Task: attack_reconstruction (flaws_cloudtrail)
Prompt: Review the CloudTrail records for a session-credentialed principal that moves from storage discovery into object access against an S3 bucket. Identify the responsible principal, the applicable MITRE ATT&CK technique, the supporting CloudTrail record_ids for each phase of the chain you reconstruct, and the impacted AWS assets. Return a JSON object matching the AttackReconstructionAnswer schema. Use principal.arn for primary_actor, the MITRE ATT&CK ID (e.g. T1530) for technique, and group the supporting CloudTrail record_ids by attack phase. List the AWS asset identifiers (bucket names, role/user names, trail names, ARNs) the attack acted on as impacted_assets.
Answer schema: attack_reconstruction_answer

CloudTrail records:
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "5bf6721f-fa45-455c-bed5-af8d24ba4f07", "record_id": "flaws_cloudtrail:0000000:5bf6721f-fa45-455c-bed5-af8d24ba4f07", "row_index": 0, "timestamp": "2019-07-29T22:31:27Z", "event_type": "ListBuckets", "event_source": "s3.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "109.234.105.8", "user_agent": "[aws-cli/1.16.208 Python/3.5.1 Darwin/17.7.0 botocore/1.12.198]", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 801, "raw_record_depth": 3, "raw_record_top_level_keys": ["additionalEventData", "awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "5bf6721f-fa45-455c-bed5-af8d24ba4f07", "eventTime": "2019-07-29T22:31:27Z", "eventName": "ListBuckets", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "109.234.105.8", "userAgent": "[aws-cli/1.16.208 Python/3.5.1 Darwin/17.7.0 botocore/1.12.198]", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"host": ["s3.amazonaws.com"]}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "3f2f127e-0664-44a7-bc9b-45c8a0433225", "record_id": "flaws_cloudtrail:0000001:3f2f127e-0664-44a7-bc9b-45c8a0433225", "row_index": 1, "timestamp": "2019-07-29T22:31:34Z", "event_type": "AssumeRole", "event_source": "sts.amazonaws.com", "principal": {"type": "AWSService", "arn": null, "account_id": null, "principal_id": null, "user_name": null, "access_key_id": null, "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "ec2.amazonaws.com", "user_agent": "ec2.amazonaws.com", "aws_region": "us-west-2"}, "resource_arns": ["arn:aws:iam::811596193553:role/flaws"], "raw_record_size_bytes": 1882, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "resources", "responseElements", "sharedEventID", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "3f2f127e-0664-44a7-bc9b-45c8a0433225", "eventTime": "2019-07-29T22:31:34Z", "eventName": "AssumeRole", "eventSource": "sts.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "ec2.amazonaws.com", "userAgent": "ec2.amazonaws.com", "awsRegion": "us-west-2", "userIdentity": {"type": "AWSService", "invokedBy": "ec2.amazonaws.com"}, "requestParameters": {"roleSessionName": "i-aa2d3b42e5c6e801a", "roleArn": "arn:aws:iam::811596193553:role/flaws"}, "responseElements": {"credentials": {"accessKeyId": "ASIAKWXK3KKY6WROKTWC", "expiration": "Jul 30, 2019 4:47:41 AM", "sessionToken": "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"}}, "resources": [{"ARN": "arn:aws:iam::811596193553:role/flaws", "accountId": "811596193553", "type": "AWS::IAM::Role"}]}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "3f2f127e-0664-44a7-bc9b-45c8a0433225", "record_id": "flaws_cloudtrail:0000002:3f2f127e-0664-44a7-bc9b-45c8a0433225", "row_index": 2, "timestamp": "2019-07-29T22:31:34Z", "event_type": "AssumeRole", "event_source": "sts.amazonaws.com", "principal": {"type": "AWSService", "arn": null, "account_id": null, "principal_id": null, "user_name": null, "access_key_id": null, "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "ec2.amazonaws.com", "user_agent": "ec2.amazonaws.com", "aws_region": "us-west-2"}, "resource_arns": ["arn:aws:iam::811596193553:role/flaws"], "raw_record_size_bytes": 1882, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "resources", "responseElements", "sharedEventID", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "3f2f127e-0664-44a7-bc9b-45c8a0433225", "eventTime": "2019-07-29T22:31:34Z", "eventName": "AssumeRole", "eventSource": "sts.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "ec2.amazonaws.com", "userAgent": "ec2.amazonaws.com", "awsRegion": "us-west-2", "userIdentity": {"type": "AWSService", "invokedBy": "ec2.amazonaws.com"}, "requestParameters": {"roleSessionName": "i-aa2d3b42e5c6e801a", "roleArn": "arn:aws:iam::811596193553:role/flaws"}, "responseElements": {"credentials": {"accessKeyId": "ASIAKWXK3KKY6WROKTWC", "expiration": "Jul 30, 2019 4:47:41 AM", "sessionToken": "AgoJb3JpZ2luX2VjEAcaCXVzLXdlc3QtMiJIMEYCIQD+Ip0MAhsxF6tYOUqnu/l6m5y0fiJtfwwWvH12X3rwswIhAOY6DS6nOLQwbwV1WCKEdEjVG/DAYDgLXaQBThgxBkNyKuMDCID//////////wEQABoMOTc1NDI2MjYyMDI5IgyNUYe7+EasmeMbbF0qtwPOVsCPlBrg2OqOalNKYRmeqtdeCtYqmNeX2Gn/guYsWCkEv3eCrEWAlfax5+KMEieiNMKx44veHNXzaE2JDRJEL0EjAmqfYnHb9mJjdoaD/SA4axncinr8yGGzbj0QY96rOdf0Zo5t2WCn+kTsTS60DWJPrwFdi4VasPlqcPOJCJ1NNJZkNU/Ip3LMqB1u2r+VGuVS/N7Fp1of5VbGUYOlKMjSqxNT9oNFbawDxFukaZIuTD6rTLGI0yja+7ILE2hoQSKPavaJmxCtY7PZ1XNIXdSz9Ng711Xe10bORZe1mZNy7BQ4qcKAifqr6nKdy9qIt0PU5Apw6DpcqG9ymfJKXyFiIMvZ+L/xGymvA80K6XZThtd6xLLaFq7zycKnQ6FNLn1amJGda/8fSngiQZRFG6j2v2JwuiAPepNnplWbMvQ9bUyPv0SCfil+xBtLpkVE3w6Qd32BOsa97Y4wGA0lP7UPRntTdylVjw1BBTxbiYe+dHEnOitxwuqeEtmO9F6ij9S81SLzkm+KuikWeGOlID8w+8j/Rsan+p9sncUl8OmdOKTeiDGKd/9NgsD0T0uvcBNKa6gvMMbn/ekFOrMBa0f5vXZbynhsesUkXicTxiXmZpv05t/0zi1sNZ3VGCot6qhaLpZY3euSVlka3hDgD0KcFTA3Jf6sNIqb6ENn1dzWXaK2kjO6tEO9xI7E2vM3AN3L9RYoI1QAHVOp2QxfpcS046B0LrW41em2FTrl4sJVbIGDdCsCOXK4mDAdT8LKkmg5kX7JuDOUlHO41FiLGypU+y0EPL1IMZAezjjIswMu8papMQR6nBtnx/dabFWvPr8="}}, "resources": [{"ARN": "arn:aws:iam::811596193553:role/flaws", "accountId": "811596193553", "type": "AWS::IAM::Role"}]}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "30a1a16f-6e7b-4c75-83f2-299a31eff303", "record_id": "flaws_cloudtrail:0000003:30a1a16f-6e7b-4c75-83f2-299a31eff303", "row_index": 3, "timestamp": "2019-07-29T22:37:48Z", "event_type": "ListBuckets", "event_source": "s3.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "109.234.105.8", "user_agent": "[aws-cli/1.16.208 Python/3.5.1 Darwin/17.7.0 botocore/1.12.198]", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 801, "raw_record_depth": 3, "raw_record_top_level_keys": ["additionalEventData", "awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "30a1a16f-6e7b-4c75-83f2-299a31eff303", "eventTime": "2019-07-29T22:37:48Z", "eventName": "ListBuckets", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "109.234.105.8", "userAgent": "[aws-cli/1.16.208 Python/3.5.1 Darwin/17.7.0 botocore/1.12.198]", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"host": ["s3.amazonaws.com"]}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "30a1a16f-6e7b-4c75-83f2-299a31eff303", "record_id": "flaws_cloudtrail:0000004:30a1a16f-6e7b-4c75-83f2-299a31eff303", "row_index": 4, "timestamp": "2019-07-29T22:37:48Z", "event_type": "ListBuckets", "event_source": "s3.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "109.234.105.8", "user_agent": "[aws-cli/1.16.208 Python/3.5.1 Darwin/17.7.0 botocore/1.12.198]", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 801, "raw_record_depth": 3, "raw_record_top_level_keys": ["additionalEventData", "awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "30a1a16f-6e7b-4c75-83f2-299a31eff303", "eventTime": "2019-07-29T22:37:48Z", "eventName": "ListBuckets", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "109.234.105.8", "userAgent": "[aws-cli/1.16.208 Python/3.5.1 Darwin/17.7.0 botocore/1.12.198]", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"host": ["s3.amazonaws.com"]}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "57f23490-340b-4c82-8b16-ca56f527a773", "record_id": "flaws_cloudtrail:0000005:57f23490-340b-4c82-8b16-ca56f527a773", "row_index": 5, "timestamp": "2019-07-29T22:44:16Z", "event_type": "GetCallerIdentity", "event_source": "sts.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "109.234.105.8", "user_agent": "aws-cli/1.16.208 Python/3.5.1 Darwin/17.7.0 botocore/1.12.198", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 769, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "57f23490-340b-4c82-8b16-ca56f527a773", "eventTime": "2019-07-29T22:44:16Z", "eventName": "GetCallerIdentity", "eventSource": "sts.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "109.234.105.8", "userAgent": "aws-cli/1.16.208 Python/3.5.1 Darwin/17.7.0 botocore/1.12.198", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "responseElements": {"userId": "AIDA9BO36HFBHKGJAO9C1", "account": "811596193553", "arn": "arn:aws:iam::811596193553:user/backup"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "57f23490-340b-4c82-8b16-ca56f527a773", "record_id": "flaws_cloudtrail:0000006:57f23490-340b-4c82-8b16-ca56f527a773", "row_index": 6, "timestamp": "2019-07-29T22:44:16Z", "event_type": "GetCallerIdentity", "event_source": "sts.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "109.234.105.8", "user_agent": "aws-cli/1.16.208 Python/3.5.1 Darwin/17.7.0 botocore/1.12.198", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 769, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "57f23490-340b-4c82-8b16-ca56f527a773", "eventTime": "2019-07-29T22:44:16Z", "eventName": "GetCallerIdentity", "eventSource": "sts.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "109.234.105.8", "userAgent": "aws-cli/1.16.208 Python/3.5.1 Darwin/17.7.0 botocore/1.12.198", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "responseElements": {"userId": "AIDA9BO36HFBHKGJAO9C1", "account": "811596193553", "arn": "arn:aws:iam::811596193553:user/backup"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "0d42156-7fab-4041-96f6-d8fdd776f9a2", "record_id": "flaws_cloudtrail:0000007:0d42156-7fab-4041-96f6-d8fdd776f9a2", "row_index": 7, "timestamp": "2019-07-29T22:45:52Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "109.234.105.8", "user_agent": "aws-cli/1.16.208 Python/3.5.1 Darwin/17.7.0 botocore/1.12.198", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 751, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "0d42156-7fab-4041-96f6-d8fdd776f9a2", "eventTime": "2019-07-29T22:45:52Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "109.234.105.8", "userAgent": "aws-cli/1.16.208 Python/3.5.1 Darwin/17.7.0 botocore/1.12.198", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "0d42156-7fab-4041-96f6-d8fdd776f9a2", "record_id": "flaws_cloudtrail:0000008:0d42156-7fab-4041-96f6-d8fdd776f9a2", "row_index": 8, "timestamp": "2019-07-29T22:45:52Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "109.234.105.8", "user_agent": "aws-cli/1.16.208 Python/3.5.1 Darwin/17.7.0 botocore/1.12.198", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 751, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "0d42156-7fab-4041-96f6-d8fdd776f9a2", "eventTime": "2019-07-29T22:45:52Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "109.234.105.8", "userAgent": "aws-cli/1.16.208 Python/3.5.1 Darwin/17.7.0 botocore/1.12.198", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "9882df19-21e1-4f16-a72c-dee350cb97b7", "record_id": "flaws_cloudtrail:0000009:9882df19-21e1-4f16-a72c-dee350cb97b7", "row_index": 9, "timestamp": "2019-07-29T22:45:54Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "109.234.105.8", "user_agent": "aws-cli/1.16.208 Python/3.5.1 Darwin/17.7.0 botocore/1.12.198", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1070, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "9882df19-21e1-4f16-a72c-dee350cb97b7", "eventTime": "2019-07-29T22:45:54Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "109.234.105.8", "userAgent": "aws-cli/1.16.208 Python/3.5.1 Darwin/17.7.0 botocore/1.12.198", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"nextToken": "eyJ2IjoiMiIsImMiOiJhT2QydjMrbE5qQ2VRUnlnUHB4TDlsTXE4OUZWQ0tQWng2SUhWSjA4UTA4WEN4Uml4UzZ2ZVJTSkpYa1F3VnpRc1BLbytOcFdsZ2tDckZrOGhqVzFpckVKME1aSTRGeUh0OUMrZ3pLVjEwRWFMcCtLcFVyRWExRmhGZE16aXg1bWtiN0V2aTlNbUoxU3lSOE9rQnBBbEhTT2Y0clZFMlpPZk84clRRT1piVGFXRm5yTmZNSUpkcFJCRllDNGVoK0FmZG1uOGhNR2dUMD0iLCJzIjoiMSJ9", "maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "9882df19-21e1-4f16-a72c-dee350cb97b7", "record_id": "flaws_cloudtrail:0000010:9882df19-21e1-4f16-a72c-dee350cb97b7", "row_index": 10, "timestamp": "2019-07-29T22:45:54Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "109.234.105.8", "user_agent": "aws-cli/1.16.208 Python/3.5.1 Darwin/17.7.0 botocore/1.12.198", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1070, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "9882df19-21e1-4f16-a72c-dee350cb97b7", "eventTime": "2019-07-29T22:45:54Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "109.234.105.8", "userAgent": "aws-cli/1.16.208 Python/3.5.1 Darwin/17.7.0 botocore/1.12.198", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"nextToken": "eyJ2IjoiMiIsImMiOiJhT2QydjMrbE5qQ2VRUnlnUHB4TDlsTXE4OUZWQ0tQWng2SUhWSjA4UTA4WEN4Uml4UzZ2ZVJTSkpYa1F3VnpRc1BLbytOcFdsZ2tDckZrOGhqVzFpckVKME1aSTRGeUh0OUMrZ3pLVjEwRWFMcCtLcFVyRWExRmhGZE16aXg1bWtiN0V2aTlNbUoxU3lSOE9rQnBBbEhTT2Y0clZFMlpPZk84clRRT1piVGFXRm5yTmZNSUpkcFJCRllDNGVoK0FmZG1uOGhNR2dUMD0iLCJzIjoiMSJ9", "maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "ff9fc10d-204a-485a-861c-246bd26dc9a6", "record_id": "flaws_cloudtrail:0000011:ff9fc10d-204a-485a-861c-246bd26dc9a6", "row_index": 11, "timestamp": "2019-07-29T22:45:57Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "109.234.105.8", "user_agent": "aws-cli/1.16.208 Python/3.5.1 Darwin/17.7.0 botocore/1.12.198", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1079, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "ff9fc10d-204a-485a-861c-246bd26dc9a6", "eventTime": "2019-07-29T22:45:57Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "109.234.105.8", "userAgent": "aws-cli/1.16.208 Python/3.5.1 Darwin/17.7.0 botocore/1.12.198", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"nextToken": "eyJ2IjoiMiIsImMiOiI3SmhmNWdBak1ZYStuaFRlT1RHajhXcFhMTXc3ZEVKOE1oV0RmL1BnZFl5Tm9ieGg4RGxtUWRKRVJoY1F6L2MxQlVGOFIvYWtSWE9hbHkzY2NjYjlwWEdseFM5c2hWKzFKL1hwOEQ1czcyM0V0TFJXVWo1UkhQNlZxUXZyVXdmS014Y1NzOXhpZjVKVDFjR1ByZnZSVmNoTEVDRkJHUmFPWHhvaE9UenhZem5YMTlWLy81ajdzT0plUy9WbE1sb1pqRWtYSloyRTgvV1RzUT09IiwicyI6IjEifQ==", "maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "ff9fc10d-204a-485a-861c-246bd26dc9a6", "record_id": "flaws_cloudtrail:0000012:ff9fc10d-204a-485a-861c-246bd26dc9a6", "row_index": 12, "timestamp": "2019-07-29T22:45:57Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "109.234.105.8", "user_agent": "aws-cli/1.16.208 Python/3.5.1 Darwin/17.7.0 botocore/1.12.198", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1079, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "ff9fc10d-204a-485a-861c-246bd26dc9a6", "eventTime": "2019-07-29T22:45:57Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "109.234.105.8", "userAgent": "aws-cli/1.16.208 Python/3.5.1 Darwin/17.7.0 botocore/1.12.198", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"nextToken": "eyJ2IjoiMiIsImMiOiI3SmhmNWdBak1ZYStuaFRlT1RHajhXcFhMTXc3ZEVKOE1oV0RmL1BnZFl5Tm9ieGg4RGxtUWRKRVJoY1F6L2MxQlVGOFIvYWtSWE9hbHkzY2NjYjlwWEdseFM5c2hWKzFKL1hwOEQ1czcyM0V0TFJXVWo1UkhQNlZxUXZyVXdmS014Y1NzOXhpZjVKVDFjR1ByZnZSVmNoTEVDRkJHUmFPWHhvaE9UenhZem5YMTlWLy81ajdzT0plUy9WbE1sb1pqRWtYSloyRTgvV1RzUT09IiwicyI6IjEifQ==", "maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "0cae3632-de50-4265-ad0a-4bb27391cf1e", "record_id": "flaws_cloudtrail:0000013:0cae3632-de50-4265-ad0a-4bb27391cf1e", "row_index": 13, "timestamp": "2019-07-29T22:45:59Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "109.234.105.8", "user_agent": "aws-cli/1.16.208 Python/3.5.1 Darwin/17.7.0 botocore/1.12.198", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1079, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "0cae3632-de50-4265-ad0a-4bb27391cf1e", "eventTime": "2019-07-29T22:45:59Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "109.234.105.8", "userAgent": "aws-cli/1.16.208 Python/3.5.1 Darwin/17.7.0 botocore/1.12.198", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"nextToken": "eyJ2IjoiMiIsImMiOiJyd1h4Mk1TNFd2bVZUbjRadnRkcWFoZG52djQ0S1NSa0VYNTI4allCQ3lqVzlOM1VPWjlBMndJZjVjRTRaaGM4STZyRmNsY3FnZ3d1VGxBQXZwZUlEd0xjTkxTNldCS094UjdQSndtWExjMXpOSTkvc041MTVVY0JyaFh6RmJoSkxtRjVpd01JY1hldk9xMlprMldyblkrMFk5cXRidzJnVTk2Q0FEbUxTMlhUTkxVQkt5UE4wdFp2WXh4eEJkeGlXSWtxMk4xc3BYSGV5Zz09IiwicyI6IjEifQ==", "maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "0cae3632-de50-4265-ad0a-4bb27391cf1e", "record_id": "flaws_cloudtrail:0000014:0cae3632-de50-4265-ad0a-4bb27391cf1e", "row_index": 14, "timestamp": "2019-07-29T22:45:59Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "109.234.105.8", "user_agent": "aws-cli/1.16.208 Python/3.5.1 Darwin/17.7.0 botocore/1.12.198", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1079, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "0cae3632-de50-4265-ad0a-4bb27391cf1e", "eventTime": "2019-07-29T22:45:59Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "109.234.105.8", "userAgent": "aws-cli/1.16.208 Python/3.5.1 Darwin/17.7.0 botocore/1.12.198", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"nextToken": "eyJ2IjoiMiIsImMiOiJyd1h4Mk1TNFd2bVZUbjRadnRkcWFoZG52djQ0S1NSa0VYNTI4allCQ3lqVzlOM1VPWjlBMndJZjVjRTRaaGM4STZyRmNsY3FnZ3d1VGxBQXZwZUlEd0xjTkxTNldCS094UjdQSndtWExjMXpOSTkvc041MTVVY0JyaFh6RmJoSkxtRjVpd01JY1hldk9xMlprMldyblkrMFk5cXRidzJnVTk2Q0FEbUxTMlhUTkxVQkt5UE4wdFp2WXh4eEJkeGlXSWtxMk4xc3BYSGV5Zz09IiwicyI6IjEifQ==", "maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "d8cd5f67-0985-4ad1-a163-582c906542f25", "record_id": "flaws_cloudtrail:0000015:d8cd5f67-0985-4ad1-a163-582c906542f25", "row_index": 15, "timestamp": "2019-07-29T22:46:01Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "109.234.105.8", "user_agent": "aws-cli/1.16.208 Python/3.5.1 Darwin/17.7.0 botocore/1.12.198", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1080, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "d8cd5f67-0985-4ad1-a163-582c906542f25", "eventTime": "2019-07-29T22:46:01Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "109.234.105.8", "userAgent": "aws-cli/1.16.208 Python/3.5.1 Darwin/17.7.0 botocore/1.12.198", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"nextToken": "eyJ2IjoiMiIsImMiOiJ3cG1KMWowWmVwYThGWjNOUmc2Y1dNeVNPOGhRTDNPV0FLQmlLaFAraHh2QU9PdEdmYjdGbHVHNXRKdDJrM01TQmZVRDFsUGxrMlhPT1lWMFJBUmRjdGp0WGE5b2ZsMlZULzVJdXArenphdTRXUjIvS2N1L1RZZm5DUml5RzM5emxRWHI1b2FWSU9iS2xwNUR2bm5ZZkplcm9pOWppS0l2OGtyY002SFZJVjA1d20rMlkrRXRqemJaYjRtOGE2QkxwZ2E5dnpTeE0ybWxpZz09IiwicyI6IjEifQ==", "maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "d8cd5f67-0985-4ad1-a163-582c906542f25", "record_id": "flaws_cloudtrail:0000016:d8cd5f67-0985-4ad1-a163-582c906542f25", "row_index": 16, "timestamp": "2019-07-29T22:46:01Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "109.234.105.8", "user_agent": "aws-cli/1.16.208 Python/3.5.1 Darwin/17.7.0 botocore/1.12.198", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1080, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "d8cd5f67-0985-4ad1-a163-582c906542f25", "eventTime": "2019-07-29T22:46:01Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "109.234.105.8", "userAgent": "aws-cli/1.16.208 Python/3.5.1 Darwin/17.7.0 botocore/1.12.198", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"nextToken": "eyJ2IjoiMiIsImMiOiJ3cG1KMWowWmVwYThGWjNOUmc2Y1dNeVNPOGhRTDNPV0FLQmlLaFAraHh2QU9PdEdmYjdGbHVHNXRKdDJrM01TQmZVRDFsUGxrMlhPT1lWMFJBUmRjdGp0WGE5b2ZsMlZULzVJdXArenphdTRXUjIvS2N1L1RZZm5DUml5RzM5emxRWHI1b2FWSU9iS2xwNUR2bm5ZZkplcm9pOWppS0l2OGtyY002SFZJVjA1d20rMlkrRXRqemJaYjRtOGE2QkxwZ2E5dnpTeE0ybWxpZz09IiwicyI6IjEifQ==", "maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "28aeb242-c463-4109-9eea-395dc90a9e31", "record_id": "flaws_cloudtrail:0000017:28aeb242-c463-4109-9eea-395dc90a9e31", "row_index": 17, "timestamp": "2019-07-29T22:46:03Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "109.234.105.8", "user_agent": "aws-cli/1.16.208 Python/3.5.1 Darwin/17.7.0 botocore/1.12.198", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1079, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "28aeb242-c463-4109-9eea-395dc90a9e31", "eventTime": "2019-07-29T22:46:03Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "109.234.105.8", "userAgent": "aws-cli/1.16.208 Python/3.5.1 Darwin/17.7.0 botocore/1.12.198", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"nextToken": "eyJ2IjoiMiIsImMiOiJVdTkxODBZREtOUDBORlZ0dWc5ZVhvYithRzZ0VVMvWkcyNmIxR0cvRGUySDl4NUNMWDBNS0NadkZ6dkJ3aHBickt2YUtKSmhGRlVjWS9PQmZtNGF1c0IwY29TVjc2YUZOcGFBWXR0bVZVRGNKQy9OWC9sdXlOSmlZU1FnNnhRNEUyeGdKVXdQS0ZkeTlsUUpPR1A4cGpxK0ZFdWFJcXA4ci84TU5DK0htMzRWSFBhZWtCL3hjZXgwdDhwRHBSaklEWksyak5PV0dRbmptdz09IiwicyI6IjEifQ==", "maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "28aeb242-c463-4109-9eea-395dc90a9e31", "record_id": "flaws_cloudtrail:0000018:28aeb242-c463-4109-9eea-395dc90a9e31", "row_index": 18, "timestamp": "2019-07-29T22:46:03Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "109.234.105.8", "user_agent": "aws-cli/1.16.208 Python/3.5.1 Darwin/17.7.0 botocore/1.12.198", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1079, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "28aeb242-c463-4109-9eea-395dc90a9e31", "eventTime": "2019-07-29T22:46:03Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "109.234.105.8", "userAgent": "aws-cli/1.16.208 Python/3.5.1 Darwin/17.7.0 botocore/1.12.198", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"nextToken": "eyJ2IjoiMiIsImMiOiJVdTkxODBZREtOUDBORlZ0dWc5ZVhvYithRzZ0VVMvWkcyNmIxR0cvRGUySDl4NUNMWDBNS0NadkZ6dkJ3aHBickt2YUtKSmhGRlVjWS9PQmZtNGF1c0IwY29TVjc2YUZOcGFBWXR0bVZVRGNKQy9OWC9sdXlOSmlZU1FnNnhRNEUyeGdKVXdQS0ZkeTlsUUpPR1A4cGpxK0ZFdWFJcXA4ci84TU5DK0htMzRWSFBhZWtCL3hjZXgwdDhwRHBSaklEWksyak5PV0dRbmptdz09IiwicyI6IjEifQ==", "maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "7f60f85c-bac9-4fea-964b-f06477f166a4", "record_id": "flaws_cloudtrail:0000019:7f60f85c-bac9-4fea-964b-f06477f166a4", "row_index": 19, "timestamp": "2019-07-29T22:46:04Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "109.234.105.8", "user_agent": "aws-cli/1.16.208 Python/3.5.1 Darwin/17.7.0 botocore/1.12.198", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1070, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "7f60f85c-bac9-4fea-964b-f06477f166a4", "eventTime": "2019-07-29T22:46:04Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "109.234.105.8", "userAgent": "aws-cli/1.16.208 Python/3.5.1 Darwin/17.7.0 botocore/1.12.198", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"nextToken": "eyJ2IjoiMiIsImMiOiJiNXFMc2RuZy9XcmkyNFlsaVlRdldwOVhydHhzWGJYWUxwWE5vTlRTVnM4ZVNWeDdUNmtOcDhYRDdQaHYrcldQZEFkSyt1RmJucUs2UUExN2g5aDUrUGU0TnVZamk4Tmc1WXRDaEtETmJhMGhqMGdZV3FUY1JXK2UwNzZjQU1ZTUVPSnI5Tk56ZDdhTGcxanpBVDlnSGxhbUczeG9KWUc0NEVJWERqdDBPUlM0cUhNb2R0VmZsTW4yY01SV29jaW9qVnIxUzVhVFp3PT0iLCJzIjoiMSJ9", "maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "7f60f85c-bac9-4fea-964b-f06477f166a4", "record_id": "flaws_cloudtrail:0000020:7f60f85c-bac9-4fea-964b-f06477f166a4", "row_index": 