rc1 Linux/4.19.0-kali3-amd64 Botocore/1.12.105", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "6cacbcfe-2f04-4b1e-b11a-f54e3a5c3b6d", "record_id": "flaws_cloudtrail:0000039:6cacbcfe-2f04-4b1e-b11a-f54e3a5c3b6d", "row_index": 39, "timestamp": "2019-03-01T00:22:02Z", "event_type": "DescribeDBSecurityGroups", "event_source": "rds.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "155.251.168.5", "user_agent": "Boto3/1.9.105 Python/2.7.16rc1 Linux/4.19.0-kali3-amd64 Botocore/1.12.105", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 689, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "6cacbcfe-2f04-4b1e-b11a-f54e3a5c3b6d", "eventTime": "2019-03-01T00:22:02Z", "eventName": "DescribeDBSecurityGroups", "eventSource": "rds.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "155.251.168.5", "userAgent": "Boto3/1.9.105 Python/2.7.16rc1 Linux/4.19.0-kali3-amd64 Botocore/1.12.105", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "32cbadbe-3d91-4e58-9311-e220fefd1800", "record_id": "flaws_cloudtrail:0000040:32cbadbe-3d91-4e58-9311-e220fefd1800", "row_index": 40, "timestamp": "2019-03-01T00:22:02Z", "event_type": "DescribeDBInstances", "event_source": "rds.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "155.251.168.5", "user_agent": "Boto3/1.9.105 Python/2.7.16rc1 Linux/4.19.0-kali3-amd64 Botocore/1.12.105", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 684, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "32cbadbe-3d91-4e58-9311-e220fefd1800", "eventTime": "2019-03-01T00:22:02Z", "eventName": "DescribeDBInstances", "eventSource": "rds.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "155.251.168.5", "userAgent": "Boto3/1.9.105 Python/2.7.16rc1 Linux/4.19.0-kali3-amd64 Botocore/1.12.105", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "628215a3e-941b-4777-b2bf-9bd7739d30c3", "record_id": "flaws_cloudtrail:0000041:628215a3e-941b-4777-b2bf-9bd7739d30c3", "row_index": 41, "timestamp": "2019-03-01T00:22:03Z", "event_type": "GetCallerIdentity", "event_source": "sts.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "155.251.168.5", "user_agent": "Boto3/1.9.105 Python/2.7.16rc1 Linux/4.19.0-kali3-amd64 Botocore/1.12.105", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 784, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "628215a3e-941b-4777-b2bf-9bd7739d30c3", "eventTime": "2019-03-01T00:22:03Z", "eventName": "GetCallerIdentity", "eventSource": "sts.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "155.251.168.5", "userAgent": "Boto3/1.9.105 Python/2.7.16rc1 Linux/4.19.0-kali3-amd64 Botocore/1.12.105", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "responseElements": {"userId": "AIDADO2GQD0K8TEF7KW1V", "account": "811596193553", "arn": "arn:aws:iam::811596193553:user/Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "628215a3e-941b-4777-b2bf-9bd7739d30c3", "record_id": "flaws_cloudtrail:0000042:628215a3e-941b-4777-b2bf-9bd7739d30c3", "row_index": 42, "timestamp": "2019-03-01T00:22:03Z", "event_type": "GetCallerIdentity", "event_source": "sts.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "155.251.168.5", "user_agent": "Boto3/1.9.105 Python/2.7.16rc1 Linux/4.19.0-kali3-amd64 Botocore/1.12.105", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 784, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "628215a3e-941b-4777-b2bf-9bd7739d30c3", "eventTime": "2019-03-01T00:22:03Z", "eventName": "GetCallerIdentity", "eventSource": "sts.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "155.251.168.5", "userAgent": "Boto3/1.9.105 Python/2.7.16rc1 Linux/4.19.0-kali3-amd64 Botocore/1.12.105", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "responseElements": {"userId": "AIDADO2GQD0K8TEF7KW1V", "account": "811596193553", "arn": "arn:aws:iam::811596193553:user/Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "a6a5750f-6318-4d9c-a874-d50352f2964", "record_id": "flaws_cloudtrail:0000043:a6a5750f-6318-4d9c-a874-d50352f2964", "row_index": 43, "timestamp": "2019-03-01T00:22:05Z", "event_type": "ListFunctions202224", "event_source": "lambda.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "155.251.168.5", "user_agent": "Boto3/1.9.105 Python/2.7.16rc1 Linux/4.19.0-kali3-amd64 Botocore/1.12.105", "aws_region": "ca-central-1"}, "resource_arns": [], "raw_record_size_bytes": 689, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "a6a5750f-6318-4d9c-a874-d50352f2964", "eventTime": "2019-03-01T00:22:05Z", "eventName": "ListFunctions202224", "eventSource": "lambda.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "155.251.168.5", "userAgent": "Boto3/1.9.105 Python/2.7.16rc1 Linux/4.19.0-kali3-amd64 Botocore/1.12.105", "awsRegion": "ca-central-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "a6a5750f-6318-4d9c-a874-d50352f2964", "record_id": "flaws_cloudtrail:0000044:a6a5750f-6318-4d9c-a874-d50352f2964", "row_index": 44, "timestamp": "2019-03-01T00:22:05Z", "event_type": "ListFunctions202224", "event_source": "lambda.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "155.251.168.5", "user_agent": "Boto3/1.9.105 Python/2.7.16rc1 Linux/4.19.0-kali3-amd64 Botocore/1.12.105", "aws_region": "ca-central-1"}, "resource_arns": [], "raw_record_size_bytes": 689, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "a6a5750f-6318-4d9c-a874-d50352f2964", "eventTime": "2019-03-01T00:22:05Z", "eventName": "ListFunctions202224", "eventSource": "lambda.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "155.251.168.5", "userAgent": "Boto3/1.9.105 Python/2.7.16rc1 Linux/4.19.0-kali3-amd64 Botocore/1.12.105", "awsRegion": "ca-central-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "9c398149-02fe-4ad4-a1c0-0b6a92f9521f", "record_id": "flaws_cloudtrail:0000045:9c398149-02fe-4ad4-a1c0-0b6a92f9521f", "row_index": 45, "timestamp": "2019-03-01T00:22:06Z", "event_type": "ListFunctions202224", "event_source": "lambda.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "155.251.168.5", "user_agent": "Boto3/1.9.105 Python/2.7.16rc1 Linux/4.19.0-kali3-amd64 Botocore/1.12.105", "aws_region": "ap-northeast-1"}, "resource_arns": [], "raw_record_size_bytes": 692, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "9c398149-02fe-4ad4-a1c0-0b6a92f9521f", "eventTime": "2019-03-01T00:22:06Z", "eventName": "ListFunctions202224", "eventSource": "lambda.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "155.251.168.5", "userAgent": "Boto3/1.9.105 Python/2.7.16rc1 Linux/4.19.0-kali3-amd64 Botocore/1.12.105", "awsRegion": "ap-northeast-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "2d2394c3-4ac2-474b-9785-d132079c83", "record_id": "flaws_cloudtrail:0000046:2d2394c3-4ac2-474b-9785-d132079c83", "row_index": 46, "timestamp": "2019-03-01T00:22:06Z", "event_type": "ListFunctions202224", "event_source": "lambda.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "155.251.168.5", "user_agent": "Boto3/1.9.105 Python/2.7.16rc1 Linux/4.19.0-kali3-amd64 Botocore/1.12.105", "aws_region": "ap-northeast-2"}, "resource_arns": [], "raw_record_size_bytes": 690, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "2d2394c3-4ac2-474b-9785-d132079c83", "eventTime": "2019-03-01T00:22:06Z", "eventName": "ListFunctions202224", "eventSource": "lambda.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "155.251.168.5", "userAgent": "Boto3/1.9.105 Python/2.7.16rc1 Linux/4.19.0-kali3-amd64 Botocore/1.12.105", "awsRegion": "ap-northeast-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "37e11f09-4285-4584-b744-80e9d4e90628", "record_id": "flaws_cloudtrail:0000047:37e11f09-4285-4584-b744-80e9d4e90628", "row_index": 47, "timestamp": "2019-03-01T00:22:06Z", "event_type": "ListFunctions202224", "event_source": "lambda.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "155.251.168.5", "user_agent": "Boto3/1.9.105 Python/2.7.16rc1 Linux/4.19.0-kali3-amd64 Botocore/1.12.105", "aws_region": "ap-south-1"}, "resource_arns": [], "raw_record_size_bytes": 688, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "37e11f09-4285-4584-b744-80e9d4e90628", "eventTime": "2019-03-01T00:22:06Z", "eventName": "ListFunctions202224", "eventSource": "lambda.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "155.251.168.5", "userAgent": "Boto3/1.9.105 Python/2.7.16rc1 Linux/4.19.0-kali3-amd64 Botocore/1.12.105", "awsRegion": "ap-south-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "cf33c5cf-93ad-4698-9945-f74357c6a610", "record_id": "flaws_cloudtrail:0000048:cf33c5cf-93ad-4698-9945-f74357c6a610", "row_index": 48, "timestamp": "2019-03-01T00:22:06Z", "event_type": "ListFunctions202224", "event_source": "lambda.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "155.251.168.5", "user_agent": "Boto3/1.9.105 Python/2.7.16rc1 Linux/4.19.0-kali3-amd64 Botocore/1.12.105", "aws_region": "ap-southeast-1"}, "resource_arns": [], "raw_record_size_bytes": 692, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "cf33c5cf-93ad-4698-9945-f74357c6a610", "eventTime": "2019-03-01T00:22:06Z", "eventName": "ListFunctions202224", "eventSource": "lambda.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "155.251.168.5", "userAgent": "Boto3/1.9.105 Python/2.7.16rc1 Linux/4.19.0-kali3-amd64 Botocore/1.12.105", "awsRegion": "ap-southeast-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "3e10a6ca-1ae4-44d8-89bd-e7972ee79bed", "record_id": "flaws_cloudtrail:0000049:3e10a6ca-1ae4-44d8-89bd-e7972ee79bed", "row_index": 49, "timestamp": "2019-03-01T00:22:06Z", "event_type": "ListFunctions202224", "event_source": "lambda.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "155.251.168.5", "user_agent": "Boto3/1.9.105 Python/2.7.16rc1 Linux/4.19.0-kali3-amd64 Botocore/1.12.105", "aws_region": "eu-central-1"}, "resource_arns": [], "raw_record_size_bytes": 690, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "3e10a6ca-1ae4-44d8-89bd-e7972ee79bed", "eventTime": "2019-03-01T00:22:06Z", "eventName": "ListFunctions202224", "eventSource": "lambda.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "155.251.168.5", "userAgent": "Boto3/1.9.105 Python/2.7.16rc1 Linux/4.19.0-kali3-amd64 Botocore/1.12.105", "awsRegion": "eu-central-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "4ec717c3-f154-47b0-bede-ca400e9a49d7", "record_id": "flaws_cloudtrail:0000050:4ec717c3-f154-47b0-bede-ca400e9a49d7", "row_index": 50, "timestamp": "2019-03-01T00:22:06Z", "event_type": "ListFunctions202224", "event_source": "lambda.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "155.251.168.5", "user_agent": "Boto3/1.9.105 Python/2.7.16rc1 Linux/4.19.0-kali3-amd64 Botocore/1.12.105", "aws_region": "eu-north-1"}, "resource_arns": [], "raw_record_size_bytes": 688, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "4ec717c3-f154-47b0-bede-ca400e9a49d7", "eventTime": "2019-03-01T00:22:06Z", "eventName": "ListFunctions202224", "eventSource": "lambda.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "155.251.168.5", "userAgent": "Boto3/1.9.105 Python/2.7.16rc1 Linux/4.19.0-kali3-amd64 Botocore/1.12.105", "awsRegion": "eu-north-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "4cdc490f-760a-4df7-829c-55a99b330108", "record_id": "flaws_cloudtrail:0000051:4cdc490f-760a-4df7-829c-55a99b330108", "row_index": 51, "timestamp": "2019-03-01T00:22:06Z", "event_type": "ListFunctions202224", "event_source": "lambda.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "155.251.168.5", "user_agent": "Boto3/1.9.105 Python/2.7.16rc1 Linux/4.19.0-kali3-amd64 Botocore/1.12.105", "aws_region": "eu-west-1"}, "resource_arns": [], "raw_record_size_bytes": 686, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "4cdc490f-760a-4df7-829c-55a99b330108", "eventTime": "2019-03-01T00:22:06Z", "eventName": "ListFunctions202224", "eventSource": "lambda.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "155.251.168.5", "userAgent": "Boto3/1.9.105 Python/2.7.16rc1 Linux/4.19.0-kali3-amd64 Botocore/1.12.105", "awsRegion": "eu-west-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "7a779933-a6bc-4231-8351-d582db55343", "record_id": "flaws_cloudtrail:0000052:7a779933-a6bc-4231-8351-d582db55343", "row_index": 52, "timestamp": "2019-03-01T00:22:06Z", "event_type": "ListFunctions202224", "event_source": "lambda.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "155.251.168.5", "user_agent": "Boto3/1.9.105 Python/2.7.16rc1 Linux/4.19.0-kali3-amd64 Botocore/1.12.105", "aws_region": "eu-west-2"}, "resource_arns": [], "raw_record_size_bytes": 686, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "7a779933-a6bc-4231-8351-d582db55343", "eventTime": "2019-03-01T00:22:06Z", "eventName": "ListFunctions202224", "eventSource": "lambda.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "155.251.168.5", "userAgent": "Boto3/1.9.105 Python/2.7.16rc1 Linux/4.19.0-kali3-amd64 Botocore/1.12.105", "awsRegion": "eu-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "9efa6e4d-c068-4783-860d-249c7d326d94", "record_id": "flaws_cloudtrail:0000053:9efa6e4d-c068-4783-860d-249c7d326d94", "row_index": 53, "timestamp": "2019-03-01T00:22:06Z", "event_type": "ListFunctions202224", "event_source": "lambda.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "155.251.168.5", "user_agent": "Boto3/1.9.105 Python/2.7.16rc1 Linux/4.19.0-kali3-amd64 Botocore/1.12.105", "aws_region": "eu-west-3"}, "resource_arns": [], "raw_record_size_bytes": 685, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "9efa6e4d-c068-4783-860d-249c7d326d94", "eventTime": "2019-03-01T00:22:06Z", "eventName": "ListFunctions202224", "eventSource": "lambda.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "155.251.168.5", "userAgent": "Boto3/1.9.105 Python/2.7.16rc1 Linux/4.19.0-kali3-amd64 Botocore/1.12.105", "awsRegion": "eu-west-3", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "9c398149-02fe-4ad4-a1c0-0b6a92f9521f", "record_id": "flaws_cloudtrail:0000054:9c398149-02fe-4ad4-a1c0-0b6a92f9521f", "row_index": 54, "timestamp": "2019-03-01T00:22:06Z", "event_type": "ListFunctions202224", "event_source": "lambda.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "155.251.168.5", "user_agent": "Boto3/1.9.105 Python/2.7.16rc1 Linux/4.19.0-kali3-amd64 Botocore/1.12.105", "aws_region": "ap-northeast-1"}, "resource_arns": [], "raw_record_size_bytes": 692, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "9c398149-02fe-4ad4-a1c0-0b6a92f9521f", "eventTime": "2019-03-01T00:22:06Z", "eventName": "ListFunctions202224", "eventSource": "lambda.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "155.251.168.5", "userAgent": "Boto3/1.9.105 Python/2.7.16rc1 Linux/4.19.0-kali3-amd64 Botocore/1.12.105", "awsRegion": "ap-northeast-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "2d2394c3-4ac2-474b-9785-d132079c83", "record_id": "flaws_cloudtrail:0000055:2d2394c3-4ac2-474b-9785-d132079c83", "row_index": 55, "timestamp": "2019-03-01T00:22:06Z", "event_type": "ListFunctions202224", "event_source": "lambda.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "155.251.168.5", "user_agent": "Boto3/1.9.105 Python/2.7.16rc1 Linux/4.19.0-kali3-amd64 Botocore/1.12.105", "aws_region": "ap-northeast-2"}, "resource_arns": [], "raw_record_size_bytes": 690, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "2d2394c3-4ac2-474b-9785-d132079c83", "eventTime": "2019-03-01T00:22:06Z", "eventName": "ListFunctions202224", "eventSource": "lambda.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "155.251.168.5", "userAgent": "Boto3/1.9.105 Python/2.7.16rc1 Linux/4.19.0-kali3-amd64 Botocore/1.12.105", "awsRegion": "ap-northeast-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "37e11f09-4285-4584-b744-80e9d4e90628", "record_id": "flaws_cloudtrail:0000056:37e11f09-4285-4584-b744-80e9d4e90628", "row_index": 56, "timestamp": "2019-03-01T00:22:06Z", "event_type": "ListFunctions202224", "event_source": "lambda.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "155.251.168.5", "user_agent": "Boto3/1.9.105 Python/2.7.16rc1 Linux/4.19.0-kali3-amd64 Botocore/1.12.105", "aws_region": "ap-south-1"}, "resource_arns": [], "raw_record_size_bytes": 688, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "37e11f09-4285-4584-b744-80e9d4e90628", "eventTime": "2019-03-01T00:22:06Z", "eventName": "ListFunctions202224", "eventSource": "lambda.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "155.251.168.5", "userAgent": "Boto3/1.9.105 Python/2.7.16rc1 Linux/4.19.0-kali3-amd64 Botocore/1.12.105", "awsRegion": "ap-south-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "cf33c5cf-93ad-4698-9945-f74357c6a610", "record_id": "flaws_cloudtrail:0000057:cf33c5cf-93ad-4698-9945-f74357c6a610", "row_index": 57, "timestamp": "2019-03-01T00:22:06Z", "event_type": "ListFunctions202224", "event_source": "lambda.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "155.251.168.5", "user_agent": "Boto3/1.9.105 Python/2.7.16rc1 Linux/4.19.0-kali3-amd64 Botocore/1.12.105", "aws_region": "ap-southeast-1"}, "resource_arns": [], "raw_record_size_bytes": 692, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "cf33c5cf-93ad-4698-9945-f74357c6a610", "eventTime": "2019-03-01T00:22:06Z", "eventName": "ListFunctions202224", "eventSource": "lambda.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "155.251.168.5", "userAgent": "Boto3/1.9.105 Python/2.7.16rc1 Linux/4.19.0-kali3-amd64 Botocore/1.12.105", "awsRegion": "ap-southeast-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "3e10a6ca-1ae4-44d8-89bd-e7972ee79bed", "record_id": "flaws_cloudtrail:0000058:3e10a6ca-1ae4-44d8-89bd-e7972ee79bed", "row_index": 58, "timestamp": "2019-03-01T00:22:06Z", "event_type": "ListFunctions202224", "event_source": "lambda.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "155.251.168.5", "user_agent": "Boto3/1.9.105 Python/2.7.16rc1 Linux/4.19.0-kali3-amd64 Botocore/1.12.105", "aws_region": "eu-central-1"}, "resource_arns": [], "raw_record_size_bytes": 690, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "3e10a6ca-1ae4-44d8-89bd-e7972ee79bed", "eventTime": "2019-03-01T00:22:06Z", "eventName": "ListFunctions202224", "eventSource": "lambda.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "155.251.168.5", "userAgent": "Boto3/1.9.105 Python/2.7.16rc1 Linux/4.19.0-kali3-amd64 Botocore/1.12.105", "awsRegion": "eu-central-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "4ec717c3-f154-47b0-bede-ca400e9a49d7", "record_id": "flaws_cloudtrail:0000059:4ec717c3-f154-47b0-bede-ca400e9a49d7", "row_index": 59, "timestamp": "2019-03-01T00:22:06Z", "event_type": "ListFunctions202224", "event_source": "lambda.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "155.251.168.5", "user_agent": "Boto3/1.9.105 Python/2.7.16rc1 Linux/4.19.0-kali3-amd64 Botocore/1.12.105", "aws_region": "eu-north-1"}, "resource_arns": [], "raw_record_size_bytes": 688, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "4ec717c3-f154-47b0-bede-ca400e9a49d7", "eventTime": "2019-03-01T00:22:06Z", "eventName": "ListFunctions202224", "eventSource": "lambda.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "155.251.168.5", "userAgent": "Boto3/1.9.105 Python/2.7.16rc1 Linux/4.19.0-kali3-amd64 Botocore/1.12.105", "awsRegion": "eu-north-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "4cdc490f-760a-4df7-829c-55a99b330108", "record_id": "flaws_cloudtrail:0000060:4cdc490f-760a-4df7-829c-55a99b330108", "row_index": 60, "timestamp": "2019-03-01T00:22:06Z", "event_type": "ListFunctions202224", "event_source": "lambda.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "155.251.168.5", "user_agent": "Boto3/1.9.105 Python/2.7.16rc1 Linux/4.19.0-kali3-amd64 Botocore/1.12.105", "aws_region": "eu-west-1"}, "resource_arns": [], "raw_record_size_bytes": 686, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "4cdc490f-760a-4df7-829c-55a99b330108", "eventTime": "2019-03-01T00:22:06Z", "eventName": "ListFunctions202224", "eventSource": "lambda.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "155.251.168.5", "userAgent": "Boto3/1.9.105 Python/2.7.16rc1 Linux/4.19.0-kali3-amd64 Botocore/1.12.105", "awsRegion": "eu-west-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "7a779933-a6bc-4231-8351-d582db55343", "record_id": "flaws_cloudtrail:0000061:7a779933-a6bc-4231-8351-d582db55343", "row_index": 61, "timestamp": "2019-03-01T00:22:06Z", "event_type": "ListFunctions202224", "event_source": "lambda.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "155.251.168.5", "user_agent": "Boto3/1.9.105 Python/2.7.16rc1 Linux/4.19.0-kali3-amd64 Botocore/1.12.105", "aws_region": "eu-west-2"}, "resource_arns": [], "raw_record_size_bytes": 686, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "7a779933-a6bc-4231-8351-d582db55343", "eventTime": "2019-03-01T00:22:06Z", "eventName": "ListFunctions202224", "eventSource": "lambda.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "155.251.168.5", "userAgent": "Boto3/1.9.105 Python/2.7.16rc1 Linux/4.19.0-kali3-amd64 Botocore/1.12.105", "awsRegion": "eu-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "9efa6e4d-c068-4783-860d-249c7d326d94", "record_id": "flaws_cloudtrail:0000062:9efa6e4d-c068-4783-860d-249c7d326d94", "row_index": 62, "timestamp": "2019-03-01T00:22:06Z", "event_type": "ListFunctions202224", "event_source": "lambda.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "155.251.168.5", "user_agent": "Boto3/1.9.105 Python/2.7.16rc1 Linux/4.19.0-kali3-amd64 Botocore/1.12.105", "aws_region": "eu-west-3"}, "resource_arns": [], "raw_record_size_bytes": 685, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "9efa6e4d-c068-4783-860d-249c7d326d94", "eventTime": "2019-03-01T00:22:06Z", "eventName": "ListFunctions202224", "eventSource": "lambda.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "155.251.168.5", "userAgent": "Boto3/1.9.105 Python/2.7.16rc1 Linux/4.19.0-kali3-amd64 Botocore/1.12.105", "awsRegion": "eu-west-3", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "99f4de49-7e2d-4c04-b4bd-6c1e668a0a93", "record_id": "flaws_cloudtrail:0000063:99f4de49-7e2d-4c04-b4bd-6c1e668a0a93", "row_index": 63, "timestamp": "2019-03-01T00:22:07Z", "event_type": "ListFunctions202224", "event_source": "lambda.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "155.251.168.5", "user_agent": "Boto3/1.9.105 Python/2.7.16rc1 Linux/4.19.0-kali3-amd64 Botocore/1.12.105", "aws_region": "ap-southeast-2"}, "resource_arns": [], "raw_record_size_bytes": 693, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "99f4de49-7e2d-4c04-b4bd-6c1e668a0a93", "eventTime": "2019-03-01T00:22:07Z", "eventName": "ListFunctions202224", "eventSource": "lambda.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "155.251.168.5", "userAgent": "Boto3/1.9.105 Python/2.7.16rc1 Linux/4.19.0-kali3-amd64 Botocore/1.12.105", "awsRegion": "ap-southeast-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "80984a-9b7b-4d0c-8d51-8cf261438", "record_id": "flaws_cloudtrail:0000064:80984a-9b7b-4d0c-8d51-8cf261438", "row_index": 64, "timestamp": "2019-03-01T00:22:07Z", "event_type": "ListFunctions202224", "event_source": "lambda.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "155.251.168.5", "user_agent": "Boto3/1.9.105 Python/2.7.16rc1 Linux/4.19.0-kali3-amd64 Botocore/1.12.105", "aws_region": "sa-east-1"}, "resource_arns": [], "raw_record_size_bytes": 682, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "80984a-9b7b-4d0c-8d51-8cf261438", "eventTime": "2019-03-01T00:22:07Z", "eventName": "ListFunctions202224", "eventSource": "lambda.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "155.251.168.5", "userAgent": "Boto3/1.9.105 Python/2.7.16rc1 Linux/4.19.0-kali3-amd64 Botocore/1.12.105", "awsRegion": "sa-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "d4b50da2-0983-4890-a8bf-1d5b4754361c", "record_id": "flaws_cloudtrail:0000065:d4b50da2-0983-4890-a8bf-1d5b4754361c", "row_index": 65, "timestamp": "2019-03-01T00:22:07Z", "event_type": "ListFunctions202224", "event_source": "lambda.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "155.251.168.5", "user_agent": "Boto3/1.9.105 Python/2.7.16rc1 Linux/4.19.0-kali3-amd64 Botocore/1.12.105", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 687, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "d4b50da2-0983-4890-a8bf-1d5b4754361c", "eventTime": "2019-03-01T00:22:07Z", "eventName": "ListFunctions202224", "eventSource": "lambda.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "155.251.168.5", "userAgent": "Boto3/1.9.105 Python/2.7.16rc1 Linux/4.19.0-kali3-amd64 Botocore/1.12.105", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "4f25ed34-f5f9-492c-a097-ffd61632b86", "record_id": "flaws_cloudtrail:0000066:4f25ed34-f5f9-492c-a097-ffd61632b86", "row_index": 66, "timestamp": "2019-03-01T00:22:07Z", "event_type": "ListFunctions202224", "event_source": "lambda.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "155.251.168.5", "user_agent": "Boto3/1.9.105 Python/2.7.16rc1 Linux/4.19.0-kali3-amd64 Botocore/1.12.105", "aws_region": "us-east-2"}, "resource_arns": [], "raw_record_size_bytes": 686, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "4f25ed34-f5f9-492c-a097-ffd61632b86", "eventTime": "2019-03-01T00:22:07Z", "eventName": "ListFunctions202224", "eventSource": "lambda.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "155.251.168.5", "userAgent": "Boto3/1.9.105 Python/2.7.16rc1 Linux/4.19.0-kali3-amd64 Botocore/1.12.105", "awsRegion": "us-east-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "99f4de49-7e2d-4c04-b4bd-6c1e668a0a93", "record_id": "flaws_cloudtrail:0000067:99f4de49-7e2d-4c04-b4bd-6c1e668a0a93", "row_index": 67, "timestamp": "2019-03-01T00:22:07Z", "event_type": "ListFunctions202224", "event_source": "lambda.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "155.251.168.5", "user_agent": "Boto3/1.9.105 Python/2.7.16rc1 Linux/4.19.0-kali3-amd64 Botocore/1.12.105", "aws_region": "ap-southeast-2"}, "resource_arns": [], "raw_record_size_bytes": 693, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "99f4de49-7e2d-4c04-b4bd-6c1e668a0a93", "eventTime": "2019-03-01T00:22:07Z", "eventName": "ListFunctions202224", "eventSource": "lambda.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "155.251.168.5", "userAgent": "Boto3/1.9.105 Python/2.7.16rc1 Linux/4.19.0-kali3-amd64 Botocore/1.12.105", "awsRegion": "ap-southeast-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "80984a-9b7b-4d0c-8d51-8cf261438", "record_id": "flaws_cloudtrail:0000068:80984a-9b7b-4d0c-8d51-8cf261438", "row_index": 68, "timestamp": "2019-03-01T00:22:07Z", "event_type": "ListFunctions202224", "event_source": "lambda.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "155.251.168.5", "user_agent": "Boto3/1.9.105 Python/2.7.16rc1 Linux/4.19.0-kali3-amd64 Botocore/1.12.105", "aws_region": "sa-east-1"}, "resource_arns": [], "raw_record_size_bytes": 682, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "80984a-9b7b-4d0c-8d51-8cf261438", "eventTime": "2019-03-01T00:22:07Z", "eventName": "ListFunctions202224", "eventSource": "lambda.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "155.251.168.5", "userAgent": "Boto3/1.9.105 Python/2.7.16rc1 Linux/4.19.0-kali3-amd64 Botocore/1.12.105", "awsRegion": "sa-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "d4b50da2-0983-4890-a8bf-1d5b4754361c", "record_id": "flaws_cloudtrail:0000069:d4b50da2-0983-4890-a8bf-1d5b4754361c", "row_index": 69, "timestamp": "2019-03-01T00:22:07Z", "event_type": "ListFunctions202224", "event_source": "lambda.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "155.251.168.5", "user_agent": "Boto3/1.9.105 Python/2.7.16rc1 Linux/4.19.0-kali3-amd64 Botocore/1.12.105", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 687, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "d4b50da2-0983-4890-a8bf-1d5b4754361c", "eventTime": "2019-03-01T00:22:07Z", "eventName": "ListFunctions202224", "eventSource": "lambda.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "155.251.168.5", "userAgent": "Boto3/1.9.105 Python/2.7.16rc1 Linux/4.19.0-kali3-amd64 Botocore/1.12.105", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "4f25ed34-f5f9-492c-a097-ffd61632b86", "record_id": "flaws_cloudtrail:0000070:4f25ed34-f5f9-492c-a097-ffd61632b86", "row_index": 70, "timestamp": "2019-03-01T00:22:07Z", "event_type": "ListFunctions202224", "event_source": "lambda.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "155.251.168.5", "user_agent": "Boto3/1.9.105 Python/2.7.16rc1 Linux/4.19.0-kali3-amd64 Botocore/1.12.105", "aws_region": "us-east-2"}, "resource_arns": [], "raw_record_size_bytes": 686, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "4f25ed34-f5f9-492c-a097-ffd61632b86", "eventTime": "2019-03-01T00:22:07Z", "eventName": "ListFunctions202224", "eventSource": "lambda.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "155.251.168.5", "userAgent": "Boto3/1.9.105 Python/2.7.16rc1 Linux/4.19.0-kali3-amd64 Botocore/1.12.105", "awsRegion": "us-east-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "b2a12bc4-a2e2-4391-8b10-98b88bcc074c", "record_id": "flaws_cloudtrail:0000071:b2a12bc4-a2e2-4391-8b10-98b88bcc074c", "row_index": 71, "timestamp": "2019-03-01T00:22:08Z", "event_type": "GetCallerIdentity", "event_source": "sts.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "155.251.168.5", "user_agent": "Boto3/1.9.105 Python/2.7.16rc1 Linux/4.19.0-kali3-amd64 Botocore/1.12.105", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 783, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "b2a12bc4-a2e2-4391-8b10-98b88bcc074c", "eventTime": "2019-03-01T00:22:08Z", "eventName": "GetCallerIdentity", "eventSource": "sts.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "155.251.168.5", "userAgent": "Boto3/1.9.105 Python/2.7.16rc1 Linux/4.19.0-kali3-amd64 Botocore/1.12.105", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "responseElements": {"userId": "AIDADO2GQD0K8TEF7KW1V", "account": "811596193553", "arn": "arn:aws:iam::811596193553:user/Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "4f9ff5df-00f9-4347-9902-d0bee805d9ee", "record_id": "flaws_cloudtrail:0000072:4f9ff5df-00f9-4347-9902-d0bee805d9ee", "row_index": 72, "timestamp": "2019-03-01T00:22:08Z", "event_type": "ListFunctions202224", "event_source": "lambda.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "155.251.168.5", "user_agent": "Boto3/1.9.105 Python/2.7.16rc1 Linux/4.19.0-kali3-amd64 Botocore/1.12.105", "aws_region": "us-west-1"}, "resource_arns": [], "raw_record_size_bytes": 687, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "4f9ff5df-00f9-4347-9902-d0bee805d9ee", "eventTime": "2019-03-01T00:22:08Z", "eventName": "ListFunctions202224", "eventSource": "lambda.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "155.251.168.5", "userAgent": "Boto3/1.9.105 Python/2.7.16rc1 Linux/4.19.0-kali3-amd64 Botocore/1.12.105", "awsRegion": "us-west-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "2ce3dcbf-c052-4dc9-873b-6bd93a2af286", "record_id": "flaws_cloudtrail:0000073:2ce3dcbf-c052-4dc9-873b-6bd93a2af286", "row_index": 73, "timestamp": "2019-03-01T00:22:08Z", "event_type": "ListFunctions202224", "event_source": "lambda.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "155.251.168.5", "user_agent": "Boto3/1.9.105 Python/2.7.16rc1 Linux/4.19.0-kali3-amd64 Botocore/1.12.105", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 687, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "2ce3dcbf-c052-4dc9-873b-6bd93a2af286", "eventTime": "2019-03-01T00:22:08Z", "eventName": "ListFunctions202224", "eventSource": "lambda.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "155.251.168.5", "userAgent": "Boto3/1.9.105 Python/2.7.16rc1 Linux/4.19.0-kali3-amd64 Botocore/1.12.105", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "b2a12bc4-a2e2-4391-8b10-98b88bcc074c", "record_id": "flaws_cloudtrail:0000074:b2a12bc4-a2e2-4391-8b10-98b88bcc074c", "row_index": 74, "timestamp": "2019-03-01T00:22:08Z", "event_type": "GetCallerIdentity", "event_source": "sts.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "155.251.168.5", "user_agent": "Boto3/1.9.105 Python/2.7.16rc1 Linux/4.19.0-kali3-amd64 Botocore/1.12.105", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 783, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "b2a12bc4-a2e2-4391-8b10-98b88bcc074c", "eventTime": "2019-03-01T00:22:08Z", "eventName": "GetCallerIdentity", "eventSource": "sts.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "155.251.168.5", "userAgent": "Boto3/1.9.105 Python/2.7.16rc1 Linux/4.19.0-kali3-amd64 Botocore/1.12.105", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "responseElements": {"userId": "AIDADO2GQD0K8TEF7KW1V", "account": "811596193553", "arn": "arn:aws:iam::811596193553:user/Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "4f9ff5df-00f9-4347-9902-d0bee805d9ee", "record_id": "flaws_cloudtrail:0000075:4f9ff5df-00f9-4347-9902-d0bee805d9ee", "row_index": 75, "timestamp": "2019-03-01T00:22:08Z", "event_type": "ListFunctions202224", "event_source": "lambda.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "155.251.168.5", "user_agent": "Boto3/1.9.105 Python/2.7.16rc1 Linux/4.19.0-kali3-amd64 Botocore/1.12.105", "aws_region": "us-west-1"}, "resource_arns": [], "raw_record_size_bytes": 687, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "4f9ff5df-00f9-4347-9902-d0bee805d9ee", "eventTime": "2019-03-01T00:22:08Z", "eventName": "ListFunctions202224", "eventSource": "lambda.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "155.251.168.5", "userAgent": "Boto3/1.9.105 Python/2.7.16rc1 Linux/4.19.0-kali3-amd64 Botocore/1.12.105", "awsRegion": "us-west-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "2ce3dcbf-c052-4dc9-873b-6bd93a2af286", "record_id": "flaws_cloudtrail:0000076:2ce3dcbf-c052-4dc9-873b-6bd93a2af286", "row_index": 76, "timestamp": "2019-03-01T00:22:08Z", "event_type": "ListFunctions202224", "event_source": "lambda.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "155.251.168.5", "user_agent": "Boto3/1.9.105 Python/2.7.16rc1 Linux/4.19.0-kali3-amd64 Botocore/1.12.105", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 687, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "2ce3dcbf-c052-4dc9-873b-6bd93a2af286", "eventTime": "2019-03-01T00:22:08Z", "eventName": "ListFunctions202224", "eventSource": "lambda.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "155.251.168.5", "userAgent": "Boto3/1.9.105 Python/2.7.16rc1 Linux/4.19.0-kali3-amd64 Botocore/1.12.105", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "1c9834aa-7fc4-4942-91cb-c33d3008f444", "record_id": "flaws_cloudtrail:0000077:1c9834aa-7fc4-4942-91cb-c33d3008f444", "row_index": 77, "timestamp": "2019-03-01T00:22:10Z", "event_type": "GetBucketLocation", "event_source": "s3.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "155.251.168.5", "user_agent": "[Boto3/1.9.105 Python/2.7.16rc1 Linux/4.19.0-kali3-amd64 Botocore/1.12.105]", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 902, "raw_record_depth": 3, "raw_record_top_level_keys": ["additionalEventData", "awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "1c9834aa-7fc4-4942-91cb-c33d3008f444", "eventTime": "2019-03-01T00:22:10Z", "eventName": "GetBucketLocation", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "155.251.168.5", "userAgent": "[Boto3/1.9.105 Python/2.7.16rc1 Linux/4.19.0-kali3-amd64 Botocore/1.12.105]", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"host": ["s3.amazonaws.com"], "bucketName": "level3-2644b9e749c3d14e400f847199800c14.flaws.cloud", "location": [""]}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "95e6c7ff-7735-4f27-87b8-d933d41f8b55", "record_id": "flaws_cloudtrail:0000078:95e6c7ff-7735-4f27-87b8-d933d41f8b55", "row_index": 78, "timestamp": "2019-03-01T00:22:10Z", "event_type": "GetBucketLocation", "event_source": "s3.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "155.251.168.5", "user_agent": "[Boto3/1.9.105 Python/2.7.16rc1 Linux/4.19.0-kali3-amd64 Botocore/1.12.105]", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 903, "raw_record_depth": 3, "raw_record_top_level_keys": ["additionalEventData", "awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "95e6c7ff-7735-4f27-87b8-d933d41f8b55", "eventTime": "2019-03-01T00:22:10Z", "eventName": "GetBucketLocation", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "155.251.168.5", "userAgent": "[Boto3/1.9.105 Python/2.7.16rc1 Linux/4.19.0-kali3-amd64 Botocore/1.12.105]", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"host": ["s3.amazonaws.com"], "bucketName": "level5-8dbc21dbbd6129208d054061ef063f04.flaws.cloud", "location": [""]}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "a54b26fb-30fc-48f6-8b8d-eb86164129a5", "record_id": "flaws_cloudtrail:0000079:a54b26fb-30fc-48f6-8b8d-eb86164129a5", "row_index": 79, "timestamp": "2019-03-01T00:22:10Z", "event_type": "GetBucketLocation", "event_source": "s3.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "155.251.168.5", "user_agent": "[Boto3/1.9.105 Python/2.7.16rc1 Linux/4.19.0-kali3-amd64 Botocore/1.12.105]", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 877, "raw_record_depth": 3, "raw_record_top_level_keys": ["additionalEventData", "awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "a54b26fb-30fc-48f6-8b8d-eb86164129a5", "eventTime": "2019-03-01T00:22:10Z", "eventName": "GetBucketLocation", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "155.251.168.5", "userAgent": "[Boto3/1.9.105 Python/2.7.16rc1 Linux/4.19.0-kali3-amd64 Botocore/1.12.105]", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"host": ["s3.amazonaws.com"], "bucketName": "config-bucket-e11723be76de", "location": [""]}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "d91762a-a328-4b15-a96f-beac51dc1f43", "record_id": "flaws_cloudtrail:0000080:d91762a-a328-4b15-a96f-beac51dc1f43", "row_index": 80, "timestamp": "2019-03-01T00:22:10Z", "event_type": "ListBuckets", "event_source": "s3.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "155.251.168.5", "user_agent": "[Boto3/1.9.105 Python/2.7.16rc1 Linux/4.19.0-kali3-amd64 Botocore/1.12.105]", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 812, "raw_record_depth": 3, "raw_record_top_level_keys": ["additionalEventData", "awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "d91762a-a328-4b15-a96f-beac51dc1f43", "eventTime": "2019-03-01T00:22:10Z", "eventName": "ListBuckets", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "155.251.168.5", "userAgent": "[Boto3/1.9.105 Python/2.7.16rc1 Linux/4.19.0-kali3-amd64 Botocore/1.12.105]", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"host": ["s3.amazonaws.com"]}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "4cb15b89-63ec-4aa1-8534-c0c545d8a573", "record_id": "flaws_cloudtrail:0000081:4cb15b89-63ec-4aa1-8534-c0c545d8a573", "row_index": 81, "timestamp": "2019-03-01T00:22:10Z", "event_type": "GetBucketLocation", "event_source": "s3.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "155.251.168.5", "user_agent": "[Boto3/1.9.105 Python/2.7.16rc1 Linux/4.19.0-kali3-amd64 Botocore/1.12.105]", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 899, "raw_record_depth": 3, "raw_record_top_level_keys": ["additionalEventData", "awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "4cb15b89-63ec-4aa1-8534-c0c545d8a573", "eventTime": "2019-03-01T00:22:10Z", "eventName": "GetBucketLocation", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "155.251.168.5", "userAgent": "[Boto3/1.9.105 Python/2.7.16rc1 Linux/4.19.0-kali3-amd64 Botocore/1.12.105]", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"host": ["s3.amazonaws.com"], "bucketName": "b5677c799b465420d8e7b0a6689a0bb0c4afbc9e.flaws.cloud", "location": [""]}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "1759fee0-6574-4b89-a7dd-f8651ec4b939", "record_id": "flaws_cloudtrail:0000082:1759fee0-6574-4b89-a7dd-f8651ec4b939", "row_index": 82, "timestamp": "2019-03-01T00:22:10Z", "event_type": "GetBucketLocation", "event_source": "s3.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "155.251.168.5", "user_agent": "[Boto3/1.9.105 Python/2.7.16rc1 Linux/4.19.0-kali3-amd64 Botocore/1.12.105]", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 862, "raw_record_depth": 3, "raw_record_top_level_keys": ["additionalEventData", "awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "1759fee0-6574-4b89-a7dd-f8651ec4b939", "eventTime": "2019-03-01T00:22:10Z", "eventName": "GetBucketLocation", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "155.251.168.5", "userAgent": "[Boto3/1.9.105 Python/2.7.16rc1 Linux/4.19.0-kali3-amd64 Botocore/1.12.105]", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"host": ["s3.amazonaws.com"], "bucketName": "flaws.cloud", "location": [""]}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "7b79bbe1-606d-4993-aed2-8b83584f69", "record_id": "flaws_cloudtrail:0000083:7b79bbe1-606d-4993-aed2-8b83584f69", "row_index": 83, "timestamp": "2019-03-01T00:22:10Z", "event_type": "GetBucketLocation", "event_source": "s3.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "155.251.168.5", "user_agent": "[Boto3/1.9.105 Python/2.7.16rc1 Linux/4.19.0-kali3-amd64 Botocore/1.12.105]", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 897, "raw_record_depth": 3, "raw_record_top_level_keys": ["additionalEventData", "awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "7b79bbe1-606d-4993-aed2-8b83584f69", "eventTime": "2019-03-01T00:22:10Z", "eventName": "GetBucketLocation", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "155.251.168.5", "userAgent": "[Boto3/1.9.105 Python/2.7.16rc1 Linux/4.19.0-kali3-amd64 Botocore/1.12.105]", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"host": ["s3.amazonaws.com"], "bucketName": "level4-974134b52e7c35aebcc4b45f19113936.flaws.cloud", "location": [""]}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "e613634c-c6ba-4d35-8a45-3c52c5a281be", "record_id": "flaws_cloudtrail:0000084:e613634c-c6ba-4d35-8a45-3c52c5a281be", "row_index": 84, "timestamp": "2019-03-01T00:22:10Z", "event_type": "GetBucketLocation", "event_source": "s3.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "155.251.168.5", "user_agent": "[Boto3/1.9.105 Python/2.7.16rc1 Linux/4.19.0-kali3-amd64 Botocore/1.12.105]", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 901, "raw_record_depth": 3, "raw_record_top_level_keys": ["additionalEventData", "awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "e613634c-c6ba-4d35-8a45-3c52c5a281be", "eventTime": "2019-03-01T00:22:10Z", "eventName": "GetBucketLocation", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "155.251.168.5", "userAgent": "[Boto3/1.9.105 Python/2.7.16rc1 Linux/4.19.0-kali3-amd64 Botocore/1.12.105]", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"host": ["s3.amazonaws.com"], "bucketName": "level6-588e81908c84e62a6dd8202d535469dd.flaws.cloud", "location": [""]}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "9504cb81-40ed-474d-b292-ccdcbf9c02be", "record_id": "flaws_cloudtrail:0000085:9504cb81-40ed-474d-b292-ccdcbf9c02be", "row_index": 85, "timestamp": "2019-03-01T00:22:10Z", "event_type": "GetBucketLocation", "event_source": "s3.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "155.251.168.5", "user_agent": "[Boto3/1.9.105 Python/2.7.16rc1 Linux/4.19.0-kali3-amd64 Botocore/1.12.105]", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 897, "raw_record_depth": 3, "raw_record_top_level_keys": ["additionalEventData", "awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "9504cb81-40ed-474d-b292-ccdcbf9c02be", "eventTime": "2019-03-01T00:22:10Z", "eventName": "GetBucketLocation", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "155.251.168.5", "userAgent": "[Boto3/1.9.105 Python/2.7.16rc1 Linux/4.19.0-kali3-amd64 Botocore/1.12.105]", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"host": ["s3.amazonaws.com"], "bucketName": "theend-c1aad500c62e2a57cf12cebf93b282cf.flaws.cloud", "location": [""]}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "db795ea0-1bf1-419f-b86a-0f377b7adebf", "record_id": "flaws_cloudtrail:0000086:db795ea0-1bf1-419f-b86a-0f377b7adebf", "row_index": 86, "timestamp": "2019-03-01T00:22:10Z", "event_type": "GetBucketLocation", "event_source": "s3.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "155.251.168.5", "user_agent": "[Boto3/1.9.105 Python/2.7.16rc1 Linux/4.19.0-kali3-amd64 Botocore/1.12.105]", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 902, "raw_record_depth": 3, "raw_record_top_level_keys": ["additionalEventData", "awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "db795ea0-1bf1-419f-b86a-0f377b7adebf", "eventTime": "2019-03-01T00:22:10Z", "eventName": "GetBucketLocation", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "155.251.168.5", "userAgent": "[Boto3/1.9.105 Python/2.7.16rc1 Linux/4.19.0-kali3-amd64 Botocore/1.12.105]", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"host": ["s3.amazonaws.com"], "bucketName": "level2-295510a051f3fcd006ae345973478972.flaws.cloud", "location": [""]}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "c0e4c4f4-87d5-4f8a-96d1-5cd333a831d1", "record_id": "flaws_cloudtrail:0000087:c0e4c4f4-87d5-4f8a-96d1-5cd333a831d1", "row_index": 87, "timestamp": "2019-03-01T00:22:10Z", "event_type": "GetBucketLocation", "event_source": "s3.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "155.251.168.5", "user_agent": "[Boto3/1.9.105 Python/2.7.16rc1 Linux/4.19.0-kali3-amd64 Botocore/1.12.105]", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 859, "raw_record_depth": 3, "raw_record_top_level_keys": ["additionalEventData", "awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "c0e4c4f4-87d5-4f8a-96d1-5cd333a831d1", "eventTime": "2019-03-01T00:22:10Z", "eventName": "GetBucketLocation", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "155.251.168.5", "userAgent": "[Boto3/1.9.105 Python/2.7.16rc1 Linux/4.19.0-kali3-amd64 Botocore/1.12.105]", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"host": ["s3.amazonaws.com"], "bucketName": "flaws-logs", "location": [""]}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "b73c7164-fcf4-4be5-9371-95cf30d3ad1d", "record_id": "flaws_cloudtrail:0000088:b73c7164-fcf4-4be5-9371-95cf30d3ad1d", "row_index": 88, "timestamp": "2019-03-01T00:22:10Z", "event_type": "GetBucketLogging", "event_source": "s3.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "155.251.168.5", "user_agent": "[Boto3/1.9.105 Python/2.7.16rc1 Linux/4.19.0-kali3-amd64 Botocore/1.12.105]", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 911, "raw_record_depth": 3, "raw_record_top_level_keys": ["additionalEventData", "awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "b73c7164-fcf4-4be5-9371-95cf30d3ad1d", "eventTime": "2019-03-01T00:22:10Z", "eventName": "GetBucketLogging", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "155.251.168.5", "userAgent": "[Boto3/1.9.105 Python/2.7.16rc1 Linux/4.19.0-kali3-amd64 Botocore/1.12.105]", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"host": ["s3.us-west-2.amazonaws.com"], "logging": [""], "bucketName": "b5677c799b465420d8e7b0a6689a0bb0c4afbc9e.flaws.cloud"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "1c9834aa-7fc4-4942-91cb-c33d3008f444", "record_id": "flaws_cloudtrail:0000089:1c9834aa-7fc4-4942-91cb-c33d3008f444", "row_index": 89, "timestamp": "2019-03-01T00:22:10Z", "event_type": "GetBucketLocation", "event_source": "s3.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "155.251.168.5", "user_agent": "[Boto3/1.9.105 Python/2.7.16rc1 Linux/4.19.0-kali3-amd64 Botocore/1.12.105]", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 902, "raw_record_depth": 3, "raw_record_top_level_keys": ["additionalEventData", "awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "1c9834aa-7fc4-4942-91cb-c33d3008f444", "eventTime": "2019-03-01T00:22:10Z", "eventName": "GetBucketLocation", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "155.251.168.5", "userAgent": "[Boto3/1.9.105 Python/2.7.16rc1 Linux/4.19.0-kali3-amd64 Botocore/1.12.105]", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"host": ["s3.amazonaws.com"], "bucketName": "level3-2644b9e749c3d14e400f847199800c14.flaws.cloud", "location": [""]}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "95e6c7ff-7735-4f27-87b8-d933d41f8b55", "record_id": "flaws_cloudtrail:0000090:95e6c7ff-7735-4f27-87b8-d933d41f8b55", "row_index": 90, "timestamp": "2019-03-01T00:22:10Z", "event_type": "GetBucketLocation", "event_source": "s3.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "155.251.168.5", "user_agent": "[Boto3/1.9.105 Python/2.7.16rc1 Linux/4.19.0-kali3-amd64 Botocore/1.12.105]", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 903, "raw_record_depth": 3, "raw_record_top_level_keys": ["additionalEventData", "awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "95e6c7ff-7735-4f27-87b8-d933d41f8b55", "eventTime": "2019-03-01T00:22:10Z", "eventName": "GetBucketLocation", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "155.251.168.5", "userAgent": "[Boto3/1.9.105 Python/2.7.16rc1 Linux/4.19.0-kali3-amd64 Botocore/1.12.105]", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"host": ["s3.amazonaws.com"], "bucketName": "level5-8dbc21dbbd6129208d054061ef063f04.flaws.cloud", "location": [""]}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "a54b26fb-30fc-48f6-8b8d-eb86164129a5", "record_id": "flaws_cloudtrail:0000091:a54b26fb-30fc-48f6-8b8d-eb86164129a5", "row_index": 91, "timestamp": "2019-03-01T00:22:10Z", "event_type": "GetBucketLocation", "event_source": "s3.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "155.251.168.5", "user_agent": "[Boto3/1.9.105 Python/2.7.16rc1 Linux/4.19.0-kali3-amd64 Botocore/1.12.105]", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 877, "raw_record_depth": 3, "raw_record_top_level_keys": ["additionalEventData", "awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "a54b26fb-30fc-48f6-8b8d-eb86164129a5", "eventTime": "2019-03-01T00:22:10Z", "eventName": "GetBucketLocation", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "155.251.168.5", "userAgent": "[Boto3/1.9.105 Python/2.7.16rc1 Linux/4.19.0-kali3-amd64 Botocore/1.12.105]", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"host": ["s3.amazonaws.com"], "bucketName": "config-bucket-e11723be76de", "location": [""]}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "d91762a-a328-4b15-a96f-beac51dc1f43", "record_id": "flaws_cloudtrail:0000092:d91762a-a328-4b15-a96f-beac51dc1f43", "row_index": 92, "timestamp": "2019-03-01T00:22:10Z", "event_type": "ListBuckets", "event_source": "s3.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "155.251.168.5", "user_agent": "[Boto3/1.9.105 Python/2.7.16rc1 Linux/4.19.0-kali3-amd64 Botocore/1.12.105]", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 812, "raw_record_depth": 3, "raw_record_top_level_keys": ["additionalEventData", "awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "d91762a-a328-4b15-a96f-beac51dc1f43", "eventTime": "2019-03-01T00:22:10Z", "eventName": "ListBuckets", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "155.251.168.5", "userAgent": "[Boto3/1.9.105 Python/2.7.16rc1 Linux/4.19.0-kali3-amd64 Botocore/1.12.105]", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"host": ["s3.amazonaws.com"]}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "4cb15b89-63ec-4aa1-8534-c0c545d8a573", "record_id": "flaws_cloudtrail:0000093:4cb15b89-63ec-4aa1-8534-c0c545d8a573", "row_index": 93, "timestamp": "2019-03-01T00:22:10Z", "event_type": "GetBucketLocation", "event_source": "s3.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "155.251.168.5", "user_agent": "[Boto3/1.9.105 Python/2.7.16rc1 Linux/4.19.0-kali3-amd64 Botocore/1.12.105]", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 899, "raw_record_depth": 3, "raw_record_top_level_keys": ["additionalEventData", "awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "4cb15b89-63ec-4aa1-8534-c0c545d8a573", "eventTime": "2019-03-01T00:22:10Z", "eventName": "GetBucketLocation", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "155.251.168.5", "userAgent": "[Boto3/1.9.105 Python/2.7.16rc1 Linux/4.19.0-kali3-amd64 Botocore/1.12.105]", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"host": ["s3.amazonaws.com"], "bucketName": "b5677c799b465420d8e7b0a6689a0bb0c4afbc9e.flaws.cloud", "location": [""]}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "1759fee0-6574-4b89-a7dd-f8651ec4b939", "record_id": "flaws_cloudtrail:0000094:1759fee0-6574-4b89-a7dd-f8651ec4b939", "row_index": 94, "timestamp": "2019-03-01T00:22:10Z", "event_type": "GetBucketLocation", "event_source": "s3.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "155.251.168.5", "user_agent": "[Boto3/1.9.105 Python/2.7.16rc1 Linux/4.19.0-kali3-amd64 Botocore/1.12.105]", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 862, "raw_record_depth": 3, "raw_record_top_level_keys": ["additionalEventData", "awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "1759fee0-6574-4b89-a7dd-f8651ec4b939", "eventTime": "2019-03-01T00:22:10Z", "eventName": "GetBucketLocation", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "155.251.168.5", "userAgent": "[Boto3/1.9.105 Python/2.7.16rc1 Linux/4.19.0-kali3-amd64 Botocore/1.12.105]", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"host": ["s3.amazonaws.com"], "bucketName": "flaws.cloud", "location": [""]}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "7b79bbe1-606d-4993-aed2-8b83584f69", "record_id": "flaws_cloudtrail:0000095:7b79bbe1-606d-4993-aed2-8b83584f69", "row_index": 95, "timestamp": "2019-03-01T00:22:10Z", "event_type": "GetBucketLocation", "event_source": "s3.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "155.251.168.5", "user_agent": "[Boto3/1.9.105 Python/2.7.16rc1 Linux/4.19.0-kali3-amd64 Botocore/1.12.105]", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 897, "raw_record_depth": 3, "raw_record_top_level_keys": ["additionalEventData", "awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "7b79bbe1-606d-4993-aed2-8b83584f69", "eventTime": "2019-03-01T00:22:10Z", "eventName": "GetBucketLocation", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "155.251.168.5", "userAgent": "[Boto3/1.9.105 Python/2.7.16rc1 Linux/4.19.0-kali3-amd64 Botocore/1.12.105]", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"host": ["s3.amazonaws.com"], "bucketName": "level4-974134b52e7c35aebcc4b45f19113936.flaws.cloud", "location": [""]}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "e613634c-c6ba-4d35-8a45-3c52c5a281be", "record_id": "flaws_cloudtrail:0000096:e613634c-c6ba-4d35-8a45-3c52c5a281be", "row_index": 96, "timestamp": "2019-03-01T00:22:10Z", "event_type": "GetBucketLocation", "event_source": "s3.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "155.251.168.5", "user_agent": "[Boto3/1.9.105 Python/2.7.16rc1 Linux/4.19.0-kali3-amd64 Botocore/1.12.105]", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 901, "raw_record_depth": 3, "raw_record_top_level_keys": ["additionalEventData", "awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "e613634c-c6ba-4d35-8a45-3c52c5a281be", "eventTime": "2019-03-01T00:22:10Z", "eventName": "GetBucketLocation", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "155.251.168.5", "userAgent": "[Boto3/1.9.105 Python/2.7.16rc1 Linux/4.19.0-kali3-amd64 Botocore/1.12.105]", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"host": ["s3.amazonaws.com"], "bucketName": "level6-588e81908c84e62a6dd8202d535469dd.flaws.cloud", "location": [""]}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "9504cb81-40ed-474d-b292-ccdcbf9c02be", "record_id": "flaws_cloudtrail:0000097:9504cb81-40ed-474d-b292-ccdcbf9c02be", "row_index": 97, "timestamp": "2019-03-01T00:22:10Z", "event_type": "GetBucketLocation", "event_source": "s3.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "155.251.168.5", "user_agent": "[Boto3/1.9.105 Python/2.7.16rc1 Linux/4.19.0-kali3-amd64 Botocore/1.12.105]", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 897, "raw_record_depth": 3, "raw_record_top_level_keys": ["additionalEventData", "awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "9504cb81-40ed-474d-b292-ccdcbf9c02be", "eventTime": "2019-03-01T00:22:10Z", "eventName": "GetBucketLocation", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "155.251.168.5", "userAgent": "[Boto3/1.9.105 Python/2.7.16rc1 Linux/4.19.0-kali3-amd64 Botocore/1.12.105]", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"host": ["s3.amazonaws.com"], "bucketName": "theend-c1aad500c62e2a57cf12cebf93b282cf.flaws.cloud", "location": [""]}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "db795ea0-1bf1-419f-b86a-0f377b7adebf", "record_id": "flaws_cloudtrail:0000098:db795ea0-1bf1-419f-b86a-0f377b7adebf", "row_index": 98, "timestamp": "2019-03-01T00:22:10Z", "event_type": "GetBucketLocation", "event_source": "s3.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "155.251.168.5", "user_agent": "[Boto3/1.9.105 Python/2.7.16rc1 Linux/4.19.0-kali3-amd64 Botocore/1.12.105]", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 902, "raw_record_depth": 3, "raw_record_top_level_keys": ["additionalEventData", "awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "db795ea0-1bf1-419f-b86a-0f377b7adebf", "eventTime": "2019-03-01T00:22:10Z", "eventName": "GetBucketLocation", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "155.251.168.5", "userAgent": "[Boto3/1.9.105 Python/2.7.16rc1 Linux/4.19.0-kali3-amd64 Botocore/1.12.105]", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"host": ["s3.amazonaws.com"], "bucketName": "level2-295510a051f3fcd006ae345973478972.flaws.cloud", "location": [""]}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "c0e4c4f4-87d5-4f8a-96d1-5cd333a831d1", "record_id": "flaws_cloudtrail:0000099:c0e4c4f4-87d5-4f8a-96d1-5cd333a831d1", "row_index": 99, "timestamp": "2019-03-01T00:22:10Z", "event_type": "GetBucketLocation", "event_source": "s3.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "155.251.168.5", "user_agent": "[Boto3/1.9.105 Python/2.7.16rc1 Linux/4.19.0-kali3-amd64 Botocore/1.12.105]", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 859, "raw_record_depth": 3, "raw_record_top_level_keys": ["additionalEventData", "awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "c0e4c4f4-87d5-4f8a-96d1-5cd333a831d1", "eventTime": "2019-03-01T00:22:10Z", "eventName": "GetBucketLocation", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "155.251.168.5", "userAgent": "[Boto3/1.9.105 Python/2.7.16rc1 Linux/4.19.0-kali3-amd64 Botocore/1.12.105]", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"host": ["s3.amazonaws.com"], "bucketName": "flaws-logs", "location": [""]}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "b73c7164-fcf4-4be5-9371-95cf30d3ad1d", "record_id": "flaws_cloudtrail:0000100:b73c7164-fcf4-4be5-9371-95cf30d3ad1d", "row_index": 100, "timestamp": "2019-03-01T00:22:10Z", "event_type": "GetBucketLogging", "event_source": "s3.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "155.251.168.5", "user_agent": "[Boto3/1.9.105 Python/2.7.16rc1 Linux/4.19.0-kali3-amd64 Botocore/1.12.105]", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 911, "raw_record_depth": 3, "raw_record_top_level_keys": ["additionalEventData", "awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "b73c7164-fcf4-4be5-9371-95cf30d3ad1d", "eventTime": "2019-03-01T00:22:10Z", "eventName": "GetBucketLogging", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "155.251.168.5", "userAgent": "[Boto3/1.9.105 Python/2.7.16rc1 Linux/4.19.0-kali3-amd64 Botocore/1.12.105]", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"host": ["s3.us-west-2.amazonaws.com"], "logging": [""], "bucketName": "b5677c799b465420d8e7b0a6689a0bb0c4afbc9e.flaws.cloud"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "4fd32c83-39fd-4c2c-ae3f-427e1758f0df", "record_id": "flaws_cloudtrail:0000101:4fd32c83-39fd-4c2c-ae3f-427e1758f0df", "row_index": 101, "timestamp": "2019-03-01T00:22:11Z", "event_type": "GetBucketLogging", "event_source": "s3.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "155.251.168.5", "user_agent": "[Boto3/1.9.105 Python/2.7.16rc1 Linux/4.19.0-kali3-amd64 Botocore/1.12.105]", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 910, "raw_record_depth": 3, "raw_record_top_level_keys": ["additionalEventData", "awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "4fd32c83-39fd-4c2c-ae3f-427e1758f0df", "eventTime": "2019-03-01T00:22:11Z", "eventName": "GetBucketLogging", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "155.251.168.5", "userAgent": "[Boto3/1.9.105 Python/2.7.16rc1 Linux/4.19.0-kali3-amd64 Botocore/1.12.105]", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"host": ["s3.us-west-2.amazonaws.com"], "logging": [""], "bucketName": "theend-c1aad500c62e2a57cf12cebf93b282cf.flaws.cloud"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "0337bf1a-977c-4c4f-b1c8-b2e31d0af95b", "record_id": "flaws_cloudtrail:0000102:0337bf1a-977c-4c4f-b1c8-b2e31d0af95b", "row_index": 102, "timestamp": "2019-03-01T00:22:11Z", "event_type": "GetBucketLogging", "event_source": "s3.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "155.251.168.5", "user_agent": "[Boto3/1.9.105 Python/2.7.16rc1 Linux/4.19.0-kali3-amd64 Botocore/1.12.105]", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 912, "raw_record_depth": 3, "raw_record_top_level_keys": ["additionalEventData", "awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "0337bf1a-977c-4c4f-b1c8-b2e31d0af95b", "eventTime": "2019-03-01T00:22:11Z", "eventName": "GetBucketLogging", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "155.251.168.5", "userAgent": "[Boto3/1.9.105 Python/2.7.16rc1 Linux/4.19.0-kali3-amd64 Botocore/1.12.105]", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"host": ["config-bucket-e11723be76de.s3.us-west-2.amazonaws.com"], "logging": [""], "bucketName": "config-bucket-e11723be76de"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "f720a3d7-9a01-4d2e-aafa-e628e26fbaa7", "record_id": "flaws_cloudtrail:0000103:f720a3d7-9a01-4d2e-aafa-e628e26fbaa7", "row_index": 103, "timestamp": "2019-03-01T00:22:11Z", "event_type": "GetBucketPolicy", "event_source": "s3.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "155.251.168.5", "user_agent": "[Boto3/1.9.105 Python/2.7.16rc1 Linux/4.19.0-kali3-amd64 Botocore/1.12.105]", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 908, "raw_record_depth": 3, "raw_record_top_level_keys": ["additionalEventData", "awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "f720a3d7-9a01-4d2e-aafa-e628e26fbaa7", "eventTime": "2019-03-01T00:22:11Z", "eventName": "GetBucketPolicy", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "155.251.168.5", "userAgent": "[Boto3/1.9.105 Python/2.7.16rc1 Linux/4.19.0-kali3-amd64 Botocore/1.12.105]", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"host": ["s3.us-west-2.amazonaws.com"], "bucketName": "level6-588e81908c84e62a6dd8202d535469dd.flaws.cloud", "policy": [""]}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "949e3c87-af6e-4c86-a02d-2e360013239c", "record_id": "flaws_cloudtrail:0000104:949e3c87-af6e-4c86-a02d-2e360013239c", "row_index": 104, "timestamp": "2019-03-01T00:22:11Z", "event_type": "GetBucketPolicy", "event_source": "s3.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "155.251.168.5", "user_agent": "[Boto3/1.9.105 Python/2.7.16rc1 Linux/4.19.0-kali3-amd64 Botocore/1.12.105]", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 908, "raw_record_depth": 3, "raw_record_top_level_keys": ["additionalEventData", "awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "949e3c87-af6e-4c86-a02d-2e360013239c", "eventTime": "2019-03-01T00:22:11Z", "eventName": "GetBucketPolicy", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "155.251.168.5", "userAgent": "[Boto3/1.9.105 Python/2.7.16rc1 Linux/4.19.0-kali3-amd64 Botocore/1.12.105]", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"host": ["s3.us-west-2.amazonaws.com"], "bucketName": "theend-c1aad500c62e2a57cf12cebf93b282cf.flaws.cloud", "policy": [""]}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "114a8d85-fe57-4cf2-a926-fefdd803151", "record_id": "flaws_cloudtrail:0000105:114a8d85-fe57-4cf2-a926-fefdd803151", "row_index": 105, "timestamp": "2019-03-01T00:22:11Z", "event_type": "GetBucketAcl", "event_source": "s3.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "155.251.168.5", "user_agent": "[Boto3/1.9.105 Python/2.7.16rc1 Linux/4.19.0-kali3-amd64 Botocore/1.12.105]", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 901, "raw_record_depth": 3, "raw_record_top_level_keys": ["additionalEventData", "awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "114a8d85-fe57-4cf2-a926-fefdd803151", "eventTime": "2019-03-01T00:22:11Z", "eventName": "GetBucketAcl", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "155.251.168.5", "userAgent": "[Boto3/1.9.105 Python/2.7.16rc1 Linux/4.19.0-kali3-amd64 Botocore/1.12.105]", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"host": ["s3.us-west-2.amazonaws.com"], "bucketName": "level2-295510a051f3fcd006ae345973478972.flaws.cloud", "acl": [""]}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "d3328a61-b5ac-49ec-82d1-f3ffcd272328a", "record_id": "flaws_cloudtrail:0000106:d3328a61-b5ac-49ec-82d1-f3ffcd272328a", "row_index": 106, "timestamp": "2019-03-01T00:22:11Z", "event_type": "GetBucketPolicy", "event_source": "s3.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "155.251.168.5", "user_agent": "[Boto3/1.9.105 Python/2.7.16rc1 Linux/4.19.0-kali3-amd64 Botocore/1.12.105]", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 910, "raw_record_depth": 3, "raw_record_top_level_keys": ["additionalEventData", "awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "d3328a61-b5ac-49ec-82d1-f3ffcd272328a", "eventTime": "2019-03-01T00:22:11Z", "eventName": "GetBucketPolicy", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "155.251.168.5", "userAgent": "[Boto3/1.9.105 Python/2.7.16rc1 Linux/4.19.0-kali3-amd64 Botocore/1.12.105]", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"host": ["s3.us-west-2.amazonaws.com"], "bucketName": "level2-295510a051f3fcd006ae345973478972.flaws.cloud", "policy": [""]}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "bda8cb1f-d194-4b4b-8846-31a64be341d2", "record_id": "flaws_cloudtrail:0000107:bda8cb1f-d194-4b4b-8846-31a64be341d2", "row_index": 107, "timestamp": "2019-03-01T00:22:11Z", "event_type": "GetBucketWebsite", "event_source": "s3.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "155.251.168.5", "user_agent": "[Boto3/1.9.105 Python/2.7.16rc1 Linux/4.19.0-kali3-amd64 Botocore/1.12.105]", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 910, "raw_record_depth": 3, "raw_record_top_level_keys": ["additionalEventData", "awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "bda8cb1f-d194-4b4b-8846-31a64be341d2", "eventTime": "2019-03-01T00:22:11Z", "eventName": "GetBucketWebsite", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "155.251.168.5", "userAgent": "[Boto3/1.9.105 Python/2.7.16rc1 Linux/4.19.0-kali3-amd64 Botocore/1.12.105]", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"host": ["s3.us-west-2.amazonaws.com"], "bucketName": "level2-295510a051f3fcd006ae345973478972.flaws.cloud", "website": [""]}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "1d634463c-9089-44c2-9c0a-0e4556bd9e99", "record_id": "flaws_cloudtrail:0000108:1d634463c-9089-44c2-9c0a-0e4556bd9e99", "row_index": 108, "timestamp": "2019-03-01T00:22:11Z", "event_type": "GetBucketWebsite", "event_source": "s3.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "155.251.168.5", "user_agent": "[Boto3/1.9.105 Python/2.7.16rc1 Linux/4.19.0-kali3-amd64 Botocore/1.12.105]", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 911, "raw_record_depth": 3, "raw_record_top_level_keys": ["additionalEventData", "awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "1d634463c-9089-44c2-9c0a-0e4556bd9e99", "eventTime": "2019-03-01T00:22:11Z", "eventName": "GetBucketWebsite", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "155.251.168.5", "userAgent": "[Boto3/1.9.105 Python/2.7.16rc1 Linux/4.19.0-kali3-amd64 Botocore/1.12.105]", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"host": ["s3.us-west-2.amazonaws.com"], "bucketName": "level4-974134b52e7c35aebcc4b45f19113936.flaws.cloud", "website": [""]}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "3220ca09-ac03-4208-a8d7-bd310a776cee", "record_id": "flaws_cloudtrail:0000109:3220ca09-ac03-4208-a8d7-bd310a776cee", "row_index": 109, "timestamp": "2019-03-01T00:22:11Z", "event_type": "GetBucketEncryption", "event_source": "s3.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "155.251.168.5", "user_agent": "[Boto3/1.9.105 Python/2.7.16rc1 Linux/4.19.0-kali3-amd64 Botocore/1.12.105]", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1051, "raw_record_depth": 3, "raw_record_top_level_keys": ["additionalEventData", "awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "3220ca09-ac03-4208-a8d7-bd310a776cee", "eventTime": "2019-03-01T00:22:11Z", "eventName": "GetBucketEncryption", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "155.251.168.5", "userAgent": "[Boto3/1.9.105 Python/2.7.16rc1 Linux/4.19.0-kali3-amd64 Botocore/1.12.105]", "awsRegion": "us-west-2", "errorCode": "ServerSideEncryptionConfigurationNotFoundError", "errorMessage": "The server side encryption configuration was not found", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"encryption": [""], "host": ["config-bucket-e11723be76de.s3.us-west-2.amazonaws.com"], "bucketName": "config-bucket-e11723be76de"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "38048d-d817-48e0-a05d-6d3f8e5b8e9c", "record_id": "flaws_cloudtrail:0000110:38048d-d817-48e0-a05d-6d3f8e5b8e9c", "row_index": 110, "timestamp": "2019-03-01T00:22:11Z", "event_type": "GetBucketVersioning", "event_source": "s3.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "155.251.168.5", "user_agent": "[Boto3/1.9.105 Python/2.7.16rc1 Linux/4.19.0-kali3-amd64 Botocore/1.12.105]", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 913, "raw_record_depth": 3, "raw_record_top_level_keys": ["additionalEventData", "awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "38048d-d817-48e0-a05d-6d3f8e5b8e9c", "eventTime": "2019-03-01T00:22:11Z", "eventName": "GetBucketVersioning", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "155.251.168.5", "userAgent": "[Boto3/1.9.105 Python/2.7.16rc1 Linux/4.19.0-kali3-amd64 Botocore/1.12.105]", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"host": ["s3.us-west-2.amazonaws.com"], "bucketName": "theend-c1aad500c62e2a57cf12cebf93b282cf.flaws.cloud", "versioning": [""]}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "8085fbc5-dc56-4f83-a256-3c5c9a951c98", "record_id": "flaws_cloudtrail:0000111:8085fbc5-dc56-4f83-a256-3c5c9a951c98", "row_index": 111, "timestamp": "2019-03-01T00:22:11Z", "event_type": "GetBucketEncryption", "event_source": "s3.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "155.251.168.5", "user_agent": "[Boto3/1.9.105 Python/2.7.16rc1 Linux/4.19.0-kali3-amd64 Botocore/1.12.105]", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1051, "raw_record_depth": 3, "raw_record_top_level_keys": ["additionalEventData", "awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "8085fbc5-dc56-4f83-a256-3c5c9a951c98", "eventTime": "2019-03-01T00:22:11Z", "eventName": "GetBucketEncryption", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "155.251.168.5", "userAgent": "[Boto3/1.9.105 Python/2.7.16rc1 Linux/4.19.0-kali3-amd64 Botocore/1.12.105]", "awsRegion": "us-west-2", "errorCode": "ServerSideEncryptionConfigurationNotFoundError", "errorMessage": "The server side encryption configuration was not found", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"encryption": [""], "host": ["s3.us-west-2.amazonaws.com"], "bucketName": "b5677c799b465420d8e7b0a6689a0bb0c4afbc9e.flaws.cloud"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "166d283d-b9f6-47e7-b60f-c755eda66be4", "record_id": "flaws_cloudtrail:0000112:166d283d-b9f6-47e7-b60f-c755eda66be4", "row_index": 112, "timestamp": "2019-03-01T00:22:11Z", "event_type": "GetBucketEncryption", "event_source": "s3.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "155.251.168.5", "user_agent": "[Boto3/1.9.105 Python/2.7.16rc1 Linux/4.19.0-kali3-amd64 Botocore/1.12.105]", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1009, "raw_record_depth": 3, "raw_record_top_level_keys": ["additionalEventData", "awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "166d283d-b9f6-47e7-b60f-c755eda66be4", "eventTime": "2019-03-01T00:22:11Z", "eventName": "GetBucketEncryption", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "155.251.168.5", "userAgent": "[Boto3/1.9.105 Python/2.7.16rc1 Linux/4.19.0-kali3-amd64 Botocore/1.12.105]", "awsRegion": "us-west-2", "errorCode": "ServerSideEncryptionConfigurationNotFoundError", "errorMessage": "The server side encryption configuration was not found", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"encryption": [""], "host": ["s3.us-west-2.amazonaws.com"], "bucketName": "flaws.cloud"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "aeddd0ba-4e26-4ebc-a456-1338c96d682e", "record_id": "flaws_cloudtrail:0000113:aeddd0ba-4e26-4ebc-a456-1338c96d682e", "row_index": 113, "timestamp": "2019-03-01T00:22:11Z", "event_type": "GetBucketWebsite", "event_source": "s3.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "155.251.168.5", "user_agent": "[Boto3/1.9.105 Python/2.7.16rc1 Linux/4.19.0-kali3-amd64 Botocore/1.12.105]", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 910, "raw_record_depth": 3, "raw_record_top_level_keys": ["additionalEventData", "awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "aeddd0ba-4e26-4ebc-a456-1338c96d682e", "eventTime": "2019-03-01T00:22:11Z", "eventName": "GetBucketWebsite", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "155.251.168.5", "userAgent": "[Boto3/1.9.105 Python/2.7.16rc1 Linux/4.19.0-kali3-amd64 Botocore/1.12.105]", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"host": ["s3.us-west-2.amazonaws.com"], "bucketName": "level3-2644b9e749c3d14e400f847199800c14.flaws.cloud", "website": [""]}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "6d8374fe-d729-469b-b578-d62103c5b", "record_id": "flaws_cloudtrail:0000114:6d8374fe-d729-469b-b578-d62103c5b", "row_index": 114, "timestamp": "2019-03-01T00:22:11Z", "event_type": "GetBucketVersioning", "event_source": "s3.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "155.251.168.5", "user_agent": "[Boto3/1.9.105 Python/2.7.16rc1 Linux/4.19.0-kali3-amd64 Botocore/1.12.105]", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 910, "raw_record_depth": 3, "raw_record_top_level_keys": ["additionalEventData", "awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "6d8374fe-d729-469b-b578-d62103c5b", "eventTime": "2019-03-01T00:22:11Z", "eventName": "GetBucketVersioning", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "155.251.168.5", "userAgent": "[Boto3/1.9.105 Python/2.7.16rc1 Linux/4.19.0-kali3-amd64 Botocore/1.12.105]", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"host": ["s3.us-west-2.amazonaws.com"], "bucketName": "level4-974134b52e7c35aebcc4b45f19113936.flaws.cloud", "versioning": [""]}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "b6de1522-93cf-4362-b33e-901c225fc638", "record_id": "flaws_cloudtrail:0000115:b6de1522-93cf-4362-b33e-901c225fc638", "row_index": 115, "timestamp": "2019-03-01T00:22:11Z", "event_type": "GetBucketLogging", "event_source": "s3.