20, "timestamp": "2019-07-29T22:46:04Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "109.234.105.8", "user_agent": "aws-cli/1.16.208 Python/3.5.1 Darwin/17.7.0 botocore/1.12.198", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1070, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "7f60f85c-bac9-4fea-964b-f06477f166a4", "eventTime": "2019-07-29T22:46:04Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "109.234.105.8", "userAgent": "aws-cli/1.16.208 Python/3.5.1 Darwin/17.7.0 botocore/1.12.198", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"nextToken": "eyJ2IjoiMiIsImMiOiJiNXFMc2RuZy9XcmkyNFlsaVlRdldwOVhydHhzWGJYWUxwWE5vTlRTVnM4ZVNWeDdUNmtOcDhYRDdQaHYrcldQZEFkSyt1RmJucUs2UUExN2g5aDUrUGU0TnVZamk4Tmc1WXRDaEtETmJhMGhqMGdZV3FUY1JXK2UwNzZjQU1ZTUVPSnI5Tk56ZDdhTGcxanpBVDlnSGxhbUczeG9KWUc0NEVJWERqdDBPUlM0cUhNb2R0VmZsTW4yY01SV29jaW9qVnIxUzVhVFp3PT0iLCJzIjoiMSJ9", "maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "18e0b52b-f851-419c-98d1-2c2453dbb212", "record_id": "flaws_cloudtrail:0000021:18e0b52b-f851-419c-98d1-2c2453dbb212", "row_index": 21, "timestamp": "2019-07-29T22:46:06Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "109.234.105.8", "user_agent": "aws-cli/1.16.208 Python/3.5.1 Darwin/17.7.0 botocore/1.12.198", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1079, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "18e0b52b-f851-419c-98d1-2c2453dbb212", "eventTime": "2019-07-29T22:46:06Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "109.234.105.8", "userAgent": "aws-cli/1.16.208 Python/3.5.1 Darwin/17.7.0 botocore/1.12.198", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"nextToken": "eyJ2IjoiMiIsImMiOiJxK0V1L09nVjJzTHZaUk9LMlA0WFkzTEhCeWJkSkFCMmZjV3hrMzMzNkZUUnVwQnpTZkhRMHNFcUdQOVVqUkI2YWtSMDg3Y1l6RlBpdDZJclpTTis4OXFaOExtTm5rRmd1U3Azc2Nzb3ZQcVBiSTNhQ2tSMkNyUis2bjBNRTJ2RCszOWdCMVJpYm9YQS9IaC9kd1RLNWtmU3Y2ZTFFRWtyQ0Q3SW9YRlJSMmkzbUR4Q2FTdHpNYmZoMmdoMWxJMzlOTlZjLzAwV1N1NGtaZz09IiwicyI6IjEifQ==", "maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "18e0b52b-f851-419c-98d1-2c2453dbb212", "record_id": "flaws_cloudtrail:0000022:18e0b52b-f851-419c-98d1-2c2453dbb212", "row_index": 22, "timestamp": "2019-07-29T22:46:06Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "109.234.105.8", "user_agent": "aws-cli/1.16.208 Python/3.5.1 Darwin/17.7.0 botocore/1.12.198", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1079, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "18e0b52b-f851-419c-98d1-2c2453dbb212", "eventTime": "2019-07-29T22:46:06Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "109.234.105.8", "userAgent": "aws-cli/1.16.208 Python/3.5.1 Darwin/17.7.0 botocore/1.12.198", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"nextToken": "eyJ2IjoiMiIsImMiOiJxK0V1L09nVjJzTHZaUk9LMlA0WFkzTEhCeWJkSkFCMmZjV3hrMzMzNkZUUnVwQnpTZkhRMHNFcUdQOVVqUkI2YWtSMDg3Y1l6RlBpdDZJclpTTis4OXFaOExtTm5rRmd1U3Azc2Nzb3ZQcVBiSTNhQ2tSMkNyUis2bjBNRTJ2RCszOWdCMVJpYm9YQS9IaC9kd1RLNWtmU3Y2ZTFFRWtyQ0Q3SW9YRlJSMmkzbUR4Q2FTdHpNYmZoMmdoMWxJMzlOTlZjLzAwV1N1NGtaZz09IiwicyI6IjEifQ==", "maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "411bb4c1-0123-4049-8265-44052f65b", "record_id": "flaws_cloudtrail:0000023:411bb4c1-0123-4049-8265-44052f65b", "row_index": 23, "timestamp": "2019-07-29T22:46:07Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "109.234.105.8", "user_agent": "aws-cli/1.16.208 Python/3.5.1 Darwin/17.7.0 botocore/1.12.198", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1076, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "411bb4c1-0123-4049-8265-44052f65b", "eventTime": "2019-07-29T22:46:07Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "109.234.105.8", "userAgent": "aws-cli/1.16.208 Python/3.5.1 Darwin/17.7.0 botocore/1.12.198", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"nextToken": "eyJ2IjoiMiIsImMiOiJ6TU50QUZib3pTQ1ZUQ0RNNVgwekIxMXA1aDAreFNHUEY1TG1UY2dYdy96clI1Titya1ZjZVhmV0RvaWVrdHNOUzJwZjUzT09qV1FSd1UzUnoxOHlwcnFKZlVnbkw3ZWVyNWhHQjNvMXZBbVhQeUZqL1ExSGVqS0plYVdHK3NwdllieitOOG9iOXhnM0x0a3JIUUNvS2w5elhPOEhjRDM2U2x4WEZ4by9nbnpLTWhvZTM2eHdNZG91b0FyQjRCM3liZVBuaUZUU0VWWFFMUT09IiwicyI6IjEifQ==", "maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "411bb4c1-0123-4049-8265-44052f65b", "record_id": "flaws_cloudtrail:0000024:411bb4c1-0123-4049-8265-44052f65b", "row_index": 24, "timestamp": "2019-07-29T22:46:07Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "109.234.105.8", "user_agent": "aws-cli/1.16.208 Python/3.5.1 Darwin/17.7.0 botocore/1.12.198", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1076, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "411bb4c1-0123-4049-8265-44052f65b", "eventTime": "2019-07-29T22:46:07Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "109.234.105.8", "userAgent": "aws-cli/1.16.208 Python/3.5.1 Darwin/17.7.0 botocore/1.12.198", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"nextToken": "eyJ2IjoiMiIsImMiOiJ6TU50QUZib3pTQ1ZUQ0RNNVgwekIxMXA1aDAreFNHUEY1TG1UY2dYdy96clI1Titya1ZjZVhmV0RvaWVrdHNOUzJwZjUzT09qV1FSd1UzUnoxOHlwcnFKZlVnbkw3ZWVyNWhHQjNvMXZBbVhQeUZqL1ExSGVqS0plYVdHK3NwdllieitOOG9iOXhnM0x0a3JIUUNvS2w5elhPOEhjRDM2U2x4WEZ4by9nbnpLTWhvZTM2eHdNZG91b0FyQjRCM3liZVBuaUZUU0VWWFFMUT09IiwicyI6IjEifQ==", "maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "ae88123d-3672-4dfb-874b-5e6cee6597fa", "record_id": "flaws_cloudtrail:0000025:ae88123d-3672-4dfb-874b-5e6cee6597fa", "row_index": 25, "timestamp": "2019-07-29T22:46:09Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "109.234.105.8", "user_agent": "aws-cli/1.16.208 Python/3.5.1 Darwin/17.7.0 botocore/1.12.198", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1078, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "ae88123d-3672-4dfb-874b-5e6cee6597fa", "eventTime": "2019-07-29T22:46:09Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "109.234.105.8", "userAgent": "aws-cli/1.16.208 Python/3.5.1 Darwin/17.7.0 botocore/1.12.198", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"nextToken": "eyJ2IjoiMiIsImMiOiI3Wk5pbUE2Q3B4bTlyU0cxaUlvMHJXN3l3c3pmbEVzNjJrSENRTjZQYW50RmJPTWlzR3FnUHd0TFBjbG5xeEFPYVpNZGVwRGxRL0VoQmhiNENLOGNpZ0F6d1MxSEsrVU1Vcng2ckJCdFplR01SOGljSk1yU2hGN05DQUY3UUhnRHNBbThUVUx5LzFVcktROUEzYW5ReCtWVys5OFRNcEJMa2cyNTFHdDExaEMvU1c5eEU2WVgyZ2F0SjZFZnJ1c0lnZ0x5VkFHYXBvbVZ1Zz09IiwicyI6IjEifQ==", "maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "ae88123d-3672-4dfb-874b-5e6cee6597fa", "record_id": "flaws_cloudtrail:0000026:ae88123d-3672-4dfb-874b-5e6cee6597fa", "row_index": 26, "timestamp": "2019-07-29T22:46:09Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "109.234.105.8", "user_agent": "aws-cli/1.16.208 Python/3.5.1 Darwin/17.7.0 botocore/1.12.198", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1078, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "ae88123d-3672-4dfb-874b-5e6cee6597fa", "eventTime": "2019-07-29T22:46:09Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "109.234.105.8", "userAgent": "aws-cli/1.16.208 Python/3.5.1 Darwin/17.7.0 botocore/1.12.198", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"nextToken": "eyJ2IjoiMiIsImMiOiI3Wk5pbUE2Q3B4bTlyU0cxaUlvMHJXN3l3c3pmbEVzNjJrSENRTjZQYW50RmJPTWlzR3FnUHd0TFBjbG5xeEFPYVpNZGVwRGxRL0VoQmhiNENLOGNpZ0F6d1MxSEsrVU1Vcng2ckJCdFplR01SOGljSk1yU2hGN05DQUY3UUhnRHNBbThUVUx5LzFVcktROUEzYW5ReCtWVys5OFRNcEJMa2cyNTFHdDExaEMvU1c5eEU2WVgyZ2F0SjZFZnJ1c0lnZ0x5VkFHYXBvbVZ1Zz09IiwicyI6IjEifQ==", "maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "83823c-c9dc-4aa6-ba11-8c5e5142b6f2", "record_id": "flaws_cloudtrail:0000027:83823c-c9dc-4aa6-ba11-8c5e5142b6f2", "row_index": 27, "timestamp": "2019-07-29T22:46:10Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "109.234.105.8", "user_agent": "aws-cli/1.16.208 Python/3.5.1 Darwin/17.7.0 botocore/1.12.198", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1073, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "83823c-c9dc-4aa6-ba11-8c5e5142b6f2", "eventTime": "2019-07-29T22:46:10Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "109.234.105.8", "userAgent": "aws-cli/1.16.208 Python/3.5.1 Darwin/17.7.0 botocore/1.12.198", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"nextToken": "eyJ2IjoiMiIsImMiOiJPZFhMaHZSSFd0aHhHRTZ1cG9LOEY2bHFkb3B2eUZLU3E5a0ducjBSQmsxemxOMTJ3NzJEcWlPK3FaSnNOUXBIbWNkcGJlV0NLeDdsQmRraDhadDd1VzJQUjN5c3QxalNvKzVuTjk1SVVCWU9ibUQyeXpxS2xlaStTSG1ueUdzVnFiWTZ0MisrcWFlNEl1eFc4elRxR21MTVVVWlJuMm4yUzJpcjlWallrWm13YTBEcllSbUU0ZFhtcWx4M3p2Ujh3ZFpxTDZiTG82MS82QT09IiwicyI6IjEifQ==", "maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "83823c-c9dc-4aa6-ba11-8c5e5142b6f2", "record_id": "flaws_cloudtrail:0000028:83823c-c9dc-4aa6-ba11-8c5e5142b6f2", "row_index": 28, "timestamp": "2019-07-29T22:46:10Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "109.234.105.8", "user_agent": "aws-cli/1.16.208 Python/3.5.1 Darwin/17.7.0 botocore/1.12.198", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1073, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "83823c-c9dc-4aa6-ba11-8c5e5142b6f2", "eventTime": "2019-07-29T22:46:10Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "109.234.105.8", "userAgent": "aws-cli/1.16.208 Python/3.5.1 Darwin/17.7.0 botocore/1.12.198", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"nextToken": "eyJ2IjoiMiIsImMiOiJPZFhMaHZSSFd0aHhHRTZ1cG9LOEY2bHFkb3B2eUZLU3E5a0ducjBSQmsxemxOMTJ3NzJEcWlPK3FaSnNOUXBIbWNkcGJlV0NLeDdsQmRraDhadDd1VzJQUjN5c3QxalNvKzVuTjk1SVVCWU9ibUQyeXpxS2xlaStTSG1ueUdzVnFiWTZ0MisrcWFlNEl1eFc4elRxR21MTVVVWlJuMm4yUzJpcjlWallrWm13YTBEcllSbUU0ZFhtcWx4M3p2Ujh3ZFpxTDZiTG82MS82QT09IiwicyI6IjEifQ==", "maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "bd3a47f3-18b5-4cf0-860d-ffa46aade5db", "record_id": "flaws_cloudtrail:0000029:bd3a47f3-18b5-4cf0-860d-ffa46aade5db", "row_index": 29, "timestamp": "2019-07-29T22:46:11Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "109.234.105.8", "user_agent": "aws-cli/1.16.208 Python/3.5.1 Darwin/17.7.0 botocore/1.12.198", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1079, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "bd3a47f3-18b5-4cf0-860d-ffa46aade5db", "eventTime": "2019-07-29T22:46:11Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "109.234.105.8", "userAgent": "aws-cli/1.16.208 Python/3.5.1 Darwin/17.7.0 botocore/1.12.198", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"nextToken": "eyJ2IjoiMiIsImMiOiJtekljRERac0IvNXdpRmkzdUZTQm50QVlqMG5CMCtHVmwvOHZpRWpMVEk1akJLTTdoNXQ4SFRLajlERk9JWkp4OEZWeCtNY282ZytlUkRrY2VhcmN4ZlBTUTdLc0x6WWwrekxtWFVBL1gxMGE2VjZqd1BSUlh1WVVmTFJjUzZBdWxTOXk2c0wyck1nOVYyY2FwMWx6dDVBWmovemZXWWoyZnc0eFRiOGZKSVpuTEZzSFowU1dwYWZ4NC9JLzJ0NlhFdG82NDBleW90RDFFQT09IiwicyI6IjEifQ==", "maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "bd3a47f3-18b5-4cf0-860d-ffa46aade5db", "record_id": "flaws_cloudtrail:0000030:bd3a47f3-18b5-4cf0-860d-ffa46aade5db", "row_index": 30, "timestamp": "2019-07-29T22:46:11Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "109.234.105.8", "user_agent": "aws-cli/1.16.208 Python/3.5.1 Darwin/17.7.0 botocore/1.12.198", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1079, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "bd3a47f3-18b5-4cf0-860d-ffa46aade5db", "eventTime": "2019-07-29T22:46:11Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "109.234.105.8", "userAgent": "aws-cli/1.16.208 Python/3.5.1 Darwin/17.7.0 botocore/1.12.198", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"nextToken": "eyJ2IjoiMiIsImMiOiJtekljRERac0IvNXdpRmkzdUZTQm50QVlqMG5CMCtHVmwvOHZpRWpMVEk1akJLTTdoNXQ4SFRLajlERk9JWkp4OEZWeCtNY282ZytlUkRrY2VhcmN4ZlBTUTdLc0x6WWwrekxtWFVBL1gxMGE2VjZqd1BSUlh1WVVmTFJjUzZBdWxTOXk2c0wyck1nOVYyY2FwMWx6dDVBWmovemZXWWoyZnc0eFRiOGZKSVpuTEZzSFowU1dwYWZ4NC9JLzJ0NlhFdG82NDBleW90RDFFQT09IiwicyI6IjEifQ==", "maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "db7ac769-9ba9-4441-889e-c7b1e4d4e1b0", "record_id": "flaws_cloudtrail:0000031:db7ac769-9ba9-4441-889e-c7b1e4d4e1b0", "row_index": 31, "timestamp": "2019-07-29T22:46:13Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "109.234.105.8", "user_agent": "aws-cli/1.16.208 Python/3.5.1 Darwin/17.7.0 botocore/1.12.198", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1079, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "db7ac769-9ba9-4441-889e-c7b1e4d4e1b0", "eventTime": "2019-07-29T22:46:13Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "109.234.105.8", "userAgent": "aws-cli/1.16.208 Python/3.5.1 Darwin/17.7.0 botocore/1.12.198", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"nextToken": "eyJ2IjoiMiIsImMiOiJiTXJzcmJtMU9La2Q3SkswUDdJeGpoWnNoeVYwU0VXc3hTenJSdjFKL0NEVUhvSHFUZjQvZmcwczlxYmYycS9NMUx5UUVUb2dEMTR3bFhBdU5VamZiMWZ1MWFGMmpta0psWGhBRUpNMzVnK2JWK25Eams5aEUreGlYVmNTd3BhcGowS05hRmI0Q3dBajc1TUNwQjNmU3lJY2JNWWJWTG9weXRKYTBxRC9jcmphNEdrTWhOWUo3SDVTVWdwUWYydG1rck5KR1JLK0xTTHlUdz09IiwicyI6IjEifQ==", "maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "db7ac769-9ba9-4441-889e-c7b1e4d4e1b0", "record_id": "flaws_cloudtrail:0000032:db7ac769-9ba9-4441-889e-c7b1e4d4e1b0", "row_index": 32, "timestamp": "2019-07-29T22:46:13Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "109.234.105.8", "user_agent": "aws-cli/1.16.208 Python/3.5.1 Darwin/17.7.0 botocore/1.12.198", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1079, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "db7ac769-9ba9-4441-889e-c7b1e4d4e1b0", "eventTime": "2019-07-29T22:46:13Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "109.234.105.8", "userAgent": "aws-cli/1.16.208 Python/3.5.1 Darwin/17.7.0 botocore/1.12.198", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"nextToken": "eyJ2IjoiMiIsImMiOiJiTXJzcmJtMU9La2Q3SkswUDdJeGpoWnNoeVYwU0VXc3hTenJSdjFKL0NEVUhvSHFUZjQvZmcwczlxYmYycS9NMUx5UUVUb2dEMTR3bFhBdU5VamZiMWZ1MWFGMmpta0psWGhBRUpNMzVnK2JWK25Eams5aEUreGlYVmNTd3BhcGowS05hRmI0Q3dBajc1TUNwQjNmU3lJY2JNWWJWTG9weXRKYTBxRC9jcmphNEdrTWhOWUo3SDVTVWdwUWYydG1rck5KR1JLK0xTTHlUdz09IiwicyI6IjEifQ==", "maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "349cb3d9-bfc7-4213-98b9-c7106e821208", "record_id": "flaws_cloudtrail:0000033:349cb3d9-bfc7-4213-98b9-c7106e821208", "row_index": 33, "timestamp": "2019-07-29T22:46:14Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "109.234.105.8", "user_agent": "aws-cli/1.16.208 Python/3.5.1 Darwin/17.7.0 botocore/1.12.198", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1079, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "349cb3d9-bfc7-4213-98b9-c7106e821208", "eventTime": "2019-07-29T22:46:14Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "109.234.105.8", "userAgent": "aws-cli/1.16.208 Python/3.5.1 Darwin/17.7.0 botocore/1.12.198", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"nextToken": "eyJ2IjoiMiIsImMiOiJJNkhGcWd4aFB3OGMyVnZjSXJhb09JOTZRT1ZYSklDQTBQWFlMcU8zNXZyamhpb0tNUm5EY3JmRldvMkk3NjN6YU91VUxyZzRqODk0RkVzTUplNk8xbWp3bTlpRWF5dE9ZU0E4eVhmaXdGWGJjRm9lMkFZRThoVE9kTDJvWTU1Q01ZdC9jNC9JbTJUOEQrNUtrNGlZNHRiamExcVlpc0xodXduYXVjdlJZUnFXSEVkSlJPM1BUN1pSMFJkYjFRdks1WnZ1S09rRmZIV3Z1Zz09IiwicyI6IjEifQ==", "maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "349cb3d9-bfc7-4213-98b9-c7106e821208", "record_id": "flaws_cloudtrail:0000034:349cb3d9-bfc7-4213-98b9-c7106e821208", "row_index": 34, "timestamp": "2019-07-29T22:46:14Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "109.234.105.8", "user_agent": "aws-cli/1.16.208 Python/3.5.1 Darwin/17.7.0 botocore/1.12.198", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1079, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "349cb3d9-bfc7-4213-98b9-c7106e821208", "eventTime": "2019-07-29T22:46:14Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "109.234.105.8", "userAgent": "aws-cli/1.16.208 Python/3.5.1 Darwin/17.7.0 botocore/1.12.198", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"nextToken": "eyJ2IjoiMiIsImMiOiJJNkhGcWd4aFB3OGMyVnZjSXJhb09JOTZRT1ZYSklDQTBQWFlMcU8zNXZyamhpb0tNUm5EY3JmRldvMkk3NjN6YU91VUxyZzRqODk0RkVzTUplNk8xbWp3bTlpRWF5dE9ZU0E4eVhmaXdGWGJjRm9lMkFZRThoVE9kTDJvWTU1Q01ZdC9jNC9JbTJUOEQrNUtrNGlZNHRiamExcVlpc0xodXduYXVjdlJZUnFXSEVkSlJPM1BUN1pSMFJkYjFRdks1WnZ1S09rRmZIV3Z1Zz09IiwicyI6IjEifQ==", "maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "5d93114b-0bec-4cab-852c-296a0b0d7307", "record_id": "flaws_cloudtrail:0000035:5d93114b-0bec-4cab-852c-296a0b0d7307", "row_index": 35, "timestamp": "2019-07-29T22:46:15Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "109.234.105.8", "user_agent": "aws-cli/1.16.208 Python/3.5.1 Darwin/17.7.0 botocore/1.12.198", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1099, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "5d93114b-0bec-4cab-852c-296a0b0d7307", "eventTime": "2019-07-29T22:46:15Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "109.234.105.8", "userAgent": "aws-cli/1.16.208 Python/3.5.1 Darwin/17.7.0 botocore/1.12.198", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"nextToken": "eyJ2IjoiMiIsImMiOiJBNnFSR01CSktabm9zZXNLWHM1RjIwaVY3S3RHTE05OXJHcUxWRW1kek1wT3hUYk01UFVwcUFZTGduemxPS00zWHE4bUVFWVZUQndWYTRtbUgyZ1JCaE9ESlNOdXRBUkMwNjQxdnR3ZG5UUjRoaVB4d3ljQzNhY3FoMS9UdjJuVnduYW5leFNhZGg5amRJK25teXZCY1pIalVsS0pleURybTc1cXZUOWdIL2tud1hqaFREcTY2WWU3U3pZNmdMdXlQWmoxZVVyTzg4YzRzY0JOd2N2QzAraGJsaFpsS1ZRPSIsInMiOiIxIn0=", "maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "5d93114b-0bec-4cab-852c-296a0b0d7307", "record_id": "flaws_cloudtrail:0000036:5d93114b-0bec-4cab-852c-296a0b0d7307", "row_index": 36, "timestamp": "2019-07-29T22:46:15Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "109.234.105.8", "user_agent": "aws-cli/1.16.208 Python/3.5.1 Darwin/17.7.0 botocore/1.12.198", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1099, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "5d93114b-0bec-4cab-852c-296a0b0d7307", "eventTime": "2019-07-29T22:46:15Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "109.234.105.8", "userAgent": "aws-cli/1.16.208 Python/3.5.1 Darwin/17.7.0 botocore/1.12.198", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"nextToken": "eyJ2IjoiMiIsImMiOiJBNnFSR01CSktabm9zZXNLWHM1RjIwaVY3S3RHTE05OXJHcUxWRW1kek1wT3hUYk01UFVwcUFZTGduemxPS00zWHE4bUVFWVZUQndWYTRtbUgyZ1JCaE9ESlNOdXRBUkMwNjQxdnR3ZG5UUjRoaVB4d3ljQzNhY3FoMS9UdjJuVnduYW5leFNhZGg5amRJK25teXZCY1pIalVsS0pleURybTc1cXZUOWdIL2tud1hqaFREcTY2WWU3U3pZNmdMdXlQWmoxZVVyTzg4YzRzY0JOd2N2QzAraGJsaFpsS1ZRPSIsInMiOiIxIn0=", "maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "52fd1715-1714-47d9-9b4e-dae9833ec333", "record_id": "flaws_cloudtrail:0000037:52fd1715-1714-47d9-9b4e-dae9833ec333", "row_index": 37, "timestamp": "2019-07-29T22:46:16Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "109.234.105.8", "user_agent": "aws-cli/1.16.208 Python/3.5.1 Darwin/17.7.0 botocore/1.12.198", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1095, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "52fd1715-1714-47d9-9b4e-dae9833ec333", "eventTime": "2019-07-29T22:46:16Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "109.234.105.8", "userAgent": "aws-cli/1.16.208 Python/3.5.1 Darwin/17.7.0 botocore/1.12.198", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"nextToken": "eyJ2IjoiMiIsImMiOiJVN1NjaDFPNllsT1pwSUkxWVgxZkIyRkdnbUJhR01VVDNXSmxSUEY2T2xaZDNmcTJ5RHdiYjlkSXNwejJIKzlNV0tDdEZUTEJEdkkzbzV2WXJKWkF3dVVxaDRUbmNrM1IrNEtRQ1ZDYis5bGdpMm1ub0Nac3d6d2RFdzFvRldXVWhHbG9IRktDUFI5V2hIdjVvcUp3ZW9FSFU3VEphZW8waDBjdU9oQkcxVkFGd1RUVnh1SmkwN2FiYkJybnl2Rm02T1gyS0xkVGQxUXQxTGdlZjVoK0pyNDdlMVNvdWF3PSIsInMiOiIxIn0=", "maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "cccf2d65-5945-4b73-bc3c-6e585fe952c3", "record_id": "flaws_cloudtrail:0000038:cccf2d65-5945-4b73-bc3c-6e585fe952c3", "row_index": 38, "timestamp": "2019-07-29T22:46:16Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "109.234.105.8", "user_agent": "aws-cli/1.16.208 Python/3.5.1 Darwin/17.7.0 botocore/1.12.198", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1088, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "cccf2d65-5945-4b73-bc3c-6e585fe952c3", "eventTime": "2019-07-29T22:46:16Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "109.234.105.8", "userAgent": "aws-cli/1.16.208 Python/3.5.1 Darwin/17.7.0 botocore/1.12.198", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"nextToken": "eyJ2IjoiMiIsImMiOiI2NUJCTTJEbmVjVDFqN3RzUE1xMDZHajl2Q3FHMVptQW00amROdHY1Y1N5YTdiV25Sc0ZVaHFzR2lJcG0zYm1HK29EeG4yS2lFNFJKWWZzRnk4dmtqNDRIVXlUanFCSGZCQmpZcVBCOUhDVUtoQkFsRFE3bjdQa0F2bnkrUWllUjV2ZHB1Vlptc2ZYTTB0REdwNi9YSHgyQjBvODUvZnRFOWhacGd4SlQ0OVcwbGZvcHlhWTRvY1dhSy9jcTd4SXJpK09Xa2ZTVkw4ZzRhd0Y1bVhwaXp3PT0iLCJzIjoiMSJ9", "maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "52fd1715-1714-47d9-9b4e-dae9833ec333", "record_id": "flaws_cloudtrail:0000039:52fd1715-1714-47d9-9b4e-dae9833ec333", "row_index": 39, "timestamp": "2019-07-29T22:46:16Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "109.234.105.8", "user_agent": "aws-cli/1.16.208 Python/3.5.1 Darwin/17.7.0 botocore/1.12.198", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1095, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "52fd1715-1714-47d9-9b4e-dae9833ec333", "eventTime": "2019-07-29T22:46:16Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "109.234.105.8", "userAgent": "aws-cli/1.16.208 Python/3.5.1 Darwin/17.7.0 botocore/1.12.198", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"nextToken": "eyJ2IjoiMiIsImMiOiJVN1NjaDFPNllsT1pwSUkxWVgxZkIyRkdnbUJhR01VVDNXSmxSUEY2T2xaZDNmcTJ5RHdiYjlkSXNwejJIKzlNV0tDdEZUTEJEdkkzbzV2WXJKWkF3dVVxaDRUbmNrM1IrNEtRQ1ZDYis5bGdpMm1ub0Nac3d6d2RFdzFvRldXVWhHbG9IRktDUFI5V2hIdjVvcUp3ZW9FSFU3VEphZW8waDBjdU9oQkcxVkFGd1RUVnh1SmkwN2FiYkJybnl2Rm02T1gyS0xkVGQxUXQxTGdlZjVoK0pyNDdlMVNvdWF3PSIsInMiOiIxIn0=", "maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "cccf2d65-5945-4b73-bc3c-6e585fe952c3", "record_id": "flaws_cloudtrail:0000040:cccf2d65-5945-4b73-bc3c-6e585fe952c3", "row_index": 40, "timestamp": "2019-07-29T22:46:16Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "109.234.105.8", "user_agent": "aws-cli/1.16.208 Python/3.5.1 Darwin/17.7.0 botocore/1.12.198", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1088, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "cccf2d65-5945-4b73-bc3c-6e585fe952c3", "eventTime": "2019-07-29T22:46:16Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "109.234.105.8", "userAgent": "aws-cli/1.16.208 Python/3.5.1 Darwin/17.7.0 botocore/1.12.198", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"nextToken": "eyJ2IjoiMiIsImMiOiI2NUJCTTJEbmVjVDFqN3RzUE1xMDZHajl2Q3FHMVptQW00amROdHY1Y1N5YTdiV25Sc0ZVaHFzR2lJcG0zYm1HK29EeG4yS2lFNFJKWWZzRnk4dmtqNDRIVXlUanFCSGZCQmpZcVBCOUhDVUtoQkFsRFE3bjdQa0F2bnkrUWllUjV2ZHB1Vlptc2ZYTTB0REdwNi9YSHgyQjBvODUvZnRFOWhacGd4SlQ0OVcwbGZvcHlhWTRvY1dhSy9jcTd4SXJpK09Xa2ZTVkw4ZzRhd0Y1bVhwaXp3PT0iLCJzIjoiMSJ9", "maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "cfdf0b14-08fc-4b67-b5ba-28d7d4626ccf", "record_id": "flaws_cloudtrail:0000041:cfdf0b14-08fc-4b67-b5ba-28d7d4626ccf", "row_index": 41, "timestamp": "2019-07-29T22:46:17Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "109.234.105.8", "user_agent": "aws-cli/1.16.208 Python/3.5.1 Darwin/17.7.0 botocore/1.12.198", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1055, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "cfdf0b14-08fc-4b67-b5ba-28d7d4626ccf", "eventTime": "2019-07-29T22:46:17Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "109.234.105.8", "userAgent": "aws-cli/1.16.208 Python/3.5.1 Darwin/17.7.0 botocore/1.12.198", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"nextToken": "eyJ2IjoiMiIsImMiOiJaSlB3RUkwd3NOSFJtUG96UXZmSEt4UmRpSVpQODB1ZjZiVjVGMnk5SkdheEg5VzN1dUtaaWhMdTJsMll1bldjWFE0MFhYZjdZVHViY0llSjI5R1A2M1pCVlhtTFdHTS9yemlOS2VmSFVoZjFQVVhCNjlKOWpncitvdWM1Vm1nMVVpR0MzeHA3cnhjNC9vLzViRVpaZzQ1NHV2dFBkYlhqdktleWliTVVva0ZtNHkvRmVhL1hpdlg4cGNJL21zWT0iLCJzIjoiMSJ9", "maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "cfdf0b14-08fc-4b67-b5ba-28d7d4626ccf", "record_id": "flaws_cloudtrail:0000042:cfdf0b14-08fc-4b67-b5ba-28d7d4626ccf", "row_index": 42, "timestamp": "2019-07-29T22:46:17Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "109.234.105.8", "user_agent": "aws-cli/1.16.208 Python/3.5.1 Darwin/17.7.0 botocore/1.12.198", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1055, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "cfdf0b14-08fc-4b67-b5ba-28d7d4626ccf", "eventTime": "2019-07-29T22:46:17Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "109.234.105.8", "userAgent": "aws-cli/1.16.208 Python/3.5.1 Darwin/17.7.0 botocore/1.12.198", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"nextToken": "eyJ2IjoiMiIsImMiOiJaSlB3RUkwd3NOSFJtUG96UXZmSEt4UmRpSVpQODB1ZjZiVjVGMnk5SkdheEg5VzN1dUtaaWhMdTJsMll1bldjWFE0MFhYZjdZVHViY0llSjI5R1A2M1pCVlhtTFdHTS9yemlOS2VmSFVoZjFQVVhCNjlKOWpncitvdWM1Vm1nMVVpR0MzeHA3cnhjNC9vLzViRVpaZzQ1NHV2dFBkYlhqdktleWliTVVva0ZtNHkvRmVhL1hpdlg4cGNJL21zWT0iLCJzIjoiMSJ9", "maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "eab9974d-95d8-4d90-80d3-cbcfe3a4389d", "record_id": "flaws_cloudtrail:0000043:eab9974d-95d8-4d90-80d3-cbcfe3a4389d", "row_index": 43, "timestamp": "2019-07-29T22:46:18Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "109.234.105.8", "user_agent": "aws-cli/1.16.208 Python/3.5.1 Darwin/17.7.0 botocore/1.12.198", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1098, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "eab9974d-95d8-4d90-80d3-cbcfe3a4389d", "eventTime": "2019-07-29T22:46:18Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "109.234.105.8", "userAgent": "aws-cli/1.16.208 Python/3.5.1 Darwin/17.7.0 botocore/1.12.198", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"nextToken": "eyJ2IjoiMiIsImMiOiIwbHBFWVBVK1pxdFRUdVhOVytxcU5rSE9yYXBoQ3NlRzFzOWdUd0drRkc4bzVMUEN2dFFIdVE4eFpEWUdoNFBRL1h1VzlIU3p3dm0xYWhqajJsc2t2UW8zWGNjSzVlS2FUMkFhMXJGU05rYVpXbytsQ3hjU2lvNkRISmRxU0NhS1NZQXNGWElOVHNkc3c5WjFtbTdYS3kzRWxEQUR6MHM3MTI5UCtVUExyOTduNVU0QUJoMVBLaTl4bWY2TWVRLys1aGY3TUt6Vzc4ZU9Db0xMN0x5d0hNTFAvYllHMlR3PSIsInMiOiIxIn0=", "maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "eab9974d-95d8-4d90-80d3-cbcfe3a4389d", "record_id": "flaws_cloudtrail:0000044:eab9974d-95d8-4d90-80d3-cbcfe3a4389d", "row_index": 44, "timestamp": "2019-07-29T22:46:18Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "109.234.105.8", "user_agent": "aws-cli/1.16.208 Python/3.5.1 Darwin/17.7.0 botocore/1.12.198", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1098, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "eab9974d-95d8-4d90-80d3-cbcfe3a4389d", "eventTime": "2019-07-29T22:46:18Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "109.234.105.8", "userAgent": "aws-cli/1.16.208 Python/3.5.1 Darwin/17.7.0 botocore/1.12.198", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"nextToken": "eyJ2IjoiMiIsImMiOiIwbHBFWVBVK1pxdFRUdVhOVytxcU5rSE9yYXBoQ3NlRzFzOWdUd0drRkc4bzVMUEN2dFFIdVE4eFpEWUdoNFBRL1h1VzlIU3p3dm0xYWhqajJsc2t2UW8zWGNjSzVlS2FUMkFhMXJGU05rYVpXbytsQ3hjU2lvNkRISmRxU0NhS1NZQXNGWElOVHNkc3c5WjFtbTdYS3kzRWxEQUR6MHM3MTI5UCtVUExyOTduNVU0QUJoMVBLaTl4bWY2TWVRLys1aGY3TUt6Vzc4ZU9Db0xMN0x5d0hNTFAvYllHMlR3PSIsInMiOiIxIn0=", "maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "266b7dc2-9334-475a-8194-4cb5ef4a59b5", "record_id": "flaws_cloudtrail:0000045:266b7dc2-9334-475a-8194-4cb5ef4a59b5", "row_index": 45, "timestamp": "2019-07-29T22:46:19Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "109.234.105.8", "user_agent": "aws-cli/1.16.208 Python/3.5.1 Darwin/17.7.0 botocore/1.12.198", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1087, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "266b7dc2-9334-475a-8194-4cb5ef4a59b5", "eventTime": "2019-07-29T22:46:19Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "109.234.105.8", "userAgent": "aws-cli/1.16.208 Python/3.5.1 Darwin/17.7.0 botocore/1.12.198", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"nextToken": "eyJ2IjoiMiIsImMiOiJTeU5ERU5WeFllMW5oTlJlUlJFdW4rNCt2RHRtcTlLTzJObE5QVVpqcHA1L2dVUzVzKzArTk5MVnZKYmJwTU1nQ2Jpa2VaRVNWcWtMc0NnUnJzNW40eWZwM20yRVJLS2NDVFVkOWNzMWpQazN0OUNaWkh2N01PUlppMzl0Q0VNa3Z3ajlKd09ld0ZjUmVNbjdsWnJEdXVqbThheEtKejBTRUZnVG1haXhhUEE0d0VFak00bTkvOWVjdHkyLy8xVU9zNCtQOGZ1dW9KSlphRkZWK2lILzR3PT0iLCJzIjoiMSJ9", "maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "266b7dc2-9334-475a-8194-4cb5ef4a59b5", "record_id": "flaws_cloudtrail:0000046:266b7dc2-9334-475a-8194-4cb5ef4a59b5", "row_index": 46, "timestamp": "2019-07-29T22:46:19Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "109.234.105.8", "user_agent": "aws-cli/1.16.208 Python/3.5.1 Darwin/17.7.0 botocore/1.12.198", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1087, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "266b7dc2-9334-475a-8194-4cb5ef4a59b5", "eventTime": "2019-07-29T22:46:19Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "109.234.105.8", "userAgent": "aws-cli/1.16.208 Python/3.5.1 Darwin/17.7.0 botocore/1.12.198", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"nextToken": "eyJ2IjoiMiIsImMiOiJTeU5ERU5WeFllMW5oTlJlUlJFdW4rNCt2RHRtcTlLTzJObE5QVVpqcHA1L2dVUzVzKzArTk5MVnZKYmJwTU1nQ2Jpa2VaRVNWcWtMc0NnUnJzNW40eWZwM20yRVJLS2NDVFVkOWNzMWpQazN0OUNaWkh2N01PUlppMzl0Q0VNa3Z3ajlKd09ld0ZjUmVNbjdsWnJEdXVqbThheEtKejBTRUZnVG1haXhhUEE0d0VFak00bTkvOWVjdHkyLy8xVU9zNCtQOGZ1dW9KSlphRkZWK2lILzR3PT0iLCJzIjoiMSJ9", "maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "0b8d197f-a73a-4ee6-ad43-247288aa08681", "record_id": "flaws_cloudtrail:0000047:0b8d197f-a73a-4ee6-ad43-247288aa08681", "row_index": 47, "timestamp": "2019-07-29T22:46:20Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "109.234.105.8", "user_agent": "aws-cli/1.16.208 Python/3.5.1 Darwin/17.7.0 botocore/1.12.198", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1100, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "0b8d197f-a73a-4ee6-ad43-247288aa08681", "eventTime": "2019-07-29T22:46:20Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "109.234.105.8", "userAgent": "aws-cli/1.16.208 Python/3.5.1 Darwin/17.7.0 botocore/1.12.198", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"nextToken": "eyJ2IjoiMiIsImMiOiJ1emM1Rm9qaE5tTUJzclhDYXRMUjNrQUxCMEdHTk4ramdvREVIRlJ6M1I4NXhDQ3pINXloV2dYWDUxaG12RkR5UmxHTjRZNm1IR0hBVlFiUTJGMTVSVU9nRDJvS1o3eWNUUnRHd0hVZXpra25veXdTYkdpb2tKWFVSbHRRZ3M2Z2o4WEJwSUFTYkVpZWFheTFUdys2bjkwUHgzUjEySVpLQ1F2YW8xdmdzbSt1TU9qaE9yNktEV1RVeGFhbzlac3hIVEpWbFBETzRVbHlUUGN5VzFiUmF0Rlc3ejN5UHJvPSIsInMiOiIxIn0=", "maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "0b8d197f-a73a-4ee6-ad43-247288aa08681", "record_id": "flaws_cloudtrail:0000048:0b8d197f-a73a-4ee6-ad43-247288aa08681", "row_index": 48, "timestamp": "2019-07-29T22:46:20Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "109.234.105.8", "user_agent": "aws-cli/1.16.208 Python/3.5.1 Darwin/17.7.0 botocore/1.12.198", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1100, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "0b8d197f-a73a-4ee6-ad43-247288aa08681", "eventTime": "2019-07-29T22:46:20Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "109.234.105.8", "userAgent": "aws-cli/1.16.208 Python/3.5.1 Darwin/17.7.0 botocore/1.12.198", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"nextToken": "eyJ2IjoiMiIsImMiOiJ1emM1Rm9qaE5tTUJzclhDYXRMUjNrQUxCMEdHTk4ramdvREVIRlJ6M1I4NXhDQ3pINXloV2dYWDUxaG12RkR5UmxHTjRZNm1IR0hBVlFiUTJGMTVSVU9nRDJvS1o3eWNUUnRHd0hVZXpra25veXdTYkdpb2tKWFVSbHRRZ3M2Z2o4WEJwSUFTYkVpZWFheTFUdys2bjkwUHgzUjEySVpLQ1F2YW8xdmdzbSt1TU9qaE9yNktEV1RVeGFhbzlac3hIVEpWbFBETzRVbHlUUGN5VzFiUmF0Rlc3ejN5UHJvPSIsInMiOiIxIn0=", "maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "7e2dd16d-0746-44e9-ab53-9f32cf43cb4b", "record_id": "flaws_cloudtrail:0000049:7e2dd16d-0746-44e9-ab53-9f32cf43cb4b", "row_index": 49, "timestamp": "2019-07-29T22:46:21Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "109.234.105.8", "user_agent": "aws-cli/1.16.208 Python/3.5.1 Darwin/17.7.0 botocore/1.12.198", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1087, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "7e2dd16d-0746-44e9-ab53-9f32cf43cb4b", "eventTime": "2019-07-29T22:46:21Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "109.234.105.8", "userAgent": "aws-cli/1.16.208 Python/3.5.1 Darwin/17.7.0 botocore/1.12.198", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"nextToken": "eyJ2IjoiMiIsImMiOiJVbFU2MnM5NnBsOUxGbDNoMWh1TFU5UEF4VFdWWnMyQ240RnJ5TzNiZlV3MjhBVWI4b3QvMDJzZ0JxVmptanpUUDNyeWhHV0h4RWY1eTlRUGRZajdkOThuQXAvK1J6c0o2RnRFUW8wcUlUL0RSb1htWm9IeDZ2SU9vV29OdHFUM2NaRVJXUmtFemQ5eUFTMGtKZjVvYVRjNlRiUHZLNzFoQmkzZFFnQ2oxTlNnZXBzczh2Ty90L3RtY21EeWw0aTN1VUFDZW5TZXliNklhU2R1RjhSTFVBPT0iLCJzIjoiMSJ9", "maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "7e2dd16d-0746-44e9-ab53-9f32cf43cb4b", "record_id": "flaws_cloudtrail:0000050:7e2dd16d-0746-44e9-ab53-9f32cf43cb4b", "row_index": 50, "timestamp": "2019-07-29T22:46:21Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "109.234.105.8", "user_agent": "aws-cli/1.16.208 Python/3.5.1 Darwin/17.7.0 botocore/1.12.198", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1087, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "7e2dd16d-0746-44e9-ab53-9f32cf43cb4b", "eventTime": "2019-07-29T22:46:21Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "109.234.105.8", "userAgent": "aws-cli/1.16.208 Python/3.5.1 Darwin/17.7.0 botocore/1.12.198", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"nextToken": "eyJ2IjoiMiIsImMiOiJVbFU2MnM5NnBsOUxGbDNoMWh1TFU5UEF4VFdWWnMyQ240RnJ5TzNiZlV3MjhBVWI4b3QvMDJzZ0JxVmptanpUUDNyeWhHV0h4RWY1eTlRUGRZajdkOThuQXAvK1J6c0o2RnRFUW8wcUlUL0RSb1htWm9IeDZ2SU9vV29OdHFUM2NaRVJXUmtFemQ5eUFTMGtKZjVvYVRjNlRiUHZLNzFoQmkzZFFnQ2oxTlNnZXBzczh2Ty90L3RtY21EeWw0aTN1VUFDZW5TZXliNklhU2R1RjhSTFVBPT0iLCJzIjoiMSJ9", "maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "0a6a1575-c1bb-45b4-846e-6760fc4de687", "record_id": "flaws_cloudtrail:0000051:0a6a1575-c1bb-45b4-846e-6760fc4de687", "row_index": 51, "timestamp": "2019-07-29T22:46:22Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "109.234.105.8", "user_agent": "aws-cli/1.16.208 Python/3.5.1 Darwin/17.7.0 botocore/1.12.198", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1099, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "0a6a1575-c1bb-45b4-846e-6760fc4de687", "eventTime": "2019-07-29T22:46:22Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "109.234.105.8", "userAgent": "aws-cli/1.16.208 Python/3.5.1 Darwin/17.7.0 botocore/1.12.198", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"nextToken": "eyJ2IjoiMiIsImMiOiI1SUp6MU0vVGdwT05wMWFJQTdtbEVqVUpHYjArMUZqTHJEQVVpUTlPOCt0UitxVFU4anV5MXJVY01jbVRZNmwrVWdQN29SM0krZFVUSlVHZE9XL2doelljZU1ScWprVjhVeHJFV2lIeXJ4OWJKQXhkR3d1b1o4K1Fra0FCSVdkSmRhcmtVRG5hWkNYb0dmMlNpYUJvemY2aVdLejVjbUZiTWcxZmkzSWw1OC92RmZnc0lybjQ4eU5Mc001RTFWRCtqblppbFdsMXRQWjZwaWlmQjZhNjlBTzBaK1YxNHp3PSIsInMiOiIxIn0=", "maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "0a6a1575-c1bb-45b4-846e-6760fc4de687", "record_id": "flaws_cloudtrail:0000052:0a6a1575-c1bb-45b4-846e-6760fc4de687", "row_index": 52, "timestamp": "2019-07-29T22:46:22Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "109.234.105.8", "user_agent": "aws-cli/1.16.208 Python/3.5.1 Darwin/17.7.0 botocore/1.12.198", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1099, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "0a6a1575-c1bb-45b4-846e-6760fc4de687", "eventTime": "2019-07-29T22:46:22Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "109.234.105.8", "userAgent": "aws-cli/1.16.208 Python/3.5.1 Darwin/17.7.0 botocore/1.12.198", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"nextToken": "eyJ2IjoiMiIsImMiOiI1SUp6MU0vVGdwT05wMWFJQTdtbEVqVUpHYjArMUZqTHJEQVVpUTlPOCt0UitxVFU4anV5MXJVY01jbVRZNmwrVWdQN29SM0krZFVUSlVHZE9XL2doelljZU1ScWprVjhVeHJFV2lIeXJ4OWJKQXhkR3d1b1o4K1Fra0FCSVdkSmRhcmtVRG5hWkNYb0dmMlNpYUJvemY2aVdLejVjbUZiTWcxZmkzSWw1OC92RmZnc0lybjQ4eU5Mc001RTFWRCtqblppbFdsMXRQWjZwaWlmQjZhNjlBTzBaK1YxNHp3PSIsInMiOiIxIn0=", "maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "4a9fd0f7-154c-48d4-b715-4698c285835cb", "record_id": "flaws_cloudtrail:0000053:4a9fd0f7-154c-48d4-b715-4698c285835cb", "row_index": 53, "timestamp": "2019-07-29T22:46:23Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "109.234.105.8", "user_agent": "aws-cli/1.16.208 Python/3.5.1 Darwin/17.7.0 botocore/1.12.198", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1056, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "4a9fd0f7-154c-48d4-b715-4698c285835cb", "eventTime": "2019-07-29T22:46:23Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "109.234.105.8", "userAgent": "aws-cli/1.16.208 Python/3.5.1 Darwin/17.7.0 botocore/1.12.198", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"nextToken": "eyJ2IjoiMiIsImMiOiJITzBGc2FRbjAza0tSOGZ0eUpzcVdjakNTMUNVSkhkZldHZHdlRTJHellBd0tlOVBLWGl4Zlc2OXdUcmRWMDRVWDJCOGp2bW12WldidmtrRnZ5a3VOZjg4U2Q4OFpMNkU4ZzZkbzVUK0R1ZWw5U1NwV3ZoeVB4QjVFWXUxVGRqRGg3Ym8wVlJUa2RIQU9TRmJrVDkwZHJrM0gram4wZFNGSGZkWmVGc3NneHlFdG1yZDliejNJOWdXamNsWkRYRT0iLCJzIjoiMSJ9", "maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "4a9fd0f7-154c-48d4-b715-4698c285835cb", "record_id": "flaws_cloudtrail:0000054:4a9fd0f7-154c-48d4-b715-4698c285835cb", "row_index": 54, "timestamp": "2019-07-29T22:46:23Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "109.234.105.8", "user_agent": "aws-cli/1.16.208 Python/3.5.1 Darwin/17.7.0 botocore/1.12.198", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1056, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "4a9fd0f7-154c-48d4-b715-4698c285835cb", "eventTime": "2019-07-29T22:46:23Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "109.234.105.8", "userAgent": "aws-cli/1.16.208 Python/3.5.1 Darwin/17.7.0 botocore/1.12.198", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"nextToken": "eyJ2IjoiMiIsImMiOiJITzBGc2FRbjAza0tSOGZ0eUpzcVdjakNTMUNVSkhkZldHZHdlRTJHellBd0tlOVBLWGl4Zlc2OXdUcmRWMDRVWDJCOGp2bW12WldidmtrRnZ5a3VOZjg4U2Q4OFpMNkU4ZzZkbzVUK0R1ZWw5U1NwV3ZoeVB4QjVFWXUxVGRqRGg3Ym8wVlJUa2RIQU9TRmJrVDkwZHJrM0gram4wZFNGSGZkWmVGc3NneHlFdG1yZDliejNJOWdXamNsWkRYRT0iLCJzIjoiMSJ9", "maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "e5b2a2ed-25c1-42e8-a69e-48764464219c", "record_id": "flaws_cloudtrail:0000055:e5b2a2ed-25c1-42e8-a69e-48764464219c", "row_index": 55, "timestamp": "2019-07-29T22:46:57Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "109.234.105.8", "user_agent": "aws-cli/1.16.208 Python/3.5.1 Darwin/17.7.0 botocore/1.12.198", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 786, "raw_record_depth": 5, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "e5b2a2ed-25c1-42e8-a69e-48764464219c", "eventTime": "2019-07-29T22:46:57Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "109.234.105.8", "userAgent": "aws-cli/1.16.208 Python/3.5.1 Darwin/17.7.0 botocore/1.12.198", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"maxResults": 1000, "snapshotSet": {}, "ownersSet": {"items": [{"owner": "811596193553"}]}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "e5b2a2ed-25c1-42e8-a69e-48764464219c", "record_id": "flaws_cloudtrail:0000056:e5b2a2ed-25c1-42e8-a69e-48764464219c", "row_index": 56, "timestamp": "2019-07-29T22:46:57Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "109.234.105.8", "user_agent": "aws-cli/1.16.208 Python/3.5.1 Darwin/17.7.0 botocore/1.12.198", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 786, "raw_record_depth": 5, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "e5b2a2ed-25c1-42e8-a69e-48764464219c", "eventTime": "2019-07-29T22:46:57Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "109.234.105.8", "userAgent": "aws-cli/1.16.208 Python/3.5.1 Darwin/17.7.0 botocore/1.12.198", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"maxResults": 1000, "snapshotSet": {}, "ownersSet": {"items": [{"owner": "811596193553"}]}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "a297aa50-3346-46bf-b295-d050761d20", "record_id": "flaws_cloudtrail:0000057:a297aa50-3346-46bf-b295-d050761d20", "row_index": 57, "timestamp": "2019-07-29T22:52:30Z", "event_type": "CreateVolume", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "109.234.105.8", "user_agent": "aws-cli/1.16.208 Python/3.5.1 Darwin/17.7.0 botocore/1.12.198", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1517, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "a297aa50-3346-46bf-b295-d050761d20", "eventTime": "2019-07-29T22:52:30Z", "eventName": "CreateVolume", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "109.234.105.8", "userAgent": "aws-cli/1.16.208 Python/3.5.1 Darwin/17.7.0 botocore/1.12.198", "awsRegion": "us-west-2", "errorCode": "Client.UnauthorizedOperation", "errorMessage": "You are not authorized to perform this operation. Encoded authorization failure message: Chfq-J9gLpvsxfaIrCQEw0oR_TXHaFMW6yL7SNk1gWbs6EBMMz7eaBV-Z7DxRgL0fq1e-JojymBbkLKG5EJ9oYiGPAK_0ZE9knIXYcv0XTGhOrwlL4ld89Y79VuD6QZGP_iZV7lcN-x6ZPp_JTiaoDvTnKYIVpj4l2f_ONSZmU8rklDNa4RQnjSVWLxGN3kgzrZ7EKGx69VtvzqQpL_HVqOWRD3WSgZVokWZAvfzCny5NpFTn4x_67EO2T31C2KLCLuwADrHndgqU9hSJ5QiGWi7S30-rwWk8BPleQUzwhPasQox1mWXM_yfoDpCKaGv6LAIIsXEn7ZOOedWp_YJaOadmqJH74nLUllZC9GdFaPKf29XwAtNYuBGmSX5AH8k_7r7wLa8Fv-TVq7ItfkdwjtR2e5GRGpKO-8XMIMcBtNCsHpsDdhWizNT8YAOGqN_DpSwQw8mKAA67h4Zf2iN-spRgXZVMfqDplyf2a4r_bmea0TGeD7YwlJ74LXAu8NacCuVhAIR0Q51wYVPxSM19K5RNK_X5SpoOxcwHfpzn5mnABkLVoK6-g6pob5lpw8uYlUhNeFsRrMqXc-SCZKe5qSes4Xvo1G2B_6J7Nby1zdt9L3zKHDsYBvP8evKqUgyMcZzNfUt", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"snapshotId": "snap-83d15d668fb2941db", "zone": "us-west-2a"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "a297aa50-3346-46bf-b295-d050761d20", "record_id": "flaws_cloudtrail:0000058:a297aa50-3346-46bf-b295-d050761d20", "row_index": 58, "timestamp": "2019-07-29T22:52:30Z", "event_type": "CreateVolume", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "109.234.105.8", "user_agent": "aws-cli/1.16.208 Python/3.5.1 Darwin/17.7.0 botocore/1.12.198", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1517, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "a297aa50-3346-46bf-b295-d050761d20", "eventTime": "2019-07-29T22:52:30Z", "eventName": "CreateVolume", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "109.234.105.8", "userAgent": "aws-cli/1.16.208 Python/3.5.1 Darwin/17.7.0 botocore/1.12.198", "awsRegion": "us-west-2", "errorCode": "Client.UnauthorizedOperation", "errorMessage": "You are not authorized to perform this operation. Encoded authorization failure message: Chfq-J9gLpvsxfaIrCQEw0oR_TXHaFMW6yL7SNk1gWbs6EBMMz7eaBV-Z7DxRgL0fq1e-JojymBbkLKG5EJ9oYiGPAK_0ZE9knIXYcv0XTGhOrwlL4ld89Y79VuD6QZGP_iZV7lcN-x6ZPp_JTiaoDvTnKYIVpj4l2f_ONSZmU8rklDNa4RQnjSVWLxGN3kgzrZ7EKGx69VtvzqQpL_HVqOWRD3WSgZVokWZAvfzCny5NpFTn4x_67EO2T31C2KLCLuwADrHndgqU9hSJ5QiGWi7S30-rwWk8BPleQUzwhPasQox1mWXM_yfoDpCKaGv6LAIIsXEn7ZOOedWp_YJaOadmqJH74nLUllZC9GdFaPKf29XwAtNYuBGmSX5AH8k_7r7wLa8Fv-TVq7ItfkdwjtR2e5GRGpKO-8XMIMcBtNCsHpsDdhWizNT8YAOGqN_DpSwQw8mKAA67h4Zf2iN-spRgXZVMfqDplyf2a4r_bmea0TGeD7YwlJ74LXAu8NacCuVhAIR0Q51wYVPxSM19K5RNK_X5SpoOxcwHfpzn5mnABkLVoK6-g6pob5lpw8uYlUhNeFsRrMqXc-SCZKe5qSes4Xvo1G2B_6J7Nby1zdt9L3zKHDsYBvP8evKqUgyMcZzNfUt", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"snapshotId": "snap-83d15d668fb2941db", "zone": "us-west-2a"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "3e705fc5-1a2c-4047-a40b-391944514232", "record_id": "flaws_cloudtrail:0000059:3e705fc5-1a2c-4047-a40b-391944514232", "row_index": 59, "timestamp": "2019-07-29T22:54:13Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "109.234.105.8", "user_agent": "aws-cli/1.16.208 Python/3.5.1 Darwin/17.7.0 botocore/1.12.198", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 752, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "3e705fc5-1a2c-4047-a40b-391944514232", "eventTime": "2019-07-29T22:54:13Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "109.234.105.8", "userAgent": "aws-cli/1.16.208 Python/3.5.1 Darwin/17.7.0 botocore/1.12.198", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "3e705fc5-1a2c-4047-a40b-391944514232", "record_id": "flaws_cloudtrail:0000060:3e705fc5-1a2c-4047-a40b-391944514232", "row_index": 60, "timestamp": "2019-07-29T22:54:13Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "109.234.105.8", "user_agent": "aws-cli/1.16.208 Python/3.5.1 Darwin/17.7.0 botocore/1.12.198", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 752, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "3e705fc5-1a2c-4047-a40b-391944514232", "eventTime": "2019-07-29T22:54:13Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "109.234.105.8", "userAgent": "aws-cli/1.16.208 Python/3.5.1 Darwin/17.7.0 botocore/1.12.198", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "37a576c6-0c74-44db-ab24-5ebdebe6241a", "record_id": "flaws_cloudtrail:0000061:37a576c6-0c74-44db-ab24-5ebdebe6241a", "row_index": 61, "timestamp": "2019-07-29T22:54:17Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "109.234.105.8", "user_agent": "aws-cli/1.16.208 Python/3.5.1 Darwin/17.7.0 botocore/1.12.198", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1069, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "37a576c6-0c74-44db-ab24-5ebdebe6241a", "eventTime": "2019-07-29T22:54:17Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "109.234.105.8", "userAgent": "aws-cli/1.16.208 Python/3.5.1 Darwin/17.7.0 botocore/1.12.198", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"nextToken": "eyJ2IjoiMiIsImMiOiJLWnN3aHQwaldDZEVETjNBUHIzNW82a2lwc3RkTUg5WjN6Znp3aXExMlVVRHdNVWp1Z1pDUTF1b2pycWdPZTJkSGc1SnBQRDRhbWpqWmpnbGNxdnhvbzhsYmhwclMzWXlKYzBSd1lQRS8zbzRsK2tIcEk5Y21lRzh2SkIrQjl0cFdjWjdMQmNHMHNUSUp0cXp0Y1hMZnB2NVdBb1hNUWt5cG9RaThlcmVQY3lpVHIyTFMrWWYyRi9rLzZtNGZxd0l3NTU1UlIxaHcvMD0iLCJzIjoiMSJ9", "maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "37a576c6-0c74-44db-ab24-5ebdebe6241a", "record_id": "flaws_cloudtrail:0000062:37a576c6-0c74-44db-ab24-5ebdebe6241a", "row_index": 