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "155.251.168.5", "user_agent": "[Boto3/1.9.105 Python/2.7.16rc1 Linux/4.19.0-kali3-amd64 Botocore/1.12.105]", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 910, "raw_record_depth": 3, "raw_record_top_level_keys": ["additionalEventData", "awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "b6de1522-93cf-4362-b33e-901c225fc638", "eventTime": "2019-03-01T00:22:11Z", "eventName": "GetBucketLogging", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "155.251.168.5", "userAgent": "[Boto3/1.9.105 Python/2.7.16rc1 Linux/4.19.0-kali3-amd64 Botocore/1.12.105]", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"host": ["s3.us-west-2.amazonaws.com"], "logging": [""], "bucketName": "level5-8dbc21dbbd6129208d054061ef063f04.flaws.cloud"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "eae4af99-c64a-4213-adea-1f2a814a821d", "record_id": "flaws_cloudtrail:0000116:eae4af99-c64a-4213-adea-1f2a814a821d", "row_index": 116, "timestamp": "2019-03-01T00:22:11Z", "event_type": "GetBucketWebsite", "event_source": "s3.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "155.251.168.5", "user_agent": "[Boto3/1.9.105 Python/2.7.16rc1 Linux/4.19.0-kali3-amd64 Botocore/1.12.105]", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 911, "raw_record_depth": 3, "raw_record_top_level_keys": ["additionalEventData", "awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "eae4af99-c64a-4213-adea-1f2a814a821d", "eventTime": "2019-03-01T00:22:11Z", "eventName": "GetBucketWebsite", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "155.251.168.5", "userAgent": "[Boto3/1.9.105 Python/2.7.16rc1 Linux/4.19.0-kali3-amd64 Botocore/1.12.105]", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"host": ["s3.us-west-2.amazonaws.com"], "bucketName": "b5677c799b465420d8e7b0a6689a0bb0c4afbc9e.flaws.cloud", "website": [""]}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "acc3e9af-2515-4397-8a03-eded07f5361d", "record_id": "flaws_cloudtrail:0000117:acc3e9af-2515-4397-8a03-eded07f5361d", "row_index": 117, "timestamp": "2019-03-01T00:22:11Z", "event_type": "GetBucketLogging", "event_source": "s3.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "155.251.168.5", "user_agent": "[Boto3/1.9.105 Python/2.7.16rc1 Linux/4.19.0-kali3-amd64 Botocore/1.12.105]", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 910, "raw_record_depth": 3, "raw_record_top_level_keys": ["additionalEventData", "awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "acc3e9af-2515-4397-8a03-eded07f5361d", "eventTime": "2019-03-01T00:22:11Z", "eventName": "GetBucketLogging", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "155.251.168.5", "userAgent": "[Boto3/1.9.105 Python/2.7.16rc1 Linux/4.19.0-kali3-amd64 Botocore/1.12.105]", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"host": ["s3.us-west-2.amazonaws.com"], "logging": [""], "bucketName": "level4-974134b52e7c35aebcc4b45f19113936.flaws.cloud"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "133b9e9d-3dc3-4e8e-85ac-84049b1ea243", "record_id": "flaws_cloudtrail:0000118:133b9e9d-3dc3-4e8e-85ac-84049b1ea243", "row_index": 118, "timestamp": "2019-03-01T00:22:11Z", "event_type": "GetBucketPolicy", "event_source": "s3.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "155.251.168.5", "user_agent": "[Boto3/1.9.105 Python/2.7.16rc1 Linux/4.19.0-kali3-amd64 Botocore/1.12.105]", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 993, "raw_record_depth": 3, "raw_record_top_level_keys": ["additionalEventData", "awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "133b9e9d-3dc3-4e8e-85ac-84049b1ea243", "eventTime": "2019-03-01T00:22:11Z", "eventName": "GetBucketPolicy", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "155.251.168.5", "userAgent": "[Boto3/1.9.105 Python/2.7.16rc1 Linux/4.19.0-kali3-amd64 Botocore/1.12.105]", "awsRegion": "us-west-2", "errorCode": "NoSuchBucketPolicy", "errorMessage": "The bucket policy does not exist", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"host": ["config-bucket-e11723be76de.s3.us-west-2.amazonaws.com"], "bucketName": "config-bucket-e11723be76de", "policy": [""]}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "f9dd2d16-84b8-46de-8245-cbcbae4302af", "record_id": "flaws_cloudtrail:0000119:f9dd2d16-84b8-46de-8245-cbcbae4302af", "row_index": 119, "timestamp": "2019-03-01T00:22:11Z", "event_type": "GetBucketLogging", "event_source": "s3.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "155.251.168.5", "user_agent": "[Boto3/1.9.105 Python/2.7.16rc1 Linux/4.19.0-kali3-amd64 Botocore/1.12.105]", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 910, "raw_record_depth": 3, "raw_record_top_level_keys": ["additionalEventData", "awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "f9dd2d16-84b8-46de-8245-cbcbae4302af", "eventTime": "2019-03-01T00:22:11Z", "eventName": "GetBucketLogging", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "155.251.168.5", "userAgent": "[Boto3/1.9.105 Python/2.7.16rc1 Linux/4.19.0-kali3-amd64 Botocore/1.12.105]", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"host": ["s3.us-west-2.amazonaws.com"], "logging": [""], "bucketName": "level3-2644b9e749c3d14e400f847199800c14.flaws.cloud"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "9e45621-6c2e-4fac-8cf6-fcdd2e97768", "record_id": "flaws_cloudtrail:0000120:9e45621-6c2e-4fac-8cf6-fcdd2e97768", "row_index": 120, "timestamp": "2019-03-01T00:22:11Z", "event_type": "GetBucketAcl", "event_source": "s3.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "155.251.168.5", "user_agent": "[Boto3/1.9.105 Python/2.7.16rc1 Linux/4.19.0-kali3-amd64 Botocore/1.12.105]", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 870, "raw_record_depth": 3, "raw_record_top_level_keys": ["additionalEventData", "awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "9e45621-6c2e-4fac-8cf6-fcdd2e97768", "eventTime": "2019-03-01T00:22:11Z", "eventName": "GetBucketAcl", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "155.251.168.5", "userAgent": "[Boto3/1.9.105 Python/2.7.16rc1 Linux/4.19.0-kali3-amd64 Botocore/1.12.105]", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"host": ["flaws-logs.s3.us-west-2.amazonaws.com"], "bucketName": "flaws-logs", "acl": [""]}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "f366365e5-3fb1-4fe6-adc0-f9655a02fe20", "record_id": "flaws_cloudtrail:0000121:f366365e5-3fb1-4fe6-adc0-f9655a02fe20", "row_index": 121, "timestamp": "2019-03-01T00:22:11Z", "event_type": "GetBucketLogging", "event_source": "s3.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "155.251.168.5", "user_agent": "[Boto3/1.9.105 Python/2.7.16rc1 Linux/4.19.0-kali3-amd64 Botocore/1.12.105]", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 912, "raw_record_depth": 3, "raw_record_top_level_keys": ["additionalEventData", "awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "f366365e5-3fb1-4fe6-adc0-f9655a02fe20", "eventTime": "2019-03-01T00:22:11Z", "eventName": "GetBucketLogging", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "155.251.168.5", "userAgent": "[Boto3/1.9.105 Python/2.7.16rc1 Linux/4.19.0-kali3-amd64 Botocore/1.12.105]", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"host": ["s3.us-west-2.amazonaws.com"], "logging": [""], "bucketName": "level6-588e81908c84e62a6dd8202d535469dd.flaws.cloud"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "34217c-df24-4ef6-bbe5-2767e806100", "record_id": "flaws_cloudtrail:0000122:34217c-df24-4ef6-bbe5-2767e806100", "row_index": 122, "timestamp": "2019-03-01T00:22:11Z", "event_type": "GetBucketEncryption", "event_source": "s3.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "155.251.168.5", "user_agent": "[Boto3/1.9.105 Python/2.7.16rc1 Linux/4.19.0-kali3-amd64 Botocore/1.12.105]", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1042, "raw_record_depth": 3, "raw_record_top_level_keys": ["additionalEventData", "awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "34217c-df24-4ef6-bbe5-2767e806100", "eventTime": "2019-03-01T00:22:11Z", "eventName": "GetBucketEncryption", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "155.251.168.5", "userAgent": "[Boto3/1.9.105 Python/2.7.16rc1 Linux/4.19.0-kali3-amd64 Botocore/1.12.105]", "awsRegion": "us-west-2", "errorCode": "ServerSideEncryptionConfigurationNotFoundError", "errorMessage": "The server side encryption configuration was not found", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"encryption": [""], "host": ["s3.us-west-2.amazonaws.com"], "bucketName": "level3-2644b9e749c3d14e400f847199800c14.flaws.cloud"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "bbc9b7b6-f0bd-4364-9a30-346b69a0b1ac", "record_id": "flaws_cloudtrail:0000123:bbc9b7b6-f0bd-4364-9a30-346b69a0b1ac", "row_index": 123, "timestamp": "2019-03-01T00:22:11Z", "event_type": "GetBucketPolicy", "event_source": "s3.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "155.251.168.5", "user_agent": "[Boto3/1.9.105 Python/2.7.16rc1 Linux/4.19.0-kali3-amd64 Botocore/1.12.105]", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 878, "raw_record_depth": 3, "raw_record_top_level_keys": ["additionalEventData", "awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "bbc9b7b6-f0bd-4364-9a30-346b69a0b1ac", "eventTime": "2019-03-01T00:22:11Z", "eventName": "GetBucketPolicy", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "155.251.168.5", "userAgent": "[Boto3/1.9.105 Python/2.7.16rc1 Linux/4.19.0-kali3-amd64 Botocore/1.12.105]", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"host": ["flaws-logs.s3.us-west-2.amazonaws.com"], "bucketName": "flaws-logs", "policy": [""]}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "0811f369-7e72-4871-bb29-c651b3b5fb02", "record_id": "flaws_cloudtrail:0000124:0811f369-7e72-4871-bb29-c651b3b5fb02", "row_index": 124, "timestamp": "2019-03-01T00:22:11Z", "event_type": "GetBucketEncryption", "event_source": "s3.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "155.251.168.5", "user_agent": "[Boto3/1.9.105 Python/2.7.16rc1 Linux/4.19.0-kali3-amd64 Botocore/1.12.105]", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1049, "raw_record_depth": 3, "raw_record_top_level_keys": ["additionalEventData", "awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "0811f369-7e72-4871-bb29-c651b3b5fb02", "eventTime": "2019-03-01T00:22:11Z", "eventName": "GetBucketEncryption", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "155.251.168.5", "userAgent": "[Boto3/1.9.105 Python/2.7.16rc1 Linux/4.19.0-kali3-amd64 Botocore/1.12.105]", "awsRegion": "us-west-2", "errorCode": "ServerSideEncryptionConfigurationNotFoundError", "errorMessage": "The server side encryption configuration was not found", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"encryption": [""], "host": ["s3.us-west-2.amazonaws.com"], "bucketName": "level5-8dbc21dbbd6129208d054061ef063f04.flaws.cloud"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "d513e71e-83c7-445a-89e8-2aaea8d876682", "record_id": "flaws_cloudtrail:0000125:d513e71e-83c7-445a-89e8-2aaea8d876682", "row_index": 125, "timestamp": "2019-03-01T00:22:11Z", "event_type": "GetBucketEncryption", "event_source": "s3.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "155.251.168.5", "user_agent": "[Boto3/1.9.105 Python/2.7.16rc1 Linux/4.19.0-kali3-amd64 Botocore/1.12.105]", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1050, "raw_record_depth": 3, "raw_record_top_level_keys": ["additionalEventData", "awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "d513e71e-83c7-445a-89e8-2aaea8d876682", "eventTime": "2019-03-01T00:22:11Z", "eventName": "GetBucketEncryption", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "155.251.168.5", "userAgent": "[Boto3/1.9.105 Python/2.7.16rc1 Linux/4.19.0-kali3-amd64 Botocore/1.12.105]", "awsRegion": "us-west-2", "errorCode": "ServerSideEncryptionConfigurationNotFoundError", "errorMessage": "The server side encryption configuration was not found", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"encryption": [""], "host": ["s3.us-west-2.amazonaws.com"], "bucketName": "level6-588e81908c84e62a6dd8202d535469dd.flaws.cloud"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "3cd5b758-6b70-4cab-9e2d-2d01c0679936", "record_id": "flaws_cloudtrail:0000126:3cd5b758-6b70-4cab-9e2d-2d01c0679936", "row_index": 126, "timestamp": "2019-03-01T00:22:11Z", "event_type": "GetBucketLogging", "event_source": "s3.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "155.251.168.5", "user_agent": "[Boto3/1.9.105 Python/2.7.16rc1 Linux/4.19.0-kali3-amd64 Botocore/1.12.105]", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 880, "raw_record_depth": 3, "raw_record_top_level_keys": ["additionalEventData", "awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "3cd5b758-6b70-4cab-9e2d-2d01c0679936", "eventTime": "2019-03-01T00:22:11Z", "eventName": "GetBucketLogging", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "155.251.168.5", "userAgent": "[Boto3/1.9.105 Python/2.7.16rc1 Linux/4.19.0-kali3-amd64 Botocore/1.12.105]", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"host": ["flaws-logs.s3.us-west-2.amazonaws.com"], "logging": [""], "bucketName": "flaws-logs"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "945340ad-28e4-4aae-b357-d08724f6b5cb", "record_id": "flaws_cloudtrail:0000127:945340ad-28e4-4aae-b357-d08724f6b5cb", "row_index": 127, "timestamp": "2019-03-01T00:22:11Z", "event_type": "GetBucketVersioning", "event_source": "s3.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "155.251.168.5", "user_agent": "[Boto3/1.9.105 Python/2.7.16rc1 Linux/4.19.0-kali3-amd64 Botocore/1.12.105]", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 886, "raw_record_depth": 3, "raw_record_top_level_keys": ["additionalEventData", "awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "945340ad-28e4-4aae-b357-d08724f6b5cb", "eventTime": "2019-03-01T00:22:11Z", "eventName": "GetBucketVersioning", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "155.251.168.5", "userAgent": "[Boto3/1.9.105 Python/2.7.16rc1 Linux/4.19.0-kali3-amd64 Botocore/1.12.105]", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"host": ["flaws-logs.s3.us-west-2.amazonaws.com"], "bucketName": "flaws-logs", "versioning": [""]}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "ec224a3e-1236-4123-8198-7c111f94cb7f", "record_id": "flaws_cloudtrail:0000128:ec224a3e-1236-4123-8198-7c111f94cb7f", "row_index": 128, "timestamp": "2019-03-01T00:22:11Z", "event_type": "GetBucketAcl", "event_source": "s3.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "155.251.168.5", "user_agent": "[Boto3/1.9.105 Python/2.7.16rc1 Linux/4.19.0-kali3-amd64 Botocore/1.12.105]", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 904, "raw_record_depth": 3, "raw_record_top_level_keys": ["additionalEventData", "awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "ec224a3e-1236-4123-8198-7c111f94cb7f", "eventTime": "2019-03-01T00:22:11Z", "eventName": "GetBucketAcl", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "155.251.168.5", "userAgent": "[Boto3/1.9.105 Python/2.7.16rc1 Linux/4.19.0-kali3-amd64 Botocore/1.12.105]", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"host": ["config-bucket-e11723be76de.s3.us-west-2.amazonaws.com"], "bucketName": "config-bucket-e11723be76de", "acl": [""]}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "4b6cc3fd-0660-41a9-a932-809890c8d9e92", "record_id": "flaws_cloudtrail:0000129:4b6cc3fd-0660-41a9-a932-809890c8d9e92", "row_index": 129, "timestamp": "2019-03-01T00:22:11Z", "event_type": "GetBucketLogging", "event_source": "s3.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "155.251.168.5", "user_agent": "[Boto3/1.9.105 Python/2.7.16rc1 Linux/4.19.0-kali3-amd64 Botocore/1.12.105]", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 911, "raw_record_depth": 3, "raw_record_top_level_keys": ["additionalEventData", "awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "4b6cc3fd-0660-41a9-a932-809890c8d9e92", "eventTime": "2019-03-01T00:22:11Z", "eventName": "GetBucketLogging", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "155.251.168.5", "userAgent": "[Boto3/1.9.105 Python/2.7.16rc1 Linux/4.19.0-kali3-amd64 Botocore/1.12.105]", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"host": ["s3.us-west-2.amazonaws.com"], "logging": [""], "bucketName": "level2-295510a051f3fcd006ae345973478972.flaws.cloud"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "e4c38fbc-a19b-4fe1-8d4f-1fd711faaade", "record_id": "flaws_cloudtrail:0000130:e4c38fbc-a19b-4fe1-8d4f-1fd711faaade", "row_index": 130, "timestamp": "2019-03-01T00:22:11Z", "event_type": "GetBucketPolicy", "event_source": "s3.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "155.251.168.5", "user_agent": "[Boto3/1.9.105 Python/2.7.16rc1 Linux/4.19.0-kali3-amd64 Botocore/1.12.105]", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 908, "raw_record_depth": 3, "raw_record_top_level_keys": ["additionalEventData", "awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "e4c38fbc-a19b-4fe1-8d4f-1fd711faaade", "eventTime": "2019-03-01T00:22:11Z", "eventName": "GetBucketPolicy", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "155.251.168.5", "userAgent": "[Boto3/1.9.105 Python/2.7.16rc1 Linux/4.19.0-kali3-amd64 Botocore/1.12.105]", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"host": ["s3.us-west-2.amazonaws.com"], "bucketName": "level4-974134b52e7c35aebcc4b45f19113936.flaws.cloud", "policy": [""]}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "84d89fdc-d83a-4053-93bf-67aca2c6fb73", "record_id": "flaws_cloudtrail:0000131:84d89fdc-d83a-4053-93bf-67aca2c6fb73", "row_index": 131, "timestamp": "2019-03-01T00:22:11Z", "event_type": "GetBucketWebsite", "event_source": "s3.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "155.251.168.5", "user_agent": "[Boto3/1.9.105 Python/2.7.16rc1 Linux/4.19.0-kali3-amd64 Botocore/1.12.105]", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 997, "raw_record_depth": 3, "raw_record_top_level_keys": ["additionalEventData", "awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "84d89fdc-d83a-4053-93bf-67aca2c6fb73", "eventTime": "2019-03-01T00:22:11Z", "eventName": "GetBucketWebsite", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "155.251.168.5", "userAgent": "[Boto3/1.9.105 Python/2.7.16rc1 Linux/4.19.0-kali3-amd64 Botocore/1.12.105]", "awsRegion": "us-west-2", "errorCode": "NoSuchWebsiteConfiguration", "errorMessage": "The specified bucket does not have a website configuration", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"host": ["flaws-logs.s3.us-west-2.amazonaws.com"], "bucketName": "flaws-logs", "website": [""]}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "d85c6056-4840-436c-9f0d-7e1d3ccc6da1", "record_id": "flaws_cloudtrail:0000132:d85c6056-4840-436c-9f0d-7e1d3ccc6da1", "row_index": 132, "timestamp": "2019-03-01T00:22:11Z", "event_type": "GetBucketPolicy", "event_source": "s3.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "155.251.168.5", "user_agent": "[Boto3/1.9.105 Python/2.7.16rc1 Linux/4.19.0-kali3-amd64 Botocore/1.12.105]", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 908, "raw_record_depth": 3, "raw_record_top_level_keys": ["additionalEventData", "awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "d85c6056-4840-436c-9f0d-7e1d3ccc6da1", "eventTime": "2019-03-01T00:22:11Z", "eventName": "GetBucketPolicy", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "155.251.168.5", "userAgent": "[Boto3/1.9.105 Python/2.7.16rc1 Linux/4.19.0-kali3-amd64 Botocore/1.12.105]", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"host": ["s3.us-west-2.amazonaws.com"], "bucketName": "b5677c799b465420d8e7b0a6689a0bb0c4afbc9e.flaws.cloud", "policy": [""]}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "d5743ecc-8d4e-49e9-80d9-9378c9a20c3a", "record_id": "flaws_cloudtrail:0000133:d5743ecc-8d4e-49e9-80d9-9378c9a20c3a", "row_index": 133, "timestamp": "2019-03-01T00:22:11Z", "event_type": "GetBucketAcl", "event_source": "s3.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "155.251.168.5", "user_agent": "[Boto3/1.9.105 Python/2.7.16rc1 Linux/4.19.0-kali3-amd64 Botocore/1.12.105]", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 902, "raw_record_depth": 3, "raw_record_top_level_keys": ["additionalEventData", "awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "d5743ecc-8d4e-49e9-80d9-9378c9a20c3a", "eventTime": "2019-03-01T00:22:11Z", "eventName": "GetBucketAcl", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "155.251.168.5", "userAgent": "[Boto3/1.9.105 Python/2.7.16rc1 Linux/4.19.0-kali3-amd64 Botocore/1.12.105]", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"host": ["s3.us-west-2.amazonaws.com"], "bucketName": "level4-974134b52e7c35aebcc4b45f19113936.flaws.cloud", "acl": [""]}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "90d05a44-60aa-4f2e-a2c6-ca05ca7b559b", "record_id": "flaws_cloudtrail:0000134:90d05a44-60aa-4f2e-a2c6-ca05ca7b559b", "row_index": 134, "timestamp": "2019-03-01T00:22:11Z", "event_type": "GetBucketEncryption", "event_source": "s3.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "155.251.168.5", "user_agent": "[Boto3/1.9.105 Python/2.7.16rc1 Linux/4.19.0-kali3-amd64 Botocore/1.12.105]", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1049, "raw_record_depth": 3, "raw_record_top_level_keys": ["additionalEventData", "awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "90d05a44-60aa-4f2e-a2c6-ca05ca7b559b", "eventTime": "2019-03-01T00:22:11Z", "eventName": "GetBucketEncryption", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "155.251.168.5", "userAgent": "[Boto3/1.9.105 Python/2.7.16rc1 Linux/4.19.0-kali3-amd64 Botocore/1.12.105]", "awsRegion": "us-west-2", "errorCode": "ServerSideEncryptionConfigurationNotFoundError", "errorMessage": "The server side encryption configuration was not found", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"encryption": [""], "host": ["s3.us-west-2.amazonaws.com"], "bucketName": "theend-c1aad500c62e2a57cf12cebf93b282cf.flaws.cloud"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "50b8b67b-0b25-43dc-b2dc-d2f645f9fca6", "record_id": "flaws_cloudtrail:0000135:50b8b67b-0b25-43dc-b2dc-d2f645f9fca6", "row_index": 135, "timestamp": "2019-03-01T00:22:11Z", "event_type": "GetBucketVersioning", "event_source": "s3.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "155.251.168.5", "user_agent": "[Boto3/1.9.105 Python/2.7.16rc1 Linux/4.19.0-kali3-amd64 Botocore/1.12.105]", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 914, "raw_record_depth": 3, "raw_record_top_level_keys": ["additionalEventData", "awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "50b8b67b-0b25-43dc-b2dc-d2f645f9fca6", "eventTime": "2019-03-01T00:22:11Z", "eventName": "GetBucketVersioning", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "155.251.168.5", "userAgent": "[Boto3/1.9.105 Python/2.7.16rc1 Linux/4.19.0-kali3-amd64 Botocore/1.12.105]", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"host": ["s3.us-west-2.amazonaws.com"], "bucketName": "level3-2644b9e749c3d14e400f847199800c14.flaws.cloud", "versioning": [""]}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "1bb80cae-a09e-4bdb-b35d-48141c6e86b7", "record_id": "flaws_cloudtrail:0000136:1bb80cae-a09e-4bdb-b35d-48141c6e86b7", "row_index": 136, "timestamp": "2019-03-01T00:22:11Z", "event_type": "GetBucketVersioning", "event_source": "s3.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "155.251.168.5", "user_agent": "[Boto3/1.9.105 Python/2.7.16rc1 Linux/4.19.0-kali3-amd64 Botocore/1.12.105]", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 916, "raw_record_depth": 3, "raw_record_top_level_keys": ["additionalEventData", "awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "1bb80cae-a09e-4bdb-b35d-48141c6e86b7", "eventTime": "2019-03-01T00:22:11Z", "eventName": "GetBucketVersioning", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "155.251.168.5", "userAgent": "[Boto3/1.9.105 Python/2.7.16rc1 Linux/4.19.0-kali3-amd64 Botocore/1.12.105]", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"host": ["s3.us-west-2.amazonaws.com"], "bucketName": "level6-588e81908c84e62a6dd8202d535469dd.flaws.cloud", "versioning": [""]}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "49998-6f21-40a1-a357-85dcb1582be1", "record_id": "flaws_cloudtrail:0000137:49998-6f21-40a1-a357-85dcb1582be1", "row_index": 137, "timestamp": "2019-03-01T00:22:11Z", "event_type": "GetBucketAcl", "event_source": "s3.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "155.251.168.5", "user_agent": "[Boto3/1.9.105 Python/2.7.16rc1 Linux/4.19.0-kali3-amd64 Botocore/1.12.105]", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 899, "raw_record_depth": 3, "raw_record_top_level_keys": ["additionalEventData", "awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "49998-6f21-40a1-a357-85dcb1582be1", "eventTime": "2019-03-01T00:22:11Z", "eventName": "GetBucketAcl", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "155.251.168.5", "userAgent": "[Boto3/1.9.105 Python/2.7.16rc1 Linux/4.19.0-kali3-amd64 Botocore/1.12.105]", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"host": ["s3.us-west-2.amazonaws.com"], "bucketName": "level3-2644b9e749c3d14e400f847199800c14.flaws.cloud", "acl": [""]}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "48e89d21-1471-480d-89a8-bf145843d1a69", "record_id": "flaws_cloudtrail:0000138:48e89d21-1471-480d-89a8-bf145843d1a69", "row_index": 138, "timestamp": "2019-03-01T00:22:11Z", "event_type": "GetBucketPolicy", "event_source": "s3.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "155.251.168.5", "user_agent": "[Boto3/1.9.105 Python/2.7.16rc1 Linux/4.19.0-kali3-amd64 Botocore/1.12.105]", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 869, "raw_record_depth": 3, "raw_record_top_level_keys": ["additionalEventData", "awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "48e89d21-1471-480d-89a8-bf145843d1a69", "eventTime": "2019-03-01T00:22:11Z", "eventName": "GetBucketPolicy", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "155.251.168.5", "userAgent": "[Boto3/1.9.105 Python/2.7.16rc1 Linux/4.19.0-kali3-amd64 Botocore/1.12.105]", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"host": ["s3.us-west-2.amazonaws.com"], "bucketName": "flaws.cloud", "policy": [""]}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "51b71ce6-4f8b-481f-832b-1363b7df9164", "record_id": "flaws_cloudtrail:0000139:51b71ce6-4f8b-481f-832b-1363b7df9164", "row_index": 139, "timestamp": "2019-03-01T00:22:11Z", "event_type": "GetBucketWebsite", "event_source": "s3.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "155.251.168.5", "user_agent": "[Boto3/1.9.105 Python/2.7.16rc1 Linux/4.19.0-kali3-amd64 Botocore/1.12.105]", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 910, "raw_record_depth": 3, "raw_record_top_level_keys": ["additionalEventData", "awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "51b71ce6-4f8b-481f-832b-1363b7df9164", "eventTime": "2019-03-01T00:22:11Z", "eventName": "GetBucketWebsite", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "155.251.168.5", "userAgent": "[Boto3/1.9.105 Python/2.7.16rc1 Linux/4.19.0-kali3-amd64 Botocore/1.12.105]", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"host": ["s3.us-west-2.amazonaws.com"], "bucketName": "level6-588e81908c84e62a6dd8202d535469dd.flaws.cloud", "website": [""]}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "bdd753457-42c0-4391-b45f-cb371343a2f8", "record_id": "flaws_cloudtrail:0000140:bdd753457-42c0-4391-b45f-cb371343a2f8", "row_index": 140, "timestamp": "2019-03-01T00:22:11Z", "event_type": "GetBucketVersioning", "event_source": "s3.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "155.251.168.5", "user_agent": "[Boto3/1.9.105 Python/2.7.16rc1 Linux/4.19.0-kali3-amd64 Botocore/1.12.105]", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 917, "raw_record_depth": 3, "raw_record_top_level_keys": ["additionalEventData", "awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "bdd753457-42c0-4391-b45f-cb371343a2f8", "eventTime": "2019-03-01T00:22:11Z", "eventName": "GetBucketVersioning", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "155.251.168.5", "userAgent": "[Boto3/1.9.105 Python/2.7.16rc1 Linux/4.19.0-kali3-amd64 Botocore/1.12.105]", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"host": ["s3.us-west-2.amazonaws.com"], "bucketName": "level5-8dbc21dbbd6129208d054061ef063f04.flaws.cloud", "versioning": [""]}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "d7a0d86b-c00b-4a45-8df9-01ee911602db", "record_id": "flaws_cloudtrail:0000141:d7a0d86b-c00b-4a45-8df9-01ee911602db", "row_index": 141, "timestamp": "2019-03-01T00:22:11Z", "event_type": "GetBucketPolicy", "event_source": "s3.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "155.251.168.5", "user_agent": "[Boto3/1.9.105 Python/2.7.16rc1 Linux/4.19.0-kali3-amd64 Botocore/1.12.105]", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 909, "raw_record_depth": 3, "raw_record_top_level_keys": ["additionalEventData", "awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "d7a0d86b-c00b-4a45-8df9-01ee911602db", "eventTime": "2019-03-01T00:22:11Z", "eventName": "GetBucketPolicy", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "155.251.168.5", "userAgent": "[Boto3/1.9.105 Python/2.7.16rc1 Linux/4.19.0-kali3-amd64 Botocore/1.12.105]", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"host": ["s3.us-west-2.amazonaws.com"], "bucketName": "level3-2644b9e749c3d14e400f847199800c14.flaws.cloud", "policy": [""]}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "7b87c55c-4396-496e-8bf1-ac4aef05d496", "record_id": "flaws_cloudtrail:0000142:7b87c55c-4396-496e-8bf1-ac4aef05d496", "row_index": 142, "timestamp": "2019-03-01T00:22:11Z", "event_type": "GetBucketVersioning", "event_source": "s3.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "155.251.168.5", "user_agent": "[Boto3/1.9.105 Python/2.7.16rc1 Linux/4.19.0-kali3-amd64 Botocore/1.12.105]", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 918, "raw_record_depth": 3, "raw_record_top_level_keys": ["additionalEventData", "awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "7b87c55c-4396-496e-8bf1-ac4aef05d496", "eventTime": "2019-03-01T00:22:11Z", "eventName": "GetBucketVersioning", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "155.251.168.5", "userAgent": "[Boto3/1.9.105 Python/2.7.16rc1 Linux/4.19.0-kali3-amd64 Botocore/1.12.105]", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"host": ["config-bucket-e11723be76de.s3.us-west-2.amazonaws.com"], "bucketName": "config-bucket-e11723be76de", "versioning": [""]}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "4dd194316-5323-4d75-b467-2fd74ef577d7", "record_id": "flaws_cloudtrail:0000143:4dd194316-5323-4d75-b467-2fd74ef577d7", "row_index": 143, "timestamp": "2019-03-01T00:22:11Z", "event_type": "GetBucketWebsite", "event_source": "s3.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "155.251.168.5", "user_agent": "[Boto3/1.9.105 Python/2.7.16rc1 Linux/4.19.0-kali3-amd64 Botocore/1.12.105]", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 871, "raw_record_depth": 3, "raw_record_top_level_keys": ["additionalEventData", "awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "4dd194316-5323-4d75-b467-2fd74ef577d7", "eventTime": "2019-03-01T00:22:11Z", "eventName": "GetBucketWebsite", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "155.251.168.5", "userAgent": "[Boto3/1.9.105 Python/2.7.16rc1 Linux/4.19.0-kali3-amd64 Botocore/1.12.105]", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"host": ["s3.us-west-2.amazonaws.com"], "bucketName": "flaws.cloud", "website": [""]}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "a4796a5f-e7e2-44c3-a8db-a7063958ead7", "record_id": "flaws_cloudtrail:0000144:a4796a5f-e7e2-44c3-a8db-a7063958ead7", "row_index": 144, "timestamp": "2019-03-01T00:22:11Z", "event_type": "GetBucketAcl", "event_source": "s3.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "155.251.168.5", "user_agent": "[Boto3/1.9.105 Python/2.7.16rc1 Linux/4.19.0-kali3-amd64 Botocore/1.12.105]", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 902, "raw_record_depth": 3, "raw_record_top_level_keys": ["additionalEventData", "awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "a4796a5f-e7e2-44c3-a8db-a7063958ead7", "eventTime": "2019-03-01T00:22:11Z", "eventName": "GetBucketAcl", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "155.251.168.5", "userAgent": "[Boto3/1.9.105 Python/2.7.16rc1 Linux/4.19.0-kali3-amd64 Botocore/1.12.105]", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"host": ["s3.us-west-2.amazonaws.com"], "bucketName": "level5-8dbc21dbbd6129208d054061ef063f04.flaws.cloud", "acl": [""]}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "bc62810-f741-4f0c-a763-9f091539ba897", "record_id": "flaws_cloudtrail:0000145:bc62810-f741-4f0c-a763-9f091539ba897", "row_index": 145, "timestamp": "2019-03-01T00:22:11Z", "event_type": "GetBucketEncryption", "event_source": "s3.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "155.251.168.5", "user_agent": "[Boto3/1.9.105 Python/2.7.16rc1 Linux/4.19.0-kali3-amd64 Botocore/1.12.105]", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1019, "raw_record_depth": 3, "raw_record_top_level_keys": ["additionalEventData", "awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "bc62810-f741-4f0c-a763-9f091539ba897", "eventTime": "2019-03-01T00:22:11Z", "eventName": "GetBucketEncryption", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "155.251.168.5", "userAgent": "[Boto3/1.9.105 Python/2.7.16rc1 Linux/4.19.0-kali3-amd64 Botocore/1.12.105]", "awsRegion": "us-west-2", "errorCode": "ServerSideEncryptionConfigurationNotFoundError", "errorMessage": "The server side encryption configuration was not found", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"encryption": [""], "host": ["flaws-logs.s3.us-west-2.amazonaws.com"], "bucketName": "flaws-logs"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "45414a-3039-4dbf-9fc7-ecf43aae13b8", "record_id": "flaws_cloudtrail:0000146:45414a-3039-4dbf-9fc7-ecf43aae13b8", "row_index": 146, "timestamp": "2019-03-01T00:22:11Z", "event_type": "GetBucketAcl", "event_source": "s3.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "155.251.168.5", "user_agent": "[Boto3/1.9.105 Python/2.7.16rc1 Linux/4.19.0-kali3-amd64 Botocore/1.12.105]", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 900, "raw_record_depth": 3, "raw_record_top_level_keys": ["additionalEventData", "awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "45414a-3039-4dbf-9fc7-ecf43aae13b8", "eventTime": "2019-03-01T00:22:11Z", "eventName": "GetBucketAcl", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "155.251.168.5", "userAgent": "[Boto3/1.9.105 Python/2.7.16rc1 Linux/4.19.0-kali3-amd64 Botocore/1.12.105]", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"host": ["s3.us-west-2.amazonaws.com"], "bucketName": "level6-588e81908c84e62a6dd8202d535469dd.flaws.cloud", "acl": [""]}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "6d106369b-f201-4450-b615-d9ce1f2366a8", "record_id": "flaws_cloudtrail:0000147:6d106369b-f201-4450-b615-d9ce1f2366a8", "row_index": 147, "timestamp": "2019-03-01T00:22:11Z", "event_type": "GetBucketAcl", "event_source": "s3.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "155.251.168.5", "user_agent": "[Boto3/1.9.105 Python/2.7.16rc1 Linux/4.19.0-kali3-amd64 Botocore/1.12.105]", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 863, "raw_record_depth": 3, "raw_record_top_level_keys": ["additionalEventData", "awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "6d106369b-f201-4450-b615-d9ce1f2366a8", "eventTime": "2019-03-01T00:22:11Z", "eventName": "GetBucketAcl", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "155.251.168.5", "userAgent": "[Boto3/1.9.105 Python/2.7.16rc1 Linux/4.19.0-kali3-amd64 Botocore/1.12.105]", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"host": ["s3.us-west-2.amazonaws.com"], "bucketName": "flaws.cloud", "acl": [""]}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "564241fd-0b7a-4aa3-ae4e-41cf30be6c6a", "record_id": "flaws_cloudtrail:0000148:564241fd-0b7a-4aa3-ae4e-41cf30be6c6a", "row_index": 148, "timestamp": "2019-03-01T00:22:11Z", "event_type": "GetBucketAcl", "event_source": "s3.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "155.251.168.5", "user_agent": "[Boto3/1.9.105 Python/2.7.16rc1 Linux/4.19.0-kali3-amd64 Botocore/1.12.105]", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 898, "raw_record_depth": 3, "raw_record_top_level_keys": ["additionalEventData", "awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "564241fd-0b7a-4aa3-ae4e-41cf30be6c6a", "eventTime": "2019-03-01T00:22:11Z", "eventName": "GetBucketAcl", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "155.251.168.5", "userAgent": "[Boto3/1.9.105 Python/2.7.16rc1 Linux/4.19.0-kali3-amd64 Botocore/1.12.105]", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"host": ["s3.us-west-2.amazonaws.com"], "bucketName": "theend-c1aad500c62e2a57cf12cebf93b282cf.flaws.cloud", "acl": [""]}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "f1253d3b-b20b-470b-85cc-7f1d1e4dd279", "record_id": "flaws_cloudtrail:0000149:f1253d3b-b20b-470b-85cc-7f1d1e4dd279", "row_index": 149, "timestamp": "2019-03-01T00:22:11Z", "event_type": "GetBucketWebsite", "event_source": "s3.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "155.251.168.5", "user_agent": "[Boto3/1.9.105 Python/2.7.16rc1 Linux/4.19.0-kali3-amd64 Botocore/1.12.105]", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1028, "raw_record_depth": 3, "raw_record_top_level_keys": ["additionalEventData", "awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "f1253d3b-b20b-470b-85cc-7f1d1e4dd279", "eventTime": "2019-03-01T00:22:11Z", "eventName": "GetBucketWebsite", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "155.251.168.5", "userAgent": "[Boto3/1.9.105 Python/2.7.16rc1 Linux/4.19.0-kali3-amd64 Botocore/1.12.105]", "awsRegion": "us-west-2", "errorCode": "NoSuchWebsiteConfiguration", "errorMessage": "The specified bucket does not have a website configuration", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"host": ["config-bucket-e11723be76de.s3.us-west-2.amazonaws.com"], "bucketName": "config-bucket-e11723be76de", "website": [""]}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "5202d203-171c-48a2-aa92-f17887dc946b", "record_id": "flaws_cloudtrail:0000150:5202d203-171c-48a2-aa92-f17887dc946b", "row_index": 150, "timestamp": "2019-03-01T00:22:11Z", "event_type": "GetBucketAcl", "event_source": "s3.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "155.251.168.5", "user_agent": "[Boto3/1.9.105 Python/2.7.16rc1 Linux/4.19.0-kali3-amd64 Botocore/1.12.105]", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 903, "raw_record_depth": 3, "raw_record_top_level_keys": ["additionalEventData", "awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "5202d203-171c-48a2-aa92-f17887dc946b", "eventTime": "2019-03-01T00:22:11Z", "eventName": "GetBucketAcl", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "155.251.168.5", "userAgent": "[Boto3/1.9.105 Python/2.7.16rc1 Linux/4.19.0-kali3-amd64 Botocore/1.12.105]", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"host": ["s3.us-west-2.amazonaws.com"], "bucketName": "b5677c799b465420d8e7b0a6689a0bb0c4afbc9e.flaws.cloud", "acl": [""]}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "3c243c4c-184c-485b-b465-53d645e8f3ac", "record_id": "flaws_cloudtrail:0000151:3c243c4c-184c-485b-b465-53d645e8f3ac", "row_index": 151, "timestamp": "2019-03-01T00:22:11Z", "event_type": "GetBucketPolicy", "event_source": "s3.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "155.251.168.5", "user_agent": "[Boto3/1.9.105 Python/2.7.16rc1 Linux/4.19.0-kali3-amd64 Botocore/1.12.105]", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 907, "raw_record_depth": 3, "raw_record_top_level_keys": ["additionalEventData", "awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "3c243c4c-184c-485b-b465-53d645e8f3ac", "eventTime": "2019-03-01T00:22:11Z", "eventName": "GetBucketPolicy", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "155.251.168.5", "userAgent": "[Boto3/1.9.105 Python/2.7.16rc1 Linux/4.19.0-kali3-amd64 Botocore/1.12.105]", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"host": ["s3.us-west-2.amazonaws.com"], "bucketName": "level5-8dbc21dbbd6129208d054061ef063f04.flaws.cloud", "policy": [""]}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "0c5bef02-2312-43ec-8df5-6b692af12db0", "record_id": "flaws_cloudtrail:0000152:0c5bef02-2312-43ec-8df5-6b692af12db0", "row_index": 152, "timestamp": "2019-03-01T00:22:11Z", "event_type": "GetBucketLogging", "event_source": "s3.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "155.251.168.5", "user_agent": "[Boto3/1.9.105 Python/2.7.16rc1 Linux/4.19.0-kali3-amd64 Botocore/1.12.105]", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 870, "raw_record_depth": 3, "raw_record_top_level_keys": ["additionalEventData", "awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "0c5bef02-2312-43ec-8df5-6b692af12db0", "eventTime": "2019-03-01T00:22:11Z", "eventName": "GetBucketLogging", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "155.251.168.5", "userAgent": "[Boto3/1.9.105 Python/2.7.16rc1 Linux/4.19.0-kali3-amd64 Botocore/1.12.105]", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"host": ["s3.us-west-2.amazonaws.com"], "logging": [""], "bucketName": "flaws.cloud"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "23db67f7-97a0-44a1-8555-a15ac2df0416", "record_id": "flaws_cloudtrail:0000153:23db67f7-97a0-44a1-8555-a15ac2df0416", "row_index": 153, "timestamp": "2019-03-01T00:22:11Z", "event_type": "GetBucketVersioning", "event_source": "s3.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "155.251.168.5", "user_agent": "[Boto3/1.9.105 Python/2.7.16rc1 Linux/4.19.0-kali3-amd64 Botocore/1.12.105]", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 917, "raw_record_depth": 3, "raw_record_top_level_keys": ["additionalEventData", "awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "23db67f7-97a0-44a1-8555-a15ac2df0416", "eventTime": "2019-03-01T00:22:11Z", "eventName": "GetBucketVersioning", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "155.251.168.5", "userAgent": "[Boto3/1.9.105 Python/2.7.16rc1 Linux/4.19.0-kali3-amd64 Botocore/1.12.105]", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"host": ["s3.us-west-2.amazonaws.com"], "bucketName": "b5677c799b465420d8e7b0a6689a0bb0c4afbc9e.flaws.cloud", "versioning": [""]}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "2367a9d5-a0cb-4d8b-8091-b102a1af1275", "record_id": "flaws_cloudtrail:0000154:2367a9d5-a0cb-4d8b-8091-b102a1af1275", "row_index": 154, "timestamp": "2019-03-01T00:22:11Z", "event_type": "GetBucketVersioning", "event_source": "s3.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "155.251.168.5", "user_agent": "[Boto3/1.9.105 Python/2.7.16rc1 Linux/4.19.0-kali3-amd64 Botocore/1.12.105]", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 913, "raw_record_depth": 3, "raw_record_top_level_keys": ["additionalEventData", "awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "2367a9d5-a0cb-4d8b-8091-b102a1af1275", "eventTime": "2019-03-01T00:22:11Z", "eventName": "GetBucketVersioning", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "155.251.168.5", "userAgent": "[Boto3/1.9.105 Python/2.7.16rc1 Linux/4.19.0-kali3-amd64 Botocore/1.12.105]", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"host": ["s3.us-west-2.amazonaws.com"], "bucketName": "level2-295510a051f3fcd006ae345973478972.flaws.cloud", "versioning": [""]}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "bd5495da-228e-4f01-9f51-a48471f0b4b7", "record_id": "flaws_cloudtrail:0000155:bd5495da-228e-4f01-9f51-a48471f0b4b7", "row_index": 155, "timestamp": "2019-03-01T00:22:11Z", "event_type": "GetBucketEncryption", "event_source": "s3.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "155.251.168.5", "user_agent": "[Boto3/1.9.105 Python/2.7.16rc1 Linux/4.19.0-kali3-amd64 Botocore/1.12.105]", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1049, "raw_record_depth": 3, "raw_record_top_level_keys": ["additionalEventData", "awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "bd5495da-228e-4f01-9f51-a48471f0b4b7", "eventTime": "2019-03-01T00:22:11Z", "eventName": "GetBucketEncryption", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "155.251.168.5", "userAgent": "[Boto3/1.9.105 Python/2.7.16rc1 Linux/4.19.0-kali3-amd64 Botocore/1.12.105]", "awsRegion": "us-west-2", "errorCode": "ServerSideEncryptionConfigurationNotFoundError", "errorMessage": "The server side encryption configuration was not found", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"encryption": [""], "host": ["s3.us-west-2.amazonaws.com"], "bucketName": "level2-295510a051f3fcd006ae345973478972.flaws.cloud"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "e945452d8-4b11-47a5-8d8f-189a74e24979", "record_id": "flaws_cloudtrail:0000156:e945452d8-4b11-47a5-8d8f-189a74e24979", "row_index": 156, "timestamp": "2019-03-01T00:22:11Z", "event_type": "GetBucketVersioning", "event_source": "s3.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "155.251.168.5", "user_agent": "[Boto3/1.9.105 Python/2.7.16rc1 Linux/4.19.0-kali3-amd64 Botocore/1.12.105]", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 877, "raw_record_depth": 3, "raw_record_top_level_keys": ["additionalEventData", "awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "e945452d8-4b11-47a5-8d8f-189a74e24979", "eventTime": "2019-03-01T00:22:11Z", "eventName": "GetBucketVersioning", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "155.251.168.5", "userAgent": "[Boto3/1.9.105 Python/2.7.16rc1 Linux/4.19.0-kali3-amd64 Botocore/1.12.105]", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"host": ["s3.us-west-2.amazonaws.com"], "bucketName": "flaws.cloud", "versioning": [""]}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "f0c38423-aefd-45ec-a2ce-1401373741c8", "record_id": "flaws_cloudtrail:0000157:f0c38423-aefd-45ec-a2ce-1401373741c8", "row_index": 157, "timestamp": "2019-03-01T00:22:11Z", "event_type": "GetBucketWebsite", "event_source": "s3.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "155.251.168.5", "user_agent": "[Boto3/1.9.105 Python/2.7.16rc1 Linux/4.19.0-kali3-amd64 Botocore/1.12.105]", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 908, "raw_record_depth": 3, "raw_record_top_level_keys": ["additionalEventData", "awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "f0c38423-aefd-45ec-a2ce-1401373741c8", "eventTime": "2019-03-01T00:22:11Z", "eventName": "GetBucketWebsite", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "155.251.168.5", "userAgent": "[Boto3/1.9.105 Python/2.7.16rc1 Linux/4.19.0-kali3-amd64 Botocore/1.12.105]", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"host": ["s3.us-west-2.amazonaws.com"], "bucketName": "theend-c1aad500c62e2a57cf12cebf93b282cf.flaws.cloud", "website": [""]}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "d3a44c26-991d-4bef-b171-5aeecdeaca93", "record_id": "flaws_cloudtrail:0000158:d3a44c26-991d-4bef-b171-5aeecdeaca93", "row_index": 158, "timestamp": "2019-03-01T00:22:11Z", "event_type": "GetBucketWebsite", "event_source": "s3.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "155.251.168.5", "user_agent": "[Boto3/1.9.105 Python/2.7.16rc1 Linux/4.19.0-kali3-amd64 Botocore/1.12.105]", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 909, "raw_record_depth": 3, "raw_record_top_level_keys": ["additionalEventData", "awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "d3a44c26-991d-4bef-b171-5aeecdeaca93", "eventTime": "2019-03-01T00:22:11Z", "eventName": "GetBucketWebsite", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "155.251.168.5", "userAgent": "[Boto3/1.9.105 Python/2.7.16rc1 Linux/4.19.0-kali3-amd64 Botocore/1.12.105]", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"host": ["s3.us-west-2.amazonaws.com"], "bucketName": "level5-8dbc21dbbd6129208d054061ef063f04.flaws.cloud", "website": [""]}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "1fcd3c07-ad9e-4ee6-bb7b-8ed77b6a9a7b", "record_id": "flaws_cloudtrail:0000159:1fcd3c07-ad9e-4ee6-bb7b-8ed77b6a9a7b", "row_index": 159, "timestamp": "2019-03-01T00:22:11Z", "event_type": "GetBucketEncryption", "event_source": "s3.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "155.251.168.5", "user_agent": "[Boto3/1.9.105 Python/2.7.16rc1 Linux/4.19.0-kali3-amd64 Botocore/1.12.105]", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1047, "raw_record_depth": 3, "raw_record_top_level_keys": ["additionalEventData", "awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "1fcd3c07-ad9e-4ee6-bb7b-8ed77b6a9a7b", "eventTime": "2019-03-01T00:22:11Z", "eventName": "GetBucketEncryption", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "155.251.168.5", "userAgent": "[Boto3/1.9.105 Python/2.7.16rc1 Linux/4.19.0-kali3-amd64 Botocore/1.12.105]", "awsRegion": "us-west-2", "errorCode": "ServerSideEncryptionConfigurationNotFoundError", "errorMessage": "The server side encryption configuration was not found", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"encryption": [""], "host": ["s3.us-west-2.amazonaws.com"], "bucketName": "level4-974134b52e7c35aebcc4b45f19113936.flaws.cloud"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "4fd32c83-39fd-4c2c-ae3f-427e1758f0df", "record_id": "flaws_cloudtrail:0000160:4fd32c83-39fd-4c2c-ae3f-427e1758f0df", "row_index": 160, "timestamp": "2019-03-01T00:22:11Z", "event_type": "GetBucketLogging", "event_source": "s3.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "155.251.168.5", "user_agent": "[Boto3/1.9.105 Python/2.7.16rc1 Linux/4.19.0-kali3-amd64 Botocore/1.12.105]", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 910, "raw_record_depth": 3, "raw_record_top_level_keys": ["additionalEventData", "awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "4fd32c83-39fd-4c2c-ae3f-427e1758f0df", "eventTime": "2019-03-01T00:22:11Z", "eventName": "GetBucketLogging", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "155.251.168.5", "userAgent": "[Boto3/1.9.105 Python/2.7.16rc1 Linux/4.19.0-kali3-amd64 Botocore/1.12.105]", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"host": ["s3.us-west-2.amazonaws.com"], "logging": [""], "bucketName": "theend-c1aad500c62e2a57cf12cebf93b282cf.flaws.cloud"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "0337bf1a-977c-4c4f-b1c8-b2e31d0af95b", "record_id": "flaws_cloudtrail:0000161:0337bf1a-977c-4c4f-b1c8-b2e31d0af95b", "row_index": 161, "timestamp": "2019-03-01T00:22:11Z", "event_type": "GetBucketLogging", "event_source": "s3.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "155.251.168.5", "user_agent": "[Boto3/1.9.105 Python/2.7.16rc1 Linux/4.19.0-kali3-amd64 Botocore/1.12.105]", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 912, "raw_record_depth": 3, "raw_record_top_level_keys": ["additionalEventData", "awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "0337bf1a-977c-4c4f-b1c8-b2e31d0af95b", "eventTime": "2019-03-01T00:22:11Z", "eventName": "GetBucketLogging", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "155.251.168.5", "userAgent": "[Boto3/1.9.105 Python/2.7.16rc1 Linux/4.19.0-kali3-amd64 Botocore/1.12.105]", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"host": ["config-bucket-e11723be76de.s3.us-west-2.amazonaws.com"], "logging": [""], "bucketName": "config-bucket-e11723be76de"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "f720a3d7-9a01-4d2e-aafa-e628e26fbaa7", "record_id": "flaws_cloudtrail:0000162:f720a3d7-9a01-4d2e-aafa-e628e26fbaa7", "row_index": 162, "timestamp": "2019-03-01T00:22:11Z", "event_type": "GetBucketPolicy", "event_source": "s3.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "155.251.168.5", "user_agent": "[Boto3/1.9.105 Python/2.7.16rc1 Linux/4.19.0-kali3-amd64 Botocore/1.12.105]", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 908, "raw_record_depth": 3, "raw_record_top_level_keys": ["additionalEventData", "awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "f720a3d7-9a01-4d2e-aafa-e628e26fbaa7", "eventTime": "2019-03-01T00:22:11Z", "eventName": "GetBucketPolicy", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "155.251.168.5", "userAgent": "[Boto3/1.9.105 Python/2.7.16rc1 Linux/4.19.0-kali3-amd64 Botocore/1.12.105]", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"host": ["s3.us-west-2.amazonaws.com"], "bucketName": "level6-588e81908c84e62a6dd8202d535469dd.flaws.cloud", "policy": [""]}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "949e3c87-af6e-4c86-a02d-2e360013239c", "record_id": "flaws_cloudtrail:0000163:949e3c87-af6e-4c86-a02d-2e360013239c", "row_index": 163, "timestamp": "2019-03-01T00:22:11Z", "event_type": "GetBucketPolicy", "event_source": "s3.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "155.251.168.5", "user_agent": "[Boto3/1.9.105 Python/2.7.16rc1 Linux/4.19.0-kali3-amd64 Botocore/1.12.105]", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 908, "raw_record_depth": 3, "raw_record_top_level_keys": ["additionalEventData", "awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "949e3c87-af6e-4c86-a02d-2e360013239c", "eventTime": "2019-03-01T00:22:11Z", "eventName": "GetBucketPolicy", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "155.251.168.5", "userAgent": "[Boto3/1.9.105 Python/2.7.16rc1 Linux/4.19.0-kali3-amd64 Botocore/1.12.105]", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"host": ["s3.us-west-2.amazonaws.com"], "bucketName": "theend-c1aad500c62e2a57cf12cebf93b282cf.flaws.cloud", "policy": [""]}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "114a8d85-fe57-4cf2-a926-fefdd803151", "record_id": "flaws_cloudtrail:0000164:114a8d85-fe57-4cf2-a926-fefdd803151", "row_index": 164, "timestamp": "2019-03-01T00:22:11Z", "event_type": "GetBucketAcl", "event_source": "s3.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "155.251.168.5", "user_agent": "[Boto3/1.9.105 Python/2.7.16rc1 Linux/4.19.0-kali3-amd64 Botocore/1.12.105]", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 901, "raw_record_depth": 3, "raw_record_top_level_keys": ["additionalEventData", "awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "114a8d85-fe57-4cf2-a926-fefdd803151", "eventTime": "2019-03-01T00:22:11Z", "eventName": "GetBucketAcl", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "155.251.168.5", "userAgent": "[Boto3/1.9.105 Python/2.7.16rc1 Linux/4.19.0-kali3-amd64 Botocore/1.12.105]", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"host": ["s3.us-west-2.amazonaws.com"], "bucketName": "level2-295510a051f3fcd006ae345973478972.flaws.cloud", "acl": [""]}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "d3328a61-b5ac-49ec-82d1-f3ffcd272328a", "record_id": "flaws_cloudtrail:0000165:d3328a61-b5ac-49ec-82d1-f3ffcd272328a", "row_index": 165, "timestamp": "2019-03-01T00:22:11Z", "event_type": "GetBucketPolicy", "event_source": "s3.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "155.251.168.5", "user_agent": "[Boto3/1.9.105 Python/2.7.16rc1 Linux/4.19.0-kali3-amd64 Botocore/1.12.105]", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 910, "raw_record_depth": 3, "raw_record_top_level_keys": ["additionalEventData", "awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "d3328a61-b5ac-49ec-82d1-f3ffcd272328a", "eventTime": "2019-03-01T00:22:11Z", "eventName": "GetBucketPolicy", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "155.251.168.5", "userAgent": "[Boto3/1.9.105 Python/2.7.16rc1 Linux/4.19.0-kali3-amd64 Botocore/1.12.105]", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"host": ["s3.us-west-2.amazonaws.com"], "bucketName": "level2-295510a051f3fcd006ae345973478972.flaws.cloud", "policy": [""]}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "bda8cb1f-d194-4b4b-8846-31a64be341d2", "record_id": "flaws_cloudtrail:0000166:bda8cb1f-d194-4b4b-8846-31a64be341d2", "row_index": 166, "timestamp": "2019-03-01T00:22:11Z", "event_type": "GetBucketWebsite", "event_source": "s3.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "155.251.168.5", "user_agent": "[Boto3/1.9.105 Python/2.7.16rc1 Linux/4.19.0-kali3-amd64 Botocore/1.12.105]", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 910, "raw_record_depth": 3, "raw_record_top_level_keys": ["additionalEventData", "awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "bda8cb1f-d194-4b4b-8846-31a64be341d2", "eventTime": "2019-03-01T00:22:11Z", "eventName": "GetBucketWebsite", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "155.251.168.5", "userAgent": "[Boto3/1.9.105 Python/2.7.16rc1 Linux/4.19.0-kali3-amd64 Botocore/1.12.105]", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"host": ["s3.us-west-2.amazonaws.com"], "bucketName": "level2-295510a051f3fcd006ae345973478972.flaws.cloud", "website": [""]}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "1d634463c-9089-44c2-9c0a-0e4556bd9e99", "record_id": "flaws_cloudtrail:0000167:1d634463c-9089-44c2-9c0a-0e4556bd9e99", "row_index": 167, "timestamp": "2019-03-01T00:22:11Z", "event_type": "GetBucketWebsite", "event_source": "s3.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "155.251.168.5", "user_agent": "[Boto3/1.9.105 Python/2.7.16rc1 Linux/4.19.0-kali3-amd64 Botocore/1.12.105]", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 911, "raw_record_depth": 3, "raw_record_top_level_keys": ["additionalEventData", "awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "1d634463c-9089-44c2-9c0a-0e4556bd9e99", "eventTime": "2019-03-01T00:22:11Z", "eventName": "GetBucketWebsite", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "155.251.168.5", "userAgent": "[Boto3/1.9.105 Python/2.7.16rc1 Linux/4.19.0-kali3-amd64 Botocore/1.12.105]", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"host": ["s3.us-west-2.amazonaws.com"], "bucketName": "level4-974134b52e7c35aebcc4b45f19113936.flaws.cloud", "website": [""]}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "3220ca09-ac03-4208-a8d7-bd310a776cee", "record_id": "flaws_cloudtrail:0000168:3220ca09-ac03-4208-a8d7-bd310a776cee", "row_index": 168, "timestamp": "2019-03-01T00:22:11Z", "event_type": "GetBucketEncryption", "event_source": "s3.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "155.251.168.5", "user_agent": "[Boto3/1.9.105 Python/2.7.16rc1 Linux/4.19.0-kali3-amd64 Botocore/1.12.105]", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1051, "raw_record_depth": 3, "raw_record_top_level_keys": ["additionalEventData", "awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "3220ca09-ac03-4208-a8d7-bd310a776cee", "eventTime": "2019-03-01T00:22:11Z", "eventName": "GetBucketEncryption", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "155.251.168.5", "userAgent": "[Boto3/1.9.105 Python/2.7.16rc1 Linux/4.19.0-kali3-amd64 Botocore/1.12.105]", "awsRegion": "us-west-2", "errorCode": "ServerSideEncryptionConfigurationNotFoundError", "errorMessage": "The server side encryption configuration was not found", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"encryption": [""], "host": ["config-bucket-e11723be76de.s3.us-west-2.amazonaws.com"], "bucketName": "config-bucket-e11723be76de"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "38048d-d817-48e0-a05d-6d3f8e5b8e9c", "record_id": "flaws_cloudtrail:0000169:38048d-d817-48e0-a05d-6d3f8e5b8e9c", "row_index": 169, "timestamp": "2019-03-01T00:22:11Z", "event_type": "GetBucketVersioning", "event_source": "s3.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "155.251.168.5", "user_agent": "[Boto3/1.9.105 Python/2.7.16rc1 Linux/4.19.0-kali3-amd64 Botocore/1.12.105]", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 913, "raw_record_depth": 3, "raw_record_top_level_keys": ["additionalEventData", "awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "38048d-d817-48e0-a05d-6d3f8e5b8e9c", "eventTime": "2019-03-01T00:22:11Z", "eventName": "GetBucketVersioning", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "155.251.168.5", "userAgent": "[Boto3/1.9.105 Python/2.7.16rc1 Linux/4.19.0-kali3-amd64 Botocore/1.12.105]", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"host": ["s3.us-west-2.amazonaws.com"], "bucketName": "theend-c1aad500c62e2a57cf12cebf93b282cf.flaws.cloud", "versioning": [""]}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "8085fbc5-dc56-4f83-a256-3c5c9a951c98", "record_id": "flaws_cloudtrail:0000170:8085fbc5-dc56-4f83-a256-3c5c9a951c98", "row_index": 170, "timestamp": "2019-03-01T00:22:11Z", "event_type": "GetBucketEncryption", "event_source": "s3.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "155.251.168.5", "user_agent": "[Boto3/1.9.105 Python/2.7.16rc1 Linux/4.19.0-kali3-amd64 Botocore/1.12.105]", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1051, "raw_record_depth": 3, "raw_record_top_level_keys": ["additionalEventData", "awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "8085fbc5-dc56-4f83-a256-3c5c9a951c98", "eventTime": "2019-03-01T00:22:11Z", "eventName": "GetBucketEncryption", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "155.251.168.5", "userAgent": "[Boto3/1.9.105 Python/2.7.16rc1 Linux/4.19.0-kali3-amd64 Botocore/1.12.105]", "awsRegion": "us-west-2", "errorCode": "ServerSideEncryptionConfigurationNotFoundError", "errorMessage": "The server side encryption configuration was not found", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"encryption": [""], "host": ["s3.us-west-2.amazonaws.com"], "bucketName": "b5677c799b465420d8e7b0a6689a0bb0c4afbc9e.flaws.cloud"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "166d283d-b9f6-47e7-b60f-c755eda66be4", "record_id": "flaws_cloudtrail:0000171:166d283d-b9f6-47e7-b60f-c755eda66be4", "row_index": 171, "timestamp": "2019-03-01T00:22:11Z", "event_type": "GetBucketEncryption", "event_source": "s3.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "155.251.168.5", "user_agent": "[Boto3/1.9.105 Python/2.7.16rc1 Linux/4.19.0-kali3-amd64 Botocore/1.12.105]", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1009, "raw_record_depth": 3, "raw_record_top_level_keys": ["additionalEventData", "awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "166d283d-b9f6-47e7-b60f-c755eda66be4", "eventTime": "2019-03-01T00:22:11Z", "eventName": "GetBucketEncryption", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "155.251.168.5", "userAgent": "[Boto3/1.9.105 Python/2.7.16rc1 Linux/4.19.0-kali3-amd64 Botocore/1.12.105]", "awsRegion": "us-west-2", "errorCode": "ServerSideEncryptionConfigurationNotFoundError", "errorMessage": "The server side encryption configuration was not found", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"encryption": [""], "host": ["s3.us-west-2.amazonaws.com"], "bucketName": "flaws.cloud"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "aeddd0ba-4e26-4ebc-a456-1338c96d682e", "record_id": "flaws_cloudtrail:0000172:aeddd0ba-4e26-4ebc-a456-1338c96d682e", "row_index": 172, "timestamp": "2019-03-01T00:22:11Z", "event_type": "GetBucketWebsite", "event_source": "s3.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "155.251.168.5", "user_agent": "[Boto3/1.9.105 Python/2.7.16rc1 Linux/4.19.0-kali3-amd64 Botocore/1.12.105]", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 910, "raw_record_depth": 3, "raw_record_top_level_keys": ["additionalEventData", "awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "aeddd0ba-4e26-4ebc-a456-1338c96d682e", "eventTime": "2019-03-01T00:22:11Z", "eventName": "GetBucketWebsite", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "155.251.168.5", "userAgent": "[Boto3/1.9.105 Python/2.7.16rc1 Linux/4.19.0-kali3-amd64 Botocore/1.12.105]", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"host": ["s3.us-west-2.amazonaws.com"], "bucketName": "level3-2644b9e749c3d14e400f847199800c14.flaws.cloud", "website": [""]}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "6d8374fe-d729-469b-b578-d62103c5b", "record_id": "flaws_cloudtrail:0000173:6d8374fe-d729-469b-b578-d62103c5b", "row_index": 173, "timestamp": "2019-03-01T00:22:11Z", "event_type": "GetBucketVersioning", "event_source": "s3.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "155.251.168.5", "user_agent": "[Boto3/1.9.105 Python/2.7.16rc1 Linux/4.19.0-kali3-amd64 Botocore/1.12.105]", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 910, "raw_record_depth": 3, "raw_record_top_level_keys": ["additionalEventData", "awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "6d8374fe-d729-469b-b578-d62103c5b", "eventTime": "2019-03-01T00:22:11Z", "eventName": "GetBucketVersioning", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "155.251.168.5", "userAgent": "[Boto3/1.9.105 Python/2.7.16rc1 Linux/4.19.0-kali3-amd64 Botocore/1.12.105]", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"host": ["s3.us-west-2.amazonaws.com"], "bucketName": "level4-974134b52e7c35aebcc4b45f19113936.flaws.cloud", "versioning": [""]}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "b6de1522-93cf-4362-b33e-901c225fc638", "record_id": "flaws_cloudtrail:0000174:b6de1522-93cf-4362-b33e-901c225fc638", "row_index": 174, "timestamp": "2019-03-01T00:22:11Z", "event_type": "GetBucketLogging", "event_source": "s3.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "155.251.168.5", "user_agent": "[Boto3/1.9.105 Python/2.7.16rc1 Linux/4.19.0-kali3-amd64 Botocore/1.12.105]", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 910, "raw_record_depth": 3, "raw_record_top_level_keys": ["additionalEventData", "awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "b6de1522-93cf-4362-b33e-901c225fc638", "eventTime": "2019-03-01T00:22:11Z", "eventName": "GetBucketLogging", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "155.251.168.5", "userAgent": "[Boto3/1.9.105 Python/2.7.16rc1 Linux/4.19.0-kali3-amd64 Botocore/1.12.105]", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"host": ["s3.us-west-2.amazonaws.com"], "logging": [""], "bucketName": "level5-8dbc21dbbd6129208d054061ef063f04.flaws.cloud"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "eae4af99-c64a-4213-adea-1f2a814a821d", "record_id": "flaws_cloudtrail:0000175:eae4af99-c64a-4213-adea-1f2a814a821d", "row_index": 175, "timestamp": "2019-03-01T00:22:11Z", "event_type": "GetBucketWebsite", "event_source": "s3.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "155.251.168.5", "user_agent": "[Boto3/1.9.105 Python/2.7.16rc1 Linux/4.19.0-kali3-amd64 Botocore/1.12.105]", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 911, "raw_record_depth": 3, "raw_record_top_level_keys": ["additionalEventData", "awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "eae4af99-c64a-4213-adea-1f2a814a821d", "eventTime": "2019-03-01T00:22:11Z", "eventName": "GetBucketWebsite", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "155.251.168.5", "userAgent": "[Boto3/1.9.105 Python/2.7.16rc1 Linux/4.19.0-kali3-amd64 Botocore/1.12.105]", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"host": ["s3.us-west-2.amazonaws.com"], "bucketName": "b5677c799b465420d8e7b0a6689a0bb0c4afbc9e.flaws.cloud", "website": [""]}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "acc3e9af-2515-4397-8a03-eded07f5361d", "record_id": "flaws_cloudtrail:0000176:acc3e9af-2515-4397-8a03-eded07f5361d", "row_index": 176, "timestamp": "2019-03-01T00:22:11Z", "event_type": "GetBucketLogging", "event_source": "s3.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "155.251.168.5", "user_agent": "[Boto3/1.9.105 Python/2.7.16rc1 Linux/4.19.0-kali3-amd64 Botocore/1.12.105]", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 910, "raw_record_depth": 3, "raw_record_top_level_keys": ["additionalEventData", "awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "acc3e9af-2515-4397-8a03-eded07f5361d", "eventTime": "2019-03-01T00:22:11Z", "eventName": "GetBucketLogging", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "155.251.168.5", "userAgent": "[Boto3/1.9.105 Python/2.7.16rc1 Linux/4.19.0-kali3-amd64 Botocore/1.12.105]", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"host": ["s3.us-west-2.amazonaws.com"], "logging": [""], "bucketName": "level4-974134b52e7c35aebcc4b45f19113936.flaws.cloud"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "133b9e9d-3dc3-4e8e-85ac-84049b1ea243", "record_id": "flaws_cloudtrail:0000177:133b9e9d-3dc3-4e8e-85ac-84049b1ea243", "row_index": 177, "timestamp": "2019-03-01T00:22:11Z", "event_type": "GetBucketPolicy", "event_source": "s3.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "155.251.168.5", "user_agent": "[Boto3/1.9.105 Python/2.7.16rc1 Linux/4.19.0-kali3-amd64 Botocore/1.12.105]", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 993, "raw_record_depth": 3, "raw_record_top_level_keys": ["additionalEventData", "awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "133b9e9d-3dc3-4e8e-85ac-84049b1ea243", "eventTime": "2019-03-01T00:22:11Z", "eventName": "GetBucketPolicy", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "155.251.168.5", "userAgent": "[Boto3/1.9.105 Python/2.7.16rc1 Linux/4.19.0-kali3-amd64 Botocore/1.12.105]", "awsRegion": "us-west-2", "errorCode": "NoSuchBucketPolicy", "errorMessage": "The bucket policy does not exist", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"host": ["config-bucket-e11723be76de.s3.us-west-2.amazonaws.com"], "bucketName": "config-bucket-e11723be76de", "policy": [""]}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "f9dd2d16-84b8-46de-8245-cbcbae4302af", "record_id": "flaws_cloudtrail:0000178:f9dd2d16-84b8-46de-8245-cbcbae4302af", "row_index": 178, "timestamp": "2019-03-01T00:22:11Z", "event_type": "GetBucketLogging", "event_source": "s3.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "155.251.168.5", "user_agent": "[Boto3/1.9.105 Python/2.7.16rc1 Linux/4.19.0-kali3-amd64 Botocore/1.12.105]", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 910, "raw_record_depth": 3, "raw_record_top_level_keys": ["additionalEventData", "awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "f9dd2d16-84b8-46de-8245-cbcbae4302af", "eventTime": "2019-03-01T00:22:11Z", "eventName": "GetBucketLogging", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "155.251.168.5", "userAgent": "[Boto3/1.9.105 Python/2.7.16rc1 Linux/4.19.0-kali3-amd64 Botocore/1.12.105]", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"host": ["s3.us-west-2.amazonaws.com"], "logging": [""], "bucketName": "level3-2644b9e749c3d14e400f847199800c14.flaws.cloud"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "9e45621-6c2e-4fac-8cf6-fcdd2e97768", "record_id": "flaws_cloudtrail:0000179:9e45621-6c2e-4fac-8cf6-fcdd2e97768", "row_index": 179, "timestamp": "2019-03-01T00:22:11Z", "event_type": "GetBucketAcl", "event_source": "s3.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "155.251.168.5", "user_agent": "[Boto3/1.9.105 Python/2.7.16rc1 Linux/4.19.0-kali3-amd64 Botocore/1.12.105]", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 870, "raw_record_depth": 3, "raw_record_top_level_keys": ["additionalEventData", "awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "9e45621-6c2e-4fac-8cf6-fcdd2e97768", "eventTime": "2019-03-01T00:22:11Z", "eventName": "GetBucketAcl", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "155.251.168.5", "userAgent": "[Boto3/1.9.105 Python/2.7.16rc1 Linux/4.19.0-kali3-amd64 Botocore/1.12.105]", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"host": ["flaws-logs.s3.us-west-2.amazonaws.com"], "bucketName": "flaws-logs", "acl": [""]}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "f366365e5-3fb1-4fe6-adc0-f9655a02fe20", "record_id": "flaws_cloudtrail:0000180:f366365e5-3fb1-4fe6-adc0-f9655a02fe20", "row_index": 180, "timestamp": "2019-03-01T00:22:11Z", "event_type": "GetBucketLogging", "event_source": "s3.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "155.251.168.5", "user_agent": "[Boto3/1.9.105 Python/2.7.16rc1 Linux/4.19.0-kali3-amd64 Botocore/1.12.105]", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 912, "raw_record_depth": 3, "raw_record_top_level_keys": ["additionalEventData", "awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "f366365e5-3fb1-4fe6-adc0-f9655a02fe20", "eventTime": "2019-03-01T00:22:11Z", "eventName": "GetBucketLogging", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "155.251.168.5", "userAgent": "[Boto3/1.9.105 Python/2.7.16rc1 Linux/4.19.0-kali3-amd64 Botocore/1.12.105]", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"host": ["s3.us-west-2.amazonaws.com"], "logging": [""], "bucketName": "level6-588e81908c84e62a6dd8202d535469dd.flaws.cloud"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "34217c-df24-4ef6-bbe5-2767e806100", "record_id": "flaws_cloudtrail:0000181:34217c-df24-4ef6-bbe5-2767e806100", "row_index": 181, "timestamp": "2019-03-01T00:22:11Z", "event_type": "GetBucketEncryption", "event_source": "s3.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "155.251.168.5", "user_agent": "[Boto3/1.9.105 Python/2.7.16rc1 Linux/4.19.0-kali3-amd64 Botocore/1.12.105]", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1042, "raw_record_depth": 3, "raw_record_top_level_keys": ["additionalEventData", "awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "34217c-df24-4ef6-bbe5-2767e806100", "eventTime": "2019-03-01T00:22:11Z", "eventName": "GetBucketEncryption", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "155.251.168.5", "userAgent": "[Boto3/1.9.105 Python/2.7.16rc1 Linux/4.19.0-kali3-amd64 Botocore/1.12.105]", "awsRegion": "us-west-2", "errorCode": "ServerSideEncryptionConfigurationNotFoundError", "errorMessage": "The server side encryption configuration was not found", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"encryption": [""], "host": ["s3.us-west-2.amazonaws.com"], "bucketName": "level3-2644b9e749c3d14e400f847199800c14.flaws.cloud"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "bbc9b7b6-f0bd-4364-9a30-346b69a0b1ac", "record_id": "flaws_cloudtrail:0000182:bbc9b7b6-f0bd-4364-9a30-346b69a0b1ac", "row_index": 182, "timestamp": "2019-03-01T00:22:11Z", "event_type": "GetBucketPolicy", "event_source": "s3.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "155.251.168.5", "user_agent": "[Boto3/1.9.105 Python/2.7.16rc1 Linux/4.19.0-kali3-amd64 Botocore/1.12.105]", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 878, "raw_record_depth": 3, "raw_record_top_level_keys": ["additionalEventData", "awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "bbc9b7b6-f0bd-4364-9a30-346b69a0b1ac", "eventTime": "2019-03-01T00:22:11Z", "eventName": "GetBucketPolicy", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "155.251.168.5", "userAgent": "[Boto3/1.9.105 Python/2.7.16rc1 Linux/4.19.0-kali3-amd64 Botocore/1.12.105]", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"host": ["flaws-logs.s3.us-west-2.amazonaws.com"], "bucketName": "flaws-logs", "policy": [""]}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "0811f369-7e72-4871-bb29-c651b3b5fb02", "record_id": "flaws_cloudtrail:0000183:0811f369-7e72-4871-bb29-c651b3b5fb02", "row_index": 183, "timestamp": "2019-03-01T00:22:11Z", "event_type": "GetBucketEncryption", "event_source": "s3.