62, "timestamp": "2019-07-29T22:54:17Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "109.234.105.8", "user_agent": "aws-cli/1.16.208 Python/3.5.1 Darwin/17.7.0 botocore/1.12.198", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1069, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "37a576c6-0c74-44db-ab24-5ebdebe6241a", "eventTime": "2019-07-29T22:54:17Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "109.234.105.8", "userAgent": "aws-cli/1.16.208 Python/3.5.1 Darwin/17.7.0 botocore/1.12.198", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"nextToken": "eyJ2IjoiMiIsImMiOiJLWnN3aHQwaldDZEVETjNBUHIzNW82a2lwc3RkTUg5WjN6Znp3aXExMlVVRHdNVWp1Z1pDUTF1b2pycWdPZTJkSGc1SnBQRDRhbWpqWmpnbGNxdnhvbzhsYmhwclMzWXlKYzBSd1lQRS8zbzRsK2tIcEk5Y21lRzh2SkIrQjl0cFdjWjdMQmNHMHNUSUp0cXp0Y1hMZnB2NVdBb1hNUWt5cG9RaThlcmVQY3lpVHIyTFMrWWYyRi9rLzZtNGZxd0l3NTU1UlIxaHcvMD0iLCJzIjoiMSJ9", "maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "ad982a38-256c-4532-a4b7-fad19540a8d", "record_id": "flaws_cloudtrail:0000063:ad982a38-256c-4532-a4b7-fad19540a8d", "row_index": 63, "timestamp": "2019-07-29T22:54:19Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "109.234.105.8", "user_agent": "aws-cli/1.16.208 Python/3.5.1 Darwin/17.7.0 botocore/1.12.198", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1079, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "ad982a38-256c-4532-a4b7-fad19540a8d", "eventTime": "2019-07-29T22:54:19Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "109.234.105.8", "userAgent": "aws-cli/1.16.208 Python/3.5.1 Darwin/17.7.0 botocore/1.12.198", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"nextToken": "eyJ2IjoiMiIsImMiOiJKeU9reTF5YlNXejFBZmtUdFY0allMLzAwQ0x2b3Z4U05EcWVidG9UMHI4V01KTzlLb3lDNDFpc3F5dDNSMno4MENqcmIzcmFxMXpnYXZwOGQxS0lPWkxralVlaHJWMXYxQVdqOHlRR2sxNWdpM09OVUc5WEhUcHVtR281ckh3S2R5UGtPbWU5ZVJHcUNLZlZBaHVBNWdzbGhvdW50RWxkcnBERFBmMmlVOFJHOTUrWlk0bEtDL3hzSUZVN3k4SHhvZ1FWZWRwaFNlZ2J1Zz09IiwicyI6IjEifQ==", "maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "ad982a38-256c-4532-a4b7-fad19540a8d", "record_id": "flaws_cloudtrail:0000064:ad982a38-256c-4532-a4b7-fad19540a8d", "row_index": 64, "timestamp": "2019-07-29T22:54:19Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "109.234.105.8", "user_agent": "aws-cli/1.16.208 Python/3.5.1 Darwin/17.7.0 botocore/1.12.198", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1079, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "ad982a38-256c-4532-a4b7-fad19540a8d", "eventTime": "2019-07-29T22:54:19Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "109.234.105.8", "userAgent": "aws-cli/1.16.208 Python/3.5.1 Darwin/17.7.0 botocore/1.12.198", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"nextToken": "eyJ2IjoiMiIsImMiOiJKeU9reTF5YlNXejFBZmtUdFY0allMLzAwQ0x2b3Z4U05EcWVidG9UMHI4V01KTzlLb3lDNDFpc3F5dDNSMno4MENqcmIzcmFxMXpnYXZwOGQxS0lPWkxralVlaHJWMXYxQVdqOHlRR2sxNWdpM09OVUc5WEhUcHVtR281ckh3S2R5UGtPbWU5ZVJHcUNLZlZBaHVBNWdzbGhvdW50RWxkcnBERFBmMmlVOFJHOTUrWlk0bEtDL3hzSUZVN3k4SHhvZ1FWZWRwaFNlZ2J1Zz09IiwicyI6IjEifQ==", "maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "8c4dc6f7-fc36-47b7-b354-ca239fdcb916", "record_id": "flaws_cloudtrail:0000065:8c4dc6f7-fc36-47b7-b354-ca239fdcb916", "row_index": 65, "timestamp": "2019-07-29T22:54:21Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "109.234.105.8", "user_agent": "aws-cli/1.16.208 Python/3.5.1 Darwin/17.7.0 botocore/1.12.198", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1079, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "8c4dc6f7-fc36-47b7-b354-ca239fdcb916", "eventTime": "2019-07-29T22:54:21Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "109.234.105.8", "userAgent": "aws-cli/1.16.208 Python/3.5.1 Darwin/17.7.0 botocore/1.12.198", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"nextToken": "eyJ2IjoiMiIsImMiOiJuN2V4QmphcFh4NkJBL0FxT1Zwc3pHUEJPUFVUUUtZRjVmbjVSTmprd1g0ZDFxSDVUTWMvMTI3TkVqTjNXaTlDUlBnYmVqTis3ekh4MDBQRTB2N3lTajlaWTc0MGZwTmEwWjU5UmxWVkFKbHNkUUtNMEowTzlqYk1kRVY1L0ZWblBMYmd0M1BSQjBlMEwwQ2NaNGc1Q2ozY2FyVS9YS1pwa2h2cUtabXBPbXd4amJmSGtxL3NSbDE1cTR4VHpHbFBuRFAyYUdQMVFTVnQ5QT09IiwicyI6IjEifQ==", "maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "8c4dc6f7-fc36-47b7-b354-ca239fdcb916", "record_id": "flaws_cloudtrail:0000066:8c4dc6f7-fc36-47b7-b354-ca239fdcb916", "row_index": 66, "timestamp": "2019-07-29T22:54:21Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "109.234.105.8", "user_agent": "aws-cli/1.16.208 Python/3.5.1 Darwin/17.7.0 botocore/1.12.198", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1079, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "8c4dc6f7-fc36-47b7-b354-ca239fdcb916", "eventTime": "2019-07-29T22:54:21Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "109.234.105.8", "userAgent": "aws-cli/1.16.208 Python/3.5.1 Darwin/17.7.0 botocore/1.12.198", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"nextToken": "eyJ2IjoiMiIsImMiOiJuN2V4QmphcFh4NkJBL0FxT1Zwc3pHUEJPUFVUUUtZRjVmbjVSTmprd1g0ZDFxSDVUTWMvMTI3TkVqTjNXaTlDUlBnYmVqTis3ekh4MDBQRTB2N3lTajlaWTc0MGZwTmEwWjU5UmxWVkFKbHNkUUtNMEowTzlqYk1kRVY1L0ZWblBMYmd0M1BSQjBlMEwwQ2NaNGc1Q2ozY2FyVS9YS1pwa2h2cUtabXBPbXd4amJmSGtxL3NSbDE1cTR4VHpHbFBuRFAyYUdQMVFTVnQ5QT09IiwicyI6IjEifQ==", "maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "7b905c52-33ef-44e0-9aa1-85a7551e5392", "record_id": "flaws_cloudtrail:0000067:7b905c52-33ef-44e0-9aa1-85a7551e5392", "row_index": 67, "timestamp": "2019-07-29T22:54:23Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "109.234.105.8", "user_agent": "aws-cli/1.16.208 Python/3.5.1 Darwin/17.7.0 botocore/1.12.198", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1080, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "7b905c52-33ef-44e0-9aa1-85a7551e5392", "eventTime": "2019-07-29T22:54:23Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "109.234.105.8", "userAgent": "aws-cli/1.16.208 Python/3.5.1 Darwin/17.7.0 botocore/1.12.198", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"nextToken": "eyJ2IjoiMiIsImMiOiJpQzhVajhqT0ladU1KbmlVQlpRRkhrdHJUMEt2bEJnNFhZWnloZE4zVUYzeStmNm9pQlBHd2J6Y2dpbkFtdTNkbUIrUkFhU3VZTjNqQ1Q3U2tYQWtOVnQ1aTc5RVJEUm9ocjNPR1FIeXEzTE1ncmZtNGcyMVF5QXJhbzdxVFk4aDJYbkdMbVBDZVZIOS84Ym82cXF0bkhsYVpjQkpsd1pHOWl2SUJjUHlmalp2S241Zk1xL2RrU3dsYjhoSkMybVZrVzBlMG1vVUtVc2VDdz09IiwicyI6IjEifQ==", "maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "7b905c52-33ef-44e0-9aa1-85a7551e5392", "record_id": "flaws_cloudtrail:0000068:7b905c52-33ef-44e0-9aa1-85a7551e5392", "row_index": 68, "timestamp": "2019-07-29T22:54:23Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "109.234.105.8", "user_agent": "aws-cli/1.16.208 Python/3.5.1 Darwin/17.7.0 botocore/1.12.198", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1080, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "7b905c52-33ef-44e0-9aa1-85a7551e5392", "eventTime": "2019-07-29T22:54:23Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "109.234.105.8", "userAgent": "aws-cli/1.16.208 Python/3.5.1 Darwin/17.7.0 botocore/1.12.198", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"nextToken": "eyJ2IjoiMiIsImMiOiJpQzhVajhqT0ladU1KbmlVQlpRRkhrdHJUMEt2bEJnNFhZWnloZE4zVUYzeStmNm9pQlBHd2J6Y2dpbkFtdTNkbUIrUkFhU3VZTjNqQ1Q3U2tYQWtOVnQ1aTc5RVJEUm9ocjNPR1FIeXEzTE1ncmZtNGcyMVF5QXJhbzdxVFk4aDJYbkdMbVBDZVZIOS84Ym82cXF0bkhsYVpjQkpsd1pHOWl2SUJjUHlmalp2S241Zk1xL2RrU3dsYjhoSkMybVZrVzBlMG1vVUtVc2VDdz09IiwicyI6IjEifQ==", "maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "8b9c8878-3dd4-4ac5-b454-e00634c95e9", "record_id": "flaws_cloudtrail:0000069:8b9c8878-3dd4-4ac5-b454-e00634c95e9", "row_index": 69, "timestamp": "2019-07-29T22:54:24Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "109.234.105.8", "user_agent": "aws-cli/1.16.208 Python/3.5.1 Darwin/17.7.0 botocore/1.12.198", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1078, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "8b9c8878-3dd4-4ac5-b454-e00634c95e9", "eventTime": "2019-07-29T22:54:24Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "109.234.105.8", "userAgent": "aws-cli/1.16.208 Python/3.5.1 Darwin/17.7.0 botocore/1.12.198", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"nextToken": "eyJ2IjoiMiIsImMiOiJDdnpqZ3RHYlRSQUduMEtTSTdxRndub2YxVFpZTzF6MXE5T3A4RWIrYU1WOWpxaTN5dE9xNUo3NjVMUTg5anVZS2JUUFlpRWMzK1hycG1ZRE5VNHBXSFkyNUdrSHZXdlBMWUszY3lVaXlaWVRQOGFLRVNHV0RTTVVUYVdjbFVkYWpYTGg2WTR2bTBtRWgxMkhyNVBNMWt3d3M2MkxLQ1VXZTgybjR2L1RjUzR2TXNTSmVIY01OWjEyd3hRSDZUU2dRWEwyTkRqNGNhSUY1UT09IiwicyI6IjEifQ==", "maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "8b9c8878-3dd4-4ac5-b454-e00634c95e9", "record_id": "flaws_cloudtrail:0000070:8b9c8878-3dd4-4ac5-b454-e00634c95e9", "row_index": 70, "timestamp": "2019-07-29T22:54:24Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "109.234.105.8", "user_agent": "aws-cli/1.16.208 Python/3.5.1 Darwin/17.7.0 botocore/1.12.198", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1078, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "8b9c8878-3dd4-4ac5-b454-e00634c95e9", "eventTime": "2019-07-29T22:54:24Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "109.234.105.8", "userAgent": "aws-cli/1.16.208 Python/3.5.1 Darwin/17.7.0 botocore/1.12.198", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"nextToken": "eyJ2IjoiMiIsImMiOiJDdnpqZ3RHYlRSQUduMEtTSTdxRndub2YxVFpZTzF6MXE5T3A4RWIrYU1WOWpxaTN5dE9xNUo3NjVMUTg5anVZS2JUUFlpRWMzK1hycG1ZRE5VNHBXSFkyNUdrSHZXdlBMWUszY3lVaXlaWVRQOGFLRVNHV0RTTVVUYVdjbFVkYWpYTGg2WTR2bTBtRWgxMkhyNVBNMWt3d3M2MkxLQ1VXZTgybjR2L1RjUzR2TXNTSmVIY01OWjEyd3hRSDZUU2dRWEwyTkRqNGNhSUY1UT09IiwicyI6IjEifQ==", "maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "e19e108e-e6d5-4a1f-adee-7cdb56213fb7", "record_id": "flaws_cloudtrail:0000071:e19e108e-e6d5-4a1f-adee-7cdb56213fb7", "row_index": 71, "timestamp": "2019-07-29T22:54:26Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "109.234.105.8", "user_agent": "aws-cli/1.16.208 Python/3.5.1 Darwin/17.7.0 botocore/1.12.198", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1071, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "e19e108e-e6d5-4a1f-adee-7cdb56213fb7", "eventTime": "2019-07-29T22:54:26Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "109.234.105.8", "userAgent": "aws-cli/1.16.208 Python/3.5.1 Darwin/17.7.0 botocore/1.12.198", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"nextToken": "eyJ2IjoiMiIsImMiOiJwU3o5NHl6ajlpaXRpVno3K1JWdkwvUHNEV093SDYzRnM5emlHdFI5VHJKVVAxNEFzaGw0R1lZYmlLTmhuellrR1JFWlk5T05Tb20vb1Awc2lrdWFKd3lLYlRYeFYzbnNVNVhMSmJhV2duWTc3bXl2RG1zZmwrWk15UjZyamRJekQ3eEZidGlTTEtYTUxucUVUVXN1anNMS0ZYTC9jS2ovQUVTeW56dlloeHlGTDkxSW5kL3llS0N1NURLNUdERG0xUTdQVzl2OEJnPT0iLCJzIjoiMSJ9", "maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "e19e108e-e6d5-4a1f-adee-7cdb56213fb7", "record_id": "flaws_cloudtrail:0000072:e19e108e-e6d5-4a1f-adee-7cdb56213fb7", "row_index": 72, "timestamp": "2019-07-29T22:54:26Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "109.234.105.8", "user_agent": "aws-cli/1.16.208 Python/3.5.1 Darwin/17.7.0 botocore/1.12.198", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1071, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "e19e108e-e6d5-4a1f-adee-7cdb56213fb7", "eventTime": "2019-07-29T22:54:26Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "109.234.105.8", "userAgent": "aws-cli/1.16.208 Python/3.5.1 Darwin/17.7.0 botocore/1.12.198", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"nextToken": "eyJ2IjoiMiIsImMiOiJwU3o5NHl6ajlpaXRpVno3K1JWdkwvUHNEV093SDYzRnM5emlHdFI5VHJKVVAxNEFzaGw0R1lZYmlLTmhuellrR1JFWlk5T05Tb20vb1Awc2lrdWFKd3lLYlRYeFYzbnNVNVhMSmJhV2duWTc3bXl2RG1zZmwrWk15UjZyamRJekQ3eEZidGlTTEtYTUxucUVUVXN1anNMS0ZYTC9jS2ovQUVTeW56dlloeHlGTDkxSW5kL3llS0N1NURLNUdERG0xUTdQVzl2OEJnPT0iLCJzIjoiMSJ9", "maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "3349eb9c-d2ac-43a2-9c54-ae6c8180a154", "record_id": "flaws_cloudtrail:0000073:3349eb9c-d2ac-43a2-9c54-ae6c8180a154", "row_index": 73, "timestamp": "2019-07-29T22:54:27Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "109.234.105.8", "user_agent": "aws-cli/1.16.208 Python/3.5.1 Darwin/17.7.0 botocore/1.12.198", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1078, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "3349eb9c-d2ac-43a2-9c54-ae6c8180a154", "eventTime": "2019-07-29T22:54:27Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "109.234.105.8", "userAgent": "aws-cli/1.16.208 Python/3.5.1 Darwin/17.7.0 botocore/1.12.198", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"nextToken": "eyJ2IjoiMiIsImMiOiIzRXFoazZLZ1d3T3lCWlhWRW1oMWRZbC9RNEJaWitvdHNWbWdtbllNaTI2NVNrbEMrYlFvNHpUbk5GeFZUaWI5S0UzWkhJZG8zemhpTXc4U1ROa3dPSS9oSHhBZ3hGZ2VvYnVpSExUVExEQWVOd2VOcENGL1dnRXNpbWs0bjRwTzUvRnU1eHNxZWVVTGE0UHppaThtTjB2TmRTZTBaOHl0aFYvSEpULzdqMnJRRWV2MkhSTXcyeE5UWWtpR0VaNTFsR2dFZ2JDSkZGYmZUQT09IiwicyI6IjEifQ==", "maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "3349eb9c-d2ac-43a2-9c54-ae6c8180a154", "record_id": "flaws_cloudtrail:0000074:3349eb9c-d2ac-43a2-9c54-ae6c8180a154", "row_index": 74, "timestamp": "2019-07-29T22:54:27Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "109.234.105.8", "user_agent": "aws-cli/1.16.208 Python/3.5.1 Darwin/17.7.0 botocore/1.12.198", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1078, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "3349eb9c-d2ac-43a2-9c54-ae6c8180a154", "eventTime": "2019-07-29T22:54:27Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "109.234.105.8", "userAgent": "aws-cli/1.16.208 Python/3.5.1 Darwin/17.7.0 botocore/1.12.198", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"nextToken": "eyJ2IjoiMiIsImMiOiIzRXFoazZLZ1d3T3lCWlhWRW1oMWRZbC9RNEJaWitvdHNWbWdtbllNaTI2NVNrbEMrYlFvNHpUbk5GeFZUaWI5S0UzWkhJZG8zemhpTXc4U1ROa3dPSS9oSHhBZ3hGZ2VvYnVpSExUVExEQWVOd2VOcENGL1dnRXNpbWs0bjRwTzUvRnU1eHNxZWVVTGE0UHppaThtTjB2TmRTZTBaOHl0aFYvSEpULzdqMnJRRWV2MkhSTXcyeE5UWWtpR0VaNTFsR2dFZ2JDSkZGYmZUQT09IiwicyI6IjEifQ==", "maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "df58a6b3-87ea-4d0d-b346-0c9e9b94de85", "record_id": "flaws_cloudtrail:0000075:df58a6b3-87ea-4d0d-b346-0c9e9b94de85", "row_index": 75, "timestamp": "2019-07-29T22:54:29Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "109.234.105.8", "user_agent": "aws-cli/1.16.208 Python/3.5.1 Darwin/17.7.0 botocore/1.12.198", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1079, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "df58a6b3-87ea-4d0d-b346-0c9e9b94de85", "eventTime": "2019-07-29T22:54:29Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "109.234.105.8", "userAgent": "aws-cli/1.16.208 Python/3.5.1 Darwin/17.7.0 botocore/1.12.198", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"nextToken": "eyJ2IjoiMiIsImMiOiJQWWo1d20ydGpFdURXYjJMZ3JZYStUV0tVcFdZVC9WaXRzWEhoZFNJcGlMU2NINm0rNTFqM2lkalc5dFQ3RlFDMHpFbE4wMTNhM2ZmbUIrcWk4c2doVG9aazBCcU9kQUwvWmRlc3hIVUZ5MHAycUhYdnlwcWhhaDVVeUVLalRRUENhZ3NpQVJVaGUxSGl0R3hMK29aWjgyUkhYZlV1SmptNmJKWW12a0c2eGZJb2pFMEVaNnZHTmx5VlJQbXppV3VhMnY0UUtqM2ltTThIdz09IiwicyI6IjEifQ==", "maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "df58a6b3-87ea-4d0d-b346-0c9e9b94de85", "record_id": "flaws_cloudtrail:0000076:df58a6b3-87ea-4d0d-b346-0c9e9b94de85", "row_index": 76, "timestamp": "2019-07-29T22:54:29Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "109.234.105.8", "user_agent": "aws-cli/1.16.208 Python/3.5.1 Darwin/17.7.0 botocore/1.12.198", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1079, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "df58a6b3-87ea-4d0d-b346-0c9e9b94de85", "eventTime": "2019-07-29T22:54:29Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "109.234.105.8", "userAgent": "aws-cli/1.16.208 Python/3.5.1 Darwin/17.7.0 botocore/1.12.198", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"nextToken": "eyJ2IjoiMiIsImMiOiJQWWo1d20ydGpFdURXYjJMZ3JZYStUV0tVcFdZVC9WaXRzWEhoZFNJcGlMU2NINm0rNTFqM2lkalc5dFQ3RlFDMHpFbE4wMTNhM2ZmbUIrcWk4c2doVG9aazBCcU9kQUwvWmRlc3hIVUZ5MHAycUhYdnlwcWhhaDVVeUVLalRRUENhZ3NpQVJVaGUxSGl0R3hMK29aWjgyUkhYZlV1SmptNmJKWW12a0c2eGZJb2pFMEVaNnZHTmx5VlJQbXppV3VhMnY0UUtqM2ltTThIdz09IiwicyI6IjEifQ==", "maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "dfcde7bd-93e7-4775-9025-4f7fded6a9ea", "record_id": "flaws_cloudtrail:0000077:dfcde7bd-93e7-4775-9025-4f7fded6a9ea", "row_index": 77, "timestamp": "2019-07-29T22:54:30Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "109.234.105.8", "user_agent": "aws-cli/1.16.208 Python/3.5.1 Darwin/17.7.0 botocore/1.12.198", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1079, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "dfcde7bd-93e7-4775-9025-4f7fded6a9ea", "eventTime": "2019-07-29T22:54:30Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "109.234.105.8", "userAgent": "aws-cli/1.16.208 Python/3.5.1 Darwin/17.7.0 botocore/1.12.198", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"nextToken": "eyJ2IjoiMiIsImMiOiI2dFR4Um01TnB5czU0Rm5qNG8zeGQ2bEgzSi9NdFp6Y21sMW1ZRm5rNm5JZml4UjZDdXRCTURnajBXQWNzMFRqYkZlRlFYWWxmeHJURVo4eHFPNTZOVGdjRkNIRmdXb3ptK2NiZlZSOExrUkg1dkZRL0Nad0tHWXRJdUE2ZDZPWk9Ddjg5czlIK2dIK3U3ZDNhYW9HQWs4VTdVK3IxQXJwZ1hGN3dRb24wMXFVOVRnNDVYRFhCWElsY0taUWtlbndLRUtKYUJtMEt2RUZPdz09IiwicyI6IjEifQ==", "maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "dfcde7bd-93e7-4775-9025-4f7fded6a9ea", "record_id": "flaws_cloudtrail:0000078:dfcde7bd-93e7-4775-9025-4f7fded6a9ea", "row_index": 78, "timestamp": "2019-07-29T22:54:30Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "109.234.105.8", "user_agent": "aws-cli/1.16.208 Python/3.5.1 Darwin/17.7.0 botocore/1.12.198", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1079, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "dfcde7bd-93e7-4775-9025-4f7fded6a9ea", "eventTime": "2019-07-29T22:54:30Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "109.234.105.8", "userAgent": "aws-cli/1.16.208 Python/3.5.1 Darwin/17.7.0 botocore/1.12.198", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"nextToken": "eyJ2IjoiMiIsImMiOiI2dFR4Um01TnB5czU0Rm5qNG8zeGQ2bEgzSi9NdFp6Y21sMW1ZRm5rNm5JZml4UjZDdXRCTURnajBXQWNzMFRqYkZlRlFYWWxmeHJURVo4eHFPNTZOVGdjRkNIRmdXb3ptK2NiZlZSOExrUkg1dkZRL0Nad0tHWXRJdUE2ZDZPWk9Ddjg5czlIK2dIK3U3ZDNhYW9HQWs4VTdVK3IxQXJwZ1hGN3dRb24wMXFVOVRnNDVYRFhCWElsY0taUWtlbndLRUtKYUJtMEt2RUZPdz09IiwicyI6IjEifQ==", "maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "35e037793-909c-4cc8-a3ef-8da4b88d7cb9", "record_id": "flaws_cloudtrail:0000079:35e037793-909c-4cc8-a3ef-8da4b88d7cb9", "row_index": 79, "timestamp": "2019-07-29T22:54:31Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "109.234.105.8", "user_agent": "aws-cli/1.16.208 Python/3.5.1 Darwin/17.7.0 botocore/1.12.198", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1080, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "35e037793-909c-4cc8-a3ef-8da4b88d7cb9", "eventTime": "2019-07-29T22:54:31Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "109.234.105.8", "userAgent": "aws-cli/1.16.208 Python/3.5.1 Darwin/17.7.0 botocore/1.12.198", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"nextToken": "eyJ2IjoiMiIsImMiOiJGRGlTZWlKeWd1N1o4YjEwRTY5WTFROFZoNkZqTTZ1VFFqYnJOT2pjMlByczM4MllPK2d5Ykx5UjFPM2JLUFduU2ljVVkzbmZ3L0NUcm94QTV5RXNORkJNRHNVM2JERlcyZHY0bEpiWFdqRkhJb3lIUXhndzRNdUd1UVEyVFBCeGUzTFpUK2lmOFQxL1hTMzZuSkl4ZEtmeFEyZjRkZFcwZ2JOMk91eEwxaXAwSWdGK1VCN1gybWdVRm5FQjJwWFdjdkN6TnFwSm5PNkVNQT09IiwicyI6IjEifQ==", "maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "35e037793-909c-4cc8-a3ef-8da4b88d7cb9", "record_id": "flaws_cloudtrail:0000080:35e037793-909c-4cc8-a3ef-8da4b88d7cb9", "row_index": 80, "timestamp": "2019-07-29T22:54:31Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "109.234.105.8", "user_agent": "aws-cli/1.16.208 Python/3.5.1 Darwin/17.7.0 botocore/1.12.198", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1080, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "35e037793-909c-4cc8-a3ef-8da4b88d7cb9", "eventTime": "2019-07-29T22:54:31Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "109.234.105.8", "userAgent": "aws-cli/1.16.208 Python/3.5.1 Darwin/17.7.0 botocore/1.12.198", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"nextToken": "eyJ2IjoiMiIsImMiOiJGRGlTZWlKeWd1N1o4YjEwRTY5WTFROFZoNkZqTTZ1VFFqYnJOT2pjMlByczM4MllPK2d5Ykx5UjFPM2JLUFduU2ljVVkzbmZ3L0NUcm94QTV5RXNORkJNRHNVM2JERlcyZHY0bEpiWFdqRkhJb3lIUXhndzRNdUd1UVEyVFBCeGUzTFpUK2lmOFQxL1hTMzZuSkl4ZEtmeFEyZjRkZFcwZ2JOMk91eEwxaXAwSWdGK1VCN1gybWdVRm5FQjJwWFdjdkN6TnFwSm5PNkVNQT09IiwicyI6IjEifQ==", "maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "d57c4a96-5699-4581-acc5-b428d0314e1a", "record_id": "flaws_cloudtrail:0000081:d57c4a96-5699-4581-acc5-b428d0314e1a", "row_index": 81, "timestamp": "2019-07-29T22:54:33Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "109.234.105.8", "user_agent": "aws-cli/1.16.208 Python/3.5.1 Darwin/17.7.0 botocore/1.12.198", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1079, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "d57c4a96-5699-4581-acc5-b428d0314e1a", "eventTime": "2019-07-29T22:54:33Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "109.234.105.8", "userAgent": "aws-cli/1.16.208 Python/3.5.1 Darwin/17.7.0 botocore/1.12.198", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"nextToken": "eyJ2IjoiMiIsImMiOiJQNEd2WWdiSWwyS091eVpNN2FTcWxtb3RJWW5KRUIvS2tXeFF6WW05cWdleXVxZzkzZk1CTWZKc242bnEyZkxURWZNb2JmZm5BQ2ZWTnRMcHNzVXIya05rS1hTMXNUaFdEenl2NFhMS0dyZXRCb01EZU9GWXlEM3BCejlPT1pPRmk0c05SaWlQcjg2b0huK3pYSnl6UGhZaXhvWEdTS1I3OTFhOUptQ0lxdE8ydjlVY3RSci84bmpQSi9hU2dIV2MxbzM1clhzR2VFbFJKdz09IiwicyI6IjEifQ==", "maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "d57c4a96-5699-4581-acc5-b428d0314e1a", "record_id": "flaws_cloudtrail:0000082:d57c4a96-5699-4581-acc5-b428d0314e1a", "row_index": 82, "timestamp": "2019-07-29T22:54:33Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "109.234.105.8", "user_agent": "aws-cli/1.16.208 Python/3.5.1 Darwin/17.7.0 botocore/1.12.198", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1079, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "d57c4a96-5699-4581-acc5-b428d0314e1a", "eventTime": "2019-07-29T22:54:33Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "109.234.105.8", "userAgent": "aws-cli/1.16.208 Python/3.5.1 Darwin/17.7.0 botocore/1.12.198", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"nextToken": "eyJ2IjoiMiIsImMiOiJQNEd2WWdiSWwyS091eVpNN2FTcWxtb3RJWW5KRUIvS2tXeFF6WW05cWdleXVxZzkzZk1CTWZKc242bnEyZkxURWZNb2JmZm5BQ2ZWTnRMcHNzVXIya05rS1hTMXNUaFdEenl2NFhMS0dyZXRCb01EZU9GWXlEM3BCejlPT1pPRmk0c05SaWlQcjg2b0huK3pYSnl6UGhZaXhvWEdTS1I3OTFhOUptQ0lxdE8ydjlVY3RSci84bmpQSi9hU2dIV2MxbzM1clhzR2VFbFJKdz09IiwicyI6IjEifQ==", "maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "b99c6475-61b8-4638-ba64-d7378b0ae43d", "record_id": "flaws_cloudtrail:0000083:b99c6475-61b8-4638-ba64-d7378b0ae43d", "row_index": 83, "timestamp": "2019-07-29T22:54:34Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "109.234.105.8", "user_agent": "aws-cli/1.16.208 Python/3.5.1 Darwin/17.7.0 botocore/1.12.198", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1079, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "b99c6475-61b8-4638-ba64-d7378b0ae43d", "eventTime": "2019-07-29T22:54:34Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "109.234.105.8", "userAgent": "aws-cli/1.16.208 Python/3.5.1 Darwin/17.7.0 botocore/1.12.198", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"nextToken": "eyJ2IjoiMiIsImMiOiJIS3dGOXUwcG9iVHZZQStpTHNUMlZoVEo5WUZQSnA1eHMwTDIxMGZJbiswUFJuMDBFRWxVVFZOL1BiMHhwL3IxeW9nZUdFTGErMGFPakJKeG9uUHhPaTZ4ZDcybStDZW02bEw5Y2drbWR4bk9IaGhzbzVGTkpmNk1YUzdGTDg2WDRXN0RuTkM5ZEgvUitydE8rTFp4YW1abEVWdm4rMGR6MjZkYjNuWW1hYTNaUXpmSjNVVWZTZkdvUjI0K1BvL1d2N3FVb3NNaU5Ya3JCdz09IiwicyI6IjEifQ==", "maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "b99c6475-61b8-4638-ba64-d7378b0ae43d", "record_id": "flaws_cloudtrail:0000084:b99c6475-61b8-4638-ba64-d7378b0ae43d", "row_index": 84, "timestamp": "2019-07-29T22:54:34Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "109.234.105.8", "user_agent": "aws-cli/1.16.208 Python/3.5.1 Darwin/17.7.0 botocore/1.12.198", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1079, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "b99c6475-61b8-4638-ba64-d7378b0ae43d", "eventTime": "2019-07-29T22:54:34Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "109.234.105.8", "userAgent": "aws-cli/1.16.208 Python/3.5.1 Darwin/17.7.0 botocore/1.12.198", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"nextToken": "eyJ2IjoiMiIsImMiOiJIS3dGOXUwcG9iVHZZQStpTHNUMlZoVEo5WUZQSnA1eHMwTDIxMGZJbiswUFJuMDBFRWxVVFZOL1BiMHhwL3IxeW9nZUdFTGErMGFPakJKeG9uUHhPaTZ4ZDcybStDZW02bEw5Y2drbWR4bk9IaGhzbzVGTkpmNk1YUzdGTDg2WDRXN0RuTkM5ZEgvUitydE8rTFp4YW1abEVWdm4rMGR6MjZkYjNuWW1hYTNaUXpmSjNVVWZTZkdvUjI0K1BvL1d2N3FVb3NNaU5Ya3JCdz09IiwicyI6IjEifQ==", "maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "789a904a-5d46-4e90-b504-b6902e1ebed0", "record_id": "flaws_cloudtrail:0000085:789a904a-5d46-4e90-b504-b6902e1ebed0", "row_index": 85, "timestamp": "2019-07-29T22:54:35Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "109.234.105.8", "user_agent": "aws-cli/1.16.208 Python/3.5.1 Darwin/17.7.0 botocore/1.12.198", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1079, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "789a904a-5d46-4e90-b504-b6902e1ebed0", "eventTime": "2019-07-29T22:54:35Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "109.234.105.8", "userAgent": "aws-cli/1.16.208 Python/3.5.1 Darwin/17.7.0 botocore/1.12.198", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"nextToken": "eyJ2IjoiMiIsImMiOiJ0QUdlSGFUWDJsQzI1SXZVWUtZQzJaa29ZMHBjWnlYRWRodzUybmFYeVJ6dWMyTVRMY2RScllUNXdocHF2RG5TaXJ4Z0RaaFQ2MnliZXQwZGh6SlJTZVJFc2Y0RXRsK1VKSDJrUEJHZTMzaEltdWo3NUF3ZzdtUHY2bEVhRDNmbUd0cHRadUZWL0pzdWlFY29UYjBpblRWb3BDcXVJYk43SGJxUUlPRWVjc1BlN2duVzM1K2MrZVl5UG8wZkg4R3Q2WDROcVd1ckhWaWVFZz09IiwicyI6IjEifQ==", "maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "789a904a-5d46-4e90-b504-b6902e1ebed0", "record_id": "flaws_cloudtrail:0000086:789a904a-5d46-4e90-b504-b6902e1ebed0", "row_index": 86, "timestamp": "2019-07-29T22:54:35Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "109.234.105.8", "user_agent": "aws-cli/1.16.208 Python/3.5.1 Darwin/17.7.0 botocore/1.12.198", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1079, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "789a904a-5d46-4e90-b504-b6902e1ebed0", "eventTime": "2019-07-29T22:54:35Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "109.234.105.8", "userAgent": "aws-cli/1.16.208 Python/3.5.1 Darwin/17.7.0 botocore/1.12.198", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"nextToken": "eyJ2IjoiMiIsImMiOiJ0QUdlSGFUWDJsQzI1SXZVWUtZQzJaa29ZMHBjWnlYRWRodzUybmFYeVJ6dWMyTVRMY2RScllUNXdocHF2RG5TaXJ4Z0RaaFQ2MnliZXQwZGh6SlJTZVJFc2Y0RXRsK1VKSDJrUEJHZTMzaEltdWo3NUF3ZzdtUHY2bEVhRDNmbUd0cHRadUZWL0pzdWlFY29UYjBpblRWb3BDcXVJYk43SGJxUUlPRWVjc1BlN2duVzM1K2MrZVl5UG8wZkg4R3Q2WDROcVd1ckhWaWVFZz09IiwicyI6IjEifQ==", "maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "22f668429-dd98-4e22-aa06-05dde844106fb", "record_id": "flaws_cloudtrail:0000087:22f668429-dd98-4e22-aa06-05dde844106fb", "row_index": 87, "timestamp": "2019-07-29T22:54:36Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "109.234.105.8", "user_agent": "aws-cli/1.16.208 Python/3.5.1 Darwin/17.7.0 botocore/1.12.198", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1101, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "22f668429-dd98-4e22-aa06-05dde844106fb", "eventTime": "2019-07-29T22:54:36Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "109.234.105.8", "userAgent": "aws-cli/1.16.208 Python/3.5.1 Darwin/17.7.0 botocore/1.12.198", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"nextToken": "eyJ2IjoiMiIsImMiOiJoTmxpY284bUgwbDdmdXFQOVorc2YrUHBUTWE1ei9HS0dra2RQRGI2OUZqR0RXSHVZT2NMQ05GV2hHamFyNHhUaFBzVGtqMWpDUXBjbGI2cmtNdU9FU0RTdHhwcytuVVk1MjgyQXZRMVdIS1Y2TW0xNDZFL0s1WDhsSmQ1R3BqTDBNaENZdGQ0UmhGdEkycVNZYlZHaE5GUG45MWNuYlZBa3M2WFZ3R1dTeE5JMzByT2htRzJZTEhnRTEvdWx5Q25sYWhQb0lwMVk0OUtmM1dFTXNudTErWmZNR1lEOWlZPSIsInMiOiIxIn0=", "maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "22f668429-dd98-4e22-aa06-05dde844106fb", "record_id": "flaws_cloudtrail:0000088:22f668429-dd98-4e22-aa06-05dde844106fb", "row_index": 88, "timestamp": "2019-07-29T22:54:36Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "109.234.105.8", "user_agent": "aws-cli/1.16.208 Python/3.5.1 Darwin/17.7.0 botocore/1.12.198", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1101, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "22f668429-dd98-4e22-aa06-05dde844106fb", "eventTime": "2019-07-29T22:54:36Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "109.234.105.8", "userAgent": "aws-cli/1.16.208 Python/3.5.1 Darwin/17.7.0 botocore/1.12.198", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"nextToken": "eyJ2IjoiMiIsImMiOiJoTmxpY284bUgwbDdmdXFQOVorc2YrUHBUTWE1ei9HS0dra2RQRGI2OUZqR0RXSHVZT2NMQ05GV2hHamFyNHhUaFBzVGtqMWpDUXBjbGI2cmtNdU9FU0RTdHhwcytuVVk1MjgyQXZRMVdIS1Y2TW0xNDZFL0s1WDhsSmQ1R3BqTDBNaENZdGQ0UmhGdEkycVNZYlZHaE5GUG45MWNuYlZBa3M2WFZ3R1dTeE5JMzByT2htRzJZTEhnRTEvdWx5Q25sYWhQb0lwMVk0OUtmM1dFTXNudTErWmZNR1lEOWlZPSIsInMiOiIxIn0=", "maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "8b2c8deb-ed52-4918-bc69-687e795d7157", "record_id": "flaws_cloudtrail:0000089:8b2c8deb-ed52-4918-bc69-687e795d7157", "row_index": 89, "timestamp": "2019-07-29T22:54:37Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "109.234.105.8", "user_agent": "aws-cli/1.16.208 Python/3.5.1 Darwin/17.7.0 botocore/1.12.198", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1087, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "8b2c8deb-ed52-4918-bc69-687e795d7157", "eventTime": "2019-07-29T22:54:37Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "109.234.105.8", "userAgent": "aws-cli/1.16.208 Python/3.5.1 Darwin/17.7.0 botocore/1.12.198", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"nextToken": "eyJ2IjoiMiIsImMiOiJUOWx1ZytnMWZqUnlYdzlLb2NvYlliSFlYMnBtZW5YZXlQM290VUxhdXhJRXJYNFl2VStRTGk5K2RMeSsrUEZGUUdlS2p1NVRqczJlaDgydFJkZUNCRVJhLzB6NGp4N1FNZmhFV3ZRdW1kTndaL0pFNWk4ZGlpRDA1SU94Z3A1VVpNVjJkdk1mY04vN3h5RVRHYkxpbDJpSG5VVFg3blVzWVIwOG1oT3owZ0JhbE93cGZxTTJFZGpOYWxkWTVBS3ZOd1IzSEhNSEE4WmpoME91dkFLT2dBPT0iLCJzIjoiMSJ9", "maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "8b2c8deb-ed52-4918-bc69-687e795d7157", "record_id": "flaws_cloudtrail:0000090:8b2c8deb-ed52-4918-bc69-687e795d7157", "row_index": 90, "timestamp": "2019-07-29T22:54:37Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "109.234.105.8", "user_agent": "aws-cli/1.16.208 Python/3.5.1 Darwin/17.7.0 botocore/1.12.198", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1087, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "8b2c8deb-ed52-4918-bc69-687e795d7157", "eventTime": "2019-07-29T22:54:37Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "109.234.105.8", "userAgent": "aws-cli/1.16.208 Python/3.5.1 Darwin/17.7.0 botocore/1.12.198", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"nextToken": "eyJ2IjoiMiIsImMiOiJUOWx1ZytnMWZqUnlYdzlLb2NvYlliSFlYMnBtZW5YZXlQM290VUxhdXhJRXJYNFl2VStRTGk5K2RMeSsrUEZGUUdlS2p1NVRqczJlaDgydFJkZUNCRVJhLzB6NGp4N1FNZmhFV3ZRdW1kTndaL0pFNWk4ZGlpRDA1SU94Z3A1VVpNVjJkdk1mY04vN3h5RVRHYkxpbDJpSG5VVFg3blVzWVIwOG1oT3owZ0JhbE93cGZxTTJFZGpOYWxkWTVBS3ZOd1IzSEhNSEE4WmpoME91dkFLT2dBPT0iLCJzIjoiMSJ9", "maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "1fd0c96d-d9db-44e0-b84f-e69ee826dde7", "record_id": "flaws_cloudtrail:0000091:1fd0c96d-d9db-44e0-b84f-e69ee826dde7", "row_index": 91, "timestamp": "2019-07-29T22:54:38Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "109.234.105.8", "user_agent": "aws-cli/1.16.208 Python/3.5.1 Darwin/17.7.0 botocore/1.12.198", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1054, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "1fd0c96d-d9db-44e0-b84f-e69ee826dde7", "eventTime": "2019-07-29T22:54:38Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "109.234.105.8", "userAgent": "aws-cli/1.16.208 Python/3.5.1 Darwin/17.7.0 botocore/1.12.198", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"nextToken": "eyJ2IjoiMiIsImMiOiIwYytPOE1MVW9LUXlFbS9uRnhqb0Y4dEtNbFpBVlhNQ0hSODZCQWFHRkg4VmNBYlA2Q2oyL2hORzcwa0x3MDlXWlpDclgrU3RuaHViSXN2ZFNMa0tHUzVEUWlCV2ZPSlhKQ2ZvZDVBZ2FUVm1OM3drUWZWTVRCZGFYTEVKeVhjMElSdTRWR0VtdG9ac21jTDlzK0QwY1gvUUl1THhrbzIwdllQdksweklWYWNTWUNua2VqRTBsS2QwOHFKZElOcz0iLCJzIjoiMSJ9", "maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "ff62fd51-5cc4-431a-a6b4-cb42c0ef7102", "record_id": "flaws_cloudtrail:0000092:ff62fd51-5cc4-431a-a6b4-cb42c0ef7102", "row_index": 92, "timestamp": "2019-07-29T22:54:38Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "109.234.105.8", "user_agent": "aws-cli/1.16.208 Python/3.5.1 Darwin/17.7.0 botocore/1.12.198", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1099, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "ff62fd51-5cc4-431a-a6b4-cb42c0ef7102", "eventTime": "2019-07-29T22:54:38Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "109.234.105.8", "userAgent": "aws-cli/1.16.208 Python/3.5.1 Darwin/17.7.0 botocore/1.12.198", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"nextToken": "eyJ2IjoiMiIsImMiOiJzQkNCdE9qWE5abmlOb2ZJaGZ6amRTQU1oUWtMWEc3RFQ1Wk9IUW01dHlUUFV2TkJOZjAwQzBzUmQ0dTBxdVVHTndIcG5IbUFUU1pjb254TWdNOS92Qjc3clVLWEI4NnFwTkhXUVk0ZlJBU084WFZBWnVFcjRTdVJaWkNVcEd4UnRWTFViS0xvbjJpZ3hMMUtxeGs2M0R6MVN5VXFwWmU3eklycXJVU2ZIQmRRbHdLcVpiSHNOUlRTYkowNjE4UGV0VTMxSGdxZVlicFhYQndVQnk3cGxpWkRXc1IrOVFvPSIsInMiOiIxIn0=", "maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "1fd0c96d-d9db-44e0-b84f-e69ee826dde7", "record_id": "flaws_cloudtrail:0000093:1fd0c96d-d9db-44e0-b84f-e69ee826dde7", "row_index": 93, "timestamp": "2019-07-29T22:54:38Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "109.234.105.8", "user_agent": "aws-cli/1.16.208 Python/3.5.1 Darwin/17.7.0 botocore/1.12.198", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1054, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "1fd0c96d-d9db-44e0-b84f-e69ee826dde7", "eventTime": "2019-07-29T22:54:38Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "109.234.105.8", "userAgent": "aws-cli/1.16.208 Python/3.5.1 Darwin/17.7.0 botocore/1.12.198", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"nextToken": "eyJ2IjoiMiIsImMiOiIwYytPOE1MVW9LUXlFbS9uRnhqb0Y4dEtNbFpBVlhNQ0hSODZCQWFHRkg4VmNBYlA2Q2oyL2hORzcwa0x3MDlXWlpDclgrU3RuaHViSXN2ZFNMa0tHUzVEUWlCV2ZPSlhKQ2ZvZDVBZ2FUVm1OM3drUWZWTVRCZGFYTEVKeVhjMElSdTRWR0VtdG9ac21jTDlzK0QwY1gvUUl1THhrbzIwdllQdksweklWYWNTWUNua2VqRTBsS2QwOHFKZElOcz0iLCJzIjoiMSJ9", "maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "ff62fd51-5cc4-431a-a6b4-cb42c0ef7102", "record_id": "flaws_cloudtrail:0000094:ff62fd51-5cc4-431a-a6b4-cb42c0ef7102", "row_index": 94, "timestamp": "2019-07-29T22:54:38Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "109.234.105.8", "user_agent": "aws-cli/1.16.208 Python/3.5.1 Darwin/17.7.0 botocore/1.12.198", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1099, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "ff62fd51-5cc4-431a-a6b4-cb42c0ef7102", "eventTime": "2019-07-29T22:54:38Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "109.234.105.8", "userAgent": "aws-cli/1.16.208 Python/3.5.1 Darwin/17.7.0 botocore/1.12.198", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"nextToken": "eyJ2IjoiMiIsImMiOiJzQkNCdE9qWE5abmlOb2ZJaGZ6amRTQU1oUWtMWEc3RFQ1Wk9IUW01dHlUUFV2TkJOZjAwQzBzUmQ0dTBxdVVHTndIcG5IbUFUU1pjb254TWdNOS92Qjc3clVLWEI4NnFwTkhXUVk0ZlJBU084WFZBWnVFcjRTdVJaWkNVcEd4UnRWTFViS0xvbjJpZ3hMMUtxeGs2M0R6MVN5VXFwWmU3eklycXJVU2ZIQmRRbHdLcVpiSHNOUlRTYkowNjE4UGV0VTMxSGdxZVlicFhYQndVQnk3cGxpWkRXc1IrOVFvPSIsInMiOiIxIn0=", "maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "fc50680b-dc7e-4ec4-a4c1-1e0971ede093", "record_id": "flaws_cloudtrail:0000095:fc50680b-dc7e-4ec4-a4c1-1e0971ede093", "row_index": 95, "timestamp": "2019-07-29T22:54:39Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "109.234.105.8", "user_agent": "aws-cli/1.16.208 Python/3.5.1 Darwin/17.7.0 botocore/1.12.198", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1099, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "fc50680b-dc7e-4ec4-a4c1-1e0971ede093", "eventTime": "2019-07-29T22:54:39Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "109.234.105.8", "userAgent": "aws-cli/1.16.208 Python/3.5.1 Darwin/17.7.0 botocore/1.12.198", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"nextToken": "eyJ2IjoiMiIsImMiOiJxaTR5ZlB3SjlLMzJSSkg0WnBIVm8ySFJTZHZ4MjFhcnVlSEZHNzlmVGlZNXMxZXpUT1FvSWFDMGtXOXExUURWVGhpejg2U3VhMFl0UE0ya0FLVnI1Qml4ZWd0TTlyenNkUDlBOXV4WWM4di84cGNLZ1RoT0E3WWpGSzBtYnNzeDZzWVVEOW4wTEI1WTk4YnpSM1l0VEEzLzFNdHNDMXB0YzI4UDE1WWxFVUdOR0lVRTNVaDQvWW00UmhLRFNxTUlvUGh3SWY0aytSUlNKcnE4Um04UWI5bEhmRmFENEFNPSIsInMiOiIxIn0=", "maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "fc50680b-dc7e-4ec4-a4c1-1e0971ede093", "record_id": "flaws_cloudtrail:0000096:fc50680b-dc7e-4ec4-a4c1-1e0971ede093", "row_index": 96, "timestamp": "2019-07-29T22:54:39Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "109.234.105.8", "user_agent": "aws-cli/1.16.208 Python/3.5.1 Darwin/17.7.0 botocore/1.12.198", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1099, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "fc50680b-dc7e-4ec4-a4c1-1e0971ede093", "eventTime": "2019-07-29T22:54:39Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "109.234.105.8", "userAgent": "aws-cli/1.16.208 Python/3.5.1 Darwin/17.7.0 botocore/1.12.198", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"nextToken": "eyJ2IjoiMiIsImMiOiJxaTR5ZlB3SjlLMzJSSkg0WnBIVm8ySFJTZHZ4MjFhcnVlSEZHNzlmVGlZNXMxZXpUT1FvSWFDMGtXOXExUURWVGhpejg2U3VhMFl0UE0ya0FLVnI1Qml4ZWd0TTlyenNkUDlBOXV4WWM4di84cGNLZ1RoT0E3WWpGSzBtYnNzeDZzWVVEOW4wTEI1WTk4YnpSM1l0VEEzLzFNdHNDMXB0YzI4UDE1WWxFVUdOR0lVRTNVaDQvWW00UmhLRFNxTUlvUGh3SWY0aytSUlNKcnE4Um04UWI5bEhmRmFENEFNPSIsInMiOiIxIn0=", "maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "6e4cb0af-fea4-4d3a-aadd-607009832c23", "record_id": "flaws_cloudtrail:0000097:6e4cb0af-fea4-4d3a-aadd-607009832c23", "row_index": 97, "timestamp": "2019-07-29T22:54:40Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "109.234.105.8", "user_agent": "aws-cli/1.16.208 Python/3.5.1 Darwin/17.7.0 botocore/1.12.198", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1086, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "6e4cb0af-fea4-4d3a-aadd-607009832c23", "eventTime": "2019-07-29T22:54:40Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "109.234.105.8", "userAgent": "aws-cli/1.16.208 Python/3.5.1 Darwin/17.7.0 botocore/1.12.198", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"nextToken": "eyJ2IjoiMiIsImMiOiJjK1ZDTzZ3ZGpSL3oxcjRZcTNDNzhpS0pRTjMxM090clZXRnFmZVkwdlBaNDZQWGpleHVrd2dIaHNFaHVYWnNSbkxTTmE0SkZ6UyszUDQrei9paDV4UFd1Kzh2WWlGOUFxaTFrT2E1STVPNlFaS090SmpUbEdyeXNTdlNkc0FlTUFtUE5oUm8rOWdpVkNwWHVkajFMK1NQU3VZYUtua2pYV1Y1NXdNa080WmwrUTNWTnhBcGJFZlJUMHp4alpGRmVGcEkyMTRJWmVpcW4ySDQvdm9JeUtnPT0iLCJzIjoiMSJ9", "maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "6e4cb0af-fea4-4d3a-aadd-607009832c23", "record_id": "flaws_cloudtrail:0000098:6e4cb0af-fea4-4d3a-aadd-607009832c23", "row_index": 98, "timestamp": "2019-07-29T22:54:40Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "109.234.105.8", "user_agent": "aws-cli/1.16.208 Python/3.5.1 Darwin/17.7.0 botocore/1.12.198", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1086, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "6e4cb0af-fea4-4d3a-aadd-607009832c23", "eventTime": "2019-07-29T22:54:40Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "109.234.105.8", "userAgent": "aws-cli/1.16.208 Python/3.5.1 Darwin/17.7.0 botocore/1.12.198", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"nextToken": "eyJ2IjoiMiIsImMiOiJjK1ZDTzZ3ZGpSL3oxcjRZcTNDNzhpS0pRTjMxM090clZXRnFmZVkwdlBaNDZQWGpleHVrd2dIaHNFaHVYWnNSbkxTTmE0SkZ6UyszUDQrei9paDV4UFd1Kzh2WWlGOUFxaTFrT2E1STVPNlFaS090SmpUbEdyeXNTdlNkc0FlTUFtUE5oUm8rOWdpVkNwWHVkajFMK1NQU3VZYUtua2pYV1Y1NXdNa080WmwrUTNWTnhBcGJFZlJUMHp4alpGRmVGcEkyMTRJWmVpcW4ySDQvdm9JeUtnPT0iLCJzIjoiMSJ9", "maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "c504408ef-06d2-45ea-8583-6152bde41cbe", "record_id": "flaws_cloudtrail:0000099:c504408ef-06d2-45ea-8583-6152bde41cbe", "row_index": 99, "timestamp": "2019-07-29T22:54:41Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "109.234.105.8", "user_agent": "aws-cli/1.16.208 Python/3.5.1 Darwin/17.7.0 botocore/1.12.198", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1100, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "c504408ef-06d2-45ea-8583-6152bde41cbe", "eventTime": "2019-07-29T22:54:41Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "109.234.105.8", "userAgent": "aws-cli/1.16.208 Python/3.5.1 Darwin/17.7.0 botocore/1.12.198", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"nextToken": "eyJ2IjoiMiIsImMiOiJ5OGRrNk5kYlJDZCt1b1pLcVQ5ak9rRkp4MjlGdXBXZk9zYWltMjVqYzVQM0ZpRmhLZnNrOTlEanVTNDZzVTFTdXRQcWFZOVVScm9EdlBUdnR1MVdVdzFnVURMYVhEQWkwVExXck04elh6ZGUraXZsdDVsM2Z3Q2p5OUNIQVRqV2FZeE5pY1g2b3Y1aE9tL3h2Nkh5Y2lJK3RlRjNJNjJJcVhrd1JNdEFnajllbmExbmc4MWZHVkJOMzFDcmJuYkRtdlBobmFqdWhDcnd5VVFxUStPUHFXMmkzYkE2LzR3PSIsInMiOiIxIn0=", "maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "c504408ef-06d2-45ea-8583-6152bde41cbe", "record_id": "flaws_cloudtrail:0000100:c504408ef-06d2-45ea-8583-6152bde41cbe", "row_index": 100, "timestamp": "2019-07-29T22:54:41Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "109.234.105.8", "user_agent": "aws-cli/1.16.208 Python/3.5.1 Darwin/17.7.0 botocore/1.12.198", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1100, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "c504408ef-06d2-45ea-8583-6152bde41cbe", "eventTime": "2019-07-29T22:54:41Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "109.234.105.8", "userAgent": "aws-cli/1.16.208 Python/3.5.1 Darwin/17.7.0 botocore/1.12.198", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"nextToken": "eyJ2IjoiMiIsImMiOiJ5OGRrNk5kYlJDZCt1b1pLcVQ5ak9rRkp4MjlGdXBXZk9zYWltMjVqYzVQM0ZpRmhLZnNrOTlEanVTNDZzVTFTdXRQcWFZOVVScm9EdlBUdnR1MVdVdzFnVURMYVhEQWkwVExXck04elh6ZGUraXZsdDVsM2Z3Q2p5OUNIQVRqV2FZeE5pY1g2b3Y1aE9tL3h2Nkh5Y2lJK3RlRjNJNjJJcVhrd1JNdEFnajllbmExbmc4MWZHVkJOMzFDcmJuYkRtdlBobmFqdWhDcnd5VVFxUStPUHFXMmkzYkE2LzR3PSIsInMiOiIxIn0=", "maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "85def7b9-904c-4aca-b581-e41ad16c2317", "record_id": "flaws_cloudtrail:0000101:85def7b9-904c-4aca-b581-e41ad16c2317", "row_index": 101, "timestamp": "2019-07-29T22:54:42Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "109.234.105.8", "user_agent": "aws-cli/1.16.208 Python/3.5.1 Darwin/17.7.0 botocore/1.12.198", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1087, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "85def7b9-904c-4aca-b581-e41ad16c2317", "eventTime": "2019-07-29T22:54:42Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "109.234.105.8", "userAgent": "aws-cli/1.16.208 Python/3.5.1 Darwin/17.7.0 botocore/1.12.198", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"nextToken": "eyJ2IjoiMiIsImMiOiJzMUNSbzkrb0RScTRjMHJOcXJLZGt6ejhLTGxsT1BkMFl4L2h0ZThEUHpudjhyVm14L3lML2JMQXI4cWhSTURuUldUR1NnV2VsTDNaRE9QNkJhSlhCZEcwVE5jSzIya2ZsU2hGNVpYZTNQMUlETHhITGx2NTRXM05hUWtuRk04RTYzOFVVTGdEeVpNbGFDaHhVM0l4TDRWL0xlbGZmOXlDS2YxeUl5aENaR2Y3dnZqNGU4UEFSeHJzRHErNis5ZmgwZXV3TW5qUzJlclA4QW1LWStZdkN3PT0iLCJzIjoiMSJ9", "maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "85def7b9-904c-4aca-b581-e41ad16c2317", "record_id": "flaws_cloudtrail:0000102:85def7b9-904c-4aca-b581-e41ad16c2317", "row_index": 102, "timestamp": "2019-07-29T22:54:42Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "109.234.105.8", "user_agent": "aws-cli/1.16.208 Python/3.5.1 Darwin/17.7.0 botocore/1.12.198", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1087, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "85def7b9-904c-4aca-b581-e41ad16c2317", "eventTime": "2019-07-29T22:54:42Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "109.234.105.8", "userAgent": "aws-cli/1.16.208 Python/3.5.1 Darwin/17.7.0 botocore/1.12.198", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"nextToken": "eyJ2IjoiMiIsImMiOiJzMUNSbzkrb0RScTRjMHJOcXJLZGt6ejhLTGxsT1BkMFl4L2h0ZThEUHpudjhyVm14L3lML2JMQXI4cWhSTURuUldUR1NnV2VsTDNaRE9QNkJhSlhCZEcwVE5jSzIya2ZsU2hGNVpYZTNQMUlETHhITGx2NTRXM05hUWtuRk04RTYzOFVVTGdEeVpNbGFDaHhVM0l4TDRWL0xlbGZmOXlDS2YxeUl5aENaR2Y3dnZqNGU4UEFSeHJzRHErNis5ZmgwZXV3TW5qUzJlclA4QW1LWStZdkN3PT0iLCJzIjoiMSJ9", "maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "0d038e02-9a9d-44bb-9fa9-56b75267b39f", "record_id": "flaws_cloudtrail:0000103:0d038e02-9a9d-44bb-9fa9-56b75267b39f", "row_index": 103, "timestamp": "2019-07-29T22:54:43Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "109.234.105.8", "user_agent": "aws-cli/1.16.208 Python/3.5.1 Darwin/17.7.0 botocore/1.12.198", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1055, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "0d038e02-9a9d-44bb-9fa9-56b75267b39f", "eventTime": "2019-07-29T22:54:43Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "109.234.105.8", "userAgent": "aws-cli/1.16.208 Python/3.5.1 Darwin/17.7.0 botocore/1.12.198", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"nextToken": "eyJ2IjoiMiIsImMiOiI4Vk9nNmNVWTdCNmNlVDdXVG5pWkJmK0t1NlV4Vm14eFMrKzV0dEFZTkN4Lys4NnhHNkVjSXBmK0puODBiTjVyM0xsQW92YUhLZGpidnRDV1BIdXRDNjB5R29QN0NTV09qQmpBbTJxQ3E0K2hIdUJ0WVcrYWRoRkIza2tGWU1SYzVBRGNHVlJEMzI3WFA5ZW93V2t6cEhpUE45ZXZ1MlZ1RUgwRUc1Ykl2QzRicElFbGp0anVveVZpMHArYkgxYz0iLCJzIjoiMSJ9", "maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "76e134054-b1d9-467b-b568-c1389fad22ec", "record_id": "flaws_cloudtrail:0000104:76e134054-b1d9-467b-b568-c1389fad22ec", "row_index": 104, "timestamp": "2019-07-29T22:54:43Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "109.234.105.8", "user_agent": "aws-cli/1.16.208 Python/3.5.1 