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "155.251.168.5", "user_agent": "[Boto3/1.9.105 Python/2.7.16rc1 Linux/4.19.0-kali3-amd64 Botocore/1.12.105]", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1049, "raw_record_depth": 3, "raw_record_top_level_keys": ["additionalEventData", "awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "0811f369-7e72-4871-bb29-c651b3b5fb02", "eventTime": "2019-03-01T00:22:11Z", "eventName": "GetBucketEncryption", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "155.251.168.5", "userAgent": "[Boto3/1.9.105 Python/2.7.16rc1 Linux/4.19.0-kali3-amd64 Botocore/1.12.105]", "awsRegion": "us-west-2", "errorCode": "ServerSideEncryptionConfigurationNotFoundError", "errorMessage": "The server side encryption configuration was not found", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"encryption": [""], "host": ["s3.us-west-2.amazonaws.com"], "bucketName": "level5-8dbc21dbbd6129208d054061ef063f04.flaws.cloud"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "d513e71e-83c7-445a-89e8-2aaea8d876682", "record_id": "flaws_cloudtrail:0000184:d513e71e-83c7-445a-89e8-2aaea8d876682", "row_index": 184, "timestamp": "2019-03-01T00:22:11Z", "event_type": "GetBucketEncryption", "event_source": "s3.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "155.251.168.5", "user_agent": "[Boto3/1.9.105 Python/2.7.16rc1 Linux/4.19.0-kali3-amd64 Botocore/1.12.105]", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1050, "raw_record_depth": 3, "raw_record_top_level_keys": ["additionalEventData", "awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "d513e71e-83c7-445a-89e8-2aaea8d876682", "eventTime": "2019-03-01T00:22:11Z", "eventName": "GetBucketEncryption", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "155.251.168.5", "userAgent": "[Boto3/1.9.105 Python/2.7.16rc1 Linux/4.19.0-kali3-amd64 Botocore/1.12.105]", "awsRegion": "us-west-2", "errorCode": "ServerSideEncryptionConfigurationNotFoundError", "errorMessage": "The server side encryption configuration was not found", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"encryption": [""], "host": ["s3.us-west-2.amazonaws.com"], "bucketName": "level6-588e81908c84e62a6dd8202d535469dd.flaws.cloud"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "3cd5b758-6b70-4cab-9e2d-2d01c0679936", "record_id": "flaws_cloudtrail:0000185:3cd5b758-6b70-4cab-9e2d-2d01c0679936", "row_index": 185, "timestamp": "2019-03-01T00:22:11Z", "event_type": "GetBucketLogging", "event_source": "s3.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "155.251.168.5", "user_agent": "[Boto3/1.9.105 Python/2.7.16rc1 Linux/4.19.0-kali3-amd64 Botocore/1.12.105]", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 880, "raw_record_depth": 3, "raw_record_top_level_keys": ["additionalEventData", "awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "3cd5b758-6b70-4cab-9e2d-2d01c0679936", "eventTime": "2019-03-01T00:22:11Z", "eventName": "GetBucketLogging", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "155.251.168.5", "userAgent": "[Boto3/1.9.105 Python/2.7.16rc1 Linux/4.19.0-kali3-amd64 Botocore/1.12.105]", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"host": ["flaws-logs.s3.us-west-2.amazonaws.com"], "logging": [""], "bucketName": "flaws-logs"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "945340ad-28e4-4aae-b357-d08724f6b5cb", "record_id": "flaws_cloudtrail:0000186:945340ad-28e4-4aae-b357-d08724f6b5cb", "row_index": 186, "timestamp": "2019-03-01T00:22:11Z", "event_type": "GetBucketVersioning", "event_source": "s3.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "155.251.168.5", "user_agent": "[Boto3/1.9.105 Python/2.7.16rc1 Linux/4.19.0-kali3-amd64 Botocore/1.12.105]", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 886, "raw_record_depth": 3, "raw_record_top_level_keys": ["additionalEventData", "awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "945340ad-28e4-4aae-b357-d08724f6b5cb", "eventTime": "2019-03-01T00:22:11Z", "eventName": "GetBucketVersioning", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "155.251.168.5", "userAgent": "[Boto3/1.9.105 Python/2.7.16rc1 Linux/4.19.0-kali3-amd64 Botocore/1.12.105]", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"host": ["flaws-logs.s3.us-west-2.amazonaws.com"], "bucketName": "flaws-logs", "versioning": [""]}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "ec224a3e-1236-4123-8198-7c111f94cb7f", "record_id": "flaws_cloudtrail:0000187:ec224a3e-1236-4123-8198-7c111f94cb7f", "row_index": 187, "timestamp": "2019-03-01T00:22:11Z", "event_type": "GetBucketAcl", "event_source": "s3.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "155.251.168.5", "user_agent": "[Boto3/1.9.105 Python/2.7.16rc1 Linux/4.19.0-kali3-amd64 Botocore/1.12.105]", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 904, "raw_record_depth": 3, "raw_record_top_level_keys": ["additionalEventData", "awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "ec224a3e-1236-4123-8198-7c111f94cb7f", "eventTime": "2019-03-01T00:22:11Z", "eventName": "GetBucketAcl", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "155.251.168.5", "userAgent": "[Boto3/1.9.105 Python/2.7.16rc1 Linux/4.19.0-kali3-amd64 Botocore/1.12.105]", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"host": ["config-bucket-e11723be76de.s3.us-west-2.amazonaws.com"], "bucketName": "config-bucket-e11723be76de", "acl": [""]}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "4b6cc3fd-0660-41a9-a932-809890c8d9e92", "record_id": "flaws_cloudtrail:0000188:4b6cc3fd-0660-41a9-a932-809890c8d9e92", "row_index": 188, "timestamp": "2019-03-01T00:22:11Z", "event_type": "GetBucketLogging", "event_source": "s3.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "155.251.168.5", "user_agent": "[Boto3/1.9.105 Python/2.7.16rc1 Linux/4.19.0-kali3-amd64 Botocore/1.12.105]", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 911, "raw_record_depth": 3, "raw_record_top_level_keys": ["additionalEventData", "awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "4b6cc3fd-0660-41a9-a932-809890c8d9e92", "eventTime": "2019-03-01T00:22:11Z", "eventName": "GetBucketLogging", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "155.251.168.5", "userAgent": "[Boto3/1.9.105 Python/2.7.16rc1 Linux/4.19.0-kali3-amd64 Botocore/1.12.105]", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"host": ["s3.us-west-2.amazonaws.com"], "logging": [""], "bucketName": "level2-295510a051f3fcd006ae345973478972.flaws.cloud"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "e4c38fbc-a19b-4fe1-8d4f-1fd711faaade", "record_id": "flaws_cloudtrail:0000189:e4c38fbc-a19b-4fe1-8d4f-1fd711faaade", "row_index": 189, "timestamp": "2019-03-01T00:22:11Z", "event_type": "GetBucketPolicy", "event_source": "s3.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "155.251.168.5", "user_agent": "[Boto3/1.9.105 Python/2.7.16rc1 Linux/4.19.0-kali3-amd64 Botocore/1.12.105]", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 908, "raw_record_depth": 3, "raw_record_top_level_keys": ["additionalEventData", "awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "e4c38fbc-a19b-4fe1-8d4f-1fd711faaade", "eventTime": "2019-03-01T00:22:11Z", "eventName": "GetBucketPolicy", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "155.251.168.5", "userAgent": "[Boto3/1.9.105 Python/2.7.16rc1 Linux/4.19.0-kali3-amd64 Botocore/1.12.105]", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"host": ["s3.us-west-2.amazonaws.com"], "bucketName": "level4-974134b52e7c35aebcc4b45f19113936.flaws.cloud", "policy": [""]}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "84d89fdc-d83a-4053-93bf-67aca2c6fb73", "record_id": "flaws_cloudtrail:0000190:84d89fdc-d83a-4053-93bf-67aca2c6fb73", "row_index": 190, "timestamp": "2019-03-01T00:22:11Z", "event_type": "GetBucketWebsite", "event_source": "s3.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "155.251.168.5", "user_agent": "[Boto3/1.9.105 Python/2.7.16rc1 Linux/4.19.0-kali3-amd64 Botocore/1.12.105]", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 997, "raw_record_depth": 3, "raw_record_top_level_keys": ["additionalEventData", "awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "84d89fdc-d83a-4053-93bf-67aca2c6fb73", "eventTime": "2019-03-01T00:22:11Z", "eventName": "GetBucketWebsite", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "155.251.168.5", "userAgent": "[Boto3/1.9.105 Python/2.7.16rc1 Linux/4.19.0-kali3-amd64 Botocore/1.12.105]", "awsRegion": "us-west-2", "errorCode": "NoSuchWebsiteConfiguration", "errorMessage": "The specified bucket does not have a website configuration", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"host": ["flaws-logs.s3.us-west-2.amazonaws.com"], "bucketName": "flaws-logs", "website": [""]}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "d85c6056-4840-436c-9f0d-7e1d3ccc6da1", "record_id": "flaws_cloudtrail:0000191:d85c6056-4840-436c-9f0d-7e1d3ccc6da1", "row_index": 191, "timestamp": "2019-03-01T00:22:11Z", "event_type": "GetBucketPolicy", "event_source": "s3.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "155.251.168.5", "user_agent": "[Boto3/1.9.105 Python/2.7.16rc1 Linux/4.19.0-kali3-amd64 Botocore/1.12.105]", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 908, "raw_record_depth": 3, "raw_record_top_level_keys": ["additionalEventData", "awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "d85c6056-4840-436c-9f0d-7e1d3ccc6da1", "eventTime": "2019-03-01T00:22:11Z", "eventName": "GetBucketPolicy", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "155.251.168.5", "userAgent": "[Boto3/1.9.105 Python/2.7.16rc1 Linux/4.19.0-kali3-amd64 Botocore/1.12.105]", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"host": ["s3.us-west-2.amazonaws.com"], "bucketName": "b5677c799b465420d8e7b0a6689a0bb0c4afbc9e.flaws.cloud", "policy": [""]}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "d5743ecc-8d4e-49e9-80d9-9378c9a20c3a", "record_id": "flaws_cloudtrail:0000192:d5743ecc-8d4e-49e9-80d9-9378c9a20c3a", "row_index": 192, "timestamp": "2019-03-01T00:22:11Z", "event_type": "GetBucketAcl", "event_source": "s3.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "155.251.168.5", "user_agent": "[Boto3/1.9.105 Python/2.7.16rc1 Linux/4.19.0-kali3-amd64 Botocore/1.12.105]", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 902, "raw_record_depth": 3, "raw_record_top_level_keys": ["additionalEventData", "awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "d5743ecc-8d4e-49e9-80d9-9378c9a20c3a", "eventTime": "2019-03-01T00:22:11Z", "eventName": "GetBucketAcl", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "155.251.168.5", "userAgent": "[Boto3/1.9.105 Python/2.7.16rc1 Linux/4.19.0-kali3-amd64 Botocore/1.12.105]", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"host": ["s3.us-west-2.amazonaws.com"], "bucketName": "level4-974134b52e7c35aebcc4b45f19113936.flaws.cloud", "acl": [""]}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "90d05a44-60aa-4f2e-a2c6-ca05ca7b559b", "record_id": "flaws_cloudtrail:0000193:90d05a44-60aa-4f2e-a2c6-ca05ca7b559b", "row_index": 193, "timestamp": "2019-03-01T00:22:11Z", "event_type": "GetBucketEncryption", "event_source": "s3.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "155.251.168.5", "user_agent": "[Boto3/1.9.105 Python/2.7.16rc1 Linux/4.19.0-kali3-amd64 Botocore/1.12.105]", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1049, "raw_record_depth": 3, "raw_record_top_level_keys": ["additionalEventData", "awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "90d05a44-60aa-4f2e-a2c6-ca05ca7b559b", "eventTime": "2019-03-01T00:22:11Z", "eventName": "GetBucketEncryption", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "155.251.168.5", "userAgent": "[Boto3/1.9.105 Python/2.7.16rc1 Linux/4.19.0-kali3-amd64 Botocore/1.12.105]", "awsRegion": "us-west-2", "errorCode": "ServerSideEncryptionConfigurationNotFoundError", "errorMessage": "The server side encryption configuration was not found", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"encryption": [""], "host": ["s3.us-west-2.amazonaws.com"], "bucketName": "theend-c1aad500c62e2a57cf12cebf93b282cf.flaws.cloud"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "50b8b67b-0b25-43dc-b2dc-d2f645f9fca6", "record_id": "flaws_cloudtrail:0000194:50b8b67b-0b25-43dc-b2dc-d2f645f9fca6", "row_index": 194, "timestamp": "2019-03-01T00:22:11Z", "event_type": "GetBucketVersioning", "event_source": "s3.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "155.251.168.5", "user_agent": "[Boto3/1.9.105 Python/2.7.16rc1 Linux/4.19.0-kali3-amd64 Botocore/1.12.105]", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 914, "raw_record_depth": 3, "raw_record_top_level_keys": ["additionalEventData", "awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "50b8b67b-0b25-43dc-b2dc-d2f645f9fca6", "eventTime": "2019-03-01T00:22:11Z", "eventName": "GetBucketVersioning", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "155.251.168.5", "userAgent": "[Boto3/1.9.105 Python/2.7.16rc1 Linux/4.19.0-kali3-amd64 Botocore/1.12.105]", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"host": ["s3.us-west-2.amazonaws.com"], "bucketName": "level3-2644b9e749c3d14e400f847199800c14.flaws.cloud", "versioning": [""]}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "1bb80cae-a09e-4bdb-b35d-48141c6e86b7", "record_id": "flaws_cloudtrail:0000195:1bb80cae-a09e-4bdb-b35d-48141c6e86b7", "row_index": 195, "timestamp": "2019-03-01T00:22:11Z", "event_type": "GetBucketVersioning", "event_source": "s3.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "155.251.168.5", "user_agent": "[Boto3/1.9.105 Python/2.7.16rc1 Linux/4.19.0-kali3-amd64 Botocore/1.12.105]", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 916, "raw_record_depth": 3, "raw_record_top_level_keys": ["additionalEventData", "awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "1bb80cae-a09e-4bdb-b35d-48141c6e86b7", "eventTime": "2019-03-01T00:22:11Z", "eventName": "GetBucketVersioning", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "155.251.168.5", "userAgent": "[Boto3/1.9.105 Python/2.7.16rc1 Linux/4.19.0-kali3-amd64 Botocore/1.12.105]", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"host": ["s3.us-west-2.amazonaws.com"], "bucketName": "level6-588e81908c84e62a6dd8202d535469dd.flaws.cloud", "versioning": [""]}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "49998-6f21-40a1-a357-85dcb1582be1", "record_id": "flaws_cloudtrail:0000196:49998-6f21-40a1-a357-85dcb1582be1", "row_index": 196, "timestamp": "2019-03-01T00:22:11Z", "event_type": "GetBucketAcl", "event_source": "s3.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "155.251.168.5", "user_agent": "[Boto3/1.9.105 Python/2.7.16rc1 Linux/4.19.0-kali3-amd64 Botocore/1.12.105]", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 899, "raw_record_depth": 3, "raw_record_top_level_keys": ["additionalEventData", "awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "49998-6f21-40a1-a357-85dcb1582be1", "eventTime": "2019-03-01T00:22:11Z", "eventName": "GetBucketAcl", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "155.251.168.5", "userAgent": "[Boto3/1.9.105 Python/2.7.16rc1 Linux/4.19.0-kali3-amd64 Botocore/1.12.105]", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"host": ["s3.us-west-2.amazonaws.com"], "bucketName": "level3-2644b9e749c3d14e400f847199800c14.flaws.cloud", "acl": [""]}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "48e89d21-1471-480d-89a8-bf145843d1a69", "record_id": "flaws_cloudtrail:0000197:48e89d21-1471-480d-89a8-bf145843d1a69", "row_index": 197, "timestamp": "2019-03-01T00:22:11Z", "event_type": "GetBucketPolicy", "event_source": "s3.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "155.251.168.5", "user_agent": "[Boto3/1.9.105 Python/2.7.16rc1 Linux/4.19.0-kali3-amd64 Botocore/1.12.105]", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 869, "raw_record_depth": 3, "raw_record_top_level_keys": ["additionalEventData", "awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "48e89d21-1471-480d-89a8-bf145843d1a69", "eventTime": "2019-03-01T00:22:11Z", "eventName": "GetBucketPolicy", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "155.251.168.5", "userAgent": "[Boto3/1.9.105 Python/2.7.16rc1 Linux/4.19.0-kali3-amd64 Botocore/1.12.105]", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"host": ["s3.us-west-2.amazonaws.com"], "bucketName": "flaws.cloud", "policy": [""]}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "51b71ce6-4f8b-481f-832b-1363b7df9164", "record_id": "flaws_cloudtrail:0000198:51b71ce6-4f8b-481f-832b-1363b7df9164", "row_index": 198, "timestamp": "2019-03-01T00:22:11Z", "event_type": "GetBucketWebsite", "event_source": "s3.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "155.251.168.5", "user_agent": "[Boto3/1.9.105 Python/2.7.16rc1 Linux/4.19.0-kali3-amd64 Botocore/1.12.105]", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 910, "raw_record_depth": 3, "raw_record_top_level_keys": ["additionalEventData", "awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "51b71ce6-4f8b-481f-832b-1363b7df9164", "eventTime": "2019-03-01T00:22:11Z", "eventName": "GetBucketWebsite", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "155.251.168.5", "userAgent": "[Boto3/1.9.105 Python/2.7.16rc1 Linux/4.19.0-kali3-amd64 Botocore/1.12.105]", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"host": ["s3.us-west-2.amazonaws.com"], "bucketName": "level6-588e81908c84e62a6dd8202d535469dd.flaws.cloud", "website": [""]}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "bdd753457-42c0-4391-b45f-cb371343a2f8", "record_id": "flaws_cloudtrail:0000199:bdd753457-42c0-4391-b45f-cb371343a2f8", "row_index": 199, "timestamp": "2019-03-01T00:22:11Z", "event_type": "GetBucketVersioning", "event_source": "s3.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "155.251.168.5", "user_agent": "[Boto3/1.9.105 Python/2.7.16rc1 Linux/4.19.0-kali3-amd64 Botocore/1.12.105]", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 917, "raw_record_depth": 3, "raw_record_top_level_keys": ["additionalEventData", "awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "bdd753457-42c0-4391-b45f-cb371343a2f8", "eventTime": "2019-03-01T00:22:11Z", "eventName": "GetBucketVersioning", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "155.251.168.5", "userAgent": "[Boto3/1.9.105 Python/2.7.16rc1 Linux/4.19.0-kali3-amd64 Botocore/1.12.105]", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"host": ["s3.us-west-2.amazonaws.com"], "bucketName": "level5-8dbc21dbbd6129208d054061ef063f04.flaws.cloud", "versioning": [""]}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "d7a0d86b-c00b-4a45-8df9-01ee911602db", "record_id": "flaws_cloudtrail:0000200:d7a0d86b-c00b-4a45-8df9-01ee911602db", "row_index": 200, "timestamp": "2019-03-01T00:22:11Z", "event_type": "GetBucketPolicy", "event_source": "s3.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "155.251.168.5", "user_agent": "[Boto3/1.9.105 Python/2.7.16rc1 Linux/4.19.0-kali3-amd64 Botocore/1.12.105]", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 909, "raw_record_depth": 3, "raw_record_top_level_keys": ["additionalEventData", "awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "d7a0d86b-c00b-4a45-8df9-01ee911602db", "eventTime": "2019-03-01T00:22:11Z", "eventName": "GetBucketPolicy", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "155.251.168.5", "userAgent": "[Boto3/1.9.105 Python/2.7.16rc1 Linux/4.19.0-kali3-amd64 Botocore/1.12.105]", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"host": ["s3.us-west-2.amazonaws.com"], "bucketName": "level3-2644b9e749c3d14e400f847199800c14.flaws.cloud", "policy": [""]}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "7b87c55c-4396-496e-8bf1-ac4aef05d496", "record_id": "flaws_cloudtrail:0000201:7b87c55c-4396-496e-8bf1-ac4aef05d496", "row_index": 201, "timestamp": "2019-03-01T00:22:11Z", "event_type": "GetBucketVersioning", "event_source": "s3.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "155.251.168.5", "user_agent": "[Boto3/1.9.105 Python/2.7.16rc1 Linux/4.19.0-kali3-amd64 Botocore/1.12.105]", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 918, "raw_record_depth": 3, "raw_record_top_level_keys": ["additionalEventData", "awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "7b87c55c-4396-496e-8bf1-ac4aef05d496", "eventTime": "2019-03-01T00:22:11Z", "eventName": "GetBucketVersioning", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "155.251.168.5", "userAgent": "[Boto3/1.9.105 Python/2.7.16rc1 Linux/4.19.0-kali3-amd64 Botocore/1.12.105]", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"host": ["config-bucket-e11723be76de.s3.us-west-2.amazonaws.com"], "bucketName": "config-bucket-e11723be76de", "versioning": [""]}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "4dd194316-5323-4d75-b467-2fd74ef577d7", "record_id": "flaws_cloudtrail:0000202:4dd194316-5323-4d75-b467-2fd74ef577d7", "row_index": 202, "timestamp": "2019-03-01T00:22:11Z", "event_type": "GetBucketWebsite", "event_source": "s3.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "155.251.168.5", "user_agent": "[Boto3/1.9.105 Python/2.7.16rc1 Linux/4.19.0-kali3-amd64 Botocore/1.12.105]", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 871, "raw_record_depth": 3, "raw_record_top_level_keys": ["additionalEventData", "awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "4dd194316-5323-4d75-b467-2fd74ef577d7", "eventTime": "2019-03-01T00:22:11Z", "eventName": "GetBucketWebsite", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "155.251.168.5", "userAgent": "[Boto3/1.9.105 Python/2.7.16rc1 Linux/4.19.0-kali3-amd64 Botocore/1.12.105]", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"host": ["s3.us-west-2.amazonaws.com"], "bucketName": "flaws.cloud", "website": [""]}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "a4796a5f-e7e2-44c3-a8db-a7063958ead7", "record_id": "flaws_cloudtrail:0000203:a4796a5f-e7e2-44c3-a8db-a7063958ead7", "row_index": 203, "timestamp": "2019-03-01T00:22:11Z", "event_type": "GetBucketAcl", "event_source": "s3.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "155.251.168.5", "user_agent": "[Boto3/1.9.105 Python/2.7.16rc1 Linux/4.19.0-kali3-amd64 Botocore/1.12.105]", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 902, "raw_record_depth": 3, "raw_record_top_level_keys": ["additionalEventData", "awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "a4796a5f-e7e2-44c3-a8db-a7063958ead7", "eventTime": "2019-03-01T00:22:11Z", "eventName": "GetBucketAcl", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "155.251.168.5", "userAgent": "[Boto3/1.9.105 Python/2.7.16rc1 Linux/4.19.0-kali3-amd64 Botocore/1.12.105]", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"host": ["s3.us-west-2.amazonaws.com"], "bucketName": "level5-8dbc21dbbd6129208d054061ef063f04.flaws.cloud", "acl": [""]}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "bc62810-f741-4f0c-a763-9f091539ba897", "record_id": "flaws_cloudtrail:0000204:bc62810-f741-4f0c-a763-9f091539ba897", "row_index": 204, "timestamp": "2019-03-01T00:22:11Z", "event_type": "GetBucketEncryption", "event_source": "s3.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "155.251.168.5", "user_agent": "[Boto3/1.9.105 Python/2.7.16rc1 Linux/4.19.0-kali3-amd64 Botocore/1.12.105]", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1019, "raw_record_depth": 3, "raw_record_top_level_keys": ["additionalEventData", "awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "bc62810-f741-4f0c-a763-9f091539ba897", "eventTime": "2019-03-01T00:22:11Z", "eventName": "GetBucketEncryption", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "155.251.168.5", "userAgent": "[Boto3/1.9.105 Python/2.7.16rc1 Linux/4.19.0-kali3-amd64 Botocore/1.12.105]", "awsRegion": "us-west-2", "errorCode": "ServerSideEncryptionConfigurationNotFoundError", "errorMessage": "The server side encryption configuration was not found", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"encryption": [""], "host": ["flaws-logs.s3.us-west-2.amazonaws.com"], "bucketName": "flaws-logs"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "45414a-3039-4dbf-9fc7-ecf43aae13b8", "record_id": "flaws_cloudtrail:0000205:45414a-3039-4dbf-9fc7-ecf43aae13b8", "row_index": 205, "timestamp": "2019-03-01T00:22:11Z", "event_type": "GetBucketAcl", "event_source": "s3.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "155.251.168.5", "user_agent": "[Boto3/1.9.105 Python/2.7.16rc1 Linux/4.19.0-kali3-amd64 Botocore/1.12.105]", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 900, "raw_record_depth": 3, "raw_record_top_level_keys": ["additionalEventData", "awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "45414a-3039-4dbf-9fc7-ecf43aae13b8", "eventTime": "2019-03-01T00:22:11Z", "eventName": "GetBucketAcl", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "155.251.168.5", "userAgent": "[Boto3/1.9.105 Python/2.7.16rc1 Linux/4.19.0-kali3-amd64 Botocore/1.12.105]", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"host": ["s3.us-west-2.amazonaws.com"], "bucketName": "level6-588e81908c84e62a6dd8202d535469dd.flaws.cloud", "acl": [""]}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "6d106369b-f201-4450-b615-d9ce1f2366a8", "record_id": "flaws_cloudtrail:0000206:6d106369b-f201-4450-b615-d9ce1f2366a8", "row_index": 206, "timestamp": "2019-03-01T00:22:11Z", "event_type": "GetBucketAcl", "event_source": "s3.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "155.251.168.5", "user_agent": "[Boto3/1.9.105 Python/2.7.16rc1 Linux/4.19.0-kali3-amd64 Botocore/1.12.105]", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 863, "raw_record_depth": 3, "raw_record_top_level_keys": ["additionalEventData", "awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "6d106369b-f201-4450-b615-d9ce1f2366a8", "eventTime": "2019-03-01T00:22:11Z", "eventName": "GetBucketAcl", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "155.251.168.5", "userAgent": "[Boto3/1.9.105 Python/2.7.16rc1 Linux/4.19.0-kali3-amd64 Botocore/1.12.105]", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"host": ["s3.us-west-2.amazonaws.com"], "bucketName": "flaws.cloud", "acl": [""]}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "564241fd-0b7a-4aa3-ae4e-41cf30be6c6a", "record_id": "flaws_cloudtrail:0000207:564241fd-0b7a-4aa3-ae4e-41cf30be6c6a", "row_index": 207, "timestamp": "2019-03-01T00:22:11Z", "event_type": "GetBucketAcl", "event_source": "s3.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "155.251.168.5", "user_agent": "[Boto3/1.9.105 Python/2.7.16rc1 Linux/4.19.0-kali3-amd64 Botocore/1.12.105]", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 898, "raw_record_depth": 3, "raw_record_top_level_keys": ["additionalEventData", "awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "564241fd-0b7a-4aa3-ae4e-41cf30be6c6a", "eventTime": "2019-03-01T00:22:11Z", "eventName": "GetBucketAcl", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "155.251.168.5", "userAgent": "[Boto3/1.9.105 Python/2.7.16rc1 Linux/4.19.0-kali3-amd64 Botocore/1.12.105]", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"host": ["s3.us-west-2.amazonaws.com"], "bucketName": "theend-c1aad500c62e2a57cf12cebf93b282cf.flaws.cloud", "acl": [""]}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "f1253d3b-b20b-470b-85cc-7f1d1e4dd279", "record_id": "flaws_cloudtrail:0000208:f1253d3b-b20b-470b-85cc-7f1d1e4dd279", "row_index": 208, "timestamp": "2019-03-01T00:22:11Z", "event_type": "GetBucketWebsite", "event_source": "s3.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "155.251.168.5", "user_agent": "[Boto3/1.9.105 Python/2.7.16rc1 Linux/4.19.0-kali3-amd64 Botocore/1.12.105]", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1028, "raw_record_depth": 3, "raw_record_top_level_keys": ["additionalEventData", "awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "f1253d3b-b20b-470b-85cc-7f1d1e4dd279", "eventTime": "2019-03-01T00:22:11Z", "eventName": "GetBucketWebsite", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "155.251.168.5", "userAgent": "[Boto3/1.9.105 Python/2.7.16rc1 Linux/4.19.0-kali3-amd64 Botocore/1.12.105]", "awsRegion": "us-west-2", "errorCode": "NoSuchWebsiteConfiguration", "errorMessage": "The specified bucket does not have a website configuration", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"host": ["config-bucket-e11723be76de.s3.us-west-2.amazonaws.com"], "bucketName": "config-bucket-e11723be76de", "website": [""]}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "5202d203-171c-48a2-aa92-f17887dc946b", "record_id": "flaws_cloudtrail:0000209:5202d203-171c-48a2-aa92-f17887dc946b", "row_index": 209, "timestamp": "2019-03-01T00:22:11Z", "event_type": "GetBucketAcl", "event_source": "s3.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "155.251.168.5", "user_agent": "[Boto3/1.9.105 Python/2.7.16rc1 Linux/4.19.0-kali3-amd64 Botocore/1.12.105]", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 903, "raw_record_depth": 3, "raw_record_top_level_keys": ["additionalEventData", "awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "5202d203-171c-48a2-aa92-f17887dc946b", "eventTime": "2019-03-01T00:22:11Z", "eventName": "GetBucketAcl", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "155.251.168.5", "userAgent": "[Boto3/1.9.105 Python/2.7.16rc1 Linux/4.19.0-kali3-amd64 Botocore/1.12.105]", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"host": ["s3.us-west-2.amazonaws.com"], "bucketName": "b5677c799b465420d8e7b0a6689a0bb0c4afbc9e.flaws.cloud", "acl": [""]}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "3c243c4c-184c-485b-b465-53d645e8f3ac", "record_id": "flaws_cloudtrail:0000210:3c243c4c-184c-485b-b465-53d645e8f3ac", "row_index": 210, "timestamp": "2019-03-01T00:22:11Z", "event_type": "GetBucketPolicy", "event_source": "s3.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "155.251.168.5", "user_agent": "[Boto3/1.9.105 Python/2.7.16rc1 Linux/4.19.0-kali3-amd64 Botocore/1.12.105]", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 907, "raw_record_depth": 3, "raw_record_top_level_keys": ["additionalEventData", "awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "3c243c4c-184c-485b-b465-53d645e8f3ac", "eventTime": "2019-03-01T00:22:11Z", "eventName": "GetBucketPolicy", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "155.251.168.5", "userAgent": "[Boto3/1.9.105 Python/2.7.16rc1 Linux/4.19.0-kali3-amd64 Botocore/1.12.105]", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"host": ["s3.us-west-2.amazonaws.com"], "bucketName": "level5-8dbc21dbbd6129208d054061ef063f04.flaws.cloud", "policy": [""]}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "0c5bef02-2312-43ec-8df5-6b692af12db0", "record_id": "flaws_cloudtrail:0000211:0c5bef02-2312-43ec-8df5-6b692af12db0", "row_index": 211, "timestamp": "2019-03-01T00:22:11Z", "event_type": "GetBucketLogging", "event_source": "s3.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "155.251.168.5", "user_agent": "[Boto3/1.9.105 Python/2.7.16rc1 Linux/4.19.0-kali3-amd64 Botocore/1.12.105]", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 870, "raw_record_depth": 3, "raw_record_top_level_keys": ["additionalEventData", "awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "0c5bef02-2312-43ec-8df5-6b692af12db0", "eventTime": "2019-03-01T00:22:11Z", "eventName": "GetBucketLogging", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "155.251.168.5", "userAgent": "[Boto3/1.9.105 Python/2.7.16rc1 Linux/4.19.0-kali3-amd64 Botocore/1.12.105]", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"host": ["s3.us-west-2.amazonaws.com"], "logging": [""], "bucketName": "flaws.cloud"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "23db67f7-97a0-44a1-8555-a15ac2df0416", "record_id": "flaws_cloudtrail:0000212:23db67f7-97a0-44a1-8555-a15ac2df0416", "row_index": 212, "timestamp": "2019-03-01T00:22:11Z", "event_type": "GetBucketVersioning", "event_source": "s3.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "155.251.168.5", "user_agent": "[Boto3/1.9.105 Python/2.7.16rc1 Linux/4.19.0-kali3-amd64 Botocore/1.12.105]", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 917, "raw_record_depth": 3, "raw_record_top_level_keys": ["additionalEventData", "awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "23db67f7-97a0-44a1-8555-a15ac2df0416", "eventTime": "2019-03-01T00:22:11Z", "eventName": "GetBucketVersioning", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "155.251.168.5", "userAgent": "[Boto3/1.9.105 Python/2.7.16rc1 Linux/4.19.0-kali3-amd64 Botocore/1.12.105]", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"host": ["s3.us-west-2.amazonaws.com"], "bucketName": "b5677c799b465420d8e7b0a6689a0bb0c4afbc9e.flaws.cloud", "versioning": [""]}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "2367a9d5-a0cb-4d8b-8091-b102a1af1275", "record_id": "flaws_cloudtrail:0000213:2367a9d5-a0cb-4d8b-8091-b102a1af1275", "row_index": 213, "timestamp": "2019-03-01T00:22:11Z", "event_type": "GetBucketVersioning", "event_source": "s3.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "155.251.168.5", "user_agent": "[Boto3/1.9.105 Python/2.7.16rc1 Linux/4.19.0-kali3-amd64 Botocore/1.12.105]", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 913, "raw_record_depth": 3, "raw_record_top_level_keys": ["additionalEventData", "awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "2367a9d5-a0cb-4d8b-8091-b102a1af1275", "eventTime": "2019-03-01T00:22:11Z", "eventName": "GetBucketVersioning", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "155.251.168.5", "userAgent": "[Boto3/1.9.105 Python/2.7.16rc1 Linux/4.19.0-kali3-amd64 Botocore/1.12.105]", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"host": ["s3.us-west-2.amazonaws.com"], "bucketName": "level2-295510a051f3fcd006ae345973478972.flaws.cloud", "versioning": [""]}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "bd5495da-228e-4f01-9f51-a48471f0b4b7", "record_id": "flaws_cloudtrail:0000214:bd5495da-228e-4f01-9f51-a48471f0b4b7", "row_index": 214, "timestamp": "2019-03-01T00:22:11Z", "event_type": "GetBucketEncryption", "event_source": "s3.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "155.251.168.5", "user_agent": "[Boto3/1.9.105 Python/2.7.16rc1 Linux/4.19.0-kali3-amd64 Botocore/1.12.105]", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1049, "raw_record_depth": 3, "raw_record_top_level_keys": ["additionalEventData", "awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "bd5495da-228e-4f01-9f51-a48471f0b4b7", "eventTime": "2019-03-01T00:22:11Z", "eventName": "GetBucketEncryption", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "155.251.168.5", "userAgent": "[Boto3/1.9.105 Python/2.7.16rc1 Linux/4.19.0-kali3-amd64 Botocore/1.12.105]", "awsRegion": "us-west-2", "errorCode": "ServerSideEncryptionConfigurationNotFoundError", "errorMessage": "The server side encryption configuration was not found", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"encryption": [""], "host": ["s3.us-west-2.amazonaws.com"], "bucketName": "level2-295510a051f3fcd006ae345973478972.flaws.cloud"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "e945452d8-4b11-47a5-8d8f-189a74e24979", "record_id": "flaws_cloudtrail:0000215:e945452d8-4b11-47a5-8d8f-189a74e24979", "row_index": 215, "timestamp": "2019-03-01T00:22:11Z", "event_type": "GetBucketVersioning", "event_source": "s3.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "155.251.168.5", "user_agent": "[Boto3/1.9.105 Python/2.7.16rc1 Linux/4.19.0-kali3-amd64 Botocore/1.12.105]", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 877, "raw_record_depth": 3, "raw_record_top_level_keys": ["additionalEventData", "awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "e945452d8-4b11-47a5-8d8f-189a74e24979", "eventTime": "2019-03-01T00:22:11Z", "eventName": "GetBucketVersioning", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "155.251.168.5", "userAgent": "[Boto3/1.9.105 Python/2.7.16rc1 Linux/4.19.0-kali3-amd64 Botocore/1.12.105]", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"host": ["s3.us-west-2.amazonaws.com"], "bucketName": "flaws.cloud", "versioning": [""]}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "f0c38423-aefd-45ec-a2ce-1401373741c8", "record_id": "flaws_cloudtrail:0000216:f0c38423-aefd-45ec-a2ce-1401373741c8", "row_index": 216, "timestamp": "2019-03-01T00:22:11Z", "event_type": "GetBucketWebsite", "event_source": "s3.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "155.251.168.5", "user_agent": "[Boto3/1.9.105 Python/2.7.16rc1 Linux/4.19.0-kali3-amd64 Botocore/1.12.105]", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 908, "raw_record_depth": 3, "raw_record_top_level_keys": ["additionalEventData", "awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "f0c38423-aefd-45ec-a2ce-1401373741c8", "eventTime": "2019-03-01T00:22:11Z", "eventName": "GetBucketWebsite", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "155.251.168.5", "userAgent": "[Boto3/1.9.105 Python/2.7.16rc1 Linux/4.19.0-kali3-amd64 Botocore/1.12.105]", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"host": ["s3.us-west-2.amazonaws.com"], "bucketName": "theend-c1aad500c62e2a57cf12cebf93b282cf.flaws.cloud", "website": [""]}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "d3a44c26-991d-4bef-b171-5aeecdeaca93", "record_id": "flaws_cloudtrail:0000217:d3a44c26-991d-4bef-b171-5aeecdeaca93", "row_index": 217, "timestamp": "2019-03-01T00:22:11Z", "event_type": "GetBucketWebsite", "event_source": "s3.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "155.251.168.5", "user_agent": "[Boto3/1.9.105 Python/2.7.16rc1 Linux/4.19.0-kali3-amd64 Botocore/1.12.105]", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 909, "raw_record_depth": 3, "raw_record_top_level_keys": ["additionalEventData", "awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "d3a44c26-991d-4bef-b171-5aeecdeaca93", "eventTime": "2019-03-01T00:22:11Z", "eventName": "GetBucketWebsite", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "155.251.168.5", "userAgent": "[Boto3/1.9.105 Python/2.7.16rc1 Linux/4.19.0-kali3-amd64 Botocore/1.12.105]", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"host": ["s3.us-west-2.amazonaws.com"], "bucketName": "level5-8dbc21dbbd6129208d054061ef063f04.flaws.cloud", "website": [""]}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "1fcd3c07-ad9e-4ee6-bb7b-8ed77b6a9a7b", "record_id": "flaws_cloudtrail:0000218:1fcd3c07-ad9e-4ee6-bb7b-8ed77b6a9a7b", "row_index": 218, "timestamp": "2019-03-01T00:22:11Z", "event_type": "GetBucketEncryption", "event_source": "s3.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "155.251.168.5", "user_agent": "[Boto3/1.9.105 Python/2.7.16rc1 Linux/4.19.0-kali3-amd64 Botocore/1.12.105]", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1047, "raw_record_depth": 3, "raw_record_top_level_keys": ["additionalEventData", "awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "1fcd3c07-ad9e-4ee6-bb7b-8ed77b6a9a7b", "eventTime": "2019-03-01T00:22:11Z", "eventName": "GetBucketEncryption", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "155.251.168.5", "userAgent": "[Boto3/1.9.105 Python/2.7.16rc1 Linux/4.19.0-kali3-amd64 Botocore/1.12.105]", "awsRegion": "us-west-2", "errorCode": "ServerSideEncryptionConfigurationNotFoundError", "errorMessage": "The server side encryption configuration was not found", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"encryption": [""], "host": ["s3.us-west-2.amazonaws.com"], "bucketName": "level4-974134b52e7c35aebcc4b45f19113936.flaws.cloud"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "9d35211-d0a4-4400-9a01-163d0d80030", "record_id": "flaws_cloudtrail:0000219:9d35211-d0a4-4400-9a01-163d0d80030", "row_index": 219, "timestamp": "2019-03-01T00:22:12Z", "event_type": "GetCallerIdentity", "event_source": "sts.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "155.251.168.5", "user_agent": "Boto3/1.9.105 Python/2.7.16rc1 Linux/4.19.0-kali3-amd64 Botocore/1.12.105", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 781, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "9d35211-d0a4-4400-9a01-163d0d80030", "eventTime": "2019-03-01T00:22:12Z", "eventName": "GetCallerIdentity", "eventSource": "sts.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "155.251.168.5", "userAgent": "Boto3/1.9.105 Python/2.7.16rc1 Linux/4.19.0-kali3-amd64 Botocore/1.12.105", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "responseElements": {"userId": "AIDADO2GQD0K8TEF7KW1V", "account": "811596193553", "arn": "arn:aws:iam::811596193553:user/Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "9d35211-d0a4-4400-9a01-163d0d80030", "record_id": "flaws_cloudtrail:0000220:9d35211-d0a4-4400-9a01-163d0d80030", "row_index": 220, "timestamp": "2019-03-01T00:22:12Z", "event_type": "GetCallerIdentity", "event_source": "sts.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "155.251.168.5", "user_agent": "Boto3/1.9.105 Python/2.7.16rc1 Linux/4.19.0-kali3-amd64 Botocore/1.12.105", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 781, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "9d35211-d0a4-4400-9a01-163d0d80030", "eventTime": "2019-03-01T00:22:12Z", "eventName": "GetCallerIdentity", "eventSource": "sts.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "155.251.168.5", "userAgent": "Boto3/1.9.105 Python/2.7.16rc1 Linux/4.19.0-kali3-amd64 Botocore/1.12.105", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "responseElements": {"userId": "AIDADO2GQD0K8TEF7KW1V", "account": "811596193553", "arn": "arn:aws:iam::811596193553:user/Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "2968b682-0456-4971-9b3c-2a920eea5709", "record_id": "flaws_cloudtrail:0000221:2968b682-0456-4971-9b3c-2a920eea5709", "row_index": 221, "timestamp": "2019-03-01T00:22:15Z", "event_type": "ListClusters", "event_source": "elasticmapreduce.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "155.251.168.5", "user_agent": "Boto3/1.9.105 Python/2.7.16rc1 Linux/4.19.0-kali3-amd64 Botocore/1.12.105", "aws_region": "ap-northeast-1"}, "resource_arns": [], "raw_record_size_bytes": 695, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "2968b682-0456-4971-9b3c-2a920eea5709", "eventTime": "2019-03-01T00:22:15Z", "eventName": "ListClusters", "eventSource": "elasticmapreduce.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "155.251.168.5", "userAgent": "Boto3/1.9.105 Python/2.7.16rc1 Linux/4.19.0-kali3-amd64 Botocore/1.12.105", "awsRegion": "ap-northeast-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "6f97dca1-71e9-4eb1-8327-1eab7b0a9c43", "record_id": "flaws_cloudtrail:0000222:6f97dca1-71e9-4eb1-8327-1eab7b0a9c43", "row_index": 222, "timestamp": "2019-03-01T00:22:15Z", "event_type": "ListClusters", "event_source": "elasticmapreduce.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "155.251.168.5", "user_agent": "Boto3/1.9.105 Python/2.7.16rc1 Linux/4.19.0-kali3-amd64 Botocore/1.12.105", "aws_region": "ap-northeast-2"}, "resource_arns": [], "raw_record_size_bytes": 695, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "6f97dca1-71e9-4eb1-8327-1eab7b0a9c43", "eventTime": "2019-03-01T00:22:15Z", "eventName": "ListClusters", "eventSource": "elasticmapreduce.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "155.251.168.5", "userAgent": "Boto3/1.9.105 Python/2.7.16rc1 Linux/4.19.0-kali3-amd64 Botocore/1.12.105", "awsRegion": "ap-northeast-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "34b2288d-a8c7-4ca3-8171-15f3a0c3aeb5", "record_id": "flaws_cloudtrail:0000223:34b2288d-a8c7-4ca3-8171-15f3a0c3aeb5", "row_index": 223, "timestamp": "2019-03-01T00:22:15Z", "event_type": "ListClusters", "event_source": "elasticmapreduce.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "155.251.168.5", "user_agent": "Boto3/1.9.105 Python/2.7.16rc1 Linux/4.19.0-kali3-amd64 Botocore/1.12.105", "aws_region": "ap-south-1"}, "resource_arns": [], "raw_record_size_bytes": 691, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "34b2288d-a8c7-4ca3-8171-15f3a0c3aeb5", "eventTime": "2019-03-01T00:22:15Z", "eventName": "ListClusters", "eventSource": "elasticmapreduce.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "155.251.168.5", "userAgent": "Boto3/1.9.105 Python/2.7.16rc1 Linux/4.19.0-kali3-amd64 Botocore/1.12.105", "awsRegion": "ap-south-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "540d3fda-9ddb-4791-8813-a366bbd6eb45", "record_id": "flaws_cloudtrail:0000224:540d3fda-9ddb-4791-8813-a366bbd6eb45", "row_index": 224, "timestamp": "2019-03-01T00:22:15Z", "event_type": "ListClusters", "event_source": "elasticmapreduce.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "155.251.168.5", "user_agent": "Boto3/1.9.105 Python/2.7.16rc1 Linux/4.19.0-kali3-amd64 Botocore/1.12.105", "aws_region": "ap-southeast-1"}, "resource_arns": [], "raw_record_size_bytes": 695, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "540d3fda-9ddb-4791-8813-a366bbd6eb45", "eventTime": "2019-03-01T00:22:15Z", "eventName": "ListClusters", "eventSource": "elasticmapreduce.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "155.251.168.5", "userAgent": "Boto3/1.9.105 Python/2.7.16rc1 Linux/4.19.0-kali3-amd64 Botocore/1.12.105", "awsRegion": "ap-southeast-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "1eda91d6-5649-4acf-bea9-bc7f3f11e2f7", "record_id": "flaws_cloudtrail:0000225:1eda91d6-5649-4acf-bea9-bc7f3f11e2f7", "row_index": 225, "timestamp": "2019-03-01T00:22:15Z", "event_type": "ListClusters", "event_source": "elasticmapreduce.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "155.251.168.5", "user_agent": "Boto3/1.9.105 Python/2.7.16rc1 Linux/4.19.0-kali3-amd64 Botocore/1.12.105", "aws_region": "ca-central-1"}, "resource_arns": [], "raw_record_size_bytes": 694, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "1eda91d6-5649-4acf-bea9-bc7f3f11e2f7", "eventTime": "2019-03-01T00:22:15Z", "eventName": "ListClusters", "eventSource": "elasticmapreduce.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "155.251.168.5", "userAgent": "Boto3/1.9.105 Python/2.7.16rc1 Linux/4.19.0-kali3-amd64 Botocore/1.12.105", "awsRegion": "ca-central-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "0724f63e-912e-4f89-899c-05a5d4dd5556", "record_id": "flaws_cloudtrail:0000226:0724f63e-912e-4f89-899c-05a5d4dd5556", "row_index": 226, "timestamp": "2019-03-01T00:22:15Z", "event_type": "ListClusters", "event_source": "elasticmapreduce.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "155.251.168.5", "user_agent": "Boto3/1.9.105 Python/2.7.16rc1 Linux/4.19.0-kali3-amd64 Botocore/1.12.105", "aws_region": "eu-central-1"}, "resource_arns": [], "raw_record_size_bytes": 693, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "0724f63e-912e-4f89-899c-05a5d4dd5556", "eventTime": "2019-03-01T00:22:15Z", "eventName": "ListClusters", "eventSource": "elasticmapreduce.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "155.251.168.5", "userAgent": "Boto3/1.9.105 Python/2.7.16rc1 Linux/4.19.0-kali3-amd64 Botocore/1.12.105", "awsRegion": "eu-central-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "08231f6-4ad3-4cb7-a8c4-7eda8adb19fb", "record_id": "flaws_cloudtrail:0000227:08231f6-4ad3-4cb7-a8c4-7eda8adb19fb", "row_index": 227, "timestamp": "2019-03-01T00:22:15Z", "event_type": "ListClusters", "event_source": "elasticmapreduce.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "155.251.168.5", "user_agent": "Boto3/1.9.105 Python/2.7.16rc1 Linux/4.19.0-kali3-amd64 Botocore/1.12.105", "aws_region": "eu-north-1"}, "resource_arns": [], "raw_record_size_bytes": 691, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "08231f6-4ad3-4cb7-a8c4-7eda8adb19fb", "eventTime": "2019-03-01T00:22:15Z", "eventName": "ListClusters", "eventSource": "elasticmapreduce.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "155.251.168.5", "userAgent": "Boto3/1.9.105 Python/2.7.16rc1 Linux/4.19.0-kali3-amd64 Botocore/1.12.105", "awsRegion": "eu-north-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "786f0e13-e358-4008-a7e2-3191a36bd221", "record_id": "flaws_cloudtrail:0000228:786f0e13-e358-4008-a7e2-3191a36bd221", "row_index": 228, "timestamp": "2019-03-01T00:22:15Z", "event_type": "ListClusters", "event_source": "elasticmapreduce.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "155.251.168.5", "user_agent": "Boto3/1.9.105 Python/2.7.16rc1 Linux/4.19.0-kali3-amd64 Botocore/1.12.105", "aws_region": "eu-west-1"}, "resource_arns": [], "raw_record_size_bytes": 690, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "786f0e13-e358-4008-a7e2-3191a36bd221", "eventTime": "2019-03-01T00:22:15Z", "eventName": "ListClusters", "eventSource": "elasticmapreduce.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "155.251.168.5", "userAgent": "Boto3/1.9.105 Python/2.7.16rc1 Linux/4.19.0-kali3-amd64 Botocore/1.12.105", "awsRegion": "eu-west-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "5759c0ef-3109-4d32-bfc0-3df70d13bc5e", "record_id": "flaws_cloudtrail:0000229:5759c0ef-3109-4d32-bfc0-3df70d13bc5e", "row_index": 229, "timestamp": "2019-03-01T00:22:15Z", "event_type": "ListClusters", "event_source": "elasticmapreduce.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "155.251.168.5", "user_agent": "Boto3/1.9.105 Python/2.7.16rc1 Linux/4.19.0-kali3-amd64 Botocore/1.12.105", "aws_region": "eu-west-2"}, "resource_arns": [], "raw_record_size_bytes": 690, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "5759c0ef-3109-4d32-bfc0-3df70d13bc5e", "eventTime": "2019-03-01T00:22:15Z", "eventName": "ListClusters", "eventSource": "elasticmapreduce.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "155.251.168.5", "userAgent": "Boto3/1.9.105 Python/2.7.16rc1 Linux/4.19.0-kali3-amd64 Botocore/1.12.105", "awsRegion": "eu-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "c6518e33-6cb3-457a-a868-30ad14c5bf5d", "record_id": "flaws_cloudtrail:0000230:c6518e33-6cb3-457a-a868-30ad14c5bf5d", "row_index": 230, "timestamp": "2019-03-01T00:22:15Z", "event_type": "ListClusters", "event_source": "elasticmapreduce.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "155.251.168.5", "user_agent": "Boto3/1.9.105 Python/2.7.16rc1 Linux/4.19.0-kali3-amd64 Botocore/1.12.105", "aws_region": "eu-west-3"}, "resource_arns": [], "raw_record_size_bytes": 689, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "c6518e33-6cb3-457a-a868-30ad14c5bf5d", "eventTime": "2019-03-01T00:22:15Z", "eventName": "ListClusters", "eventSource": "elasticmapreduce.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "155.251.168.5", "userAgent": "Boto3/1.9.105 Python/2.7.16rc1 Linux/4.19.0-kali3-amd64 Botocore/1.12.105", "awsRegion": "eu-west-3", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "2968b682-0456-4971-9b3c-2a920eea5709", "record_id": "flaws_cloudtrail:0000231:2968b682-0456-4971-9b3c-2a920eea5709", "row_index": 231, "timestamp": "2019-03-01T00:22:15Z", "event_type": "ListClusters", "event_source": "elasticmapreduce.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "155.251.168.5", "user_agent": "Boto3/1.9.105 Python/2.7.16rc1 Linux/4.19.0-kali3-amd64 Botocore/1.12.105", "aws_region": "ap-northeast-1"}, "resource_arns": [], "raw_record_size_bytes": 695, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "2968b682-0456-4971-9b3c-2a920eea5709", "eventTime": "2019-03-01T00:22:15Z", "eventName": "ListClusters", "eventSource": "elasticmapreduce.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "155.251.168.5", "userAgent": "Boto3/1.9.105 Python/2.7.16rc1 Linux/4.19.0-kali3-amd64 Botocore/1.12.105", "awsRegion": "ap-northeast-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "6f97dca1-71e9-4eb1-8327-1eab7b0a9c43", "record_id": "flaws_cloudtrail:0000232:6f97dca1-71e9-4eb1-8327-1eab7b0a9c43", "row_index": 232, "timestamp": "2019-03-01T00:22:15Z", "event_type": "ListClusters", "event_source": "elasticmapreduce.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "155.251.168.5", "user_agent": "Boto3/1.9.105 Python/2.7.16rc1 Linux/4.19.0-kali3-amd64 Botocore/1.12.105", "aws_region": "ap-northeast-2"}, "resource_arns": [], "raw_record_size_bytes": 695, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "6f97dca1-71e9-4eb1-8327-1eab7b0a9c43", "eventTime": "2019-03-01T00:22:15Z", "eventName": "ListClusters", "eventSource": "elasticmapreduce.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "155.251.168.5", "userAgent": "Boto3/1.9.105 Python/2.7.16rc1 Linux/4.19.0-kali3-amd64 Botocore/1.12.105", "awsRegion": "ap-northeast-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "34b2288d-a8c7-4ca3-8171-15f3a0c3aeb5", "record_id": "flaws_cloudtrail:0000233:34b2288d-a8c7-4ca3-8171-15f3a0c3aeb5", "row_index": 233, "timestamp": "2019-03-01T00:22:15Z", "event_type": "ListClusters", "event_source": "elasticmapreduce.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "155.251.168.5", "user_agent": "Boto3/1.9.105 Python/2.7.16rc1 Linux/4.19.0-kali3-amd64 Botocore/1.12.105", "aws_region": "ap-south-1"}, "resource_arns": [], "raw_record_size_bytes": 691, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "34b2288d-a8c7-4ca3-8171-15f3a0c3aeb5", "eventTime": "2019-03-01T00:22:15Z", "eventName": "ListClusters", "eventSource": "elasticmapreduce.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "155.251.168.5", "userAgent": "Boto3/1.9.105 Python/2.7.16rc1 Linux/4.19.0-kali3-amd64 Botocore/1.12.105", "awsRegion": "ap-south-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "540d3fda-9ddb-4791-8813-a366bbd6eb45", "record_id": "flaws_cloudtrail:0000234:540d3fda-9ddb-4791-8813-a366bbd6eb45", "row_index": 234, "timestamp": "2019-03-01T00:22:15Z", "event_type": "ListClusters", "event_source": "elasticmapreduce.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "155.251.168.5", "user_agent": "Boto3/1.9.105 Python/2.7.16rc1 Linux/4.19.0-kali3-amd64 Botocore/1.12.105", "aws_region": "ap-southeast-1"}, "resource_arns": [], "raw_record_size_bytes": 695, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "540d3fda-9ddb-4791-8813-a366bbd6eb45", "eventTime": "2019-03-01T00:22:15Z", "eventName": "ListClusters", "eventSource": "elasticmapreduce.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "155.251.168.5", "userAgent": "Boto3/1.9.105 Python/2.7.16rc1 Linux/4.19.0-kali3-amd64 Botocore/1.12.105", "awsRegion": "ap-southeast-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "1eda91d6-5649-4acf-bea9-bc7f3f11e2f7", "record_id": "flaws_cloudtrail:0000235:1eda91d6-5649-4acf-bea9-bc7f3f11e2f7", "row_index": 235, "timestamp": "2019-03-01T00:22:15Z", "event_type": "ListClusters", "event_source": "elasticmapreduce.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "155.251.168.5", "user_agent": "Boto3/1.9.105 Python/2.7.16rc1 Linux/4.19.0-kali3-amd64 Botocore/1.12.105", "aws_region": "ca-central-1"}, "resource_arns": [], "raw_record_size_bytes": 694, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "1eda91d6-5649-4acf-bea9-bc7f3f11e2f7", "eventTime": "2019-03-01T00:22:15Z", "eventName": "ListClusters", "eventSource": "elasticmapreduce.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "155.251.168.5", "userAgent": "Boto3/1.9.105 Python/2.7.16rc1 Linux/4.19.0-kali3-amd64 Botocore/1.12.105", "awsRegion": "ca-central-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "0724f63e-912e-4f89-899c-05a5d4dd5556", "record_id": "flaws_cloudtrail:0000236:0724f63e-912e-4f89-899c-05a5d4dd5556", "row_index": 236, "timestamp": "2019-03-01T00:22:15Z", "event_type": "ListClusters", "event_source": "elasticmapreduce.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "155.251.168.5", "user_agent": "Boto3/1.9.105 Python/2.7.16rc1 Linux/4.19.0-kali3-amd64 Botocore/1.12.105", "aws_region": "eu-central-1"}, "resource_arns": [], "raw_record_size_bytes": 693, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "0724f63e-912e-4f89-899c-05a5d4dd5556", "eventTime": "2019-03-01T00:22:15Z", "eventName": "ListClusters", "eventSource": "elasticmapreduce.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "155.251.168.5", "userAgent": "Boto3/1.9.105 Python/2.7.16rc1 Linux/4.19.0-kali3-amd64 Botocore/1.12.105", "awsRegion": "eu-central-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "08231f6-4ad3-4cb7-a8c4-7eda8adb19fb", "record_id": "flaws_cloudtrail:0000237:08231f6-4ad3-4cb7-a8c4-7eda8adb19fb", "row_index": 237, "timestamp": "2019-03-01T00:22:15Z", "event_type": "ListClusters", "event_source": "elasticmapreduce.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "155.251.168.5", "user_agent": "Boto3/1.9.105 Python/2.7.16rc1 Linux/4.19.0-kali3-amd64 Botocore/1.12.105", "aws_region": "eu-north-1"}, "resource_arns": [], "raw_record_size_bytes": 691, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "08231f6-4ad3-4cb7-a8c4-7eda8adb19fb", "eventTime": "2019-03-01T00:22:15Z", "eventName": "ListClusters", "eventSource": "elasticmapreduce.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "155.251.168.5", "userAgent": "Boto3/1.9.105 Python/2.7.16rc1 Linux/4.19.0-kali3-amd64 Botocore/1.12.105", "awsRegion": "eu-north-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "786f0e13-e358-4008-a7e2-3191a36bd221", "record_id": "flaws_cloudtrail:0000238:786f0e13-e358-4008-a7e2-3191a36bd221", "row_index": 238, "timestamp": "2019-03-01T00:22:15Z", "event_type": "ListClusters", "event_source": "elasticmapreduce.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "155.251.168.5", "user_agent": "Boto3/1.9.105 Python/2.7.16rc1 Linux/4.19.0-kali3-amd64 Botocore/1.12.105", "aws_region": "eu-west-1"}, "resource_arns": [], "raw_record_size_bytes": 690, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "786f0e13-e358-4008-a7e2-3191a36bd221", "eventTime": "2019-03-01T00:22:15Z", "eventName": "ListClusters", "eventSource": "elasticmapreduce.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "155.251.168.5", "userAgent": "Boto3/1.9.105 Python/2.7.16rc1 Linux/4.19.0-kali3-amd64 Botocore/1.12.105", "awsRegion": "eu-west-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "5759c0ef-3109-4d32-bfc0-3df70d13bc5e", "record_id": "flaws_cloudtrail:0000239:5759c0ef-3109-4d32-bfc0-3df70d13bc5e", "row_index": 239, "timestamp": "2019-03-01T00:22:15Z", "event_type": "ListClusters", "event_source": "elasticmapreduce.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "155.251.168.5", "user_agent": "Boto3/1.9.105 Python/2.7.16rc1 Linux/4.19.0-kali3-amd64 Botocore/1.12.105", "aws_region": "eu-west-2"}, "resource_arns": [], "raw_record_size_bytes": 690, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "5759c0ef-3109-4d32-bfc0-3df70d13bc5e", "eventTime": "2019-03-01T00:22:15Z", "eventName": "ListClusters", "eventSource": "elasticmapreduce.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "155.251.168.5", "userAgent": "Boto3/1.9.105 Python/2.7.16rc1 Linux/4.19.0-kali3-amd64 Botocore/1.12.105", "awsRegion": "eu-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "c6518e33-6cb3-457a-a868-30ad14c5bf5d", "record_id": "flaws_cloudtrail:0000240:c6518e33-6cb3-457a-a868-30ad14c5bf5d", "row_index": 240, "timestamp": "2019-03-01T00:22:15Z", "event_type": "ListClusters", "event_source": "elasticmapreduce.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "155.251.168.5", "user_agent": "Boto3/1.9.105 Python/2.7.16rc1 Linux/4.19.0-kali3-amd64 Botocore/1.12.105", "aws_region": "eu-west-3"}, "resource_arns": [], "raw_record_size_bytes": 689, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "c6518e33-6cb3-457a-a868-30ad14c5bf5d", "eventTime": "2019-03-01T00:22:15Z", "eventName": "ListClusters", "eventSource": "elasticmapreduce.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "155.251.168.5", "userAgent": "Boto3/1.9.105 Python/2.7.16rc1 Linux/4.19.0-kali3-amd64 Botocore/1.12.105", "awsRegion": "eu-west-3", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "8c09a6ed-8e28-4460-8c29-b542141c", "record_id": "flaws_cloudtrail:0000241:8c09a6ed-8e28-4460-8c29-b542141c", "row_index": 241, "timestamp": "2019-03-01T00:22:16Z", "event_type": "ListClusters", "event_source": "elasticmapreduce.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "155.251.168.5", "user_agent": "Boto3/1.9.105 Python/2.7.16rc1 Linux/4.19.0-kali3-amd64 Botocore/1.12.105", "aws_region": "ap-southeast-2"}, "resource_arns": [], "raw_record_size_bytes": 691, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "8c09a6ed-8e28-4460-8c29-b542141c", "eventTime": "2019-03-01T00:22:16Z", "eventName": "ListClusters", "eventSource": "elasticmapreduce.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "155.251.168.5", "userAgent": "Boto3/1.9.105 Python/2.7.16rc1 Linux/4.19.0-kali3-amd64 Botocore/1.12.105", "awsRegion": "ap-southeast-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "3495bb69-b2bd-4aba-9a8e-f98491f8a010", "record_id": "flaws_cloudtrail:0000242:3495bb69-b2bd-4aba-9a8e-f98491f8a010", "row_index": 242, "timestamp": "2019-03-01T00:22:16Z", "event_type": "ListClusters", "event_source": "elasticmapreduce.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "155.251.168.5", "user_agent": "Boto3/1.9.105 Python/2.7.16rc1 Linux/4.19.0-kali3-amd64 Botocore/1.12.105", "aws_region": "sa-east-1"}, "resource_arns": [], "raw_record_size_bytes": 690, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "3495bb69-b2bd-4aba-9a8e-f98491f8a010", "eventTime": "2019-03-01T00:22:16Z", "eventName": "ListClusters", "eventSource": "elasticmapreduce.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "155.251.168.5", "userAgent": "Boto3/1.9.105 Python/2.7.16rc1 Linux/4.19.0-kali3-amd64 Botocore/1.12.105", "awsRegion": "sa-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "8c09a6ed-8e28-4460-8c29-b542141c", "record_id": "flaws_cloudtrail:0000243:8c09a6ed-8e28-4460-8c29-b542141c", "row_index": 243, "timestamp": "2019-03-01T00:22:16Z", "event_type": "ListClusters", "event_source": "elasticmapreduce.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "155.251.168.5", "user_agent": "Boto3/1.9.105 Python/2.7.16rc1 Linux/4.19.0-kali3-amd64 Botocore/1.12.105", "aws_region": "ap-southeast-2"}, "resource_arns": [], "raw_record_size_bytes": 691, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "8c09a6ed-8e28-4460-8c29-b542141c", "eventTime": "2019-03-01T00:22:16Z", "eventName": "ListClusters", "eventSource": "elasticmapreduce.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "155.251.168.5", "userAgent": "Boto3/1.9.105 Python/2.7.16rc1 Linux/4.19.0-kali3-amd64 Botocore/1.12.105", "awsRegion": "ap-southeast-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "3495bb69-b2bd-4aba-9a8e-f98491f8a010", "record_id": "flaws_cloudtrail:0000244:3495bb69-b2bd-4aba-9a8e-f98491f8a010", "row_index": 244, "timestamp": "2019-03-01T00:22:16Z", "event_type": "ListClusters", "event_source": "elasticmapreduce.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "155.251.168.5", "user_agent": "Boto3/1.9.105 Python/2.7.16rc1 Linux/4.19.0-kali3-amd64 Botocore/1.12.105", "aws_region": "sa-east-1"}, "resource_arns": [], "raw_record_size_bytes": 690, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "3495bb69-b2bd-4aba-9a8e-f98491f8a010", "eventTime": "2019-03-01T00:22:16Z", "eventName": "ListClusters", "eventSource": "elasticmapreduce.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "155.251.168.5", "userAgent": "Boto3/1.9.105 Python/2.7.16rc1 Linux/4.19.0-kali3-amd64 Botocore/1.12.105", "awsRegion": "sa-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "be0b58a0-cd2d-4fce-8004-15fe99fdf0ba", "record_id": "flaws_cloudtrail:0000245:be0b58a0-cd2d-4fce-8004-15fe99fdf0ba", "row_index": 245, "timestamp": "2019-03-01T00:22:17Z", "event_type": "ListClusters", "event_source": "elasticmapreduce.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "155.251.168.5", "user_agent": "Boto3/1.9.105 Python/2.7.16rc1 Linux/4.19.0-kali3-amd64 Botocore/1.12.105", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 690, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "be0b58a0-cd2d-4fce-8004-15fe99fdf0ba", "eventTime": "2019-03-01T00:22:17Z", "eventName": "ListClusters", "eventSource": "elasticmapreduce.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "155.251.168.5", "userAgent": "Boto3/1.9.105 Python/2.7.16rc1 Linux/4.19.0-kali3-amd64 Botocore/1.12.105", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "a25e9a41-6c40-420a-8076-428578a2d3633", "record_id": "flaws_cloudtrail:0000246:a25e9a41-6c40-420a-8076-428578a2d3633", "row_index": 246, "timestamp": "2019-03-01T00:22:17Z", "event_type": "ListClusters", "event_source": "elasticmapreduce.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "155.251.168.5", "user_agent": "Boto3/1.9.105 Python/2.7.16rc1 Linux/4.19.0-kali3-amd64 Botocore/1.12.105", "aws_region": "us-east-2"}, "resource_arns": [], "raw_record_size_bytes": 691, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "a25e9a41-6c40-420a-8076-428578a2d3633", "eventTime": "2019-03-01T00:22:17Z", "eventName": "ListClusters", "eventSource": "elasticmapreduce.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "155.251.168.5", "userAgent": "Boto3/1.9.105 Python/2.7.16rc1 Linux/4.19.0-kali3-amd64 Botocore/1.12.105", "awsRegion": "us-east-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "be0b58a0-cd2d-4fce-8004-15fe99fdf0ba", "record_id": "flaws_cloudtrail:0000247:be0b58a0-cd2d-4fce-8004-15fe99fdf0ba", "row_index": 247, "timestamp": "2019-03-01T00:22:17Z", "event_type": "ListClusters", "event_source": "elasticmapreduce.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "155.251.168.5", "user_agent": "Boto3/1.9.105 Python/2.7.16rc1 Linux/4.19.0-kali3-amd64 Botocore/1.12.105", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 690, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "be0b58a0-cd2d-4fce-8004-15fe99fdf0ba", "eventTime": "2019-03-01T00:22:17Z", "eventName": "ListClusters", "eventSource": "elasticmapreduce.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "155.251.168.5", "userAgent": "Boto3/1.9.105 Python/2.7.16rc1 Linux/4.19.0-kali3-amd64 Botocore/1.12.105", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "a25e9a41-6c40-420a-8076-428578a2d3633", "record_id": "flaws_cloudtrail:0000248:a25e9a41-6c40-420a-8076-428578a2d3633", "row_index": 248, "timestamp": "2019-03-01T00:22:17Z", "event_type": "ListClusters", "event_source": "elasticmapreduce.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "155.251.168.5", "user_agent": "Boto3/1.9.105 Python/2.7.16rc1 Linux/4.19.0-kali3-amd64 Botocore/1.12.105", "aws_region": "us-east-2"}, "resource_arns": [], "raw_record_size_bytes": 691, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "a25e9a41-6c40-420a-8076-428578a2d3633", "eventTime": "2019-03-01T00:22:17Z", "eventName": "ListClusters", "eventSource": "elasticmapreduce.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "155.251.168.5", "userAgent": "Boto3/1.9.105 Python/2.7.16rc1 Linux/4.19.0-kali3-amd64 Botocore/1.12.105", "awsRegion": "us-east-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "d41f116c-47b1-4e77-a035-88498b0d690", "record_id": "flaws_cloudtrail:0000249:d41f116c-47b1-4e77-a035-88498b0d690", "row_index": 249, "timestamp": "2019-03-01T00:22:18Z", "event_type": "GetCallerIdentity", "event_source": "sts.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "155.251.168.5", "user_agent": "Boto3/1.9.105 Python/2.7.16rc1 Linux/4.19.0-kali3-amd64 Botocore/1.12.105", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 780, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "d41f116c-47b1-4e77-a035-88498b0d690", "eventTime": "2019-03-01T00:22:18Z", "eventName": "GetCallerIdentity", "eventSource": "sts.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "155.251.168.5", "userAgent": "Boto3/1.9.105 Python/2.7.16rc1 Linux/4.19.0-kali3-amd64 Botocore/1.12.105", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "responseElements": {"userId": "AIDADO2GQD0K8TEF7KW1V", "account": "811596193553", "arn": "arn:aws:iam::811596193553:user/Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "036c109e-efdb-4a88-b258-c0be94bcba3f", "record_id": "flaws_cloudtrail:0000250:036c109e-efdb-4a88-b258-c0be94bcba3f", "row_index": 250, "timestamp": "2019-03-01T00:22:18Z", "event_type": "ListClusters", "event_source": "elasticmapreduce.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "155.251.168.5", "user_agent": "Boto3/1.9.105 Python/2.7.16rc1 Linux/4.19.0-kali3-amd64 Botocore/1.12.105", "aws_region": "us-west-1"}, "resource_arns": [], "raw_record_size_bytes": 690, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "036c109e-efdb-4a88-b258-c0be94bcba3f", "eventTime": "2019-03-01T00:22:18Z", "eventName": "ListClusters", "eventSource": "elasticmapreduce.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "155.251.168.5", "userAgent": "Boto3/1.9.105 Python/2.7.16rc1 Linux/4.19.0-kali3-amd64 Botocore/1.12.105", "awsRegion": "us-west-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "d9624c54-431d-4450-89b1-cdb983a168b5", "record_id": "flaws_cloudtrail:0000251:d9624c54-431d-4450-89b1-cdb983a168b5", "row_index": 251, "timestamp": "2019-03-01T00:22:18Z", "event_type": "ListClusters", "event_source": "elasticmapreduce.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "155.251.168.5", "user_agent": "Boto3/1.9.105 Python/2.7.16rc1 Linux/4.19.0-kali3-amd64 Botocore/1.12.105", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 689, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "d9624c54-431d-4450-89b1-cdb983a168b5", "eventTime": "2019-03-01T00:22:18Z", "eventName": "ListClusters", "eventSource": "elasticmapreduce.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "155.251.168.5", "userAgent": "Boto3/1.9.105 Python/2.7.16rc1 Linux/4.19.0-kali3-amd64 Botocore/1.12.105", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "d41f116c-47b1-4e77-a035-88498b0d690", "record_id": "flaws_cloudtrail:0000252:d41f116c-47b1-4e77-a035-88498b0d690", "row_index": 252, "timestamp": "2019-03-01T00:22:18Z", "event_type": "GetCallerIdentity", "event_source": "sts.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "155.251.168.5", "user_agent": "Boto3/1.9.105 Python/2.7.16rc1 Linux/4.19.0-kali3-amd64 Botocore/1.12.105", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 780, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "d41f116c-47b1-4e77-a035-88498b0d690", "eventTime": "2019-03-01T00:22:18Z", "eventName": "GetCallerIdentity", "eventSource": "sts.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "155.251.168.5", "userAgent": "Boto3/1.9.105 Python/2.7.16rc1 Linux/4.19.0-kali3-amd64 Botocore/1.12.105", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "responseElements": {"userId": "AIDADO2GQD0K8TEF7KW1V", "account": "811596193553", "arn": "arn:aws:iam::811596193553:user/Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "036c109e-efdb-4a88-b258-c0be94bcba3f", "record_id": "flaws_cloudtrail:0000253:036c109e-efdb-4a88-b258-c0be94bcba3f", "row_index": 253, "timestamp": "2019-03-01T00:22:18Z", "event_type": "ListClusters", "event_source": "elasticmapreduce.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "155.251.168.5", "user_agent": "Boto3/1.9.105 Python/2.7.16rc1 Linux/4.19.0-kali3-amd64 Botocore/1.12.105", "aws_region": "us-west-1"}, "resource_arns": [], "raw_record_size_bytes": 690, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "036c109e-efdb-4a88-b258-c0be94bcba3f", "eventTime": "2019-03-01T00:22:18Z", "eventName": "ListClusters", "eventSource": "elasticmapreduce.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "155.251.168.5", "userAgent": "Boto3/1.9.105 Python/2.7.16rc1 Linux/4.19.0-kali3-amd64 Botocore/1.12.105", "awsRegion": "us-west-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "d9624c54-431d-4450-89b1-cdb983a168b5", "record_id": "flaws_cloudtrail:0000254:d9624c54-431d-4450-89b1-cdb983a168b5", "row_index": 254, "timestamp": "2019-03-01T00:22:18Z", "event_type": "ListClusters", "event_source": "elasticmapreduce.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "155.251.168.5", "user_agent": "Boto3/1.9.105 Python/2.7.16rc1 Linux/4.19.0-kali3-amd64 Botocore/1.12.105", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 689, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "d9624c54-431d-4450-89b1-cdb983a168b5", "eventTime": "2019-03-01T00:22:18Z", "eventName": "ListClusters", "eventSource": "elasticmapreduce.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "155.251.168.5", "userAgent": "Boto3/1.9.105 Python/2.7.16rc1 Linux/4.19.0-kali3-amd64 Botocore/1.12.105", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "d2de8bb6-26de-4cc9-9a77-42fe7e507f40", "record_id": "flaws_cloudtrail:0000255:d2de8bb6-26de-4cc9-9a77-42fe7e507f40", "row_index": 255, "timestamp": "2019-03-01T00:22:22Z", "event_type": "DescribeCacheClusters", "event_source": "elasticache.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "155.251.168.5", "user_agent": "Boto3/1.9.105 Python/2.7.16rc1 Linux/4.19.0-kali3-amd64 Botocore/1.12.105", "aws_region": "ap-southeast-1"}, "resource_arns": [], "raw_record_size_bytes": 713, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "d2de8bb6-26de-4cc9-9a77-42fe7e507f40", "eventTime": "2019-03-01T00:22:22Z", "eventName": "DescribeCacheClusters", "eventSource": "elasticache.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "155.251.168.5", "userAgent": "Boto3/1.9.105 Python/2.7.16rc1 Linux/4.19.0-kali3-amd64 Botocore/1.12.105", "awsRegion": "ap-southeast-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"maxRecords": 100}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "f6e801ef-8f4d-414c-8623-09a75358e448", "record_id": "flaws_cloudtrail:0000256:f6e801ef-8f4d-414c-8623-09a75358e448", "row_index": 256, "timestamp": "2019-03-01T00:22:22Z", "event_type": "DescribeCacheSecurityGroups", "event_source": "elasticache.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "155.251.168.5", "user_agent": "Boto3/1.9.105 Python/2.7.16rc1 Linux/4.19.0-kali3-amd64 Botocore/1.12.105", "aws_region": "ca-central-1"}, "resource_arns": [], "raw_record_size_bytes": 702, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "f6e801ef-8f4d-414c-8623-09a75358e448", "eventTime": "2019-03-01T00:22:22Z", "eventName": "DescribeCacheSecurityGroups", "eventSource": "elasticache.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "155.251.168.5", "userAgent": "Boto3/1.9.105 Python/2.7.16rc1 Linux/4.19.0-kali3-amd64 Botocore/1.12.105", "awsRegion": "ca-central-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "868c8731-4ba4-4c18-b974-0357b74980", "record_id": "flaws_cloudtrail:0000257:868c8731-4ba4-4c18-b974-0357b74980", "row_index": 257, "timestamp": "2019-03-01T00:22:22Z", "event_type": "DescribeCacheClusters", "event_source": "elasticache.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "155.251.168.5", "user_agent": "Boto3/1.9.105 Python/2.7.16rc1 Linux/4.19.0-kali3-amd64 Botocore/1.12.105", "aws_region": "ca-central-1"}, "resource_arns": [], "raw_record_size_bytes": 709, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "868c8731-4ba4-4c18-b974-0357b74980", "eventTime": "2019-03-01T00:22:22Z", "eventName": "DescribeCacheClusters", "eventSource": "elasticache.