Darwin/17.7.0 botocore/1.12.198", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1100, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "76e134054-b1d9-467b-b568-c1389fad22ec", "eventTime": "2019-07-29T22:54:43Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "109.234.105.8", "userAgent": "aws-cli/1.16.208 Python/3.5.1 Darwin/17.7.0 botocore/1.12.198", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"nextToken": "eyJ2IjoiMiIsImMiOiJGc0JGOWlvL2VJTjZnOFhIeDYyOGRSVm9ObzJZZkx5UXllMHdGZG4zU0pCRTFtRzJyNUxUNy9Ja1RIdkJFRzlDOGRyY2VKOTMrRDFBaXNnSVNGSlhDRUluR1hsSktubk92WUNybG54aXBDSldvNVl2TlUzenlFRXRwZW0wRm5rRERoaXBGcDNTVVQ1ZURaWjd1T285SDJwa3hTYUcxU3FCcEVIRzNpTG9WdE0yQ3Nqc2NKMFJjcWxBQU13a1ZzaHZoTythdU5sbjFBb2ROM0hzR0ZYcE9DbG0vemxrNUg4PSIsInMiOiIxIn0=", "maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "0d038e02-9a9d-44bb-9fa9-56b75267b39f", "record_id": "flaws_cloudtrail:0000105:0d038e02-9a9d-44bb-9fa9-56b75267b39f", "row_index": 105, "timestamp": "2019-07-29T22:54:43Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "109.234.105.8", "user_agent": "aws-cli/1.16.208 Python/3.5.1 Darwin/17.7.0 botocore/1.12.198", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1055, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "0d038e02-9a9d-44bb-9fa9-56b75267b39f", "eventTime": "2019-07-29T22:54:43Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "109.234.105.8", "userAgent": "aws-cli/1.16.208 Python/3.5.1 Darwin/17.7.0 botocore/1.12.198", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"nextToken": "eyJ2IjoiMiIsImMiOiI4Vk9nNmNVWTdCNmNlVDdXVG5pWkJmK0t1NlV4Vm14eFMrKzV0dEFZTkN4Lys4NnhHNkVjSXBmK0puODBiTjVyM0xsQW92YUhLZGpidnRDV1BIdXRDNjB5R29QN0NTV09qQmpBbTJxQ3E0K2hIdUJ0WVcrYWRoRkIza2tGWU1SYzVBRGNHVlJEMzI3WFA5ZW93V2t6cEhpUE45ZXZ1MlZ1RUgwRUc1Ykl2QzRicElFbGp0anVveVZpMHArYkgxYz0iLCJzIjoiMSJ9", "maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "76e134054-b1d9-467b-b568-c1389fad22ec", "record_id": "flaws_cloudtrail:0000106:76e134054-b1d9-467b-b568-c1389fad22ec", "row_index": 106, "timestamp": "2019-07-29T22:54:43Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "109.234.105.8", "user_agent": "aws-cli/1.16.208 Python/3.5.1 Darwin/17.7.0 botocore/1.12.198", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1100, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "76e134054-b1d9-467b-b568-c1389fad22ec", "eventTime": "2019-07-29T22:54:43Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "109.234.105.8", "userAgent": "aws-cli/1.16.208 Python/3.5.1 Darwin/17.7.0 botocore/1.12.198", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"nextToken": "eyJ2IjoiMiIsImMiOiJGc0JGOWlvL2VJTjZnOFhIeDYyOGRSVm9ObzJZZkx5UXllMHdGZG4zU0pCRTFtRzJyNUxUNy9Ja1RIdkJFRzlDOGRyY2VKOTMrRDFBaXNnSVNGSlhDRUluR1hsSktubk92WUNybG54aXBDSldvNVl2TlUzenlFRXRwZW0wRm5rRERoaXBGcDNTVVQ1ZURaWjd1T285SDJwa3hTYUcxU3FCcEVIRzNpTG9WdE0yQ3Nqc2NKMFJjcWxBQU13a1ZzaHZoTythdU5sbjFBb2ROM0hzR0ZYcE9DbG0vemxrNUg4PSIsInMiOiIxIn0=", "maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "ad71b28a-875c-4eed-95b8-54de3e4b915a", "record_id": "flaws_cloudtrail:0000107:ad71b28a-875c-4eed-95b8-54de3e4b915a", "row_index": 107, "timestamp": "2019-07-29T22:55:19Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "109.234.105.8", "user_agent": "aws-cli/1.16.208 Python/3.5.1 Darwin/17.7.0 botocore/1.12.198", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 786, "raw_record_depth": 5, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "ad71b28a-875c-4eed-95b8-54de3e4b915a", "eventTime": "2019-07-29T22:55:19Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "109.234.105.8", "userAgent": "aws-cli/1.16.208 Python/3.5.1 Darwin/17.7.0 botocore/1.12.198", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"maxResults": 1000, "snapshotSet": {}, "ownersSet": {"items": [{"owner": "811596193553"}]}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "ad71b28a-875c-4eed-95b8-54de3e4b915a", "record_id": "flaws_cloudtrail:0000108:ad71b28a-875c-4eed-95b8-54de3e4b915a", "row_index": 108, "timestamp": "2019-07-29T22:55:19Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "109.234.105.8", "user_agent": "aws-cli/1.16.208 Python/3.5.1 Darwin/17.7.0 botocore/1.12.198", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 786, "raw_record_depth": 5, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "ad71b28a-875c-4eed-95b8-54de3e4b915a", "eventTime": "2019-07-29T22:55:19Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "109.234.105.8", "userAgent": "aws-cli/1.16.208 Python/3.5.1 Darwin/17.7.0 botocore/1.12.198", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"maxResults": 1000, "snapshotSet": {}, "ownersSet": {"items": [{"owner": "811596193553"}]}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "96e03dda-0b8d-4123-9937-d88a5cf3949c", "record_id": "flaws_cloudtrail:0000109:96e03dda-0b8d-4123-9937-d88a5cf3949c", "row_index": 109, "timestamp": "2019-07-29T23:31:34Z", "event_type": "AssumeRole", "event_source": "sts.amazonaws.com", "principal": {"type": "AWSService", "arn": null, "account_id": null, "principal_id": null, "user_name": null, "access_key_id": null, "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "ec2.amazonaws.com", "user_agent": "ec2.amazonaws.com", "aws_region": "us-west-2"}, "resource_arns": ["arn:aws:iam::811596193553:role/flaws"], "raw_record_size_bytes": 1883, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "resources", "responseElements", "sharedEventID", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "96e03dda-0b8d-4123-9937-d88a5cf3949c", "eventTime": "2019-07-29T23:31:34Z", "eventName": "AssumeRole", "eventSource": "sts.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "ec2.amazonaws.com", "userAgent": "ec2.amazonaws.com", "awsRegion": "us-west-2", "userIdentity": {"type": "AWSService", "invokedBy": "ec2.amazonaws.com"}, "requestParameters": {"roleSessionName": "i-aa2d3b42e5c6e801a", "roleArn": "arn:aws:iam::811596193553:role/flaws"}, "responseElements": {"credentials": {"accessKeyId": "ASIAE1MIRX0QRSEBTPX2", "expiration": "Jul 30, 2019 5:58:16 AM", "sessionToken": "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"}}, "resources": [{"ARN": "arn:aws:iam::811596193553:role/flaws", "accountId": "811596193553", "type": "AWS::IAM::Role"}]}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "96e03dda-0b8d-4123-9937-d88a5cf3949c", "record_id": "flaws_cloudtrail:0000110:96e03dda-0b8d-4123-9937-d88a5cf3949c", "row_index": 110, "timestamp": "2019-07-29T23:31:34Z", "event_type": "AssumeRole", "event_source": "sts.amazonaws.com", "principal": {"type": "AWSService", "arn": null, "account_id": null, "principal_id": null, "user_name": null, "access_key_id": null, "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "ec2.amazonaws.com", "user_agent": "ec2.amazonaws.com", "aws_region": "us-west-2"}, "resource_arns": ["arn:aws:iam::811596193553:role/flaws"], "raw_record_size_bytes": 1883, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "resources", "responseElements", "sharedEventID", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "96e03dda-0b8d-4123-9937-d88a5cf3949c", "eventTime": "2019-07-29T23:31:34Z", "eventName": "AssumeRole", "eventSource": "sts.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "ec2.amazonaws.com", "userAgent": "ec2.amazonaws.com", "awsRegion": "us-west-2", "userIdentity": {"type": "AWSService", "invokedBy": "ec2.amazonaws.com"}, "requestParameters": {"roleSessionName": "i-aa2d3b42e5c6e801a", "roleArn": "arn:aws:iam::811596193553:role/flaws"}, "responseElements": {"credentials": {"accessKeyId": "ASIAE1MIRX0QRSEBTPX2", "expiration": "Jul 30, 2019 5:58:16 AM", "sessionToken": "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"}}, "resources": [{"ARN": "arn:aws:iam::811596193553:role/flaws", "accountId": "811596193553", "type": "AWS::IAM::Role"}]}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "7a2b04b5-6433-4b16-9b59-489c414df3b2", "record_id": "flaws_cloudtrail:0000111:7a2b04b5-6433-4b16-9b59-489c414df3b2", "row_index": 111, "timestamp": "2019-07-30T00:24:29Z", "event_type": "AssumeRole", "event_source": "sts.amazonaws.com", "principal": {"type": "AWSService", "arn": null, "account_id": null, "principal_id": null, "user_name": null, "access_key_id": null, "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "config.amazonaws.com", "user_agent": "config.amazonaws.com", "aws_region": "us-west-2"}, "resource_arns": ["arn:aws:iam::811596193553:role/service-role/config-role-us-west-2"], "raw_record_size_bytes": 1936, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "resources", "responseElements", "sharedEventID", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "7a2b04b5-6433-4b16-9b59-489c414df3b2", "eventTime": "2019-07-30T00:24:29Z", "eventName": "AssumeRole", "eventSource": "sts.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "config.amazonaws.com", "userAgent": "config.amazonaws.com", "awsRegion": "us-west-2", "userIdentity": {"type": "AWSService", "invokedBy": "config.amazonaws.com"}, "requestParameters": {"roleArn": "arn:aws:iam::811596193553:role/service-role/config-role-us-west-2", "roleSessionName": "AWSConfig"}, "responseElements": {"credentials": {"accessKeyId": "ASIAZ0XPYOVK4J2M2IT6", "expiration": "Jul 30, 2019 1:24:29 AM", "sessionToken": "AgoJb3JpZ2luX2VjEAkaCXVzLXdlc3QtMiJGMEQCIEGc5+c2rDTcG5sisCLc8mKAMS4+x6gBFAqqp366DWo9AiAP3HJU+rLgzlY7YQbGPUeH6Ylr+nozOOkvuYkjJ0mdfyrxAgiC//////////8BEAAaDDk3NTQyNjI2MjAyOSIMtF9P0jaUPcDfG2pXKsUCaTv9GADHRMiBp1qgWvlt2Y9CmhX5Mei8IwmZ2GrKSTPromffk26J4yl/WDe542UkNzsOHFuVkzBaCiV0txPHrODl689JBx7hTaJq4xpLDWruldt0sHO5AKrG1VGkqClNNuR+EGOXdcicwW7L9yj/2CWlBeyp+90GEUhlzyYmpQltjtaPURz3xR3TqtjSrt8Y/o9srSA+jQK98s9XsIB7U9QBJylgnuoGCxY0jqROhQ/TvS4Ym7NIA1gCVLAJCjlehc1bx9go0SSgzCpfQI15ICcr86QZsvFl9cMRhwcu1IGY5GYktyIC2/RriWg5yeQs3ANIWMvj3krvwWEvTPPShMNu6fV2ZVQiWOtRi5RnxnbCkz1ikTTfiqsYQ8Vk5iWAGUOy9ysh5qe2ett/AvsdyAwl4F2uW7pcB6Kdu/vMgxbm+Oms5DC9nP7pBTq1AR+9/WtQpkJB89aUkrlkaGKkevCEghKFa900xg4NEiSM/1pxsMhHa1H0hBduK/Te1sbD7c6kwMz4w1DYugZqJh6U9DS5Xj/qocCoPzjEJmvpU4jlmFMC9wW7yHysjuRts9LQ6DcEormCA/LYaN0RDsSuGwGO6nkMVJy7+/CFfGTztxgnR1gFWZeOhEErPJ3UpYeSurhk8Cj6R0lTN0JqHH5WYAtM+b4lOHQyghMoYPx27dz3TSI="}, "assumedRoleUser": {"assumedRoleId": "AROASM3HWKK95VDO4HH81:AWSConfig", "arn": "arn:aws:sts::811596193553:assumed-role/config-role-us-west-2/AWSConfig"}}, "resources": [{"ARN": "arn:aws:iam::811596193553:role/service-role/config-role-us-west-2", "accountId": "811596193553", "type": "AWS::IAM::Role"}]}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "7a2b04b5-6433-4b16-9b59-489c414df3b2", "record_id": "flaws_cloudtrail:0000112:7a2b04b5-6433-4b16-9b59-489c414df3b2", "row_index": 112, "timestamp": "2019-07-30T00:24:29Z", "event_type": "AssumeRole", "event_source": "sts.amazonaws.com", "principal": {"type": "AWSService", "arn": null, "account_id": null, "principal_id": null, "user_name": null, "access_key_id": null, "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "config.amazonaws.com", "user_agent": "config.amazonaws.com", "aws_region": "us-west-2"}, "resource_arns": ["arn:aws:iam::811596193553:role/service-role/config-role-us-west-2"], "raw_record_size_bytes": 1936, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "resources", "responseElements", "sharedEventID", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "7a2b04b5-6433-4b16-9b59-489c414df3b2", "eventTime": "2019-07-30T00:24:29Z", "eventName": "AssumeRole", "eventSource": "sts.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "config.amazonaws.com", "userAgent": "config.amazonaws.com", "awsRegion": "us-west-2", "userIdentity": {"type": "AWSService", "invokedBy": "config.amazonaws.com"}, "requestParameters": {"roleArn": "arn:aws:iam::811596193553:role/service-role/config-role-us-west-2", "roleSessionName": "AWSConfig"}, "responseElements": {"credentials": {"accessKeyId": "ASIAZ0XPYOVK4J2M2IT6", "expiration": "Jul 30, 2019 1:24:29 AM", "sessionToken": "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"}, "assumedRoleUser": {"assumedRoleId": "AROASM3HWKK95VDO4HH81:AWSConfig", "arn": "arn:aws:sts::811596193553:assumed-role/config-role-us-west-2/AWSConfig"}}, "resources": [{"ARN": "arn:aws:iam::811596193553:role/service-role/config-role-us-west-2", "accountId": "811596193553", "type": "AWS::IAM::Role"}]}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "0b224c9b-e81c-46d8-9759-159acbd43e6d", "record_id": "flaws_cloudtrail:0000113:0b224c9b-e81c-46d8-9759-159acbd43e6d", "row_index": 113, "timestamp": "2019-07-30T00:31:34Z", "event_type": "AssumeRole", "event_source": "sts.amazonaws.com", "principal": {"type": "AWSService", "arn": null, "account_id": null, "principal_id": null, "user_name": null, "access_key_id": null, "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "ec2.amazonaws.com", "user_agent": "ec2.amazonaws.com", "aws_region": "us-west-2"}, "resource_arns": ["arn:aws:iam::811596193553:role/flaws"], "raw_record_size_bytes": 1881, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "resources", "responseElements", "sharedEventID", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "0b224c9b-e81c-46d8-9759-159acbd43e6d", "eventTime": "2019-07-30T00:31:34Z", "eventName": "AssumeRole", "eventSource": "sts.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "ec2.amazonaws.com", "userAgent": "ec2.amazonaws.com", "awsRegion": "us-west-2", "userIdentity": {"type": "AWSService", "invokedBy": "ec2.amazonaws.com"}, "requestParameters": {"roleSessionName": "i-aa2d3b42e5c6e801a", "roleArn": "arn:aws:iam::811596193553:role/flaws"}, "responseElements": {"credentials": {"accessKeyId": "ASIAC6VNMJ6IVUF0R19U", "expiration": "Jul 30, 2019 6:35:47 AM", "sessionToken": "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"}}, "resources": [{"ARN": "arn:aws:iam::811596193553:role/flaws", "accountId": "811596193553", "type": "AWS::IAM::Role"}]}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "0b224c9b-e81c-46d8-9759-159acbd43e6d", "record_id": "flaws_cloudtrail:0000114:0b224c9b-e81c-46d8-9759-159acbd43e6d", "row_index": 114, "timestamp": "2019-07-30T00:31:34Z", "event_type": "AssumeRole", "event_source": "sts.amazonaws.com", "principal": {"type": "AWSService", "arn": null, "account_id": null, "principal_id": null, "user_name": null, "access_key_id": null, "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "ec2.amazonaws.com", "user_agent": "ec2.amazonaws.com", "aws_region": "us-west-2"}, "resource_arns": ["arn:aws:iam::811596193553:role/flaws"], "raw_record_size_bytes": 1881, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "resources", "responseElements", "sharedEventID", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "0b224c9b-e81c-46d8-9759-159acbd43e6d", "eventTime": "2019-07-30T00:31:34Z", "eventName": "AssumeRole", "eventSource": "sts.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "ec2.amazonaws.com", "userAgent": "ec2.amazonaws.com", "awsRegion": "us-west-2", "userIdentity": {"type": "AWSService", "invokedBy": "ec2.amazonaws.com"}, "requestParameters": {"roleSessionName": "i-aa2d3b42e5c6e801a", "roleArn": "arn:aws:iam::811596193553:role/flaws"}, "responseElements": {"credentials": {"accessKeyId": "ASIAC6VNMJ6IVUF0R19U", "expiration": "Jul 30, 2019 6:35:47 AM", "sessionToken": "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"}}, "resources": [{"ARN": "arn:aws:iam::811596193553:role/flaws", "accountId": "811596193553", "type": "AWS::IAM::Role"}]}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "76a672673-c4eb-4991-9843-7eb5f82b10e5", "record_id": "flaws_cloudtrail:0000115:76a672673-c4eb-4991-9843-7eb5f82b10e5", "row_index": 115, "timestamp": "2019-07-30T01:31:34Z", "event_type": "AssumeRole", "event_source": "sts.amazonaws.com", "principal": {"type": "AWSService", "arn": null, "account_id": null, "principal_id": null, "user_name": null, "access_key_id": null, "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "ec2.amazonaws.com", "user_agent": "ec2.amazonaws.com", "aws_region": "us-west-2"}, "resource_arns": ["arn:aws:iam::811596193553:role/flaws"], "raw_record_size_bytes": 1883, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "resources", "responseElements", "sharedEventID", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "76a672673-c4eb-4991-9843-7eb5f82b10e5", "eventTime": "2019-07-30T01:31:34Z", "eventName": "AssumeRole", "eventSource": "sts.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "ec2.amazonaws.com", "userAgent": "ec2.amazonaws.com", "awsRegion": "us-west-2", "userIdentity": {"type": "AWSService", "invokedBy": "ec2.amazonaws.com"}, "requestParameters": {"roleSessionName": "i-aa2d3b42e5c6e801a", "roleArn": "arn:aws:iam::811596193553:role/flaws"}, "responseElements": {"credentials": {"accessKeyId": "ASIA5DFRUAGF55WS22T4", "expiration": "Jul 30, 2019 7:32:46 AM", "sessionToken": "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"}}, "resources": [{"ARN": "arn:aws:iam::811596193553:role/flaws", "accountId": "811596193553", "type": "AWS::IAM::Role"}]}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "76a672673-c4eb-4991-9843-7eb5f82b10e5", "record_id": "flaws_cloudtrail:0000116:76a672673-c4eb-4991-9843-7eb5f82b10e5", "row_index": 116, "timestamp": "2019-07-30T01:31:34Z", "event_type": "AssumeRole", "event_source": "sts.amazonaws.com", "principal": {"type": "AWSService", "arn": null, "account_id": null, "principal_id": null, "user_name": null, "access_key_id": null, "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "ec2.amazonaws.com", "user_agent": "ec2.amazonaws.com", "aws_region": "us-west-2"}, "resource_arns": ["arn:aws:iam::811596193553:role/flaws"], "raw_record_size_bytes": 1883, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "resources", "responseElements", "sharedEventID", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "76a672673-c4eb-4991-9843-7eb5f82b10e5", "eventTime": "2019-07-30T01:31:34Z", "eventName": "AssumeRole", "eventSource": "sts.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "ec2.amazonaws.com", "userAgent": "ec2.amazonaws.com", "awsRegion": "us-west-2", "userIdentity": {"type": "AWSService", "invokedBy": "ec2.amazonaws.com"}, "requestParameters": {"roleSessionName": "i-aa2d3b42e5c6e801a", "roleArn": "arn:aws:iam::811596193553:role/flaws"}, "responseElements": {"credentials": {"accessKeyId": "ASIA5DFRUAGF55WS22T4", "expiration": "Jul 30, 2019 7:32:46 AM", "sessionToken": "AgoJb3JpZ2luX2VjEAoaCXVzLXdlc3QtMiJHMEUCIFFNWp7rHLgVphxUC2LcZwODhyOa4O32CMiwR7m7ZDKWAiEArdaTs5U3J5zn0z9bM1tJVwEmOq6J96iFuyUSvQN7/1Aq4wMIg///////////ARAAGgw5NzU0MjYyNjIwMjkiDKCfd2DFlf9R+79Ociq3Axi1GPsTXn7K5sgRSI77gab/ZIWQUw9F22WUF75/8wrS7Dpf1aJY94kAmsk4wdfnlJ9CmXnuAw0FEQiW6/7+WR51W7/tupkFKNFhKeH5Z4UJM7V0qORIhG+3B4yox1mizawieK/GHtOBV8S0XgNJ6T59dsuoBv5MbdVPbWCF+m5chzEQKx2VAH7cp8xItqs9ualAhJUT3cUWffnRvBsXN+4DsKM55mo8d/283ixXLog+crT6PDJmUPeQ/wxweS1Lg2ubvF1CgrJsA+9+7NsZVbECmzw+5vf9JDQRFz4lc6FlKKZ+NP3lqs7D2WBvbV6r6Ne9dldX1/V19sV0g8KOpBb7j/NGJRDfmy9yOKeIPuPkjWxFqNV0RDb/Pnbz1jhcbndyWCDJw1Yfp076V6y63N+7kgmhfhK74WIx+TfPmr3FvVb6/GEXnZXA+xm+SuoenSIX69o3zOA3yzH6eNg50FVUkhYk5z6kTTqaDL7p2j7F8wxuCuD3pRxrAHchAvEPzgoA51GusFHgFA/2rteKcEynKiwBta8mF3I/6/+ak4LIpfX/NVp1o9suAtpUWGtbFmFRm6cDsZsw9rv+6QU6tAHL0mzjFBjCwtc87p675KfkVu2jtewRmIuOVNT/zjxTEZ3UvYrEzKDKWgjGlQrKCb0VRQDSCOzv4XEx9+N42vgynwPe/iDlYEV7xzx0zTHhnhbuQ/oXS1NQRhozVpkshc3kdDXxTQaKjiOg/QZqHxmKxO9kVeVXDoC0v05krjjpF41MJRx2mJ/xDumxDuRRWq8BA0GrDuLWXpe1ExiWW04g/3FS4dqTu5OhfFA4MEdcrRnOi8U="}}, "resources": [{"ARN": "arn:aws:iam::811596193553:role/flaws", "accountId": "811596193553", "type": "AWS::IAM::Role"}]}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "7ef89533-ec93-4966-b725-e0d1aa025fbb", "record_id": "flaws_cloudtrail:0000117:7ef89533-ec93-4966-b725-e0d1aa025fbb", "row_index": 117, "timestamp": "2019-07-30T01:32:41Z", "event_type": "GetSessionToken", "event_source": "sts.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "140.178.2.6", "user_agent": "aws-sdk-go/1.4.14 (go1.11.4; darwin; amd64)", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 1052, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "7ef89533-ec93-4966-b725-e0d1aa025fbb", "eventTime": "2019-07-30T01:32:41Z", "eventName": "GetSessionToken", "eventSource": "sts.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "140.178.2.6", "userAgent": "aws-sdk-go/1.4.14 (go1.11.4; darwin; amd64)", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"durationSeconds": 14400}, "responseElements": {"credentials": {"accessKeyId": "ASIAS0JW3FJSAP9S8LA2", "expiration": "Jul 30, 2019 5:32:41 AM", "sessionToken": "FQoGZXIvYXdzEBsaDGAF5akj+b2/29pL9CKrAQVI2HQT4c8YRYnIKjPSfYyrtaa2B+33jHQBUrKryfUmRJ/rS3B26LDJkW/2UXVfEvs29PV9l0AyUUWJptosmXM5UDm4p8kH7Z37aJNcNLgdEn7YVQwSZv9jVdS+H24zmQ8IJgstVB/zpgFZMFmUGigYLRxmcAiUAue/oV+yTlj7fZSduzuzKlV1uXW3BdQbMiDiFLmEVwJw6CV/kl4TDmVBKbRua9xgugQGoyi5vP7pBQ=="}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "7ef89533-ec93-4966-b725-e0d1aa025fbb", "record_id": "flaws_cloudtrail:0000118:7ef89533-ec93-4966-b725-e0d1aa025fbb", "row_index": 118, "timestamp": "2019-07-30T01:32:41Z", "event_type": "GetSessionToken", "event_source": "sts.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "140.178.2.6", "user_agent": "aws-sdk-go/1.4.14 (go1.11.4; darwin; amd64)", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 1052, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "7ef89533-ec93-4966-b725-e0d1aa025fbb", "eventTime": "2019-07-30T01:32:41Z", "eventName": "GetSessionToken", "eventSource": "sts.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "140.178.2.6", "userAgent": "aws-sdk-go/1.4.14 (go1.11.4; darwin; amd64)", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"durationSeconds": 14400}, "responseElements": {"credentials": {"accessKeyId": "ASIAS0JW3FJSAP9S8LA2", "expiration": "Jul 30, 2019 5:32:41 AM", "sessionToken": "FQoGZXIvYXdzEBsaDGAF5akj+b2/29pL9CKrAQVI2HQT4c8YRYnIKjPSfYyrtaa2B+33jHQBUrKryfUmRJ/rS3B26LDJkW/2UXVfEvs29PV9l0AyUUWJptosmXM5UDm4p8kH7Z37aJNcNLgdEn7YVQwSZv9jVdS+H24zmQ8IJgstVB/zpgFZMFmUGigYLRxmcAiUAue/oV+yTlj7fZSduzuzKlV1uXW3BdQbMiDiFLmEVwJw6CV/kl4TDmVBKbRua9xgugQGoyi5vP7pBQ=="}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "c1477bec-4aec-470d-9ea0-fd07274be29", "record_id": "flaws_cloudtrail:0000119:c1477bec-4aec-470d-9ea0-fd07274be29", "row_index": 119, "timestamp": "2019-07-30T01:32:49Z", "event_type": "ListBuckets", "event_source": "s3.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "ASIAS0JW3FJSAP9S8LA2", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "140.178.2.6", "user_agent": "[aws-cli/1.16.131 Python/3.7.1 Darwin/18.7.0 botocore/1.12.121]", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 897, "raw_record_depth": 4, "raw_record_top_level_keys": ["additionalEventData", "awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "c1477bec-4aec-470d-9ea0-fd07274be29", "eventTime": "2019-07-30T01:32:49Z", "eventName": "ListBuckets", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "140.178.2.6", "userAgent": "[aws-cli/1.16.131 Python/3.7.1 Darwin/18.7.0 botocore/1.12.121]", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "ASIAS0JW3FJSAP9S8LA2", "userName": "backup", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2019-07-30T01:32:41Z"}}}, "requestParameters": {"host": ["s3.amazonaws.com"]}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "c1477bec-4aec-470d-9ea0-fd07274be29", "record_id": "flaws_cloudtrail:0000120:c1477bec-4aec-470d-9ea0-fd07274be29", "row_index": 120, "timestamp": "2019-07-30T01:32:49Z", "event_type": "ListBuckets", "event_source": "s3.