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "155.251.168.5", "userAgent": "Boto3/1.9.105 Python/2.7.16rc1 Linux/4.19.0-kali3-amd64 Botocore/1.12.105", "awsRegion": "ca-central-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"maxRecords": 100}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "a414d93a-4eff-4f7a-a368-934a1bb9f056", "record_id": "flaws_cloudtrail:0000258:a414d93a-4eff-4f7a-a368-934a1bb9f056", "row_index": 258, "timestamp": "2019-03-01T00:22:22Z", "event_type": "AssumeRole", "event_source": "sts.amazonaws.com", "principal": {"type": "AWSService", "arn": null, "account_id": null, "principal_id": null, "user_name": null, "access_key_id": null, "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "ec2.amazonaws.com", "user_agent": "ec2.amazonaws.com", "aws_region": "us-west-2"}, "resource_arns": ["arn:aws:iam::811596193553:role/flaws"], "raw_record_size_bytes": 1493, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "resources", "responseElements", "sharedEventID", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "a414d93a-4eff-4f7a-a368-934a1bb9f056", "eventTime": "2019-03-01T00:22:22Z", "eventName": "AssumeRole", "eventSource": "sts.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "ec2.amazonaws.com", "userAgent": "ec2.amazonaws.com", "awsRegion": "us-west-2", "userIdentity": {"type": "AWSService", "invokedBy": "ec2.amazonaws.com"}, "requestParameters": {"roleSessionName": "i-aa2d3b42e5c6e801a", "roleArn": "arn:aws:iam::811596193553:role/flaws"}, "responseElements": {"credentials": {"accessKeyId": "ASIA32V0DCFEGLLBHDS6", "expiration": "Mar 1, 2019 6:26:10 AM", "sessionToken": "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"}}, "resources": [{"ARN": "arn:aws:iam::811596193553:role/flaws", "accountId": "811596193553", "type": "AWS::IAM::Role"}]}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "d2de8bb6-26de-4cc9-9a77-42fe7e507f40", "record_id": "flaws_cloudtrail:0000259:d2de8bb6-26de-4cc9-9a77-42fe7e507f40", "row_index": 259, "timestamp": "2019-03-01T00:22:22Z", "event_type": "DescribeCacheClusters", "event_source": "elasticache.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "155.251.168.5", "user_agent": "Boto3/1.9.105 Python/2.7.16rc1 Linux/4.19.0-kali3-amd64 Botocore/1.12.105", "aws_region": "ap-southeast-1"}, "resource_arns": [], "raw_record_size_bytes": 713, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "d2de8bb6-26de-4cc9-9a77-42fe7e507f40", "eventTime": "2019-03-01T00:22:22Z", "eventName": "DescribeCacheClusters", "eventSource": "elasticache.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "155.251.168.5", "userAgent": "Boto3/1.9.105 Python/2.7.16rc1 Linux/4.19.0-kali3-amd64 Botocore/1.12.105", "awsRegion": "ap-southeast-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"maxRecords": 100}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "f6e801ef-8f4d-414c-8623-09a75358e448", "record_id": "flaws_cloudtrail:0000260:f6e801ef-8f4d-414c-8623-09a75358e448", "row_index": 260, "timestamp": "2019-03-01T00:22:22Z", "event_type": "DescribeCacheSecurityGroups", "event_source": "elasticache.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "155.251.168.5", "user_agent": "Boto3/1.9.105 Python/2.7.16rc1 Linux/4.19.0-kali3-amd64 Botocore/1.12.105", "aws_region": "ca-central-1"}, "resource_arns": [], "raw_record_size_bytes": 702, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "f6e801ef-8f4d-414c-8623-09a75358e448", "eventTime": "2019-03-01T00:22:22Z", "eventName": "DescribeCacheSecurityGroups", "eventSource": "elasticache.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "155.251.168.5", "userAgent": "Boto3/1.9.105 Python/2.7.16rc1 Linux/4.19.0-kali3-amd64 Botocore/1.12.105", "awsRegion": "ca-central-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "868c8731-4ba4-4c18-b974-0357b74980", "record_id": "flaws_cloudtrail:0000261:868c8731-4ba4-4c18-b974-0357b74980", "row_index": 261, "timestamp": "2019-03-01T00:22:22Z", "event_type": "DescribeCacheClusters", "event_source": "elasticache.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "155.251.168.5", "user_agent": "Boto3/1.9.105 Python/2.7.16rc1 Linux/4.19.0-kali3-amd64 Botocore/1.12.105", "aws_region": "ca-central-1"}, "resource_arns": [], "raw_record_size_bytes": 709, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "868c8731-4ba4-4c18-b974-0357b74980", "eventTime": "2019-03-01T00:22:22Z", "eventName": "DescribeCacheClusters", "eventSource": "elasticache.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "155.251.168.5", "userAgent": "Boto3/1.9.105 Python/2.7.16rc1 Linux/4.19.0-kali3-amd64 Botocore/1.12.105", "awsRegion": "ca-central-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"maxRecords": 100}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "a414d93a-4eff-4f7a-a368-934a1bb9f056", "record_id": "flaws_cloudtrail:0000262:a414d93a-4eff-4f7a-a368-934a1bb9f056", "row_index": 262, "timestamp": "2019-03-01T00:22:22Z", "event_type": "AssumeRole", "event_source": "sts.amazonaws.com", "principal": {"type": "AWSService", "arn": null, "account_id": null, "principal_id": null, "user_name": null, "access_key_id": null, "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "ec2.amazonaws.com", "user_agent": "ec2.amazonaws.com", "aws_region": "us-west-2"}, "resource_arns": ["arn:aws:iam::811596193553:role/flaws"], "raw_record_size_bytes": 1493, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "resources", "responseElements", "sharedEventID", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "a414d93a-4eff-4f7a-a368-934a1bb9f056", "eventTime": "2019-03-01T00:22:22Z", "eventName": "AssumeRole", "eventSource": "sts.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "ec2.amazonaws.com", "userAgent": "ec2.amazonaws.com", "awsRegion": "us-west-2", "userIdentity": {"type": "AWSService", "invokedBy": "ec2.amazonaws.com"}, "requestParameters": {"roleSessionName": "i-aa2d3b42e5c6e801a", "roleArn": "arn:aws:iam::811596193553:role/flaws"}, "responseElements": {"credentials": {"accessKeyId": "ASIA32V0DCFEGLLBHDS6", "expiration": "Mar 1, 2019 6:26:10 AM", "sessionToken": "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"}}, "resources": [{"ARN": "arn:aws:iam::811596193553:role/flaws", "accountId": "811596193553", "type": "AWS::IAM::Role"}]}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "0510c6c6-85d5-4d27-b269-1056c3d25da5", "record_id": "flaws_cloudtrail:0000263:0510c6c6-85d5-4d27-b269-1056c3d25da5", "row_index": 263, "timestamp": "2019-03-01T00:22:23Z", "event_type": "DescribeCacheClusters", "event_source": "elasticache.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "155.251.168.5", "user_agent": "Boto3/1.9.105 Python/2.7.16rc1 Linux/4.19.0-kali3-amd64 Botocore/1.12.105", "aws_region": "ap-northeast-1"}, "resource_arns": [], "raw_record_size_bytes": 713, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "0510c6c6-85d5-4d27-b269-1056c3d25da5", "eventTime": "2019-03-01T00:22:23Z", "eventName": "DescribeCacheClusters", "eventSource": "elasticache.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "155.251.168.5", "userAgent": "Boto3/1.9.105 Python/2.7.16rc1 Linux/4.19.0-kali3-amd64 Botocore/1.12.105", "awsRegion": "ap-northeast-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"maxRecords": 100}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "75383b7f-8c53-47ce-8e1d-1c6f29daa3f1", "record_id": "flaws_cloudtrail:0000264:75383b7f-8c53-47ce-8e1d-1c6f29daa3f1", "row_index": 264, "timestamp": "2019-03-01T00:22:23Z", "event_type": "DescribeCacheSecurityGroups", "event_source": "elasticache.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "155.251.168.5", "user_agent": "Boto3/1.9.105 Python/2.7.16rc1 Linux/4.19.0-kali3-amd64 Botocore/1.12.105", "aws_region": "ap-northeast-1"}, "resource_arns": [], "raw_record_size_bytes": 706, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "75383b7f-8c53-47ce-8e1d-1c6f29daa3f1", "eventTime": "2019-03-01T00:22:23Z", "eventName": "DescribeCacheSecurityGroups", "eventSource": "elasticache.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "155.251.168.5", "userAgent": "Boto3/1.9.105 Python/2.7.16rc1 Linux/4.19.0-kali3-amd64 Botocore/1.12.105", "awsRegion": "ap-northeast-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "585b37ed-716f-4375-8586-868cf090090e", "record_id": "flaws_cloudtrail:0000265:585b37ed-716f-4375-8586-868cf090090e", "row_index": 265, "timestamp": "2019-03-01T00:22:23Z", "event_type": "DescribeCacheClusters", "event_source": "elasticache.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "155.251.168.5", "user_agent": "Boto3/1.9.105 Python/2.7.16rc1 Linux/4.19.0-kali3-amd64 Botocore/1.12.105", "aws_region": "ap-northeast-2"}, "resource_arns": [], "raw_record_size_bytes": 713, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "585b37ed-716f-4375-8586-868cf090090e", "eventTime": "2019-03-01T00:22:23Z", "eventName": "DescribeCacheClusters", "eventSource": "elasticache.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "155.251.168.5", "userAgent": "Boto3/1.9.105 Python/2.7.16rc1 Linux/4.19.0-kali3-amd64 Botocore/1.12.105", "awsRegion": "ap-northeast-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"maxRecords": 100}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "d20dc57f-2a16-4c4f-a2b9-477a6e926a2c", "record_id": "flaws_cloudtrail:0000266:d20dc57f-2a16-4c4f-a2b9-477a6e926a2c", "row_index": 266, "timestamp": "2019-03-01T00:22:23Z", "event_type": "DescribeCacheSecurityGroups", "event_source": "elasticache.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "155.251.168.5", "user_agent": "Boto3/1.9.105 Python/2.7.16rc1 Linux/4.19.0-kali3-amd64 Botocore/1.12.105", "aws_region": "ap-northeast-2"}, "resource_arns": [], "raw_record_size_bytes": 705, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "d20dc57f-2a16-4c4f-a2b9-477a6e926a2c", "eventTime": "2019-03-01T00:22:23Z", "eventName": "DescribeCacheSecurityGroups", "eventSource": "elasticache.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "155.251.168.5", "userAgent": "Boto3/1.9.105 Python/2.7.16rc1 Linux/4.19.0-kali3-amd64 Botocore/1.12.105", "awsRegion": "ap-northeast-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "79f854d7-eb88-47d1-8f3e-5287b671e1e4", "record_id": "flaws_cloudtrail:0000267:79f854d7-eb88-47d1-8f3e-5287b671e1e4", "row_index": 267, "timestamp": "2019-03-01T00:22:23Z", "event_type": "DescribeCacheClusters", "event_source": "elasticache.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "155.251.168.5", "user_agent": "Boto3/1.9.105 Python/2.7.16rc1 Linux/4.19.0-kali3-amd64 Botocore/1.12.105", "aws_region": "ap-south-1"}, "resource_arns": [], "raw_record_size_bytes": 709, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "79f854d7-eb88-47d1-8f3e-5287b671e1e4", "eventTime": "2019-03-01T00:22:23Z", "eventName": "DescribeCacheClusters", "eventSource": "elasticache.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "155.251.168.5", "userAgent": "Boto3/1.9.105 Python/2.7.16rc1 Linux/4.19.0-kali3-amd64 Botocore/1.12.105", "awsRegion": "ap-south-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"maxRecords": 100}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "8258dc85-cc7e-412b-ba84-d16dcd43305", "record_id": "flaws_cloudtrail:0000268:8258dc85-cc7e-412b-ba84-d16dcd43305", "row_index": 268, "timestamp": "2019-03-01T00:22:23Z", "event_type": "DescribeCacheSecurityGroups", "event_source": "elasticache.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "155.251.168.5", "user_agent": "Boto3/1.9.105 Python/2.7.16rc1 Linux/4.19.0-kali3-amd64 Botocore/1.12.105", "aws_region": "ap-south-1"}, "resource_arns": [], "raw_record_size_bytes": 700, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "8258dc85-cc7e-412b-ba84-d16dcd43305", "eventTime": "2019-03-01T00:22:23Z", "eventName": "DescribeCacheSecurityGroups", "eventSource": "elasticache.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "155.251.168.5", "userAgent": "Boto3/1.9.105 Python/2.7.16rc1 Linux/4.19.0-kali3-amd64 Botocore/1.12.105", "awsRegion": "ap-south-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "32681f-82c2-4362-8b98-e8f3b2d296b5", "record_id": "flaws_cloudtrail:0000269:32681f-82c2-4362-8b98-e8f3b2d296b5", "row_index": 269, "timestamp": "2019-03-01T00:22:23Z", "event_type": "DescribeCacheSecurityGroups", "event_source": "elasticache.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "155.251.168.5", "user_agent": "Boto3/1.9.105 Python/2.7.16rc1 Linux/4.19.0-kali3-amd64 Botocore/1.12.105", "aws_region": "ap-southeast-1"}, "resource_arns": [], "raw_record_size_bytes": 703, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "32681f-82c2-4362-8b98-e8f3b2d296b5", "eventTime": "2019-03-01T00:22:23Z", "eventName": "DescribeCacheSecurityGroups", "eventSource": "elasticache.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "155.251.168.5", "userAgent": "Boto3/1.9.105 Python/2.7.16rc1 Linux/4.19.0-kali3-amd64 Botocore/1.12.105", "awsRegion": "ap-southeast-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "f907d5c1-1787-4236-b14f-b37c6c0918f7", "record_id": "flaws_cloudtrail:0000270:f907d5c1-1787-4236-b14f-b37c6c0918f7", "row_index": 270, "timestamp": "2019-03-01T00:22:23Z", "event_type": "DescribeCacheClusters", "event_source": "elasticache.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "155.251.168.5", "user_agent": "Boto3/1.9.105 Python/2.7.16rc1 Linux/4.19.0-kali3-amd64 Botocore/1.12.105", "aws_region": "ap-southeast-2"}, "resource_arns": [], "raw_record_size_bytes": 714, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "f907d5c1-1787-4236-b14f-b37c6c0918f7", "eventTime": "2019-03-01T00:22:23Z", "eventName": "DescribeCacheClusters", "eventSource": "elasticache.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "155.251.168.5", "userAgent": "Boto3/1.9.105 Python/2.7.16rc1 Linux/4.19.0-kali3-amd64 Botocore/1.12.105", "awsRegion": "ap-southeast-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"maxRecords": 100}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "4fcaaa48-bbfb-47e5-b84a-7b4d1d7643c6", "record_id": "flaws_cloudtrail:0000271:4fcaaa48-bbfb-47e5-b84a-7b4d1d7643c6", "row_index": 271, "timestamp": "2019-03-01T00:22:23Z", "event_type": "DescribeCacheSecurityGroups", "event_source": "elasticache.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "155.251.168.5", "user_agent": "Boto3/1.9.105 Python/2.7.16rc1 Linux/4.19.0-kali3-amd64 Botocore/1.12.105", "aws_region": "eu-central-1"}, "resource_arns": [], "raw_record_size_bytes": 702, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "4fcaaa48-bbfb-47e5-b84a-7b4d1d7643c6", "eventTime": "2019-03-01T00:22:23Z", "eventName": "DescribeCacheSecurityGroups", "eventSource": "elasticache.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "155.251.168.5", "userAgent": "Boto3/1.9.105 Python/2.7.16rc1 Linux/4.19.0-kali3-amd64 Botocore/1.12.105", "awsRegion": "eu-central-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "e207971bc-9d84-4904-a39b-1ab9f4390525", "record_id": "flaws_cloudtrail:0000272:e207971bc-9d84-4904-a39b-1ab9f4390525", "row_index": 272, "timestamp": "2019-03-01T00:22:23Z", "event_type": "DescribeCacheClusters", "event_source": "elasticache.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "155.251.168.5", "user_agent": "Boto3/1.9.105 Python/2.7.16rc1 Linux/4.19.0-kali3-amd64 Botocore/1.12.105", "aws_region": "eu-central-1"}, "resource_arns": [], "raw_record_size_bytes": 711, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "e207971bc-9d84-4904-a39b-1ab9f4390525", "eventTime": "2019-03-01T00:22:23Z", "eventName": "DescribeCacheClusters", "eventSource": "elasticache.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "155.251.168.5", "userAgent": "Boto3/1.9.105 Python/2.7.16rc1 Linux/4.19.0-kali3-amd64 Botocore/1.12.105", "awsRegion": "eu-central-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"maxRecords": 100}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "9d7610fd-8e2a-49ed-8e43-f508611e32d4", "record_id": "flaws_cloudtrail:0000273:9d7610fd-8e2a-49ed-8e43-f508611e32d4", "row_index": 273, "timestamp": "2019-03-01T00:22:23Z", "event_type": "DescribeCacheSecurityGroups", "event_source": "elasticache.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "155.251.168.5", "user_agent": "Boto3/1.9.105 Python/2.7.16rc1 Linux/4.19.0-kali3-amd64 Botocore/1.12.105", "aws_region": "eu-west-1"}, "resource_arns": [], "raw_record_size_bytes": 700, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "9d7610fd-8e2a-49ed-8e43-f508611e32d4", "eventTime": "2019-03-01T00:22:23Z", "eventName": "DescribeCacheSecurityGroups", "eventSource": "elasticache.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "155.251.168.5", "userAgent": "Boto3/1.9.105 Python/2.7.16rc1 Linux/4.19.0-kali3-amd64 Botocore/1.12.105", "awsRegion": "eu-west-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "881760c2d-8079-4d35-9b27-1587b962000c6", "record_id": "flaws_cloudtrail:0000274:881760c2d-8079-4d35-9b27-1587b962000c6", "row_index": 274, "timestamp": "2019-03-01T00:22:23Z", "event_type": "DescribeCacheClusters", "event_source": "elasticache.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "155.251.168.5", "user_agent": "Boto3/1.9.105 Python/2.7.16rc1 Linux/4.19.0-kali3-amd64 Botocore/1.12.105", "aws_region": "eu-west-1"}, "resource_arns": [], "raw_record_size_bytes": 710, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "881760c2d-8079-4d35-9b27-1587b962000c6", "eventTime": "2019-03-01T00:22:23Z", "eventName": "DescribeCacheClusters", "eventSource": "elasticache.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "155.251.168.5", "userAgent": "Boto3/1.9.105 Python/2.7.16rc1 Linux/4.19.0-kali3-amd64 Botocore/1.12.105", "awsRegion": "eu-west-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"maxRecords": 100}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "aacdfb6e-767f-4e88-b2b9-7b5ed5425fc6", "record_id": "flaws_cloudtrail:0000275:aacdfb6e-767f-4e88-b2b9-7b5ed5425fc6", "row_index": 275, "timestamp": "2019-03-01T00:22:23Z", "event_type": "DescribeCacheClusters", "event_source": "elasticache.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "155.251.168.5", "user_agent": "Boto3/1.9.105 Python/2.7.16rc1 Linux/4.19.0-kali3-amd64 Botocore/1.12.105", "aws_region": "eu-west-2"}, "resource_arns": [], "raw_record_size_bytes": 708, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "aacdfb6e-767f-4e88-b2b9-7b5ed5425fc6", "eventTime": "2019-03-01T00:22:23Z", "eventName": "DescribeCacheClusters", "eventSource": "elasticache.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "155.251.168.5", "userAgent": "Boto3/1.9.105 Python/2.7.16rc1 Linux/4.19.0-kali3-amd64 Botocore/1.12.105", "awsRegion": "eu-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"maxRecords": 100}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "e1168f8f-385e-4d3d-9ddb-db2799ea04f0", "record_id": "flaws_cloudtrail:0000276:e1168f8f-385e-4d3d-9ddb-db2799ea04f0", "row_index": 276, "timestamp": "2019-03-01T00:22:23Z", "event_type": "DescribeCacheSecurityGroups", "event_source": "elasticache.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "155.251.168.5", "user_agent": "Boto3/1.9.105 Python/2.7.16rc1 Linux/4.19.0-kali3-amd64 Botocore/1.12.105", "aws_region": "eu-west-2"}, "resource_arns": [], "raw_record_size_bytes": 700, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "e1168f8f-385e-4d3d-9ddb-db2799ea04f0", "eventTime": "2019-03-01T00:22:23Z", "eventName": "DescribeCacheSecurityGroups", "eventSource": "elasticache.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "155.251.168.5", "userAgent": "Boto3/1.9.105 Python/2.7.16rc1 Linux/4.19.0-kali3-amd64 Botocore/1.12.105", "awsRegion": "eu-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "daf49ba8-bd27-4595-883a-576a80095393", "record_id": "flaws_cloudtrail:0000277:daf49ba8-bd27-4595-883a-576a80095393", "row_index": 277, "timestamp": "2019-03-01T00:22:23Z", "event_type": "DescribeCacheClusters", "event_source": "elasticache.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "155.251.168.5", "user_agent": "Boto3/1.9.105 Python/2.7.16rc1 Linux/4.19.0-kali3-amd64 Botocore/1.12.105", "aws_region": "eu-west-3"}, "resource_arns": [], "raw_record_size_bytes": 708, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "daf49ba8-bd27-4595-883a-576a80095393", "eventTime": "2019-03-01T00:22:23Z", "eventName": "DescribeCacheClusters", "eventSource": "elasticache.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "155.251.168.5", "userAgent": "Boto3/1.9.105 Python/2.7.16rc1 Linux/4.19.0-kali3-amd64 Botocore/1.12.105", "awsRegion": "eu-west-3", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"maxRecords": 100}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "76778fee-1642-4052-98c8-370e1e3a9bb3", "record_id": "flaws_cloudtrail:0000278:76778fee-1642-4052-98c8-370e1e3a9bb3", "row_index": 278, "timestamp": "2019-03-01T00:22:23Z", "event_type": "DescribeCacheSecurityGroups", "event_source": "elasticache.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "155.251.168.5", "user_agent": "Boto3/1.9.105 Python/2.7.16rc1 Linux/4.19.0-kali3-amd64 Botocore/1.12.105", "aws_region": "eu-west-3"}, "resource_arns": [], "raw_record_size_bytes": 700, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "76778fee-1642-4052-98c8-370e1e3a9bb3", "eventTime": "2019-03-01T00:22:23Z", "eventName": "DescribeCacheSecurityGroups", "eventSource": "elasticache.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "155.251.168.5", "userAgent": "Boto3/1.9.105 Python/2.7.16rc1 Linux/4.19.0-kali3-amd64 Botocore/1.12.105", "awsRegion": "eu-west-3", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "0510c6c6-85d5-4d27-b269-1056c3d25da5", "record_id": "flaws_cloudtrail:0000279:0510c6c6-85d5-4d27-b269-1056c3d25da5", "row_index": 279, "timestamp": "2019-03-01T00:22:23Z", "event_type": "DescribeCacheClusters", "event_source": "elasticache.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "155.251.168.5", "user_agent": "Boto3/1.9.105 Python/2.7.16rc1 Linux/4.19.0-kali3-amd64 Botocore/1.12.105", "aws_region": "ap-northeast-1"}, "resource_arns": [], "raw_record_size_bytes": 713, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "0510c6c6-85d5-4d27-b269-1056c3d25da5", "eventTime": "2019-03-01T00:22:23Z", "eventName": "DescribeCacheClusters", "eventSource": "elasticache.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "155.251.168.5", "userAgent": "Boto3/1.9.105 Python/2.7.16rc1 Linux/4.19.0-kali3-amd64 Botocore/1.12.105", "awsRegion": "ap-northeast-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"maxRecords": 100}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "75383b7f-8c53-47ce-8e1d-1c6f29daa3f1", "record_id": "flaws_cloudtrail:0000280:75383b7f-8c53-47ce-8e1d-1c6f29daa3f1", "row_index": 280, "timestamp": "2019-03-01T00:22:23Z", "event_type": "DescribeCacheSecurityGroups", "event_source": "elasticache.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "155.251.168.5", "user_agent": "Boto3/1.9.105 Python/2.7.16rc1 Linux/4.19.0-kali3-amd64 Botocore/1.12.105", "aws_region": "ap-northeast-1"}, "resource_arns": [], "raw_record_size_bytes": 706, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "75383b7f-8c53-47ce-8e1d-1c6f29daa3f1", "eventTime": "2019-03-01T00:22:23Z", "eventName": "DescribeCacheSecurityGroups", "eventSource": "elasticache.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "155.251.168.5", "userAgent": "Boto3/1.9.105 Python/2.7.16rc1 Linux/4.19.0-kali3-amd64 Botocore/1.12.105", "awsRegion": "ap-northeast-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "585b37ed-716f-4375-8586-868cf090090e", "record_id": "flaws_cloudtrail:0000281:585b37ed-716f-4375-8586-868cf090090e", "row_index": 281, "timestamp": "2019-03-01T00:22:23Z", "event_type": "DescribeCacheClusters", "event_source": "elasticache.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "155.251.168.5", "user_agent": "Boto3/1.9.105 Python/2.7.16rc1 Linux/4.19.0-kali3-amd64 Botocore/1.12.105", "aws_region": "ap-northeast-2"}, "resource_arns": [], "raw_record_size_bytes": 713, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "585b37ed-716f-4375-8586-868cf090090e", "eventTime": "2019-03-01T00:22:23Z", "eventName": "DescribeCacheClusters", "eventSource": "elasticache.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "155.251.168.5", "userAgent": "Boto3/1.9.105 Python/2.7.16rc1 Linux/4.19.0-kali3-amd64 Botocore/1.12.105", "awsRegion": "ap-northeast-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"maxRecords": 100}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "d20dc57f-2a16-4c4f-a2b9-477a6e926a2c", "record_id": "flaws_cloudtrail:0000282:d20dc57f-2a16-4c4f-a2b9-477a6e926a2c", "row_index": 282, "timestamp": "2019-03-01T00:22:23Z", "event_type": "DescribeCacheSecurityGroups", "event_source": "elasticache.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "155.251.168.5", "user_agent": "Boto3/1.9.105 Python/2.7.16rc1 Linux/4.19.0-kali3-amd64 Botocore/1.12.105", "aws_region": "ap-northeast-2"}, "resource_arns": [], "raw_record_size_bytes": 705, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "d20dc57f-2a16-4c4f-a2b9-477a6e926a2c", "eventTime": "2019-03-01T00:22:23Z", "eventName": "DescribeCacheSecurityGroups", "eventSource": "elasticache.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "155.251.168.5", "userAgent": "Boto3/1.9.105 Python/2.7.16rc1 Linux/4.19.0-kali3-amd64 Botocore/1.12.105", "awsRegion": "ap-northeast-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "79f854d7-eb88-47d1-8f3e-5287b671e1e4", "record_id": "flaws_cloudtrail:0000283:79f854d7-eb88-47d1-8f3e-5287b671e1e4", "row_index": 283, "timestamp": "2019-03-01T00:22:23Z", "event_type": "DescribeCacheClusters", "event_source": "elasticache.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "155.251.168.5", "user_agent": "Boto3/1.9.105 Python/2.7.16rc1 Linux/4.19.0-kali3-amd64 Botocore/1.12.105", "aws_region": "ap-south-1"}, "resource_arns": [], "raw_record_size_bytes": 709, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "79f854d7-eb88-47d1-8f3e-5287b671e1e4", "eventTime": "2019-03-01T00:22:23Z", "eventName": "DescribeCacheClusters", "eventSource": "elasticache.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "155.251.168.5", "userAgent": "Boto3/1.9.105 Python/2.7.16rc1 Linux/4.19.0-kali3-amd64 Botocore/1.12.105", "awsRegion": "ap-south-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"maxRecords": 100}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "8258dc85-cc7e-412b-ba84-d16dcd43305", "record_id": "flaws_cloudtrail:0000284:8258dc85-cc7e-412b-ba84-d16dcd43305", "row_index": 284, "timestamp": "2019-03-01T00:22:23Z", "event_type": "DescribeCacheSecurityGroups", "event_source": "elasticache.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "155.251.168.5", "user_agent": "Boto3/1.9.105 Python/2.7.16rc1 Linux/4.19.0-kali3-amd64 Botocore/1.12.105", "aws_region": "ap-south-1"}, "resource_arns": [], "raw_record_size_bytes": 700, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "8258dc85-cc7e-412b-ba84-d16dcd43305", "eventTime": "2019-03-01T00:22:23Z", "eventName": "DescribeCacheSecurityGroups", "eventSource": "elasticache.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "155.251.168.5", "userAgent": "Boto3/1.9.105 Python/2.7.16rc1 Linux/4.19.0-kali3-amd64 Botocore/1.12.105", "awsRegion": "ap-south-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "32681f-82c2-4362-8b98-e8f3b2d296b5", "record_id": "flaws_cloudtrail:0000285:32681f-82c2-4362-8b98-e8f3b2d296b5", "row_index": 285, "timestamp": "2019-03-01T00:22:23Z", "event_type": "DescribeCacheSecurityGroups", "event_source": "elasticache.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "155.251.168.5", "user_agent": "Boto3/1.9.105 Python/2.7.16rc1 Linux/4.19.0-kali3-amd64 Botocore/1.12.105", "aws_region": "ap-southeast-1"}, "resource_arns": [], "raw_record_size_bytes": 703, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "32681f-82c2-4362-8b98-e8f3b2d296b5", "eventTime": "2019-03-01T00:22:23Z", "eventName": "DescribeCacheSecurityGroups", "eventSource": "elasticache.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "155.251.168.5", "userAgent": "Boto3/1.9.105 Python/2.7.16rc1 Linux/4.19.0-kali3-amd64 Botocore/1.12.105", "awsRegion": "ap-southeast-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "f907d5c1-1787-4236-b14f-b37c6c0918f7", "record_id": "flaws_cloudtrail:0000286:f907d5c1-1787-4236-b14f-b37c6c0918f7", "row_index": 286, "timestamp": "2019-03-01T00:22:23Z", "event_type": "DescribeCacheClusters", "event_source": "elasticache.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "155.251.168.5", "user_agent": "Boto3/1.9.105 Python/2.7.16rc1 Linux/4.19.0-kali3-amd64 Botocore/1.12.105", "aws_region": "ap-southeast-2"}, "resource_arns": [], "raw_record_size_bytes": 714, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "f907d5c1-1787-4236-b14f-b37c6c0918f7", "eventTime": "2019-03-01T00:22:23Z", "eventName": "DescribeCacheClusters", "eventSource": "elasticache.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "155.251.168.5", "userAgent": "Boto3/1.9.105 Python/2.7.16rc1 Linux/4.19.0-kali3-amd64 Botocore/1.12.105", "awsRegion": "ap-southeast-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"maxRecords": 100}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "4fcaaa48-bbfb-47e5-b84a-7b4d1d7643c6", "record_id": "flaws_cloudtrail:0000287:4fcaaa48-bbfb-47e5-b84a-7b4d1d7643c6", "row_index": 287, "timestamp": "2019-03-01T00:22:23Z", "event_type": "DescribeCacheSecurityGroups", "event_source": "elasticache.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "155.251.168.5", "user_agent": "Boto3/1.9.105 Python/2.7.16rc1 Linux/4.19.0-kali3-amd64 Botocore/1.12.105", "aws_region": "eu-central-1"}, "resource_arns": [], "raw_record_size_bytes": 702, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "4fcaaa48-bbfb-47e5-b84a-7b4d1d7643c6", "eventTime": "2019-03-01T00:22:23Z", "eventName": "DescribeCacheSecurityGroups", "eventSource": "elasticache.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "155.251.168.5", "userAgent": "Boto3/1.9.105 Python/2.7.16rc1 Linux/4.19.0-kali3-amd64 Botocore/1.12.105", "awsRegion": "eu-central-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "e207971bc-9d84-4904-a39b-1ab9f4390525", "record_id": "flaws_cloudtrail:0000288:e207971bc-9d84-4904-a39b-1ab9f4390525", "row_index": 288, "timestamp": "2019-03-01T00:22:23Z", "event_type": "DescribeCacheClusters", "event_source": "elasticache.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "155.251.168.5", "user_agent": "Boto3/1.9.105 Python/2.7.16rc1 Linux/4.19.0-kali3-amd64 Botocore/1.12.105", "aws_region": "eu-central-1"}, "resource_arns": [], "raw_record_size_bytes": 711, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "e207971bc-9d84-4904-a39b-1ab9f4390525", "eventTime": "2019-03-01T00:22:23Z", "eventName": "DescribeCacheClusters", "eventSource": "elasticache.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "155.251.168.5", "userAgent": "Boto3/1.9.105 Python/2.7.16rc1 Linux/4.19.0-kali3-amd64 Botocore/1.12.105", "awsRegion": "eu-central-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"maxRecords": 100}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "9d7610fd-8e2a-49ed-8e43-f508611e32d4", "record_id": "flaws_cloudtrail:0000289:9d7610fd-8e2a-49ed-8e43-f508611e32d4", "row_index": 289, "timestamp": "2019-03-01T00:22:23Z", "event_type": "DescribeCacheSecurityGroups", "event_source": "elasticache.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "155.251.168.5", "user_agent": "Boto3/1.9.105 Python/2.7.16rc1 Linux/4.19.0-kali3-amd64 Botocore/1.12.105", "aws_region": "eu-west-1"}, "resource_arns": [], "raw_record_size_bytes": 700, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "9d7610fd-8e2a-49ed-8e43-f508611e32d4", "eventTime": "2019-03-01T00:22:23Z", "eventName": "DescribeCacheSecurityGroups", "eventSource": "elasticache.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "155.251.168.5", "userAgent": "Boto3/1.9.105 Python/2.7.16rc1 Linux/4.19.0-kali3-amd64 Botocore/1.12.105", "awsRegion": "eu-west-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "881760c2d-8079-4d35-9b27-1587b962000c6", "record_id": "flaws_cloudtrail:0000290:881760c2d-8079-4d35-9b27-1587b962000c6", "row_index": 290, "timestamp": "2019-03-01T00:22:23Z", "event_type": "DescribeCacheClusters", "event_source": "elasticache.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "155.251.168.5", "user_agent": "Boto3/1.9.105 Python/2.7.16rc1 Linux/4.19.0-kali3-amd64 Botocore/1.12.105", "aws_region": "eu-west-1"}, "resource_arns": [], "raw_record_size_bytes": 710, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "881760c2d-8079-4d35-9b27-1587b962000c6", "eventTime": "2019-03-01T00:22:23Z", "eventName": "DescribeCacheClusters", "eventSource": "elasticache.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "155.251.168.5", "userAgent": "Boto3/1.9.105 Python/2.7.16rc1 Linux/4.19.0-kali3-amd64 Botocore/1.12.105", "awsRegion": "eu-west-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"maxRecords": 100}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "aacdfb6e-767f-4e88-b2b9-7b5ed5425fc6", "record_id": "flaws_cloudtrail:0000291:aacdfb6e-767f-4e88-b2b9-7b5ed5425fc6", "row_index": 291, "timestamp": "2019-03-01T00:22:23Z", "event_type": "DescribeCacheClusters", "event_source": "elasticache.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "155.251.168.5", "user_agent": "Boto3/1.9.105 Python/2.7.16rc1 Linux/4.19.0-kali3-amd64 Botocore/1.12.105", "aws_region": "eu-west-2"}, "resource_arns": [], "raw_record_size_bytes": 708, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "aacdfb6e-767f-4e88-b2b9-7b5ed5425fc6", "eventTime": "2019-03-01T00:22:23Z", "eventName": "DescribeCacheClusters", "eventSource": "elasticache.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "155.251.168.5", "userAgent": "Boto3/1.9.105 Python/2.7.16rc1 Linux/4.19.0-kali3-amd64 Botocore/1.12.105", "awsRegion": "eu-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"maxRecords": 100}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "e1168f8f-385e-4d3d-9ddb-db2799ea04f0", "record_id": "flaws_cloudtrail:0000292:e1168f8f-385e-4d3d-9ddb-db2799ea04f0", "row_index": 292, "timestamp": "2019-03-01T00:22:23Z", "event_type": "DescribeCacheSecurityGroups", "event_source": "elasticache.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "155.251.168.5", "user_agent": "Boto3/1.9.105 Python/2.7.16rc1 Linux/4.19.0-kali3-amd64 Botocore/1.12.105", "aws_region": "eu-west-2"}, "resource_arns": [], "raw_record_size_bytes": 700, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "e1168f8f-385e-4d3d-9ddb-db2799ea04f0", "eventTime": "2019-03-01T00:22:23Z", "eventName": "DescribeCacheSecurityGroups", "eventSource": "elasticache.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "155.251.168.5", "userAgent": "Boto3/1.9.105 Python/2.7.16rc1 Linux/4.19.0-kali3-amd64 Botocore/1.12.105", "awsRegion": "eu-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "daf49ba8-bd27-4595-883a-576a80095393", "record_id": "flaws_cloudtrail:0000293:daf49ba8-bd27-4595-883a-576a80095393", "row_index": 293, "timestamp": "2019-03-01T00:22:23Z", "event_type": "DescribeCacheClusters", "event_source": "elasticache.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "155.251.168.5", "user_agent": "Boto3/1.9.105 Python/2.7.16rc1 Linux/4.19.0-kali3-amd64 Botocore/1.12.105", "aws_region": "eu-west-3"}, "resource_arns": [], "raw_record_size_bytes": 708, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "daf49ba8-bd27-4595-883a-576a80095393", "eventTime": "2019-03-01T00:22:23Z", "eventName": "DescribeCacheClusters", "eventSource": "elasticache.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "155.251.168.5", "userAgent": "Boto3/1.9.105 Python/2.7.16rc1 Linux/4.19.0-kali3-amd64 Botocore/1.12.105", "awsRegion": "eu-west-3", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"maxRecords": 100}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "76778fee-1642-4052-98c8-370e1e3a9bb3", "record_id": "flaws_cloudtrail:0000294:76778fee-1642-4052-98c8-370e1e3a9bb3", "row_index": 294, "timestamp": "2019-03-01T00:22:23Z", "event_type": "DescribeCacheSecurityGroups", "event_source": "elasticache.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "155.251.168.5", "user_agent": "Boto3/1.9.105 Python/2.7.16rc1 Linux/4.19.0-kali3-amd64 Botocore/1.12.105", "aws_region": "eu-west-3"}, "resource_arns": [], "raw_record_size_bytes": 700, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "76778fee-1642-4052-98c8-370e1e3a9bb3", "eventTime": "2019-03-01T00:22:23Z", "eventName": "DescribeCacheSecurityGroups", "eventSource": "elasticache.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "155.251.168.5", "userAgent": "Boto3/1.9.105 Python/2.7.16rc1 Linux/4.19.0-kali3-amd64 Botocore/1.12.105", "awsRegion": "eu-west-3", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "97396-aa32-424d-974d-5afd67796a04", "record_id": "flaws_cloudtrail:0000295:97396-aa32-424d-974d-5afd67796a04", "row_index": 295, "timestamp": "2019-03-01T00:22:24Z", "event_type": "DescribeCacheSecurityGroups", "event_source": "elasticache.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "155.251.168.5", "user_agent": "Boto3/1.9.105 Python/2.7.16rc1 Linux/4.19.0-kali3-amd64 Botocore/1.12.105", "aws_region": "ap-southeast-2"}, "resource_arns": [], "raw_record_size_bytes": 702, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "97396-aa32-424d-974d-5afd67796a04", "eventTime": "2019-03-01T00:22:24Z", "eventName": "DescribeCacheSecurityGroups", "eventSource": "elasticache.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "155.251.168.5", "userAgent": "Boto3/1.9.105 Python/2.7.16rc1 Linux/4.19.0-kali3-amd64 Botocore/1.12.105", "awsRegion": "ap-southeast-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "e048d358-c84e-4728-9e58-a5e707db2009", "record_id": "flaws_cloudtrail:0000296:e048d358-c84e-4728-9e58-a5e707db2009", "row_index": 296, "timestamp": "2019-03-01T00:22:24Z", "event_type": "DescribeCacheSecurityGroups", "event_source": "elasticache.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "155.251.168.5", "user_agent": "Boto3/1.9.105 Python/2.7.16rc1 Linux/4.19.0-kali3-amd64 Botocore/1.12.105", "aws_region": "eu-north-1"}, "resource_arns": [], "raw_record_size_bytes": 701, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "e048d358-c84e-4728-9e58-a5e707db2009", "eventTime": "2019-03-01T00:22:24Z", "eventName": "DescribeCacheSecurityGroups", "eventSource": "elasticache.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "155.251.168.5", "userAgent": "Boto3/1.9.105 Python/2.7.16rc1 Linux/4.19.0-kali3-amd64 Botocore/1.12.105", "awsRegion": "eu-north-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "8037ff89-5076-4bb8-8f40-5b570bb57fc6", "record_id": "flaws_cloudtrail:0000297:8037ff89-5076-4bb8-8f40-5b570bb57fc6", "row_index": 297, "timestamp": "2019-03-01T00:22:24Z", "event_type": "DescribeCacheClusters", "event_source": "elasticache.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "155.251.168.5", "user_agent": "Boto3/1.9.105 Python/2.7.16rc1 Linux/4.19.0-kali3-amd64 Botocore/1.12.105", "aws_region": "eu-north-1"}, "resource_arns": [], "raw_record_size_bytes": 709, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "8037ff89-5076-4bb8-8f40-5b570bb57fc6", "eventTime": "2019-03-01T00:22:24Z", "eventName": "DescribeCacheClusters", "eventSource": "elasticache.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "155.251.168.5", "userAgent": "Boto3/1.9.105 Python/2.7.16rc1 Linux/4.19.0-kali3-amd64 Botocore/1.12.105", "awsRegion": "eu-north-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"maxRecords": 100}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "97396-aa32-424d-974d-5afd67796a04", "record_id": "flaws_cloudtrail:0000298:97396-aa32-424d-974d-5afd67796a04", "row_index": 298, "timestamp": "2019-03-01T00:22:24Z", "event_type": "DescribeCacheSecurityGroups", "event_source": "elasticache.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "155.251.168.5", "user_agent": "Boto3/1.9.105 Python/2.7.16rc1 Linux/4.19.0-kali3-amd64 Botocore/1.12.105", "aws_region": "ap-southeast-2"}, "resource_arns": [], "raw_record_size_bytes": 702, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "97396-aa32-424d-974d-5afd67796a04", "eventTime": "2019-03-01T00:22:24Z", "eventName": "DescribeCacheSecurityGroups", "eventSource": "elasticache.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "155.251.168.5", "userAgent": "Boto3/1.9.105 Python/2.7.16rc1 Linux/4.19.0-kali3-amd64 Botocore/1.12.105", "awsRegion": "ap-southeast-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "e048d358-c84e-4728-9e58-a5e707db2009", "record_id": "flaws_cloudtrail:0000299:e048d358-c84e-4728-9e58-a5e707db2009", "row_index": 299, "timestamp": "2019-03-01T00:22:24Z", "event_type": "DescribeCacheSecurityGroups", "event_source": "elasticache.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "155.251.168.5", "user_agent": "Boto3/1.9.105 Python/2.7.16rc1 Linux/4.19.0-kali3-amd64 Botocore/1.12.105", "aws_region": "eu-north-1"}, "resource_arns": [], "raw_record_size_bytes": 701, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "e048d358-c84e-4728-9e58-a5e707db2009", "eventTime": "2019-03-01T00:22:24Z", "eventName": "DescribeCacheSecurityGroups", "eventSource": "elasticache.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "155.251.168.5", "userAgent": "Boto3/1.9.105 Python/2.7.16rc1 Linux/4.19.0-kali3-amd64 Botocore/1.12.105", "awsRegion": "eu-north-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "8037ff89-5076-4bb8-8f40-5b570bb57fc6", "record_id": "flaws_cloudtrail:0000300:8037ff89-5076-4bb8-8f40-5b570bb57fc6", "row_index": 300, "timestamp": "2019-03-01T00:22:24Z", "event_type": "DescribeCacheClusters", "event_source": "elasticache.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "155.251.168.5", "user_agent": "Boto3/1.9.105 Python/2.7.16rc1 Linux/4.19.0-kali3-amd64 Botocore/1.12.105", "aws_region": "eu-north-1"}, "resource_arns": [], "raw_record_size_bytes": 709, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "8037ff89-5076-4bb8-8f40-5b570bb57fc6", "eventTime": "2019-03-01T00:22:24Z", "eventName": "DescribeCacheClusters", "eventSource": "elasticache.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "155.251.168.5", "userAgent": "Boto3/1.9.105 Python/2.7.16rc1 Linux/4.19.0-kali3-amd64 Botocore/1.12.105", "awsRegion": "eu-north-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"maxRecords": 100}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "5886d181-7931-4f10-97ed-ca1d4ca27ebc", "record_id": "flaws_cloudtrail:0000301:5886d181-7931-4f10-97ed-ca1d4ca27ebc", "row_index": 301, "timestamp": "2019-03-01T00:22:25Z", "event_type": "DescribeCacheClusters", "event_source": "elasticache.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "155.251.168.5", "user_agent": "Boto3/1.9.105 Python/2.7.16rc1 Linux/4.19.0-kali3-amd64 Botocore/1.12.105", "aws_region": "sa-east-1"}, "resource_arns": [], "raw_record_size_bytes": 707, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "5886d181-7931-4f10-97ed-ca1d4ca27ebc", "eventTime": "2019-03-01T00:22:25Z", "eventName": "DescribeCacheClusters", "eventSource": "elasticache.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "155.251.168.5", "userAgent": "Boto3/1.9.105 Python/2.7.16rc1 Linux/4.19.0-kali3-amd64 Botocore/1.12.105", "awsRegion": "sa-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"maxRecords": 100}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "dd29a7d2-b12b-45f0-afc0-ea01e2226b5e", "record_id": "flaws_cloudtrail:0000302:dd29a7d2-b12b-45f0-afc0-ea01e2226b5e", "row_index": 302, "timestamp": "2019-03-01T00:22:25Z", "event_type": "DescribeCacheClusters", "event_source": "elasticache.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "155.251.168.5", "user_agent": "Boto3/1.9.105 Python/2.7.16rc1 Linux/4.19.0-kali3-amd64 Botocore/1.12.105", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 708, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "dd29a7d2-b12b-45f0-afc0-ea01e2226b5e", "eventTime": "2019-03-01T00:22:25Z", "eventName": "DescribeCacheClusters", "eventSource": "elasticache.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "155.251.168.5", "userAgent": "Boto3/1.9.105 Python/2.7.16rc1 Linux/4.19.0-kali3-amd64 Botocore/1.12.105", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"maxRecords": 100}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "40cafe9c-eb8e-4f30-ac3d-d1c6079200f7", "record_id": "flaws_cloudtrail:0000303:40cafe9c-eb8e-4f30-ac3d-d1c6079200f7", "row_index": 303, "timestamp": "2019-03-01T00:22:25Z", "event_type": "DescribeCacheSecurityGroups", "event_source": "elasticache.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "155.251.168.5", "user_agent": "Boto3/1.9.105 Python/2.7.16rc1 Linux/4.19.0-kali3-amd64 Botocore/1.12.105", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 700, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "40cafe9c-eb8e-4f30-ac3d-d1c6079200f7", "eventTime": "2019-03-01T00:22:25Z", "eventName": "DescribeCacheSecurityGroups", "eventSource": "elasticache.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "155.251.168.5", "userAgent": "Boto3/1.9.105 Python/2.7.16rc1 Linux/4.19.0-kali3-amd64 Botocore/1.12.105", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "4aef9649-6367-4d89-a444-2b271a411915b", "record_id": "flaws_cloudtrail:0000304:4aef9649-6367-4d89-a444-2b271a411915b", "row_index": 304, "timestamp": "2019-03-01T00:22:25Z", "event_type": "DescribeCacheClusters", "event_source": "elasticache.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "155.251.168.5", "user_agent": "Boto3/1.9.105 Python/2.7.16rc1 Linux/4.19.0-kali3-amd64 Botocore/1.12.105", "aws_region": "us-east-2"}, "resource_arns": [], "raw_record_size_bytes": 709, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "4aef9649-6367-4d89-a444-2b271a411915b", "eventTime": "2019-03-01T00:22:25Z", "eventName": "DescribeCacheClusters", "eventSource": "elasticache.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "155.251.168.5", "userAgent": "Boto3/1.9.105 Python/2.7.16rc1 Linux/4.19.0-kali3-amd64 Botocore/1.12.105", "awsRegion": "us-east-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"maxRecords": 100}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "0daa1823-05b8-4c73-a198-49c9a5c5ab66", "record_id": "flaws_cloudtrail:0000305:0daa1823-05b8-4c73-a198-49c9a5c5ab66", "row_index": 305, "timestamp": "2019-03-01T00:22:25Z", "event_type": "DescribeCacheSecurityGroups", "event_source": "elasticache.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "155.251.168.5", "user_agent": "Boto3/1.9.105 Python/2.7.16rc1 Linux/4.19.0-kali3-amd64 Botocore/1.12.105", "aws_region": "us-east-2"}, "resource_arns": [], "raw_record_size_bytes": 700, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "0daa1823-05b8-4c73-a198-49c9a5c5ab66", "eventTime": "2019-03-01T00:22:25Z", "eventName": "DescribeCacheSecurityGroups", "eventSource": "elasticache.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "155.251.168.5", "userAgent": "Boto3/1.9.105 Python/2.7.16rc1 Linux/4.19.0-kali3-amd64 Botocore/1.12.105", "awsRegion": "us-east-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "e6f076c5-e745-4793-b905-5c4949f351749", "record_id": "flaws_cloudtrail:0000306:e6f076c5-e745-4793-b905-5c4949f351749", "row_index": 306, "timestamp": "2019-03-01T00:22:25Z", "event_type": "DescribeCacheClusters", "event_source": "elasticache.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "155.251.168.5", "user_agent": "Boto3/1.9.105 Python/2.7.16rc1 Linux/4.19.0-kali3-amd64 Botocore/1.12.105", "aws_region": "us-west-1"}, "resource_arns": [], "raw_record_size_bytes": 709, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "e6f076c5-e745-4793-b905-5c4949f351749", "eventTime": "2019-03-01T00:22:25Z", "eventName": "DescribeCacheClusters", "eventSource": "elasticache.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "155.251.168.5", "userAgent": "Boto3/1.9.105 Python/2.7.16rc1 Linux/4.19.0-kali3-amd64 Botocore/1.12.105", "awsRegion": "us-west-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"maxRecords": 100}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "ba2eef53-a532-4e4a-b550-76bee07939", "record_id": "flaws_cloudtrail:0000307:ba2eef53-a532-4e4a-b550-76bee07939", "row_index": 307, "timestamp": "2019-03-01T00:22:25Z", "event_type": "DescribeCacheSecurityGroups", "event_source": "elasticache.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "155.251.168.5", "user_agent": "Boto3/1.9.105 Python/2.7.16rc1 Linux/4.19.0-kali3-amd64 Botocore/1.12.105", "aws_region": "us-west-1"}, "resource_arns": [], "raw_record_size_bytes": 698, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "ba2eef53-a532-4e4a-b550-76bee07939", "eventTime": "2019-03-01T00:22:25Z", "eventName": "DescribeCacheSecurityGroups", "eventSource": "elasticache.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "155.251.168.5", "userAgent": "Boto3/1.9.105 Python/2.7.16rc1 Linux/4.19.0-kali3-amd64 Botocore/1.12.105", "awsRegion": "us-west-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "da5ffe18-9b1a-4fa5-af5f-3938827d912e", "record_id": "flaws_cloudtrail:0000308:da5ffe18-9b1a-4fa5-af5f-3938827d912e", "row_index": 308, "timestamp": "2019-03-01T00:22:25Z", "event_type": "DescribeCacheSecurityGroups", "event_source": "elasticache.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "155.251.168.5", "user_agent": "Boto3/1.9.105 Python/2.7.16rc1 Linux/4.19.0-kali3-amd64 Botocore/1.12.105", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 700, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "da5ffe18-9b1a-4fa5-af5f-3938827d912e", "eventTime": "2019-03-01T00:22:25Z", "eventName": "DescribeCacheSecurityGroups", "eventSource": "elasticache.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "155.251.168.5", "userAgent": "Boto3/1.9.105 Python/2.7.16rc1 Linux/4.19.0-kali3-amd64 Botocore/1.12.105", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "8798bfed-ae30-471a-8a5a-4b78d0eba2ce", "record_id": "flaws_cloudtrail:0000309:8798bfed-ae30-471a-8a5a-4b78d0eba2ce", "row_index": 309, "timestamp": "2019-03-01T00:22:25Z", "event_type": "DescribeCacheClusters", "event_source": "elasticache.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "155.251.168.5", "user_agent": "Boto3/1.9.105 Python/2.7.16rc1 Linux/4.19.0-kali3-amd64 Botocore/1.12.105", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 708, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "8798bfed-ae30-471a-8a5a-4b78d0eba2ce", "eventTime": "2019-03-01T00:22:25Z", "eventName": "DescribeCacheClusters", "eventSource": "elasticache.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "155.251.168.5", "userAgent": "Boto3/1.9.105 Python/2.7.16rc1 Linux/4.19.0-kali3-amd64 Botocore/1.12.105", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"maxRecords": 100}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "5886d181-7931-4f10-97ed-ca1d4ca27ebc", "record_id": "flaws_cloudtrail:0000310:5886d181-7931-4f10-97ed-ca1d4ca27ebc", "row_index": 310, "timestamp": "2019-03-01T00:22:25Z", "event_type": "DescribeCacheClusters", "event_source": "elasticache.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "155.251.168.5", "user_agent": "Boto3/1.9.105 Python/2.7.16rc1 Linux/4.19.0-kali3-amd64 Botocore/1.12.105", "aws_region": "sa-east-1"}, "resource_arns": [], "raw_record_size_bytes": 707, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "5886d181-7931-4f10-97ed-ca1d4ca27ebc", "eventTime": "2019-03-01T00:22:25Z", "eventName": "DescribeCacheClusters", "eventSource": "elasticache.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "155.251.168.5", "userAgent": "Boto3/1.9.105 Python/2.7.16rc1 Linux/4.19.0-kali3-amd64 Botocore/1.12.105", "awsRegion": "sa-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"maxRecords": 100}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "dd29a7d2-b12b-45f0-afc0-ea01e2226b5e", "record_id": "flaws_cloudtrail:0000311:dd29a7d2-b12b-45f0-afc0-ea01e2226b5e", "row_index": 311, "timestamp": "2019-03-01T00:22:25Z", "event_type": "DescribeCacheClusters", "event_source": "elasticache.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "155.251.168.5", "user_agent": "Boto3/1.9.105 Python/2.7.16rc1 Linux/4.19.0-kali3-amd64 Botocore/1.12.105", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 708, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "dd29a7d2-b12b-45f0-afc0-ea01e2226b5e", "eventTime": "2019-03-01T00:22:25Z", "eventName": "DescribeCacheClusters", "eventSource": "elasticache.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "155.251.168.5", "userAgent": "Boto3/1.9.105 Python/2.7.16rc1 Linux/4.19.0-kali3-amd64 Botocore/1.12.105", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"maxRecords": 100}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "40cafe9c-eb8e-4f30-ac3d-d1c6079200f7", "record_id": "flaws_cloudtrail:0000312:40cafe9c-eb8e-4f30-ac3d-d1c6079200f7", "row_index": 312, "timestamp": "2019-03-01T00:22:25Z", "event_type": "DescribeCacheSecurityGroups", "event_source": "elasticache.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "155.251.168.5", "user_agent": "Boto3/1.9.105 Python/2.7.16rc1 Linux/4.19.0-kali3-amd64 Botocore/1.12.105", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 700, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "40cafe9c-eb8e-4f30-ac3d-d1c6079200f7", "eventTime": "2019-03-01T00:22:25Z", "eventName": "DescribeCacheSecurityGroups", "eventSource": "elasticache.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "155.251.168.5", "userAgent": "Boto3/1.9.105 Python/2.7.16rc1 Linux/4.19.0-kali3-amd64 Botocore/1.12.105", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "4aef9649-6367-4d89-a444-2b271a411915b", "record_id": "flaws_cloudtrail:0000313:4aef9649-6367-4d89-a444-2b271a411915b", "row_index": 313, "timestamp": "2019-03-01T00:22:25Z", "event_type": "DescribeCacheClusters", "event_source": "elasticache.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "155.251.168.5", "user_agent": "Boto3/1.9.105 Python/2.7.16rc1 Linux/4.19.0-kali3-amd64 Botocore/1.12.105", "aws_region": "us-east-2"}, "resource_arns": [], "raw_record_size_bytes": 709, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "4aef9649-6367-4d89-a444-2b271a411915b", "eventTime": "2019-03-01T00:22:25Z", "eventName": "DescribeCacheClusters", "eventSource": "elasticache.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "155.251.168.5", "userAgent": "Boto3/1.9.105 Python/2.7.16rc1 Linux/4.19.0-kali3-amd64 Botocore/1.12.105", "awsRegion": "us-east-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"maxRecords": 100}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "0daa1823-05b8-4c73-a198-49c9a5c5ab66", "record_id": "flaws_cloudtrail:0000314:0daa1823-05b8-4c73-a198-49c9a5c5ab66", "row_index": 314, "timestamp": "2019-03-01T00:22:25Z", "event_type": "DescribeCacheSecurityGroups", "event_source": "elasticache.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "155.251.168.5", "user_agent": "Boto3/1.9.105 Python/2.7.16rc1 Linux/4.19.0-kali3-amd64 Botocore/1.12.105", "aws_region": "us-east-2"}, "resource_arns": [], "raw_record_size_bytes": 700, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "0daa1823-05b8-4c73-a198-49c9a5c5ab66", "eventTime": "2019-03-01T00:22:25Z", "eventName": "DescribeCacheSecurityGroups", "eventSource": "elasticache.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "155.251.168.5", "userAgent": "Boto3/1.9.105 Python/2.7.16rc1 Linux/4.19.0-kali3-amd64 Botocore/1.12.105", "awsRegion": "us-east-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "e6f076c5-e745-4793-b905-5c4949f351749", "record_id": "flaws_cloudtrail:0000315:e6f076c5-e745-4793-b905-5c4949f351749", "row_index": 315, "timestamp": "2019-03-01T00:22:25Z", "event_type": "DescribeCacheClusters", "event_source": "elasticache.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "155.251.168.5", "user_agent": "Boto3/1.9.105 Python/2.7.16rc1 Linux/4.19.0-kali3-amd64 Botocore/1.12.105", "aws_region": "us-west-1"}, "resource_arns": [], "raw_record_size_bytes": 709, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "e6f076c5-e745-4793-b905-5c4949f351749", "eventTime": "2019-03-01T00:22:25Z", "eventName": "DescribeCacheClusters", "eventSource": "elasticache.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "155.251.168.5", "userAgent": "Boto3/1.9.105 Python/2.7.16rc1 Linux/4.19.0-kali3-amd64 Botocore/1.12.105", "awsRegion": "us-west-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"maxRecords": 100}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "ba2eef53-a532-4e4a-b550-76bee07939", "record_id": "flaws_cloudtrail:0000316:ba2eef53-a532-4e4a-b550-76bee07939", "row_index": 316, "timestamp": "2019-03-01T00:22:25Z", "event_type": "DescribeCacheSecurityGroups", "event_source": "elasticache.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "155.251.168.5", "user_agent": "Boto3/1.9.105 Python/2.7.16rc1 Linux/4.19.0-kali3-amd64 Botocore/1.12.105", "aws_region": "us-west-1"}, "resource_arns": [], "raw_record_size_bytes": 698, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "ba2eef53-a532-4e4a-b550-76bee07939", "eventTime": "2019-03-01T00:22:25Z", "eventName": "DescribeCacheSecurityGroups", "eventSource": "elasticache.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "155.251.168.5", "userAgent": "Boto3/1.9.105 Python/2.7.16rc1 Linux/4.19.0-kali3-amd64 Botocore/1.12.105", "awsRegion": "us-west-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "da5ffe18-9b1a-4fa5-af5f-3938827d912e", "record_id": "flaws_cloudtrail:0000317:da5ffe18-9b1a-4fa5-af5f-3938827d912e", "row_index": 317, "timestamp": "2019-03-01T00:22:25Z", "event_type": "DescribeCacheSecurityGroups", "event_source": "elasticache.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "155.251.168.5", "user_agent": "Boto3/1.9.105 Python/2.7.16rc1 Linux/4.19.0-kali3-amd64 Botocore/1.12.105", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 700, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "da5ffe18-9b1a-4fa5-af5f-3938827d912e", "eventTime": "2019-03-01T00:22:25Z", "eventName": "DescribeCacheSecurityGroups", "eventSource": "elasticache.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "155.251.168.5", "userAgent": "Boto3/1.9.105 Python/2.7.16rc1 Linux/4.19.0-kali3-amd64 Botocore/1.12.105", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "8798bfed-ae30-471a-8a5a-4b78d0eba2ce", "record_id": "flaws_cloudtrail:0000318:8798bfed-ae30-471a-8a5a-4b78d0eba2ce", "row_index": 318, "timestamp": "2019-03-01T00:22:25Z", "event_type": "DescribeCacheClusters", "event_source": "elasticache.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "155.251.168.5", "user_agent": "Boto3/1.9.105 Python/2.7.16rc1 Linux/4.19.0-kali3-amd64 Botocore/1.12.105", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 708, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "8798bfed-ae30-471a-8a5a-4b78d0eba2ce", "eventTime": "2019-03-01T00:22:25Z", "eventName": "DescribeCacheClusters", "eventSource": "elasticache.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "155.251.168.5", "userAgent": "Boto3/1.9.105 Python/2.7.16rc1 Linux/4.19.0-kali3-amd64 Botocore/1.12.105", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"maxRecords": 100}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "18391-f5a9-4f49-8001-a36f7248c1ae", "record_id": "flaws_cloudtrail:0000319:18391-f5a9-4f49-8001-a36f7248c1ae", "row_index": 319, "timestamp": "2019-03-01T00:22:26Z", "event_type": "DescribeCacheSecurityGroups", "event_source": "elasticache.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "155.251.168.5", "user_agent": "Boto3/1.9.105 Python/2.7.16rc1 Linux/4.19.0-kali3-amd64 Botocore/1.12.105", "aws_region": "sa-east-1"}, "resource_arns": [], "raw_record_size_bytes": 698, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "18391-f5a9-4f49-8001-a36f7248c1ae", "eventTime": "2019-03-01T00:22:26Z", "eventName": "DescribeCacheSecurityGroups", "eventSource": "elasticache.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "155.251.168.5", "userAgent": "Boto3/1.9.105 Python/2.7.16rc1 Linux/4.19.0-kali3-amd64 Botocore/1.12.105", "awsRegion": "sa-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "18391-f5a9-4f49-8001-a36f7248c1ae", "record_id": "flaws_cloudtrail:0000320:18391-f5a9-4f49-8001-a36f7248c1ae", "row_index": 320, "timestamp": "2019-03-01T00:22:26Z", "event_type": "DescribeCacheSecurityGroups", "event_source": "elasticache.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "155.251.168.5", "user_agent": "Boto3/1.9.105 Python/2.7.16rc1 Linux/4.19.0-kali3-amd64 Botocore/1.12.105", "aws_region": "sa-east-1"}, "resource_arns": [], "raw_record_size_bytes": 698, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "18391-f5a9-4f49-8001-a36f7248c1ae", "eventTime": "2019-03-01T00:22:26Z", "eventName": "DescribeCacheSecurityGroups", "eventSource": "elasticache.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "155.251.168.5", "userAgent": "Boto3/1.9.105 Python/2.7.16rc1 Linux/4.19.0-kali3-amd64 Botocore/1.12.105", "awsRegion": "sa-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "aa8d9dda-ea1d-4bb8-8b4f-cfd689c301f8", "record_id": "flaws_cloudtrail:0000321:aa8d9dda-ea1d-4bb8-8b4f-cfd689c301f8", "row_index": 321, "timestamp": "2019-03-01T00:23:08Z", "event_type": "ListBuckets", "event_source": "s3.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "155.251.168.5", "user_agent": "[aws-cli/1.16.114 Python/3.6.8 Linux/4.15.0-kali2-amd64 botocore/1.12.104]", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 813, "raw_record_depth": 3, "raw_record_top_level_keys": ["additionalEventData", "awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "aa8d9dda-ea1d-4bb8-8b4f-cfd689c301f8", "eventTime": "2019-03-01T00:23:08Z", "eventName": "ListBuckets", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "155.251.168.5", "userAgent": "[aws-cli/1.16.114 Python/3.6.8 Linux/4.15.0-kali2-amd64 botocore/1.12.104]", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"host": ["s3.amazonaws.com"]}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "aa8d9dda-ea1d-4bb8-8b4f-cfd689c301f8", "record_id": "flaws_cloudtrail:0000322:aa8d9dda-ea1d-4bb8-8b4f-cfd689c301f8", "row_index": 322, "timestamp": "2019-03-01T00:23:08Z", "event_type": "ListBuckets", "event_source": "s3.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "155.251.168.5", "user_agent": "[aws-cli/1.16.114 Python/3.6.8 Linux/4.15.0-kali2-amd64 botocore/1.12.104]", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 813, "raw_record_depth": 3, "raw_record_top_level_keys": ["additionalEventData", "awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "aa8d9dda-ea1d-4bb8-8b4f-cfd689c301f8", "eventTime": "2019-03-01T00:23:08Z", "eventName": "ListBuckets", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "155.251.168.5", "userAgent": "[aws-cli/1.16.114 Python/3.6.8 Linux/4.15.0-kali2-amd64 botocore/1.12.104]", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"host": ["s3.amazonaws.com"]}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "323bde28-b869-49fd-8a0d-b2164e6621c0", "record_id": "flaws_cloudtrail:0000323:323bde28-b869-49fd-8a0d-b2164e6621c0", "row_index": 323, "timestamp": "2019-03-01T00:24:39Z", "event_type": "GetCallerIdentity", "event_source": "sts.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "155.251.168.5", "user_agent": "aws-cli/1.16.114 Python/3.6.8 Linux/4.15.0-kali2-amd64 botocore/1.12.104", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 782, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "323bde28-b869-49fd-8a0d-b2164e6621c0", "eventTime": "2019-03-01T00:24:39Z", "eventName": "GetCallerIdentity", "eventSource": "sts.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "155.251.168.5", "userAgent": "aws-cli/1.16.114 Python/3.6.8 Linux/4.15.0-kali2-amd64 botocore/1.12.104", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "responseElements": {"userId": "AIDA9BO36HFBHKGJAO9C1", "account": "811596193553", "arn": "arn:aws:iam::811596193553:user/backup"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "323bde28-b869-49fd-8a0d-b2164e6621c0", "record_id": "flaws_cloudtrail:0000324:323bde28-b869-49fd-8a0d-b2164e6621c0", "row_index": 324, "timestamp": "2019-03-01T00:24:39Z", "event_type": "GetCallerIdentity", "event_source": "sts.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "155.251.168.5", "user_agent": "aws-cli/1.16.114 Python/3.6.8 Linux/4.15.0-kali2-amd64 botocore/1.12.104", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 782, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "323bde28-b869-49fd-8a0d-b2164e6621c0", "eventTime": "2019-03-01T00:24:39Z", "eventName": "GetCallerIdentity", "eventSource": "sts.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "155.251.168.5", "userAgent": "aws-cli/1.16.114 Python/3.6.8 Linux/4.15.0-kali2-amd64 botocore/1.12.104", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "responseElements": {"userId": "AIDA9BO36HFBHKGJAO9C1", "account": "811596193553", "arn": "arn:aws:iam::811596193553:user/backup"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "6459b05a-4876-40f3-b2e2-62a578f26721", "record_id": "flaws_cloudtrail:0000325:6459b05a-4876-40f3-b2e2-62a578f26721", "row_index": 325, "timestamp": "2019-03-01T00:24:56Z", "event_type": "GetCallerIdentity", "event_source": "sts.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "155.251.168.5", "user_agent": "aws-cli/1.16.114 Python/3.6.8 Linux/4.15.0-kali2-amd64 botocore/1.12.104", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 781, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "6459b05a-4876-40f3-b2e2-62a578f26721", "eventTime": "2019-03-01T00:24:56Z", "eventName": "GetCallerIdentity", "eventSource": "sts.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "155.251.168.5", "userAgent": "aws-cli/1.16.114 Python/3.6.8 Linux/4.15.0-kali2-amd64 botocore/1.12.104", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "responseElements": {"userId": "AIDA9BO36HFBHKGJAO9C1", "account": "811596193553", "arn": "arn:aws:iam::811596193553:user/backup"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "6459b05a-4876-40f3-b2e2-62a578f26721", "record_id": "flaws_cloudtrail:0000326:6459b05a-4876-40f3-b2e2-62a578f26721", "row_index": 326, "timestamp": "2019-03-01T00:24:56Z", "event_type": "GetCallerIdentity", "event_source": "sts.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "155.251.168.5", "user_agent": "aws-cli/1.16.114 Python/3.6.8 Linux/4.15.0-kali2-amd64 botocore/1.12.104", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 781, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "6459b05a-4876-40f3-b2e2-62a578f26721", "eventTime": "2019-03-01T00:24:56Z", "eventName": "GetCallerIdentity", "eventSource": "sts.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "155.251.168.5", "userAgent": "aws-cli/1.16.114 Python/3.6.8 Linux/4.15.0-kali2-amd64 botocore/1.12.104", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "responseElements": {"userId": "AIDA9BO36HFBHKGJAO9C1", "account": "811596193553", "arn": "arn:aws:iam::811596193553:user/backup"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "f4ded18a-4ab6-45b6-88ec-9635cb2b74d1", "record_id": "flaws_cloudtrail:0000327:f4ded18a-4ab6-45b6-88ec-9635cb2b74d1", "row_index": 327, "timestamp": "2019-03-01T00:25:59Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "155.251.168.5", "user_agent": "aws-cli/1.16.114 Python/3.6.8 Linux/4.15.0-kali2-amd64 botocore/1.12.104", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 797, "raw_record_depth": 5, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "f4ded18a-4ab6-45b6-88ec-9635cb2b74d1", "eventTime": "2019-03-01T00:25:59Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "155.251.168.5", "userAgent": "aws-cli/1.16.114 Python/3.6.8 Linux/4.15.0-kali2-amd64 botocore/1.12.104", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"maxResults": 1000, "snapshotSet": {}, "ownersSet": {"items": [{"owner": "811596193553"}]}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "f4ded18a-4ab6-45b6-88ec-9635cb2b74d1", "record_id": "flaws_cloudtrail:0000328:f4ded18a-4ab6-45b6-88ec-9635cb2b74d1", "row_index": 328, "timestamp": "2019-03-01T00:25:59Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "155.251.168.5", "user_agent": "aws-cli/1.16.114 Python/3.6.8 Linux/4.15.0-kali2-amd64 botocore/1.12.104", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 797, "raw_record_depth": 5, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "f4ded18a-4ab6-45b6-88ec-9635cb2b74d1", "eventTime": "2019-03-01T00:25:59Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "155.251.168.5", "userAgent": "aws-cli/1.16.114 Python/3.6.8 Linux/4.15.0-kali2-amd64 botocore/1.12.104", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"maxResults": 1000, "snapshotSet": {}, "ownersSet": {"items": [{"owner": "811596193553"}]}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "002222a-490f-4c2e-9586-95b550226c1", "record_id": "flaws_cloudtrail:0000329:002222a-490f-4c2e-9586-95b550226c1", "row_index": 329, "timestamp": "2019-03-01T00:26:44Z", "event_type": "ListBuckets", "event_source": "s3.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "155.251.168.5", "user_agent": "[aws-cli/1.16.115 Python/2.7.16rc1 Linux/4.19.0-kali3-amd64 botocore/1.12.105]", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 814, "raw_record_depth": 3, "raw_record_top_level_keys": ["additionalEventData", "awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "002222a-490f-4c2e-9586-95b550226c1", "eventTime": "2019-03-01T00:26:44Z", "eventName": "ListBuckets", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "155.251.168.5", "userAgent": "[aws-cli/1.16.115 Python/2.7.16rc1 Linux/4.19.0-kali3-amd64 botocore/1.12.105]", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"host": ["s3.amazonaws.com"]}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "0fb2b498-c5ac-4704-8d4d-39168a84d5b8", "record_id": "flaws_cloudtrail:0000330:0fb2b498-c5ac-4704-8d4d-39168a84d5b8", "row_index": 330, "timestamp": "2019-03-01T00:26:44Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "155.251.168.5", "user_agent": "aws-cli/1.16.114 Python/3.6.8 Linux/4.15.0-kali2-amd64 botocore/1.12.104", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 797, "raw_record_depth": 5, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "0fb2b498-c5ac-4704-8d4d-39168a84d5b8", "eventTime": "2019-03-01T00:26:44Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "155.251.168.5", "userAgent": "aws-cli/1.16.114 Python/3.6.8 Linux/4.15.0-kali2-amd64 botocore/1.12.104", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"maxResults": 1000, "snapshotSet": {}, "ownersSet": {"items": [{"owner": "811596193553"}]}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "002222a-490f-4c2e-9586-95b550226c1", "record_id": "flaws_cloudtrail:0000331:002222a-490f-4c2e-9586-95b550226c1", "row_index": 331, "timestamp": "2019-03-01T00:26:44Z", "event_type": "ListBuckets", "event_source": "s3.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "155.251.168.5", "user_agent": "[aws-cli/1.16.115 Python/2.7.16rc1 Linux/4.19.0-kali3-amd64 botocore/1.12.105]", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 814, "raw_record_depth": 3, "raw_record_top_level_keys": ["additionalEventData", "awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "002222a-490f-4c2e-9586-95b550226c1", "eventTime": "2019-03-01T00:26:44Z", "eventName": "ListBuckets", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "155.251.168.5", "userAgent": "[aws-cli/1.16.115 Python/2.7.16rc1 Linux/4.19.0-kali3-amd64 botocore/1.12.105]", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"host": ["s3.amazonaws.com"]}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "0fb2b498-c5ac-4704-8d4d-39168a84d5b8", "record_id": "flaws_cloudtrail:0000332:0fb2b498-c5ac-4704-8d4d-39168a84d5b8", "row_index": 332, "timestamp": "2019-03-01T00:26:44Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "155.251.168.5", "user_agent": "aws-cli/1.16.114 Python/3.6.8 Linux/4.15.0-kali2-amd64 botocore/1.12.104", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 797, "raw_record_depth": 5, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "0fb2b498-c5ac-4704-8d4d-39168a84d5b8", "eventTime": "2019-03-01T00:26:44Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "155.251.168.5", "userAgent": "aws-cli/1.16.114 Python/3.6.8 Linux/4.15.0-kali2-amd64 botocore/1.12.104", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"maxResults": 1000, "snapshotSet": {}, "ownersSet": {"items": [{"owner": "811596193553"}]}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "35b13e82-acc0-4698-adfb-b776a62699e9", "record_id": "flaws_cloudtrail:0000333:35b13e82-acc0-4698-adfb-b776a62699e9", "row_index": 333, "timestamp": "2019-03-01T00:26:55Z", "event_type": "ListBuckets", "event_source": "s3.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "155.251.168.5", "user_agent": "[aws-cli/1.16.115 Python/2.7.16rc1 Linux/4.19.0-kali3-amd64 botocore/1.12.105]", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 816, "raw_record_depth": 3, "raw_record_top_level_keys": ["additionalEventData", "awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "35b13e82-acc0-4698-adfb-b776a62699e9", "eventTime": "2019-03-01T00:26:55Z", "eventName": "ListBuckets", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "155.251.168.5", "userAgent": "[aws-cli/1.16.115 Python/2.7.16rc1 Linux/4.19.0-kali3-amd64 botocore/1.12.105]", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"host": ["s3.amazonaws.com"]}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "35b13e82-acc0-4698-adfb-b776a62699e9", "record_id": "flaws_cloudtrail:0000334:35b13e82-acc0-4698-adfb-b776a62699e9", "row_index": 334, "timestamp": "2019-03-01T00:26:55Z", "event_type": "ListBuckets", "event_source": "s3.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "155.251.168.5", "user_agent": "[aws-cli/1.16.115 Python/2.7.16rc1 Linux/4.19.0-kali3-amd64 botocore/1.12.105]", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 816, "raw_record_depth": 3, "raw_record_top_level_keys": ["additionalEventData", "awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "35b13e82-acc0-4698-adfb-b776a62699e9", "eventTime": "2019-03-01T00:26:55Z", "eventName": "ListBuckets", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "155.251.168.5", "userAgent": "[aws-cli/1.16.115 Python/2.7.16rc1 Linux/4.19.0-kali3-amd64 botocore/1.12.105]", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"host": ["s3.amazonaws.com"]}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "1a26fe03-f680-4b52-95ca-8e7634cc7485", "record_id": "flaws_cloudtrail:0000335:1a26fe03-f680-4b52-95ca-8e7634cc7485", "row_index": 335, "timestamp": "2019-03-01T00:27:56Z", "event_type": "GetUser", "event_source": "iam.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "155.251.168.5", "user_agent": "aws-cli/1.16.115 Python/2.7.16rc1 Linux/4.19.0-kali3-amd64 botocore/1.12.105", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 675, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "1a26fe03-f680-4b52-95ca-8e7634cc7485", "eventTime": "2019-03-01T00:27:56Z", "eventName": "GetUser", "eventSource": "iam.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "155.251.168.5", "userAgent": "aws-cli/1.16.115 Python/2.7.16rc1 Linux/4.19.0-kali3-amd64 botocore/1.12.105", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "1a26fe03-f680-4b52-95ca-8e7634cc7485", "record_id": "flaws_cloudtrail:0000336:1a26fe03-f680-4b52-95ca-8e7634cc7485", "row_index": 336, "timestamp": "2019-03-01T00:27:56Z", "event_type": "GetUser", "event_source": "iam.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "155.251.168.5", "user_agent": "aws-cli/1.16.115 Python/2.7.16rc1 Linux/4.19.0-kali3-amd64 botocore/1.12.105", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 675, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "1a26fe03-f680-4b52-95ca-8e7634cc7485", "eventTime": "2019-03-01T00:27:56Z", "eventName": "GetUser", "eventSource": "iam.