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "ASIAS0JW3FJSAP9S8LA2", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "140.178.2.6", "user_agent": "[aws-cli/1.16.131 Python/3.7.1 Darwin/18.7.0 botocore/1.12.121]", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 897, "raw_record_depth": 4, "raw_record_top_level_keys": ["additionalEventData", "awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "c1477bec-4aec-470d-9ea0-fd07274be29", "eventTime": "2019-07-30T01:32:49Z", "eventName": "ListBuckets", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "140.178.2.6", "userAgent": "[aws-cli/1.16.131 Python/3.7.1 Darwin/18.7.0 botocore/1.12.121]", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "ASIAS0JW3FJSAP9S8LA2", "userName": "backup", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2019-07-30T01:32:41Z"}}}, "requestParameters": {"host": ["s3.amazonaws.com"]}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "7f407c91-9431-4ce1-95ff-62f9e4b4727f", "record_id": "flaws_cloudtrail:0000121:7f407c91-9431-4ce1-95ff-62f9e4b4727f", "row_index": 121, "timestamp": "2019-07-30T01:35:58Z", "event_type": "GetCallerIdentity", "event_source": "sts.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "ASIAS0JW3FJSAP9S8LA2", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "140.178.2.6", "user_agent": "aws-cli/1.16.131 Python/3.7.1 Darwin/18.7.0 botocore/1.12.121", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 869, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "7f407c91-9431-4ce1-95ff-62f9e4b4727f", "eventTime": "2019-07-30T01:35:58Z", "eventName": "GetCallerIdentity", "eventSource": "sts.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "140.178.2.6", "userAgent": "aws-cli/1.16.131 Python/3.7.1 Darwin/18.7.0 botocore/1.12.121", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "ASIAS0JW3FJSAP9S8LA2", "userName": "backup", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2019-07-30T01:32:41Z"}}}, "responseElements": {"userId": "AIDA9BO36HFBHKGJAO9C1", "account": "811596193553", "arn": "arn:aws:iam::811596193553:user/backup"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "7f407c91-9431-4ce1-95ff-62f9e4b4727f", "record_id": "flaws_cloudtrail:0000122:7f407c91-9431-4ce1-95ff-62f9e4b4727f", "row_index": 122, "timestamp": "2019-07-30T01:35:58Z", "event_type": "GetCallerIdentity", "event_source": "sts.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "ASIAS0JW3FJSAP9S8LA2", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "140.178.2.6", "user_agent": "aws-cli/1.16.131 Python/3.7.1 Darwin/18.7.0 botocore/1.12.121", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 869, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "7f407c91-9431-4ce1-95ff-62f9e4b4727f", "eventTime": "2019-07-30T01:35:58Z", "eventName": "GetCallerIdentity", "eventSource": "sts.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "140.178.2.6", "userAgent": "aws-cli/1.16.131 Python/3.7.1 Darwin/18.7.0 botocore/1.12.121", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "ASIAS0JW3FJSAP9S8LA2", "userName": "backup", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2019-07-30T01:32:41Z"}}}, "responseElements": {"userId": "AIDA9BO36HFBHKGJAO9C1", "account": "811596193553", "arn": "arn:aws:iam::811596193553:user/backup"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "fdcd3eb7-8549-44cf-ad63-140a0d9e6d93", "record_id": "flaws_cloudtrail:0000123:fdcd3eb7-8549-44cf-ad63-140a0d9e6d93", "row_index": 123, "timestamp": "2019-07-30T01:36:36Z", "event_type": "GetBucketPolicy", "event_source": "s3.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "ASIAS0JW3FJSAP9S8LA2", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "140.178.2.6", "user_agent": "[aws-cli/1.16.131 Python/3.7.1 Darwin/18.7.0 botocore/1.12.121]", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1051, "raw_record_depth": 4, "raw_record_top_level_keys": ["additionalEventData", "awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "fdcd3eb7-8549-44cf-ad63-140a0d9e6d93", "eventTime": "2019-07-30T01:36:36Z", "eventName": "GetBucketPolicy", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "140.178.2.6", "userAgent": "[aws-cli/1.16.131 Python/3.7.1 Darwin/18.7.0 botocore/1.12.121]", "awsRegion": "us-west-2", "errorCode": "AccessDenied", "errorMessage": "Access Denied", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "ASIAS0JW3FJSAP9S8LA2", "userName": "backup", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2019-07-30T01:32:41Z"}}}, "requestParameters": {"host": ["s3.us-west-2.amazonaws.com"], "bucketName": "level3-2644b9e749c3d14e400f847199800c14.flaws.cloud", "policy": [""]}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "fdcd3eb7-8549-44cf-ad63-140a0d9e6d93", "record_id": "flaws_cloudtrail:0000124:fdcd3eb7-8549-44cf-ad63-140a0d9e6d93", "row_index": 124, "timestamp": "2019-07-30T01:36:36Z", "event_type": "GetBucketPolicy", "event_source": "s3.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "ASIAS0JW3FJSAP9S8LA2", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "140.178.2.6", "user_agent": "[aws-cli/1.16.131 Python/3.7.1 Darwin/18.7.0 botocore/1.12.121]", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1051, "raw_record_depth": 4, "raw_record_top_level_keys": ["additionalEventData", "awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "fdcd3eb7-8549-44cf-ad63-140a0d9e6d93", "eventTime": "2019-07-30T01:36:36Z", "eventName": "GetBucketPolicy", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "140.178.2.6", "userAgent": "[aws-cli/1.16.131 Python/3.7.1 Darwin/18.7.0 botocore/1.12.121]", "awsRegion": "us-west-2", "errorCode": "AccessDenied", "errorMessage": "Access Denied", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "ASIAS0JW3FJSAP9S8LA2", "userName": "backup", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2019-07-30T01:32:41Z"}}}, "requestParameters": {"host": ["s3.us-west-2.amazonaws.com"], "bucketName": "level3-2644b9e749c3d14e400f847199800c14.flaws.cloud", "policy": [""]}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "a0e9894e-36d1-4402-9ac6-6d0440f03ac1", "record_id": "flaws_cloudtrail:0000125:a0e9894e-36d1-4402-9ac6-6d0440f03ac1", "row_index": 125, "timestamp": "2019-07-30T01:38:14Z", "event_type": "ListBuckets", "event_source": "s3.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "ASIAS0JW3FJSAP9S8LA2", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "140.178.2.6", "user_agent": "[aws-cli/1.16.131 Python/3.7.1 Darwin/18.7.0 botocore/1.12.121]", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 898, "raw_record_depth": 4, "raw_record_top_level_keys": ["additionalEventData", "awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "a0e9894e-36d1-4402-9ac6-6d0440f03ac1", "eventTime": "2019-07-30T01:38:14Z", "eventName": "ListBuckets", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "140.178.2.6", "userAgent": "[aws-cli/1.16.131 Python/3.7.1 Darwin/18.7.0 botocore/1.12.121]", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "ASIAS0JW3FJSAP9S8LA2", "userName": "backup", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2019-07-30T01:32:41Z"}}}, "requestParameters": {"host": ["s3.amazonaws.com"]}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "a0e9894e-36d1-4402-9ac6-6d0440f03ac1", "record_id": "flaws_cloudtrail:0000126:a0e9894e-36d1-4402-9ac6-6d0440f03ac1", "row_index": 126, "timestamp": "2019-07-30T01:38:14Z", "event_type": "ListBuckets", "event_source": "s3.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "ASIAS0JW3FJSAP9S8LA2", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "140.178.2.6", "user_agent": "[aws-cli/1.16.131 Python/3.7.1 Darwin/18.7.0 botocore/1.12.121]", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 898, "raw_record_depth": 4, "raw_record_top_level_keys": ["additionalEventData", "awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "a0e9894e-36d1-4402-9ac6-6d0440f03ac1", "eventTime": "2019-07-30T01:38:14Z", "eventName": "ListBuckets", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "140.178.2.6", "userAgent": "[aws-cli/1.16.131 Python/3.7.1 Darwin/18.7.0 botocore/1.12.121]", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "ASIAS0JW3FJSAP9S8LA2", "userName": "backup", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2019-07-30T01:32:41Z"}}}, "requestParameters": {"host": ["s3.amazonaws.com"]}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "38686a9-ca92-4fd3-9057-a6f98a6532ad", "record_id": "flaws_cloudtrail:0000127:38686a9-ca92-4fd3-9057-a6f98a6532ad", "row_index": 127, "timestamp": "2019-07-30T01:44:34Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "ASIAS0JW3FJSAP9S8LA2", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "140.178.2.6", "user_agent": "aws-cli/1.16.131 Python/3.7.1 Darwin/18.7.0 botocore/1.12.121", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 845, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "38686a9-ca92-4fd3-9057-a6f98a6532ad", "eventTime": "2019-07-30T01:44:34Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "140.178.2.6", "userAgent": "aws-cli/1.16.131 Python/3.7.1 Darwin/18.7.0 botocore/1.12.121", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "ASIAS0JW3FJSAP9S8LA2", "userName": "backup", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2019-07-30T01:32:41Z"}}}, "requestParameters": {"maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "38686a9-ca92-4fd3-9057-a6f98a6532ad", "record_id": "flaws_cloudtrail:0000128:38686a9-ca92-4fd3-9057-a6f98a6532ad", "row_index": 128, "timestamp": "2019-07-30T01:44:34Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "ASIAS0JW3FJSAP9S8LA2", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "140.178.2.6", "user_agent": "aws-cli/1.16.131 Python/3.7.1 Darwin/18.7.0 botocore/1.12.121", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 845, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "38686a9-ca92-4fd3-9057-a6f98a6532ad", "eventTime": "2019-07-30T01:44:34Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "140.178.2.6", "userAgent": "aws-cli/1.16.131 Python/3.7.1 Darwin/18.7.0 botocore/1.12.121", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "ASIAS0JW3FJSAP9S8LA2", "userName": "backup", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2019-07-30T01:32:41Z"}}}, "requestParameters": {"maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "bb170d0c-dc4f-463f-a592-24741f8", "record_id": "flaws_cloudtrail:0000129:bb170d0c-dc4f-463f-a592-24741f8", "row_index": 129, "timestamp": "2019-07-30T01:44:35Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "ASIAS0JW3FJSAP9S8LA2", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "140.178.2.6", "user_agent": "aws-cli/1.16.131 Python/3.7.1 Darwin/18.7.0 botocore/1.12.121", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1163, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "bb170d0c-dc4f-463f-a592-24741f8", "eventTime": "2019-07-30T01:44:35Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "140.178.2.6", "userAgent": "aws-cli/1.16.131 Python/3.7.1 Darwin/18.7.0 botocore/1.12.121", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "ASIAS0JW3FJSAP9S8LA2", "userName": "backup", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2019-07-30T01:32:41Z"}}}, "requestParameters": {"nextToken": "eyJ2IjoiMiIsImMiOiJoam9sQW1Da01aMG9rUjBHZmFZRjc1eU9VMjhOTVdkUHFVUFNnckUwYTdDN09KWE5zMHhXcndwb29IWFNEMUJjeVM5QkhJdi9hQVNnQzNlMFArNytWS2Z4b2FkeEtNYmdxcmRKL0pGMXVDcWxVa3FjQjJISzNiMXI4eUtGOEcwKzJYaUtNV2h4UXJJaGUxWEtPYkdadnluRWdMWG0rNFg0TkNicXRrQ3NYZlVxVXJsU1ExV3VqQ2p2dEpBMmhXdzRhekN5UWl1N3VUMD0iLCJzIjoiMSJ9", "maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "bb170d0c-dc4f-463f-a592-24741f8", "record_id": "flaws_cloudtrail:0000130:bb170d0c-dc4f-463f-a592-24741f8", "row_index": 130, "timestamp": "2019-07-30T01:44:35Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "ASIAS0JW3FJSAP9S8LA2", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "140.178.2.6", "user_agent": "aws-cli/1.16.131 Python/3.7.1 Darwin/18.7.0 botocore/1.12.121", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1163, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "bb170d0c-dc4f-463f-a592-24741f8", "eventTime": "2019-07-30T01:44:35Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "140.178.2.6", "userAgent": "aws-cli/1.16.131 Python/3.7.1 Darwin/18.7.0 botocore/1.12.121", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "ASIAS0JW3FJSAP9S8LA2", "userName": "backup", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2019-07-30T01:32:41Z"}}}, "requestParameters": {"nextToken": "eyJ2IjoiMiIsImMiOiJoam9sQW1Da01aMG9rUjBHZmFZRjc1eU9VMjhOTVdkUHFVUFNnckUwYTdDN09KWE5zMHhXcndwb29IWFNEMUJjeVM5QkhJdi9hQVNnQzNlMFArNytWS2Z4b2FkeEtNYmdxcmRKL0pGMXVDcWxVa3FjQjJISzNiMXI4eUtGOEcwKzJYaUtNV2h4UXJJaGUxWEtPYkdadnluRWdMWG0rNFg0TkNicXRrQ3NYZlVxVXJsU1ExV3VqQ2p2dEpBMmhXdzRhekN5UWl1N3VUMD0iLCJzIjoiMSJ9", "maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "65aa05d1-2154-41ca-bb58-b09fb41dfd46", "record_id": "flaws_cloudtrail:0000131:65aa05d1-2154-41ca-bb58-b09fb41dfd46", "row_index": 131, "timestamp": "2019-07-30T01:44:37Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "ASIAS0JW3FJSAP9S8LA2", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "140.178.2.6", "user_agent": "aws-cli/1.16.131 Python/3.7.1 Darwin/18.7.0 botocore/1.12.121", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1176, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "65aa05d1-2154-41ca-bb58-b09fb41dfd46", "eventTime": "2019-07-30T01:44:37Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "140.178.2.6", "userAgent": "aws-cli/1.16.131 Python/3.7.1 Darwin/18.7.0 botocore/1.12.121", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "ASIAS0JW3FJSAP9S8LA2", "userName": "backup", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2019-07-30T01:32:41Z"}}}, "requestParameters": {"nextToken": "eyJ2IjoiMiIsImMiOiJCY2N5aERzZ1VQOE5ORzZuL1lTOHdqY3lWU0RlSWw3ZW1pWURXOGV0MTlBclllaXNPMFpFWUhOazRLamVFeXcwTDlGWDlXZnBQSUorMW9XQ1VsYTBwVkI3SzJQVVUvYzVvYnYvRkM4K0N3SDNXakdqY3NTV3RzVmM2SHB0UE1zc0hvNVdSVTdDdHVxTGdKN29EOUVHMUZ5MUtPNHk1UXVTVmNrUUVFbGw5Vy9LMnl3R3ZMb2pzZHMyMHBxd3FXcEZ0NmoyRVc5bUtSQmNLZz09IiwicyI6IjEifQ==", "maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "65aa05d1-2154-41ca-bb58-b09fb41dfd46", "record_id": "flaws_cloudtrail:0000132:65aa05d1-2154-41ca-bb58-b09fb41dfd46", "row_index": 132, "timestamp": "2019-07-30T01:44:37Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "ASIAS0JW3FJSAP9S8LA2", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "140.178.2.6", "user_agent": "aws-cli/1.16.131 Python/3.7.1 Darwin/18.7.0 botocore/1.12.121", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1176, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "65aa05d1-2154-41ca-bb58-b09fb41dfd46", "eventTime": "2019-07-30T01:44:37Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "140.178.2.6", "userAgent": "aws-cli/1.16.131 Python/3.7.1 Darwin/18.7.0 botocore/1.12.121", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "ASIAS0JW3FJSAP9S8LA2", "userName": "backup", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2019-07-30T01:32:41Z"}}}, "requestParameters": {"nextToken": "eyJ2IjoiMiIsImMiOiJCY2N5aERzZ1VQOE5ORzZuL1lTOHdqY3lWU0RlSWw3ZW1pWURXOGV0MTlBclllaXNPMFpFWUhOazRLamVFeXcwTDlGWDlXZnBQSUorMW9XQ1VsYTBwVkI3SzJQVVUvYzVvYnYvRkM4K0N3SDNXakdqY3NTV3RzVmM2SHB0UE1zc0hvNVdSVTdDdHVxTGdKN29EOUVHMUZ5MUtPNHk1UXVTVmNrUUVFbGw5Vy9LMnl3R3ZMb2pzZHMyMHBxd3FXcEZ0NmoyRVc5bUtSQmNLZz09IiwicyI6IjEifQ==", "maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "94db35de-fe2a-41df-a3ca-276b5229fa03", "record_id": "flaws_cloudtrail:0000133:94db35de-fe2a-41df-a3ca-276b5229fa03", "row_index": 133, "timestamp": "2019-07-30T01:44:39Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "ASIAS0JW3FJSAP9S8LA2", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "140.178.2.6", "user_agent": "aws-cli/1.16.131 Python/3.7.1 Darwin/18.7.0 botocore/1.12.121", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1174, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "94db35de-fe2a-41df-a3ca-276b5229fa03", "eventTime": "2019-07-30T01:44:39Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "140.178.2.6", "userAgent": "aws-cli/1.16.131 Python/3.7.1 Darwin/18.7.0 botocore/1.12.121", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "ASIAS0JW3FJSAP9S8LA2", "userName": "backup", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2019-07-30T01:32:41Z"}}}, "requestParameters": {"nextToken": "eyJ2IjoiMiIsImMiOiIwaEFEMmNMeXZKbkZpODQwck5MNWprNzBDRkxEWWw5emh1cmFweFFzdGkrekJtanBoWDdKUUt0MEx0N29UdnE0S0pQWElFUTJUMS84TWJlTDBWSXM0T2diRldaNStrM1E4cUNpQU1JTjZRbU5xeHpJT1BxWnJHMnk0Ujl6UndjdjREVE5xWTAzd0FNQmtUNmtEeTJvRkZWc3V1T0JTYVd6em1DSnJnOXNVQ3NjZUxRcWpYelVsRW5XcW4wK0s1YnJwZy9maVNJK3I3cG5tdz09IiwicyI6IjEifQ==", "maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "94db35de-fe2a-41df-a3ca-276b5229fa03", "record_id": "flaws_cloudtrail:0000134:94db35de-fe2a-41df-a3ca-276b5229fa03", "row_index": 134, "timestamp": "2019-07-30T01:44:39Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "ASIAS0JW3FJSAP9S8LA2", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "140.178.2.6", "user_agent": "aws-cli/1.16.131 Python/3.7.1 Darwin/18.7.0 botocore/1.12.121", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1174, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "94db35de-fe2a-41df-a3ca-276b5229fa03", "eventTime": "2019-07-30T01:44:39Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "140.178.2.6", "userAgent": "aws-cli/1.16.131 Python/3.7.1 Darwin/18.7.0 botocore/1.12.121", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "ASIAS0JW3FJSAP9S8LA2", "userName": "backup", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2019-07-30T01:32:41Z"}}}, "requestParameters": {"nextToken": "eyJ2IjoiMiIsImMiOiIwaEFEMmNMeXZKbkZpODQwck5MNWprNzBDRkxEWWw5emh1cmFweFFzdGkrekJtanBoWDdKUUt0MEx0N29UdnE0S0pQWElFUTJUMS84TWJlTDBWSXM0T2diRldaNStrM1E4cUNpQU1JTjZRbU5xeHpJT1BxWnJHMnk0Ujl6UndjdjREVE5xWTAzd0FNQmtUNmtEeTJvRkZWc3V1T0JTYVd6em1DSnJnOXNVQ3NjZUxRcWpYelVsRW5XcW4wK0s1YnJwZy9maVNJK3I3cG5tdz09IiwicyI6IjEifQ==", "maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "c5eba6c0-9a95-48a6-b59f-e7622b9471dd", "record_id": "flaws_cloudtrail:0000135:c5eba6c0-9a95-48a6-b59f-e7622b9471dd", "row_index": 135, "timestamp": "2019-07-30T01:44:40Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "ASIAS0JW3FJSAP9S8LA2", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "140.178.2.6", "user_agent": "aws-cli/1.16.131 Python/3.7.1 Darwin/18.7.0 botocore/1.12.121", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1175, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "c5eba6c0-9a95-48a6-b59f-e7622b9471dd", "eventTime": "2019-07-30T01:44:40Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "140.178.2.6", "userAgent": "aws-cli/1.16.131 Python/3.7.1 Darwin/18.7.0 botocore/1.12.121", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "ASIAS0JW3FJSAP9S8LA2", "userName": "backup", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2019-07-30T01:32:41Z"}}}, "requestParameters": {"nextToken": "eyJ2IjoiMiIsImMiOiIrWjJwZmJWeGJHazBVcEtwZmlsNEQrWjdWZ1hoZU1ubENXUDhlSnNXbTEzbVlCMEdMd0FuUjIvaHBqYXQrYThMS3NCNjJmSlZWRDYxYTE2M3pyTmQ0NEZOdTFENmxoRDlqdXJCRjc2V2FxYmJqanMrTDJieWJrRFEraTRYcjVwSzYvQlpUd281QUduaXBMbFdESzhhbnRiY3krR2l2S2N5Q1hxbEhhWE9wTFY3YnRYTFc1VUNjay9XSmtqb2RNNmF4cktqYzdrNExxQmhkQT09IiwicyI6IjEifQ==", "maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "c5eba6c0-9a95-48a6-b59f-e7622b9471dd", "record_id": "flaws_cloudtrail:0000136:c5eba6c0-9a95-48a6-b59f-e7622b9471dd", "row_index": 136, "timestamp": "2019-07-30T01:44:40Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "ASIAS0JW3FJSAP9S8LA2", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "140.178.2.6", "user_agent": "aws-cli/1.16.131 Python/3.7.1 Darwin/18.7.0 botocore/1.12.121", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1175, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "c5eba6c0-9a95-48a6-b59f-e7622b9471dd", "eventTime": "2019-07-30T01:44:40Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "140.178.2.6", "userAgent": "aws-cli/1.16.131 Python/3.7.1 Darwin/18.7.0 botocore/1.12.121", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "ASIAS0JW3FJSAP9S8LA2", "userName": "backup", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2019-07-30T01:32:41Z"}}}, "requestParameters": {"nextToken": "eyJ2IjoiMiIsImMiOiIrWjJwZmJWeGJHazBVcEtwZmlsNEQrWjdWZ1hoZU1ubENXUDhlSnNXbTEzbVlCMEdMd0FuUjIvaHBqYXQrYThMS3NCNjJmSlZWRDYxYTE2M3pyTmQ0NEZOdTFENmxoRDlqdXJCRjc2V2FxYmJqanMrTDJieWJrRFEraTRYcjVwSzYvQlpUd281QUduaXBMbFdESzhhbnRiY3krR2l2S2N5Q1hxbEhhWE9wTFY3YnRYTFc1VUNjay9XSmtqb2RNNmF4cktqYzdrNExxQmhkQT09IiwicyI6IjEifQ==", "maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "303018d1-23c5-4f4d-b5d7-0b986869d3471", "record_id": "flaws_cloudtrail:0000137:303018d1-23c5-4f4d-b5d7-0b986869d3471", "row_index": 137, "timestamp": "2019-07-30T01:44:42Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "ASIAS0JW3FJSAP9S8LA2", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "140.178.2.6", "user_agent": "aws-cli/1.16.131 Python/3.7.1 Darwin/18.7.0 botocore/1.12.121", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1177, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "303018d1-23c5-4f4d-b5d7-0b986869d3471", "eventTime": "2019-07-30T01:44:42Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "140.178.2.6", "userAgent": "aws-cli/1.16.131 Python/3.7.1 Darwin/18.7.0 botocore/1.12.121", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "ASIAS0JW3FJSAP9S8LA2", "userName": "backup", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2019-07-30T01:32:41Z"}}}, "requestParameters": {"nextToken": "eyJ2IjoiMiIsImMiOiJiQ2Y0SHVqSWFnVFowTms0TStoZGwxYkx0Y2ovbDRzR3JxZVFpNDdZeW8vTk12YUx5ZFpUZ0RseEd0Zmhqb1dSZndjSExQMFlweCtML3JyRGQ5L3A0c3JHQmlWajVtbVhvczgxQUd1b05WM2pLeEZvSWFGL1ZRZmFjS3hISE8yaXRzRDdDcXkvMzJodW5qUXVyRlk1MGdQQ3VuY2tDVHMxR2tEeWloSW9WSlFtRndSYTJQNGF6dHRNV1Boc1AzMmQ4WUQ4UGFXa3FJQzM1dz09IiwicyI6IjEifQ==", "maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "303018d1-23c5-4f4d-b5d7-0b986869d3471", "record_id": "flaws_cloudtrail:0000138:303018d1-23c5-4f4d-b5d7-0b986869d3471", "row_index": 138, "timestamp": "2019-07-30T01:44:42Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "ASIAS0JW3FJSAP9S8LA2", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "140.178.2.6", "user_agent": "aws-cli/1.16.131 Python/3.7.1 Darwin/18.7.0 