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "155.251.168.5", "userAgent": "aws-cli/1.16.115 Python/2.7.16rc1 Linux/4.19.0-kali3-amd64 botocore/1.12.105", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "9b69797f-ace0-4cd2-979c-badfe8fd9c53", "record_id": "flaws_cloudtrail:0000337:9b69797f-ace0-4cd2-979c-badfe8fd9c53", "row_index": 337, "timestamp": "2019-03-01T00:28:19Z", "event_type": "ListAttachedUserPolicies", "event_source": "iam.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "155.251.168.5", "user_agent": "aws-cli/1.16.115 Python/2.7.16rc1 Linux/4.19.0-kali3-amd64 botocore/1.12.105", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 709, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "9b69797f-ace0-4cd2-979c-badfe8fd9c53", "eventTime": "2019-03-01T00:28:19Z", "eventName": "ListAttachedUserPolicies", "eventSource": "iam.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "155.251.168.5", "userAgent": "aws-cli/1.16.115 Python/2.7.16rc1 Linux/4.19.0-kali3-amd64 botocore/1.12.105", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"userName": "Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "9b69797f-ace0-4cd2-979c-badfe8fd9c53", "record_id": "flaws_cloudtrail:0000338:9b69797f-ace0-4cd2-979c-badfe8fd9c53", "row_index": 338, "timestamp": "2019-03-01T00:28:19Z", "event_type": "ListAttachedUserPolicies", "event_source": "iam.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "155.251.168.5", "user_agent": "aws-cli/1.16.115 Python/2.7.16rc1 Linux/4.19.0-kali3-amd64 botocore/1.12.105", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 709, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "9b69797f-ace0-4cd2-979c-badfe8fd9c53", "eventTime": "2019-03-01T00:28:19Z", "eventName": "ListAttachedUserPolicies", "eventSource": "iam.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "155.251.168.5", "userAgent": "aws-cli/1.16.115 Python/2.7.16rc1 Linux/4.19.0-kali3-amd64 botocore/1.12.105", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"userName": "Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "30b27635-483d-4c70-9368-2f304030b2d5", "record_id": "flaws_cloudtrail:0000339:30b27635-483d-4c70-9368-2f304030b2d5", "row_index": 339, "timestamp": "2019-03-01T00:28:46Z", "event_type": "GetPolicy", "event_source": "iam.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "155.251.168.5", "user_agent": "aws-cli/1.16.115 Python/2.7.16rc1 Linux/4.19.0-kali3-amd64 botocore/1.12.105", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 738, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "30b27635-483d-4c70-9368-2f304030b2d5", "eventTime": "2019-03-01T00:28:46Z", "eventName": "GetPolicy", "eventSource": "iam.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "155.251.168.5", "userAgent": "aws-cli/1.16.115 Python/2.7.16rc1 Linux/4.19.0-kali3-amd64 botocore/1.12.105", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"policyArn": "arn:aws:iam::811596193553:policy/list_apigateways"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "30b27635-483d-4c70-9368-2f304030b2d5", "record_id": "flaws_cloudtrail:0000340:30b27635-483d-4c70-9368-2f304030b2d5", "row_index": 340, "timestamp": "2019-03-01T00:28:46Z", "event_type": "GetPolicy", "event_source": "iam.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "155.251.168.5", "user_agent": "aws-cli/1.16.115 Python/2.7.16rc1 Linux/4.19.0-kali3-amd64 botocore/1.12.105", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 738, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "30b27635-483d-4c70-9368-2f304030b2d5", "eventTime": "2019-03-01T00:28:46Z", "eventName": "GetPolicy", "eventSource": "iam.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "155.251.168.5", "userAgent": "aws-cli/1.16.115 Python/2.7.16rc1 Linux/4.19.0-kali3-amd64 botocore/1.12.105", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"policyArn": "arn:aws:iam::811596193553:policy/list_apigateways"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "08250fad-7efa-4e5e-bfcc-d8a926d2cc2c", "record_id": "flaws_cloudtrail:0000341:08250fad-7efa-4e5e-bfcc-d8a926d2cc2c", "row_index": 341, "timestamp": "2019-03-01T00:29:08Z", "event_type": "GetPolicyVersion", "event_source": "iam.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "155.251.168.5", "user_agent": "aws-cli/1.16.115 Python/2.7.16rc1 Linux/4.19.0-kali3-amd64 botocore/1.12.105", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 763, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "08250fad-7efa-4e5e-bfcc-d8a926d2cc2c", "eventTime": "2019-03-01T00:29:08Z", "eventName": "GetPolicyVersion", "eventSource": "iam.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "155.251.168.5", "userAgent": "aws-cli/1.16.115 Python/2.7.16rc1 Linux/4.19.0-kali3-amd64 botocore/1.12.105", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"policyArn": "arn:aws:iam::811596193553:policy/list_apigateways", "versionId": "v4"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "08250fad-7efa-4e5e-bfcc-d8a926d2cc2c", "record_id": "flaws_cloudtrail:0000342:08250fad-7efa-4e5e-bfcc-d8a926d2cc2c", "row_index": 342, "timestamp": "2019-03-01T00:29:08Z", "event_type": "GetPolicyVersion", "event_source": "iam.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "155.251.168.5", "user_agent": "aws-cli/1.16.115 Python/2.7.16rc1 Linux/4.19.0-kali3-amd64 botocore/1.12.105", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 763, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "08250fad-7efa-4e5e-bfcc-d8a926d2cc2c", "eventTime": "2019-03-01T00:29:08Z", "eventName": "GetPolicyVersion", "eventSource": "iam.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "155.251.168.5", "userAgent": "aws-cli/1.16.115 Python/2.7.16rc1 Linux/4.19.0-kali3-amd64 botocore/1.12.105", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"policyArn": "arn:aws:iam::811596193553:policy/list_apigateways", "versionId": "v4"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "8581d952-c718-4136-bebc-51618dad25f1", "record_id": "flaws_cloudtrail:0000343:8581d952-c718-4136-bebc-51618dad25f1", "row_index": 343, "timestamp": "2019-03-01T00:30:04Z", "event_type": "CopySnapshot", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "155.251.168.5", "user_agent": "aws-cli/1.16.114 Python/3.6.8 Linux/4.15.0-kali2-amd64 botocore/1.12.104", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 1332, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "8581d952-c718-4136-bebc-51618dad25f1", "eventTime": "2019-03-01T00:30:04Z", "eventName": "CopySnapshot", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "155.251.168.5", "userAgent": "aws-cli/1.16.114 Python/3.6.8 Linux/4.15.0-kali2-amd64 botocore/1.12.104", "awsRegion": "us-east-1", "errorCode": "Client.UnauthorizedOperation", "errorMessage": "You are not authorized to perform this operation.", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"sourceRegion": "us-west-2", "sourceSnapshotId": "snap-83d15d668fb2941db", "destinationRegion": "us-east-1", "presignedUrl": "https://ec2.us-west-2.amazonaws.com/?Action=CopySnapshot&Version=2016-11-15&SourceRegion=us-west-2&SourceSnapshotId=snap-83d15d668fb2941db&DestinationRegion=us-east-1&X-Amz-Algorithm=AWS4-HMAC-SHA256&X-Amz-Credential=AKIA01U43UX3RBRDXF4Q%2F08839%2Fus-west-2%2Fec2%2Faws4_request&X-Amz-Date=08839T749611Z&X-Amz-Expires=3600&X-Amz-SignedHeaders=host&X-Amz-Signature=33383d596edc3b7c05bcd3f2ab001f28af0b847772be9f9e5d6df5abd2a78e5e"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "8581d952-c718-4136-bebc-51618dad25f1", "record_id": "flaws_cloudtrail:0000344:8581d952-c718-4136-bebc-51618dad25f1", "row_index": 344, "timestamp": "2019-03-01T00:30:04Z", "event_type": "CopySnapshot", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "155.251.168.5", "user_agent": "aws-cli/1.16.114 Python/3.6.8 Linux/4.15.0-kali2-amd64 botocore/1.12.104", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 1332, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "8581d952-c718-4136-bebc-51618dad25f1", "eventTime": "2019-03-01T00:30:04Z", "eventName": "CopySnapshot", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "155.251.168.5", "userAgent": "aws-cli/1.16.114 Python/3.6.8 Linux/4.15.0-kali2-amd64 botocore/1.12.104", "awsRegion": "us-east-1", "errorCode": "Client.UnauthorizedOperation", "errorMessage": "You are not authorized to perform this operation.", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"sourceRegion": "us-west-2", "sourceSnapshotId": "snap-83d15d668fb2941db", "destinationRegion": "us-east-1", "presignedUrl": "https://ec2.us-west-2.amazonaws.com/?Action=CopySnapshot&Version=2016-11-15&SourceRegion=us-west-2&SourceSnapshotId=snap-83d15d668fb2941db&DestinationRegion=us-east-1&X-Amz-Algorithm=AWS4-HMAC-SHA256&X-Amz-Credential=AKIA01U43UX3RBRDXF4Q%2F08839%2Fus-west-2%2Fec2%2Faws4_request&X-Amz-Date=08839T749611Z&X-Amz-Expires=3600&X-Amz-SignedHeaders=host&X-Amz-Signature=33383d596edc3b7c05bcd3f2ab001f28af0b847772be9f9e5d6df5abd2a78e5e"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "6359e159-e23c-417f-9e91-7a94ab27352b", "record_id": "flaws_cloudtrail:0000345:6359e159-e23c-417f-9e91-7a94ab27352b", "row_index": 345, "timestamp": "2019-03-01T00:30:19Z", "event_type": "CopySnapshot", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "155.251.168.5", "user_agent": "aws-cli/1.16.114 Python/3.6.8 Linux/4.15.0-kali2-amd64 botocore/1.12.104", "aws_region": "us-east-2"}, "resource_arns": [], "raw_record_size_bytes": 1331, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "6359e159-e23c-417f-9e91-7a94ab27352b", "eventTime": "2019-03-01T00:30:19Z", "eventName": "CopySnapshot", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "155.251.168.5", "userAgent": "aws-cli/1.16.114 Python/3.6.8 Linux/4.15.0-kali2-amd64 botocore/1.12.104", "awsRegion": "us-east-2", "errorCode": "Client.UnauthorizedOperation", "errorMessage": "You are not authorized to perform this operation.", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"sourceRegion": "us-west-2", "sourceSnapshotId": "snap-83d15d668fb2941db", "destinationRegion": "us-east-2", "presignedUrl": "https://ec2.us-west-2.amazonaws.com/?Action=CopySnapshot&Version=2016-11-15&SourceRegion=us-west-2&SourceSnapshotId=snap-83d15d668fb2941db&DestinationRegion=us-east-2&X-Amz-Algorithm=AWS4-HMAC-SHA256&X-Amz-Credential=AKIA01U43UX3RBRDXF4Q%2F08839%2Fus-west-2%2Fec2%2Faws4_request&X-Amz-Date=08839T56123Z&X-Amz-Expires=3600&X-Amz-SignedHeaders=host&X-Amz-Signature=4ec040926203cb57adb275034cb0a536de584ca842aea111acd96995a6a64f76"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "6359e159-e23c-417f-9e91-7a94ab27352b", "record_id": "flaws_cloudtrail:0000346:6359e159-e23c-417f-9e91-7a94ab27352b", "row_index": 346, "timestamp": "2019-03-01T00:30:19Z", "event_type": "CopySnapshot", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "155.251.168.5", "user_agent": "aws-cli/1.16.114 Python/3.6.8 Linux/4.15.0-kali2-amd64 botocore/1.12.104", "aws_region": "us-east-2"}, "resource_arns": [], "raw_record_size_bytes": 1331, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "6359e159-e23c-417f-9e91-7a94ab27352b", "eventTime": "2019-03-01T00:30:19Z", "eventName": "CopySnapshot", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "155.251.168.5", "userAgent": "aws-cli/1.16.114 Python/3.6.8 Linux/4.15.0-kali2-amd64 botocore/1.12.104", "awsRegion": "us-east-2", "errorCode": "Client.UnauthorizedOperation", "errorMessage": "You are not authorized to perform this operation.", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"sourceRegion": "us-west-2", "sourceSnapshotId": "snap-83d15d668fb2941db", "destinationRegion": "us-east-2", "presignedUrl": "https://ec2.us-west-2.amazonaws.com/?Action=CopySnapshot&Version=2016-11-15&SourceRegion=us-west-2&SourceSnapshotId=snap-83d15d668fb2941db&DestinationRegion=us-east-2&X-Amz-Algorithm=AWS4-HMAC-SHA256&X-Amz-Credential=AKIA01U43UX3RBRDXF4Q%2F08839%2Fus-west-2%2Fec2%2Faws4_request&X-Amz-Date=08839T56123Z&X-Amz-Expires=3600&X-Amz-SignedHeaders=host&X-Amz-Signature=4ec040926203cb57adb275034cb0a536de584ca842aea111acd96995a6a64f76"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "fd1cbb6d-86fb-434e-b1e9-33a1816b238b", "record_id": "flaws_cloudtrail:0000347:fd1cbb6d-86fb-434e-b1e9-33a1816b238b", "row_index": 347, "timestamp": "2019-03-01T00:30:23Z", "event_type": "CopySnapshot", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "155.251.168.5", "user_agent": "aws-cli/1.16.114 Python/3.6.8 Linux/4.15.0-kali2-amd64 botocore/1.12.104", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1333, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "fd1cbb6d-86fb-434e-b1e9-33a1816b238b", "eventTime": "2019-03-01T00:30:23Z", "eventName": "CopySnapshot", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "155.251.168.5", "userAgent": "aws-cli/1.16.114 Python/3.6.8 Linux/4.15.0-kali2-amd64 botocore/1.12.104", "awsRegion": "us-west-2", "errorCode": "Client.UnauthorizedOperation", "errorMessage": "You are not authorized to perform this operation.", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"sourceRegion": "us-west-2", "sourceSnapshotId": "snap-83d15d668fb2941db", "destinationRegion": "us-west-2", "presignedUrl": "https://ec2.us-west-2.amazonaws.com/?Action=CopySnapshot&Version=2016-11-15&SourceRegion=us-west-2&SourceSnapshotId=snap-83d15d668fb2941db&DestinationRegion=us-west-2&X-Amz-Algorithm=AWS4-HMAC-SHA256&X-Amz-Credential=AKIA01U43UX3RBRDXF4Q%2F08839%2Fus-west-2%2Fec2%2Faws4_request&X-Amz-Date=08839T208209Z&X-Amz-Expires=3600&X-Amz-SignedHeaders=host&X-Amz-Signature=66641abfdd1f48062adcb9fba0d5b4fb90a0b2f9653ca915e67b71b35cdf13cc"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "fd1cbb6d-86fb-434e-b1e9-33a1816b238b", "record_id": "flaws_cloudtrail:0000348:fd1cbb6d-86fb-434e-b1e9-33a1816b238b", "row_index": 348, "timestamp": "2019-03-01T00:30:23Z", "event_type": "CopySnapshot", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "155.251.168.5", "user_agent": "aws-cli/1.16.114 Python/3.6.8 Linux/4.15.0-kali2-amd64 botocore/1.12.104", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1333, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "fd1cbb6d-86fb-434e-b1e9-33a1816b238b", "eventTime": "2019-03-01T00:30:23Z", "eventName": "CopySnapshot", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "155.251.168.5", "userAgent": "aws-cli/1.16.114 Python/3.6.8 Linux/4.15.0-kali2-amd64 botocore/1.12.104", "awsRegion": "us-west-2", "errorCode": "Client.UnauthorizedOperation", "errorMessage": "You are not authorized to perform this operation.", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"sourceRegion": "us-west-2", "sourceSnapshotId": "snap-83d15d668fb2941db", "destinationRegion": "us-west-2", "presignedUrl": "https://ec2.us-west-2.amazonaws.com/?Action=CopySnapshot&Version=2016-11-15&SourceRegion=us-west-2&SourceSnapshotId=snap-83d15d668fb2941db&DestinationRegion=us-west-2&X-Amz-Algorithm=AWS4-HMAC-SHA256&X-Amz-Credential=AKIA01U43UX3RBRDXF4Q%2F08839%2Fus-west-2%2Fec2%2Faws4_request&X-Amz-Date=08839T208209Z&X-Amz-Expires=3600&X-Amz-SignedHeaders=host&X-Amz-Signature=66641abfdd1f48062adcb9fba0d5b4fb90a0b2f9653ca915e67b71b35cdf13cc"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "b55afca2-e84d-47f8-84e2-c71b049968", "record_id": "flaws_cloudtrail:0000349:b55afca2-e84d-47f8-84e2-c71b049968", "row_index": 349, "timestamp": "2019-03-01T00:30:35Z", "event_type": "AssumeRole", "event_source": "sts.amazonaws.com", "principal": {"type": "AWSService", "arn": null, "account_id": null, "principal_id": null, "user_name": null, "access_key_id": null, "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "lambda.amazonaws.com", "user_agent": "lambda.amazonaws.com", "aws_region": "us-west-2"}, "resource_arns": ["arn:aws:iam::811596193553:role/service-role/Level6"], "raw_record_size_bytes": 1227, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "resources", "responseElements", "sharedEventID", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "b55afca2-e84d-47f8-84e2-c71b049968", "eventTime": "2019-03-01T00:30:35Z", "eventName": "AssumeRole", "eventSource": "sts.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "lambda.amazonaws.com", "userAgent": "lambda.amazonaws.com", "awsRegion": "us-west-2", "userIdentity": {"type": "AWSService", "invokedBy": "lambda.amazonaws.com"}, "requestParameters": {"roleSessionName": "Level6", "roleArn": "arn:aws:iam::811596193553:role/service-role/Level6"}, "responseElements": {"credentials": {"accessKeyId": "ASIAVZRVDVHPABATA6JO", "expiration": "Mar 1, 2019 12:30:35 PM", "sessionToken": "FQoGZXIvYXdzEPL//////////wEaDJGYtMBXyNK4gowY6yLfAdMRPG2bGGTsHymRjfrmPKdJE9gveYvqXwcwgIiq50a+11OmOnEcilSO9n1CyKXr0IQ1dL5zMCcX5scvxZ/0/RDlpJyx4xuBsuBxTIaCPkal4K/wmMdtbZzeaVMP6s4wENFKDD3VycsptPCFc9K1SVowybS494LpUWolf62bOYs9j+8HdIZ8pu4JNUkAYKZFAjynaFygNdNw/4yBDuwJ8pK3C590GfTsKfKnjHaetc95b8odMGyRWTAoz1jFnB//rwaBqa0/g9gNi43gqgeHDd8PMpdSbrwngJ1QSiwAcHgoq/rh4wU="}}, "resources": [{"ARN": "arn:aws:iam::811596193553:role/service-role/Level6", "accountId": "811596193553", "type": "AWS::IAM::Role"}]}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "36a76589-84fc-4f48-acf0-3a362c97b04f", "record_id": "flaws_cloudtrail:0000350:36a76589-84fc-4f48-acf0-3a362c97b04f", "row_index": 350, "timestamp": "2019-03-01T00:30:35Z", "event_type": "CreateLogStream", "event_source": "logs.amazonaws.com", "principal": {"type": "AssumedRole", "arn": "arn:aws:sts::811596193553:assumed-role/Level6/Level6", "account_id": "811596193553", "principal_id": "AROAI4E1FBACLY3FPC6BB:Level6", "user_name": null, "access_key_id": "ASIAVZRVDVHPABATA6JO", "session_issuer_arn": "arn:aws:iam::811596193553:role/service-role/Level6", "session_issuer_user_name": "Level6"}, "network": {"source_ip": "187.7.252.154", "user_agent": "awslambda-worker", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1030, "raw_record_depth": 4, "raw_record_top_level_keys": ["apiVersion", "awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "36a76589-84fc-4f48-acf0-3a362c97b04f", "eventTime": "2019-03-01T00:30:35Z", "eventName": "CreateLogStream", "eventSource": "logs.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "187.7.252.154", "userAgent": "awslambda-worker", "awsRegion": "us-west-2", "userIdentity": {"type": "AssumedRole", "principalId": "AROAI4E1FBACLY3FPC6BB:Level6", "arn": "arn:aws:sts::811596193553:assumed-role/Level6/Level6", "accountId": "811596193553", "accessKeyId": "ASIAVZRVDVHPABATA6JO", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2019-03-01T00:30:35Z"}, "sessionIssuer": {"type": "Role", "principalId": "AROAI4E1FBACLY3FPC6BB", "arn": "arn:aws:iam::811596193553:role/service-role/Level6", "accountId": "811596193553", "userName": "Level6"}}}, "requestParameters": {"logStreamName": "2019/03/01/[$LATEST]df1988dcdce1ecd0daad0386329d4485", "logGroupName": "/aws/lambda/Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "b55afca2-e84d-47f8-84e2-c71b049968", "record_id": "flaws_cloudtrail:0000351:b55afca2-e84d-47f8-84e2-c71b049968", "row_index": 351, "timestamp": "2019-03-01T00:30:35Z", "event_type": "AssumeRole", "event_source": "sts.amazonaws.com", "principal": {"type": "AWSService", "arn": null, "account_id": null, "principal_id": null, "user_name": null, "access_key_id": null, "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "lambda.amazonaws.com", "user_agent": "lambda.amazonaws.com", "aws_region": "us-west-2"}, "resource_arns": ["arn:aws:iam::811596193553:role/service-role/Level6"], "raw_record_size_bytes": 1227, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "resources", "responseElements", "sharedEventID", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "b55afca2-e84d-47f8-84e2-c71b049968", "eventTime": "2019-03-01T00:30:35Z", "eventName": "AssumeRole", "eventSource": "sts.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "lambda.amazonaws.com", "userAgent": "lambda.amazonaws.com", "awsRegion": "us-west-2", "userIdentity": {"type": "AWSService", "invokedBy": "lambda.amazonaws.com"}, "requestParameters": {"roleSessionName": "Level6", "roleArn": "arn:aws:iam::811596193553:role/service-role/Level6"}, "responseElements": {"credentials": {"accessKeyId": "ASIAVZRVDVHPABATA6JO", "expiration": "Mar 1, 2019 12:30:35 PM", "sessionToken": "FQoGZXIvYXdzEPL//////////wEaDJGYtMBXyNK4gowY6yLfAdMRPG2bGGTsHymRjfrmPKdJE9gveYvqXwcwgIiq50a+11OmOnEcilSO9n1CyKXr0IQ1dL5zMCcX5scvxZ/0/RDlpJyx4xuBsuBxTIaCPkal4K/wmMdtbZzeaVMP6s4wENFKDD3VycsptPCFc9K1SVowybS494LpUWolf62bOYs9j+8HdIZ8pu4JNUkAYKZFAjynaFygNdNw/4yBDuwJ8pK3C590GfTsKfKnjHaetc95b8odMGyRWTAoz1jFnB//rwaBqa0/g9gNi43gqgeHDd8PMpdSbrwngJ1QSiwAcHgoq/rh4wU="}}, "resources": [{"ARN": "arn:aws:iam::811596193553:role/service-role/Level6", "accountId": "811596193553", "type": "AWS::IAM::Role"}]}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "36a76589-84fc-4f48-acf0-3a362c97b04f", "record_id": "flaws_cloudtrail:0000352:36a76589-84fc-4f48-acf0-3a362c97b04f", "row_index": 352, "timestamp": "2019-03-01T00:30:35Z", "event_type": "CreateLogStream", "event_source": "logs.amazonaws.com", "principal": {"type": "AssumedRole", "arn": "arn:aws:sts::811596193553:assumed-role/Level6/Level6", "account_id": "811596193553", "principal_id": "AROAI4E1FBACLY3FPC6BB:Level6", "user_name": null, "access_key_id": "ASIAVZRVDVHPABATA6JO", "session_issuer_arn": "arn:aws:iam::811596193553:role/service-role/Level6", "session_issuer_user_name": "Level6"}, "network": {"source_ip": "187.7.252.154", "user_agent": "awslambda-worker", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1030, "raw_record_depth": 4, "raw_record_top_level_keys": ["apiVersion", "awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "36a76589-84fc-4f48-acf0-3a362c97b04f", "eventTime": "2019-03-01T00:30:35Z", "eventName": "CreateLogStream", "eventSource": "logs.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "187.7.252.154", "userAgent": "awslambda-worker", "awsRegion": "us-west-2", "userIdentity": {"type": "AssumedRole", "principalId": "AROAI4E1FBACLY3FPC6BB:Level6", "arn": "arn:aws:sts::811596193553:assumed-role/Level6/Level6", "accountId": "811596193553", "accessKeyId": "ASIAVZRVDVHPABATA6JO", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2019-03-01T00:30:35Z"}, "sessionIssuer": {"type": "Role", "principalId": "AROAI4E1FBACLY3FPC6BB", "arn": "arn:aws:iam::811596193553:role/service-role/Level6", "accountId": "811596193553", "userName": "Level6"}}}, "requestParameters": {"logStreamName": "2019/03/01/[$LATEST]df1988dcdce1ecd0daad0386329d4485", "logGroupName": "/aws/lambda/Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "bc63f962-0410-4341-95ee-1d0a762ed30c", "record_id": "flaws_cloudtrail:0000353:bc63f962-0410-4341-95ee-1d0a762ed30c", "row_index": 353, "timestamp": "2019-03-01T00:31:07Z", "event_type": "ListFunctions202224", "event_source": "lambda.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "155.251.168.5", "user_agent": "aws-cli/1.16.115 Python/2.7.16rc1 Linux/4.19.0-kali3-amd64 botocore/1.12.105", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 690, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "bc63f962-0410-4341-95ee-1d0a762ed30c", "eventTime": "2019-03-01T00:31:07Z", "eventName": "ListFunctions202224", "eventSource": "lambda.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "155.251.168.5", "userAgent": "aws-cli/1.16.115 Python/2.7.16rc1 Linux/4.19.0-kali3-amd64 botocore/1.12.105", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "bc63f962-0410-4341-95ee-1d0a762ed30c", "record_id": "flaws_cloudtrail:0000354:bc63f962-0410-4341-95ee-1d0a762ed30c", "row_index": 354, "timestamp": "2019-03-01T00:31:07Z", "event_type": "ListFunctions202224", "event_source": "lambda.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "155.251.168.5", "user_agent": "aws-cli/1.16.115 Python/2.7.16rc1 Linux/4.19.0-kali3-amd64 botocore/1.12.105", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 690, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "bc63f962-0410-4341-95ee-1d0a762ed30c", "eventTime": "2019-03-01T00:31:07Z", "eventName": "ListFunctions202224", "eventSource": "lambda.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "155.251.168.5", "userAgent": "aws-cli/1.16.115 Python/2.7.16rc1 Linux/4.19.0-kali3-amd64 botocore/1.12.105", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "b66e361e-437b-4299-aa54-578dd9359d29", "record_id": "flaws_cloudtrail:0000355:b66e361e-437b-4299-aa54-578dd9359d29", "row_index": 355, "timestamp": "2019-03-01T00:31:33Z", "event_type": "GetPolicy202224v2", "event_source": "lambda.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "155.251.168.5", "user_agent": "aws-cli/1.16.115 Python/2.7.16rc1 Linux/4.19.0-kali3-amd64 botocore/1.12.105", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 709, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "b66e361e-437b-4299-aa54-578dd9359d29", "eventTime": "2019-03-01T00:31:33Z", "eventName": "GetPolicy202224v2", "eventSource": "lambda.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "155.251.168.5", "userAgent": "aws-cli/1.16.115 Python/2.7.16rc1 Linux/4.19.0-kali3-amd64 botocore/1.12.105", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"functionName": "Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "b66e361e-437b-4299-aa54-578dd9359d29", "record_id": "flaws_cloudtrail:0000356:b66e361e-437b-4299-aa54-578dd9359d29", "row_index": 356, "timestamp": "2019-03-01T00:31:33Z", "event_type": "GetPolicy202224v2", "event_source": "lambda.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "155.251.168.5", "user_agent": "aws-cli/1.16.115 Python/2.7.16rc1 Linux/4.19.0-kali3-amd64 botocore/1.12.105", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 709, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "b66e361e-437b-4299-aa54-578dd9359d29", "eventTime": "2019-03-01T00:31:33Z", "eventName": "GetPolicy202224v2", "eventSource": "lambda.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "155.251.168.5", "userAgent": "aws-cli/1.16.115 Python/2.7.16rc1 Linux/4.19.0-kali3-amd64 botocore/1.12.105", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"functionName": "Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "a5565e76-b2c8-4184-b8aa-5fc4ea24548d", "record_id": "flaws_cloudtrail:0000357:a5565e76-b2c8-4184-b8aa-5fc4ea24548d", "row_index": 357, "timestamp": "2019-03-01T00:32:40Z", "event_type": "GetStages", "event_source": "apigateway.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "155.251.168.5", "user_agent": "aws-cli/1.16.115 Python/2.7.16rc1 Linux/4.19.0-kali3-amd64 botocore/1.12.105", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 739, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "readOnly", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "a5565e76-b2c8-4184-b8aa-5fc4ea24548d", "eventTime": "2019-03-01T00:32:40Z", "eventName": "GetStages", "eventSource": "apigateway.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "155.251.168.5", "userAgent": "aws-cli/1.16.115 Python/2.7.16rc1 Linux/4.19.0-kali3-amd64 botocore/1.12.105", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"restApiId": "s33ppypa75", "template": false}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "a5565e76-b2c8-4184-b8aa-5fc4ea24548d", "record_id": "flaws_cloudtrail:0000358:a5565e76-b2c8-4184-b8aa-5fc4ea24548d", "row_index": 358, "timestamp": "2019-03-01T00:32:40Z", "event_type": "GetStages", "event_source": "apigateway.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "155.251.168.5", "user_agent": "aws-cli/1.16.115 Python/2.7.16rc1 Linux/4.19.0-kali3-amd64 botocore/1.12.105", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 739, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "readOnly", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "a5565e76-b2c8-4184-b8aa-5fc4ea24548d", "eventTime": "2019-03-01T00:32:40Z", "eventName": "GetStages", "eventSource": "apigateway.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "155.251.168.5", "userAgent": "aws-cli/1.16.115 Python/2.7.16rc1 Linux/4.19.0-kali3-amd64 botocore/1.12.105", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"restApiId": "s33ppypa75", "template": false}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "9e625f95-67ef-47cb-aaac-e7a9e66daf87", "record_id": "flaws_cloudtrail:0000359:9e625f95-67ef-47cb-aaac-e7a9e66daf87", "row_index": 359, "timestamp": "2019-03-01T00:35:14Z", "event_type": "CreateVolume", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "155.251.168.5", "user_agent": "aws-cli/1.16.114 Python/3.6.8 Linux/4.15.0-kali2-amd64 botocore/1.12.104", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 839, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "9e625f95-67ef-47cb-aaac-e7a9e66daf87", "eventTime": "2019-03-01T00:35:14Z", "eventName": "CreateVolume", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "155.251.168.5", "userAgent": "aws-cli/1.16.114 Python/3.6.8 Linux/4.15.0-kali2-amd64 botocore/1.12.104", "awsRegion": "us-west-2", "errorCode": "Client.InvalidZone.NotFound", "errorMessage": "The zone 'us-east-2' does not exist.", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"size": "100", "snapshotId": "snap-83d15d668fb2941db", "zone": "us-east-2"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "9e625f95-67ef-47cb-aaac-e7a9e66daf87", "record_id": "flaws_cloudtrail:0000360:9e625f95-67ef-47cb-aaac-e7a9e66daf87", "row_index": 360, "timestamp": "2019-03-01T00:35:14Z", "event_type": "CreateVolume", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "155.251.168.5", "user_agent": "aws-cli/1.16.114 Python/3.6.8 Linux/4.15.0-kali2-amd64 botocore/1.12.104", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 839, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "9e625f95-67ef-47cb-aaac-e7a9e66daf87", "eventTime": "2019-03-01T00:35:14Z", "eventName": "CreateVolume", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "155.251.168.5", "userAgent": "aws-cli/1.16.114 Python/3.6.8 Linux/4.15.0-kali2-amd64 botocore/1.12.104", "awsRegion": "us-west-2", "errorCode": "Client.InvalidZone.NotFound", "errorMessage": "The zone 'us-east-2' does not exist.", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"size": "100", "snapshotId": "snap-83d15d668fb2941db", "zone": "us-east-2"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "d223ccd6-9123-4d24-9baf-cedd9323ea27", "record_id": "flaws_cloudtrail:0000361:d223ccd6-9123-4d24-9baf-cedd9323ea27", "row_index": 361, "timestamp": "2019-03-01T00:35:27Z", "event_type": "CreateVolume", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "155.251.168.5", "user_agent": "aws-cli/1.16.114 Python/3.6.8 Linux/4.15.0-kali2-amd64 botocore/1.12.104", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 835, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "d223ccd6-9123-4d24-9baf-cedd9323ea27", "eventTime": "2019-03-01T00:35:27Z", "eventName": "CreateVolume", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "155.251.168.5", "userAgent": "aws-cli/1.16.114 Python/3.6.8 Linux/4.15.0-kali2-amd64 botocore/1.12.104", "awsRegion": "us-west-2", "errorCode": "Client.InvalidZone.NotFound", "errorMessage": "The zone 'us-east' does not exist.", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"size": "100", "snapshotId": "snap-83d15d668fb2941db", "zone": "us-east"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "d223ccd6-9123-4d24-9baf-cedd9323ea27", "record_id": "flaws_cloudtrail:0000362:d223ccd6-9123-4d24-9baf-cedd9323ea27", "row_index": 362, "timestamp": "2019-03-01T00:35:27Z", "event_type": "CreateVolume", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "155.251.168.5", "user_agent": "aws-cli/1.16.114 Python/3.6.8 Linux/4.15.0-kali2-amd64 botocore/1.12.104", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 835, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "d223ccd6-9123-4d24-9baf-cedd9323ea27", "eventTime": "2019-03-01T00:35:27Z", "eventName": "CreateVolume", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "155.251.168.5", "userAgent": "aws-cli/1.16.114 Python/3.6.8 Linux/4.15.0-kali2-amd64 botocore/1.12.104", "awsRegion": "us-west-2", "errorCode": "Client.InvalidZone.NotFound", "errorMessage": "The zone 'us-east' does not exist.", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"size": "100", "snapshotId": "snap-83d15d668fb2941db", "zone": "us-east"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "a891a0e6-7429-40d7-ba4b-7a751ab3562e", "record_id": "flaws_cloudtrail:0000363:a891a0e6-7429-40d7-ba4b-7a751ab3562e", "row_index": 363, "timestamp": "2019-03-01T00:35:34Z", "event_type": "CreateVolume", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "155.251.168.5", "user_agent": "aws-cli/1.16.114 Python/3.6.8 Linux/4.15.0-kali2-amd64 botocore/1.12.104", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 839, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "a891a0e6-7429-40d7-ba4b-7a751ab3562e", "eventTime": "2019-03-01T00:35:34Z", "eventName": "CreateVolume", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "155.251.168.5", "userAgent": "aws-cli/1.16.114 Python/3.6.8 Linux/4.15.0-kali2-amd64 botocore/1.12.104", "awsRegion": "us-west-2", "errorCode": "Client.InvalidZone.NotFound", "errorMessage": "The zone 'us-west-2' does not exist.", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"size": "100", "snapshotId": "snap-83d15d668fb2941db", "zone": "us-west-2"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "a891a0e6-7429-40d7-ba4b-7a751ab3562e", "record_id": "flaws_cloudtrail:0000364:a891a0e6-7429-40d7-ba4b-7a751ab3562e", "row_index": 364, "timestamp": "2019-03-01T00:35:34Z", "event_type": "CreateVolume", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "155.251.168.5", "user_agent": "aws-cli/1.16.114 Python/3.6.8 Linux/4.15.0-kali2-amd64 botocore/1.12.104", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 839, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "a891a0e6-7429-40d7-ba4b-7a751ab3562e", "eventTime": "2019-03-01T00:35:34Z", "eventName": "CreateVolume", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "155.251.168.5", "userAgent": "aws-cli/1.16.114 Python/3.6.8 Linux/4.15.0-kali2-amd64 botocore/1.12.104", "awsRegion": "us-west-2", "errorCode": "Client.InvalidZone.NotFound", "errorMessage": "The zone 'us-west-2' does not exist.", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"size": "100", "snapshotId": "snap-83d15d668fb2941db", "zone": "us-west-2"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "41a879b2-638f-4e4f-b6dc-a1608ab182ee", "record_id": "flaws_cloudtrail:0000365:41a879b2-638f-4e4f-b6dc-a1608ab182ee", "row_index": 365, "timestamp": "2019-03-01T00:39:01Z", "event_type": "CreateVolume", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "155.251.168.5", "user_agent": "aws-cli/1.16.114 Python/3.6.8 Linux/4.15.0-kali2-amd64 botocore/1.12.104", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1517, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "41a879b2-638f-4e4f-b6dc-a1608ab182ee", "eventTime": "2019-03-01T00:39:01Z", "eventName": "CreateVolume", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "155.251.168.5", "userAgent": "aws-cli/1.16.114 Python/3.6.8 Linux/4.15.0-kali2-amd64 botocore/1.12.104", "awsRegion": "us-west-2", "errorCode": "Client.UnauthorizedOperation", "errorMessage": "You are not authorized to perform this operation. Encoded authorization failure message: RGOI43lJ4dYV47e5imwYBwAnmWB9F7DEIndBNJRlm3SHkcerf8M6CWhLQtudMptyZiCwgrdyvhQEpAx9yjl7zHEQOugJRMbNDQ-oew2jmpyMG87TkyrCo_qwTGx6k-Obs97gFKsgzYaKKFPD7AQ0x3kX2rJVAhR8urwu8jfW3Pzj6P7GX3IRLe0enn6SvTotY1WviONe3-Ne0uLyBbqW3Xze6ea-K_5banyiIzwymjNhJMTUjNMEmpau8n5RsdmEccv4iXSwUc9Tm20hQeB5T7XpUZMnSI1bQ1fTxHifOoDgog-uCmnR-ZdW4KTbLpAwY3LZG0hyn61YXZ6WnR1dS_sBx0xLiezOH3NsENGrUzth2kCmQKIHNcVZyUF7-X0Z4dw9gof_c8beRXvRZv8_Cvvw0voNODa7I4cexN7OoLLNFPfP9qkYlzaP3CLQLWIrcR9nXBKdi5KOyL4JngJo0-Gy76RAg2FX8rzyZqQSJ_jx9GzlH-BqVYnAO_xXc_p9d5vFCDAGbT6MRne4wJCPL0VLiBBcacnEG4hZkKlnIGsKxooRYFeKG4t2ey19Oq4yei-JogBbcoiOJXR8COvBvipCYGUjxugAlq24h57X349MtCgwPwPv194csTCe", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"snapshotId": "snap-83d15d668fb2941db", "zone": "us-west-2a"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "41a879b2-638f-4e4f-b6dc-a1608ab182ee", "record_id": "flaws_cloudtrail:0000366:41a879b2-638f-4e4f-b6dc-a1608ab182ee", "row_index": 366, "timestamp": "2019-03-01T00:39:01Z", "event_type": "CreateVolume", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "155.251.168.5", "user_agent": "aws-cli/1.16.114 Python/3.6.8 Linux/4.15.0-kali2-amd64 botocore/1.12.104", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1517, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "41a879b2-638f-4e4f-b6dc-a1608ab182ee", "eventTime": "2019-03-01T00:39:01Z", "eventName": "CreateVolume", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "155.251.168.5", "userAgent": "aws-cli/1.16.114 Python/3.6.8 Linux/4.15.0-kali2-amd64 botocore/1.12.104", "awsRegion": "us-west-2", "errorCode": "Client.UnauthorizedOperation", "errorMessage": "You are not authorized to perform this operation. Encoded authorization failure message: RGOI43lJ4dYV47e5imwYBwAnmWB9F7DEIndBNJRlm3SHkcerf8M6CWhLQtudMptyZiCwgrdyvhQEpAx9yjl7zHEQOugJRMbNDQ-oew2jmpyMG87TkyrCo_qwTGx6k-Obs97gFKsgzYaKKFPD7AQ0x3kX2rJVAhR8urwu8jfW3Pzj6P7GX3IRLe0enn6SvTotY1WviONe3-Ne0uLyBbqW3Xze6ea-K_5banyiIzwymjNhJMTUjNMEmpau8n5RsdmEccv4iXSwUc9Tm20hQeB5T7XpUZMnSI1bQ1fTxHifOoDgog-uCmnR-ZdW4KTbLpAwY3LZG0hyn61YXZ6WnR1dS_sBx0xLiezOH3NsENGrUzth2kCmQKIHNcVZyUF7-X0Z4dw9gof_c8beRXvRZv8_Cvvw0voNODa7I4cexN7OoLLNFPfP9qkYlzaP3CLQLWIrcR9nXBKdi5KOyL4JngJo0-Gy76RAg2FX8rzyZqQSJ_jx9GzlH-BqVYnAO_xXc_p9d5vFCDAGbT6MRne4wJCPL0VLiBBcacnEG4hZkKlnIGsKxooRYFeKG4t2ey19Oq4yei-JogBbcoiOJXR8COvBvipCYGUjxugAlq24h57X349MtCgwPwPv194csTCe", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"snapshotId": "snap-83d15d668fb2941db", "zone": "us-west-2a"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "e64aed45-918d-4cf8-bc5a-4c497629c4d0", "record_id": "flaws_cloudtrail:0000367:e64aed45-918d-4cf8-bc5a-4c497629c4d0", "row_index": 367, "timestamp": "2019-03-01T00:39:22Z", "event_type": "CreateVolume", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "155.251.168.5", "user_agent": "aws-cli/1.16.114 Python/3.6.8 Linux/4.15.0-kali2-amd64 botocore/1.12.104", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1517, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "e64aed45-918d-4cf8-bc5a-4c497629c4d0", "eventTime": "2019-03-01T00:39:22Z", "eventName": "CreateVolume", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "155.251.168.5", "userAgent": "aws-cli/1.16.114 Python/3.6.8 Linux/4.15.0-kali2-amd64 botocore/1.12.104", "awsRegion": "us-west-2", "errorCode": "Client.UnauthorizedOperation", "errorMessage": "You are not authorized to perform this operation. Encoded authorization failure message: 3FBKs1M9RG2as35FuaGMnB2ZhJf4pRYXZ5A0UcVFIvDQKULqveVgawILxujlZfEPKgaH5HAu6RBE_2s9qjQo10hygHpclYRHBxMnTOR6S24DI4gp_lNGR7ldPE1d8VKh5rkQzo_AtaYYhRn8Ik3Z06xjvxSw8zTnfTpXkPjuhbkoXGs5UGRtjSySNb1T38j4MnTWGI6BOJmi-l3YPEOsny4lYUnaasOHGBFe4vIKdgjDlcxVjl854QiJ69lESxXZ5z5KWcsVe6-SCC0WS6G6jrz6-h2swaXlv9011cTpe5Sm02mi6WzlL0ZNo5ee8o8fcR02ir4xYDxZQLLJGC66EgZhOBk6YijCN54-xQ3cFwfSZN2yD3Gv6Zi2dkOl9uilTYRzXj06JrPsId2Lmc94hKEcLSF6DrbLP_1zso29VUp-c1nXp3IVwVsZWEspqCaMxgOMKOW-1QPiHeqkf3fgVXAOCL0d5meWBTbmPJKHX2jLs7FOMdMBOq7dSmD6T1HZTY8AWvoXZOl3N5KO91OW0_Sn2oIdvVNvmPzuM13CazZfKUCwm5i37TaAylWpF9vyBEf4Sb0NPLw6b5eT8FFzQcKZyZir6AbwOS3BSFa0vY9ONwMx-MBdQSHngXKe", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"snapshotId": "snap-83d15d668fb2941db", "zone": "us-west-2a"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "e64aed45-918d-4cf8-bc5a-4c497629c4d0", "record_id": "flaws_cloudtrail:0000368:e64aed45-918d-4cf8-bc5a-4c497629c4d0", "row_index": 368, "timestamp": "2019-03-01T00:39:22Z", "event_type": "CreateVolume", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "155.251.168.5", "user_agent": "aws-cli/1.16.114 Python/3.6.8 Linux/4.15.0-kali2-amd64 botocore/1.12.104", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1517, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "e64aed45-918d-4cf8-bc5a-4c497629c4d0", "eventTime": "2019-03-01T00:39:22Z", "eventName": "CreateVolume", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "155.251.168.5", "userAgent": "aws-cli/1.16.114 Python/3.6.8 Linux/4.15.0-kali2-amd64 botocore/1.12.104", "awsRegion": "us-west-2", "errorCode": "Client.UnauthorizedOperation", "errorMessage": "You are not authorized to perform this operation. Encoded authorization failure message: 3FBKs1M9RG2as35FuaGMnB2ZhJf4pRYXZ5A0UcVFIvDQKULqveVgawILxujlZfEPKgaH5HAu6RBE_2s9qjQo10hygHpclYRHBxMnTOR6S24DI4gp_lNGR7ldPE1d8VKh5rkQzo_AtaYYhRn8Ik3Z06xjvxSw8zTnfTpXkPjuhbkoXGs5UGRtjSySNb1T38j4MnTWGI6BOJmi-l3YPEOsny4lYUnaasOHGBFe4vIKdgjDlcxVjl854QiJ69lESxXZ5z5KWcsVe6-SCC0WS6G6jrz6-h2swaXlv9011cTpe5Sm02mi6WzlL0ZNo5ee8o8fcR02ir4xYDxZQLLJGC66EgZhOBk6YijCN54-xQ3cFwfSZN2yD3Gv6Zi2dkOl9uilTYRzXj06JrPsId2Lmc94hKEcLSF6DrbLP_1zso29VUp-c1nXp3IVwVsZWEspqCaMxgOMKOW-1QPiHeqkf3fgVXAOCL0d5meWBTbmPJKHX2jLs7FOMdMBOq7dSmD6T1HZTY8AWvoXZOl3N5KO91OW0_Sn2oIdvVNvmPzuM13CazZfKUCwm5i37TaAylWpF9vyBEf4Sb0NPLw6b5eT8FFzQcKZyZir6AbwOS3BSFa0vY9ONwMx-MBdQSHngXKe", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"snapshotId": "snap-83d15d668fb2941db", "zone": "us-west-2a"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "b637a277-07df-4996-bff9-fa8221eaa827", "record_id": "flaws_cloudtrail:0000369:b637a277-07df-4996-bff9-fa8221eaa827", "row_index": 369, "timestamp": "2019-03-01T00:41:14Z", "event_type": "CreateVolume", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "155.251.168.5", "user_agent": "aws-cli/1.16.114 Python/3.6.8 Linux/4.15.0-kali2-amd64 botocore/1.12.104", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1519, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "b637a277-07df-4996-bff9-fa8221eaa827", "eventTime": "2019-03-01T00:41:14Z", "eventName": "CreateVolume", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "155.251.168.5", "userAgent": "aws-cli/1.16.114 Python/3.6.8 Linux/4.15.0-kali2-amd64 botocore/1.12.104", "awsRegion": "us-west-2", "errorCode": "Client.UnauthorizedOperation", "errorMessage": "You are not authorized to perform this operation. Encoded authorization failure message: 66iZYiFInyzJwGyKBuo7qj6iFHzdXnw_xv4jGjWxm1zS0PQs3AV09Xb2e9_7GCewVaRM7LiparNu-aVcd4q16gcb8g6KQ1KQ6snNFBBCyN6iUICkbtFeoyeGKr___iSt0hgQYGPTEuZ-Fb5ky5UGwzlKZLMHnVNz16mbpf8KQWyk2eCMIoUELhvSGigAhZ1kZB3E0XhKjaR-2IOmRQlGKThbt5qkoYizlQ0tBKIz0MFgIrP6Gbp70F04tdmrRzG4y34rOCnZTYmj5MNf7W2WxoaLx5V9ijiWLv0s8PCFWFYLgWjAc6QGvYud3qzQQ3IQkncmdY-HbBGKMHCAnAWFWVPzkQEHurYbUmezAJJaJU58Ij7ws1sr_uRkhN8pANQKHwVg_u-uKM9j63RSn7BZvYXsG5IjrcyZGN47I7KX0zXKkJqju_dfhTBtZ-I_09iOY0DTi40noVj_EOQVhqGnoUN9nB_J1EpA0EpWxTmJJV6vxK3IP1xSkywC2BvxLYPU6IrCDhA0YCRct2VBjkYpEmFICYmPctPouw_TOYM_DiBKDNfZA056A0YtC2SUyXTUlx6mS-UkjC9ciZeuSW6Se2nMJpsKxnjJWgVDZd_Twy8ssR0x6eGE8f0BBe75LQ", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"snapshotId": "snap-83d15d668fb2941db", "zone": "us-west-2a"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "b637a277-07df-4996-bff9-fa8221eaa827", "record_id": "flaws_cloudtrail:0000370:b637a277-07df-4996-bff9-fa8221eaa827", "row_index": 370, "timestamp": "2019-03-01T00:41:14Z", "event_type": "CreateVolume", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "155.251.168.5", "user_agent": "aws-cli/1.16.114 Python/3.6.8 Linux/4.15.0-kali2-amd64 botocore/1.12.104", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1519, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "b637a277-07df-4996-bff9-fa8221eaa827", "eventTime": "2019-03-01T00:41:14Z", "eventName": "CreateVolume", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "155.251.168.5", "userAgent": "aws-cli/1.16.114 Python/3.6.8 Linux/4.15.0-kali2-amd64 botocore/1.12.104", "awsRegion": "us-west-2", "errorCode": "Client.UnauthorizedOperation", "errorMessage": "You are not authorized to perform this operation. Encoded authorization failure message: 66iZYiFInyzJwGyKBuo7qj6iFHzdXnw_xv4jGjWxm1zS0PQs3AV09Xb2e9_7GCewVaRM7LiparNu-aVcd4q16gcb8g6KQ1KQ6snNFBBCyN6iUICkbtFeoyeGKr___iSt0hgQYGPTEuZ-Fb5ky5UGwzlKZLMHnVNz16mbpf8KQWyk2eCMIoUELhvSGigAhZ1kZB3E0XhKjaR-2IOmRQlGKThbt5qkoYizlQ0tBKIz0MFgIrP6Gbp70F04tdmrRzG4y34rOCnZTYmj5MNf7W2WxoaLx5V9ijiWLv0s8PCFWFYLgWjAc6QGvYud3qzQQ3IQkncmdY-HbBGKMHCAnAWFWVPzkQEHurYbUmezAJJaJU58Ij7ws1sr_uRkhN8pANQKHwVg_u-uKM9j63RSn7BZvYXsG5IjrcyZGN47I7KX0zXKkJqju_dfhTBtZ-I_09iOY0DTi40noVj_EOQVhqGnoUN9nB_J1EpA0EpWxTmJJV6vxK3IP1xSkywC2BvxLYPU6IrCDhA0YCRct2VBjkYpEmFICYmPctPouw_TOYM_DiBKDNfZA056A0YtC2SUyXTUlx6mS-UkjC9ciZeuSW6Se2nMJpsKxnjJWgVDZd_Twy8ssR0x6eGE8f0BBe75LQ", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"snapshotId": "snap-83d15d668fb2941db", "zone": "us-west-2a"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "56323ee-3e66-47d6-9f59-dc2fa5b13a32", "record_id": "flaws_cloudtrail:0000371:56323ee-3e66-47d6-9f59-dc2fa5b13a32", "row_index": 371, "timestamp": "2019-03-01T00:50:59Z", "event_type": "ListBuckets", "event_source": "s3.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "45.71.159.6", "user_agent": "[aws-cli/1.16.103 Python/3.7.2 Darwin/18.2.0 botocore/1.12.93]", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 797, "raw_record_depth": 3, "raw_record_top_level_keys": ["additionalEventData", "awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "56323ee-3e66-47d6-9f59-dc2fa5b13a32", "eventTime": "2019-03-01T00:50:59Z", "eventName": "ListBuckets", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "45.71.159.6", "userAgent": "[aws-cli/1.16.103 Python/3.7.2 Darwin/18.2.0 botocore/1.12.93]", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"host": ["s3.amazonaws.com"]}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "56323ee-3e66-47d6-9f59-dc2fa5b13a32", "record_id": "flaws_cloudtrail:0000372:56323ee-3e66-47d6-9f59-dc2fa5b13a32", "row_index": 372, "timestamp": "2019-03-01T00:50:59Z", "event_type": "ListBuckets", "event_source": "s3.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "45.71.159.6", "user_agent": "[aws-cli/1.16.103 Python/3.7.2 Darwin/18.2.0 botocore/1.12.93]", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 797, "raw_record_depth": 3, "raw_record_top_level_keys": ["additionalEventData", "awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "56323ee-3e66-47d6-9f59-dc2fa5b13a32", "eventTime": "2019-03-01T00:50:59Z", "eventName": "ListBuckets", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "45.71.159.6", "userAgent": "[aws-cli/1.16.103 Python/3.7.2 Darwin/18.2.0 botocore/1.12.93]", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"host": ["s3.amazonaws.com"]}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "988ab433-9258-4476-aca3-c58d54420", "record_id": "flaws_cloudtrail:0000373:988ab433-9258-4476-aca3-c58d54420", "row_index": 373, "timestamp": "2019-03-01T00:54:57Z", "event_type": "ListBuckets", "event_source": "s3.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "155.251.168.5", "user_agent": "[aws-cli/1.16.81 Python/3.6.8rc1 Linux/4.18.0-kali3-amd64 botocore/1.12.71]", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 810, "raw_record_depth": 3, "raw_record_top_level_keys": ["additionalEventData", "awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "988ab433-9258-4476-aca3-c58d54420", "eventTime": "2019-03-01T00:54:57Z", "eventName": "ListBuckets", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "155.251.168.5", "userAgent": "[aws-cli/1.16.81 Python/3.6.8rc1 Linux/4.18.0-kali3-amd64 botocore/1.12.71]", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"host": ["s3.amazonaws.com"]}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "988ab433-9258-4476-aca3-c58d54420", "record_id": "flaws_cloudtrail:0000374:988ab433-9258-4476-aca3-c58d54420", "row_index": 374, "timestamp": "2019-03-01T00:54:57Z", "event_type": "ListBuckets", "event_source": "s3.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "155.251.168.5", "user_agent": "[aws-cli/1.16.81 Python/3.6.8rc1 Linux/4.18.0-kali3-amd64 botocore/1.12.71]", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 810, "raw_record_depth": 3, "raw_record_top_level_keys": ["additionalEventData", "awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "988ab433-9258-4476-aca3-c58d54420", "eventTime": "2019-03-01T00:54:57Z", "eventName": "ListBuckets", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "155.251.168.5", "userAgent": "[aws-cli/1.16.81 Python/3.6.8rc1 Linux/4.18.0-kali3-amd64 botocore/1.12.71]", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"host": ["s3.amazonaws.com"]}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "e93455f-d509-435f-8e79-61709f1f01", "record_id": "flaws_cloudtrail:0000375:e93455f-d509-435f-8e79-61709f1f01", "row_index": 375, "timestamp": "2019-03-01T01:00:58Z", "event_type": "GetCallerIdentity", "event_source": "sts.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "45.71.159.6", "user_agent": "aws-cli/1.16.103 Python/3.7.2 Darwin/18.2.0 botocore/1.12.93", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 765, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "e93455f-d509-435f-8e79-61709f1f01", "eventTime": "2019-03-01T01:00:58Z", "eventName": "GetCallerIdentity", "eventSource": "sts.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "45.71.159.6", "userAgent": "aws-cli/1.16.103 Python/3.7.2 Darwin/18.2.0 botocore/1.12.93", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "responseElements": {"userId": "AIDA9BO36HFBHKGJAO9C1", "account": "811596193553", "arn": "arn:aws:iam::811596193553:user/backup"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "e93455f-d509-435f-8e79-61709f1f01", "record_id": "flaws_cloudtrail:0000376:e93455f-d509-435f-8e79-61709f1f01", "row_index": 376, "timestamp": "2019-03-01T01:00:58Z", "event_type": "GetCallerIdentity", "event_source": "sts.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "45.71.159.6", "user_agent": "aws-cli/1.16.103 Python/3.7.2 Darwin/18.2.0 botocore/1.12.93", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 765, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "e93455f-d509-435f-8e79-61709f1f01", "eventTime": "2019-03-01T01:00:58Z", "eventName": "GetCallerIdentity", "eventSource": "sts.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "45.71.159.6", "userAgent": "aws-cli/1.16.103 Python/3.7.2 Darwin/18.2.0 botocore/1.12.93", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "responseElements": {"userId": "AIDA9BO36HFBHKGJAO9C1", "account": "811596193553", "arn": "arn:aws:iam::811596193553:user/backup"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "9b6f8792-3d06-48a1-8acb-e5fd033cefd4", "record_id": "flaws_cloudtrail:0000377:9b6f8792-3d06-48a1-8acb-e5fd033cefd4", "row_index": 377, "timestamp": "2019-03-01T01:01:56Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "45.71.159.6", "user_agent": "aws-cli/1.16.103 Python/3.7.2 Darwin/18.2.0 botocore/1.12.93", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 897, "raw_record_depth": 5, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "9b6f8792-3d06-48a1-8acb-e5fd033cefd4", "eventTime": "2019-03-01T01:01:56Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "45.71.159.6", "userAgent": "aws-cli/1.16.103 Python/3.7.2 Darwin/18.2.0 botocore/1.12.93", "awsRegion": "us-west-2", "errorCode": "Client.InvalidUserID.Malformed", "errorMessage": "Invalid user id: \"AIDA9BO36HFBHKGJAO9C1\"", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"maxResults": 1000, "snapshotSet": {}, "ownersSet": {"items": [{"owner": "AIDA9BO36HFBHKGJAO9C1"}]}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "9b6f8792-3d06-48a1-8acb-e5fd033cefd4", "record_id": "flaws_cloudtrail:0000378:9b6f8792-3d06-48a1-8acb-e5fd033cefd4", "row_index": 378, "timestamp": "2019-03-01T01:01:56Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "45.71.159.6", "user_agent": "aws-cli/1.16.103 Python/3.7.2 Darwin/18.2.0 botocore/1.12.93", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 897, "raw_record_depth": 5, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "9b6f8792-3d06-48a1-8acb-e5fd033cefd4", "eventTime": "2019-03-01T01:01:56Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "45.71.159.6", "userAgent": "aws-cli/1.16.103 Python/3.7.2 Darwin/18.2.0 botocore/1.12.93", "awsRegion": "us-west-2", "errorCode": "Client.InvalidUserID.Malformed", "errorMessage": "Invalid user id: \"AIDA9BO36HFBHKGJAO9C1\"", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"maxResults": 1000, "snapshotSet": {}, "ownersSet": {"items": [{"owner": "AIDA9BO36HFBHKGJAO9C1"}]}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "5b3d0cc6-1d97-4d00-a4a4-f6388f2e90ae", "record_id": "flaws_cloudtrail:0000379:5b3d0cc6-1d97-4d00-a4a4-f6388f2e90ae", "row_index": 379, "timestamp": "2019-03-01T01:02:17Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "45.71.159.6", "user_agent": "aws-cli/1.16.103 Python/3.7.2 Darwin/18.2.0 botocore/1.12.93", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 784, "raw_record_depth": 5, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "5b3d0cc6-1d97-4d00-a4a4-f6388f2e90ae", "eventTime": "2019-03-01T01:02:17Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "45.71.159.6", "userAgent": "aws-cli/1.16.103 Python/3.7.2 Darwin/18.2.0 botocore/1.12.93", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"maxResults": 1000, "snapshotSet": {}, "ownersSet": {"items": [{"owner": "811596193553"}]}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "5b3d0cc6-1d97-4d00-a4a4-f6388f2e90ae", "record_id": "flaws_cloudtrail:0000380:5b3d0cc6-1d97-4d00-a4a4-f6388f2e90ae", "row_index": 380, "timestamp": "2019-03-01T01:02:17Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "45.71.159.6", "user_agent": "aws-cli/1.16.103 Python/3.7.2 Darwin/18.2.0 botocore/1.12.93", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 784, "raw_record_depth": 5, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "5b3d0cc6-1d97-4d00-a4a4-f6388f2e90ae", "eventTime": "2019-03-01T01:02:17Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "45.71.159.6", "userAgent": "aws-cli/1.16.103 Python/3.7.2 Darwin/18.2.0 botocore/1.12.93", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"maxResults": 1000, "snapshotSet": {}, "ownersSet": {"items": [{"owner": "811596193553"}]}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "fbd1701f-3996-4aee-b6b5-7e486e6aacc1", "record_id": "flaws_cloudtrail:0000381:fbd1701f-3996-4aee-b6b5-7e486e6aacc1", "row_index": 381, "timestamp": "2019-03-01T01:22:22Z", "event_type": "AssumeRole", "event_source": "sts.amazonaws.com", "principal": {"type": "AWSService", "arn": null, "account_id": null, "principal_id": null, "user_name": null, "access_key_id": null, "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "ec2.amazonaws.com", "user_agent": "ec2.amazonaws.com", "aws_region": "us-west-2"}, "resource_arns": ["arn:aws:iam::811596193553:role/flaws"], "raw_record_size_bytes": 1493, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "resources", "responseElements", "sharedEventID", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "fbd1701f-3996-4aee-b6b5-7e486e6aacc1", "eventTime": "2019-03-01T01:22:22Z", "eventName": "AssumeRole", "eventSource": "sts.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "ec2.amazonaws.com", "userAgent": "ec2.amazonaws.com", "awsRegion": "us-west-2", "userIdentity": {"type": "AWSService", "invokedBy": "ec2.amazonaws.com"}, "requestParameters": {"roleSessionName": "i-aa2d3b42e5c6e801a", "roleArn": "arn:aws:iam::811596193553:role/flaws"}, "responseElements": {"credentials": {"accessKeyId": "ASIAUHVC1ZB1TTQUB9LM", "expiration": "Mar 1, 2019 7:24:15 AM", "sessionToken": "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"}}, "resources": [{"ARN": "arn:aws:iam::811596193553:role/flaws", "accountId": "811596193553", "type": "AWS::IAM::Role"}]}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "fbd1701f-3996-4aee-b6b5-7e486e6aacc1", "record_id": "flaws_cloudtrail:0000382:fbd1701f-3996-4aee-b6b5-7e486e6aacc1", "row_index": 382, "timestamp": "2019-03-01T01:22:22Z", "event_type": "AssumeRole", "event_source": "sts.amazonaws.com", "principal": {"type": "AWSService", "arn": null, "account_id": null, "principal_id": null, "user_name": null, "access_key_id": null, "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "ec2.amazonaws.com", "user_agent": "ec2.amazonaws.com", "aws_region": "us-west-2"}, "resource_arns": ["arn:aws:iam::811596193553:role/flaws"], "raw_record_size_bytes": 1493, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "resources", "responseElements", "sharedEventID", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "fbd1701f-3996-4aee-b6b5-7e486e6aacc1", "eventTime": "2019-03-01T01:22:22Z", "eventName": "AssumeRole", "eventSource": "sts.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "ec2.amazonaws.com", "userAgent": "ec2.amazonaws.com", "awsRegion": "us-west-2", "userIdentity": {"type": "AWSService", "invokedBy": "ec2.amazonaws.com"}, "requestParameters": {"roleSessionName": "i-aa2d3b42e5c6e801a", "roleArn": "arn:aws:iam::811596193553:role/flaws"}, "responseElements": {"credentials": {"accessKeyId": "ASIAUHVC1ZB1TTQUB9LM", "expiration": "Mar 1, 2019 7:24:15 AM", "sessionToken": "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"}}, "resources": [{"ARN": "arn:aws:iam::811596193553:role/flaws", "accountId": "811596193553", "type": "AWS::IAM::Role"}]}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "58660a7f-f628-4936-84cd-a6600543f21e", "record_id": "flaws_cloudtrail:0000383:58660a7f-f628-4936-84cd-a6600543f21e", "row_index": 383, "timestamp": "2019-03-01T02:22:22Z", "event_type": "AssumeRole", "event_source": "sts.amazonaws.com", "principal": {"type": "AWSService", "arn": null, "account_id": null, "principal_id": null, "user_name": null, "access_key_id": null, "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "ec2.amazonaws.com", "user_agent": "ec2.amazonaws.com", "aws_region": "us-west-2"}, "resource_arns": ["arn:aws:iam::811596193553:role/flaws"], "raw_record_size_bytes": 1495, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "resources", "responseElements", "sharedEventID", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "58660a7f-f628-4936-84cd-a6600543f21e", "eventTime": "2019-03-01T02:22:22Z", "eventName": "AssumeRole", "eventSource": "sts.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "ec2.amazonaws.com", "userAgent": "ec2.amazonaws.com", "awsRegion": "us-west-2", "userIdentity": {"type": "AWSService", "invokedBy": "ec2.amazonaws.com"}, "requestParameters": {"roleSessionName": "i-aa2d3b42e5c6e801a", "roleArn": "arn:aws:iam::811596193553:role/flaws"}, "responseElements": {"credentials": {"accessKeyId": "ASIA54OEX8ZBHHHJVI2Q", "expiration": "Mar 1, 2019 8:45:08 AM", "sessionToken": "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"}}, "resources": [{"ARN": "arn:aws:iam::811596193553:role/flaws", "accountId": "811596193553", "type": "AWS::IAM::Role"}]}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "58660a7f-f628-4936-84cd-a6600543f21e", "record_id": "flaws_cloudtrail:0000384:58660a7f-f628-4936-84cd-a6600543f21e", "row_index": 384, "timestamp": "2019-03-01T02:22:22Z", "event_type": "AssumeRole", "event_source": "sts.amazonaws.com", "principal": {"type": "AWSService", "arn": null, "account_id": null, "principal_id": null, "user_name": null, "access_key_id": null, "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "ec2.amazonaws.com", "user_agent": "ec2.amazonaws.com", "aws_region": "us-west-2"}, "resource_arns": ["arn:aws:iam::811596193553:role/flaws"], "raw_record_size_bytes": 1495, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "resources", "responseElements", "sharedEventID", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "58660a7f-f628-4936-84cd-a6600543f21e", "eventTime": "2019-03-01T02:22:22Z", "eventName": "AssumeRole", "eventSource": "sts.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "ec2.amazonaws.com", "userAgent": "ec2.amazonaws.com", "awsRegion": "us-west-2", "userIdentity": {"type": "AWSService", "invokedBy": "ec2.amazonaws.com"}, "requestParameters": {"roleSessionName": "i-aa2d3b42e5c6e801a", "roleArn": "arn:aws:iam::811596193553:role/flaws"}, "responseElements": {"credentials": {"accessKeyId": "ASIA54OEX8ZBHHHJVI2Q", "expiration": "Mar 1, 2019 8:45:08 AM", "sessionToken": "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"}}, "resources": [{"ARN": "arn:aws:iam::811596193553:role/flaws", "accountId": "811596193553", "type": "AWS::IAM::Role"}]}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "d96e99d0-b0da-4a66-b09f-399c47d949b6", "record_id": "flaws_cloudtrail:0000385:d96e99d0-b0da-4a66-b09f-399c47d949b6", "row_index": 385, "timestamp": "2019-03-01T02:33:24Z", "event_type": "AssumeRole", "event_source": "sts.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIACI59CLEVIFTMSVDV", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "34.220.133.196", "user_agent": "Botocore/1.21.21 Python/3.8.10 Linux/5.4.0-90-generic", "aws_region": "us-west-2"}, "resource_arns": ["arn:aws:iam::811596193553:role/data-reader-14"], "raw_record_size_bytes": 680, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "requestParameters", "resources", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "d96e99d0-b0da-4a66-b09f-399c47d949b6", "eventTime": "2019-03-01T02:33:24Z", "eventName": "AssumeRole", "eventSource": "sts.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "34.220.133.196", "userAgent": "Botocore/1.21.21 Python/3.8.10 Linux/5.4.0-90-generic", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIACI59CLEVIFTMSVDV", "userName": "Level6"}, "requestParameters": {"roleArn": "arn:aws:iam::811596193553:role/data-reader-14", "roleSessionName": "reader-2716"}, "resources": [{"ARN": "arn:aws:iam::811596193553:role/data-reader-14"}]}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "4ce6bc70-5198-44cb-9ff2-f7db88c29d90", "record_id": "flaws_cloudtrail:0000386:4ce6bc70-5198-44cb-9ff2-f7db88c29d90", "row_index": 386, "timestamp": "2019-03-01T02:34:26Z", "event_type": "ListBuckets", "event_source": "s3.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIACI59CLEVIFTMSVDV", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "34.220.133.196", "user_agent": "Botocore/1.21.21 Python/3.8.10 Linux/5.4.0-90-generic", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 498, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "4ce6bc70-5198-44cb-9ff2-f7db88c29d90", "eventTime": "2019-03-01T02:34:26Z", "eventName": "ListBuckets", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "34.220.133.196", "userAgent": "Botocore/1.21.21 Python/3.8.10 Linux/5.4.0-90-generic", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIACI59CLEVIFTMSVDV", "userName": "Level6"}}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "1d05759f-26ab-4b6a-81c4-7dc510ee16b0", "record_id": "flaws_cloudtrail:0000387:1d05759f-26ab-4b6a-81c4-7dc510ee16b0", "row_index": 387, "timestamp": "2019-03-01T02:35:45Z", "event_type": "GetBucketAcl", "event_source": "s3.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIACI59CLEVIFTMSVDV", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "34.220.133.196", "user_agent": "Botocore/1.21.21 Python/3.8.10 Linux/5.4.0-90-generic", "aws_region": "us-west-2"}, "resource_arns": ["arn:aws:s3:::prod-data-3594"], "raw_record_size_bytes": 603, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "requestParameters", "resources", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "1d05759f-26ab-4b6a-81c4-7dc510ee16b0", "eventTime": "2019-03-01T02:35:45Z", "eventName": "GetBucketAcl", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "34.220.133.196", "userAgent": "Botocore/1.21.21 Python/3.8.10 Linux/5.4.0-90-generic", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIACI59CLEVIFTMSVDV", "userName": "Level6"}, "requestParameters": {"bucketName": "prod-data-3594"}, "resources": [{"ARN": "arn:aws:s3:::prod-data-3594"}]}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "0cf2adda-c86a-4e9d-8d5a-c805d4eb5889", "record_id": "flaws_cloudtrail:0000388:0cf2adda-c86a-4e9d-8d5a-c805d4eb5889", "row_index": 388, "timestamp": "2019-03-01T02:36:25Z", "event_type": "GetBucketAcl", "event_source": "s3.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIACI59CLEVIFTMSVDV", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "34.220.133.196", "user_agent": "Botocore/1.21.21 Python/3.8.10 Linux/5.4.0-90-generic", "aws_region": "us-west-2"}, "resource_arns": ["arn:aws:s3:::prod-data-3594-archive"], "raw_record_size_bytes": 619, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "requestParameters", "resources", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "0cf2adda-c86a-4e9d-8d5a-c805d4eb5889", "eventTime": "2019-03-01T02:36:25Z", "eventName": "GetBucketAcl", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "34.220.133.196", "userAgent": "Botocore/1.21.21 Python/3.8.10 Linux/5.4.0-90-generic", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIACI59CLEVIFTMSVDV", "userName": "Level6"}, "requestParameters": {"bucketName": "prod-data-3594-archive"}, "resources": [{"ARN": "arn:aws:s3:::prod-data-3594-archive"}]}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "e0983d3f-c9c4-4ed4-a531-a04f63da829e", "record_id": "flaws_cloudtrail:0000389:e0983d3f-c9c4-4ed4-a531-a04f63da829e", "row_index": 389, "timestamp": "2019-03-01T02:38:54Z", "event_type": "ListObjects", "event_source": "s3.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIACI59CLEVIFTMSVDV", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "34.220.133.196", "user_agent": "Botocore/1.21.21 Python/3.8.10 Linux/5.4.0-90-generic", "aws_region": "us-west-2"}, "resource_arns": ["arn:aws:s3:::prod-data-3594"], "raw_record_size_bytes": 623, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "requestParameters", "resources", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "e0983d3f-c9c4-4ed4-a531-a04f63da829e", "eventTime": "2019-03-01T02:38:54Z", "eventName": "ListObjects", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "34.220.133.196", "userAgent": "Botocore/1.21.21 Python/3.8.10 Linux/5.4.0-90-generic", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIACI59CLEVIFTMSVDV", "userName": "Level6"}, "requestParameters": {"bucketName": "prod-data-3594", "prefix": "customer/"}, "resources": [{"ARN": "arn:aws:s3:::prod-data-3594"}]}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "1d8d61e8-83cb-4475-b1f4-aa758c38cbb0", "record_id": "flaws_cloudtrail:0000390:1d8d61e8-83cb-4475-b1f4-aa758c38cbb0", "row_index": 390, "timestamp": "2019-03-01T02:41:44Z", "event_type": "GetObject", "event_source": "s3.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIACI59CLEVIFTMSVDV", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "34.220.133.196", "user_agent": "Botocore/1.21.21 Python/3.8.10 Linux/5.4.0-90-generic", "aws_region": "us-west-2"}, "resource_arns": ["arn:aws:s3:::prod-data-3594"], "raw_record_size_bytes": 628, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "requestParameters", "resources", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "1d8d61e8-83cb-4475-b1f4-aa758c38cbb0", "eventTime": "2019-03-01T02:41:44Z", "eventName": "GetObject", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "34.220.133.196", "userAgent": "Botocore/1.21.21 Python/3.8.10 Linux/5.4.0-90-generic", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIACI59CLEVIFTMSVDV", "userName": "Level6"}, "requestParameters": {"bucketName": "prod-data-3594", "key": "customer/01523.json"}, "resources": [{"ARN": "arn:aws:s3:::prod-data-3594"}]}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "3d7d76cf-5aa9-4e12-9f6c-619ea0afaac7", "record_id": "flaws_cloudtrail:0000391:3d7d76cf-5aa9-4e12-9f6c-619ea0afaac7", "row_index": 391, "timestamp": "2019-03-01T02:42:23Z", "event_type": "GetObject", "event_source": "s3.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIACI59CLEVIFTMSVDV", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "34.220.133.196", "user_agent": "Botocore/1.21.21 Python/3.8.10 Linux/5.4.0-90-generic", "aws_region": "us-west-2"}, "resource_arns": ["arn:aws:s3:::prod-data-3594"], "raw_record_size_bytes": 628, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "requestParameters", "resources", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "3d7d76cf-5aa9-4e12-9f6c-619ea0afaac7", "eventTime": "2019-03-01T02:42:23Z", "eventName": "GetObject", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "34.220.133.196", "userAgent": "Botocore/1.21.21 Python/3.8.10 Linux/5.4.0-90-generic", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIACI59CLEVIFTMSVDV", "userName": "Level6"}, "requestParameters": {"bucketName": "prod-data-3594", "key": "customer/05314.json"}, "resources": [{"ARN": "arn:aws:s3:::prod-data-3594"}]}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "fb9942b8-d0c4-4efe-bec3-beea1a1344fd", "record_id": "flaws_cloudtrail:0000392:fb9942b8-d0c4-4efe-bec3-beea1a1344fd", "row_index": 392, "timestamp": "2019-03-01T02:43:12Z", "event_type": "GetObject", "event_source": "s3.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIACI59CLEVIFTMSVDV", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "34.220.133.196", "user_agent": "Botocore/1.21.21 Python/3.8.10 Linux/5.4.0-90-generic", "aws_region": "us-west-2"}, "resource_arns": ["arn:aws:s3:::prod-data-3594"], "raw_record_size_bytes": 628, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "requestParameters", "resources", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "fb9942b8-d0c4-4efe-bec3-beea1a1344fd", "eventTime": "2019-03-01T02:43:12Z", "eventName": "GetObject", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "34.220.133.196", "userAgent": "Botocore/1.21.21 Python/3.8.10 Linux/5.4.0-90-generic", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIACI59CLEVIFTMSVDV", "userName": "Level6"}, "requestParameters": {"bucketName": "prod-data-3594", "key": "customer/02754.json"}, "resources": [{"ARN": "arn:aws:s3:::prod-data-3594"}]}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "385bf8f4-af5c-495f-a483-6969c9dc7de4", "record_id": "flaws_cloudtrail:0000393:385bf8f4-af5c-495f-a483-6969c9dc7de4", "row_index": 393, "timestamp": "2019-03-01T02:43:40Z", "event_type": "GetObject", "event_source": "s3.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIACI59CLEVIFTMSVDV", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "34.220.133.196", "user_agent": "Botocore/1.21.21 Python/3.8.10 Linux/5.4.0-90-generic", "aws_region": "us-west-2"}, "resource_arns": ["arn:aws:s3:::prod-data-3594"], "raw_record_size_bytes": 628, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "requestParameters", "resources", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "385bf8f4-af5c-495f-a483-6969c9dc7de4", "eventTime": "2019-03-01T02:43:40Z", "eventName": "GetObject", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "34.220.133.196", "userAgent": "Botocore/1.21.21 Python/3.8.10 Linux/5.4.0-90-generic", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIACI59CLEVIFTMSVDV", "userName": "Level6"}, "requestParameters": {"bucketName": "prod-data-3594", "key": "customer/06612.json"}, "resources": [{"ARN": "arn:aws:s3:::prod-data-3594"}]}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "73ff2aa5-28d3-4661-ab96-80643c88d455", "record_id": "flaws_cloudtrail:0000394:73ff2aa5-28d3-4661-ab96-80643c88d455", "row_index": 394, "timestamp": "2019-03-01T02:44:21Z", "event_type": "GetObject", "event_source": "s3.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIACI59CLEVIFTMSVDV", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "34.220.133.196", "user_agent": "Botocore/1.21.21 Python/3.8.10 Linux/5.4.0-90-generic", "aws_region": "us-west-2"}, "resource_arns": ["arn:aws:s3:::prod-data-3594"], "raw_record_size_bytes": 628, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "requestParameters", "resources", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "73ff2aa5-28d3-4661-ab96-80643c88d455", "eventTime": "2019-03-01T02:44:21Z", "eventName": "GetObject", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "34.220.133.196", "userAgent": "Botocore/1.21.21 Python/3.8.10 Linux/5.4.0-90-generic", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIACI59CLEVIFTMSVDV", "userName": "Level6"}, "requestParameters": {"bucketName": "prod-data-3594", "key": "customer/06629.json"}, "resources": [{"ARN": "arn:aws:s3:::prod-data-3594"}]}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "a763797-9557-41f5-83f9-0e77c3eaaf2f", "record_id": "flaws_cloudtrail:0000395:a763797-9557-41f5-83f9-0e77c3eaaf2f", "row_index": 395, "timestamp": "2019-03-01T03:22:22Z", "event_type": "AssumeRole", "event_source": "sts.amazonaws.com", "principal": {"type": "AWSService", "arn": null, "account_id": null, "principal_id": null, "user_name": null, "access_key_id": null, "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "ec2.amazonaws.com", "user_agent": "ec2.amazonaws.com", "aws_region": "us-west-2"}, "resource_arns": ["arn:aws:iam::811596193553:role/flaws"], "raw_record_size_bytes": 1492, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "resources", "responseElements", "sharedEventID", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "a763797-9557-41f5-83f9-0e77c3eaaf2f", "eventTime": "2019-03-01T03:22:22Z", "eventName": "AssumeRole", "eventSource": "sts.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "ec2.amazonaws.com", "userAgent": "ec2.amazonaws.com", "awsRegion": "us-west-2", "userIdentity": {"type": "AWSService", "invokedBy": "ec2.amazonaws.com"}, "requestParameters": {"roleSessionName": "i-aa2d3b42e5c6e801a", "roleArn": "arn:aws:iam::811596193553:role/flaws"}, "responseElements": {"credentials": {"accessKeyId": "ASIAJEBR3N25674U6OJN", "expiration": "Mar 1, 2019 9:22:27 AM", "sessionToken": "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"}}, "resources": [{"ARN": "arn:aws:iam::811596193553:role/flaws", "accountId": "811596193553", "type": "AWS::IAM::Role"}]}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "a763797-9557-41f5-83f9-0e77c3eaaf2f", "record_id": "flaws_cloudtrail:0000396:a763797-9557-41f5-83f9-0e77c3eaaf2f", "row_index": 396, "timestamp": "2019-03-01T03:22:22Z", "event_type": "AssumeRole", "event_source": "sts.amazonaws.com", "principal": {"type": "AWSService", "arn": null, "account_id": null, "principal_id": null, "user_name": null, "access_key_id": null, "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "ec2.amazonaws.com", "user_agent": "ec2.amazonaws.com", "aws_region": "us-west-2"}, "resource_arns": ["arn:aws:iam::811596193553:role/flaws"], "raw_record_size_bytes": 1492, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "resources", "responseElements", "sharedEventID", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "a763797-9557-41f5-83f9-0e77c3eaaf2f", "eventTime": "2019-03-01T03:22:22Z", "eventName": "AssumeRole", "eventSource": "sts.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "ec2.amazonaws.com", "userAgent": "ec2.amazonaws.com", "awsRegion": "us-west-2", "userIdentity": {"type": "AWSService", "invokedBy": "ec2.amazonaws.com"}, "requestParameters": {"roleSessionName": "i-aa2d3b42e5c6e801a", "roleArn": "arn:aws:iam::811596193553:role/flaws"}, "responseElements": {"credentials": {"accessKeyId": "ASIAJEBR3N25674U6OJN", "expiration": "Mar 1, 2019 9:22:27 AM", "sessionToken": "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"}}, "resources": [{"ARN": "arn:aws:iam::811596193553:role/flaws", "accountId": "811596193553", "type": "AWS::IAM::Role"}]}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "1275a19e-22cd-4403-a77e-56a20b416f1d", "record_id": "flaws_cloudtrail:0000397:1275a19e-22cd-4403-a77e-56a20b416f1d", "row_index": 397, "timestamp": "2019-03-01T04:22:22Z", "event_type": "AssumeRole", "event_source": "sts.amazonaws.com", "principal": {"type": "AWSService", "arn": null, "account_id": null, "principal_id": null, "user_name": null, "access_key_id": null, "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "ec2.amazonaws.com", "user_agent": "ec2.amazonaws.com", "aws_region": "us-west-2"}, "resource_arns": ["arn:aws:iam::811596193553:role/flaws"], "raw_record_size_bytes": 1494, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "resources", "responseElements", "sharedEventID", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "1275a19e-22cd-4403-a77e-56a20b416f1d", "eventTime": "2019-03-01T04:22:22Z", "eventName": "AssumeRole", "eventSource": "sts.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "ec2.amazonaws.com", "userAgent": "ec2.amazonaws.com", "awsRegion": "us-west-2", "userIdentity": {"type": "AWSService", "invokedBy": "ec2.amazonaws.com"}, "requestParameters": {"roleSessionName": "i-aa2d3b42e5c6e801a", "roleArn": "arn:aws:iam::811596193553:role/flaws"}, "responseElements": {"credentials": {"accessKeyId": "ASIAJFZF6Q135IBBKN02", "expiration": "Mar 1, 2019 10:34:34 AM", "sessionToken": "FQoGZXIvYXdzEPb//////////wEaDOrA9DkUsoBPbRIAjyK3A/XB4YC68uASMMftBPJnryQPPmSxpjJm861xGk3ZbJhJiSmisNk1xaQXybnUNVnn8rT6zfPLsUZrJXhQqBwvFNRowoFZSQBQEalxRhoWJPOByEy8QwqulhXg7EG+DqgLoU616dEbjXWtNlSqAAhjaAERe9IjGNPltEyLtLEC3N1btTGX7ga0wzIe2f2Bj8bO2Fkf2lSIMM94FZzsRsA0vg6P+GmtDaGd2N39NqJ7/b3K++2a99iF6UpQ52TshLk7aTjwBDPyRlUVhQlsrGJt//BO9MvJDX5IxwYwnN9y8iMT3a8hhbdevGwQOKEtnAML1cZwpf5T5t7csbHXIL7nMl8vFJawYNF7G2mLrit8YlqNFjuEikXmqGsNHfsrk7CED2gTfv4Isgzc+Ts1DHAf91OY0ij1ZXBd4K+HQkbzseVazpCVKeWfrisDG/vX8Mr+qksg2t94X3PHJRo1jm+L87O43ydPiN10VvSOdQRW3EysI8WS44WIZBsg9xDcdxaCexrQPg3Kt/hy2Ceg+M4XNP4mPBb3zyhEbJPzwo8LtbfT65Tb4zpW3Gb+/Pfv83r4eh3LNt0v1Bso/ubi4wU="}}, "resources": [{"ARN": "arn:aws:iam::811596193553:role/flaws", "accountId": "811596193553", "type": "AWS::IAM::Role"}]}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "1275a19e-22cd-4403-a77e-56a20b416f1d", "record_id": "flaws_cloudtrail:0000398:1275a19e-22cd-4403-a77e-56a20b416f1d", "row_index": 398, "timestamp": "2019-03-01T04:22:22Z", "event_type": "AssumeRole", "event_source": "sts.amazonaws.com", "principal": {"type": "AWSService", "arn": null, "account_id": null, "principal_id": null, "user_name": null, "access_key_id": null, "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "ec2.amazonaws.com", "user_agent": "ec2.amazonaws.com", "aws_region": "us-west-2"}, "resource_arns": ["arn:aws:iam::811596193553:role/flaws"], "raw_record_size_bytes": 1494, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "resources", "responseElements", "sharedEventID", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "1275a19e-22cd-4403-a77e-56a20b416f1d", "eventTime": "2019-03-01T04:22:22Z", "eventName": "AssumeRole", "eventSource": "sts.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "ec2.amazonaws.com", "userAgent": "ec2.amazonaws.com", "awsRegion": "us-west-2", "userIdentity": {"type": "AWSService", "invokedBy": "ec2.amazonaws.com"}, "requestParameters": {"roleSessionName": "i-aa2d3b42e5c6e801a", "roleArn": "arn:aws:iam::811596193553:role/flaws"}, "responseElements": {"credentials": {"accessKeyId": "ASIAJFZF6Q135IBBKN02", "expiration": "Mar 1, 2019 10:34:34 AM", "sessionToken": "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"}}, "resources": [{"ARN": "arn:aws:iam::811596193553:role/flaws", "accountId": "811596193553", "type": "AWS::IAM::Role"}]}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "e61b1f6a-2fc6-42e1-85d0-5442c5954ce0", "record_id": "flaws_cloudtrail:0000399:e61b1f6a-2fc6-42e1-85d0-5442c5954ce0", "row_index": 399, "timestamp": "2019-03-01T05:00:00Z", "event_type": "ListBuckets", "event_source": "s3.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "254.254.89.255", "user_agent": "[aws-cli/1.16.114 Python/3.6.7 Linux/4.15.0-45-generic botocore/1.12.104]", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 812, "raw_record_depth": 3, "raw_record_top_level_keys": ["additionalEventData", "awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "e61b1f6a-2fc6-42e1-85d0-5442c5954ce0", "eventTime": "2019-03-01T05:00:00Z", "eventName": "ListBuckets", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "254.254.89.255", "userAgent": "[aws-cli/1.16.114 Python/3.6.7 Linux/4.15.0-45-generic botocore/1.12.104]", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"host": ["s3.amazonaws.com"]}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "e61b1f6a-2fc6-42e1-85d0-5442c5954ce0", "record_id": "flaws_cloudtrail:0000400:e61b1f6a-2fc6-42e1-85d0-5442c5954ce0", "row_index": 400, "timestamp": "2019-03-01T05:00:00Z", "event_type": "ListBuckets", "event_source": "s3.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "254.254.89.255", "user_agent": "[aws-cli/1.16.114 Python/3.6.7 Linux/4.15.0-45-generic botocore/1.12.104]", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 812, "raw_record_depth": 3, "raw_record_top_level_keys": ["additionalEventData", "awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "e61b1f6a-2fc6-42e1-85d0-5442c5954ce0", "eventTime": "2019-03-01T05:00:00Z", "eventName": "ListBuckets", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "254.254.89.255", "userAgent": "[aws-cli/1.16.114 Python/3.6.7 Linux/4.15.0-45-generic botocore/1.12.104]", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"host": ["s3.amazonaws.com"]}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "c2bf65e0-d214-4298-a635-ba93509f3", "record_id": "flaws_cloudtrail:0000401:c2bf65e0-d214-4298-a635-ba93509f3", "row_index": 401, "timestamp": "2019-03-01T05:20:55Z", "event_type": "DescribeInstances", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "254.254.89.255", "user_agent": "aws-cli/1.16.114 Python/3.6.7 Linux/4.15.0-45-generic botocore/1.12.104", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 708, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "c2bf65e0-d214-4298-a635-ba93509f3", "eventTime": "2019-03-01T05:20:55Z", "eventName": "DescribeInstances", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "254.254.89.255", "userAgent": "aws-cli/1.16.114 Python/3.6.7 Linux/4.15.0-45-generic botocore/1.12.104", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"instancesSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "c2bf65e0-d214-4298-a635-ba93509f3", "record_id": "flaws_cloudtrail:0000402:c2bf65e0-d214-4298-a635-ba93509f3", "row_index": 402, "timestamp": "2019-03-01T05:20:55Z", "event_type": "DescribeInstances", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "254.254.89.255", "user_agent": "aws-cli/1.16.114 Python/3.6.7 Linux/4.15.0-45-generic botocore/1.12.104", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 708, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "c2bf65e0-d214-4298-a635-ba93509f3", "eventTime": "2019-03-01T05:20:55Z", "eventName": "DescribeInstances", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "254.254.89.255", "userAgent": "aws-cli/1.16.114 Python/3.6.7 Linux/4.15.0-45-generic botocore/1.12.104", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"instancesSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "866d0f93-3ff8-42ec-906f-e0602d04ab3d", "record_id": "flaws_cloudtrail:0000403:866d0f93-3ff8-42ec-906f-e0602d04ab3d", "row_index": 403, "timestamp": "2019-03-01T05:21:16Z", "event_type": "DescribeInstances", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "254.254.89.255", "user_agent": "aws-cli/1.16.114 Python/3.6.7 Linux/4.15.0-45-generic botocore/1.12.104", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 711, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "866d0f93-3ff8-42ec-906f-e0602d04ab3d", "eventTime": "2019-03-01T05:21:16Z", "eventName": "DescribeInstances", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "254.254.89.255", "userAgent": "aws-cli/1.16.114 Python/3.6.7 Linux/4.15.0-45-generic botocore/1.12.104", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"instancesSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "866d0f93-3ff8-42ec-906f-e0602d04ab3d", "record_id": "flaws_cloudtrail:0000404:866d0f93-3ff8-42ec-906f-e0602d04ab3d", "row_index": 404, "timestamp": "2019-03-01T05:21:16Z", "event_type": "DescribeInstances", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "254.254.89.255", "user_agent": "aws-cli/1.16.114 Python/3.6.7 Linux/4.15.0-45-generic botocore/1.12.104", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 711, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "866d0f93-3ff8-42ec-906f-e0602d04ab3d", "eventTime": "2019-03-01T05:21:16Z", "eventName": "DescribeInstances", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "254.254.89.255", "userAgent": "aws-cli/1.16.114 Python/3.6.7 Linux/4.15.0-45-generic botocore/1.12.104", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"instancesSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "2f00a298-e31a-4d9f-ac36-82656db51d1c", "record_id": "flaws_cloudtrail:0000405:2f00a298-e31a-4d9f-ac36-82656db51d1c", "row_index": 405, "timestamp": "2019-03-01T05:22:02Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "254.254.89.255", "user_agent": "aws-cli/1.16.114 Python/3.6.7 Linux/4.15.0-45-generic botocore/1.12.104", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 763, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "2f00a298-e31a-4d9f-ac36-82656db51d1c", "eventTime": "2019-03-01T05:22:02Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "254.254.89.255", "userAgent": "aws-cli/1.16.114 Python/3.6.7 Linux/4.15.0-45-generic botocore/1.12.104", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "2f00a298-e31a-4d9f-ac36-82656db51d1c", "record_id": "flaws_cloudtrail:0000406:2f00a298-e31a-4d9f-ac36-82656db51d1c", "row_index": 406, "timestamp": "2019-03-01T05:22:02Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "254.254.89.255", "user_agent": "aws-cli/1.16.114 Python/3.6.7 Linux/4.15.0-45-generic botocore/1.12.104", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 763, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "2f00a298-e31a-4d9f-ac36-82656db51d1c", "eventTime": "2019-03-01T05:22:02Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "254.254.89.255", "userAgent": "aws-cli/1.16.114 Python/3.6.7 Linux/4.15.0-45-generic botocore/1.12.104", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "97f5c63c-1720-4361-b89c-b27784e0d3b2", "record_id": "flaws_cloudtrail:0000407:97f5c63c-1720-4361-b89c-b27784e0d3b2", "row_index": 407, "timestamp": "2019-03-01T05:22:04Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "254.254.89.255", "user_agent": "aws-cli/1.16.114 Python/3.6.7 Linux/4.15.0-45-generic botocore/1.12.104", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 1082, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "97f5c63c-1720-4361-b89c-b27784e0d3b2", "eventTime": "2019-03-01T05:22:04Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "254.254.89.255", "userAgent": "aws-cli/1.16.114 Python/3.6.7 Linux/4.15.0-45-generic botocore/1.12.104", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"nextToken": "eyJ2IjoiMiIsImMiOiI1MHpialZqTHRNNkdPTkYza1ZpSU1VcDExdHRYVm1KQW1HbVBiMENZNDE2d1R1Nk9IN1gxZi9udFoyTnZ4NFJFS2lJdS9jL2M0VlB3aGhSNU5jc0NLMDNtTHpEeWsrUnNlV2Z3MXcwVTRoVGsydU5FSXE2OHIxQm9OOGZ0OHNWMmVtY0hBUVo2WUpOZEZqb042WitOams1RkUyc3lCS1pSTDFRVERLOHYwRkJrQlh1c3p3S1cyL0psb3E3K1JQS053TjRXR21MKzlmYz0iLCJzIjoiMSJ9", "maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "97f5c63c-1720-4361-b89c-b27784e0d3b2", "record_id": "flaws_cloudtrail:0000408:97f5c63c-1720-4361-b89c-b27784e0d3b2", "row_index": 408, "timestamp": "2019-03-01T05:22:04Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "254.254.89.255", "user_agent": "aws-cli/1.16.114 Python/3.6.7 Linux/4.15.0-45-generic botocore/1.12.104", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 1082, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "97f5c63c-1720-4361-b89c-b27784e0d3b2", "eventTime": "2019-03-01T05:22:04Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "254.254.89.255", "userAgent": "aws-cli/1.16.114 Python/3.6.7 Linux/4.15.0-45-generic botocore/1.12.104", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"nextToken": "eyJ2IjoiMiIsImMiOiI1MHpialZqTHRNNkdPTkYza1ZpSU1VcDExdHRYVm1KQW1HbVBiMENZNDE2d1R1Nk9IN1gxZi9udFoyTnZ4NFJFS2lJdS9jL2M0VlB3aGhSNU5jc0NLMDNtTHpEeWsrUnNlV2Z3MXcwVTRoVGsydU5FSXE2OHIxQm9OOGZ0OHNWMmVtY0hBUVo2WUpOZEZqb042WitOams1RkUyc3lCS1pSTDFRVERLOHYwRkJrQlh1c3p3S1cyL0psb3E3K1JQS053TjRXR21MKzlmYz0iLCJzIjoiMSJ9", "maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "43c9fb71-7521-4ac8-85df-c615c960f441", "record_id": "flaws_cloudtrail:0000409:43c9fb71-7521-4ac8-85df-c615c960f441", "row_index": 409, "timestamp": "2019-03-01T05:22:06Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "254.254.89.255", "user_agent": "aws-cli/1.16.114 Python/3.6.7 Linux/4.15.0-45-generic botocore/1.12.104", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 1090, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "43c9fb71-7521-4ac8-85df-c615c960f441", "eventTime": "2019-03-01T05:22:06Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "254.254.89.255", "userAgent": "aws-cli/1.16.114 Python/3.6.7 Linux/4.15.0-45-generic botocore/1.12.104", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"nextToken": "eyJ2IjoiMiIsImMiOiJ3RVdIMHB1Vm1sWGloQk5TS205MGd5YXI5bTFXL1h4NDUxL0pyR3F0Q0l6U0VqM242Nm85RmZteVFKSUtJeTVYU29KZHNibUJvN2NqMXNhYWZ1UVl3Nm5KRjNZT2hBYktMOWtubnF2d2ZaTkFCU1p3eEZHKzNJNVJyaHRMQURWQ1pRUTVpVzdCekVYd2toWG1xOEM5KzFmRVE3b3VpMTNLM2h0bldsNzlYQlBrakZrTll3MXA3Qk9vM2szL0Z4QWFkbFRibGE2YWZxZTg0UT09IiwicyI6IjEifQ==", "maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "43c9fb71-7521-4ac8-85df-c615c960f441", "record_id": "flaws_cloudtrail:0000410:43c9fb71-7521-4ac8-85df-c615c960f441", "row_index": 410, "timestamp": "2019-03-01T05:22:06Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "254.254.89.255", "user_agent": "aws-cli/1.16.114 Python/3.6.7 Linux/4.15.0-45-generic botocore/1.12.104", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 1090, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "43c9fb71-7521-4ac8-85df-c615c960f441", "eventTime": "2019-03-01T05:22:06Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "254.254.89.255", "userAgent": "aws-cli/1.16.114 Python/3.6.7 Linux/4.15.0-45-generic botocore/1.12.104", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"nextToken": "eyJ2IjoiMiIsImMiOiJ3RVdIMHB1Vm1sWGloQk5TS205MGd5YXI5bTFXL1h4NDUxL0pyR3F0Q0l6U0VqM242Nm85RmZteVFKSUtJeTVYU29KZHNibUJvN2NqMXNhYWZ1UVl3Nm5KRjNZT2hBYktMOWtubnF2d2ZaTkFCU1p3eEZHKzNJNVJyaHRMQURWQ1pRUTVpVzdCekVYd2toWG1xOEM5KzFmRVE3b3VpMTNLM2h0bldsNzlYQlBrakZrTll3MXA3Qk9vM2szL0Z4QWFkbFRibGE2YWZxZTg0UT09IiwicyI6IjEifQ==", "maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "0b546c2d-3c71-4566-b9e8-4b81628cd5e", "record_id": "flaws_cloudtrail:0000411:0b546c2d-3c71-4566-b9e8-4b81628cd5e", "row_index": 411, "timestamp": "2019-03-01T05:22:07Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "254.254.89.255", "user_agent": "aws-cli/1.16.114 Python/3.6.7 Linux/4.15.0-45-generic botocore/1.12.104", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 1081, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "0b546c2d-3c71-4566-b9e8-4b81628cd5e", "eventTime": "2019-03-01T05:22:07Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "254.254.89.255", "userAgent": "aws-cli/1.16.114 Python/3.6.7 Linux/4.15.0-45-generic botocore/1.12.104", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"nextToken": "eyJ2IjoiMiIsImMiOiJ6ZVJTQTk3R0xmbUdLYmg2SHhXOXlRNjVNaCtBbWxpZTZzeXV0QlZxK3BrUitBajhpUUVJd3FRcXlhbmJmb1ZoVU5LY2E1ZHhzRHdsZmxjSjFtb3prNlFyZUlDeEdtRTA5cDZLL0JHdXoraEhEb2FITFB4cmdHSXFacGI0aFRBZ2JNWHIyblZjNGNSNGYxYmF0eWdZTHNSeGNmeU1yODd6VWJJQ3hFSHV5WU5nUlFJODAxUC9HajRIUEFzK0JVVFB0TmZ1U214N21BPT0iLCJzIjoiMSJ9", "maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "0b546c2d-3c71-4566-b9e8-4b81628cd5e", "record_id": "flaws_cloudtrail:0000412:0b546c2d-3c71-4566-b9e8-4b81628cd5e", "row_index": 412, "timestamp": "2019-03-01T05:22:07Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "254.254.89.255", "user_agent": "aws-cli/1.16.114 Python/3.6.7 Linux/4.15.0-45-generic botocore/1.12.104", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 1081, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "0b546c2d-3c71-4566-b9e8-4b81628cd5e", "eventTime": "2019-03-01T05:22:07Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "254.254.89.255", "userAgent": "aws-cli/1.16.114 Python/3.6.7 Linux/4.15.0-45-generic botocore/1.12.104", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"nextToken": "eyJ2IjoiMiIsImMiOiJ6ZVJTQTk3R0xmbUdLYmg2SHhXOXlRNjVNaCtBbWxpZTZzeXV0QlZxK3BrUitBajhpUUVJd3FRcXlhbmJmb1ZoVU5LY2E1ZHhzRHdsZmxjSjFtb3prNlFyZUlDeEdtRTA5cDZLL0JHdXoraEhEb2FITFB4cmdHSXFacGI0aFRBZ2JNWHIyblZjNGNSNGYxYmF0eWdZTHNSeGNmeU1yODd6VWJJQ3hFSHV5WU5nUlFJODAxUC9HajRIUEFzK0JVVFB0TmZ1U214N21BPT0iLCJzIjoiMSJ9", "maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "ca4fe809-1d58-486c-8f87-35e6c9e0e6c4", "record_id": "flaws_cloudtrail:0000413:ca4fe809-1d58-486c-8f87-35e6c9e0e6c4", "row_index": 413, "timestamp": "2019-03-01T05:22:09Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "254.254.89.255", "user_agent": "aws-cli/1.16.114 Python/3.6.7 Linux/4.15.0-45-generic botocore/1.12.104", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 1078, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "ca4fe809-1d58-486c-8f87-35e6c9e0e6c4", "eventTime": "2019-03-01T05:22:09Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "254.254.89.255", "userAgent": "aws-cli/1.16.114 Python/3.6.7 Linux/4.15.0-45-generic botocore/1.12.104", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"nextToken": "eyJ2IjoiMiIsImMiOiJqREFIVnlDdTMvaUsrelFJQkxMWFZ6TVdDQzZVWHk4dlpUKzFLM2ttMlZzOWJ6bzROdHBjQ2YvYVgvRzhTcXdVSVQrVDlNYUJ6ZnRIejJiRTVIWTFncUdia3VHS1MrNGdZZVMzTTlnWTFNRkx5MXBISUFMa2hsU0VjZ3FXZkI2bEY5WDQ1Z2ZWRzcxeXF4SlVJWDhmVlRMWStybERZL1EvK2dyZDltUndPNDBZcXJrZnRBaUJMWkp1Z2ZjSm0zT1pxUUg1UDdVPSIsInMiOiIxIn0=", "maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "ca4fe809-1d58-486c-8f87-35e6c9e0e6c4", "record_id": "flaws_cloudtrail:0000414:ca4fe809-1d58-486c-8f87-35e6c9e0e6c4", "row_index": 414, "timestamp": "2019-03-01T05:22:09Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "254.254.89.255", "user_agent": "aws-cli/1.16.114 Python/3.6.7 Linux/4.15.0-45-generic botocore/1.12.104", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 1078, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "ca4fe809-1d58-486c-8f87-35e6c9e0e6c4", "eventTime": "2019-03-01T05:22:09Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "254.254.89.255", "userAgent": "aws-cli/1.16.114 Python/3.6.7 Linux/4.15.0-45-generic botocore/1.12.104", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"nextToken": "eyJ2IjoiMiIsImMiOiJqREFIVnlDdTMvaUsrelFJQkxMWFZ6TVdDQzZVWHk4dlpUKzFLM2ttMlZzOWJ6bzROdHBjQ2YvYVgvRzhTcXdVSVQrVDlNYUJ6ZnRIejJiRTVIWTFncUdia3VHS1MrNGdZZVMzTTlnWTFNRkx5MXBISUFMa2hsU0VjZ3FXZkI2bEY5WDQ1Z2ZWRzcxeXF4SlVJWDhmVlRMWStybERZL1EvK2dyZDltUndPNDBZcXJrZnRBaUJMWkp1Z2ZjSm0zT1pxUUg1UDdVPSIsInMiOiIxIn0=", "maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "1eb8e063-32b5-442c-8dfc-5184713ada83", "record_id": "flaws_cloudtrail:0000415:1eb8e063-32b5-442c-8dfc-5184713ada83", "row_index": 415, "timestamp": "2019-03-01T05:22:11Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "254.254.89.255", "user_agent": "aws-cli/1.16.114 Python/3.6.7 Linux/4.15.0-45-generic botocore/1.12.104", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 1091, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "1eb8e063-32b5-442c-8dfc-5184713ada83", "eventTime": "2019-03-01T05:22:11Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "254.254.89.255", "userAgent": "aws-cli/1.16.114 Python/3.6.7 Linux/4.15.0-45-generic botocore/1.12.104", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"nextToken": "eyJ2IjoiMiIsImMiOiJ3S1hWdTRPUUtzOVJpVEoyc005MDZ3NHJ2eFBsQUhzbXRwdjM0ZUdsMC9lQjgxN2xhdHQwUmNpZVQzbUNUS2lxMVNVL1dYYjBTSFoyNTkwamY4SGJPYmNoMmdDK2RuTHRid2d3RVBUQzhOR3M3VDZ6S1N2blI2bmVxakVoWE5RRnJ2NGc2UTVRRmJ6TnNRQzFlYzROb0RBRFlyMjZKWVNHWmJDVWRnWXB3SURDZkwwbGlzS1dzeG0vNUZuQVQrbFZaMHE1K0ZTNzl1bTFmZz09IiwicyI6IjEifQ==", "maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "1eb8e063-32b5-442c-8dfc-5184713ada83", "record_id": "flaws_cloudtrail:0000416:1eb8e063-32b5-442c-8dfc-5184713ada83", "row_index": 416, "timestamp": "2019-03-01T05:22:11Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "254.254.89.255", "user_agent": "aws-cli/1.16.114 Python/3.6.7 Linux/4.15.0-45-generic botocore/1.12.104", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 1091, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "1eb8e063-32b5-442c-8dfc-5184713ada83", "eventTime": "2019-03-01T05:22:11Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "254.254.89.255", "userAgent": "aws-cli/1.16.114 Python/3.6.7 Linux/4.15.0-45-generic botocore/1.12.104", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"nextToken": "eyJ2IjoiMiIsImMiOiJ3S1hWdTRPUUtzOVJpVEoyc005MDZ3NHJ2eFBsQUhzbXRwdjM0ZUdsMC9lQjgxN2xhdHQwUmNpZVQzbUNUS2lxMVNVL1dYYjBTSFoyNTkwamY4SGJPYmNoMmdDK2RuTHRid2d3RVBUQzhOR3M3VDZ6S1N2blI2bmVxakVoWE5RRnJ2NGc2UTVRRmJ6TnNRQzFlYzROb0RBRFlyMjZKWVNHWmJDVWRnWXB3SURDZkwwbGlzS1dzeG0vNUZuQVQrbFZaMHE1K0ZTNzl1bTFmZz09IiwicyI6IjEifQ==", "maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "427960a05-46ff-41ee-bb45-eecbe997c5a7", "record_id": "flaws_cloudtrail:0000417:427960a05-46ff-41ee-bb45-eecbe997c5a7", "row_index": 417, "timestamp": "2019-03-01T05:22:13Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "254.254.89.255", "user_agent": "aws-cli/1.16.114 Python/3.6.7 Linux/4.15.0-45-generic botocore/1.12.104", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 1082, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "427960a05-46ff-41ee-bb45-eecbe997c5a7", "eventTime": "2019-03-01T05:22:13Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "254.254.89.255", "userAgent": "aws-cli/1.16.114 Python/3.6.7 Linux/4.15.0-45-generic botocore/1.12.104", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"nextToken": "eyJ2IjoiMiIsImMiOiJkNWJUSFdxSGN3VStTdjhzYmdtQjZtc21CNkRBT1BaK05pNlZkU29LR3VrZytVK1RpSE5EZDRZVmIrSEcwYW1uRjZWektCMkprei9mQ1JIZDdmUDJUU2JkS0JNbU12bC9pUkxpeEdXZHp1UEhNVkdUNmVFdk5RZkNLRXR0SXd3cU10TTZ6TU94YlNSdEJZcVAzZFhucjFQS2QzNDQ2dGpybTRvOVFxZXhpM3pubjlEZHR6aVVITTN1UWdMTkM3QVVpeXhpbEhqVTRYST0iLCJzIjoiMSJ9", "maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "427960a05-46ff-41ee-bb45-eecbe997c5a7", "record_id": "flaws_cloudtrail:0000418:427960a05-46ff-41ee-bb45-eecbe997c5a7", "row_index": 418, "timestamp": "2019-03-01T05:22:13Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "254.254.89.255", "user_agent": "aws-cli/1.16.114 Python/3.6.7 Linux/4.15.0-45-generic botocore/1.12.104", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 1082, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "427960a05-46ff-41ee-bb45-eecbe997c5a7", "eventTime": "2019-03-01T05:22:13Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "254.254.89.255", "userAgent": "aws-cli/1.16.114 Python/3.6.7 Linux/4.15.0-45-generic botocore/1.12.104", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"nextToken": "eyJ2IjoiMiIsImMiOiJkNWJUSFdxSGN3VStTdjhzYmdtQjZtc21CNkRBT1BaK05pNlZkU29LR3VrZytVK1RpSE5EZDRZVmIrSEcwYW1uRjZWektCMkprei9mQ1JIZDdmUDJUU2JkS0JNbU12bC9pUkxpeEdXZHp1UEhNVkdUNmVFdk5RZkNLRXR0SXd3cU10TTZ6TU94YlNSdEJZcVAzZFhucjFQS2QzNDQ2dGpybTRvOVFxZXhpM3pubjlEZHR6aVVITTN1UWdMTkM3QVVpeXhpbEhqVTRYST0iLCJzIjoiMSJ9", "maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "ac951216d-0848-4e83-a192-37251e83b", "record_id": "flaws_cloudtrail:0000419:ac951216d-0848-4e83-a192-37251e83b", "row_index": 419, "timestamp": "2019-03-01T05:22:15Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "254.254.89.255", "user_agent": "aws-cli/1.16.114 Python/3.6.7 Linux/4.15.0-45-generic botocore/1.12.104", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 1088, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "ac951216d-0848-4e83-a192-37251e83b", "eventTime": "2019-03-01T05:22:15Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "254.254.89.255", "userAgent": "aws-cli/1.16.114 Python/3.6.7 Linux/4.15.0-45-generic botocore/1.12.104", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"nextToken": "eyJ2IjoiMiIsImMiOiJTR2k5KzhWNzd6ZVFoaWNzYVNtUWlEcGhwOHc0WkJUbkdqbllRU2JrRTQ5L0NKME16NXQ1bk53VENZQkNBL05WQjFiR0xrMFVsYm5GVHdKaG5QU1RJTWpZZCtBL2laQllhWWQxc0NPb2pWMnV4Q3BkUDV1dHBVT1VGeGhhU2kwb3llK0V0cnZURkZUdjhnaEtBdzRJZHRNNHM2NFJJS0Flam51bXFWMXc0Z0VQb1lTRm93SXp1dmgvYzBIOEp1OTBJTHZxRUVLVUY1SkdIZz09IiwicyI6IjEifQ==", "maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "ac951216d-0848-4e83-a192-37251e83b", "record_id": "flaws_cloudtrail:0000420:ac951216d-0848-4e83-a192-37251e83b", "row_index": 420, "timestamp": "2019-03-01T05:22:15Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "254.254.89.255", "user_agent": "aws-cli/1.16.114 Python/3.6.7 Linux/4.15.0-45-generic botocore/1.12.104", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 1088, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "ac951216d-0848-4e83-a192-37251e83b", "eventTime": "2019-03-01T05:22:15Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "254.254.89.255", "userAgent": "aws-cli/1.16.114 Python/3.6.7 Linux/4.15.0-45-generic botocore/1.12.104", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"nextToken": "eyJ2IjoiMiIsImMiOiJTR2k5KzhWNzd6ZVFoaWNzYVNtUWlEcGhwOHc0WkJUbkdqbllRU2JrRTQ5L0NKME16NXQ1bk53VENZQkNBL05WQjFiR0xrMFVsYm5GVHdKaG5QU1RJTWpZZCtBL2laQllhWWQxc0NPb2pWMnV4Q3BkUDV1dHBVT1VGeGhhU2kwb3llK0V0cnZURkZUdjhnaEtBdzRJZHRNNHM2NFJJS0Flam51bXFWMXc0Z0VQb1lTRm93SXp1dmgvYzBIOEp1OTBJTHZxRUVLVUY1SkdIZz09IiwicyI6IjEifQ==", "maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "651a9f47-520b-4d11-bf5c-f33405872007", "record_id": "flaws_cloudtrail:0000421:651a9f47-520b-4d11-bf5c-f33405872007", "row_index": 421, "timestamp": "2019-03-01T05:22:16Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "254.254.89.255", "user_agent": "aws-cli/1.16.114 Python/3.6.7 Linux/4.15.0-45-generic botocore/1.12.104", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 1090, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "651a9f47-520b-4d11-bf5c-f33405872007", "eventTime": "2019-03-01T05:22:16Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "254.254.89.255", "userAgent": "aws-cli/1.16.114 Python/3.6.7 Linux/4.15.0-45-generic botocore/1.12.104", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"nextToken": "eyJ2IjoiMiIsImMiOiJKeDMva0dQUHRxeDAwN2ZySTFqWDQrQ0RDYkRYQldtWE9DcW5KN3pUYm5Jc0REVjRKNHRsa2dsKy95Tm1kK2h1ZkZXTStvbFc0MEdnUnJoYkVESHNoL3pNT2pjR2p6alREV2U4R2o5MElIS3dhbUlKOC9RMjhVTHk1NXo3YUtVWGtIMDVMNkZiamJxZFJubGlWRFZoYjl3M08xL2JSeEJZVFdXSzZKbnhBeFRqMDd6Q00rYjdPTnV5Kzl5TllJTmZwY0w3ZGJWQXpvOWQzZz09IiwicyI6IjEifQ==", "maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "651a9f47-520b-4d11-bf5c-f33405872007", "record_id": "flaws_cloudtrail:0000422:651a9f47-520b-4d11-bf5c-f33405872007", "row_index": 422, "timestamp": "2019-03-01T05:22:16Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "254.254.89.255", "user_agent": "aws-cli/1.16.114 Python/3.6.7 Linux/4.15.0-45-generic botocore/1.12.104", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 1090, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "651a9f47-520b-4d11-bf5c-f33405872007", "eventTime": "2019-03-01T05:22:16Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "254.254.89.255", "userAgent": "aws-cli/1.16.114 Python/3.6.7 Linux/4.15.0-45-generic botocore/1.12.104", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"nextToken": "eyJ2IjoiMiIsImMiOiJKeDMva0dQUHRxeDAwN2ZySTFqWDQrQ0RDYkRYQldtWE9DcW5KN3pUYm5Jc0REVjRKNHRsa2dsKy95Tm1kK2h1ZkZXTStvbFc0MEdnUnJoYkVESHNoL3pNT2pjR2p6alREV2U4R2o5MElIS3dhbUlKOC9RMjhVTHk1NXo3YUtVWGtIMDVMNkZiamJxZFJubGlWRFZoYjl3M08xL2JSeEJZVFdXSzZKbnhBeFRqMDd6Q00rYjdPTnV5Kzl5TllJTmZwY0w3ZGJWQXpvOWQzZz09IiwicyI6IjEifQ==", "maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "d00fa52c-2e79-49dd-a95d-015a29aec8db", "record_id": "flaws_cloudtrail:0000423:d00fa52c-2e79-49dd-a95d-015a29aec8db", "row_index": 423, "timestamp": "2019-03-01T05:22:18Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "254.254.89.255", "user_agent": "aws-cli/1.16.114 Python/3.6.7 Linux/4.15.0-45-generic botocore/1.12.104", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 1078, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "d00fa52c-2e79-49dd-a95d-015a29aec8db", "eventTime": "2019-03-01T05:22:18Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "254.254.89.255", "userAgent": "aws-cli/1.16.114 Python/3.6.7 Linux/4.15.0-45-generic botocore/1.12.104", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"nextToken": "eyJ2IjoiMiIsImMiOiJUY3FrME5uQy9OZVN6MGZ1eExoQkx1QmQ1bnNaRS9TZ0E0THgxVTk3dzhJUTUrV3lJOUFZbEIwQjE1bW5rQ1EzTFBWV1h4cU16OE5NeHZudmwzZTVBR1dZSzhkMktYUG9sVUdXaVk3eFU1K0xFYldINExPVEFtRElVOWhLcE9YUTdWcC9nUTBTcVBwdXdQRnFCbmI0WllTdGNXWHU1TENwS1AvSERreURwam82UFo3NGRoYUw4Zkw1eDJVR04yczBUcDZNZHE3SSIsInMiOiIxIn0=", "maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "d00fa52c-2e79-49dd-a95d-015a29aec8db", "record_id": "flaws_cloudtrail:0000424:d00fa52c-2e79-49dd-a95d-015a29aec8db", "row_index": 424, "timestamp": "2019-03-01T05:22:18Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "254.254.89.255", "user_agent": "aws-cli/1.16.114 Python/3.6.7 Linux/4.15.0-45-generic botocore/1.12.104", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 1078, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "d00fa52c-2e79-49dd-a95d-015a29aec8db", "eventTime": "2019-03-01T05:22:18Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "254.254.89.255", "userAgent": "aws-cli/1.16.114 Python/3.6.7 Linux/4.15.0-45-generic botocore/1.12.104", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"nextToken": "eyJ2IjoiMiIsImMiOiJUY3FrME5uQy9OZVN6MGZ1eExoQkx1QmQ1bnNaRS9TZ0E0THgxVTk3dzhJUTUrV3lJOUFZbEIwQjE1bW5rQ1EzTFBWV1h4cU16OE5NeHZudmwzZTVBR1dZSzhkMktYUG9sVUdXaVk3eFU1K0xFYldINExPVEFtRElVOWhLcE9YUTdWcC9nUTBTcVBwdXdQRnFCbmI0WllTdGNXWHU1TENwS1AvSERreURwam82UFo3NGRoYUw4Zkw1eDJVR04yczBUcDZNZHE3SSIsInMiOiIxIn0=", "maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "bb283ff0-f909-49cb-aa5c-bef20a868c29", "record_id": "flaws_cloudtrail:0000425:bb283ff0-f909-49cb-aa5c-bef20a868c29", "row_index": 425, "timestamp": "2019-03-01T05:22:22Z", "event_type": "AssumeRole", "event_source": "sts.amazonaws.com", "principal": {"type": "AWSService", "arn": null, "account_id": null, "principal_id": null, "user_name": null, "access_key_id": null, "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "ec2.amazonaws.com", "user_agent": "ec2.amazonaws.com", "aws_region": "us-west-2"}, "resource_arns": ["arn:aws:iam::811596193553:role/flaws"], "raw_record_size_bytes": 1491, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "resources", "responseElements", "sharedEventID", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "bb283ff0-f909-49cb-aa5c-bef20a868c29", "eventTime": "2019-03-01T05:22:22Z", "eventName": "AssumeRole", "eventSource": "sts.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "ec2.amazonaws.com", "userAgent": "ec2.amazonaws.com", "awsRegion": "us-west-2", "userIdentity": {"type": "AWSService", "invokedBy": "ec2.amazonaws.com"}, "requestParameters": {"roleSessionName": "i-aa2d3b42e5c6e801a", "roleArn": "arn:aws:iam::811596193553:role/flaws"}, "responseElements": {"credentials": {"accessKeyId": "ASIA8TBEHDNGRWT915FT", "expiration": "Mar 1, 2019 11:30:23 AM", "sessionToken": "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"}}, "resources": [{"ARN": "arn:aws:iam::811596193553:role/flaws", "accountId": "811596193553", "type": "AWS::IAM::Role"}]}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "bb283ff0-f909-49cb-aa5c-bef20a868c29", "record_id": "flaws_cloudtrail:0000426:bb283ff0-f909-49cb-aa5c-bef20a868c29", "row_index": 426, "timestamp": "2019-03-01T05:22:22Z", "event_type": "AssumeRole", "event_source": "sts.amazonaws.com", "principal": {"type": "AWSService", "arn": null, "account_id": null, "principal_id": null, "user_name": null, "access_key_id": null, "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "ec2.amazonaws.com", "user_agent": "ec2.amazonaws.com", "aws_region": "us-west-2"}, "resource_arns": ["arn:aws:iam::811596193553:role/flaws"], "raw_record_size_bytes": 1491, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "resources", "responseElements", "sharedEventID", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "bb283ff0-f909-49cb-aa5c-bef20a868c29", "eventTime": "2019-03-01T05:22:22Z", "eventName": "AssumeRole", "eventSource": "sts.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "ec2.amazonaws.com", "userAgent": "ec2.amazonaws.com", "awsRegion": "us-west-2", "userIdentity": {"type": "AWSService", "invokedBy": "ec2.amazonaws.com"}, "requestParameters": {"roleSessionName": "i-aa2d3b42e5c6e801a", "roleArn": "arn:aws:iam::811596193553:role/flaws"}, "responseElements": {"credentials": {"accessKeyId": "ASIA8TBEHDNGRWT915FT", "expiration": "Mar 1, 2019 11:30:23 AM", "sessionToken": "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"}}, "resources": [{"ARN": "arn:aws:iam::811596193553:role/flaws", "accountId": "811596193553", "type": "AWS::IAM::Role"}]}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "80defb9a-4c8c-4479-bbc6-ec8faf097818", "record_id": "flaws_cloudtrail:0000427:80defb9a-4c8c-4479-bbc6-ec8faf097818", "row_index": 427, "timestamp": "2019-03-01T05:23:27Z", "event_type": "ListBuckets", "event_source": "s3.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "254.254.89.255", "user_agent": "[aws-cli/1.16.114 Python/3.6.7 Linux/4.15.0-45-generic botocore/1.12.104]", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 808, "raw_record_depth": 3, "raw_record_top_level_keys": ["additionalEventData", "awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "80defb9a-4c8c-4479-bbc6-ec8faf097818", "eventTime": "2019-03-01T05:23:27Z", "eventName": "ListBuckets", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "254.254.89.255", "userAgent": "[aws-cli/1.16.114 Python/3.6.7 Linux/4.15.0-45-generic botocore/1.12.104]", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"host": ["s3.amazonaws.com"]}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "80defb9a-4c8c-4479-bbc6-ec8faf097818", "record_id": "flaws_cloudtrail:0000428:80defb9a-4c8c-4479-bbc6-ec8faf097818", "row_index": 428, "timestamp": "2019-03-01T05:23:27Z", "event_type": "ListBuckets", "event_source": "s3.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "254.254.89.255", "user_agent": "[aws-cli/1.16.114 Python/3.6.7 Linux/4.15.0-45-generic botocore/1.12.104]", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 808, "raw_record_depth": 3, "raw_record_top_level_keys": ["additionalEventData", "awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "80defb9a-4c8c-4479-bbc6-ec8faf097818", "eventTime": "2019-03-01T05:23:27Z", "eventName": "ListBuckets", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "254.254.89.255", "userAgent": "[aws-cli/1.16.114 Python/3.6.7 Linux/4.15.0-45-generic botocore/1.12.104]", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"host": ["s3.amazonaws.com"]}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "2a61a3e7-0556-4186-b866-0f7a36449c0", "record_id": "flaws_cloudtrail:0000429:2a61a3e7-0556-4186-b866-0f7a36449c0", "row_index": 429, "timestamp": "2019-03-01T05:25:24Z", "event_type": "DescribeInstances", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "254.254.89.255", "user_agent": "aws-cli/1.16.114 Python/3.6.7 Linux/4.15.0-45-generic botocore/1.12.104", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 710, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "2a61a3e7-0556-4186-b866-0f7a36449c0", "eventTime": "2019-03-01T05:25:24Z", "eventName": "DescribeInstances", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "254.254.89.255", "userAgent": "aws-cli/1.16.114 Python/3.6.7 Linux/4.15.0-45-generic botocore/1.12.104", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"instancesSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "2a61a3e7-0556-4186-b866-0f7a36449c0", "record_id": "flaws_cloudtrail:0000430:2a61a3e7-0556-4186-b866-0f7a36449c0", "row_index": 430, "timestamp": "2019-03-01T05:25:24Z", "event_type": "DescribeInstances", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "254.254.89.255", "user_agent": "aws-cli/1.16.114 Python/3.6.7 Linux/4.15.0-45-generic botocore/1.12.104", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 710, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "2a61a3e7-0556-4186-b866-0f7a36449c0", "eventTime": "2019-03-01T05:25:24Z", "eventName": "DescribeInstances", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "254.254.89.255", "userAgent": "aws-cli/1.16.114 Python/3.6.7 Linux/4.15.0-45-generic botocore/1.12.104", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"instancesSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "3e4848e7-1c7b-43ec-8d6e-47e85377f46e", "record_id": "flaws_cloudtrail:0000431:3e4848e7-1c7b-43ec-8d6e-47e85377f46e", "row_index": 431, "timestamp": "2019-03-01T05:26:50Z", "event_type": "DescribeImages", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "254.254.89.255", "user_agent": "aws-cli/1.16.114 Python/3.6.7 Linux/4.15.0-45-generic botocore/1.12.104", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 741, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "3e4848e7-1c7b-43ec-8d6e-47e85377f46e", "eventTime": "2019-03-01T05:26:50Z", "eventName": "DescribeImages", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "254.254.89.255", "userAgent": "aws-cli/1.16.114 Python/3.6.7 Linux/4.15.0-45-generic botocore/1.12.104", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"executableBySet": {}, "imagesSet": {}, "ownersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "3e4848e7-1c7b-43ec-8d6e-47e85377f46e", "record_id": "flaws_cloudtrail:0000432:3e4848e7-1c7b-43ec-8d6e-47e85377f46e", "row_index": 432, "timestamp": "2019-03-01T05:26:50Z", "event_type": "DescribeImages", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "254.254.89.255", "user_agent": "aws-cli/1.16.114 Python/3.6.7 Linux/4.15.0-45-generic botocore/1.12.104", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 741, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "3e4848e7-1c7b-43ec-8d6e-47e85377f46e", "eventTime": "2019-03-01T05:26:50Z", "eventName": "DescribeImages", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "254.254.89.255", "userAgent": "aws-cli/1.16.114 Python/3.6.7 Linux/4.15.0-45-generic botocore/1.12.104", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"executableBySet": {}, "imagesSet": {}, "ownersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "11852cbf-7a61-40e6-a082-b9156e51c8d4", "record_id": "flaws_cloudtrail:0000433:11852cbf-7a61-40e6-a082-b9156e51c8d4", "row_index": 433, "timestamp": "2019-03-01T05:28:31Z", "event_type": "DescribeInstances", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "254.254.89.255", "user_agent": "aws-cli/1.16.114 Python/3.6.7 Linux/4.15.0-45-generic botocore/1.12.104", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 711, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "11852cbf-7a61-40e6-a082-b9156e51c8d4", "eventTime": "2019-03-01T05:28:31Z", "eventName": "DescribeInstances", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "254.254.89.255", "userAgent": "aws-cli/1.16.114 Python/3.6.7 Linux/4.15.0-45-generic botocore/1.12.104", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"instancesSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "11852cbf-7a61-40e6-a082-b9156e51c8d4", "record_id": "flaws_cloudtrail:0000434:11852cbf-7a61-40e6-a082-b9156e51c8d4", "row_index": 434, "timestamp": "2019-03-01T05:28:31Z", "event_type": "DescribeInstances", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "254.254.89.255", "user_agent": "aws-cli/1.16.114 Python/3.6.7 Linux/4.15.0-45-generic botocore/1.12.104", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 711, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "11852cbf-7a61-40e6-a082-b9156e51c8d4", "eventTime": "2019-03-01T05:28:31Z", "eventName": "DescribeInstances", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "254.254.89.255", "userAgent": "aws-cli/1.16.114 Python/3.6.7 Linux/4.15.0-45-generic botocore/1.12.104", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"instancesSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "4721cf92-de5d-45a0-b7b6-fc1eaf9406b3", "record_id": "flaws_cloudtrail:0000435:4721cf92-de5d-45a0-b7b6-fc1eaf9406b3", "row_index": 435, "timestamp": "2019-03-01T05:33:23Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "254.254.89.255", "user_agent": "aws-cli/1.16.114 Python/3.6.7 Linux/4.15.0-45-generic botocore/1.12.104", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 763, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "4721cf92-de5d-45a0-b7b6-fc1eaf9406b3", "eventTime": "2019-03-01T05:33:23Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "254.254.89.255", "userAgent": "aws-cli/1.16.114 Python/3.6.7 Linux/4.15.0-45-generic botocore/1.12.104", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "4721cf92-de5d-45a0-b7b6-fc1eaf9406b3", "record_id": "flaws_cloudtrail:0000436:4721cf92-de5d-45a0-b7b6-fc1eaf9406b3", "row_index": 436, "timestamp": "2019-03-01T05:33:23Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "254.254.89.255", "user_agent": "aws-cli/1.16.114 Python/3.6.7 Linux/4.15.0-45-generic botocore/1.12.104", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 763, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "4721cf92-de5d-45a0-b7b6-fc1eaf9406b3", "eventTime": "2019-03-01T05:33:23Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "254.254.89.255", "userAgent": "aws-cli/1.16.114 Python/3.6.7 Linux/4.15.0-45-generic botocore/1.12.104", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "3a10e327-45e8-43c0-8a6a-45e443ed59f4", "record_id": "flaws_cloudtrail:0000437:3a10e327-45e8-43c0-8a6a-45e443ed59f4", "row_index": 437, "timestamp": "2019-03-01T05:33:28Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "254.254.89.255", "user_agent": "aws-cli/1.16.114 Python/3.6.7 Linux/4.15.0-45-generic botocore/1.12.104", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 1082, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "3a10e327-45e8-43c0-8a6a-45e443ed59f4", "eventTime": "2019-03-01T05:33:28Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "254.254.89.255", "userAgent": "aws-cli/1.16.114 Python/3.6.7 Linux/4.15.0-45-generic botocore/1.12.104", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"nextToken": "eyJ2IjoiMiIsImMiOiI3cEJYelpjOXpwUjJHS1gzNktJUFJrMm1Id0ZrUTl5Y2c4bHEzMS9uYTd3cmU2a01MR3lBdWxIVHFpSTRNV1daMXVaVExwMk9uVFplMGNpdjVBWlJJYkRIVzRSUURpMGVJS01DanpQazNSLytPRFNHcWVMczk3VERHR0JLNVpmS0hGRjFyRFk0OXdJR3Z1MGkyZUlxb29zY3hkSm9sZnRRVlBJOW05bW1jeHBRZEVoeU5ESDQxa3BEVHJKZ0dnT05IUk5wc2JPMUxlVT0iLCJzIjoiMSJ9", "maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "3a10e327-45e8-43c0-8a6a-45e443ed59f4", "record_id": "flaws_cloudtrail:0000438:3a10e327-45e8-43c0-8a6a-45e443ed59f4", "row_index": 438, "timestamp": "2019-03-01T05:33:28Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "254.254.89.255", "user_agent": "aws-cli/1.16.114 Python/3.6.7 Linux/4.15.0-45-generic botocore/1.12.104", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 1082, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "3a10e327-45e8-43c0-8a6a-45e443ed59f4", "eventTime": "2019-03-01T05:33:28Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "254.254.89.255", "userAgent": "aws-cli/1.16.114 Python/3.6.7 Linux/4.15.0-45-generic botocore/1.12.104", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"nextToken": "eyJ2IjoiMiIsImMiOiI3cEJYelpjOXpwUjJHS1gzNktJUFJrMm1Id0ZrUTl5Y2c4bHEzMS9uYTd3cmU2a01MR3lBdWxIVHFpSTRNV1daMXVaVExwMk9uVFplMGNpdjVBWlJJYkRIVzRSUURpMGVJS01DanpQazNSLytPRFNHcWVMczk3VERHR0JLNVpmS0hGRjFyRFk0OXdJR3Z1MGkyZUlxb29zY3hkSm9sZnRRVlBJOW05bW1jeHBRZEVoeU5ESDQxa3BEVHJKZ0dnT05IUk5wc2JPMUxlVT0iLCJzIjoiMSJ9", "maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "cf3d9daf-a16f-4161-a8c4-e1fc87d9ada1", "record_id": "flaws_cloudtrail:0000439:cf3d9daf-a16f-4161-a8c4-e1fc87d9ada1", "row_index": 439, "timestamp": "2019-03-01T05:33:32Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "254.254.89.255", "user_agent": "aws-cli/1.16.114 Python/3.6.7 Linux/4.15.0-45-generic botocore/1.12.104", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 1090, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "cf3d9daf-a16f-4161-a8c4-e1fc87d9ada1", "eventTime": "2019-03-01T05:33:32Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "254.254.89.255", "userAgent": "aws-cli/1.16.114 Python/3.6.7 Linux/4.15.0-45-generic botocore/1.12.104", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"nextToken": "eyJ2IjoiMiIsImMiOiJhWWc3a05laWZHeHdpeVA4ek9nRHdMSUk2V2lkNGhRNVZNbjFnZU1DU2ZXVEhNZUFFMC9FSjNVOE8rZ1FOVDl3YzRjdlBBNkIzSGdoMWI5NUUvRjcvbkw2VmtlRThLMExjNVFoaGVVQWlQWHJVTExqdWVvbWJWVEZIczNUZFVUSHFROFFMZkRYTFF3RytBczdpVnVQWFkveDRMbjU3cFVoZWxwRjlDVDh0ZERTYzJLajhXdno5RUVUd08rV1ZEdnFTSDgyQlczM2FRb0lIdz09IiwicyI6IjEifQ==", "maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "cf3d9daf-a16f-4161-a8c4-e1fc87d9ada1", "record_id": "flaws_cloudtrail:0000440:cf3d9daf-a16f-4161-a8c4-e1fc87d9ada1", "row_index": 440, "timestamp": "2019-03-01T05:33:32Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "254.254.89.255", "user_agent": "aws-cli/1.16.114 Python/3.6.7 Linux/4.15.0-45-generic botocore/1.12.104", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 1090, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "cf3d9daf-a16f-4161-a8c4-e1fc87d9ada1", "eventTime": "2019-03-01T05:33:32Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "254.254.89.255", "userAgent": "aws-cli/1.16.114 Python/3.6.7 Linux/4.15.0-45-generic botocore/1.12.104", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"nextToken": "eyJ2IjoiMiIsImMiOiJhWWc3a05laWZHeHdpeVA4ek9nRHdMSUk2V2lkNGhRNVZNbjFnZU1DU2ZXVEhNZUFFMC9FSjNVOE8rZ1FOVDl3YzRjdlBBNkIzSGdoMWI5NUUvRjcvbkw2VmtlRThLMExjNVFoaGVVQWlQWHJVTExqdWVvbWJWVEZIczNUZFVUSHFROFFMZkRYTFF3RytBczdpVnVQWFkveDRMbjU3cFVoZWxwRjlDVDh0ZERTYzJLajhXdno5RUVUd08rV1ZEdnFTSDgyQlczM2FRb0lIdz09IiwicyI6IjEifQ==", "maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "3ba3d94a-63e6-4ecb-bd8f-227cec1f0605", "record_id": "flaws_cloudtrail:0000441:3ba3d94a-63e6-4ecb-bd8f-227cec1f0605", "row_index": 441, "timestamp": "2019-03-01T05:33:35Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "254.254.89.255", "user_agent": "aws-cli/1.16.114 Python/3.6.7 Linux/4.15.0-45-generic botocore/1.12.104", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 1082, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "3ba3d94a-63e6-4ecb-bd8f-227cec1f0605", "eventTime": "2019-03-01T05:33:35Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "254.254.89.255", "userAgent": "aws-cli/1.16.114 Python/3.6.7 Linux/4.15.0-45-generic botocore/1.12.104", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"nextToken": "eyJ2IjoiMiIsImMiOiIycWhDd2duTTQwTnBiVXpsaTdnQ0JjZU9iTGJDMWQ2ZVMwMEFLcVRqa3Y1YnZyelJRclp4bnIxQlBvU2RoN1daYU5sVjNhMzlXZjJvZmg1dkRJalc1Um9sdDU4M1ByOU05OVJKQ0V1aHdrcXZqcHlPZE9XSzBiU2tPR3RkRFFzbE5RK2FiZlE0aENkQWh3ZUIyM2svODRMcE95bzN1eXdnQk0rcjRrU1RocmtJaXBQMlgwcldXa0FUWkpOa29oS0MrYXY3bzBBSmhnPT0iLCJzIjoiMSJ9", "maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "3ba3d94a-63e6-4ecb-bd8f-227cec1f0605", "record_id": "flaws_cloudtrail:0000442:3ba3d94a-63e6-4ecb-bd8f-227cec1f0605", "row_index": 442, "timestamp": "2019-03-01T05:33:35Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "254.254.89.255", "user_agent": "aws-cli/1.16.114 Python/3.6.7 Linux/4.15.0-45-generic botocore/1.12.104", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 1082, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "3ba3d94a-63e6-4ecb-bd8f-227cec1f0605", "eventTime": "2019-03-01T05:33:35Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "254.254.89.255", "userAgent": "aws-cli/1.16.114 Python/3.6.7 Linux/4.15.0-45-generic botocore/1.12.104", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"nextToken": "eyJ2IjoiMiIsImMiOiIycWhDd2duTTQwTnBiVXpsaTdnQ0JjZU9iTGJDMWQ2ZVMwMEFLcVRqa3Y1YnZyelJRclp4bnIxQlBvU2RoN1daYU5sVjNhMzlXZjJvZmg1dkRJalc1Um9sdDU4M1ByOU05OVJKQ0V1aHdrcXZqcHlPZE9XSzBiU2tPR3RkRFFzbE5RK2FiZlE0aENkQWh3ZUIyM2svODRMcE95bzN1eXdnQk0rcjRrU1RocmtJaXBQMlgwcldXa0FUWkpOa29oS0MrYXY3bzBBSmhnPT0iLCJzIjoiMSJ9", "maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "9c808f64-4fdd-478c-8ff8-ee2c6d5ea633", "record_id": "flaws_cloudtrail:0000443:9c808f64-4fdd-478c-8ff8-ee2c6d5ea633", "row_index": 443, "timestamp": "2019-03-01T05:33:38Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "254.254.89.255", "user_agent": "aws-cli/1.16.114 Python/3.6.7 Linux/4.15.0-45-generic botocore/1.12.104", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 1075, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "9c808f64-4fdd-478c-8ff8-ee2c6d5ea633", "eventTime": "2019-03-01T05:33:38Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "254.254.89.255", "userAgent": "aws-cli/1.16.114 Python/3.6.7 Linux/4.15.0-45-generic botocore/1.12.104", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"nextToken": "eyJ2IjoiMiIsImMiOiIrV3Rib2I5VmxQVDFyV29mN2tlL1crVWgzYSt6eXdOcmlmM0xwcHdkRW5jMzF0OFFNV2gzRHovaUJaVWNlK1Z5ZDE5dytHQ1hyR2JiNE03aFh4TTBkYlc2Z3hEZkVIT3FNSDQzM0gvNEpUeVg2U1dGVE5RL2FrOXZNc3padGlaUDVadEtxeExHdWMwdDB4OUc2U2U3NnRPMHJiK0p6YU9ZbjFoTjZvSjN5RmxUK2xMVE41NnRHaHBCb1J2QW9heEFCaER4RDJFPSIsInMiOiIxIn0=", "maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "9c808f64-4fdd-478c-8ff8-ee2c6d5ea633", "record_id": "flaws_cloudtrail:0000444:9c808f64-4fdd-478c-8ff8-ee2c6d5ea633", "row_index": 444, "timestamp": "2019-03-01T05:33:38Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "254.254.89.255", "user_agent": "aws-cli/1.16.114 Python/3.6.7 Linux/4.15.0-45-generic botocore/1.12.104", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 1075, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "9c808f64-4fdd-478c-8ff8-ee2c6d5ea633", "eventTime": "2019-03-01T05:33:38Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "254.254.89.255", "userAgent": "aws-cli/1.16.114 Python/3.6.7 Linux/4.15.0-45-generic botocore/1.12.104", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"nextToken": "eyJ2IjoiMiIsImMiOiIrV3Rib2I5VmxQVDFyV29mN2tlL1crVWgzYSt6eXdOcmlmM0xwcHdkRW5jMzF0OFFNV2gzRHovaUJaVWNlK1Z5ZDE5dytHQ1hyR2JiNE03aFh4TTBkYlc2Z3hEZkVIT3FNSDQzM0gvNEpUeVg2U1dGVE5RL2FrOXZNc3padGlaUDVadEtxeExHdWMwdDB4OUc2U2U3NnRPMHJiK0p6YU9ZbjFoTjZvSjN5RmxUK2xMVE41NnRHaHBCb1J2QW9heEFCaER4RDJFPSIsInMiOiIxIn0=", "maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "5a39302-c959-4f1a-bf49-802739ad4444", "record_id": "flaws_cloudtrail:0000445:5a39302-c959-4f1a-bf49-802739ad4444", "row_index": 445, "timestamp": "2019-03-01T05:33:42Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "254.254.89.255", "user_agent": "aws-cli/1.16.114 Python/3.6.7 Linux/4.15.0-45-generic botocore/1.12.104", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 1089, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "5a39302-c959-4f1a-bf49-802739ad4444", "eventTime": "2019-03-01T05:33:42Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "254.254.89.255", "userAgent": "aws-cli/1.16.114 Python/3.6.7 Linux/4.15.0-45-generic botocore/1.12.104", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"nextToken": "eyJ2IjoiMiIsImMiOiJlOUNnQU9EeFpsZWJPSXYxYVE1Vm51b3U1M1Zuc3l5VG5LYmhwYlVId29uRGJlOGkzL1kzanhmUlFJV3laS0RKZmo2ODJ5UmVCWitacU5TZUxFY1ZWYzV5Y0lObm4wUHZpeUNEZDIzVUJvWFY2V0VSUGVEaElPWmFINlc5UWtsaXM5MURrcVFXSHZWOTlCOFdhdlovRHdKbm80NHNTOFEvbGZaTm1ic2VhK2FCUjBsU0VuWS9XdUg2dEg0MnVXcmNXdmR3VjFmVHZwYjc1dz09IiwicyI6IjEifQ==", "maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "5a39302-c959-4f1a-bf49-802739ad4444", "record_id": "flaws_cloudtrail:0000446:5a39302-c959-4f1a-bf49-802739ad4444", "row_index": 446, "timestamp": "2019-03-01T05:33:42Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "254.254.89.255", "user_agent": "aws-cli/1.16.114 Python/3.6.7 Linux/4.15.0-45-generic botocore/1.12.104", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 1089, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "5a39302-c959-4f1a-bf49-802739ad4444", "eventTime": "2019-03-01T05:33:42Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "254.254.89.255", "userAgent": "aws-cli/1.16.114 Python/3.6.7 Linux/4.15.0-45-generic botocore/1.12.104", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"nextToken": "eyJ2IjoiMiIsImMiOiJlOUNnQU9EeFpsZWJPSXYxYVE1Vm51b3U1M1Zuc3l5VG5LYmhwYlVId29uRGJlOGkzL1kzanhmUlFJV3laS0RKZmo2ODJ5UmVCWitacU5TZUxFY1ZWYzV5Y0lObm4wUHZpeUNEZDIzVUJvWFY2V0VSUGVEaElPWmFINlc5UWtsaXM5MURrcVFXSHZWOTlCOFdhdlovRHdKbm80NHNTOFEvbGZaTm1ic2VhK2FCUjBsU0VuWS9XdUg2dEg0MnVXcmNXdmR3VjFmVHZwYjc1dz09IiwicyI6IjEifQ==", "maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "e0f2cf55-2172-47e3-a353-edafc857445d", "record_id": "flaws_cloudtrail:0000447:e0f2cf55-2172-47e3-a353-edafc857445d", "row_index": 447, "timestamp": "2019-03-01T05:33:46Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "254.254.89.255", "user_agent": "aws-cli/1.16.114 Python/3.6.7 Linux/4.15.0-45-generic botocore/1.12.104", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 1083, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "e0f2cf55-2172-47e3-a353-edafc857445d", "eventTime": "2019-03-01T05:33:46Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "254.254.89.255", "userAgent": "aws-cli/1.16.114 Python/3.6.7 Linux/4.15.0-45-generic botocore/1.12.104", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"nextToken": "eyJ2IjoiMiIsImMiOiJ6YWlJQjduOWlrdCtmL2Zqd1oxQTNDOHVsRG1rVG1Ca1dtRTZPNDZvNHVDMUhOdTZhcnJwY1BpU3RyaHVnMWF1bkt3S1VhbzFwQmhGZTltalF3RUZDUC9IeWNEdy9PRTVrbXVtS2pvUkNBcTI2WmpPbW1uQnkwa0k5SkpLaHVZNUQ0MitWS2tRVjBUZWpuMXExVEQwKzUyWVNCYzAvelZua0o2aTkvSk5zL3NFMSszTVZqUTNGc0o1aDdncC9mNklMSXpDZE5TWUJ4OD0iLCJzIjoiMSJ9", "maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "e0f2cf55-2172-47e3-a353-edafc857445d", "record_id": "flaws_cloudtrail:0000448:e0f2cf55-2172-47e3-a353-edafc857445d", "row_index": 448, "timestamp": "2019-03-01T05:33:46Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "254.254.89.255", "user_agent": "aws-cli/1.16.114 Python/3.6.7 Linux/4.15.0-45-generic botocore/1.12.104", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 1083, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "e0f2cf55-2172-47e3-a353-edafc857445d", "eventTime": "2019-03-01T05:33:46Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "254.254.89.255", "userAgent": "aws-cli/1.16.114 Python/3.6.7 Linux/4.15.0-45-generic botocore/1.12.104", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"nextToken": "eyJ2IjoiMiIsImMiOiJ6YWlJQjduOWlrdCtmL2Zqd1oxQTNDOHVsRG1rVG1Ca1dtRTZPNDZvNHVDMUhOdTZhcnJwY1BpU3RyaHVnMWF1bkt3S1VhbzFwQmhGZTltalF3RUZDUC9IeWNEdy9PRTVrbXVtS2pvUkNBcTI2WmpPbW1uQnkwa0k5SkpLaHVZNUQ0MitWS2tRVjBUZWpuMXExVEQwKzUyWVNCYzAvelZua0o2aTkvSk5zL3NFMSszTVZqUTNGc0o1aDdncC9mNklMSXpDZE5TWUJ4OD0iLCJzIjoiMSJ9", "maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "4731a8ce-cf10-4c6b-bd8b-cc6a45801583", "record_id": "flaws_cloudtrail:0000449:4731a8ce-cf10-4c6b-bd8b-cc6a45801583", "row_index": 449, "timestamp": "2019-03-01T05:33:50Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "254.254.89.255", "user_agent": "aws-cli/1.16.114 Python/3.6.7 Linux/4.15.0-45-generic botocore/1.12.104", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 1090, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "4731a8ce-cf10-4c6b-bd8b-cc6a45801583", "eventTime": "2019-03-01T05:33:50Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "254.254.89.255", "userAgent": "aws-cli/1.16.114 Python/3.6.7 Linux/4.15.0-45-generic botocore/1.12.104", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"nextToken": "eyJ2IjoiMiIsImMiOiJJSjVWN0VDWjNlRHZvUkx0SlVjcEFpVHp2K3dYNlZUM25VeHRtNStCN09FVkZiMU1iclc3RGU3VHhvOHo1OFZmSDQwOWdGTEpoc2JpVUNYT2c5MzFQbk8rK1l2cnZmM21jTi80RisrNW1jakhJV2YvMXMvK2owaU5aQTdtN09remZMdHl1cFdzYjJqMjZOM1NGaEZQdVFwTzZvS1ZXQm1VckVYbVlSR3haZkw1OGFKcmFrem5EdnRFR3k5M3U1aTU4ekp0cWNoc0hrSmFPZz09IiwicyI6IjEifQ==", "maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "4731a8ce-cf10-4c6b-bd8b-cc6a45801583", "record_id": "flaws_cloudtrail:0000450:4731a8ce-cf10-4c6b-bd8b-cc6a45801583", "row_index": 450, "timestamp": "2019-03-01T05:33:50Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "254.254.89.255", "user_agent": "aws-cli/1.16.114 Python/3.6.7 Linux/4.15.0-45-generic botocore/1.12.104", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 1090, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "4731a8ce-cf10-4c6b-bd8b-cc6a45801583", "eventTime": "2019-03-01T05:33:50Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "254.254.89.255", "userAgent": "aws-cli/1.16.114 Python/3.6.7 Linux/4.15.0-45-generic botocore/1.12.104", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"nextToken": "eyJ2IjoiMiIsImMiOiJJSjVWN0VDWjNlRHZvUkx0SlVjcEFpVHp2K3dYNlZUM25VeHRtNStCN09FVkZiMU1iclc3RGU3VHhvOHo1OFZmSDQwOWdGTEpoc2JpVUNYT2c5MzFQbk8rK1l2cnZmM21jTi80RisrNW1jakhJV2YvMXMvK2owaU5aQTdtN09remZMdHl1cFdzYjJqMjZOM1NGaEZQdVFwTzZvS1ZXQm1VckVYbVlSR3haZkw1OGFKcmFrem5EdnRFR3k5M3U1aTU4ekp0cWNoc0hrSmFPZz09IiwicyI6IjEifQ==", "maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "fbacae5d-09f0-4bf2-9167-c788a22123fa", "record_id": "flaws_cloudtrail:0000451:fbacae5d-09f0-4bf2-9167-c788a22123fa", "row_index": 451, "timestamp": "2019-03-01T05:33:53Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "254.254.89.255", "user_agent": "aws-cli/1.16.114 Python/3.6.7 Linux/4.15.0-45-generic botocore/1.12.104", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 1090, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "fbacae5d-09f0-4bf2-9167-c788a22123fa", "eventTime": "2019-03-01T05:33:53Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "254.254.89.255", "userAgent": "aws-cli/1.16.114 Python/3.6.7 Linux/4.15.0-45-generic botocore/1.12.104", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"nextToken": "eyJ2IjoiMiIsImMiOiJQc1BvR2dQYmRlOTZWMkZHbFZrRWVYVmcyYjg3UFZveHJtRnRCSFNmbHNyMVhrYVJSVCtLTkdpY0R1Um5TQnJxREpXalkwd0ZUY2NNM2hTQ0c3ZHdYajdQdWduaXJuNGVCSjYrOSt6SDhaRmRMTnVqVmZZalRPYUdWa1FVb2c3WGF5ZmRTTlVHcEwyN1hFUGlXQXJ6SmdTL2xWelJnZ05kbnRpaUhVYXZOUG5YVHY1VnRqcnR1dGlDaElYV0d4UFpJWnIycklrYnpYUXdUUT09IiwicyI6IjEifQ==", "maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "fbacae5d-09f0-4bf2-9167-c788a22123fa", "record_id": "flaws_cloudtrail:0000452:fbacae5d-09f0-4bf2-9167-c788a22123fa", "row_index": 452, "timestamp": "2019-03-01T05:33:53Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "254.254.89.255", "user_agent": "aws-cli/1.16.114 Python/3.6.7 Linux/4.15.0-45-generic botocore/1.12.104", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 1090, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "fbacae5d-09f0-4bf2-9167-c788a22123fa", "eventTime": "2019-03-01T05:33:53Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "254.254.89.255", "userAgent": "aws-cli/1.16.114 Python/3.6.7 Linux/4.15.0-45-generic botocore/1.12.104", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"nextToken": "eyJ2IjoiMiIsImMiOiJQc1BvR2dQYmRlOTZWMkZHbFZrRWVYVmcyYjg3UFZveHJtRnRCSFNmbHNyMVhrYVJSVCtLTkdpY0R1Um5TQnJxREpXalkwd0ZUY2NNM2hTQ0c3ZHdYajdQdWduaXJuNGVCSjYrOSt6SDhaRmRMTnVqVmZZalRPYUdWa1FVb2c3WGF5ZmRTTlVHcEwyN1hFUGlXQXJ6SmdTL2xWelJnZ05kbnRpaUhVYXZOUG5YVHY1VnRqcnR1dGlDaElYV0d4UFpJWnIycklrYnpYUXdUUT09IiwicyI6IjEifQ==", "maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "e29531f4-0d10-4ab2-9deb-920c69416bf6", "record_id": "flaws_cloudtrail:0000453:e29531f4-0d10-4ab2-9deb-920c69416bf6", "row_index": 453, "timestamp": "2019-03-01T05:33:56Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "254.254.89.255", "user_agent": "aws-cli/1.16.114 Python/3.6.7 Linux/4.15.0-45-generic botocore/1.12.104", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 1078, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "e29531f4-0d10-4ab2-9deb-920c69416bf6", "eventTime": "2019-03-01T05:33:56Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "254.254.89.255", "userAgent": "aws-cli/1.16.114 Python/3.6.7 Linux/4.15.0-45-generic botocore/1.12.104", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"nextToken": "eyJ2IjoiMiIsImMiOiI2RGdPYWJSbTVPc1I2ZlJHWmlkTnZWenRoVU8rbHpXVENYaWg2bTU1SVBsWWJ0MGlCK2ZhWjE0NU9IYU0vWnpvZzh6cWJMaEJtbEtsMmhmRU9UR211K1lkRDlPZGRYVFlidmxxaU4vNHZlOUdkZG5WbUtrVHZ2S3lNMGt3L0RmdHROODBnRWg4MjhSaWFRaEVHYWZhNjVNRmZVUFp2ZE1uSzNBRjFjMGxlTnhYeE5jU1Z4YWE0QXNSSmxBcGZISSsvc01OZm5seCIsInMiOiIxIn0=", "maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "e29531f4-0d10-4ab2-9deb-920c69416bf6", "record_id": "flaws_cloudtrail:0000454:e29531f4-0d10-4ab2-9deb-920c69416bf6", "row_index": 454, "timestamp": "2019-03-01T05:33:56Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "254.254.89.255", "user_agent": "aws-cli/1.16.114 Python/3.6.7 Linux/4.15.0-45-generic botocore/1.12.104", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 1078, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "e29531f4-0d10-4ab2-9deb-920c69416bf6", "eventTime": "2019-03-01T05:33:56Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "254.254.89.255", "userAgent": "aws-cli/1.16.114 Python/3.6.7 Linux/4.15.0-45-generic botocore/1.12.104", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"nextToken": "eyJ2IjoiMiIsImMiOiI2RGdPYWJSbTVPc1I2ZlJHWmlkTnZWenRoVU8rbHpXVENYaWg2bTU1SVBsWWJ0MGlCK2ZhWjE0NU9IYU0vWnpvZzh6cWJMaEJtbEtsMmhmRU9UR211K1lkRDlPZGRYVFlidmxxaU4vNHZlOUdkZG5WbUtrVHZ2S3lNMGt3L0RmdHROODBnRWg4MjhSaWFRaEVHYWZhNjVNRmZVUFp2ZE1uSzNBRjFjMGxlTnhYeE5jU1Z4YWE0QXNSSmxBcGZISSsvc01OZm5seCIsInMiOiIxIn0=", "maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "d888189ae-b2ab-4f4d-ae96-d44d15bc043d", "record_id": "flaws_cloudtrail:0000455:d888189ae-b2ab-4f4d-ae96-d44d15bc043d", "row_index": 455, "timestamp": "2019-03-01T05:33:59Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "254.254.89.255", "user_agent": "aws-cli/1.16.114 Python/3.6.7 Linux/4.15.0-45-generic botocore/1.12.104", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 1079, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "d888189ae-b2ab-4f4d-ae96-d44d15bc043d", "eventTime": "2019-03-01T05:33:59Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "254.254.89.255", "userAgent": "aws-cli/1.16.114 Python/3.6.7 Linux/4.15.0-45-generic botocore/1.12.104", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"nextToken": "eyJ2IjoiMiIsImMiOiIyNHBOVC9LbW5Xa0ZuUE5MVkVyQkw5aGQzZDRNY3Z0R295NEIxNjFYOStQOW1oZkhVWWtzMmhIbkN0UFpWMUd1Znk1WHBtLzZRWDdlU2NTUDNqalM3eUJ4YWE1K2ZKNFJFM0R2bG05U2J3WTkwakw5Q21SVCtiS1VVeHQ1aXlYWnVmblZqZXR0M0M2VWRaZWVmRXZGaXA1UllIcEZNcktxT1dJaCtlTzc3SnFYSkw3UEwybDM0eTA0TlB2V3FOaXNFYjdHOE1pNiIsInMiOiIxIn0=", "maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "d888189ae-b2ab-4f4d-ae96-d44d15bc043d", "record_id": "flaws_cloudtrail:0000456:d888189ae-b2ab-4f4d-ae96-d44d15bc043d", "row_index": 456, "timestamp": "2019-03-01T05:33:59Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "254.254.89.255", "user_agent": "aws-cli/1.16.114 Python/3.6.7 Linux/4.15.0-45-generic botocore/1.12.104", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 1079, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "d888189ae-b2ab-4f4d-ae96-d44d15bc043d", "eventTime": "2019-03-01T05:33:59Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "254.254.89.255", "userAgent": "aws-cli/1.16.114 Python/3.6.7 Linux/4.15.0-45-generic botocore/1.12.104", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"nextToken": "eyJ2IjoiMiIsImMiOiIyNHBOVC9LbW5Xa0ZuUE5MVkVyQkw5aGQzZDRNY3Z0R295NEIxNjFYOStQOW1oZkhVWWtzMmhIbkN0UFpWMUd1Znk1WHBtLzZRWDdlU2NTUDNqalM3eUJ4YWE1K2ZKNFJFM0R2bG05U2J3WTkwakw5Q21SVCtiS1VVeHQ1aXlYWnVmblZqZXR0M0M2VWRaZWVmRXZGaXA1UllIcEZNcktxT1dJaCtlTzc3SnFYSkw3UEwybDM0eTA0TlB2V3FOaXNFYjdHOE1pNiIsInMiOiIxIn0=", "maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "af7f9a96-3c3f-44e2-9d3a-f17bab051c74", "record_id": "flaws_cloudtrail:0000457:af7f9a96-3c3f-44e2-9d3a-f17bab051c74", "row_index": 457, "timestamp": "2019-03-01T05:34:08Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "254.254.89.255", "user_agent": "aws-cli/1.16.114 Python/3.6.7 Linux/4.15.0-45-generic botocore/1.12.104", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 763, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "af7f9a96-3c3f-44e2-9d3a-f17bab051c74", "eventTime": "2019-03-01T05:34:08Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "254.254.89.255", "userAgent": "aws-cli/1.16.114 Python/3.6.7 Linux/4.15.0-45-generic botocore/1.12.104", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "af7f9a96-3c3f-44e2-9d3a-f17bab051c74", "record_id": "flaws_cloudtrail:0000458:af7f9a96-3c3f-44e2-9d3a-f17bab051c74", "row_index": 458, "timestamp": "2019-03-01T05:34:08Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "254.254.89.255", "user_agent": "aws-cli/1.16.114 Python/3.6.7 Linux/4.15.0-45-generic botocore/1.12.104", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 763, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "af7f9a96-3c3f-44e2-9d3a-f17bab051c74", "eventTime": "2019-03-01T05:34:08Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "254.254.89.255", "userAgent": "aws-cli/1.16.114 Python/3.6.7 Linux/4.15.0-45-generic botocore/1.12.104", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "58e887c3-c6c7-47c9-8932-73d648135a59", "record_id": "flaws_cloudtrail:0000459:58e887c3-c6c7-47c9-8932-73d648135a59", "row_index": 459, "timestamp": "2019-03-01T05:34:16Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "254.254.89.255", "user_agent": "aws-cli/1.16.114 Python/3.6.7 Linux/4.15.0-45-generic botocore/1.12.104", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 761, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "58e887c3-c6c7-47c9-8932-73d648135a59", "eventTime": "2019-03-01T05:34:16Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "254.254.89.255", "userAgent": "aws-cli/1.16.114 Python/3.6.7 Linux/4.15.0-45-generic botocore/1.12.104", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "58e887c3-c6c7-47c9-8932-73d648135a59", "record_id": "flaws_cloudtrail:0000460:58e887c3-c6c7-47c9-8932-73d648135a59", "row_index": 460, "timestamp": "2019-03-01T05:34:16Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "254.254.89.255", "user_agent": "aws-cli/1.16.114 Python/3.6.7 Linux/4.15.0-45-generic botocore/1.12.104", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 761, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "58e887c3-c6c7-47c9-8932-73d648135a59", "eventTime": "2019-03-01T05:34:16Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "254.254.89.255", "userAgent": "aws-cli/1.16.114 Python/3.6.7 Linux/4.15.0-45-generic botocore/1.12.104", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "bf4f97dd-ee5b-480b-8b79-53f3ce3ab75e", "record_id": "flaws_cloudtrail:0000461:bf4f97dd-ee5b-480b-8b79-53f3ce3ab75e", "row_index": 461, "timestamp": "2019-03-01T05:34:21Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "254.254.89.255", "user_agent": "aws-cli/1.16.114 Python/3.6.7 Linux/4.15.0-45-generic botocore/1.12.104", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 1082, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "bf4f97dd-ee5b-480b-8b79-53f3ce3ab75e", "eventTime": "2019-03-01T05:34:21Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "254.254.89.255", "userAgent": "aws-cli/1.16.114 Python/3.6.7 Linux/4.15.0-45-generic botocore/1.12.104", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"nextToken": "eyJ2IjoiMiIsImMiOiJ0UUFWUVE4SnhGSWR5eklZYVl5akdmU3NJV2t4TkZNVjBvcTFIMjdMdTExLzFwQm8zN080cFFYZDlRd2xBRVBCci90bS9YSTNYWlVqd2psc2drQ1VWN2ZZUEFOSW9rdWdmZUVXQ2Ird0tEQ25RZHpHazV3SlJwaStmV3BzVjhVRmRTSldkMXpSemFwYU5GTDBxVTBnU0ZxZDhMRHhnNzcwd2trd0xvbTRUMmh6VWRRUWM2N2ZSNHFoeHdlRTRidnFyaDMxWjZEbG1sRT0iLCJzIjoiMSJ9", "maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "bf4f97dd-ee5b-480b-8b79-53f3ce3ab75e", "record_id": "flaws_cloudtrail:0000462:bf4f97dd-ee5b-480b-8b79-53f3ce3ab75e", "row_index": 462, "timestamp": "2019-03-01T05:34:21Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "254.254.89.255", "user_agent": "aws-cli/1.16.114 Python/3.6.7 Linux/4.15.0-45-generic botocore/1.12.104", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 1082, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "bf4f97dd-ee5b-480b-8b79-53f3ce3ab75e", "eventTime": "2019-03-01T05:34:21Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "254.254.89.255", "userAgent": "aws-cli/1.16.114 Python/3.6.7 Linux/4.15.0-45-generic botocore/1.12.104", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"nextToken": "eyJ2IjoiMiIsImMiOiJ0UUFWUVE4SnhGSWR5eklZYVl5akdmU3NJV2t4TkZNVjBvcTFIMjdMdTExLzFwQm8zN080cFFYZDlRd2xBRVBCci90bS9YSTNYWlVqd2psc2drQ1VWN2ZZUEFOSW9rdWdmZUVXQ2Ird0tEQ25RZHpHazV3SlJwaStmV3BzVjhVRmRTSldkMXpSemFwYU5GTDBxVTBnU0ZxZDhMRHhnNzcwd2trd0xvbTRUMmh6VWRRUWM2N2ZSNHFoeHdlRTRidnFyaDMxWjZEbG1sRT0iLCJzIjoiMSJ9", "maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "b17e4d29-2c82-4054-9349-d2552abb0b61", "record_id": "flaws_cloudtrail:0000463:b17e4d29-2c82-4054-9349-d2552abb0b61", "row_index": 463, "timestamp": "2019-03-01T05:34:25Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "254.254.89.255", "user_agent": "aws-cli/1.16.114 Python/3.6.7 Linux/4.15.0-45-generic botocore/1.12.104", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 1087, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "b17e4d29-2c82-4054-9349-d2552abb0b61", "eventTime": "2019-03-01T05:34:25Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "254.254.89.255", "userAgent": "aws-cli/1.16.114 Python/3.6.7 Linux/4.15.0-45-generic botocore/1.12.104", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"nextToken": "eyJ2IjoiMiIsImMiOiJRZ1hpSFFHbElheG9hWUJGWDdvOS9BaHdpd1UwaUVYMEJUUStGckZWdG41aldLajlZN3VsTmx2R3kxalNnSnhhK0FBTndrQkk3aytyU1ZCT0N3S1RhbGU1Y1JrU2MySm80bThYdFpNNnZ4aEwrVFM1dHRQTFloUEtkRGdIYmtsZDlkeGtZWE1WVlRWUG9UQWxNV0FweTNTaDR5c05lS21TNEFUT3ZBRGk4bkd0bnd0SlQwckNYaldiL2lZN1hVa1VYYkYxT001VE5OS1JCQT09IiwicyI6IjEifQ==", "maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "b17e4d29-2c82-4054-9349-d2552abb0b61", "record_id": "flaws_cloudtrail:0000464:b17e4d29-2c82-4054-9349-d2552abb0b61", "row_index": 464, "timestamp": "2019-03-01T05:34:25Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "254.254.89.255", "user_agent": "aws-cli/1.16.114 Python/3.6.7 Linux/4.15.0-45-generic botocore/1.12.104", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 1087, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "b17e4d29-2c82-4054-9349-d2552abb0b61", "eventTime": "2019-03-01T05:34:25Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "254.254.89.255", "userAgent": "aws-cli/1.16.114 Python/3.6.7 Linux/4.15.0-45-generic botocore/1.12.104", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"nextToken": "eyJ2IjoiMiIsImMiOiJRZ1hpSFFHbElheG9hWUJGWDdvOS9BaHdpd1UwaUVYMEJUUStGckZWdG41aldLajlZN3VsTmx2R3kxalNnSnhhK0FBTndrQkk3aytyU1ZCT0N3S1RhbGU1Y1JrU2MySm80bThYdFpNNnZ4aEwrVFM1dHRQTFloUEtkRGdIYmtsZDlkeGtZWE1WVlRWUG9UQWxNV0FweTNTaDR5c05lS21TNEFUT3ZBRGk4bkd0bnd0SlQwckNYaldiL2lZN1hVa1VYYkYxT001VE5OS1JCQT09IiwicyI6IjEifQ==", "maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "7459f044-1355-459c-a078-c0ee5428a36c", "record_id": "flaws_cloudtrail:0000465:7459f044-1355-459c-a078-c0ee5428a36c", "row_index": 465, "timestamp": "2019-03-01T05:34:28Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "254.254.89.255", "user_agent": "aws-cli/1.16.114 Python/3.6.7 Linux/4.15.0-45-generic botocore/1.12.104", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 1082, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "7459f044-1355-459c-a078-c0ee5428a36c", "eventTime": "2019-03-01T05:34:28Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "254.254.89.255", "userAgent": "aws-cli/1.16.114 Python/3.6.7 Linux/4.15.0-45-generic botocore/1.12.104", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"nextToken": "eyJ2IjoiMiIsImMiOiIrVENwRytzd0lGdHAvM1pXTEFlMVQ3YTE4YUZTSUx4Q1haM0VsWUJJcGkyMzdxTVV2RGFPTFhoQm9kbHhIOWZYVE92RWwvRldiMCtVVWR2U2E0aEtLU25wQldMcXFvV2VuWmZBc3l4OEFPUWFtakovaDJvTlY4dS9qRVltaEJ1OVRoYXd3TFNYU3VPRkxicEdBWUFnNEJnYU1FeWJ4enA2dXpBQWd6RHVERnZ5NXR2bHdJdVZPVDNha2Eza09DNHRPMmZXSEJkSFR3PT0iLCJzIjoiMSJ9", "maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "7459f044-1355-459c-a078-c0ee5428a36c", "record_id": "flaws_cloudtrail:0000466:7459f044-1355-459c-a078-c0ee5428a36c", "row_index": 466, "timestamp": "2019-03-01T05:34:28Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "254.254.89.255", "user_agent": "aws-cli/1.16.114 Python/3.6.7 Linux/4.15.0-45-generic botocore/1.12.104", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 1082, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "7459f044-1355-459c-a078-c0ee5428a36c", "eventTime": "2019-03-01T05:34:28Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "254.254.89.255", "userAgent": "aws-cli/1.16.114 Python/3.6.7 Linux/4.15.0-45-generic botocore/1.12.104", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"nextToken": "eyJ2IjoiMiIsImMiOiIrVENwRytzd0lGdHAvM1pXTEFlMVQ3YTE4YUZTSUx4Q1haM0VsWUJJcGkyMzdxTVV2RGFPTFhoQm9kbHhIOWZYVE92RWwvRldiMCtVVWR2U2E0aEtLU25wQldMcXFvV2VuWmZBc3l4OEFPUWFtakovaDJvTlY4dS9qRVltaEJ1OVRoYXd3TFNYU3VPRkxicEdBWUFnNEJnYU1FeWJ4enA2dXpBQWd6RHVERnZ5NXR2bHdJdVZPVDNha2Eza09DNHRPMmZXSEJkSFR3PT0iLCJzIjoiMSJ9", "maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "83d5a70a-6eba-4e5d-9850-9fc89d9bd4a5", "record_id": "flaws_cloudtrail:0000467:83d5a70a-6eba-4e5d-9850-9fc89d9bd4a5", "row_index": 467, "timestamp": "2019-03-01T05:34:29Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "254.254.89.255", "user_agent": "aws-cli/1.16.114 Python/3.6.7 Linux/4.15.0-45-generic botocore/1.12.104", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 1078, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "83d5a70a-6eba-4e5d-9850-9fc89d9bd4a5", "eventTime": "2019-03-01T05:34:29Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "254.254.89.255", "userAgent": "aws-cli/1.16.114 Python/3.6.7 Linux/4.15.0-45-generic botocore/1.12.104", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"nextToken": "eyJ2IjoiMiIsImMiOiI3OVRoYkZUV3ByL2kzNmhHQ1graWdZaU16d1lVTmhYU1hpZW1hT2RzTm5NdmpDamtMZlpIM1FQbjhDendSbC9COE80TTFsRkpJb0lqV0RNR2ZiMTJBR2dJSmJQdUtZS3cyY0V5aVJDdU9scWtaMmNRZVdUWG8yWWt4WWh2bHlxdVI0aUFRd05NdHFTc2tQZkQ1UFJIMFNxcHZjOG9SNXF2bFpVN1JETEVuTXVTL1V4aDVyL0FSMVVRd3hibjRLcHluSE01dXhnPSIsInMiOiIxIn0=", "maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "83d5a70a-6eba-4e5d-9850-9fc89d9bd4a5", "record_id": "flaws_cloudtrail:0000468:83d5a70a-6eba-4e5d-9850-9fc89d9bd4a5", "row_index": 468, "timestamp": "2019-03-01T05:34:29Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "254.254.89.255", "user_agent": "aws-cli/1.16.114 Python/3.6.7 Linux/4.15.0-45-generic botocore/1.12.104", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 1078, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "83d5a70a-6eba-4e5d-9850-9fc89d9bd4a5", "eventTime": "2019-03-01T05:34:29Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "254.254.89.255", "userAgent": "aws-cli/1.16.114 Python/3.6.7 Linux/4.15.0-45-generic botocore/1.12.104", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"nextToken": "eyJ2IjoiMiIsImMiOiI3OVRoYkZUV3ByL2kzNmhHQ1graWdZaU16d1lVTmhYU1hpZW1hT2RzTm5NdmpDamtMZlpIM1FQbjhDendSbC9COE80TTFsRkpJb0lqV0RNR2ZiMTJBR2dJSmJQdUtZS3cyY0V5aVJDdU9scWtaMmNRZVdUWG8yWWt4WWh2bHlxdVI0aUFRd05NdHFTc2tQZkQ1UFJIMFNxcHZjOG9SNXF2bFpVN1JETEVuTXVTL1V4aDVyL0FSMVVRd3hibjRLcHluSE01dXhnPSIsInMiOiIxIn0=", "maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "fa8ced6e-9cf3-4434-a4ce-50c1c1569487", "record_id": "flaws_cloudtrail:0000469:fa8ced6e-9cf3-4434-a4ce-50c1c1569487", "row_index": 469, "timestamp": "2019-03-01T05:34:30Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "254.254.89.255", "user_agent": "aws-cli/1.16.114 Python/3.6.7 Linux/4.15.0-45-generic botocore/1.12.104", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 1090, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "fa8ced6e-9cf3-4434-a4ce-50c1c1569487", "eventTime": "2019-03-01T05:34:30Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "254.254.89.255", "userAgent": "aws-cli/1.16.114 Python/3.6.7 Linux/4.15.0-45-generic botocore/1.12.104", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"nextToken": "eyJ2IjoiMiIsImMiOiJXWkcwRzlyZ2ZDS0FxcnY4ZUlOQ0Q0RWwybUZucjFuNVdvMlo0WEl6MDYwb0dNRVRlYnhiSTUvbmRaNTFzdjJkZGpsMVF0cFh4ekpDR2dleVpVSGxtRVNVN2hETndMZ3YrZmYySURyMXdlQStWUm42d09SZVlGT3FWd1dQY1daVFRrWFNQYW9oRGhPc3JlcW92aHNzMW0rTjltcXV4dFAzb2tVZkhERFdRMHB5bGlFcEp1RFpiT25FbGhVaUZWNWN3c2VrdzVNT25tc2hRUT09IiwicyI6IjEifQ==", "maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "fa8ced6e-9cf3-4434-a4ce-50c1c1569487", "record_id": "flaws_cloudtrail:0000470:fa8ced6e-9cf3-4434-a4ce-50c1c1569487", "row_index": 470, "timestamp": "2019-03-01T05:34:30Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "254.254.89.255", "user_agent": "aws-cli/1.16.114 Python/3.6.7 Linux/4.15.0-45-generic botocore/1.12.104", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 1090, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "fa8ced6e-9cf3-4434-a4ce-50c1c1569487", "eventTime": "2019-03-01T05:34:30Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "254.254.89.255", "userAgent": "aws-cli/1.16.114 Python/3.6.7 Linux/4.15.0-45-generic botocore/1.12.104", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"nextToken": "eyJ2IjoiMiIsImMiOiJXWkcwRzlyZ2ZDS0FxcnY4ZUlOQ0Q0RWwybUZucjFuNVdvMlo0WEl6MDYwb0dNRVRlYnhiSTUvbmRaNTFzdjJkZGpsMVF0cFh4ekpDR2dleVpVSGxtRVNVN2hETndMZ3YrZmYySURyMXdlQStWUm42d09SZVlGT3FWd1dQY1daVFRrWFNQYW9oRGhPc3JlcW92aHNzMW0rTjltcXV4dFAzb2tVZkhERFdRMHB5bGlFcEp1RFpiT25FbGhVaUZWNWN3c2VrdzVNT25tc2hRUT09IiwicyI6IjEifQ==", "maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "63b493e1-d52e-42f2-9001-b7cecd2612c3", "record_id": "flaws_cloudtrail:0000471:63b493e1-d52e-42f2-9001-b7cecd2612c3", "row_index": 471, "timestamp": "2019-03-01T05:34:32Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "254.254.89.255", "user_agent": "aws-cli/1.16.114 Python/3.6.7 Linux/4.15.0-45-generic botocore/1.12.104", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 1083, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "63b493e1-d52e-42f2-9001-b7cecd2612c3", "eventTime": "2019-03-01T05:34:32Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "254.254.89.255", "userAgent": "aws-cli/1.16.114 Python/3.6.7 Linux/4.15.0-45-generic botocore/1.12.104", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"nextToken": "eyJ2IjoiMiIsImMiOiJYVzRQNm83TlVyTFplOTJ3aGV4YVlUZkZnWnRyclpMaEUrKzBoWkNyREg4eWlERDVKZWRKeTd5bmVTd0tnTXE2cWkzOXhGMTMxYzBybWpocGdjdnZjS2hOZ2V0c2V5MmhJQWhoN3luU2I4cktKNjRrc1U3OVlKbjQ2eWxtWGVLMUdkMStadks5Nmx2UDdDR0Zrd0c3WmJsdVJ3ZHhJU2ZEYWhLbTFmUzVqcUNYcm11R0Q0YWc1aDM3dzJUWENnS0Z2MnRxU2ZCUHArST0iLCJzIjoiMSJ9", "maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "63b493e1-d52e-42f2-9001-b7cecd2612c3", "record_id": "flaws_cloudtrail:0000472:63b493e1-d52e-42f2-9001-b7cecd2612c3", "row_index": 472, "timestamp": "2019-03-01T05:34:32Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "254.254.89.255", "user_agent": "aws-cli/1.16.114 Python/3.6.7 Linux/4.15.0-45-generic botocore/1.12.104", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 1083, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "63b493e1-d52e-42f2-9001-b7cecd2612c3", "eventTime": "2019-03-01T05:34:32Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "254.254.89.255", "userAgent": "aws-cli/1.16.114 Python/3.6.7 Linux/4.15.0-45-generic botocore/1.12.104", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"nextToken": "eyJ2IjoiMiIsImMiOiJYVzRQNm83TlVyTFplOTJ3aGV4YVlUZkZnWnRyclpMaEUrKzBoWkNyREg4eWlERDVKZWRKeTd5bmVTd0tnTXE2cWkzOXhGMTMxYzBybWpocGdjdnZjS2hOZ2V0c2V5MmhJQWhoN3luU2I4cktKNjRrc1U3OVlKbjQ2eWxtWGVLMUdkMStadks5Nmx2UDdDR0Zrd0c3WmJsdVJ3ZHhJU2ZEYWhLbTFmUzVqcUNYcm11R0Q0YWc1aDM3dzJUWENnS0Z2MnRxU2ZCUHArST0iLCJzIjoiMSJ9", "maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "2d8d6fd4-a747-4b28-ad59-4a694b68f1a2", "record_id": "flaws_cloudtrail:0000473:2d8d6fd4-a747-4b28-ad59-4a694b68f1a2", "row_index": 473, "timestamp": "2019-03-01T05:34:33Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "254.254.89.255", "user_agent": "aws-cli/1.16.114 Python/3.6.7 Linux/4.15.0-45-generic botocore/1.12.104", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 1090, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "2d8d6fd4-a747-4b28-ad59-4a694b68f1a2", "eventTime": "2019-03-01T05:34:33Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "254.254.89.255", "userAgent": "aws-cli/1.16.114 Python/3.6.7 Linux/4.15.0-45-generic botocore/1.12.104", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"nextToken": "eyJ2IjoiMiIsImMiOiIzYUtyUlRZUmdjYmx4emNtZWkzZnVHYUw3aWc5MU9YdHZ4RkdYSDcyS0tSZ2ZOd1c1cVNIeUhKbTZXeExTYjl0VEN4R1BtZmlNRUFnTDl1Q1NEeE9Qbm9oNURKRjl6V0JKSVZuWWRWdWVzN0tGTlY4aVh3ZU5ETXRGT0N1VHc5bEYyTERzTWp2dzUxUmhnVTJROWVQWlpTbEV3ekQwSmJ2SXZnRkdTZnFBOTdONGIzeVEyYzFRdE1pakpJUy84VjFMNENnNEM4L3A3VjJmQT09IiwicyI6IjEifQ==", "maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "2d8d6fd4-a747-4b28-ad59-4a694b68f1a2", "record_id": "flaws_cloudtrail:0000474:2d8d6fd4-a747-4b28-ad59-4a694b68f1a2", "row_index": 474, "timestamp": "2019-03-01T05:34:33Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "254.254.89.255", "user_agent": "aws-cli/1.16.114 Python/3.6.7 Linux/4.15.0-45-generic botocore/1.12.104", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 1090, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "2d8d6fd4-a747-4b28-ad59-4a694b68f1a2", "eventTime": "2019-03-01T05:34:33Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "254.254.89.255", "userAgent": "aws-cli/1.16.114 Python/3.6.7 Linux/4.15.0-45-generic botocore/1.12.104", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"nextToken": "eyJ2IjoiMiIsImMiOiIzYUtyUlRZUmdjYmx4emNtZWkzZnVHYUw3aWc5MU9YdHZ4RkdYSDcyS0tSZ2ZOd1c1cVNIeUhKbTZXeExTYjl0VEN4R1BtZmlNRUFnTDl1Q1NEeE9Qbm9oNURKRjl6V0JKSVZuWWRWdWVzN0tGTlY4aVh3ZU5ETXRGT0N1VHc5bEYyTERzTWp2dzUxUmhnVTJROWVQWlpTbEV3ekQwSmJ2SXZnRkdTZnFBOTdONGIzeVEyYzFRdE1pakpJUy84VjFMNENnNEM4L3A3VjJmQT09IiwicyI6IjEifQ==", "maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "390c38a2-bf2b-4bc3-956c-057998ea1835", "record_id": "flaws_cloudtrail:0000475:390c38a2-bf2b-4bc3-956c-057998ea1835", "row_index": 475, "timestamp": "2019-03-01T05:34:34Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "254.254.89.255", "user_agent": "aws-cli/1.16.114 Python/3.6.7 Linux/4.15.0-45-generic botocore/1.12.104", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 1090, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "390c38a2-bf2b-4bc3-956c-057998ea1835", "eventTime": "2019-03-01T05:34:34Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "254.254.89.255", "userAgent": "aws-cli/1.16.114 Python/3.6.7 Linux/4.15.0-45-generic botocore/1.12.104", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"nextToken": "eyJ2IjoiMiIsImMiOiI3ZHRSQVF6RHl5S1F1ZFVneTgvN0hGOG92RytxUmJUbWZ4aUpwUm4wNUZLSjFiYjVDaStCYk8ycDBPRjdMTDRjWWIwTE80V0tvRUJoNjBCcHkwTVhTM0E0M1hmUEtRWHB1YTNYZmk2MlEyUjhUQ1dkRUhBNGxOZzF1N0xnWFdyUXdCVkVmcXpxQXN4eVR5MkRwRndWV1AxNHo3RVdBcG5IZ2ZLQlFrNXA3ekVLd2FZTlRvVEo1OHVjWDFvclRrME5vUUxiQlhyYjVFS3VCUT09IiwicyI6IjEifQ==", "maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "390c38a2-bf2b-4bc3-956c-057998ea1835", "record_id": "flaws_cloudtrail:0000476:390c38a2-bf2b-4bc3-956c-057998ea1835", "row_index": 476, "timestamp": "2019-03-01T05:34:34Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "254.254.89.255", "user_agent": "aws-cli/1.16.114 Python/3.6.7 Linux/4.15.0-45-generic botocore/1.12.104", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 1090, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "390c38a2-bf2b-4bc3-956c-057998ea1835", "eventTime": "2019-03-01T05:34:34Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "254.254.89.255", "userAgent": "aws-cli/1.16.114 Python/3.6.7 Linux/4.15.0-45-generic botocore/1.12.104", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"nextToken": "eyJ2IjoiMiIsImMiOiI3ZHRSQVF6RHl5S1F1ZFVneTgvN0hGOG92RytxUmJUbWZ4aUpwUm4wNUZLSjFiYjVDaStCYk8ycDBPRjdMTDRjWWIwTE80V0tvRUJoNjBCcHkwTVhTM0E0M1hmUEtRWHB1YTNYZmk2MlEyUjhUQ1dkRUhBNGxOZzF1N0xnWFdyUXdCVkVmcXpxQXN4eVR5MkRwRndWV1AxNHo3RVdBcG5IZ2ZLQlFrNXA3ekVLd2FZTlRvVEo1OHVjWDFvclRrME5vUUxiQlhyYjVFS3VCUT09IiwicyI6IjEifQ==", "maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "3a2c8eba-3e3e-49fd-aea0-d0d563f405220", "record_id": "flaws_cloudtrail:0000477:3a2c8eba-3e3e-49fd-aea0-d0d563f405220", "row_index": 477, "timestamp": "2019-03-01T05:34:35Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "254.254.89.255", "user_agent": "aws-cli/1.16.114 Python/3.6.7 Linux/4.15.0-45-generic botocore/1.12.104", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 1091, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "3a2c8eba-3e3e-49fd-aea0-d0d563f405220", "eventTime": "2019-03-01T05:34:35Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "254.254.89.255", "userAgent": "aws-cli/1.16.114 Python/3.6.7 Linux/4.15.0-45-generic botocore/1.12.104", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"nextToken": "eyJ2IjoiMiIsImMiOiJ0T2hkOFFMNkYyTVZFRVFCN3M0R08xTmRQZzdwcFF2bnQ2Q2RLT2NNcXBWaEVsQUZwUk5jOWF4YjRmY01CK0NFZlRHUm1TejJNZWQySGdjT1ZJTitrTjB2SE5tcmhXRjMvSjhlNTlFYzRFNnZvYzRDWjhpY2djYThxeWQ2aFBDQlJzdGZxSVBpVlM1elh6TW1WbVlOS2xwZzlBQUdySEE3UE5Vd1ZodFk3NFNWM0lqU01zQXg2KzRPRGRmZnpPWG9kOTA0b0p0anhrajlkZz09IiwicyI6IjEifQ==", "maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "3a2c8eba-3e3e-49fd-aea0-d0d563f405220", "record_id": "flaws_cloudtrail:0000478:3a2c8eba-3e3e-49fd-aea0-d0d563f405220", "row_index": 478, "timestamp": "2019-03-01T05:34:35Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "254.254.89.255", "user_agent": "aws-cli/1.16.114 Python/3.6.7 Linux/4.15.0-45-generic botocore/1.12.104", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 1091, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "3a2c8eba-3e3e-49fd-aea0-d0d563f405220", "eventTime": "2019-03-01T05:34:35Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "254.254.89.255", "userAgent": "aws-cli/1.16.114 Python/3.6.7 Linux/4.15.0-45-generic botocore/1.12.104", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"nextToken": "eyJ2IjoiMiIsImMiOiJ0T2hkOFFMNkYyTVZFRVFCN3M0R08xTmRQZzdwcFF2bnQ2Q2RLT2NNcXBWaEVsQUZwUk5jOWF4YjRmY01CK0NFZlRHUm1TejJNZWQySGdjT1ZJTitrTjB2SE5tcmhXRjMvSjhlNTlFYzRFNnZvYzRDWjhpY2djYThxeWQ2aFBDQlJzdGZxSVBpVlM1elh6TW1WbVlOS2xwZzlBQUdySEE3UE5Vd1ZodFk3NFNWM0lqU01zQXg2KzRPRGRmZnpPWG9kOTA0b0p0anhrajlkZz09IiwicyI6IjEifQ==", "maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "366e9320-04e2-4fe8-ba65-068193a616669", "record_id": "flaws_cloudtrail:0000479:366e9320-04e2-4fe8-ba65-068193a616669", "row_index": 479, "timestamp": "2019-03-01T05:34:36Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "254.254.89.255", "user_agent": "aws-cli/1.16.114 Python/3.6.7 Linux/4.15.0-45-generic botocore/1.12.104", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 1090, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "366e9320-04e2-4fe8-ba65-068193a616669", "eventTime": "2019-03-01T05:34:36Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "254.254.89.255", "userAgent": "aws-cli/1.16.114 Python/3.6.7 Linux/4.15.0-45-generic botocore/1.12.104", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"nextToken": "eyJ2IjoiMiIsImMiOiI1a2ZmL3JDMHVyQURMdkQ5b29PQTFSTGE5Q3RRSkFPQmlocTVkTHl0Tkx3dkRoZzhzNjVSNkJJdFpFQ1R1YlVRTnVYcGVkUmpSV1hST2Z0UklleWRwbi9MRzlrc3JlT054QUxTeVRDTHNRYmkrQTJuMld4NDloMzdiZUhKUEpGR0I0Mk1ma1hZU29ORjZWdWtDMUlBRkFnZlQ5ZWpVVXgzd2VydXY1V3J2VEZURWFodERzV0FNR0laN3FWcXkyQTcrTjJodWliejhqZVo4dz09IiwicyI6IjEifQ==", "maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "366e9320-04e2-4fe8-ba65-068193a616669", "record_id": "flaws_cloudtrail:0000480:366e9320-04e2-4fe8-ba65-068193a616669", "row_index": 480, "timestamp": "2019-03-01T05:34:36Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "254.254.89.255", "user_agent": "aws-cli/1.16.114 Python/3.6.7 Linux/4.15.0-45-generic botocore/1.12.104", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 1090, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "366e9320-04e2-4fe8-ba65-068193a616669", "eventTime": "2019-03-01T05:34:36Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "254.254.89.255", "userAgent": "aws-cli/1.16.114 Python/3.6.7 Linux/4.15.0-45-generic botocore/1.12.104", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"nextToken": "eyJ2IjoiMiIsImMiOiI1a2ZmL3JDMHVyQURMdkQ5b29PQTFSTGE5Q3RRSkFPQmlocTVkTHl0Tkx3dkRoZzhzNjVSNkJJdFpFQ1R1YlVRTnVYcGVkUmpSV1hST2Z0UklleWRwbi9MRzlrc3JlT054QUxTeVRDTHNRYmkrQTJuMld4NDloMzdiZUhKUEpGR0I0Mk1ma1hZU29ORjZWdWtDMUlBRkFnZlQ5ZWpVVXgzd2VydXY1V3J2VEZURWFodERzV0FNR0laN3FWcXkyQTcrTjJodWliejhqZVo4dz09IiwicyI6IjEifQ==", "maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "d714ba7a-c3a6-47e8-b86b-1708a28c9cc2", "record_id": "flaws_cloudtrail:0000481:d714ba7a-c3a6-47e8-b86b-1708a28c9cc2", "row_index": 481, "timestamp": "2019-03-01T05:34:39Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "254.254.89.255", "user_agent": "aws-cli/1.16.114 Python/3.6.7 Linux/4.15.0-45-generic botocore/1.12.104", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 1080, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "d714ba7a-c3a6-47e8-b86b-1708a28c9cc2", "eventTime": "2019-03-01T05:34:39Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "254.254.89.255", "userAgent": "aws-cli/1.16.114 Python/3.6.7 Linux/4.15.0-45-generic botocore/1.12.104", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"nextToken": "eyJ2IjoiMiIsImMiOiJGbHZ2Z1gzNElaZS9BbENjVWt4dzZzcmhLOWVjS0w4RFRVY2oyeW9oVGM1MzVPcE5waUptUUoyZTd0R2RBVjh2ejRqcUZqWVNXdURVYjhoejdVakVxZGhONkhaYmgybWRaSGd4Q29yMnhOWDNxdDZ0T3N6Um1lYUkxOTRiWm1uMWprVTZQajQxNVBJcSt4T1dHdE16Vy9ZUng3Z1Fya3NxUmZLeWFLbEFDTWVMMzNwb0c0QjIzSlVNRDNTOHdlUE5QRGNsMnJld0pnPT0iLCJzIjoiMSJ9", "maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "d714ba7a-c3a6-47e8-b86b-1708a28c9cc2", "record_id": "flaws_cloudtrail:0000482:d714ba7a-c3a6-47e8-b86b-1708a28c9cc2", "row_index": 482, "timestamp": "2019-03-01T05:34:39Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "254.254.89.255", "user_agent": "aws-cli/1.16.114 Python/3.6.7 Linux/4.15.0-45-generic botocore/1.12.104", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 1080, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "d714ba7a-c3a6-47e8-b86b-1708a28c9cc2", "eventTime": "2019-03-01T05:34:39Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "254.254.89.255", "userAgent": "aws-cli/1.16.114 Python/3.6.7 Linux/4.15.0-45-generic botocore/1.12.104", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"nextToken": "eyJ2IjoiMiIsImMiOiJGbHZ2Z1gzNElaZS9BbENjVWt4dzZzcmhLOWVjS0w4RFRVY2oyeW9oVGM1MzVPcE5waUptUUoyZTd0R2RBVjh2ejRqcUZqWVNXdURVYjhoejdVakVxZGhONkhaYmgybWRaSGd4Q29yMnhOWDNxdDZ0T3N6Um1lYUkxOTRiWm1uMWprVTZQajQxNVBJcSt4T1dHdE16Vy9ZUng3Z1Fya3NxUmZLeWFLbEFDTWVMMzNwb0c0QjIzSlVNRDNTOHdlUE5QRGNsMnJld0pnPT0iLCJzIjoiMSJ9", "maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "95e6c267-07aa-4fda-a007-89c4fa016d9b", "record_id": "flaws_cloudtrail:0000483:95e6c267-07aa-4fda-a007-89c4fa016d9b", "row_index": 483, "timestamp": "2019-03-01T05:34:41Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "254.254.89.255", "user_agent": "aws-cli/1.16.114 Python/3.6.7 Linux/4.15.0-45-generic botocore/1.12.104", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 1083, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "95e6c267-07aa-4fda-a007-89c4fa016d9b", "eventTime": "2019-03-01T05:34:41Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "254.254.89.255", "userAgent": "aws-cli/1.16.114 Python/3.6.7 Linux/4.15.0-45-generic botocore/1.12.104", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"nextToken": "eyJ2IjoiMiIsImMiOiJES1p2aHo2NWJ6T0ErRE9rYUlnaFBSb0dWdmcwcFhmakUvWkt6amM5RG50TXBuYWkzdmxoTHlQeWtxb1lObnVWQjNlaUNHUi8xNnFpbEN0dFZ4VGJwVnVKUnk2K3c5UVlRSHc4TSt5NDcxUmJCTTFycVlQRG1zRkw1bExpZUJuZWVJR3A3ai80UjhacjVsZ0hwZGtVNFBrY21lNEkrak9ST1JUWXJCeVptQS9IZ0h0N1lWRW9OazM4VTU3b0Y5LzN3TERiNGY0eG5CWT0iLCJzIjoiMSJ9", "maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "95e6c267-07aa-4fda-a007-89c4fa016d9b", "record_id": "flaws_cloudtrail:0000484:95e6c267-07aa-4fda-a007-89c4fa016d9b", "row_index": 484, "timestamp": "2019-03-01T05:34:41Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "254.254.89.255", "user_agent": "aws-cli/1.16.114 Python/3.6.7 Linux/4.15.0-45-generic botocore/1.12.104", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 1083, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "95e6c267-07aa-4fda-a007-89c4fa016d9b", "eventTime": "2019-03-01T05:34:41Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "254.254.89.255", "userAgent": "aws-cli/1.16.114 Python/3.6.7 Linux/4.15.0-45-generic botocore/1.12.104", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"nextToken": "eyJ2IjoiMiIsImMiOiJES1p2aHo2NWJ6T0ErRE9rYUlnaFBSb0dWdmcwcFhmakUvWkt6amM5RG50TXBuYWkzdmxoTHlQeWtxb1lObnVWQjNlaUNHUi8xNnFpbEN0dFZ4VGJwVnVKUnk2K3c5UVlRSHc4TSt5NDcxUmJCTTFycVlQRG1zRkw1bExpZUJuZWVJR3A3ai80UjhacjVsZ0hwZGtVNFBrY21lNEkrak9ST1JUWXJCeVptQS9IZ0h0N1lWRW9OazM4VTU3b0Y5LzN3TERiNGY0eG5CWT0iLCJzIjoiMSJ9", "maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "476fd956-7f67-416d-bb9f-6d470608ab7b", "record_id": "flaws_cloudtrail:0000485:476fd956-7f67-416d-bb9f-6d470608ab7b", "row_index": 485, "timestamp": "2019-03-01T05:34:43Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "254.254.89.255", "user_agent": "aws-cli/1.16.114 Python/3.6.7 Linux/4.15.0-45-generic botocore/1.12.104", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 1090, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "476fd956-7f67-416d-bb9f-6d470608ab7b", "eventTime": "2019-03-01T05:34:43Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "254.254.89.255", "userAgent": "aws-cli/1.16.114 Python/3.6.7 Linux/4.15.0-45-generic botocore/1.12.104", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"nextToken": "eyJ2IjoiMiIsImMiOiJ3cVZMT21YalFxejlzZE4ya1pXN3EwSWxBbk8yRkgyMHFHRGhGeFBYRXNrVzN1ZytFa3FEY1NXVzd1Q002RGRQU09HV1NhVmFDNEd1TTJIdTFCQXgwRWVsajExdnAydzkzOW5teW1NVVh3TW5jUEdCZ1Bxc1VWVHRhWmE4T1hCY3ZiTWc2MFdVRk9MNi9EalZDVXlDTkFNSWd5NlRhRjRpT1hQMHpmM2FybkM1MjNoRGFxb2hMTzFJSjVpSEJCaXVmd1FSei9wZjYvRitDQT09IiwicyI6IjEifQ==", "maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "476fd956-7f67-416d-bb9f-6d470608ab7b", "record_id": "flaws_cloudtrail:0000486:476fd956-7f67-416d-bb9f-6d470608ab7b", "row_index": 486, "timestamp": "2019-03-01T05:34:43Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "254.254.89.255", "user_agent": "aws-cli/1.16.114 Python/3.6.7 Linux/4.15.0-45-generic botocore/1.12.104", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 1090, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "476fd956-7f67-416d-bb9f-6d470608ab7b", "eventTime": "2019-03-01T05:34:43Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "254.254.89.255", "userAgent": "aws-cli/1.16.114 Python/3.6.7 Linux/4.15.0-45-generic botocore/1.12.104", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"nextToken": "eyJ2IjoiMiIsImMiOiJ3cVZMT21YalFxejlzZE4ya1pXN3EwSWxBbk8yRkgyMHFHRGhGeFBYRXNrVzN1ZytFa3FEY1NXVzd1Q002RGRQU09HV1NhVmFDNEd1TTJIdTFCQXgwRWVsajExdnAydzkzOW5teW1NVVh3TW5jUEdCZ1Bxc1VWVHRhWmE4T1hCY3ZiTWc2MFdVRk9MNi9EalZDVXlDTkFNSWd5NlRhRjRpT1hQMHpmM2FybkM1MjNoRGFxb2hMTzFJSjVpSEJCaXVmd1FSei9wZjYvRitDQT09IiwicyI6IjEifQ==", "maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "6cab8ad2-5697-4769-be6e-688f813eb02e", "record_id": "flaws_cloudtrail:0000487:6cab8ad2-5697-4769-be6e-688f813eb02e", "row_index": 487, "timestamp": "2019-03-01T05:34:44Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "254.254.89.255", "user_agent": "aws-cli/1.16.114 Python/3.6.7 Linux/4.15.0-45-generic botocore/1.12.104", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 1082, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "6cab8ad2-5697-4769-be6e-688f813eb02e", "eventTime": "2019-03-01T05:34:44Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "254.254.89.255", "userAgent": "aws-cli/1.16.114 Python/3.6.7 Linux/4.15.0-45-generic botocore/1.12.104", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"nextToken": "eyJ2IjoiMiIsImMiOiJsVUt1bmZPTm9SUGVvSUxsSFlNVldYdEhMalk3WVVrU2hSZ2gvMzg5L3NCekJkWXhUV1JQcTBWbWtpd2VsZFVVUW9WOGdtb216ZEtHcG4zZzNlZExLK2dSZVdGMHRZbEdOU1FhMlI4Vlk3aHM5bWovZVkrakgycmJXdmRaOWlxQllBSDdDbG0xeERpaGt4c0d0bXFsS0JDQ2NqYnRYbTd4bXQ1WWdQT3ZZOEFzZjFGekt5MmVSU1VwSjdVMkE1ZDBlaGw0NXVpL2VRPT0iLCJzIjoiMSJ9", "maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "6cab8ad2-5697-4769-be6e-688f813eb02e", "record_id": "flaws_cloudtrail:0000488:6cab8ad2-5697-4769-be6e-688f813eb02e", "row_index": 488, "timestamp": "2019-03-01T05:34:44Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "254.254.89.255", "user_agent": "aws-cli/1.16.114 Python/3.6.7 Linux/4.15.0-45-generic botocore/1.12.104", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 1082, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "6cab8ad2-5697-4769-be6e-688f813eb02e", "eventTime": "2019-03-01T05:34:44Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "254.254.89.255", "userAgent": "aws-cli/1.16.114 Python/3.6.7 Linux/4.15.0-45-generic botocore/1.12.104", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"nextToken": "eyJ2IjoiMiIsImMiOiJsVUt1bmZPTm9SUGVvSUxsSFlNVldYdEhMalk3WVVrU2hSZ2gvMzg5L3NCekJkWXhUV1JQcTBWbWtpd2VsZFVVUW9WOGdtb216ZEtHcG4zZzNlZExLK2dSZVdGMHRZbEdOU1FhMlI4Vlk3aHM5bWovZVkrakgycmJXdmRaOWlxQllBSDdDbG0xeERpaGt4c0d0bXFsS0JDQ2NqYnRYbTd4bXQ1WWdQT3ZZOEFzZjFGekt5MmVSU1VwSjdVMkE1ZDBlaGw0NXVpL2VRPT0iLCJzIjoiMSJ9", "maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "cf34d8de-d73f-481c-aad9-717c95ffd6cc", "record_id": "flaws_cloudtrail:0000489:cf34d8de-d73f-481c-aad9-717c95ffd6cc", "row_index": 489, "timestamp": "2019-03-01T05:34:46Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "254.254.89.255", "user_agent": "aws-cli/1.16.114 Python/3.6.7 Linux/4.15.0-45-generic botocore/1.12.104", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 1090, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "cf34d8de-d73f-481c-aad9-717c95ffd6cc", "eventTime": "2019-03-01T05:34:46Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "254.254.89.255", "userAgent": "aws-cli/1.16.114 Python/3.6.7 Linux/4.15.0-45-generic botocore/1.12.104", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"nextToken": "eyJ2IjoiMiIsImMiOiJRK3F6Zy9IVm1xNVBFQkowUG5ob2htemd2cWtFWllYK1NUVXNUeGhJK01Cak85c1RsRm8vSy9aejZpdDJaRUdoVm9SMEF5NFZoUXlza0lxS3drYkVTbmNFOThTbGxGSWEvcUZuSlN6cGhBRWZ3WTliMnliYWtvd3hDeTV4eUxlVlV0UVR4TDJMYzVYSXNnaVVjVklPcXIyWjhONUt4OWZkT0RERkltb2luUVhoSjJ1dDlTWEdTeFdGRVNkSndHb1pMME5sUDdocjM4ZmxpZz09IiwicyI6IjEifQ==", "maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "cf34d8de-d73f-481c-aad9-717c95ffd6cc", "record_id": "flaws_cloudtrail:0000490:cf34d8de-d73f-481c-aad9-717c95ffd6cc", "row_index": 490, "timestamp": "2019-03-01T05:34:46Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "254.254.89.255", "user_agent": "aws-cli/1.16.114 Python/3.6.7 Linux/4.15.0-45-generic botocore/1.12.104", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 1090, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "cf34d8de-d73f-481c-aad9-717c95ffd6cc", "eventTime": "2019-03-01T05:34:46Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "254.254.89.255", "userAgent": "aws-cli/1.16.114 Python/3.6.7 Linux/4.15.0-45-generic botocore/1.12.104", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"nextToken": "eyJ2IjoiMiIsImMiOiJRK3F6Zy9IVm1xNVBFQkowUG5ob2htemd2cWtFWllYK1NUVXNUeGhJK01Cak85c1RsRm8vSy9aejZpdDJaRUdoVm9SMEF5NFZoUXlza0lxS3drYkVTbmNFOThTbGxGSWEvcUZuSlN6cGhBRWZ3WTliMnliYWtvd3hDeTV4eUxlVlV0UVR4TDJMYzVYSXNnaVVjVklPcXIyWjhONUt4OWZkT0RERkltb2luUVhoSjJ1dDlTWEdTeFdGRVNkSndHb1pMME5sUDdocjM4ZmxpZz09IiwicyI6IjEifQ==", "maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "44f1d664-0128-4e74-9dff-b91174e7cef2", "record_id": "flaws_cloudtrail:0000491:44f1d664-0128-4e74-9dff-b91174e7cef2", "row_index": 491, "timestamp": "2019-03-01T05:34:47Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "254.254.89.255", "user_agent": "aws-cli/1.16.114 Python/3.6.7 Linux/4.15.0-45-generic botocore/1.12.104", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 1091, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "44f1d664-0128-4e74-9dff-b91174e7cef2", "eventTime": "2019-03-01T05:34:47Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "254.254.89.255", "userAgent": "aws-cli/1.16.114 Python/3.6.7 Linux/4.15.0-45-generic botocore/1.12.104", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"nextToken": "eyJ2IjoiMiIsImMiOiIyV1JSM3FWdUVKZW5CbU9sUXhjZ3VRQU0vOHdYZDhsanZxMU4rNWFDZlZZcU8wd3p5cllnemFCcHdyNStDZWgveVh6b1IxbkdRM05ISjNkTnNGNUtDeGZOQ2tzeTZCV0k3N0tTSUZvTG1VL2pCdWVPWWZuNGxDdG0wa2xpamZBelBzK2dOMzJIVlE5aGpqM0MxTzQxVGVpVG5ycnh1WGd5VUlXdExrV0dEcDdrbm9acnhIbmoxU3c0OWxtZTd2YnF4VUhVNnYxaWVZQjhwZz09IiwicyI6IjEifQ==", "maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "44f1d664-0128-4e74-9dff-b91174e7cef2", "record_id": "flaws_cloudtrail:0000492:44f1d664-0128-4e74-9dff-b91174e7cef2", "row_index": 492, "timestamp": "2019-03-01T05:34:47Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "254.254.89.255", "user_agent": "aws-cli/1.16.114 Python/3.6.7 Linux/4.15.0-45-generic botocore/1.12.104", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 1091, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "44f1d664-0128-4e74-9dff-b91174e7cef2", "eventTime": "2019-03-01T05:34:47Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "254.254.89.255", "userAgent": "aws-cli/1.16.114 Python/3.6.7 Linux/4.15.0-45-generic botocore/1.12.104", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"nextToken": "eyJ2IjoiMiIsImMiOiIyV1JSM3FWdUVKZW5CbU9sUXhjZ3VRQU0vOHdYZDhsanZxMU4rNWFDZlZZcU8wd3p5cllnemFCcHdyNStDZWgveVh6b1IxbkdRM05ISjNkTnNGNUtDeGZOQ2tzeTZCV0k3N0tTSUZvTG1VL2pCdWVPWWZuNGxDdG0wa2xpamZBelBzK2dOMzJIVlE5aGpqM0MxTzQxVGVpVG5ycnh1WGd5VUlXdExrV0dEcDdrbm9acnhIbmoxU3c0OWxtZTd2YnF4VUhVNnYxaWVZQjhwZz09IiwicyI6IjEifQ==", "maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "67dbc3dc-5cd8-4070-9b35-58d67f5e272e", "record_id": "flaws_cloudtrail:0000493:67dbc3dc-5cd8-4070-9b35-58d67f5e272e", "row_index": 493, "timestamp": "2019-03-01T05:34:49Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "254.254.89.255", "user_agent": "aws-cli/1.16.114 Python/3.6.7 Linux/4.15.0-45-generic botocore/1.12.104", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 1089, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "67dbc3dc-5cd8-4070-9b35-58d67f5e272e", "eventTime": "2019-03-01T05:34:49Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "254.254.89.255", "userAgent": "aws-cli/1.16.114 Python/3.6.7 Linux/4.15.0-45-generic botocore/1.12.104", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"nextToken": "eyJ2IjoiMiIsImMiOiJKRWtGUnVnWm9mU0FFZWRTQkw4VTRRaWlJYTFORHhGWmpFMjloQmFNM0Z0RENJcDQ4Sjg3aDBRcFpwMVZGaFlUNy9JN21ZZUF0U0Y5VUhoRTNwTHJMQURWY0lXUVl2clQ4OHJNSEhPNlYzaHJzV1FDWTVxVEZ5ZHpackF3U2VoVlJDeFRDNllyYktoY2ExZmVOOXZZYjdzRXZDMDc0ajhHWTNUUlZJM2V6SEVraUdwSlJsdy9TVHFRc3I1czUyUWZiVkFyT2JMU0xnb0UzZz09IiwicyI6IjEifQ==", "maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "67dbc3dc-5cd8-4070-9b35-58d67f5e272e", "record_id": "flaws_cloudtrail:0000494:67dbc3dc-5cd8-4070-9b35-58d67f5e272e", "row_index": 494, "timestamp": "2019-03-01T05:34:49Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "254.254.89.255", "user_agent": "aws-cli/1.16.114 Python/3.6.7 Linux/4.15.0-45-generic botocore/1.12.104", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 1089, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "67dbc3dc-5cd8-4070-9b35-58d67f5e272e", "eventTime": "2019-03-01T05:34:49Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "254.254.89.255", "userAgent": "aws-cli/1.16.114 Python/3.6.7 Linux/4.15.0-45-generic botocore/1.12.104", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"nextToken": "eyJ2IjoiMiIsImMiOiJKRWtGUnVnWm9mU0FFZWRTQkw4VTRRaWlJYTFORHhGWmpFMjloQmFNM0Z0RENJcDQ4Sjg3aDBRcFpwMVZGaFlUNy9JN21ZZUF0U0Y5VUhoRTNwTHJMQURWY0lXUVl2clQ4OHJNSEhPNlYzaHJzV1FDWTVxVEZ5ZHpackF3U2VoVlJDeFRDNllyYktoY2ExZmVOOXZZYjdzRXZDMDc0ajhHWTNUUlZJM2V6SEVraUdwSlJsdy9TVHFRc3I1czUyUWZiVkFyT2JMU0xnb0UzZz09IiwicyI6IjEifQ==", "maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "12300e3f-3ee8-4211-bdf7-e9f342bff0cd", "record_id": "flaws_cloudtrail:0000495:12300e3f-3ee8-4211-bdf7-e9f342bff0cd", "row_index": 495, "timestamp": "2019-03-01T05:34:50Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "254.254.89.255", "user_agent": "aws-cli/1.16.114 Python/3.6.7 Linux/4.15.0-45-generic botocore/1.12.104", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 1082, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "12300e3f-3ee8-4211-bdf7-e9f342bff0cd", "eventTime": "2019-03-01T05:34:50Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "254.254.89.255", "userAgent": "aws-cli/1.16.114 Python/3.6.7 Linux/4.15.0-45-generic botocore/1.12.104", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"nextToken": "eyJ2IjoiMiIsImMiOiJUaFlkekFySTNpUkxWZklHTnNTWTFKZkdYWUZVWUJFSS9hcDA0dDNhSFZXNTBYWm9kTVJmakNoODlRZmF1cE50RVVXQWxobjZ2dWhiTHNrd1Q1emdSbVFzTlM1U2IvTmkxa2tYSkR3cFliLzI4Y3VsUmtpZzA1WURCMHJQMFgycTNYdDVKdm5lTmhDamdQWWhSMnFMUUZrU29Qd3dNWHZ3MU81N2tUblFHUmMrVUVPRlNDTEZNOHlLN1NPVWQvVHFNM0hDVldOVkxQYz0iLCJzIjoiMSJ9", "maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "12300e3f-3ee8-4211-bdf7-e9f342bff0cd", "record_id": "flaws_cloudtrail:0000496:12300e3f-3ee8-4211-bdf7-e9f342bff0cd", "row_index": 496, "timestamp": "2019-03-01T05:34:50Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "254.254.89.255", "user_agent": "aws-cli/1.16.114 Python/3.6.7 Linux/4.15.0-45-generic botocore/1.12.104", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 1082, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "12300e3f-3ee8-4211-bdf7-e9f342bff0cd", "eventTime": "2019-03-01T05:34:50Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "254.254.89.255", "userAgent": "aws-cli/1.16.114 Python/3.6.7 Linux/4.15.0-45-generic botocore/1.12.104", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"nextToken": "eyJ2IjoiMiIsImMiOiJUaFlkekFySTNpUkxWZklHTnNTWTFKZkdYWUZVWUJFSS9hcDA0dDNhSFZXNTBYWm9kTVJmakNoODlRZmF1cE50RVVXQWxobjZ2dWhiTHNrd1Q1emdSbVFzTlM1U2IvTmkxa2tYSkR3cFliLzI4Y3VsUmtpZzA1WURCMHJQMFgycTNYdDVKdm5lTmhDamdQWWhSMnFMUUZrU29Qd3dNWHZ3MU81N2tUblFHUmMrVUVPRlNDTEZNOHlLN1NPVWQvVHFNM0hDVldOVkxQYz0iLCJzIjoiMSJ9", "maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "382cc616-3b8c-43d1-877e-0b90b83febdd", "record_id": "flaws_cloudtrail:0000497:382cc616-3b8c-43d1-877e-0b90b83febdd", "row_index": 497, "timestamp": "2019-03-01T05:34:52Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "254.254.89.255", "user_agent": "aws-cli/1.16.114 Python/3.6.7 Linux/4.15.0-45-generic botocore/1.12.104", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 1088, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "382cc616-3b8c-43d1-877e-0b90b83febdd", "eventTime": "2019-03-01T05:34:52Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "254.254.89.255", "userAgent": "aws-cli/1.16.114 Python/3.6.7 Linux/4.15.0-45-generic botocore/1.12.104", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"nextToken": "eyJ2IjoiMiIsImMiOiJtY21xSTBjK0VWcHBKc3VRRTh6Ty9QOFRZWFdNR1JLVDM4WjFOa3RKNWkxdHk5TlBqbUpRclpyYWUzTEcwTEp0L0pFK3AyK2l6V2dSVU1wdGZSZUkxb1ozMzg0NXM1bk10dG9qTTA2ekhKZFVUT1NCTFBCbklmNXVFT2UwNWJvOFNTbEEwMzh2WlBmREFiUjNHZ0lJOG9WcVhTdVJ5T3d0M3A2clVnTFhOZ1NKYVV5REhWNGpqci9FSERab0dZV0hIcVU2Rm5pcXJHU2FEUT09IiwicyI6IjEifQ==", "maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "382cc616-3b8c-43d1-877e-0b90b83febdd", "record_id": "flaws_cloudtrail:0000498:382cc616-3b8c-43d1-877e-0b90b83febdd", "row_index": 498, "timestamp": "2019-03-01T05:34:52Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "254.254.89.255", "user_agent": "aws-cli/1.16.114 Python/3.6.7 Linux/4.15.0-45-generic botocore/1.12.104", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 1088, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "382cc616-3b8c-43d1-877e-0b90b83febdd", "eventTime": "2019-03-01T05:34:52Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "254.254.89.255", "userAgent": "aws-cli/1.16.114 Python/3.6.7 Linux/4.15.0-45-generic botocore/1.12.104", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"nextToken": "eyJ2IjoiMiIsImMiOiJtY21xSTBjK0VWcHBKc3VRRTh6Ty9QOFRZWFdNR1JLVDM4WjFOa3RKNWkxdHk5TlBqbUpRclpyYWUzTEcwTEp0L0pFK3AyK2l6V2dSVU1wdGZSZUkxb1ozMzg0NXM1bk10dG9qTTA2ekhKZFVUT1NCTFBCbklmNXVFT2UwNWJvOFNTbEEwMzh2WlBmREFiUjNHZ0lJOG9WcVhTdVJ5T3d0M3A2clVnTFhOZ1NKYVV5REhWNGpqci9FSERab0dZV0hIcVU2Rm5pcXJHU2FEUT09IiwicyI6IjEifQ==", "maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "598954d49-7f16-4816-8960-99124a4e1f6", "record_id": "flaws_cloudtrail:0000499:598954d49-7f16-4816-8960-99124a4e1f6", "row_index": 499, "timestamp": "2019-03-01T05:35:54Z", "event_type": "DescribeInstances", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "254.254.89.255", "user_agent": "aws-cli/1.16.114 Python/3.6.7 Linux/4.15.0-45-generic botocore/1.12.104", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 711, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "598954d49-7f16-4816-8960-99124a4e1f6", "eventTime": "2019-03-01T05:35:54Z", "eventName": "DescribeInstances", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "254.254.89.255", "userAgent": "aws-cli/1.16.114 Python/3.6.7 Linux/4.15.0-45-generic botocore/1.12.104", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"instancesSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "598954d49-7f16-4816-8960-99124a4e1f6", "record_id": "flaws_cloudtrail:0000500:598954d49-7f16-4816-8960-99124a4e1f6", "row_index": 500, "timestamp": "2019-03-01T05:35:54Z", "event_type": "DescribeInstances", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "254.254.89.255", "user_agent": "aws-cli/1.16.114 Python/3.6.7 Linux/4.15.0-45-generic botocore/1.12.104", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 711, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "598954d49-7f16-4816-8960-99124a4e1f6", "eventTime": "2019-03-01T05:35:54Z", "eventName": "DescribeInstances", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "254.254.89.255", "userAgent": "aws-cli/1.16.114 Python/3.6.7 Linux/4.15.0-45-generic botocore/1.12.104", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"instancesSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "6597d2b4-96bc-413f-80db-ba6901b13148", "record_id": "flaws_cloudtrail:0000501:6597d2b4-96bc-413f-80db-ba6901b13148", "row_index": 501, "timestamp": "2019-03-01T05:38:53Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "254.254.89.255", "user_agent": "aws-cli/1.16.114 Python/3.6.7 Linux/4.15.0-45-generic botocore/1.12.104", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 763, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "6597d2b4-96bc-413f-80db-ba6901b13148", "eventTime": "2019-03-01T05:38:53Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "254.254.89.255", "userAgent": "aws-cli/1.16.114 Python/3.6.7 Linux/4.15.0-45-generic botocore/1.12.104", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "6597d2b4-96bc-413f-80db-ba6901b13148", "record_id": "flaws_cloudtrail:0000502:6597d2b4-96bc-413f-80db-ba6901b13148", "row_index": 502, "timestamp": "2019-03-01T05:38:53Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "254.254.89.255", "user_agent": "aws-cli/1.16.114 Python/3.6.7 Linux/4.15.0-45-generic botocore/1.12.104", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 763, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "6597d2b4-96bc-413f-80db-ba6901b13148", "eventTime": "2019-03-01T05:38:53Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "254.254.89.255", "userAgent": "aws-cli/1.16.114 Python/3.6.7 Linux/4.15.0-45-generic botocore/1.12.104", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "edc2db47-a2a2-4dde-9734-8e4b316a86cd", "record_id": "flaws_cloudtrail:0000503:edc2db47-a2a2-4dde-9734-8e4b316a86cd", "row_index": 503, "timestamp": "2019-03-01T05:38:57Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "254.254.89.255", "user_agent": "aws-cli/1.16.114 Python/3.6.7 Linux/4.15.0-45-generic botocore/1.12.104", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1090, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "edc2db47-a2a2-4dde-9734-8e4b316a86cd", "eventTime": "2019-03-01T05:38:57Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "254.254.89.255", "userAgent": "aws-cli/1.16.114 Python/3.6.7 Linux/4.15.0-45-generic botocore/1.12.104", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"nextToken": "eyJ2IjoiMiIsImMiOiJINUNlZmtHSGZCdkY2ZXFMMVgyTXNwM0tCbVZBRnMrWUE5ZWEzdFBMcUpMS0IzUjAxRitnNVVrY1hXVXBNeHJ0UjlmTkR4QSttanM2dWtVMmdsMCtjM0Zxa2dMTXV3R3NmS3RQb1piT2h3d1luOWd2aDhpdGdRZkkzN1pNOUhhMW1MVFF6eDNvSWJMOWZYN2l3M2h0VlBBM09Sa2V0UmU2a25NcW9Nd0FzU3QrZmJDUkY4bDZ4YVlvM0xFOXMwMFo4dFk3NjhFWEp2Q3dxdz09IiwicyI6IjEifQ==", "maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "edc2db47-a2a2-4dde-9734-8e4b316a86cd", "record_id": "flaws_cloudtrail:0000504:edc2db47-a2a2-4dde-9734-8e4b316a86cd", "row_index": 504, "timestamp": "2019-03-01T05:38:57Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "254.254.89.255", "user_agent": "aws-cli/1.16.114 Python/3.6.7 Linux/4.15.0-45-generic botocore/1.12.104", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1090, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "edc2db47-a2a2-4dde-9734-8e4b316a86cd", "eventTime": "2019-03-01T05:38:57Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "254.254.89.255", "userAgent": "aws-cli/1.16.114 Python/3.6.7 Linux/4.15.0-45-generic botocore/1.12.104", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"nextToken": "eyJ2IjoiMiIsImMiOiJINUNlZmtHSGZCdkY2ZXFMMVgyTXNwM0tCbVZBRnMrWUE5ZWEzdFBMcUpMS0IzUjAxRitnNVVrY1hXVXBNeHJ0UjlmTkR4QSttanM2dWtVMmdsMCtjM0Zxa2dMTXV3R3NmS3RQb1piT2h3d1luOWd2aDhpdGdRZkkzN1pNOUhhMW1MVFF6eDNvSWJMOWZYN2l3M2h0VlBBM09Sa2V0UmU2a25NcW9Nd0FzU3QrZmJDUkY4bDZ4YVlvM0xFOXMwMFo4dFk3NjhFWEp2Q3dxdz09IiwicyI6IjEifQ==", "maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "0df7a82f-ca15-453d-b9ee-c81f491966b2", "record_id": "flaws_cloudtrail:0000505:0df7a82f-ca15-453d-b9ee-c81f491966b2", "row_index": 505, "timestamp": "2019-03-01T05:39:25Z", "event_type": "DescribeInstances", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "254.254.89.255", "user_agent": "aws-cli/1.16.114 Python/3.6.7 Linux/4.15.0-45-generic botocore/1.12.104", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 711, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "0df7a82f-ca15-453d-b9ee-c81f491966b2", "eventTime": "2019-03-01T05:39:25Z", "eventName": "DescribeInstances", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "254.254.89.255", "userAgent": "aws-cli/1.16.114 Python/3.6.7 Linux/4.15.0-45-generic botocore/1.12.104", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"instancesSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "0df7a82f-ca15-453d-b9ee-c81f491966b2", "record_id": "flaws_cloudtrail:0000506:0df7a82f-ca15-453d-b9ee-c81f491966b2", "row_index": 506, "timestamp": "2019-03-01T05:39:25Z", "event_type": "DescribeInstances", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "254.254.89.255", "user_agent": "aws-cli/1.16.114 Python/3.6.7 Linux/4.15.0-45-generic botocore/1.12.104", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 711, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "0df7a82f-ca15-453d-b9ee-c81f491966b2", "eventTime": "2019-03-01T05:39:25Z", "eventName": "DescribeInstances", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "254.254.89.255", "userAgent": "aws-cli/1.16.114 Python/3.6.7 Linux/4.15.0-45-generic botocore/1.12.104", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"instancesSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "8a5197b9-a1f1-4979-91d2-ecf496efe087", "record_id": "flaws_cloudtrail:0000507:8a5197b9-a1f1-4979-91d2-ecf496efe087", "row_index": 507, "timestamp": "2019-03-01T05:42:42Z", "event_type": "DescribeInstances", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "254.254.89.255", "user_agent": "aws-cli/1.16.114 Python/3.6.7 Linux/4.15.0-45-generic botocore/1.12.104", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 711, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "8a5197b9-a1f1-4979-91d2-ecf496efe087", "eventTime": "2019-03-01T05:42:42Z", "eventName": "DescribeInstances", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "254.254.89.255", "userAgent": "aws-cli/1.16.114 Python/3.6.7 Linux/4.15.0-45-generic botocore/1.12.104", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"instancesSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "8a5197b9-a1f1-4979-91d2-ecf496efe087", "record_id": "flaws_cloudtrail:0000508:8a5197b9-a1f1-4979-91d2-ecf496efe087", "row_index": 508, "timestamp": "2019-03-01T05:42:42Z", "event_type": "DescribeInstances", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "254.254.89.255", "user_agent": "aws-cli/1.16.114 Python/3.6.7 Linux/4.15.0-45-generic botocore/1.12.104", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 711, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "8a5197b9-a1f1-4979-91d2-ecf496efe087", "eventTime": "2019-03-01T05:42:42Z", "eventName": "DescribeInstances", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "254.254.89.255", "userAgent": "aws-cli/1.16.114 Python/3.6.7 Linux/4.15.0-45-generic botocore/1.12.104", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"instancesSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "7729d7a5-f10d-49a2-a816-496357daeef6", "record_id": "flaws_cloudtrail:0000509:7729d7a5-f10d-49a2-a816-496357daeef6", "row_index": 509, "timestamp": "2019-03-01T05:43:09Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "254.254.89.255", "user_agent": "aws-cli/1.16.114 Python/3.6.7 Linux/4.15.0-45-generic botocore/1.12.104", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 743, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "7729d7a5-f10d-49a2-a816-496357daeef6", "eventTime": "2019-03-01T05:43:09Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "254.254.89.255", "userAgent": "aws-cli/1.16.114 Python/3.6.7 Linux/4.15.0-45-generic botocore/1.12.104", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "7729d7a5-f10d-49a2-a816-496357daeef6", "record_id": "flaws_cloudtrail:0000510:7729d7a5-f10d-49a2-a816-496357daeef6", "row_index": 510, "timestamp": "2019-03-01T05:43:09Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "254.254.89.255", "user_agent": "aws-cli/1.16.114 Python/3.6.7 Linux/4.15.0-45-generic botocore/1.12.104", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 743, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "7729d7a5-f10d-49a2-a816-496357daeef6", "eventTime": "2019-03-01T05:43:09Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "254.254.89.255", "userAgent": "aws-cli/1.16.114 Python/3.6.7 Linux/4.15.0-45-generic botocore/1.12.104", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "a2c5b575-dfab-4359-957b-f3431a70b1d5", "record_id": "flaws_cloudtrail:0000511:a2c5b575-dfab-4359-957b-f3431a70b1d5", "row_index": 511, "timestamp": "2019-03-01T05:46:16Z", "event_type": "DescribeImages", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "254.254.89.255", "user_agent": "aws-cli/1.16.114 Python/3.6.7 Linux/4.15.0-45-generic botocore/1.12.104", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 815, "raw_record_depth": 8, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "a2c5b575-dfab-4359-957b-f3431a70b1d5", "eventTime": "2019-03-01T05:46:16Z", "eventName": "DescribeImages", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "254.254.89.255", "userAgent": "aws-cli/1.16.114 Python/3.6.7 Linux/4.15.0-45-generic botocore/1.12.104", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"executableBySet": {}, "imagesSet": {}, "ownersSet": {}, "filterSet": {"items": [{"name": "tag:Name", "valueSet": {"items": {"__truncated_type": "list"}}}]}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "a2c5b575-dfab-4359-957b-f3431a70b1d5", "record_id": "flaws_cloudtrail:0000512:a2c5b575-dfab-4359-957b-f3431a70b1d5", "row_index": 512, "timestamp": "2019-03-01T05:46:16Z", "event_type": "DescribeImages", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "254.254.89.255", "user_agent": "aws-cli/1.16.114 Python/3.6.7 Linux/4.15.0-45-generic botocore/1.12.104", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 815, "raw_record_depth": 8, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "a2c5b575-dfab-4359-957b-f3431a70b1d5", "eventTime": "2019-03-01T05:46:16Z", "eventName": "DescribeImages", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "254.254.89.255", "userAgent": "aws-cli/1.16.114 Python/3.6.7 Linux/4.15.0-45-generic botocore/1.12.104", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"executableBySet": {}, "imagesSet": {}, "ownersSet": {}, "filterSet": {"items": [{"name": "tag:Name", "valueSet": {"items": {"__truncated_type": "list"}}}]}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "00ac9dbc-f96a-4bfc-bb69-8c5c16b74082", "record_id": "flaws_cloudtrail:0000513:00ac9dbc-f96a-4bfc-bb69-8c5c16b74082", "row_index": 513, "timestamp": "2019-03-01T05:46:50Z", "event_type": "DescribeImages", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "254.254.89.255", "user_agent": "aws-cli/1.16.114 Python/3.6.7 Linux/4.15.0-45-generic botocore/1.12.104", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 824, "raw_record_depth": 8, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "00ac9dbc-f96a-4bfc-bb69-8c5c16b74082", "eventTime": "2019-03-01T05:46:50Z", "eventName": "DescribeImages", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "254.254.89.255", "userAgent": "aws-cli/1.16.114 Python/3.6.7 Linux/4.15.0-45-generic botocore/1.12.104", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"executableBySet": {}, "imagesSet": {}, "ownersSet": {}, "filterSet": {"items": [{"name": "tag:Name", "valueSet": {"items": {"__truncated_type": "list"}}}]}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "00ac9dbc-f96a-4bfc-bb69-8c5c16b74082", "record_id": "flaws_cloudtrail:0000514:00ac9dbc-f96a-4bfc-bb69-8c5c16b74082", "row_index": 514, "timestamp": "2019-03-01T05:46:50Z", "event_type": "DescribeImages", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "254.254.89.255", "user_agent": "aws-cli/1.16.114 Python/3.6.7 Linux/4.15.0-45-generic botocore/1.12.104", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 824, "raw_record_depth": 8, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "00ac9dbc-f96a-4bfc-bb69-8c5c16b74082", "eventTime": "2019-03-01T05:46:50Z", "eventName": "DescribeImages", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "254.254.89.255", "userAgent": "aws-cli/1.16.114 Python/3.6.7 Linux/4.15.0-45-generic botocore/1.12.104", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"executableBySet": {}, "imagesSet": {}, "ownersSet": {}, "filterSet": {"items": [{"name": "tag:Name", "valueSet": {"items": {"__truncated_type": "list"}}}]}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "bc2c5b84-a951-4613-b624-f7d530236e9", "record_id": "flaws_cloudtrail:0000515:bc2c5b84-a951-4613-b624-f7d530236e9", "row_index": 515, "timestamp": "2019-03-01T05:47:20Z", "event_type": "DescribeInstances", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "254.254.89.255", "user_agent": "aws-cli/1.16.114 Python/3.6.7 Linux/4.15.0-45-generic botocore/1.12.104", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 710, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "bc2c5b84-a951-4613-b624-f7d530236e9", "eventTime": "2019-03-01T05:47:20Z", "eventName": "DescribeInstances", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "254.254.89.255", "userAgent": "aws-cli/1.16.114 Python/3.6.7 Linux/4.15.0-45-generic botocore/1.12.104", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"instancesSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "bc2c5b84-a951-4613-b624-f7d530236e9", "record_id": "flaws_cloudtrail:0000516:bc2c5b84-a951-4613-b624-f7d530236e9", "row_index": 516, "timestamp": "2019-03-01T05:47:20Z", "event_type": "DescribeInstances", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "254.254.89.255", "user_agent": "aws-cli/1.16.114 Python/3.6.7 Linux/4.15.0-45-generic botocore/1.12.104", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 710, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "bc2c5b84-a951-4613-b624-f7d530236e9", "eventTime": "2019-03-01T05:47:20Z", "eventName": "DescribeInstances", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "254.254.89.255", "userAgent": "aws-cli/1.16.114 Python/3.6.7 Linux/4.15.0-45-generic botocore/1.12.104", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"instancesSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "a5990f5f-6c47-47b2-9f04-84866f42b592", "record_id": "flaws_cloudtrail:0000517:a5990f5f-6c47-47b2-9f04-84866f42b592", "row_index": 517, "timestamp": "2019-03-01T05:48:14Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "254.254.89.255", "user_agent": "aws-cli/1.16.114 Python/3.6.7 Linux/4.15.0-45-generic botocore/1.12.104", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 763, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "a5990f5f-6c47-47b2-9f04-84866f42b592", "eventTime": "2019-03-01T05:48:14Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "254.254.89.255", "userAgent": "aws-cli/1.16.114 Python/3.6.7 Linux/4.15.0-45-generic botocore/1.12.104", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "a5990f5f-6c47-47b2-9f04-84866f42b592", "record_id": "flaws_cloudtrail:0000518:a5990f5f-6c47-47b2-9f04-84866f42b592", "row_index": 518, "timestamp": "2019-03-01T05:48:14Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "254.254.89.255", "user_agent": "aws-cli/1.16.114 Python/3.6.7 Linux/4.15.0-45-generic botocore/1.12.104", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 763, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "a5990f5f-6c47-47b2-9f04-84866f42b592", "eventTime": "2019-03-01T05:48:14Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "254.254.89.255", "userAgent": "aws-cli/1.16.114 Python/3.6.7 Linux/4.15.0-45-generic botocore/1.12.104", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "66c83328-e01c-48a1-8b30-35f77850e4d", "record_id": "flaws_cloudtrail:0000519:66c83328-e01c-48a1-8b30-35f77850e4d", "row_index": 519, "timestamp": "2019-03-01T05:48:16Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "254.254.89.255", "user_agent": "aws-cli/1.16.114 Python/3.6.7 Linux/4.15.0-45-generic botocore/1.12.104", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1090, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "66c83328-e01c-48a1-8b30-35f77850e4d", "eventTime": "2019-03-01T05:48:16Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "254.254.89.255", "userAgent": "aws-cli/1.16.114 Python/3.6.7 Linux/4.15.0-45-generic botocore/1.12.104", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"nextToken": "eyJ2IjoiMiIsImMiOiJFUlY1OHo3bWdVdTRlOTZOOGRBK0VwZ1NRazFaMmhXRS9qc1RLQmFJY0pnL2EzM1Q0TG5UUzF3LzFremVUTUM2c0dFT3R6ellZMVhBYjdidnYwRWFpbGZSQm1QS1NZMFRhVGl4Y1pjbFhEcHd0QWJQM2ZBYTdhQ2JoWEZ5L3RSbHU4bXRPVHlNSVk1eCtGMm9nd1NYRGhJRTJDbmY1RENHOUdXbmdvMmFsWnRCTjFKU3RPYmcrODlmd1pUVVQ1bnltLzBrSFJuaW1sRDhNQT09IiwicyI6IjEifQ==", "maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "66c83328-e01c-48a1-8b30-35f77850e4d", "record_id": "flaws_cloudtrail:0000520:66c83328-e01c-48a1-8b30-35f77850e4d", "row_index": 520, "timestamp": "2019-03-01T05:48:16Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "254.254.89.255", "user_agent": "aws-cli/1.16.114 Python/3.6.7 Linux/4.15.0-45-generic botocore/1.12.104", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1090, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "66c83328-e01c-48a1-8b30-35f77850e4d", "eventTime": "2019-03-01T05:48:16Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "254.254.89.255", "userAgent": "aws-cli/1.16.114 Python/3.6.7 Linux/4.15.0-45-generic botocore/1.12.104", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"nextToken": "eyJ2IjoiMiIsImMiOiJFUlY1OHo3bWdVdTRlOTZOOGRBK0VwZ1NRazFaMmhXRS9qc1RLQmFJY0pnL2EzM1Q0TG5UUzF3LzFremVUTUM2c0dFT3R6ellZMVhBYjdidnYwRWFpbGZSQm1QS1NZMFRhVGl4Y1pjbFhEcHd0QWJQM2ZBYTdhQ2JoWEZ5L3RSbHU4bXRPVHlNSVk1eCtGMm9nd1NYRGhJRTJDbmY1RENHOUdXbmdvMmFsWnRCTjFKU3RPYmcrODlmd1pUVVQ1bnltLzBrSFJuaW1sRDhNQT09IiwicyI6IjEifQ==", "maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "40ea471e-867f-46db-bada-886156799673", "record_id": "flaws_cloudtrail:0000521:40ea471e-867f-46db-bada-886156799673", "row_index": 521, "timestamp": "2019-03-01T05:48:18Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "254.254.89.255", "user_agent": "aws-cli/1.16.114 Python/3.6.7 Linux/4.15.0-45-generic botocore/1.12.104", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1082, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "40ea471e-867f-46db-bada-886156799673", "eventTime": "2019-03-01T05:48:18Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "254.254.89.255", "userAgent": "aws-cli/1.16.114 Python/3.6.7 Linux/4.15.0-45-generic botocore/1.12.104", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"nextToken": "eyJ2IjoiMiIsImMiOiJzUXVSZ0N4RkI4cTN4TGhoVWxweVk3NCtVOW5xOEpSN1E5QjBTYnFLSWkvV1BKbndHRUNHZzIzdmthS1FSdGFBZldkbUJXSisvM2h0YVoweUV6UStLL1g5UFdTM0Y5UDM0LzdMQ1JyU2twcGpXeGs4cEFEV3NieGJudW5QVjRPaWdybVJGU0dsYVF0ZnFEa0kwK1BGYTRYNzh2WmNPR2NUMUJSanBaWlhhdGNaWVBvRVhIR2JlUlpyQmJXNXlrcUgyRG9lcG1IMjZ5VT0iLCJzIjoiMSJ9", "maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "40ea471e-867f-46db-bada-886156799673", "record_id": "flaws_cloudtrail:0000522:40ea471e-867f-46db-bada-886156799673", "row_index": 522, "timestamp": "2019-03-01T05:48:18Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "254.254.89.255", "user_agent": "aws-cli/1.16.114 Python/3.6.7 Linux/4.15.0-45-generic botocore/1.12.104", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1082, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "40ea471e-867f-46db-bada-886156799673", "eventTime": "2019-03-01T05:48:18Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "254.254.89.255", "userAgent": "aws-cli/1.16.114 Python/3.6.7 Linux/4.15.0-45-generic botocore/1.12.104", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"nextToken": "eyJ2IjoiMiIsImMiOiJzUXVSZ0N4RkI4cTN4TGhoVWxweVk3NCtVOW5xOEpSN1E5QjBTYnFLSWkvV1BKbndHRUNHZzIzdmthS1FSdGFBZldkbUJXSisvM2h0YVoweUV6UStLL1g5UFdTM0Y5UDM0LzdMQ1JyU2twcGpXeGs4cEFEV3NieGJudW5QVjRPaWdybVJGU0dsYVF0ZnFEa0kwK1BGYTRYNzh2WmNPR2NUMUJSanBaWlhhdGNaWVBvRVhIR2JlUlpyQmJXNXlrcUgyRG9lcG1IMjZ5VT0iLCJzIjoiMSJ9", "maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "f5c6c0d3-2fb9-437c-be30-24ae2220c83a", "record_id": "flaws_cloudtrail:0000523:f5c6c0d3-2fb9-437c-be30-24ae2220c83a", "row_index": 523, "timestamp": "2019-03-01T05:48:19Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "254.254.89.255", "user_agent": "aws-cli/1.16.114 Python/3.6.7 Linux/4.15.0-45-generic botocore/1.12.104", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1082, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "f5c6c0d3-2fb9-437c-be30-24ae2220c83a", "eventTime": "2019-03-01T05:48:19Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "254.254.89.255", "userAgent": "aws-cli/1.16.114 Python/3.6.7 Linux/4.15.0-45-generic botocore/1.12.104", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"nextToken": "eyJ2IjoiMiIsImMiOiIySG9DMStoZG5VdkNabldab2w3MUYvUWRXUDFTYWRCYTZmeGNUNVNtajdoUGtNbGJaVFpUcVhDNi9NbDRod0EreWt6dkhBZk1YY0NiNjdwQ2ZhbUIybE12YkJ6ZnRMWFA1alpHRWFwaFJldmQyeU1LV0Yza2xWQWVHeDNKQVdXT1hXK2tDZDZRS2pkaWJFYnF1YnpiemJybFNBbVYrVjZjdHZ5SWdlNEZQYnV4Y0FHbmt5Vjh3YUdlQTlwYTZuUzVnUjJST1N0cDh3PT0iLCJzIjoiMSJ9", "maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "f5c6c0d3-2fb9-437c-be30-24ae2220c83a", "record_id": "flaws_cloudtrail:0000524:f5c6c0d3-2fb9-437c-be30-24ae2220c83a", "row_index": 524, "timestamp": "2019-03-01T05:48:19Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "254.254.89.255", "user_agent": "aws-cli/1.16.114 Python/3.6.7 Linux/4.15.0-45-generic botocore/1.12.104", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1082, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "f5c6c0d3-2fb9-437c-be30-24ae2220c83a", "eventTime": "2019-03-01T05:48:19Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "254.254.89.255", "userAgent": "aws-cli/1.16.114 Python/3.6.7 Linux/4.15.0-45-generic botocore/1.12.104", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"nextToken": "eyJ2IjoiMiIsImMiOiIySG9DMStoZG5VdkNabldab2w3MUYvUWRXUDFTYWRCYTZmeGNUNVNtajdoUGtNbGJaVFpUcVhDNi9NbDRod0EreWt6dkhBZk1YY0NiNjdwQ2ZhbUIybE12YkJ6ZnRMWFA1alpHRWFwaFJldmQyeU1LV0Yza2xWQWVHeDNKQVdXT1hXK2tDZDZRS2pkaWJFYnF1YnpiemJybFNBbVYrVjZjdHZ5SWdlNEZQYnV4Y0FHbmt5Vjh3YUdlQTlwYTZuUzVnUjJST1N0cDh3PT0iLCJzIjoiMSJ9", "maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "b20fe2f9-b5cd-47b2-9dc8-cbbf854314e", "record_id": "flaws_cloudtrail:0000525:b20fe2f9-b5cd-47b2-9dc8-cbbf854314e", "row_index": 525, "timestamp": "2019-03-01T05:48:20Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "254.254.89.255", "user_agent": "aws-cli/1.16.114 Python/3.6.7 Linux/4.15.0-45-generic botocore/1.12.104", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1089, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "b20fe2f9-b5cd-47b2-9dc8-cbbf854314e", "eventTime": "2019-03-01T05:48:20Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "254.254.89.255", "userAgent": "aws-cli/1.16.114 Python/3.6.7 Linux/4.15.0-45-generic botocore/1.12.104", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"nextToken": "eyJ2IjoiMiIsImMiOiJ1RUE5eHpSckRzOWh2OTRuLzhEV2RzYlNhOURGdjdmeWZXcW1JTnduWDBScGRMK1VhVmRWNVg4eU9LUmQvcTBjSUtaRy9MQUpSTlk5TXRXRHJ2Z1BzaTU5aDJXdWMreWdyRGNMWUMxZjdYejVyL1AzRzlTVXRQQTJRc29wSGJjeE0rYm1PRDB0SGJ5TDI2UWtjWHNjNXUwZmduUm00dzlvaFhQQTBkdjhOcFlqMU5MOEN3Y3lkRUFqSU5JRFpUV2dKVFcybENEdUZtWnZVZz09IiwicyI6IjEifQ==", "maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "b20fe2f9-b5cd-47b2-9dc8-cbbf854314e", "record_id": "flaws_cloudtrail:0000526:b20fe2f9-b5cd-47b2-9dc8-cbbf854314e", "row_index": 526, "timestamp": "2019-03-01T05:48:20Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "254.254.89.255", "user_agent": "aws-cli/1.16.114 Python/3.6.7 Linux/4.15.0-45-generic botocore/1.12.104", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1089, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "b20fe2f9-b5cd-47b2-9dc8-cbbf854314e", "eventTime": "2019-03-01T05:48:20Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "254.254.89.255", "userAgent": "aws-cli/1.16.114 Python/3.6.7 Linux/4.15.0-45-generic botocore/1.12.104", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"nextToken": "eyJ2IjoiMiIsImMiOiJ1RUE5eHpSckRzOWh2OTRuLzhEV2RzYlNhOURGdjdmeWZXcW1JTnduWDBScGRMK1VhVmRWNVg4eU9LUmQvcTBjSUtaRy9MQUpSTlk5TXRXRHJ2Z1BzaTU5aDJXdWMreWdyRGNMWUMxZjdYejVyL1AzRzlTVXRQQTJRc29wSGJjeE0rYm1PRDB0SGJ5TDI2UWtjWHNjNXUwZmduUm00dzlvaFhQQTBkdjhOcFlqMU5MOEN3Y3lkRUFqSU5JRFpUV2dKVFcybENEdUZtWnZVZz09IiwicyI6IjEifQ==", "maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "9c082e18-4145-47ac-8051-6e92db2c4303", "record_id": "flaws_cloudtrail:0000527:9c082e18-4145-47ac-8051-6e92db2c4303", "row_index": 527, "timestamp": "2019-03-01T05:48:22Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "254.254.89.255", "user_agent": "aws-cli/1.16.114 Python/3.6.7 Linux/4.15.0-45-generic botocore/1.12.104", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1082, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "9c082e18-4145-47ac-8051-6e92db2c4303", "eventTime": "2019-03-01T05:48:22Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "254.254.89.255", "userAgent": "aws-cli/1.16.114 Python/3.6.7 Linux/4.15.0-45-generic botocore/1.12.104", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"nextToken": "eyJ2IjoiMiIsImMiOiJZSDRxZ3N2eFR0TDMrMCtGUTdCajIxUlpCQTN5ZWUycGplOHczN3lzQnJFQ2JFSU9MZ2xCaUIxdGdRYTNBYjhpTnVHSzlHS3pob0ZEWC9QK2JMSFo5WEpranNvNUlRcm5kSlZxbWtNazJXQnpYaDVBMXpDVWlUUm5mVTlaTTlQT012YUZscVl1MVhBVHpLNUpPUnVDQUNtYzhLR2RnQmROKy90TDdKekRkeFpPMFhscXE5bm5UTzQ3ZFJ3YUpLZ3o2dGtpcDFFMmJYbz0iLCJzIjoiMSJ9", "maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "9c082e18-4145-47ac-8051-6e92db2c4303", "record_id": "flaws_cloudtrail:0000528:9c082e18-4145-47ac-8051-6e92db2c4303", "row_index": 528, "timestamp": "2019-03-01T05:48:22Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "254.254.89.255", "user_agent": "aws-cli/1.16.114 Python/3.6.7 Linux/4.15.0-45-generic botocore/1.12.104", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1082, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "9c082e18-4145-47ac-8051-6e92db2c4303", "eventTime": "2019-03-01T05:48:22Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "254.254.89.255", "userAgent": "aws-cli/1.16.114 Python/3.6.7 Linux/4.15.0-45-generic botocore/1.12.104", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"nextToken": "eyJ2IjoiMiIsImMiOiJZSDRxZ3N2eFR0TDMrMCtGUTdCajIxUlpCQTN5ZWUycGplOHczN3lzQnJFQ2JFSU9MZ2xCaUIxdGdRYTNBYjhpTnVHSzlHS3pob0ZEWC9QK2JMSFo5WEpranNvNUlRcm5kSlZxbWtNazJXQnpYaDVBMXpDVWlUUm5mVTlaTTlQT012YUZscVl1MVhBVHpLNUpPUnVDQUNtYzhLR2RnQmROKy90TDdKekRkeFpPMFhscXE5bm5UTzQ3ZFJ3YUpLZ3o2dGtpcDFFMmJYbz0iLCJzIjoiMSJ9", "maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "e9754faf-03ba-4d3d-b4aa-1618aeb97f2a", "record_id": "flaws_cloudtrail:0000529:e9754faf-03ba-4d3d-b4aa-1618aeb97f2a", "row_index": 529, "timestamp": "2019-03-01T05:48:24Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "254.254.89.255", "user_agent": "aws-cli/1.16.114 Python/3.6.7 Linux/4.15.0-45-generic botocore/1.12.104", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1089, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "e9754faf-03ba-4d3d-b4aa-1618aeb97f2a", "eventTime": "2019-03-01T05:48:24Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "254.254.89.255", "userAgent": "aws-cli/1.16.114 Python/3.6.7 Linux/4.15.0-45-generic botocore/1.12.104", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"nextToken": "eyJ2IjoiMiIsImMiOiJOckljQ3RWSXk3aVlaWUg5Qmd6bVdSTWNsTE9GSHJET2dEbkRPZTA3SURJdUxHMnRVR0xMbFZ0YWZpUGh1aVo5cmwyNWhVSEplU3ZXWS9QU1g0QnF3TFNRbkx5OXlSb0JLQjJZbjVsZGd6VTJiOTRaS1YvQkJkSm50aTdqd2EyQmphZTZqYVRSTURJZkc1YjhtQUZISmhDVEtwYXROU1VnK3VpaC9sTTZmMkxYVm1NOVZ4TjN6UmdPQ3RyOWREVE9QU293Y0hOMEt1TkdWUT09IiwicyI6IjEifQ==", "maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "e9754faf-03ba-4d3d-b4aa-1618aeb97f2a", "record_id": "flaws_cloudtrail:0000530:e9754faf-03ba-4d3d-b4aa-1618aeb97f2a", "row_index": 530, "timestamp": "2019-03-01T05:48:24Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "254.254.89.255", "user_agent": "aws-cli/1.16.114 Python/3.6.7 Linux/4.15.0-45-generic botocore/1.12.104", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1089, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "e9754faf-03ba-4d3d-b4aa-1618aeb97f2a", "eventTime": "2019-03-01T05:48:24Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "254.254.89.255", "userAgent": "aws-cli/1.16.114 Python/3.6.7 Linux/4.15.0-45-generic botocore/1.12.104", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"nextToken": "eyJ2IjoiMiIsImMiOiJOckljQ3RWSXk3aVlaWUg5Qmd6bVdSTWNsTE9GSHJET2dEbkRPZTA3SURJdUxHMnRVR0xMbFZ0YWZpUGh1aVo5cmwyNWhVSEplU3ZXWS9QU1g0QnF3TFNRbkx5OXlSb0JLQjJZbjVsZGd6VTJiOTRaS1YvQkJkSm50aTdqd2EyQmphZTZqYVRSTURJZkc1YjhtQUZISmhDVEtwYXROU1VnK3VpaC9sTTZmMkxYVm1NOVZ4TjN6UmdPQ3RyOWREVE9QU293Y0hOMEt1TkdWUT09IiwicyI6IjEifQ==", "maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "fa9aeb77-5446-41a4-84d6-5e463f12ba80", "record_id": "flaws_cloudtrail:0000531:fa9aeb77-5446-41a4-84d6-5e463f12ba80", "row_index": 531, "timestamp": "2019-03-01T05:48:25Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "254.254.89.255", "user_agent": "aws-cli/1.16.114 Python/3.6.7 Linux/4.15.0-45-generic botocore/1.12.104", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1090, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "fa9aeb77-5446-41a4-84d6-5e463f12ba80", "eventTime": "2019-03-01T05:48:25Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "254.254.89.255", "userAgent": "aws-cli/1.16.114 Python/3.6.7 Linux/4.15.0-45-generic botocore/1.12.104", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"nextToken": "eyJ2IjoiMiIsImMiOiJNTGtmQ01jWWhKSEdBYlgraktlZGo3amwrNng4MitsRDhoWXI4czU1bVFRRlVURmhienBEQmFibmNFVy92VHRxMUx0OFdWWmtUWW5jc29QV3h2OGduMm5GcFE3MWxoQlhVeFQrUkM3cVdxTVUwWDdtWkUxMmtUWlZNMWV5U1hldGpZVWwrR3lScXcvQlJvU29nTkhpUTdQVWFUMVN2Vmx6U0kvd2NmK0J2b2F1L0oyTTdDeERTU1VSeno1MnNveWtKbW9iVkkyZE1Cdm9vUT09IiwicyI6IjEifQ==", "maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "fa9aeb77-5446-41a4-84d6-5e463f12ba80", "record_id": "flaws_cloudtrail:0000532:fa9aeb77-5446-41a4-84d6-5e463f12ba80", "row_index": 532, "timestamp": "2019-03-01T05:48:25Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "254.254.89.255", "user_agent": "aws-cli/1.16.114 Python/3.6.7 Linux/4.15.0-45-generic botocore/1.12.104", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1090, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "fa9aeb77-5446-41a4-84d6-5e463f12ba80", "eventTime": "2019-03-01T05:48:25Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "254.254.89.255", "userAgent": "aws-cli/1.16.114 Python/3.6.7 Linux/4.15.0-45-generic botocore/1.12.104", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"nextToken": "eyJ2IjoiMiIsImMiOiJNTGtmQ01jWWhKSEdBYlgraktlZGo3amwrNng4MitsRDhoWXI4czU1bVFRRlVURmhienBEQmFibmNFVy92VHRxMUx0OFdWWmtUWW5jc29QV3h2OGduMm5GcFE3MWxoQlhVeFQrUkM3cVdxTVUwWDdtWkUxMmtUWlZNMWV5U1hldGpZVWwrR3lScXcvQlJvU29nTkhpUTdQVWFUMVN2Vmx6U0kvd2NmK0J2b2F1L0oyTTdDeERTU1VSeno1MnNveWtKbW9iVkkyZE1Cdm9vUT09IiwicyI6IjEifQ==", "maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "4e7e9ec9-48ad-4f90-963a-48837a0b0814", "record_id": "flaws_cloudtrail:0000533:4e7e9ec9-48ad-4f90-963a-48837a0b0814", "row_index": 533, "timestamp": "2019-03-01T05:48:27Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "254.254.89.255", "user_agent": "aws-cli/1.16.114 Python/3.6.7 Linux/4.15.0-45-generic botocore/1.12.104", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1082, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "4e7e9ec9-48ad-4f90-963a-48837a0b0814", "eventTime": "2019-03-01T05:48:27Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "254.254.89.255", "userAgent": "aws-cli/1.16.114 Python/3.6.7 Linux/4.15.0-45-generic botocore/1.12.104", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"nextToken": "eyJ2IjoiMiIsImMiOiJtYTM3cWNpd3BERnNrSUhwdVNrQnd5NFNNTmovblJocTd2Ujl4OWRPVVppZ3FHS09lbVFGWEZ1UFdpVXhkeUJJQ1BnUWNES1AwMlFNQVViczJ0WTh1Si9nUWJSWnJCbmpvZGRGZDVCWGVXOWhFVklhcWRnNE0zV2ZrZUZnU2hVSEE3WWhTc3NwVzY3UGM2L0FGRjJidEl2Ylg1eGFNUmFSQ01JU0Z5QXZsT2szU1hpNzh2ZTZJaEtjVCtTeXRjcXFFTEtJZUJ2TzBwST0iLCJzIjoiMSJ9", "maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "4e7e9ec9-48ad-4f90-963a-48837a0b0814", "record_id": "flaws_cloudtrail:0000534:4e7e9ec9-48ad-4f90-963a-48837a0b0814", "row_index": 534, "timestamp": "2019-03-01T05:48:27Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "254.254.89.255", "user_agent": "aws-cli/1.16.114 Python/3.6.7 Linux/4.15.0-45-generic botocore/1.12.104", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1082, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "4e7e9ec9-48ad-4f90-963a-48837a0b0814", "eventTime": "2019-03-01T05:48:27Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "254.254.89.255", "userAgent": "aws-cli/1.16.114 Python/3.6.7 Linux/4.15.0-45-generic botocore/1.12.104", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"nextToken": "eyJ2IjoiMiIsImMiOiJtYTM3cWNpd3BERnNrSUhwdVNrQnd5NFNNTmovblJocTd2Ujl4OWRPVVppZ3FHS09lbVFGWEZ1UFdpVXhkeUJJQ1BnUWNES1AwMlFNQVViczJ0WTh1Si9nUWJSWnJCbmpvZGRGZDVCWGVXOWhFVklhcWRnNE0zV2ZrZUZnU2hVSEE3WWhTc3NwVzY3UGM2L0FGRjJidEl2Ylg1eGFNUmFSQ01JU0Z5QXZsT2szU1hpNzh2ZTZJaEtjVCtTeXRjcXFFTEtJZUJ2TzBwST0iLCJzIjoiMSJ9", "maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "21fde0e8-64dc-4554-8ab3-d541a70942", "record_id": "flaws_cloudtrail:0000535:21fde0e8-64dc-4554-8ab3-d541a70942", "row_index": 535, "timestamp": "2019-03-01T05:48:30Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "254.254.89.255", "user_agent": "aws-cli/1.16.114 Python/3.6.7 Linux/4.15.0-45-generic botocore/1.12.104", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1089, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "21fde0e8-64dc-4554-8ab3-d541a70942", "eventTime": "2019-03-01T05:48:30Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "254.254.89.255", "userAgent": "aws-cli/1.16.114 Python/3.6.7 Linux/4.15.0-45-generic botocore/1.12.104", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"nextToken": "eyJ2IjoiMiIsImMiOiJVaHNER1o2cHM2MHJ0b3dxRnVvUnl3c0NPTHZQcUdhMzhrb2hNejUzaDBWQnFWR3h2UWc0cEJLRnExZFhjZGNEaDRDRmdYY1JlRjNtcFF4ZVNCb0hhYVFNSDJKdDQ1Y0VXL0ZyM1dKQ2pDeWJwazBsLzhuemFqSzdSdkdabGcvR1Q1MVNtU0Q5WjJERUxXd2t1YkhzQWpxZEkrTG43VkJrUmhxbmtPT0Z6UmdiK0dPZXdaYXYvYWlsdjlocGNOYTBpbE9jVlpJbzdBVzN0QT09IiwicyI6IjEifQ==", "maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "21fde0e8-64dc-4554-8ab3-d541a70942", "record_id": "flaws_cloudtrail:0000536:21fde0e8-64dc-4554-8ab3-d541a70942", "row_index": 536, "timestamp": "2019-03-01T05:48:30Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "254.254.89.255", "user_agent": "aws-cli/1.16.114 Python/3.6.7 Linux/4.15.0-45-generic botocore/1.12.104", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1089, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "21fde0e8-64dc-4554-8ab3-d541a70942", "eventTime": "2019-03-01T05:48:30Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "254.254.89.255", "userAgent": "aws-cli/1.16.114 Python/3.6.7 Linux/4.15.0-45-generic botocore/1.12.104", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"nextToken": "eyJ2IjoiMiIsImMiOiJVaHNER1o2cHM2MHJ0b3dxRnVvUnl3c0NPTHZQcUdhMzhrb2hNejUzaDBWQnFWR3h2UWc0cEJLRnExZFhjZGNEaDRDRmdYY1JlRjNtcFF4ZVNCb0hhYVFNSDJKdDQ1Y0VXL0ZyM1dKQ2pDeWJwazBsLzhuemFqSzdSdkdabGcvR1Q1MVNtU0Q5WjJERUxXd2t1YkhzQWpxZEkrTG43VkJrUmhxbmtPT0Z6UmdiK0dPZXdaYXYvYWlsdjlocGNOYTBpbE9jVlpJbzdBVzN0QT09IiwicyI6IjEifQ==", "maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "c441004-b761-45f9-b890-444fc5acea3d", "record_id": "flaws_cloudtrail:0000537:c441004-b761-45f9-b890-444fc5acea3d", "row_index": 537, "timestamp": "2019-03-01T05:48:32Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "254.254.89.255", "user_agent": "aws-cli/1.16.114 Python/3.6.7 Linux/4.15.0-45-generic botocore/1.12.104", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1089, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "c441004-b761-45f9-b890-444fc5acea3d", "eventTime": "2019-03-01T05:48:32Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "254.254.89.255", "userAgent": "aws-cli/1.16.114 Python/3.6.7 Linux/4.15.0-45-generic botocore/1.12.104", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"nextToken": "eyJ2IjoiMiIsImMiOiJZK2tqZHNERnF2dGR4aTFyKzNXdCtuQTFWYzd1SVIxV2pzeWw5YXZKeGNmdXc2R1cvMnlVWlhCdjBZSzFLWEJqU0RIRFFVME51aU1TdnVjY0ZwZzZPeDFoaU9XNlpCZGVnbGJoTWFOWU1ZbnJwU24xWWZUV3ZlR2o1ZXZzRER3V1c1VWdHeFZWZzZxTER5QzB1OFlsNDFTMi8wL0dNWnhwYmJENmZwVUVubUtCcFVoelFiMXFTQlVtWjFBbCs4ZGxkS1pWV3FxNEZ4VTkzQT09IiwicyI6IjEifQ==", "maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "c441004-b761-45f9-b890-444fc5acea3d", "record_id": "flaws_cloudtrail:0000538:c441004-b761-45f9-b890-444fc5acea3d", "row_index": 538, "timestamp": "2019-03-01T05:48:32Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "254.254.89.255", "user_agent": "aws-cli/1.16.114 Python/3.6.7 Linux/4.15.0-45-generic botocore/1.12.104", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1089, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "c441004-b761-45f9-b890-444fc5acea3d", "eventTime": "2019-03-01T05:48:32Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "254.254.89.255", "userAgent": "aws-cli/1.16.114 Python/3.6.7 Linux/4.15.0-45-generic botocore/1.12.104", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"nextToken": "eyJ2IjoiMiIsImMiOiJZK2tqZHNERnF2dGR4aTFyKzNXdCtuQTFWYzd1SVIxV2pzeWw5YXZKeGNmdXc2R1cvMnlVWlhCdjBZSzFLWEJqU0RIRFFVME51aU1TdnVjY0ZwZzZPeDFoaU9XNlpCZGVnbGJoTWFOWU1ZbnJwU24xWWZUV3ZlR2o1ZXZzRER3V1c1VWdHeFZWZzZxTER5QzB1OFlsNDFTMi8wL0dNWnhwYmJENmZwVUVubUtCcFVoelFiMXFTQlVtWjFBbCs4ZGxkS1pWV3FxNEZ4VTkzQT09IiwicyI6IjEifQ==", "maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "294adbd9-ec72-4fdd-8a20-b7392d1545ce", "record_id": "flaws_cloudtrail:0000539:294adbd9-ec72-4fdd-8a20-b7392d1545ce", "row_index": 539, "timestamp": "2019-03-01T05:48:34Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "254.254.89.255", "user_agent": "aws-cli/1.16.114 Python/3.6.7 Linux/4.15.0-45-generic botocore/1.12.104", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1090, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "294adbd9-ec72-4fdd-8a20-b7392d1545ce", "eventTime": "2019-03-01T05:48:34Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "254.254.89.255", "userAgent": "aws-cli/1.16.114 Python/3.6.7 Linux/4.15.0-45-generic botocore/1.12.104", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"nextToken": "eyJ2IjoiMiIsImMiOiJJREZjSWNFSXUwbS9PekRXK3BPZGg0OTk1SUFZTDJnaWlteEt4M2NFY1JzR3M5YTFwZld0bXVlaFdmbTRuT2NBcjl5dy9VZXNOcXNIQks4WWhCSzE3Mkx6Y1A3STJ1SXF2ZC96VVpYTDFlTENIeFV5ZWZOSS9tWUJQSmN0cDc3cmEzV25UV1JYRG14NXhYeXQyTVQ5b2RYYkFwUmJWK3hEZ0c5MkhGUGc0d2ZTNWkvMGxXQjFKaldaWWtlSGpZblVMVjBWZ0hvTGhkbXpidz09IiwicyI6IjEifQ==", "maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "294adbd9-ec72-4fdd-8a20-b7392d1545ce", "record_id": "flaws_cloudtrail:0000540:294adbd9-ec72-4fdd-8a20-b7392d1545ce", "row_index": 540, "timestamp": "2019-03-01T05:48:34Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "254.254.89.255", "user_agent": "aws-cli/1.16.114 Python/3.6.7 Linux/4.15.0-45-generic botocore/1.12.104", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1090, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "294adbd9-ec72-4fdd-8a20-b7392d1545ce", "eventTime": "2019-03-01T05:48:34Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "254.254.89.255", "userAgent": "aws-cli/1.16.114 Python/3.6.7 Linux/4.15.0-45-generic botocore/1.12.104", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"nextToken": "eyJ2IjoiMiIsImMiOiJJREZjSWNFSXUwbS9PekRXK3BPZGg0OTk1SUFZTDJnaWlteEt4M2NFY1JzR3M5YTFwZld0bXVlaFdmbTRuT2NBcjl5dy9VZXNOcXNIQks4WWhCSzE3Mkx6Y1A3STJ1SXF2ZC96VVpYTDFlTENIeFV5ZWZOSS9tWUJQSmN0cDc3cmEzV25UV1JYRG14NXhYeXQyTVQ5b2RYYkFwUmJWK3hEZ0c5MkhGUGc0d2ZTNWkvMGxXQjFKaldaWWtlSGpZblVMVjBWZ0hvTGhkbXpidz09IiwicyI6IjEifQ==", "maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "f0c3e780-c4bd-48ce-ade1-27f52d930dd6", "record_id": "flaws_cloudtrail:0000541:f0c3e780-c4bd-48ce-ade1-27f52d930dd6", "row_index": 541, "timestamp": "2019-03-01T05:48:37Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "254.254.89.255", "user_agent": "aws-cli/1.16.114 Python/3.6.7 Linux/4.15.0-45-generic botocore/1.12.104", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1089, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "f0c3e780-c4bd-48ce-ade1-27f52d930dd6", "eventTime": "2019-03-01T05:48:37Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "254.254.89.255", "userAgent": "aws-cli/1.16.114 Python/3.6.7 Linux/4.15.0-45-generic botocore/1.12.104", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"nextToken": "eyJ2IjoiMiIsImMiOiIzT09Bcks0aWh4bE9BdFR3c0pWZnQ2dTVITFlsZjhpV1I0emdaZDNadFZNdzJ0eitPd1RJSDYyOVZDMExQVDF2Y0hySXNqYVNyRC92RHUwVDlYK3IwbFpMM2V6cFRWYVpKQXNlVUw3dUVjaDJwazJQVGNON1ZyeTRobmJrSmNpcGFjQ3JPSGxURXlCL2N3aW42SUVGZGd0ekxiUWNMT0xHaUFDS0p4ZzZ3ZkwzVk5uQjRyeTU4di82N08vVzVXeWlHZWpVTkxPZkcwMldxUT09IiwicyI6IjEifQ==", "maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "f0c3e780-c4bd-48ce-ade1-27f52d930dd6", "record_id": "flaws_cloudtrail:0000542:f0c3e780-c4bd-48ce-ade1-27f52d930dd6", "row_index": 542, "timestamp": "2019-03-01T05:48:37Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "254.254.89.255", "user_agent": "aws-cli/1.16.114 Python/3.6.7 Linux/4.15.0-45-generic botocore/1.12.104", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1089, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "f0c3e780-c4bd-48ce-ade1-27f52d930dd6", "eventTime": "2019-03-01T05:48:37Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "254.254.89.255", "userAgent": "aws-cli/1.16.114 Python/3.6.7 Linux/4.15.0-45-generic botocore/1.12.104", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"nextToken": "eyJ2IjoiMiIsImMiOiIzT09Bcks0aWh4bE9BdFR3c0pWZnQ2dTVITFlsZjhpV1I0emdaZDNadFZNdzJ0eitPd1RJSDYyOVZDMExQVDF2Y0hySXNqYVNyRC92RHUwVDlYK3IwbFpMM2V6cFRWYVpKQXNlVUw3dUVjaDJwazJQVGNON1ZyeTRobmJrSmNpcGFjQ3JPSGxURXlCL2N3aW42SUVGZGd0ekxiUWNMT0xHaUFDS0p4ZzZ3ZkwzVk5uQjRyeTU4di82N08vVzVXeWlHZWpVTkxPZkcwMldxUT09IiwicyI6IjEifQ==", "maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "45391d2-8229-4b9a-8b91-a465932", "record_id": "flaws_cloudtrail:0000543:45391d2-8229-4b9a-8b91-a465932", "row_index": 543, "timestamp": "2019-03-01T05:48:40Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "254.254.89.255", "user_agent": "aws-cli/1.16.114 Python/3.6.7 Linux/4.15.0-45-generic botocore/1.12.104", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1083, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "45391d2-8229-4b9a-8b91-a465932", "eventTime": "2019-03-01T05:48:40Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "254.254.89.255", "userAgent": "aws-cli/1.16.114 Python/3.6.7 Linux/4.15.0-45-generic botocore/1.12.104", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"nextToken": "eyJ2IjoiMiIsImMiOiJsMWtoYnJnQ1piazZ2ZHpGaUVMNGJINjYrbEE4a3JSTkZlRllkSXdXRGM4Rk9SL2JNSFFrbThqbVpvYWhjczBveHdTRXZ6VTIvZ3ljVUNPRTVzc3FFT05tUlA2dDJoYmxrcW5YVlpkMWVyMlVIT0dSRFpmU1ZUdUJmZXh3L3czZEZySlhLNSs0QkxUVnB1ZTAvZ2RvY1F6QklnNlI4ekZMbUt3YnByYnRvZ1dLU1BMQkEzdDZvejZaaUptajBpWjQyYTlHckhua0FJUXJxZz09IiwicyI6IjEifQ==", "maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "45391d2-8229-4b9a-8b91-a465932", "record_id": "flaws_cloudtrail:0000544:45391d2-8229-4b9a-8b91-a465932", "row_index": 544, "timestamp": "2019-03-01T05:48:40Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "254.254.89.255", "user_agent": "aws-cli/1.16.114 Python/3.6.7 Linux/4.15.0-45-generic botocore/1.12.104", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1083, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "45391d2-8229-4b9a-8b91-a465932", "eventTime": "2019-03-01T05:48:40Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "254.254.89.255", "userAgent": "aws-cli/1.16.114 Python/3.6.7 Linux/4.15.0-45-generic botocore/1.12.104", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"nextToken": "eyJ2IjoiMiIsImMiOiJsMWtoYnJnQ1piazZ2ZHpGaUVMNGJINjYrbEE4a3JSTkZlRllkSXdXRGM4Rk9SL2JNSFFrbThqbVpvYWhjczBveHdTRXZ6VTIvZ3ljVUNPRTVzc3FFT05tUlA2dDJoYmxrcW5YVlpkMWVyMlVIT0dSRFpmU1ZUdUJmZXh3L3czZEZySlhLNSs0QkxUVnB1ZTAvZ2RvY1F6QklnNlI4ekZMbUt3YnByYnRvZ1dLU1BMQkEzdDZvejZaaUptajBpWjQyYTlHckhua0FJUXJxZz09IiwicyI6IjEifQ==", "maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "c35dfa2c-8ac8-46aa-a0b8-070d430152", "record_id": "flaws_cloudtrail:0000545:c35dfa2c-8ac8-46aa-a0b8-070d430152", "row_index": 545, "timestamp": "2019-03-01T05:48:43Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "254.254.89.255", "user_agent": "aws-cli/1.16.114 Python/3.6.7 Linux/4.15.0-45-generic botocore/1.12.104", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1088, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "c35dfa2c-8ac8-46aa-a0b8-070d430152", "eventTime": "2019-03-01T05:48:43Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "254.254.89.255", "userAgent": "aws-cli/1.16.114 Python/3.6.7 Linux/4.15.0-45-generic botocore/1.12.104", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"nextToken": "eyJ2IjoiMiIsImMiOiIvUEVMU21wbStiRDh5eWJLRzAvWDJNNFBraDRpWGFmZFFvYzI4MFJEampWeStMOG9ObWtCMVBISllQUG5pR0FyZTVTalNnY3JGclRTMTZaMkFwRTFFTkhDUG4rTzJaY0tuUjQ0enlpeTVja1JoOHk4eEZ2SDBjRW8xanoyREZTSE5BTzBhaENxVWwvZlJmMzNyY3owK2ZJTWFkeXRCcFRlOE1mRHZaNXhhL2FuY2xFcHAzNUt2YTBHVDJIdG1naUo4T1VQZDRJUGJiMUdDdz09IiwicyI6IjEifQ==", "maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "c35dfa2c-8ac8-46aa-a0b8-070d430152", "record_id": "flaws_cloudtrail:0000546:c35dfa2c-8ac8-46aa-a0b8-070d430152", "row_index": 546, "timestamp": "2019-03-01T05:48:43Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "254.254.89.255", "user_agent": "aws-cli/1.16.114 Python/3.6.7 Linux/4.15.0-45-generic botocore/1.12.104", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1088, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "c35dfa2c-8ac8-46aa-a0b8-070d430152", "eventTime": "2019-03-01T05:48:43Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "254.254.89.255", "userAgent": "aws-cli/1.16.114 Python/3.6.7 Linux/4.15.0-45-generic botocore/1.12.104", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"nextToken": "eyJ2IjoiMiIsImMiOiIvUEVMU21wbStiRDh5eWJLRzAvWDJNNFBraDRpWGFmZFFvYzI4MFJEampWeStMOG9ObWtCMVBISllQUG5pR0FyZTVTalNnY3JGclRTMTZaMkFwRTFFTkhDUG4rTzJaY0tuUjQ0enlpeTVja1JoOHk4eEZ2SDBjRW8xanoyREZTSE5BTzBhaENxVWwvZlJmMzNyY3owK2ZJTWFkeXRCcFRlOE1mRHZaNXhhL2FuY2xFcHAzNUt2YTBHVDJIdG1naUo4T1VQZDRJUGJiMUdDdz09IiwicyI6IjEifQ==", "maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "fa1fe553-16e5-40d8-8833-1c321003c", "record_id": "flaws_cloudtrail:0000547:fa1fe553-16e5-40d8-8833-1c321003c", "row_index": 547, "timestamp": "2019-03-01T05:48:44Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "254.254.89.255", "user_agent": "aws-cli/1.16.114 Python/3.6.7 Linux/4.15.0-45-generic botocore/1.12.104", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1108, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "fa1fe553-16e5-40d8-8833-1c321003c", "eventTime": "2019-03-01T05:48:44Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "254.254.89.255", "userAgent": "aws-cli/1.16.114 Python/3.6.7 Linux/4.15.0-45-generic botocore/1.12.104", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"nextToken": "eyJ2IjoiMiIsImMiOiJXRWl1RGNiUEYyVGVKVVc1OVhCMXpmN050c0ZOR01GSWxLWC8yUlV0azJtaDFuR2wrbjlvRTZRdVV0YTRudjMyZVNxYmNrUTBNZksrRkhQQ3dUdnFJOHNlZVRmL1Q4SUIyNDQrWUQ1M2c1VXVYL2VTZC9GTHgrUkN1b2tLTFFWaVNTUjdDaUNnZ0VmNXh2amYxZlNGMHJzdml2UktUMEM3dXY3akh1aTZMdjIrRFIyWGRNQlM5TjFsc2JySGZrZlZoT004Tk1kTDk1RzRDdzZ0K1NyRFIwUFRLbHE5aEV3PSIsInMiOiIxIn0=", "maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "fa1fe553-16e5-40d8-8833-1c321003c", "record_id": "flaws_cloudtrail:0000548:fa1fe553-16e5-40d8-8833-1c321003c", "row_index": 548, "timestamp": "2019-03-01T05:48:44Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "254.254.89.255", "user_agent": "aws-cli/1.16.114 Python/3.6.7 Linux/4.15.0-45-generic botocore/1.12.104", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1108, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "fa1fe553-16e5-40d8-8833-1c321003c", "eventTime": "2019-03-01T05:48:44Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "254.254.89.255", "userAgent": "aws-cli/1.16.114 Python/3.6.7 Linux/4.15.0-45-generic botocore/1.12.104", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"nextToken": "eyJ2IjoiMiIsImMiOiJXRWl1RGNiUEYyVGVKVVc1OVhCMXpmN050c0ZOR01GSWxLWC8yUlV0azJtaDFuR2wrbjlvRTZRdVV0YTRudjMyZVNxYmNrUTBNZksrRkhQQ3dUdnFJOHNlZVRmL1Q4SUIyNDQrWUQ1M2c1VXVYL2VTZC9GTHgrUkN1b2tLTFFWaVNTUjdDaUNnZ0VmNXh2amYxZlNGMHJzdml2UktUMEM3dXY3akh1aTZMdjIrRFIyWGRNQlM5TjFsc2JySGZrZlZoT004Tk1kTDk1RzRDdzZ0K1NyRFIwUFRLbHE5aEV3PSIsInMiOiIxIn0=", "maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "bdb1cc08-13c6-4789-af29-6554df6b4691", "record_id": "flaws_cloudtrail:0000549:bdb1cc08-13c6-4789-af29-6554df6b4691", "row_index": 549, "timestamp": "2019-03-01T05:48:46Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "254.254.89.255", "user_agent": "aws-cli/1.16.114 Python/3.6.7 Linux/4.15.0-45-generic botocore/1.12.104", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1110, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "bdb1cc08-13c6-4789-af29-6554df6b4691", "eventTime": "2019-03-01T05:48:46Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "254.254.89.255", "userAgent": "aws-cli/1.16.114 Python/3.6.7 Linux/4.15.0-45-generic botocore/1.12.104", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"nextToken": "eyJ2IjoiMiIsImMiOiJRSjJrRXBvc05ZZWM2bit4SldJdmRMYytrT09LSDk0NTNqcVlFcjdDZG5FUzZ2N0o2YTF1Z0JkTnRUY1JrU1E2dm5WYjdXYytaMFNJZkVZNHJjWGVSd3I0OTliQ3lGclg5QzA5SXZJYkR3dHJ4MEVtK3NJRWtIZENpVURoTEU5MDJZa1VNWlRTaXZnenpBR2N0RUE3c1oxaFNKWm4zZm1DZE42SzRaMFdhQnpzNVNUOE5nS3ZadUdhTGZSOE9TUFRyR2dNczJmTTNVbkM5anVJUDY0U2VVcXVUR2pJY2E0PSIsInMiOiIxIn0=", "maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "c6d0a9c2-fd86-4aa5-986e-b9919ee9bcc8", "record_id": "flaws_cloudtrail:0000550:c6d0a9c2-fd86-4aa5-986e-b9919ee9bcc8", "row_index": 550, "timestamp": "2019-03-01T05:48:46Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "254.254.89.255", "user_agent": "aws-cli/1.16.114 Python/3.6.7 Linux/4.15.0-45-generic botocore/1.12.104", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1066, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "c6d0a9c2-fd86-4aa5-986e-b9919ee9bcc8", "eventTime": "2019-03-01T05:48:46Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "254.254.89.255", "userAgent": "aws-cli/1.16.114 Python/3.6.7 Linux/4.15.0-45-generic botocore/1.12.104", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"nextToken": "eyJ2IjoiMiIsImMiOiJJTEd5WnlJLzlqS2dETy9HNHdJakRwUTYvbTR6cE1EMDJmWkkrdWh1NWlScmtBeERUYzV2eGNJQ2VndldTTXRvWHhpS1FCSk94YThadEFKM1pzNXo3aElHcGtiOFlFSWhvTTNnb1BrM0Rsb0lZejNBZ3dCZHpsNEMvOVJwaHBnTHdHSVNVMFdzUUdpbU9vZkJYVVBYb3ZDdzgzaHdGNnpyYk4vd000QWRpdk1qOGNDMy9BYS9WN3VDWmJHemRicz0iLCJzIjoiMSJ9", "maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "bdb1cc08-13c6-4789-af29-6554df6b4691", "record_id": "flaws_cloudtrail:0000551:bdb1cc08-13c6-4789-af29-6554df6b4691", "row_index": 551, "timestamp": "2019-03-01T05:48:46Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "254.254.89.255", "user_agent": "aws-cli/1.16.114 Python/3.6.7 Linux/4.15.0-45-generic botocore/1.12.104", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1110, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "bdb1cc08-13c6-4789-af29-6554df6b4691", "eventTime": "2019-03-01T05:48:46Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "254.254.89.255", "userAgent": "aws-cli/1.16.114 Python/3.6.7 Linux/4.15.0-45-generic botocore/1.12.104", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"nextToken": "eyJ2IjoiMiIsImMiOiJRSjJrRXBvc05ZZWM2bit4SldJdmRMYytrT09LSDk0NTNqcVlFcjdDZG5FUzZ2N0o2YTF1Z0JkTnRUY1JrU1E2dm5WYjdXYytaMFNJZkVZNHJjWGVSd3I0OTliQ3lGclg5QzA5SXZJYkR3dHJ4MEVtK3NJRWtIZENpVURoTEU5MDJZa1VNWlRTaXZnenpBR2N0RUE3c1oxaFNKWm4zZm1DZE42SzRaMFdhQnpzNVNUOE5nS3ZadUdhTGZSOE9TUFRyR2dNczJmTTNVbkM5anVJUDY0U2VVcXVUR2pJY2E0PSIsInMiOiIxIn0=", "maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "c6d0a9c2-fd86-4aa5-986e-b9919ee9bcc8", "record_id": "flaws_cloudtrail:0000552:c6d0a9c2-fd86-4aa5-986e-b9919ee9bcc8", "row_index": 552, "timestamp": "2019-03-01T05:48:46Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "254.254.89.255", "user_agent": "aws-cli/1.16.114 Python/3.6.7 Linux/4.15.0-45-generic botocore/1.12.104", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1066, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "c6d0a9c2-fd86-4aa5-986e-b9919ee9bcc8", "eventTime": "2019-03-01T05:48:46Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "254.254.89.255", "userAgent": "aws-cli/1.16.114 Python/3.6.7 Linux/4.15.0-45-generic botocore/1.12.104", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"nextToken": "eyJ2IjoiMiIsImMiOiJJTEd5WnlJLzlqS2dETy9HNHdJakRwUTYvbTR6cE1EMDJmWkkrdWh1NWlScmtBeERUYzV2eGNJQ2VndldTTXRvWHhpS1FCSk94YThadEFKM1pzNXo3aElHcGtiOFlFSWhvTTNnb1BrM0Rsb0lZejNBZ3dCZHpsNEMvOVJwaHBnTHdHSVNVMFdzUUdpbU9vZkJYVVBYb3ZDdzgzaHdGNnpyYk4vd000QWRpdk1qOGNDMy9BYS9WN3VDWmJHemRicz0iLCJzIjoiMSJ9", "maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "dbdcbaf2-4095-4a31-bf4f-0b7afc2b5213", "record_id": "flaws_cloudtrail:0000553:dbdcbaf2-4095-4a31-bf4f-0b7afc2b5213", "row_index": 553, "timestamp": "2019-03-01T05:48:48Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "254.254.89.255", "user_agent": "aws-cli/1.16.114 Python/3.6.7 Linux/4.15.0-45-generic botocore/1.12.104", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1111, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "dbdcbaf2-4095-4a31-bf4f-0b7afc2b5213", "eventTime": "2019-03-01T05:48:48Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "254.254.89.255", "userAgent": "aws-cli/1.16.114 Python/3.6.7 Linux/4.15.0-45-generic botocore/1.12.104", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"nextToken": "eyJ2IjoiMiIsImMiOiJRM2ZRK1VGczFMMEZxeUdJN1pSbFllejAreElhYWh1VjNtOEVVUTZTRER0SThwZGZ2UG13QWpKVlkwcW5hUlF3SzMwQld6Q1RFem1MQnBBUnJGZFVzL2U0Rkl5U3hocm9OQjVmMUZ3Z2NKTE9iNE8yNkZQa0JmaXBDaWVQTkFjb3hsM1hnQkNmSTFxc3I3cmZGWmZuQ3I4ZG1pTGNIQ3RsU0FtaGxFeHArV0l6RHBEVjlXeFovWnMwc0J1cGpBdmdDdkt4SlZ5L1JNVDBmekZSdXB3VzEvTTNVZXQ4ZDRvPSIsInMiOiIxIn0=", "maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "dbdcbaf2-4095-4a31-bf4f-0b7afc2b5213", "record_id": "flaws_cloudtrail:0000554:dbdcbaf2-4095-4a31-bf4f-0b7afc2b5213", "row_index": 554, "timestamp": "2019-03-01T05:48:48Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "254.254.89.255", "user_agent": "aws-cli/1.16.114 Python/3.6.7 Linux/4.15.0-45-generic botocore/1.12.104", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1111, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "dbdcbaf2-4095-4a31-bf4f-0b7afc2b5213", "eventTime": "2019-03-01T05:48:48Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "254.254.89.255", "userAgent": "aws-cli/1.16.114 Python/3.6.7 Linux/4.15.0-45-generic botocore/1.12.104", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"nextToken": "eyJ2IjoiMiIsImMiOiJRM2ZRK1VGczFMMEZxeUdJN1pSbFllejAreElhYWh1VjNtOEVVUTZTRER0SThwZGZ2UG13QWpKVlkwcW5hUlF3SzMwQld6Q1RFem1MQnBBUnJGZFVzL2U0Rkl5U3hocm9OQjVmMUZ3Z2NKTE9iNE8yNkZQa0JmaXBDaWVQTkFjb3hsM1hnQkNmSTFxc3I3cmZGWmZuQ3I4ZG1pTGNIQ3RsU0FtaGxFeHArV0l6RHBEVjlXeFovWnMwc0J1cGpBdmdDdkt4SlZ5L1JNVDBmekZSdXB3VzEvTTNVZXQ4ZDRvPSIsInMiOiIxIn0=", "maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "c3a184685-c06a-4b7b-9237-9cb45e4086c0", "record_id": "flaws_cloudtrail:0000555:c3a184685-c06a-4b7b-9237-9cb45e4086c0", "row_index": 555, "timestamp": "2019-03-01T05:48:50Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "254.254.89.255", "user_agent": "aws-cli/1.16.114 Python/3.6.7 Linux/4.15.0-45-generic botocore/1.12.104", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1067, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "c3a184685-c06a-4b7b-9237-9cb45e4086c0", "eventTime": "2019-03-01T05:48:50Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "254.254.89.255", "userAgent": "aws-cli/1.16.114 Python/3.6.7 Linux/4.15.0-45-generic botocore/1.12.104", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"nextToken": "eyJ2IjoiMiIsImMiOiJaeEkwR3Vtcm9nUHh2MmVtS0lWRkoweEhnYTNpWXhQZGZ6MFRlMFdXcEt0Wm1pSzhDbnhyMSs2bnpGMEEwOE1McTRZL291Umt4cVlmZTM0SnhSVGVaVlVLdkhpRHB6UVFqSXp1K052Ym9ESU5MN0cxc1B0ZVhGRVRjajlBMEhEQVVxc08wSUVCS2Qraks1MmFrV2s2MnpQcE9PUW8wRFp4djdISDUyb0V4dUhNZXo4dCt6d25TeVplVEt2RGtEST0iLCJzIjoiMSJ9", "maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "c3a184685-c06a-4b7b-9237-9cb45e4086c0", "record_id": "flaws_cloudtrail:0000556:c3a184685-c06a-4b7b-9237-9cb45e4086c0", "row_index": 556, "timestamp": "2019-03-01T05:48:50Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "254.254.89.255", "user_agent": "aws-cli/1.16.114 Python/3.6.7 Linux/4.15.0-45-generic botocore/1.12.104", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1067, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "c3a184685-c06a-4b7b-9237-9cb45e4086c0", "eventTime": "2019-03-01T05:48:50Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "254.254.89.255", "userAgent": "aws-cli/1.16.114 Python/3.6.7 Linux/4.15.0-45-generic botocore/1.12.104", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"nextToken": "eyJ2IjoiMiIsImMiOiJaeEkwR3Vtcm9nUHh2MmVtS0lWRkoweEhnYTNpWXhQZGZ6MFRlMFdXcEt0Wm1pSzhDbnhyMSs2bnpGMEEwOE1McTRZL291Umt4cVlmZTM0SnhSVGVaVlVLdkhpRHB6UVFqSXp1K052Ym9ESU5MN0cxc1B0ZVhGRVRjajlBMEhEQVVxc08wSUVCS2Qraks1MmFrV2s2MnpQcE9PUW8wRFp4djdISDUyb0V4dUhNZXo4dCt6d25TeVplVEt2RGtEST0iLCJzIjoiMSJ9", "maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "2a318f06-ea6c-45a3-9721-3b7d9c608b44", "record_id": "flaws_cloudtrail:0000557:2a318f06-ea6c-45a3-9721-3b7d9c608b44", "row_index": 557, "timestamp": "2019-03-01T05:48:51Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "254.254.89.255", "user_agent": "aws-cli/1.16.114 Python/3.6.7 Linux/4.15.0-45-generic botocore/1.12.104", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1110, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "2a318f06-ea6c-45a3-9721-3b7d9c608b44", "eventTime": "2019-03-01T05:48:51Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "254.254.89.255", "userAgent": "aws-cli/1.16.114 Python/3.6.7 Linux/4.15.0-45-generic botocore/1.12.104", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"nextToken": "eyJ2IjoiMiIsImMiOiJNN0Y2bXRBR0dlM2lTMVRYUHhBSERJMFplMEk0cEExdFo4b3J4dUU5cFk3cDhKZHhGL0dxcXRuSVRadXhEekJiNndYeHdBSmdxY2E5dE5rZUxyS3FvQ2JuUEQ3V1ViV0lvZWN2RHVuRUhzdmNvRi9Vd0c2L3NwTkgvdk1KL1FCSGtQV0VoYVAxOGp1a2x3ZXBqbEdqbitNMlRiekJTSStkVDJTRjl5cmJIcDlxTjgwWXB0azF2ekQyeGsrQ3hkREM1aGQxR3hVQ1NrczNURU1od0g2YmpDYytqQ1B6VjJnPSIsInMiOiIxIn0=", "maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "2a318f06-ea6c-45a3-9721-3b7d9c608b44", "record_id": "flaws_cloudtrail:0000558:2a318f06-ea6c-45a3-9721-3b7d9c608b44", "row_index": 558, "timestamp": "2019-03-01T05:48:51Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "254.254.89.255", "user_agent": "aws-cli/1.16.114 Python/3.6.7 Linux/4.15.0-45-generic botocore/1.12.104", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1110, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "2a318f06-ea6c-45a3-9721-3b7d9c608b44", "eventTime": "2019-03-01T05:48:51Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "254.254.89.255", "userAgent": "aws-cli/1.16.114 Python/3.6.7 Linux/4.15.0-45-generic botocore/1.12.104", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"nextToken": "eyJ2IjoiMiIsImMiOiJNN0Y2bXRBR0dlM2lTMVRYUHhBSERJMFplMEk0cEExdFo4b3J4dUU5cFk3cDhKZHhGL0dxcXRuSVRadXhEekJiNndYeHdBSmdxY2E5dE5rZUxyS3FvQ2JuUEQ3V1ViV0lvZWN2RHVuRUhzdmNvRi9Vd0c2L3NwTkgvdk1KL1FCSGtQV0VoYVAxOGp1a2x3ZXBqbEdqbitNMlRiekJTSStkVDJTRjl5cmJIcDlxTjgwWXB0azF2ekQyeGsrQ3hkREM1aGQxR3hVQ1NrczNURU1od0g2YmpDYytqQ1B6VjJnPSIsInMiOiIxIn0=", "maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "c93dec7e-f77e-427f-b43e-2688932d7205", "record_id": "flaws_cloudtrail:0000559:c93dec7e-f77e-427f-b43e-2688932d7205", "row_index": 559, "timestamp": "2019-03-01T05:48:54Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "254.254.89.255", "user_agent": "aws-cli/1.16.114 Python/3.6.7 Linux/4.15.0-45-generic botocore/1.12.104", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1110, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "c93dec7e-f77e-427f-b43e-2688932d7205", "eventTime": "2019-03-01T05:48:54Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "254.254.89.255", "userAgent": "aws-cli/1.16.114 Python/3.6.7 Linux/4.15.0-45-generic botocore/1.12.104", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"nextToken": "eyJ2IjoiMiIsImMiOiJ0TDNaNG9Ub2lWWXZ1RE94NjlockZNTmdReHhSdTBTemRLNVNyYmppb0N5WUt6R2J4K3JhMnl0R0pCUWtUdUVCZ3BZLy9OdWRtWDVZVkJBclNFSitQbUowS0xQQWdhV3EwUnc3OVBoTGFKZmZjcmoxUGlKRmRtT1Z0MFQ3bVFQbC9nS3ptbHFEekt2QXQrcTM2TEZkaFV6WEE1VW5wUXVKV0FTMEhHRjJOemVmZURaNGYvMnFNeHcyRUh2aXVpZnZXMUZHQzROcm1PclJRcVVqeVRQc1lhZ3BWb2NuTGZRPSIsInMiOiIxIn0=", "maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "636edd37-c9df-4955-8c7b-f96c31245692", "record_id": "flaws_cloudtrail:0000560:636edd37-c9df-4955-8c7b-f96c31245692", "row_index": 560, "timestamp": "2019-03-01T05:48:54Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "254.254.89.255", "user_agent": "aws-cli/1.16.114 Python/3.6.7 Linux/4.15.0-45-generic botocore/1.12.104", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1066, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "636edd37-c9df-4955-8c7b-f96c31245692", "eventTime": "2019-03-01T05:48:54Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "254.254.89.255", "userAgent": "aws-cli/1.16.114 Python/3.6.7 Linux/4.15.0-45-generic botocore/1.12.104", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"nextToken": "eyJ2IjoiMiIsImMiOiJjbkN1bjF3d2ZFOEh6VWpsTjVCZ2cxNTVNTUhwTmtOaFFTUnhuVDYvSDB6R000MTZMQ2FZaFRSSnVySUdBNlhPMFJvU0hCZlFkSE5XZzBwOUFKcmk3SFlJb2F1NW9jcENpQ0czTGd2UDUzK0ZsT2tKQ3Y3Sk5JUm9PejhTYzJBYk42N2RQR1BmWVJqN2xlbFdLLzF6Z3JjZkluOWYwR0dSWWFhVHBiSElSUGg2M2lhV0lqenM5TEFkMEo4R2I4OD0iLCJzIjoiMSJ9", "maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "c93dec7e-f77e-427f-b43e-2688932d7205", "record_id": "flaws_cloudtrail:0000561:c93dec7e-f77e-427f-b43e-2688932d7205", "row_index": 561, "timestamp": "2019-03-01T05:48:54Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "254.254.89.255", "user_agent": "aws-cli/1.16.114 Python/3.6.7 Linux/4.15.0-45-generic botocore/1.12.104", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1110, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "c93dec7e-f77e-427f-b43e-2688932d7205", "eventTime": "2019-03-01T05:48:54Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "254.254.89.255", "userAgent": "aws-cli/1.16.114 Python/3.6.7 Linux/4.15.0-45-generic botocore/1.12.104", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"nextToken": "eyJ2IjoiMiIsImMiOiJ0TDNaNG9Ub2lWWXZ1RE94NjlockZNTmdReHhSdTBTemRLNVNyYmppb0N5WUt6R2J4K3JhMnl0R0pCUWtUdUVCZ3BZLy9OdWRtWDVZVkJBclNFSitQbUowS0xQQWdhV3EwUnc3OVBoTGFKZmZjcmoxUGlKRmRtT1Z0MFQ3bVFQbC9nS3ptbHFEekt2QXQrcTM2TEZkaFV6WEE1VW5wUXVKV0FTMEhHRjJOemVmZURaNGYvMnFNeHcyRUh2aXVpZnZXMUZHQzROcm1PclJRcVVqeVRQc1lhZ3BWb2NuTGZRPSIsInMiOiIxIn0=", "maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "636edd37-c9df-4955-8c7b-f96c31245692", "record_id": "flaws_cloudtrail:0000562:636edd37-c9df-4955-8c7b-f96c31245692", "row_index": 562, "timestamp": "2019-03-01T05:48:54Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "254.254.89.255", "user_agent": "aws-cli/1.16.114 Python/3.6.7 Linux/4.15.0-45-generic botocore/1.12.104", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1066, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "636edd37-c9df-4955-8c7b-f96c31245692", "eventTime": "2019-03-01T05:48:54Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "254.254.89.255", "userAgent": "aws-cli/1.16.114 Python/3.6.7 Linux/4.15.0-45-generic botocore/1.12.104", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"nextToken": "eyJ2IjoiMiIsImMiOiJjbkN1bjF3d2ZFOEh6VWpsTjVCZ2cxNTVNTUhwTmtOaFFTUnhuVDYvSDB6R000MTZMQ2FZaFRSSnVySUdBNlhPMFJvU0hCZlFkSE5XZzBwOUFKcmk3SFlJb2F1NW9jcENpQ0czTGd2UDUzK0ZsT2tKQ3Y3Sk5JUm9PejhTYzJBYk42N2RQR1BmWVJqN2xlbFdLLzF6Z3JjZkluOWYwR0dSWWFhVHBiSElSUGg2M2lhV0lqenM5TEFkMEo4R2I4OD0iLCJzIjoiMSJ9", "maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "ced211c1-809a-42ef-82ff-b63e5852ba08", "record_id": "flaws_cloudtrail:0000563:ced211c1-809a-42ef-82ff-b63e5852ba08", "row_index": 563, "timestamp": "2019-03-01T05:48:56Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "254.254.89.255", "user_agent": "aws-cli/1.16.114 Python/3.6.7 Linux/4.15.0-45-generic botocore/1.12.104", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1066, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "ced211c1-809a-42ef-82ff-b63e5852ba08", "eventTime": "2019-03-01T05:48:56Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "254.254.89.255", "userAgent": "aws-cli/1.16.114 Python/3.6.7 Linux/4.15.0-45-generic botocore/1.12.104", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"nextToken": "eyJ2IjoiMiIsImMiOiJNS2h0aWRaeUV6WnJtMitEdlNLcmFjK2k3ZWVseVJadENiQWNtUzZ0eUNGcmpkaHRlOW9QK1MwTkxHVkw1VUJiRG53bFh0SFhJWnRMMVFMdE5UYmx2MGlaSFJRNjE2R01USE1Ub1NwcnlTaWI5NHVTWE1YQitXK3N6TmVVeVF1aVJ1R0lrcWFxdDZHbWQyMzlxZjYwSUlPVXY1THZWZm5iTGJIbEdyUmZFYUdFN1V1VkVlcEg4bzJES3cvM3M2RT0iLCJzIjoiMSJ9", "maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "ced211c1-809a-42ef-82ff-b63e5852ba08", "record_id": "flaws_cloudtrail:0000564:ced211c1-809a-42ef-82ff-b63e5852ba08", "row_index": 564, "timestamp": "2019-03-01T05:48:56Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "254.254.89.255", "user_agent": "aws-cli/1.16.114 Python/3.6.7 Linux/4.15.0-45-generic botocore/1.12.104", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1066, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "ced211c1-809a-42ef-82ff-b63e5852ba08", "eventTime": "2019-03-01T05:48:56Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "254.254.89.255", "userAgent": "aws-cli/1.16.114 Python/3.6.7 Linux/4.15.0-45-generic botocore/1.12.104", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"nextToken": "eyJ2IjoiMiIsImMiOiJNS2h0aWRaeUV6WnJtMitEdlNLcmFjK2k3ZWVseVJadENiQWNtUzZ0eUNGcmpkaHRlOW9QK1MwTkxHVkw1VUJiRG53bFh0SFhJWnRMMVFMdE5UYmx2MGlaSFJRNjE2R01USE1Ub1NwcnlTaWI5NHVTWE1YQitXK3N6TmVVeVF1aVJ1R0lrcWFxdDZHbWQyMzlxZjYwSUlPVXY1THZWZm5iTGJIbEdyUmZFYUdFN1V1VkVlcEg4bzJES3cvM3M2RT0iLCJzIjoiMSJ9", "maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "42badcf3-2e63-404e-b9c7-a5426f5b46bd", "record_id": "flaws_cloudtrail:0000565:42badcf3-2e63-404e-b9c7-a5426f5b46bd", "row_index": 565, "timestamp": "2019-03-01T05:51:18Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "254.254.89.255", "user_agent": "aws-cli/1.16.114 Python/3.6.7 Linux/4.15.0-45-generic botocore/1.12.104", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 762, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "42badcf3-2e63-404e-b9c7-a5426f5b46bd", "eventTime": "2019-03-01T05:51:18Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "254.254.89.255", "userAgent": "aws-cli/1.16.114 Python/3.6.7 Linux/4.15.0-45-generic botocore/1.12.104", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "42badcf3-2e63-404e-b9c7-a5426f5b46bd", "record_id": "flaws_cloudtrail:0000566:42badcf3-2e63-404e-b9c7-a5426f5b46bd", "row_index": 566, "timestamp": "2019-03-01T05:51:18Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "254.254.89.255", "user_agent": "aws-cli/1.16.114 Python/3.6.7 Linux/4.15.0-45-generic botocore/1.12.104", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 762, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "42badcf3-2e63-404e-b9c7-a5426f5b46bd", "eventTime": "2019-03-01T05:51:18Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "254.254.89.255", "userAgent": "aws-cli/1.16.114 Python/3.6.7 Linux/4.15.0-45-generic botocore/1.12.104", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "cce063bf-7a8a-48dc-8fdd-e451681e2b31", "record_id": "flaws_cloudtrail:0000567:cce063bf-7a8a-48dc-8fdd-e451681e2b31", "row_index": 567, "timestamp": "2019-03-01T05:51:20Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "254.254.89.255", "user_agent": "aws-cli/1.16.114 Python/3.6.7 Linux/4.15.0-45-generic botocore/1.12.104", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1090, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "cce063bf-7a8a-48dc-8fdd-e451681e2b31", "eventTime": "2019-03-01T05:51:20Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "254.254.89.255", "userAgent": "aws-cli/1.16.114 Python/3.6.7 Linux/4.15.0-45-generic botocore/1.12.104", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"nextToken": "eyJ2IjoiMiIsImMiOiJENlN3UHJxVmczN0x4WnNDZ0hFczJJaEhzRXo1WTRuTW1DZGlYdW1IcTN6bXFVdTBWZllWSHk4b2NBTUhTOVlLVk5GZkZ3RWNzSEhFMzBSQW5nbXpQa29jTUFUb2ZGSlhOU3B6cTVKN2RBd2tGUmdrMWZBRTVjWU9qMUdNUFJyMjV3c0tXQ3ZPQ2xOL0N0WXB4bkJNczhpWkNIVjQ1MEowbFEyWkZ2NXR1ZlViVndSUE1JSnZKcDd4T1B0cW85WkE0REtHdFZ1MnN0TkorUT09IiwicyI6IjEifQ==", "maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "cce063bf-7a8a-48dc-8fdd-e451681e2b31", "record_id": "flaws_cloudtrail:0000568:cce063bf-7a8a-48dc-8fdd-e451681e2b31", "row_index": 568, "timestamp": "2019-03-01T05:51:20Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "254.254.89.255", "user_agent": "aws-cli/1.16.114 Python/3.6.7 Linux/4.15.0-45-generic botocore/1.12.104", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1090, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "cce063bf-7a8a-48dc-8fdd-e451681e2b31", "eventTime": "2019-03-01T05:51:20Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "254.254.89.255", "userAgent": "aws-cli/1.16.114 Python/3.6.7 Linux/4.15.0-45-generic botocore/1.12.104", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"nextToken": "eyJ2IjoiMiIsImMiOiJENlN3UHJxVmczN0x4WnNDZ0hFczJJaEhzRXo1WTRuTW1DZGlYdW1IcTN6bXFVdTBWZllWSHk4b2NBTUhTOVlLVk5GZkZ3RWNzSEhFMzBSQW5nbXpQa29jTUFUb2ZGSlhOU3B6cTVKN2RBd2tGUmdrMWZBRTVjWU9qMUdNUFJyMjV3c0tXQ3ZPQ2xOL0N0WXB4bkJNczhpWkNIVjQ1MEowbFEyWkZ2NXR1ZlViVndSUE1JSnZKcDd4T1B0cW85WkE0REtHdFZ1MnN0TkorUT09IiwicyI6IjEifQ==", "maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "b8def519-3a10-4f72-810e-451a8728da16", "record_id": "flaws_cloudtrail:0000569:b8def519-3a10-4f72-810e-451a8728da16", "row_index": 569, "timestamp": "2019-03-01T05:51:23Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "254.254.89.255", "user_agent": "aws-cli/1.16.114 Python/3.6.7 Linux/4.15.0-45-generic botocore/1.12.104", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1082, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "b8def519-3a10-4f72-810e-451a8728da16", "eventTime": "2019-03-01T05:51:23Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "254.254.89.255", "userAgent": "aws-cli/1.16.114 Python/3.6.7 Linux/4.15.0-45-generic botocore/1.12.104", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"nextToken": "eyJ2IjoiMiIsImMiOiIyYWc0akczZ1pnV2ptdzFyK1gwK004TEhTZTc4bzhxT2xXWHpDdTRjSlV4RDRCdkwzYkg2SE1pWHNHcjVKUTVlUDZHUnpUczZRdEljRWQ4bkV1ZkVuVTJqUFVRbWZTOEVZN2RkUzJJRkI4M1QwZXl5OFZsaDNFRUYxbXNMVWFrY3pZU0doNEtTWXJKN1BNelFrb1A3MVp2dlcwTGhXUHRIWm9MWHp5VnVFYm1rRlJYblh3VUhBaGxwUVM2TEwyOGhMeDJCNjhabTJnMD0iLCJzIjoiMSJ9", "maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "b8def519-3a10-4f72-810e-451a8728da16", "record_id": "flaws_cloudtrail:0000570:b8def519-3a10-4f72-810e-451a8728da16", "row_index": 570, "timestamp": "2019-03-01T05:51:23Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "254.254.89.255", "user_agent": "aws-cli/1.16.114 Python/3.6.7 Linux/4.15.0-45-generic botocore/1.12.104", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1082, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "b8def519-3a10-4f72-810e-451a8728da16", "eventTime": "2019-03-01T05:51:23Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "254.254.89.255", "userAgent": "aws-cli/1.16.114 Python/3.6.7 Linux/4.15.0-45-generic botocore/1.12.104", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"nextToken": "eyJ2IjoiMiIsImMiOiIyYWc0akczZ1pnV2ptdzFyK1gwK004TEhTZTc4bzhxT2xXWHpDdTRjSlV4RDRCdkwzYkg2SE1pWHNHcjVKUTVlUDZHUnpUczZRdEljRWQ4bkV1ZkVuVTJqUFVRbWZTOEVZN2RkUzJJRkI4M1QwZXl5OFZsaDNFRUYxbXNMVWFrY3pZU0doNEtTWXJKN1BNelFrb1A3MVp2dlcwTGhXUHRIWm9MWHp5VnVFYm1rRlJYblh3VUhBaGxwUVM2TEwyOGhMeDJCNjhabTJnMD0iLCJzIjoiMSJ9", "maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "cd7d63c6-7e36-4c49-949d-47676a3c5157", "record_id": "flaws_cloudtrail:0000571:cd7d63c6-7e36-4c49-949d-47676a3c5157", "row_index": 571, "timestamp": "2019-03-01T05:51:25Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "254.254.89.255", "user_agent": "aws-cli/1.16.114 Python/3.6.7 Linux/4.15.0-45-generic botocore/1.12.104", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1082, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "cd7d63c6-7e36-4c49-949d-47676a3c5157", "eventTime": "2019-03-01T05:51:25Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "254.254.89.255", "userAgent": "aws-cli/1.16.114 Python/3.6.7 Linux/4.15.0-45-generic botocore/1.12.104", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"nextToken": "eyJ2IjoiMiIsImMiOiJpbGlGWjFubTBQd3VwdDRUQ3U0QUtxS3lxTE1UNGtjTlBydHNaMGpnM3ZXK2pvTk44OXhxZmQzUUhwdXpzZ0VHclR2OUVyb2xLb0ZQOG43UjZud0Z6VnZCUGJvanpTY21UazgvTkc2N1E1Zi8zcVR2eWV3bVNNeUdaSkpIVkZ4QnlrSDFSNWVrK0RjYW5nRzVQeWRuN0ROY3Z3SUZFcXk2QSsxTEhYRDZXTW56WEdjcmI1QTlzaGRoMytROEU4NG82cUVHOEdGNyt3PT0iLCJzIjoiMSJ9", "maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "cd7d63c6-7e36-4c49-949d-47676a3c5157", "record_id": "flaws_cloudtrail:0000572:cd7d63c6-7e36-4c49-949d-47676a3c5157", "row_index": 572, "timestamp": "2019-03-01T05:51:25Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "254.254.89.255", "user_agent": "aws-cli/1.16.114 Python/3.6.7 Linux/4.15.0-45-generic botocore/1.12.104", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1082, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "cd7d63c6-7e36-4c49-949d-47676a3c5157", "eventTime": "2019-03-01T05:51:25Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "254.254.89.255", "userAgent": "aws-cli/1.16.114 Python/3.6.7 Linux/4.15.0-45-generic botocore/1.12.104", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"nextToken": "eyJ2IjoiMiIsImMiOiJpbGlGWjFubTBQd3VwdDRUQ3U0QUtxS3lxTE1UNGtjTlBydHNaMGpnM3ZXK2pvTk44OXhxZmQzUUhwdXpzZ0VHclR2OUVyb2xLb0ZQOG43UjZud0Z6VnZCUGJvanpTY21UazgvTkc2N1E1Zi8zcVR2eWV3bVNNeUdaSkpIVkZ4QnlrSDFSNWVrK0RjYW5nRzVQeWRuN0ROY3Z3SUZFcXk2QSsxTEhYRDZXTW56WEdjcmI1QTlzaGRoMytROEU4NG82cUVHOEdGNyt3PT0iLCJzIjoiMSJ9", "maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "8eb0225a-911a-4059-8247-96b4fbed34fd", "record_id": "flaws_cloudtrail:0000573:8eb0225a-911a-4059-8247-96b4fbed34fd", "row_index": 573, "timestamp": "2019-03-01T05:51:27Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "254.254.89.255", "user_agent": "aws-cli/1.16.114 Python/3.6.7 Linux/4.15.0-45-generic botocore/1.12.104", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1090, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "8eb0225a-911a-4059-8247-96b4fbed34fd", "eventTime": "2019-03-01T05:51:27Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "254.254.89.255", "userAgent": "aws-cli/1.16.114 Python/3.6.7 Linux/4.15.0-45-generic botocore/1.12.104", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"nextToken": "eyJ2IjoiMiIsImMiOiJpbnFadlNkNGk3K1l4K1QycWhwckxuMlV4R041OGZieUpyTE9BNkcwcU9XdXIzVVZFT1lmaUFMNzkyVTdwdUNWd2RzcTJrNjE2aDVvZFVCWHFNMFdoc0N2emtOaSt5dGExSEN5aVUvZ3ZsajFyalh4V29vblRpSDJ3bzRNYVlkZUNxR1dUQzd4TVY1dWF4S3k2bUdaNWZ6Wkwxc0xVWTY2SU9iMWFkTW55MytFTkpnN2xUQWk1R0tyKzVlTmdFWjlWVFhIbExnZ2wvcWFWQT09IiwicyI6IjEifQ==", "maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "8eb0225a-911a-4059-8247-96b4fbed34fd", "record_id": "flaws_cloudtrail:0000574:8eb0225a-911a-4059-8247-96b4fbed34fd", "row_index": 574, "timestamp": "2019-03-01T05:51:27Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "254.254.89.255", "user_agent": "aws-cli/1.16.114 Python/3.6.7 Linux/4.15.0-45-generic botocore/1.12.104", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1090, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "8eb0225a-911a-4059-8247-96b4fbed34fd", "eventTime": "2019-03-01T05:51:27Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "254.254.89.255", "userAgent": "aws-cli/1.16.114 Python/3.6.7 Linux/4.15.0-45-generic botocore/1.12.104", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"nextToken": "eyJ2IjoiMiIsImMiOiJpbnFadlNkNGk3K1l4K1QycWhwckxuMlV4R041OGZieUpyTE9BNkcwcU9XdXIzVVZFT1lmaUFMNzkyVTdwdUNWd2RzcTJrNjE2aDVvZFVCWHFNMFdoc0N2emtOaSt5dGExSEN5aVUvZ3ZsajFyalh4V29vblRpSDJ3bzRNYVlkZUNxR1dUQzd4TVY1dWF4S3k2bUdaNWZ6Wkwxc0xVWTY2SU9iMWFkTW55MytFTkpnN2xUQWk1R0tyKzVlTmdFWjlWVFhIbExnZ2wvcWFWQT09IiwicyI6IjEifQ==", "maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "99b013ae-393a-450f-a732-9e9d575dee43", "record_id": "flaws_cloudtrail:0000575:99b013ae-393a-450f-a732-9e9d575dee43", "row_index": 575, "timestamp": "2019-03-01T05:51:29Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "254.254.89.255", "user_agent": "aws-cli/1.16.114 Python/3.6.7 Linux/4.15.0-45-generic botocore/1.12.104", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1082, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "99b013ae-393a-450f-a732-9e9d575dee43", "eventTime": "2019-03-01T05:51:29Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "254.254.89.255", "userAgent": "aws-cli/1.16.114 Python/3.6.7 Linux/4.15.0-45-generic botocore/1.12.104", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"nextToken": "eyJ2IjoiMiIsImMiOiI0NG8rcmo4TEN3OTduTWRMT2REUTVVaHRIOXZuaEN6bVoyNCt2QnNTcUY5TDZMRFlmVVYvcHNlSzNiMzFaS1NZUVN1NWZmdUhGcnQ3ZW5MT2ZoMTZ2OHpJR0dTbUdlN0llZnYvcWhlRnppRWwyL3N5NVYwZ2VmU0pBVGxyK0VmZzF4amFITWN0M1dDbUNMSDNUTWtxZUVhZkhDeDRtYVRuMElDdG9lc1RNbmM4T0tGVGI5UGIwaitEMjRRNnJCRE83cU1LSVhsQUZ1Zz0iLCJzIjoiMSJ9", "maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "99b013ae-393a-450f-a732-9e9d575dee43", "record_id": "flaws_cloudtrail:0000576:99b013ae-393a-450f-a732-9e9d575dee43", "row_index": 576, "timestamp": "2019-03-01T05:51:29Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "254.254.89.255", "user_agent": "aws-cli/1.16.114 Python/3.6.7 Linux/4.15.0-45-generic botocore/1.12.104", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1082, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "99b013ae-393a-450f-a732-9e9d575dee43", "eventTime": "2019-03-01T05:51:29Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "254.254.89.255", "userAgent": "aws-cli/1.16.114 Python/3.6.7 Linux/4.15.0-45-generic botocore/1.12.104", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"nextToken": "eyJ2IjoiMiIsImMiOiI0NG8rcmo4TEN3OTduTWRMT2REUTVVaHRIOXZuaEN6bVoyNCt2QnNTcUY5TDZMRFlmVVYvcHNlSzNiMzFaS1NZUVN1NWZmdUhGcnQ3ZW5MT2ZoMTZ2OHpJR0dTbUdlN0llZnYvcWhlRnppRWwyL3N5NVYwZ2VmU0pBVGxyK0VmZzF4amFITWN0M1dDbUNMSDNUTWtxZUVhZkhDeDRtYVRuMElDdG9lc1RNbmM4T0tGVGI5UGIwaitEMjRRNnJCRE83cU1LSVhsQUZ1Zz0iLCJzIjoiMSJ9", "maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "5104b3fb-bef5-4f71-b16c-09ab1821664a", "record_id": "flaws_cloudtrail:0000577:5104b3fb-bef5-4f71-b16c-09ab1821664a", "row_index": 577, "timestamp": "2019-03-01T05:51:31Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "254.254.89.255", "user_agent": "aws-cli/1.16.114 Python/3.6.7 Linux/4.15.0-45-generic botocore/1.12.104", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1090, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "5104b3fb-bef5-4f71-b16c-09ab1821664a", "eventTime": "2019-03-01T05:51:31Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "254.254.89.255", "userAgent": "aws-cli/1.16.114 Python/3.6.7 Linux/4.15.0-45-generic botocore/1.12.104", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"nextToken": "eyJ2IjoiMiIsImMiOiJaMlZGYUx2d0hxZm1Ia2xnb21UdTNBMHNLVjVvTUJsTGkyYktMWjBtWUVBVk9zazVRSC91Tk9JUElFVUFJUHVnaE12VStKVDAwRGhXQUhNdEg0SHNoTFgzL1o4YmtacEFZVFZYL1VjZ2Y0T2dyM1lUaWZqcldvYlB3RVlhY1pIN2ZGZEc4dis1Q1JkRnZxbW9yU1c2WFJOWVF3Y3djSU05dDZLYk9ET1lLM0QyMW9PUm5oVzRYOWFVQjdpNWVSam52T0puN3U3Rk0zeHBPdz09IiwicyI6IjEifQ==", "maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "5104b3fb-bef5-4f71-b16c-09ab1821664a", "record_id": "flaws_cloudtrail:0000578:5104b3fb-bef5-4f71-b16c-09ab1821664a", "row_index": 578, "timestamp": "2019-03-01T05:51:31Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "254.254.89.255", "user_agent": "aws-cli/1.16.114 Python/3.6.7 Linux/4.15.0-45-generic botocore/1.12.104", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1090, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "5104b3fb-bef5-4f71-b16c-09ab1821664a", "eventTime": "2019-03-01T05:51:31Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "254.254.89.255", "userAgent": "aws-cli/1.16.114 Python/3.6.7 Linux/4.15.0-45-generic botocore/1.12.104", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"nextToken": "eyJ2IjoiMiIsImMiOiJaMlZGYUx2d0hxZm1Ia2xnb21UdTNBMHNLVjVvTUJsTGkyYktMWjBtWUVBVk9zazVRSC91Tk9JUElFVUFJUHVnaE12VStKVDAwRGhXQUhNdEg0SHNoTFgzL1o4YmtacEFZVFZYL1VjZ2Y0T2dyM1lUaWZqcldvYlB3RVlhY1pIN2ZGZEc4dis1Q1JkRnZxbW9yU1c2WFJOWVF3Y3djSU05dDZLYk9ET1lLM0QyMW9PUm5oVzRYOWFVQjdpNWVSam52T0puN3U3Rk0zeHBPdz09IiwicyI6IjEifQ==", "maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "0e9ddd6e-2df6-4e2d-a31b-f725b83cf50a", "record_id": "flaws_cloudtrail:0000579:0e9ddd6e-2df6-4e2d-a31b-f725b83cf50a", "row_index": 579, "timestamp": "2019-03-01T05:51:33Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "254.254.89.255", "user_agent": "aws-cli/1.16.114 Python/3.6.7 Linux/4.15.0-45-generic botocore/1.12.104", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1090, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "0e9ddd6e-2df6-4e2d-a31b-f725b83cf50a", "eventTime": "2019-03-01T05:51:33Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "254.254.89.255", "userAgent": "aws-cli/1.16.114 Python/3.6.7 Linux/4.15.0-45-generic botocore/1.12.104", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"nextToken": "eyJ2IjoiMiIsImMiOiJ4SDlRUFpjMVpSMk11T3ZEazNYR25YeW12dGVVMGlSSDZRTDc2LytlMDNSMHBxb3VHaHp3WFA3OFhzREJnVUYySDd0K3VEalZ5bE1zVDVVQ3lXVGhFTm1JZ3N1QktwVjJyN1V6Mk5wOFJCd0FROUlHd1FzOC82MzJqNWNTbmExcWZCTjVnd29ORzRUTStwcUNpT3FtdjFrWm0xQlVHVjNLRFMzbXhUSmFwMFJtL3hBR0FoeERQaGtiV0N1ek55Zk52OUJNVng5S0pnc0FJUT09IiwicyI6IjEifQ==", "maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "0e9ddd6e-2df6-4e2d-a31b-f725b83cf50a", "record_id": "flaws_cloudtrail:0000580:0e9ddd6e-2df6-4e2d-a31b-f725b83cf50a", "row_index": 580, "timestamp": "2019-03-01T05:51:33Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "254.254.89.255", "user_agent": "aws-cli/1.16.114 Python/3.6.7 Linux/4.15.0-45-generic botocore/1.12.104", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1090, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "0e9ddd6e-2df6-4e2d-a31b-f725b83cf50a", "eventTime": "2019-03-01T05:51:33Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "254.254.89.255", "userAgent": "aws-cli/1.16.114 Python/3.6.7 Linux/4.15.0-45-generic botocore/1.12.104", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"nextToken": "eyJ2IjoiMiIsImMiOiJ4SDlRUFpjMVpSMk11T3ZEazNYR25YeW12dGVVMGlSSDZRTDc2LytlMDNSMHBxb3VHaHp3WFA3OFhzREJnVUYySDd0K3VEalZ5bE1zVDVVQ3lXVGhFTm1JZ3N1QktwVjJyN1V6Mk5wOFJCd0FROUlHd1FzOC82MzJqNWNTbmExcWZCTjVnd29ORzRUTStwcUNpT3FtdjFrWm0xQlVHVjNLRFMzbXhUSmFwMFJtL3hBR0FoeERQaGtiV0N1ek55Zk52OUJNVng5S0pnc0FJUT09IiwicyI6IjEifQ==", "maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "698c6f32-cabb-4376-9bcb-60051aa6a68f", "record_id": "flaws_cloudtrail:0000581:698c6f32-cabb-4376-9bcb-60051aa6a68f", "row_index": 581, "timestamp": "2019-03-01T05:51:35Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "254.254.89.255", "user_agent": "aws-cli/1.16.114 Python/3.6.7 Linux/4.15.0-45-generic botocore/1.12.104", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1081, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "698c6f32-cabb-4376-9bcb-60051aa6a68f", "eventTime": "2019-03-01T05:51:35Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "254.254.89.255", "userAgent": "aws-cli/1.16.114 Python/3.6.7 Linux/4.15.0-45-generic botocore/1.12.104", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"nextToken": "eyJ2IjoiMiIsImMiOiJLYmxGa2d1eWxmY3Zrcm9aZjFNR0ZBejhnZ09rcTcyNk1mL1FKVGFZSGFzdE5rcHZacTluNC9hVzkzTUU5VFpuNTBSaG5sMTQvRTJQN29nZlJSY091czNIOFRlVTFQcmRZTVNjbmFkZ0N3SXlGQWtDMTBMYkY5U1JMNEhYOVNuYjNZUUlzcE54WmdmbWlJdTc1Q1lLTmpSSFh5enZ2VU04ZDIvRmQ1cnB0d1dJcXFXa3lCOENneWlwTlh1cTVZWmFHQ2JoYTN4dW1Tcz0iLCJzIjoiMSJ9", "maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "698c6f32-cabb-4376-9bcb-60051aa6a68f", "record_id": "flaws_cloudtrail:0000582:698c6f32-cabb-4376-9bcb-60051aa6a68f", "row_index": 582, "timestamp": "2019-03-01T05:51:35Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "254.254.89.255", "user_agent": "aws-cli/1.16.114 Python/3.6.7 Linux/4.15.0-45-generic botocore/1.12.104", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1081, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "698c6f32-cabb-4376-9bcb-60051aa6a68f", "eventTime": "2019-03-01T05:51:35Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "254.254.89.255", "userAgent": "aws-cli/1.16.114 Python/3.6.7 Linux/4.15.0-45-generic botocore/1.12.104", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"nextToken": "eyJ2IjoiMiIsImMiOiJLYmxGa2d1eWxmY3Zrcm9aZjFNR0ZBejhnZ09rcTcyNk1mL1FKVGFZSGFzdE5rcHZacTluNC9hVzkzTUU5VFpuNTBSaG5sMTQvRTJQN29nZlJSY091czNIOFRlVTFQcmRZTVNjbmFkZ0N3SXlGQWtDMTBMYkY5U1JMNEhYOVNuYjNZUUlzcE54WmdmbWlJdTc1Q1lLTmpSSFh5enZ2VU04ZDIvRmQ1cnB0d1dJcXFXa3lCOENneWlwTlh1cTVZWmFHQ2JoYTN4dW1Tcz0iLCJzIjoiMSJ9", "maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "015c26a5-4ed0-4748-852d-5c9c8eadebed", "record_id": "flaws_cloudtrail:0000583:015c26a5-4ed0-4748-852d-5c9c8eadebed", "row_index": 583, "timestamp": "2019-03-01T05:51:36Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "254.254.89.255", "user_agent": "aws-cli/1.16.114 Python/3.6.7 Linux/4.15.0-45-generic botocore/1.12.104", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1090, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "015c26a5-4ed0-4748-852d-5c9c8eadebed", "eventTime": "2019-03-01T05:51:36Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "254.254.89.255", "userAgent": "aws-cli/1.16.114 Python/3.6.7 Linux/4.15.0-45-generic botocore/1.12.104", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"nextToken": "eyJ2IjoiMiIsImMiOiJqeHJ4ZG1JS2VnbmdGb0k4YjFTOWFsWmFYU0FrYW9zbFVFcEEzZHR2aW5DQ28rWVRzSm95MG1La1lNVTR2VVRUOFprSTRYMjIwUUZMczJzNWZ5VWUyQmNzSFE2dUlqa296WnFWazgvcXBGK2FZckUzb0ZQSU5hNE40cmhkMTNNTkVTelpYM2FBOE9rY0gxbHZRYXJPaHBSUForT245ckxLb2FsTnpIME5QUHZDZkkxKzlLKzdPMktnYzhaYmNoRzZ4WDBoL0xjYjhyMFZEZz09IiwicyI6IjEifQ==", "maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "015c26a5-4ed0-4748-852d-5c9c8eadebed", "record_id": "flaws_cloudtrail:0000584:015c26a5-4ed0-4748-852d-5c9c8eadebed", "row_index": 584, "timestamp": "2019-03-01T05:51:36Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "254.254.89.255", "user_agent": "aws-cli/1.16.114 Python/3.6.7 Linux/4.15.0-45-generic botocore/1.12.104", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1090, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "015c26a5-4ed0-4748-852d-5c9c8eadebed", "eventTime": "2019-03-01T05:51:36Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "254.254.89.255", "userAgent": "aws-cli/1.16.114 Python/3.6.7 Linux/4.15.0-45-generic botocore/1.12.104", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"nextToken": "eyJ2IjoiMiIsImMiOiJqeHJ4ZG1JS2VnbmdGb0k4YjFTOWFsWmFYU0FrYW9zbFVFcEEzZHR2aW5DQ28rWVRzSm95MG1La1lNVTR2VVRUOFprSTRYMjIwUUZMczJzNWZ5VWUyQmNzSFE2dUlqa296WnFWazgvcXBGK2FZckUzb0ZQSU5hNE40cmhkMTNNTkVTelpYM2FBOE9rY0gxbHZRYXJPaHBSUForT245ckxLb2FsTnpIME5QUHZDZkkxKzlLKzdPMktnYzhaYmNoRzZ4WDBoL0xjYjhyMFZEZz09IiwicyI6IjEifQ==", "maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "f7dc30ed-82c3-40b0-89cb-dc44d05bad2e", "record_id": "flaws_cloudtrail:0000585:f7dc30ed-82c3-40b0-89cb-dc44d05bad2e", "row_index": 585, "timestamp": "2019-03-01T05:51:38Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "254.254.89.255", "user_agent": "aws-cli/1.16.114 Python/3.6.7 Linux/4.15.0-45-generic botocore/1.12.104", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1091, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "f7dc30ed-82c3-40b0-89cb-dc44d05bad2e", "eventTime": "2019-03-01T05:51:38Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "254.254.89.255", "userAgent": "aws-cli/1.16.114 Python/3.6.7 Linux/4.15.0-45-generic botocore/1.12.104", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"nextToken": "eyJ2IjoiMiIsImMiOiJmaTJjZkdXZmlKeUtQR0QreTVFUXdlUjN0c29PVmNpalNHdjdlQW9URHJBWHlqYnZPQWlqZTBIa3hGZGY5VnpzZGc2OG1oeWMxUWRsaEdRMlpkelVRTDBWWnk3Z1BodmlaWC94YU1yUEl6emtzc0ZNRldUZ1hlem53bDFnYWhaTDN5QWxIZGY3bUtUaUNXQjhsNW9BQUJIb2ozRGZzM3dHdXRXcFhsS09vSGhneWF4ZHp0U0pEbXRWeUVVTTRQeVpYajBxQ280a3BTRlVJUT09IiwicyI6IjEifQ==", "maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "f7dc30ed-82c3-40b0-89cb-dc44d05bad2e", "record_id": "flaws_cloudtrail:0000586:f7dc30ed-82c3-40b0-89cb-dc44d05bad2e", "row_index": 586, "timestamp": "2019-03-01T05:51:38Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "254.254.89.255", "user_agent": "aws-cli/1.16.114 Python/3.6.7 Linux/4.15.0-45-generic botocore/1.12.104", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1091, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "f7dc30ed-82c3-40b0-89cb-dc44d05bad2e", "eventTime": "2019-03-01T05:51:38Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "254.254.89.255", "userAgent": "aws-cli/1.16.114 Python/3.6.7 Linux/4.15.0-45-generic botocore/1.12.104", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"nextToken": "eyJ2IjoiMiIsImMiOiJmaTJjZkdXZmlKeUtQR0QreTVFUXdlUjN0c29PVmNpalNHdjdlQW9URHJBWHlqYnZPQWlqZTBIa3hGZGY5VnpzZGc2OG1oeWMxUWRsaEdRMlpkelVRTDBWWnk3Z1BodmlaWC94YU1yUEl6emtzc0ZNRldUZ1hlem53bDFnYWhaTDN5QWxIZGY3bUtUaUNXQjhsNW9BQUJIb2ozRGZzM3dHdXRXcFhsS09vSGhneWF4ZHp0U0pEbXRWeUVVTTRQeVpYajBxQ280a3BTRlVJUT09IiwicyI6IjEifQ==", "maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "bbab522f-1422-45ff-8927-6935a53f0187", "record_id": "flaws_cloudtrail:0000587:bbab522f-1422-45ff-8927-6935a53f0187", "row_index": 587, "timestamp": "2019-03-01T05:51:40Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "254.254.89.255", "user_agent": "aws-cli/1.16.114 Python/3.6.7 Linux/4.15.0-45-generic botocore/1.12.104", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1090, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "bbab522f-1422-45ff-8927-6935a53f0187", "eventTime": "2019-03-01T05:51:40Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "254.254.89.255", "userAgent": "aws-cli/1.16.114 Python/3.6.7 Linux/4.15.0-45-generic botocore/1.12.104", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"nextToken": "eyJ2IjoiMiIsImMiOiJ5Q0g4N0lETWdQYTE4MHMrL29JdDg5aGI1OXBZTWZSdTJsZUkxTDBESmhJV0FHVndrMWNiMFdCQjZCODcrZC9BVmdRNnZCcWRNUnJCTDFaK3I4b0I4MEVENWFFZXJlZ1pUY282N2JBMWxZczc5Q2Jib25FN09JQVBFaDRMa3BmczhjdVo0bytSV21mN2svNFpmN240U0hmU0s1RlJmU08yQkQ4SDZyWjZFSXQyblBUNmhvZU1ZaWU0dzhBeTJnZDNCbTQxeDBlUGRBMG1RQT09IiwicyI6IjEifQ==", "maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "bbab522f-1422-45ff-8927-6935a53f0187", "record_id": "flaws_cloudtrail:0000588:bbab522f-1422-45ff-8927-6935a53f0187", "row_index": 588, "timestamp": "2019-03-01T05:51:40Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "254.254.89.255", "user_agent": "aws-cli/1.16.114 Python/3.6.7 Linux/4.15.0-45-generic botocore/1.12.104", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1090, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "bbab522f-1422-45ff-8927-6935a53f0187", "eventTime": "2019-03-01T05:51:40Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "254.254.89.255", "userAgent": "aws-cli/1.16.114 Python/3.6.7 Linux/4.15.0-45-generic botocore/1.12.104", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"nextToken": "eyJ2IjoiMiIsImMiOiJ5Q0g4N0lETWdQYTE4MHMrL29JdDg5aGI1OXBZTWZSdTJsZUkxTDBESmhJV0FHVndrMWNiMFdCQjZCODcrZC9BVmdRNnZCcWRNUnJCTDFaK3I4b0I4MEVENWFFZXJlZ1pUY282N2JBMWxZczc5Q2Jib25FN09JQVBFaDRMa3BmczhjdVo0bytSV21mN2svNFpmN240U0hmU0s1RlJmU08yQkQ4SDZyWjZFSXQyblBUNmhvZU1ZaWU0dzhBeTJnZDNCbTQxeDBlUGRBMG1RQT09IiwicyI6IjEifQ==", "maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "9aa512cf-446e-413c-88ca-c7df17c4455e", "record_id": "flaws_cloudtrail:0000589:9aa512cf-446e-413c-88ca-c7df17c4455e", "row_index": 589, "timestamp": "2019-03-01T05:51:42Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "254.254.89.255", "user_agent": "aws-cli/1.16.114 Python/3.6.7 Linux/4.15.0-45-generic botocore/1.12.104", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1090, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "9aa512cf-446e-413c-88ca-c7df17c4455e", "eventTime": "2019-03-01T05:51:42Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "254.254.89.255", "userAgent": "aws-cli/1.16.114 Python/3.6.7 Linux/4.15.0-45-generic botocore/1.12.104", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"nextToken": "eyJ2IjoiMiIsImMiOiJBZ3hiT1didjBwL2tmUzBFUTY3dDNYU1hGVVlvY29OakhYaFpJNlFGVUU0RGdLUzl6eHVaSHBaV3djK2k5aDlJUVpzdHoyUG1iMUJUa2dZaDYwV1phOEQ2ME9TcFplR29QTzZWUnFFcE9XcmhpeVpXcUVEQmpkc2hmNmNnYVJYZ016bzFXU2s1WFhid0laMjAzck9tdGRTeVdDR290UVNQQk4yWlV5QmpBS0ZzbGtpNGk2NnlIOXZvd2hXcUdocGJneUpVYkJSS0MxMWNjZz09IiwicyI6IjEifQ==", "maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "9aa512cf-446e-413c-88ca-c7df17c4455e", "record_id": "flaws_cloudtrail:0000590:9aa512cf-446e-413c-88ca-c7df17c4455e", "row_index": 590, "timestamp": "2019-03-01T05:51:42Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "254.254.89.255", "user_agent": "aws-cli/1.16.114 Python/3.6.7 Linux/4.15.0-45-generic botocore/1.12.104", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1090, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "9aa512cf-446e-413c-88ca-c7df17c4455e", "eventTime": "2019-03-01T05:51:42Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "254.254.89.255", "userAgent": "aws-cli/1.16.114 Python/3.6.7 Linux/4.15.0-45-generic botocore/1.12.104", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"nextToken": "eyJ2IjoiMiIsImMiOiJBZ3hiT1didjBwL2tmUzBFUTY3dDNYU1hGVVlvY29OakhYaFpJNlFGVUU0RGdLUzl6eHVaSHBaV3djK2k5aDlJUVpzdHoyUG1iMUJUa2dZaDYwV1phOEQ2ME9TcFplR29QTzZWUnFFcE9XcmhpeVpXcUVEQmpkc2hmNmNnYVJYZ016bzFXU2s1WFhid0laMjAzck9tdGRTeVdDR290UVNQQk4yWlV5QmpBS0ZzbGtpNGk2NnlIOXZvd2hXcUdocGJneUpVYkJSS0MxMWNjZz09IiwicyI6IjEifQ==", "maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "2b83bf15-a28c-44bb-b98c-2ee4e89ca107", "record_id": "flaws_cloudtrail:0000591:2b83bf15-a28c-44bb-b98c-2ee4e89ca107", "row_index": 591, "timestamp": "2019-03-01T05:51:44Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "254.254.89.255", "user_agent": "aws-cli/1.16.114 Python/3.6.7 Linux/4.15.0-45-generic botocore/1.12.104", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1090, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "2b83bf15-a28c-44bb-b98c-2ee4e89ca107", "eventTime": "2019-03-01T05:51:44Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "254.254.89.255", "userAgent": "aws-cli/1.16.114 Python/3.6.7 Linux/4.15.0-45-generic botocore/1.12.104", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"nextToken": "eyJ2IjoiMiIsImMiOiJaNDVzU0k4SkdlMy9GR2pPZExZRmVudjBHU0lobzN2N3VxYWxCY3lkY0RVamkzbjZwTFRxd1F3TmhUVGVKVnpBR2hlUmQvcnhjU01qbUpXellPaDFCbFFrT21CVVFtdHp3elQ5RVZseU4zU0lqYnRSaFc1R2I1eFJZZlRLdHhCSGd4bm5NT3VJc24wU00wOTR0ZjVQdXdjeTVDeFpNUkFrckhFZEtyQWltaWlXMlgralZqSzJ4Qzk0ek8zcVdKcDlXdjZubm5QcXN0MGtPQT09IiwicyI6IjEifQ==", "maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "2b83bf15-a28c-44bb-b98c-2ee4e89ca107", "record_id": "flaws_cloudtrail:0000592:2b83bf15-a28c-44bb-b98c-2ee4e89ca107", "row_index": 592, "timestamp": "2019-03-01T05:51:44Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "254.254.89.255", "user_agent": "aws-cli/1.16.114 Python/3.6.7 Linux/4.15.0-45-generic botocore/1.12.104", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1090, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "2b83bf15-a28c-44bb-b98c-2ee4e89ca107", "eventTime": "2019-03-01T05:51:44Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "254.254.89.255", "userAgent": "aws-cli/1.16.114 Python/3.6.7 Linux/4.15.0-45-generic botocore/1.12.104", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"nextToken": "eyJ2IjoiMiIsImMiOiJaNDVzU0k4SkdlMy9GR2pPZExZRmVudjBHU0lobzN2N3VxYWxCY3lkY0RVamkzbjZwTFRxd1F3TmhUVGVKVnpBR2hlUmQvcnhjU01qbUpXellPaDFCbFFrT21CVVFtdHp3elQ5RVZseU4zU0lqYnRSaFc1R2I1eFJZZlRLdHhCSGd4bm5NT3VJc24wU00wOTR0ZjVQdXdjeTVDeFpNUkFrckhFZEtyQWltaWlXMlgralZqSzJ4Qzk0ek8zcVdKcDlXdjZubm5QcXN0MGtPQT09IiwicyI6IjEifQ==", "maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "5fc3098a-0255-42e2-8388-5b4c5a96c198", "record_id": "flaws_cloudtrail:0000593:5fc3098a-0255-42e2-8388-5b4c5a96c198", "row_index": 593, "timestamp": "2019-03-01T05:51:46Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "254.254.89.255", "user_agent": "aws-cli/1.16.114 Python/3.6.7 Linux/4.15.0-45-generic botocore/1.12.104", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1090, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "5fc3098a-0255-42e2-8388-5b4c5a96c198", "eventTime": "2019-03-01T05:51:46Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "254.254.89.255", "userAgent": "aws-cli/1.16.114 Python/3.6.7 Linux/4.15.0-45-generic botocore/1.12.104", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"nextToken": "eyJ2IjoiMiIsImMiOiJTMk9LaU41ZkZubmJ0bm5TYUFxRUNnVnpxRHFiQ0lSdmpxZUdVTWhwdFFmbkpjWkRJaDhCUnRYVXJwZE9mVXpFMHRBL1luK0JCTGJiRXRGSWoveUZUYlRtL1JGYU5Za3NNQVZWMms3UnJJNzQ0WGJWcWRCblRWRm54QmUxVmZVWmtsaFcrcmdqZUQzM1VqbFpCWFB2R3JtZjNiYXRmZk10U1p5dkpzMUI1R2dkemZBamVROFJ2dTBBcTlQMUcvVVNtU2NNWmpiSFhIQWZrdz09IiwicyI6IjEifQ==", "maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "5fc3098a-0255-42e2-8388-5b4c5a96c198", "record_id": "flaws_cloudtrail:0000594:5fc3098a-0255-42e2-8388-5b4c5a96c198", "row_index": 594, "timestamp": "2019-03-01T05:51:46Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "254.254.89.255", "user_agent": "aws-cli/1.16.114 Python/3.6.7 Linux/4.15.0-45-generic botocore/1.12.104", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1090, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "5fc3098a-0255-42e2-8388-5b4c5a96c198", "eventTime": "2019-03-01T05:51:46Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "254.254.89.255", "userAgent": "aws-cli/1.16.114 Python/3.6.7 Linux/4.15.0-45-generic botocore/1.12.104", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"nextToken": "eyJ2IjoiMiIsImMiOiJTMk9LaU41ZkZubmJ0bm5TYUFxRUNnVnpxRHFiQ0lSdmpxZUdVTWhwdFFmbkpjWkRJaDhCUnRYVXJwZE9mVXpFMHRBL1luK0JCTGJiRXRGSWoveUZUYlRtL1JGYU5Za3NNQVZWMms3UnJJNzQ0WGJWcWRCblRWRm54QmUxVmZVWmtsaFcrcmdqZUQzM1VqbFpCWFB2R3JtZjNiYXRmZk10U1p5dkpzMUI1R2dkemZBamVROFJ2dTBBcTlQMUcvVVNtU2NNWmpiSFhIQWZrdz09IiwicyI6IjEifQ==", "maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "c768105ec-98d8-49e6-a8f7-f0a0ce07c0a0", "record_id": "flaws_cloudtrail:0000595:c768105ec-98d8-49e6-a8f7-f0a0ce07c0a0", "row_index": 595, "timestamp": "2019-03-01T05:51:47Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "254.254.89.255", "user_agent": "aws-cli/1.16.114 Python/3.6.7 Linux/4.15.0-45-generic botocore/1.12.104", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1111, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "c768105ec-98d8-49e6-a8f7-f0a0ce07c0a0", "eventTime": "2019-03-01T05:51:47Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "254.254.89.255", "userAgent": "aws-cli/1.16.114 Python/3.6.7 Linux/4.15.0-45-generic botocore/1.12.104", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"nextToken": "eyJ2IjoiMiIsImMiOiJvWmxwaGM1dTAyaVhlM3NOZUtyUVB0R2grWXQ0WkxBbkZ0Qnc3aFBuWlM1aTBQMUlHRm5xcVFYQkxzQzB2aGdFUldwck5NbTFFeldWZVYzOVl0ZHNSOEVtZHFaSVN5ZkVrd3JjbzZ3QnZtbStUOFcxdjFvVUt3ZkgzZGt3eThXR1ZCZ21BMWVUTU9mVDNHSE1uYXdSNTg1eTVuZjlPM1podm1paWczR2tGK1NmbnNMclZQSWcxNStCc1V6bUtnUUluNEV2cklLWjhnYUtZaG1KYXNMUXFBSk1iMElYTEdVPSIsInMiOiIxIn0=", "maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "c768105ec-98d8-49e6-a8f7-f0a0ce07c0a0", "record_id": "flaws_cloudtrail:0000596:c768105ec-98d8-49e6-a8f7-f0a0ce07c0a0", "row_index": 596, "timestamp": "2019-03-01T05:51:47Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "254.254.89.255", "user_agent": "aws-cli/1.16.114 Python/3.6.7 Linux/4.15.0-45-generic botocore/1.12.104", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1111, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "c768105ec-98d8-49e6-a8f7-f0a0ce07c0a0", "eventTime": "2019-03-01T05:51:47Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "254.254.89.255", "userAgent": "aws-cli/1.16.114 Python/3.6.7 Linux/4.15.0-45-generic botocore/1.12.104", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"nextToken": "eyJ2IjoiMiIsImMiOiJvWmxwaGM1dTAyaVhlM3NOZUtyUVB0R2grWXQ0WkxBbkZ0Qnc3aFBuWlM1aTBQMUlHRm5xcVFYQkxzQzB2aGdFUldwck5NbTFFeldWZVYzOVl0ZHNSOEVtZHFaSVN5ZkVrd3JjbzZ3QnZtbStUOFcxdjFvVUt3ZkgzZGt3eThXR1ZCZ21BMWVUTU9mVDNHSE1uYXdSNTg1eTVuZjlPM1podm1paWczR2tGK1NmbnNMclZQSWcxNStCc1V6bUtnUUluNEV2cklLWjhnYUtZaG1KYXNMUXFBSk1iMElYTEdVPSIsInMiOiIxIn0=", "maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "5bc34eec-f939-4636-98fb-649858c8bd81", "record_id": "flaws_cloudtrail:0000597:5bc34eec-f939-4636-98fb-649858c8bd81", "row_index": 597, "timestamp": "2019-03-01T05:51:48Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "254.254.89.255", "user_agent": "aws-cli/1.16.114 Python/3.6.7 Linux/4.15.0-45-generic botocore/1.12.104", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1110, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "5bc34eec-f939-4636-98fb-649858c8bd81", "eventTime": "2019-03-01T05:51:48Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "254.254.89.255", "userAgent": "aws-cli/1.16.114 Python/3.6.7 Linux/4.15.0-45-generic botocore/1.12.104", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"nextToken": "eyJ2IjoiMiIsImMiOiJGb1E5dmZId0swT1VSS1I1TzE5NFpTQ1AvTEJ1eGxnOUtLaUFya1RYUmRhc2o5enRvQ3dhMHZlcUVxd1ExRm5jSCtFckkzY1p2MWdHeUwraTNoK000KzBvQTY4c1FiR014cWtiTVQzK3BUeDVkdXpVb0drVi9jS25GUGZnTjQrcFBsYXkvOGxaaU1GVG85YXIxWis1R2M1S2xYRVBzMlo2Z1JCMjF6MFRiL3BrVi9XaWJmL28vU0tRNlhjeVJESkxVbFM2blFWSUlKeGR1MjdiL0lVcjNTZ2Y2b3VZK1NvPSIsInMiOiIxIn0=", "maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "623e59c8-40de-41ed-a2f6-84162e61455", "record_id": "flaws_cloudtrail:0000598:623e59c8-40de-41ed-a2f6-84162e61455", "row_index": 598, "timestamp": "2019-03-01T05:51:48Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "254.254.89.255", "user_agent": "aws-cli/1.16.114 Python/3.6.7 Linux/4.15.0-45-generic botocore/1.12.104", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1065, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "623e59c8-40de-41ed-a2f6-84162e61455", "eventTime": "2019-03-01T05:51:48Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "254.254.89.255", "userAgent": "aws-cli/1.16.114 Python/3.6.7 Linux/4.15.0-45-generic botocore/1.12.104", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"nextToken": "eyJ2IjoiMiIsImMiOiIvNitPVFpOb29RQjd4UEVjbGdNM0FFeDF6WFltYmhQcExIVFBnNlkyMzdkYlc2UG9HSStSWnlTeGZYREpJaHU3T1I4L090VGlQT2pzRGN2YlpwbmNLK3ZjSkFBaW9vY0NmZ0VDL3NIVW9iMWNkWVFkejZOZ2JFUzlXdk42RFBMeGtnVHk1eENjckR4N2xQeE14RGw2b21Pc055NDFmNFBVRzJ5RnB2OXF5R2Z4UlJtNjJzZ1VpL2g1b25hZncrUT0iLCJzIjoiMSJ9", "maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "5bc34eec-f939-4636-98fb-649858c8bd81", "record_id": "flaws_cloudtrail:0000599:5bc34eec-f939-4636-98fb-649858c8bd81", "row_index": 599, "timestamp": "2019-03-01T05:51:48Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "254.254.89.255", "user_agent": "aws-cli/1.16.114 Python/3.6.7 Linux/4.15.0-45-generic botocore/1.12.104", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1110, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "5bc34eec-f939-4636-98fb-649858c8bd81", "eventTime": "2019-03-01T05:51:48Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "254.254.89.255", "userAgent": "aws-cli/1.16.114 Python/3.6.7 Linux/4.15.0-45-generic botocore/1.12.104", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"nextToken": "eyJ2IjoiMiIsImMiOiJGb1E5dmZId0swT1VSS1I1TzE5NFpTQ1AvTEJ1eGxnOUtLaUFya1RYUmRhc2o5enRvQ3dhMHZlcUVxd1ExRm5jSCtFckkzY1p2MWdHeUwraTNoK000KzBvQTY4c1FiR014cWtiTVQzK3BUeDVkdXpVb0drVi9jS25GUGZnTjQrcFBsYXkvOGxaaU1GVG85YXIxWis1R2M1S2xYRVBzMlo2Z1JCMjF6MFRiL3BrVi9XaWJmL28vU0tRNlhjeVJESkxVbFM2blFWSUlKeGR1MjdiL0lVcjNTZ2Y2b3VZK1NvPSIsInMiOiIxIn0=", "maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "623e59c8-40de-41ed-a2f6-84162e61455", "record_id": "flaws_cloudtrail:0000600:623e59c8-40de-41ed-a2f6-84162e61455", "row_index": 600, "timestamp": "2019-03-01T05:51:48Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "254.254.89.255", "user_agent": "aws-cli/1.16.114 Python/3.6.7 Linux/4.15.0-45-generic botocore/1.12.104", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1065, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "623e59c8-40de-41ed-a2f6-84162e61455", "eventTime": "2019-03-01T05:51:48Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "254.254.89.255", "userAgent": "aws-cli/1.16.114 Python/3.6.7 Linux/4.15.0-45-generic botocore/1.12.104", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"nextToken": "eyJ2IjoiMiIsImMiOiIvNitPVFpOb29RQjd4UEVjbGdNM0FFeDF6WFltYmhQcExIVFBnNlkyMzdkYlc2UG9HSStSWnlTeGZYREpJaHU3T1I4L090VGlQT2pzRGN2YlpwbmNLK3ZjSkFBaW9vY0NmZ0VDL3NIVW9iMWNkWVFkejZOZ2JFUzlXdk42RFBMeGtnVHk1eENjckR4N2xQeE14RGw2b21Pc055NDFmNFBVRzJ5RnB2OXF5R2Z4UlJtNjJzZ1VpL2g1b25hZncrUT0iLCJzIjoiMSJ9", "maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "720852-7c03-4aef-b1ce-40c00987c126", "record_id": "flaws_cloudtrail:0000601:720852-7c03-4aef-b1ce-40c00987c126", "row_index": 601, "timestamp": "2019-03-01T05:51:49Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "254.254.89.255", "user_agent": "aws-cli/1.16.114 Python/3.6.7 Linux/4.15.0-45-generic botocore/1.12.104", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1108, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "720852-7c03-4aef-b1ce-40c00987c126", "eventTime": "2019-03-01T05:51:49Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "254.254.89.255", "userAgent": "aws-cli/1.16.114 Python/3.6.7 Linux/4.15.0-45-generic botocore/1.12.104", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"nextToken": "eyJ2IjoiMiIsImMiOiI4b3NENEpKOSswelFadDRrYWZSS0kza0F2WVFWNlYvNnMrdTRIRi9LdjMzTnNiLzJlNVJkd2JYSlVmVnVHckRlc3lyUGI2NGlYSnRBb3ZVUnJhanNuY2pjZzd6SjZZV3lheXV1SnQzMnFmejNKaVZyN0RFdWpIV2Vadm12M21tV3hvbHlUR2MydEhuMzkzblVGcWRuKy9DMXVXS1JHa0JRYnNXQjZqTi9HbFo0bzgrRVhrT2o0ai9lNFFwSitkMG04ck9acng1S2lJTC8wMU52dnByaDd3NFIzMmhVbjlRPSIsInMiOiIxIn0=", "maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "720852-7c03-4aef-b1ce-40c00987c126", "record_id": "flaws_cloudtrail:0000602:720852-7c03-4aef-b1ce-40c00987c126", "row_index": 602, "timestamp": "2019-03-01T05:51:49Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "254.254.89.255", "user_agent": "aws-cli/1.16.114 Python/3.6.7 Linux/4.15.0-45-generic botocore/1.12.104", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1108, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "720852-7c03-4aef-b1ce-40c00987c126", "eventTime": "2019-03-01T05:51:49Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "254.254.89.255", "userAgent": "aws-cli/1.16.114 Python/3.6.7 Linux/4.15.0-45-generic botocore/1.12.104", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"nextToken": "eyJ2IjoiMiIsImMiOiI4b3NENEpKOSswelFadDRrYWZSS0kza0F2WVFWNlYvNnMrdTRIRi9LdjMzTnNiLzJlNVJkd2JYSlVmVnVHckRlc3lyUGI2NGlYSnRBb3ZVUnJhanNuY2pjZzd6SjZZV3lheXV1SnQzMnFmejNKaVZyN0RFdWpIV2Vadm12M21tV3hvbHlUR2MydEhuMzkzblVGcWRuKy9DMXVXS1JHa0JRYnNXQjZqTi9HbFo0bzgrRVhrT2o0ai9lNFFwSitkMG04ck9acng1S2lJTC8wMU52dnByaDd3NFIzMmhVbjlRPSIsInMiOiIxIn0=", "maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "982cc731-cdf2-4343-b2aa-f85db05f1ec1", "record_id": "flaws_cloudtrail:0000603:982cc731-cdf2-4343-b2aa-f85db05f1ec1", "row_index": 603, "timestamp": "2019-03-01T05:51:50Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "254.254.89.255", "user_agent": "aws-cli/1.16.114 Python/3.6.7 Linux/4.15.0-45-generic botocore/1.12.104", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1066, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "982cc731-cdf2-4343-b2aa-f85db05f1ec1", "eventTime": "2019-03-01T05:51:50Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "254.254.89.255", "userAgent": "aws-cli/1.16.114 Python/3.6.7 Linux/4.15.0-45-generic botocore/1.12.104", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"nextToken": "eyJ2IjoiMiIsImMiOiJIcjR5S0QzM252MlRyWHp4UXIwc0VRaEdXRVNhcVlucy9LSDNZRmthenVhOU9BdThxWHBXK0FvMmlCVG4rVXpOQmFBUEhVSXE0SHhWay9VSHRWSXUxWHJYU2FYRnpZUmJWeTRrR05ET2lGTnFYSjRVTStQM3JMSHJmbVNmTzJ2cXp1SUZRWjF1eFNxKzdRc29KeGZmeGFaUUQxZVl4S3VKMS9SVFV1VkRjV2RnSWZ1aE5ob05zSnp0eDVObDhicz0iLCJzIjoiMSJ9", "maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "982cc731-cdf2-4343-b2aa-f85db05f1ec1", "record_id": "flaws_cloudtrail:0000604:982cc731-cdf2-4343-b2aa-f85db05f1ec1", "row_index": 604, "timestamp": "2019-03-01T05:51:50Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "254.254.89.255", "user_agent": "aws-cli/1.16.114 Python/3.6.7 Linux/4.15.0-45-generic botocore/1.12.104", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1066, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "982cc731-cdf2-4343-b2aa-f85db05f1ec1", "eventTime": "2019-03-01T05:51:50Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "254.254.89.255", "userAgent": "aws-cli/1.16.114 Python/3.6.7 Linux/4.15.0-45-generic botocore/1.12.104", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"nextToken": "eyJ2IjoiMiIsImMiOiJIcjR5S0QzM252MlRyWHp4UXIwc0VRaEdXRVNhcVlucy9LSDNZRmthenVhOU9BdThxWHBXK0FvMmlCVG4rVXpOQmFBUEhVSXE0SHhWay9VSHRWSXUxWHJYU2FYRnpZUmJWeTRrR05ET2lGTnFYSjRVTStQM3JMSHJmbVNmTzJ2cXp1SUZRWjF1eFNxKzdRc29KeGZmeGFaUUQxZVl4S3VKMS9SVFV1VkRjV2RnSWZ1aE5ob05zSnp0eDVObDhicz0iLCJzIjoiMSJ9", "maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "f21c5744-effc-43b5-97f5-2a8c62c39adb", "record_id": "flaws_cloudtrail:0000605:f21c5744-effc-43b5-97f5-2a8c62c39adb", "row_index": 605, "timestamp": "2019-03-01T05:51:51Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "254.254.89.255", "user_agent": "aws-cli/1.16.114 Python/3.6.7 Linux/4.15.0-45-generic botocore/1.12.104", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1110, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "f21c5744-effc-43b5-97f5-2a8c62c39adb", "eventTime": "2019-03-01T05:51:51Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "254.254.89.255", "userAgent": "aws-cli/1.16.114 Python/3.6.7 Linux/4.15.0-45-generic botocore/1.12.104", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"nextToken": "eyJ2IjoiMiIsImMiOiJNVzVtVWhPZ3duMUw2ZEJPT1dTV2dvZ2pZSEExckFhamkzL1BxZFdVZTJETmpJN0ZEdnhKek9zWFNMWHorYy8yZzBqM0lPZytzcC9TSUtvZmlYWmZXc1NOZ0JaekV3eWdmOU5yemxYRUFXUk90WmNBYk42bTJOWnFDa2w4MkhJTS95Qzk5OEpCS3RCNkUwaFdKRW9vcE4yWW50VVRkb0dqek9mZW9seFV4ZUFxcWt2S2hzQkRyZFh1QW9ma3h6bWx5cThEMTNScGxVeWkrSndpY055SXhxOTBEWnFLMVdFPSIsInMiOiIxIn0=", "maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "f21c5744-effc-43b5-97f5-2a8c62c39adb", "record_id": "flaws_cloudtrail:0000606:f21c5744-effc-43b5-97f5-2a8c62c39adb", "row_index": 606, "timestamp": "2019-03-01T05:51:51Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "254.254.89.255", "user_agent": "aws-cli/1.16.114 Python/3.6.7 Linux/4.15.0-45-generic botocore/1.12.104", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1110, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "f21c5744-effc-43b5-97f5-2a8c62c39adb", "eventTime": "2019-03-01T05:51:51Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "254.254.89.255", "userAgent": "aws-cli/1.16.114 Python/3.6.7 Linux/4.15.0-45-generic botocore/1.12.104", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"nextToken": "eyJ2IjoiMiIsImMiOiJNVzVtVWhPZ3duMUw2ZEJPT1dTV2dvZ2pZSEExckFhamkzL1BxZFdVZTJETmpJN0ZEdnhKek9zWFNMWHorYy8yZzBqM0lPZytzcC9TSUtvZmlYWmZXc1NOZ0JaekV3eWdmOU5yemxYRUFXUk90WmNBYk42bTJOWnFDa2w4MkhJTS95Qzk5OEpCS3RCNkUwaFdKRW9vcE4yWW50VVRkb0dqek9mZW9seFV4ZUFxcWt2S2hzQkRyZFh1QW9ma3h6bWx5cThEMTNScGxVeWkrSndpY055SXhxOTBEWnFLMVdFPSIsInMiOiIxIn0=", "maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "cca684118-0a82-4fc5-ab5e-8830bfb1da2b", "record_id": "flaws_cloudtrail:0000607:cca684118-0a82-4fc5-ab5e-8830bfb1da2b", "row_index": 607, "timestamp": "2019-03-01T05:51:52Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "254.254.89.255", "user_agent": "aws-cli/1.16.114 Python/3.6.7 Linux/4.15.0-45-generic botocore/1.12.104", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1067, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "cca684118-0a82-4fc5-ab5e-8830bfb1da2b", "eventTime": "2019-03-01T05:51:52Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "254.254.89.255", "userAgent": "aws-cli/1.16.114 Python/3.6.7 Linux/4.15.0-45-generic botocore/1.12.104", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"nextToken": "eyJ2IjoiMiIsImMiOiIyZkJ1Z25Wb3dibjhxWEV4ZzRCeW1QdEhFbHVmUEZyZ3BNVkkvSmY5QnVrdERGczB2eUFOaHFYcUVidzUzOG45SUZubzRZM1FYSmR5TmY4a3kzZkJBMDdaa1NLZXJzeGZrSlVrVnFDYi9USGFTbnZ1ZEhsYmhjclRnNTEyNWdqWDRmRjdEdnF3NkU5a3NvL3VCRElQSHNzRWsvSU1WTHUzQmtObWxvbXQ0TUdhbnR6UHFNcWgzVjNSajlFc1VhMD0iLCJzIjoiMSJ9", "maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "cca684118-0a82-4fc5-ab5e-8830bfb1da2b", "record_id": "flaws_cloudtrail:0000608:cca684118-0a82-4fc5-ab5e-8830bfb1da2b", "row_index": 608, "timestamp": "2019-03-01T05:51:52Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "254.254.89.255", "user_agent": "aws-cli/1.16.114 Python/3.6.7 Linux/4.15.0-45-generic botocore/1.12.104", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1067, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "cca684118-0a82-4fc5-ab5e-8830bfb1da2b", "eventTime": "2019-03-01T05:51:52Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "254.254.89.255", "userAgent": "aws-cli/1.16.114 Python/3.6.7 Linux/4.15.0-45-generic botocore/1.12.104", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"nextToken": "eyJ2IjoiMiIsImMiOiIyZkJ1Z25Wb3dibjhxWEV4ZzRCeW1QdEhFbHVmUEZyZ3BNVkkvSmY5QnVrdERGczB2eUFOaHFYcUVidzUzOG45SUZubzRZM1FYSmR5TmY4a3kzZkJBMDdaa1NLZXJzeGZrSlVrVnFDYi9USGFTbnZ1ZEhsYmhjclRnNTEyNWdqWDRmRjdEdnF3NkU5a3NvL3VCRElQSHNzRWsvSU1WTHUzQmtObWxvbXQ0TUdhbnR6UHFNcWgzVjNSajlFc1VhMD0iLCJzIjoiMSJ9", "maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "5f0d7c62-e4ee-45b3-b54f-87273de701ff", "record_id": "flaws_cloudtrail:0000609:5f0d7c62-e4ee-45b3-b54f-87273de701ff", "row_index": 609, "timestamp": "2019-03-01T05:51:53Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "254.254.89.255", "user_agent": "aws-cli/1.16.114 Python/3.6.7 Linux/4.15.0-45-generic botocore/1.12.104", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1110, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "5f0d7c62-e4ee-45b3-b54f-87273de701ff", "eventTime": "2019-03-01T05:51:53Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "254.254.89.255", "userAgent": "aws-cli/1.16.114 Python/3.6.7 Linux/4.15.0-45-generic botocore/1.12.104", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"nextToken": "eyJ2IjoiMiIsImMiOiIxangyaWVFTUxBTlJSMmd2NzN3NzVUb3JtU0xyZzEvMkFNeHl4MUszY3pQM0taRTBxeDlhRkVQREoycVpoNjhma3VKaEZxUmtYeitOdTVvVitmRTEvK1VDdnVLZ0tlbkhWU3dGaWdiaDkzYUhCYWpPSVIwZWV3TlVxSHNPd0lHTCtPOU5QZXJZL1ZseWxRVjlQb2pJQUsvMjh0b0FIRG40YWdQWkNZUmNHcXIzQlFrZVMzL0Q2aHhMOHRFTkxJUlR3Q1hqczRzOThuWU4yMHQvWkV3RTZEZWd6SWQ2czFNPSIsInMiOiIxIn0=", "maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}