botocore/1.12.121", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1177, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "303018d1-23c5-4f4d-b5d7-0b986869d3471", "eventTime": "2019-07-30T01:44:42Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "140.178.2.6", "userAgent": "aws-cli/1.16.131 Python/3.7.1 Darwin/18.7.0 botocore/1.12.121", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "ASIAS0JW3FJSAP9S8LA2", "userName": "backup", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2019-07-30T01:32:41Z"}}}, "requestParameters": {"nextToken": "eyJ2IjoiMiIsImMiOiJiQ2Y0SHVqSWFnVFowTms0TStoZGwxYkx0Y2ovbDRzR3JxZVFpNDdZeW8vTk12YUx5ZFpUZ0RseEd0Zmhqb1dSZndjSExQMFlweCtML3JyRGQ5L3A0c3JHQmlWajVtbVhvczgxQUd1b05WM2pLeEZvSWFGL1ZRZmFjS3hISE8yaXRzRDdDcXkvMzJodW5qUXVyRlk1MGdQQ3VuY2tDVHMxR2tEeWloSW9WSlFtRndSYTJQNGF6dHRNV1Boc1AzMmQ4WUQ4UGFXa3FJQzM1dz09IiwicyI6IjEifQ==", "maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "e6cdd5bb-ba58-489b-a727-7f815e07bd45", "record_id": "flaws_cloudtrail:0000139:e6cdd5bb-ba58-489b-a727-7f815e07bd45", "row_index": 139, "timestamp": "2019-07-30T01:44:44Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "ASIAS0JW3FJSAP9S8LA2", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "140.178.2.6", "user_agent": "aws-cli/1.16.131 Python/3.7.1 Darwin/18.7.0 botocore/1.12.121", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1168, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "e6cdd5bb-ba58-489b-a727-7f815e07bd45", "eventTime": "2019-07-30T01:44:44Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "140.178.2.6", "userAgent": "aws-cli/1.16.131 Python/3.7.1 Darwin/18.7.0 botocore/1.12.121", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "ASIAS0JW3FJSAP9S8LA2", "userName": "backup", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2019-07-30T01:32:41Z"}}}, "requestParameters": {"nextToken": "eyJ2IjoiMiIsImMiOiI0N2pUNTFGaXJZMEEyYkg3ZHJKblpPa0F0WTRRVHY2YzBOS05vWnRKK2J0OXpmVy9pbHlMWG94d0tmZXFxRWRPS0xLRDRCYk9ZbnYySm1DS0hrU01HSVVqN3NnaTIrSEpvRFVtTy8wTGRBU1BtVTg4QzNsMXdVcklkcEFoS2toTlg4MHZOM3VXSVdjd2YxVmJIZFg1Sjh3K3hPNExNU3U1NGoxZERnRy91cFQ4aCs3NWJLc0NjNXIrWkFESHVnYXY5T3M2QWJscEpRPT0iLCJzIjoiMSJ9", "maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "e6cdd5bb-ba58-489b-a727-7f815e07bd45", "record_id": "flaws_cloudtrail:0000140:e6cdd5bb-ba58-489b-a727-7f815e07bd45", "row_index": 140, "timestamp": "2019-07-30T01:44:44Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "ASIAS0JW3FJSAP9S8LA2", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "140.178.2.6", "user_agent": "aws-cli/1.16.131 Python/3.7.1 Darwin/18.7.0 botocore/1.12.121", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1168, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "e6cdd5bb-ba58-489b-a727-7f815e07bd45", "eventTime": "2019-07-30T01:44:44Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "140.178.2.6", "userAgent": "aws-cli/1.16.131 Python/3.7.1 Darwin/18.7.0 botocore/1.12.121", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "ASIAS0JW3FJSAP9S8LA2", "userName": "backup", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2019-07-30T01:32:41Z"}}}, "requestParameters": {"nextToken": "eyJ2IjoiMiIsImMiOiI0N2pUNTFGaXJZMEEyYkg3ZHJKblpPa0F0WTRRVHY2YzBOS05vWnRKK2J0OXpmVy9pbHlMWG94d0tmZXFxRWRPS0xLRDRCYk9ZbnYySm1DS0hrU01HSVVqN3NnaTIrSEpvRFVtTy8wTGRBU1BtVTg4QzNsMXdVcklkcEFoS2toTlg4MHZOM3VXSVdjd2YxVmJIZFg1Sjh3K3hPNExNU3U1NGoxZERnRy91cFQ4aCs3NWJLc0NjNXIrWkFESHVnYXY5T3M2QWJscEpRPT0iLCJzIjoiMSJ9", "maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "797f2f41-33bc-41ac-aa49-6ef43464b", "record_id": "flaws_cloudtrail:0000141:797f2f41-33bc-41ac-aa49-6ef43464b", "row_index": 141, "timestamp": "2019-07-30T01:44:45Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "ASIAS0JW3FJSAP9S8LA2", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "140.178.2.6", "user_agent": "aws-cli/1.16.131 Python/3.7.1 Darwin/18.7.0 botocore/1.12.121", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1170, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "797f2f41-33bc-41ac-aa49-6ef43464b", "eventTime": "2019-07-30T01:44:45Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "140.178.2.6", "userAgent": "aws-cli/1.16.131 Python/3.7.1 Darwin/18.7.0 botocore/1.12.121", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "ASIAS0JW3FJSAP9S8LA2", "userName": "backup", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2019-07-30T01:32:41Z"}}}, "requestParameters": {"nextToken": "eyJ2IjoiMiIsImMiOiIwczVpNWp2WDJTdmt6emxSRXlMNlpuNVFnQkVRUUlTcUZwWlRidHJLUWdZN3B1QzJOa3AzbGIrYXFBWE82KzJ6N3VzOEUySEpxT3pxMmo1YlMxeVV2SXlLSjJQbzkzZllxQXd2T0RBS3hIaTh0S2pveVYrbnhoKzNvNFJOVnR1aExwTFA0UG9xWlV2Wm5rNkdBVyszSUhXUzNYMHhTekZMaXRuMzU5T2ZoRkhscGNyeFlCaWUyN2RtNUlpQnpLUzhYcUFSN2VIUzBCZE5ZUT09IiwicyI6IjEifQ==", "maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "797f2f41-33bc-41ac-aa49-6ef43464b", "record_id": "flaws_cloudtrail:0000142:797f2f41-33bc-41ac-aa49-6ef43464b", "row_index": 142, "timestamp": "2019-07-30T01:44:45Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "ASIAS0JW3FJSAP9S8LA2", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "140.178.2.6", "user_agent": "aws-cli/1.16.131 Python/3.7.1 Darwin/18.7.0 botocore/1.12.121", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1170, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "797f2f41-33bc-41ac-aa49-6ef43464b", "eventTime": "2019-07-30T01:44:45Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "140.178.2.6", "userAgent": "aws-cli/1.16.131 Python/3.7.1 Darwin/18.7.0 botocore/1.12.121", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "ASIAS0JW3FJSAP9S8LA2", "userName": "backup", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2019-07-30T01:32:41Z"}}}, "requestParameters": {"nextToken": "eyJ2IjoiMiIsImMiOiIwczVpNWp2WDJTdmt6emxSRXlMNlpuNVFnQkVRUUlTcUZwWlRidHJLUWdZN3B1QzJOa3AzbGIrYXFBWE82KzJ6N3VzOEUySEpxT3pxMmo1YlMxeVV2SXlLSjJQbzkzZllxQXd2T0RBS3hIaTh0S2pveVYrbnhoKzNvNFJOVnR1aExwTFA0UG9xWlV2Wm5rNkdBVyszSUhXUzNYMHhTekZMaXRuMzU5T2ZoRkhscGNyeFlCaWUyN2RtNUlpQnpLUzhYcUFSN2VIUzBCZE5ZUT09IiwicyI6IjEifQ==", "maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "0aa7eb89-a909-47a4-9299-6c12129c0f", "record_id": "flaws_cloudtrail:0000143:0aa7eb89-a909-47a4-9299-6c12129c0f", "row_index": 143, "timestamp": "2019-07-30T01:44:47Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "ASIAS0JW3FJSAP9S8LA2", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "140.178.2.6", "user_agent": "aws-cli/1.16.131 Python/3.7.1 Darwin/18.7.0 botocore/1.12.121", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1175, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "0aa7eb89-a909-47a4-9299-6c12129c0f", "eventTime": "2019-07-30T01:44:47Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "140.178.2.6", "userAgent": "aws-cli/1.16.131 Python/3.7.1 Darwin/18.7.0 botocore/1.12.121", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "ASIAS0JW3FJSAP9S8LA2", "userName": "backup", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2019-07-30T01:32:41Z"}}}, "requestParameters": {"nextToken": "eyJ2IjoiMiIsImMiOiJNNW9ETzI2MnM5MWRlbmFCTUMzM3R3UzUzUTRoS0V0aUF3SHRPYUVVSHRKanVJdGRMQ21PazU5c0hnTTMrK2hBWC9kbzFpSUlQSUx5Y3dTaGtvQ3FCNFVkV1ljSVJ0aTh6UytGRllZcE9TcUFMcUhOVmtsTVJLTlBPcTJON0o4RThieStGNWxudUNnWGtIN0xjUjQzNnZUYm5lNFhyTVF4UFFvcldnQU1YaE5BREFpbk5zcmFDYmNTbmJQN3BhbC9hWHhmaEZNeFc3S054UT09IiwicyI6IjEifQ==", "maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "0aa7eb89-a909-47a4-9299-6c12129c0f", "record_id": "flaws_cloudtrail:0000144:0aa7eb89-a909-47a4-9299-6c12129c0f", "row_index": 144, "timestamp": "2019-07-30T01:44:47Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "ASIAS0JW3FJSAP9S8LA2", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "140.178.2.6", "user_agent": "aws-cli/1.16.131 Python/3.7.1 Darwin/18.7.0 botocore/1.12.121", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1175, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "0aa7eb89-a909-47a4-9299-6c12129c0f", "eventTime": "2019-07-30T01:44:47Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "140.178.2.6", "userAgent": "aws-cli/1.16.131 Python/3.7.1 Darwin/18.7.0 botocore/1.12.121", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "ASIAS0JW3FJSAP9S8LA2", "userName": "backup", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2019-07-30T01:32:41Z"}}}, "requestParameters": {"nextToken": "eyJ2IjoiMiIsImMiOiJNNW9ETzI2MnM5MWRlbmFCTUMzM3R3UzUzUTRoS0V0aUF3SHRPYUVVSHRKanVJdGRMQ21PazU5c0hnTTMrK2hBWC9kbzFpSUlQSUx5Y3dTaGtvQ3FCNFVkV1ljSVJ0aTh6UytGRllZcE9TcUFMcUhOVmtsTVJLTlBPcTJON0o4RThieStGNWxudUNnWGtIN0xjUjQzNnZUYm5lNFhyTVF4UFFvcldnQU1YaE5BREFpbk5zcmFDYmNTbmJQN3BhbC9hWHhmaEZNeFc3S054UT09IiwicyI6IjEifQ==", "maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "538435-72e1-40c2-a777-a48c1c539754c", "record_id": "flaws_cloudtrail:0000145:538435-72e1-40c2-a777-a48c1c539754c", "row_index": 145, "timestamp": "2019-07-30T01:44:49Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "ASIAS0JW3FJSAP9S8LA2", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "140.178.2.6", "user_agent": "aws-cli/1.16.131 Python/3.7.1 Darwin/18.7.0 botocore/1.12.121", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1175, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "538435-72e1-40c2-a777-a48c1c539754c", "eventTime": "2019-07-30T01:44:49Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "140.178.2.6", "userAgent": "aws-cli/1.16.131 Python/3.7.1 Darwin/18.7.0 botocore/1.12.121", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "ASIAS0JW3FJSAP9S8LA2", "userName": "backup", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2019-07-30T01:32:41Z"}}}, "requestParameters": {"nextToken": "eyJ2IjoiMiIsImMiOiIrTDdUSFkvQVVSck9mbHBlcDB4MVdhNHZkMlBaZ1JPVDl1bmp1ellDT2dLUEw0dVBYTVhjUzJRNXhlaURRd2d6by9XN2F4NW9kTnNkdHU1K3pXYmxDRHgwVjBRQm5JRnZRQ004bi94MGU4dE1FMTBzRVpsMmkvOVRIdU1vS0tDSHJnb295Qkt5cXNrdURNejlGZWVpRElEREd6MXNSbmFGS0pKdmw2L1pGbkw3SFozMC8xUmtsMURGTzlpVVF3RXJodmNSSm4yVHNFc2VSdz09IiwicyI6IjEifQ==", "maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "538435-72e1-40c2-a777-a48c1c539754c", "record_id": "flaws_cloudtrail:0000146:538435-72e1-40c2-a777-a48c1c539754c", "row_index": 146, "timestamp": "2019-07-30T01:44:49Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "ASIAS0JW3FJSAP9S8LA2", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "140.178.2.6", "user_agent": "aws-cli/1.16.131 Python/3.7.1 Darwin/18.7.0 botocore/1.12.121", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1175, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "538435-72e1-40c2-a777-a48c1c539754c", "eventTime": "2019-07-30T01:44:49Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "140.178.2.6", "userAgent": "aws-cli/1.16.131 Python/3.7.1 Darwin/18.7.0 botocore/1.12.121", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "ASIAS0JW3FJSAP9S8LA2", "userName": "backup", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2019-07-30T01:32:41Z"}}}, "requestParameters": {"nextToken": "eyJ2IjoiMiIsImMiOiIrTDdUSFkvQVVSck9mbHBlcDB4MVdhNHZkMlBaZ1JPVDl1bmp1ellDT2dLUEw0dVBYTVhjUzJRNXhlaURRd2d6by9XN2F4NW9kTnNkdHU1K3pXYmxDRHgwVjBRQm5JRnZRQ004bi94MGU4dE1FMTBzRVpsMmkvOVRIdU1vS0tDSHJnb295Qkt5cXNrdURNejlGZWVpRElEREd6MXNSbmFGS0pKdmw2L1pGbkw3SFozMC8xUmtsMURGTzlpVVF3RXJodmNSSm4yVHNFc2VSdz09IiwicyI6IjEifQ==", "maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "3572c0f6-1345-42f9-86f8-c970b439cdc1", "record_id": "flaws_cloudtrail:0000147:3572c0f6-1345-42f9-86f8-c970b439cdc1", "row_index": 147, "timestamp": "2019-07-30T01:44:53Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "ASIAS0JW3FJSAP9S8LA2", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "140.178.2.6", "user_agent": "aws-cli/1.16.131 Python/3.7.1 Darwin/18.7.0 botocore/1.12.121", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1176, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "3572c0f6-1345-42f9-86f8-c970b439cdc1", "eventTime": "2019-07-30T01:44:53Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "140.178.2.6", "userAgent": "aws-cli/1.16.131 Python/3.7.1 Darwin/18.7.0 botocore/1.12.121", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "ASIAS0JW3FJSAP9S8LA2", "userName": "backup", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2019-07-30T01:32:41Z"}}}, "requestParameters": {"nextToken": "eyJ2IjoiMiIsImMiOiJIV3dOWlFhKzFSc1lXTE5md2dHWk5SMHlGYmJ0YUx1MUg5eGl1bWo0S0JPdkhiNjI2UlhMeFdaclZOL2Q0b1JrbGpaVVNLZENWVkZiT2RadmhLVUJCNzA4VktTSUhqRjBTSDdobHMrVVNCT1lSTGdOaDBWby9QNWhOOFppL1NDMVk4NGZUTDlKV1JsZjJpZGJFMnVWbWpZczFKc0NiS01vT0wxOFEyYktaNXV4UVhwTUNJTm92OUNQdkJMWHZ3ZnRzeXZhVFhjWUFSM1BWQT09IiwicyI6IjEifQ==", "maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "3572c0f6-1345-42f9-86f8-c970b439cdc1", "record_id": "flaws_cloudtrail:0000148:3572c0f6-1345-42f9-86f8-c970b439cdc1", "row_index": 148, "timestamp": "2019-07-30T01:44:53Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "ASIAS0JW3FJSAP9S8LA2", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "140.178.2.6", "user_agent": "aws-cli/1.16.131 Python/3.7.1 Darwin/18.7.0 botocore/1.12.121", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1176, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "3572c0f6-1345-42f9-86f8-c970b439cdc1", "eventTime": "2019-07-30T01:44:53Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "140.178.2.6", "userAgent": "aws-cli/1.16.131 Python/3.7.1 Darwin/18.7.0 botocore/1.12.121", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "ASIAS0JW3FJSAP9S8LA2", "userName": "backup", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2019-07-30T01:32:41Z"}}}, "requestParameters": {"nextToken": "eyJ2IjoiMiIsImMiOiJIV3dOWlFhKzFSc1lXTE5md2dHWk5SMHlGYmJ0YUx1MUg5eGl1bWo0S0JPdkhiNjI2UlhMeFdaclZOL2Q0b1JrbGpaVVNLZENWVkZiT2RadmhLVUJCNzA4VktTSUhqRjBTSDdobHMrVVNCT1lSTGdOaDBWby9QNWhOOFppL1NDMVk4NGZUTDlKV1JsZjJpZGJFMnVWbWpZczFKc0NiS01vT0wxOFEyYktaNXV4UVhwTUNJTm92OUNQdkJMWHZ3ZnRzeXZhVFhjWUFSM1BWQT09IiwicyI6IjEifQ==", "maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "c1af5e83-e52b-4f3e-ae69-540454eb06f", "record_id": "flaws_cloudtrail:0000149:c1af5e83-e52b-4f3e-ae69-540454eb06f", "row_index": 149, "timestamp": "2019-07-30T01:45:02Z", "event_type": "DescribeInstances", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "ASIAS0JW3FJSAP9S8LA2", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "140.178.2.6", "user_agent": "aws-cli/1.16.131 Python/3.7.1 Darwin/18.7.0 botocore/1.12.121", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 796, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "c1af5e83-e52b-4f3e-ae69-540454eb06f", "eventTime": "2019-07-30T01:45:02Z", "eventName": "DescribeInstances", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "140.178.2.6", "userAgent": "aws-cli/1.16.131 Python/3.7.1 Darwin/18.7.0 botocore/1.12.121", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "ASIAS0JW3FJSAP9S8LA2", "userName": "backup", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2019-07-30T01:32:41Z"}}}, "requestParameters": {"instancesSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "c1af5e83-e52b-4f3e-ae69-540454eb06f", "record_id": "flaws_cloudtrail:0000150:c1af5e83-e52b-4f3e-ae69-540454eb06f", "row_index": 150, "timestamp": "2019-07-30T01:45:02Z", "event_type": "DescribeInstances", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "ASIAS0JW3FJSAP9S8LA2", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "140.178.2.6", "user_agent": "aws-cli/1.16.131 Python/3.7.1 Darwin/18.7.0 botocore/1.12.121", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 796, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "c1af5e83-e52b-4f3e-ae69-540454eb06f", "eventTime": "2019-07-30T01:45:02Z", "eventName": "DescribeInstances", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "140.178.2.6", "userAgent": "aws-cli/1.16.131 Python/3.7.1 Darwin/18.7.0 botocore/1.12.121", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "ASIAS0JW3FJSAP9S8LA2", "userName": "backup", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2019-07-30T01:32:41Z"}}}, "requestParameters": {"instancesSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "9b39db4b-53c9-442f-8f16-234d173dfd78", "record_id": "flaws_cloudtrail:0000151:9b39db4b-53c9-442f-8f16-234d173dfd78", "row_index": 151, "timestamp": "2019-07-30T01:46:02Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "ASIAS0JW3FJSAP9S8LA2", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "140.178.2.6", "user_agent": "aws-cli/1.16.131 Python/3.7.1 Darwin/18.7.0 botocore/1.12.121", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 849, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "9b39db4b-53c9-442f-8f16-234d173dfd78", "eventTime": "2019-07-30T01:46:02Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "140.178.2.6", "userAgent": "aws-cli/1.16.131 Python/3.7.1 Darwin/18.7.0 botocore/1.12.121", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "ASIAS0JW3FJSAP9S8LA2", "userName": "backup", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2019-07-30T01:32:41Z"}}}, "requestParameters": {"maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "9b39db4b-53c9-442f-8f16-234d173dfd78", "record_id": "flaws_cloudtrail:0000152:9b39db4b-53c9-442f-8f16-234d173dfd78", "row_index": 152, "timestamp": "2019-07-30T01:46:02Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "ASIAS0JW3FJSAP9S8LA2", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "140.178.2.6", "user_agent": "aws-cli/1.16.131 Python/3.7.1 Darwin/18.7.0 botocore/1.12.121", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 849, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "9b39db4b-53c9-442f-8f16-234d173dfd78", "eventTime": "2019-07-30T01:46:02Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "140.178.2.6", "userAgent": "aws-cli/1.16.131 Python/3.7.1 Darwin/18.7.0 botocore/1.12.121", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "ASIAS0JW3FJSAP9S8LA2", "userName": "backup", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2019-07-30T01:32:41Z"}}}, "requestParameters": {"maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "f46dd299-6a06-424f-b174-4e06e7513f5d", "record_id": "flaws_cloudtrail:0000153:f46dd299-6a06-424f-b174-4e06e7513f5d", "row_index": 153, "timestamp": "2019-07-30T01:46:03Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "ASIAS0JW3FJSAP9S8LA2", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "140.178.2.6", "user_agent": "aws-cli/1.16.131 Python/3.7.1 Darwin/18.7.0 botocore/1.12.121", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1176, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "f46dd299-6a06-424f-b174-4e06e7513f5d", "eventTime": "2019-07-30T01:46:03Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "140.178.2.6", "userAgent": "aws-cli/1.16.131 Python/3.7.1 Darwin/18.7.0 botocore/1.12.121", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "ASIAS0JW3FJSAP9S8LA2", "userName": "backup", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2019-07-30T01:32:41Z"}}}, "requestParameters": {"nextToken": "eyJ2IjoiMiIsImMiOiJObW5OeXllTEdyQ1JJMjByTStKdTlUOWJSUmN6RG9wcEhBMlcxMlFEY08zL1Vmb1VYOE5WazAwalZqSytyWWVzUXV6NTd3b3lJUmpIQWYxZC9ZVytXZjhJTDloUGRXbFFEMDBKZnBCS2kxZHc0TytqMzR4TUJyZGJmamFqOTRPVnhXSmxYeXVxRnZHSlhPUnR6aEUrZFoyVjlENFVhUHNMZUk2Sm9tTVZjOVl0enJqd0xYQnd2U1VKTXhYTUk2ODZyTmtXd0c5UXZNWGpjZz09IiwicyI6IjEifQ==", "maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "f1a936cb-9f5d-4baa-af70-2be77a514936", "record_id": "flaws_cloudtrail:0000154:f1a936cb-9f5d-4baa-af70-2be77a514936", "row_index": 154, "timestamp": "2019-07-30T01:46:03Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "ASIAS0JW3FJSAP9S8LA2", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "140.178.2.6", "user_agent": "aws-cli/1.16.131 Python/3.7.1 Darwin/18.7.0 botocore/1.12.121", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1164, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "f1a936cb-9f5d-4baa-af70-2be77a514936", "eventTime": "2019-07-30T01:46:03Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "140.178.2.6", "userAgent": "aws-cli/1.16.131 Python/3.7.1 Darwin/18.7.0 botocore/1.12.121", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "ASIAS0JW3FJSAP9S8LA2", "userName": "backup", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2019-07-30T01:32:41Z"}}}, "requestParameters": {"nextToken": "eyJ2IjoiMiIsImMiOiJHYUtHVUVkM3ZSUmUveEVmbFVrQzFSNWNJd1VSdTY3dWJvMkg4SU1wU0hFdS9qQllDZ1h3NElydmtjYjVaQmRpb2lFZWNycTVFemYrS2k1S1hnT25oUkFwS3NIaWkyUmxGYzNjS0lXSTVqSU5ldWxrbGtMVVhZWUhxbTlxM0JGSlRzMW1rc2dhUHJoaWZIYXJ2NmxDa0dTV3RXQ212My90dnpvSzU5VlZJRVVweTJDYlBVQkhtdVljNmJPS2xyWjkrSm1sY2VHVjY4ND0iLCJzIjoiMSJ9", "maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "f46dd299-6a06-424f-b174-4e06e7513f5d", "record_id": "flaws_cloudtrail:0000155:f46dd299-6a06-424f-b174-4e06e7513f5d", "row_index": 155, "timestamp": "2019-07-30T01:46:03Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "ASIAS0JW3FJSAP9S8LA2", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "140.178.2.6", "user_agent": "aws-cli/1.16.131 Python/3.7.1 Darwin/18.7.0 botocore/1.12.121", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1176, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "f46dd299-6a06-424f-b174-4e06e7513f5d", "eventTime": "2019-07-30T01:46:03Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "140.178.2.6", "userAgent": "aws-cli/1.16.131 Python/3.7.1 Darwin/18.7.0 botocore/1.12.121", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "ASIAS0JW3FJSAP9S8LA2", "userName": "backup", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2019-07-30T01:32:41Z"}}}, "requestParameters": {"nextToken": "eyJ2IjoiMiIsImMiOiJObW5OeXllTEdyQ1JJMjByTStKdTlUOWJSUmN6RG9wcEhBMlcxMlFEY08zL1Vmb1VYOE5WazAwalZqSytyWWVzUXV6NTd3b3lJUmpIQWYxZC9ZVytXZjhJTDloUGRXbFFEMDBKZnBCS2kxZHc0TytqMzR4TUJyZGJmamFqOTRPVnhXSmxYeXVxRnZHSlhPUnR6aEUrZFoyVjlENFVhUHNMZUk2Sm9tTVZjOVl0enJqd0xYQnd2U1VKTXhYTUk2ODZyTmtXd0c5UXZNWGpjZz09IiwicyI6IjEifQ==", "maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "f1a936cb-9f5d-4baa-af70-2be77a514936", "record_id": "flaws_cloudtrail:0000156:f1a936cb-9f5d-4baa-af70-2be77a514936", "row_index": 156, "timestamp": "2019-07-30T01:46:03Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "ASIAS0JW3FJSAP9S8LA2", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "140.178.2.6", "user_agent": "aws-cli/1.16.131 Python/3.7.1 Darwin/18.7.0 botocore/1.12.121", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1164, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "f1a936cb-9f5d-4baa-af70-2be77a514936", "eventTime": "2019-07-30T01:46:03Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "140.178.2.6", "userAgent": "aws-cli/1.16.131 Python/3.7.1 Darwin/18.7.0 botocore/1.12.121", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "ASIAS0JW3FJSAP9S8LA2", "userName": "backup", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2019-07-30T01:32:41Z"}}}, "requestParameters": {"nextToken": "eyJ2IjoiMiIsImMiOiJHYUtHVUVkM3ZSUmUveEVmbFVrQzFSNWNJd1VSdTY3dWJvMkg4SU1wU0hFdS9qQllDZ1h3NElydmtjYjVaQmRpb2lFZWNycTVFemYrS2k1S1hnT25oUkFwS3NIaWkyUmxGYzNjS0lXSTVqSU5ldWxrbGtMVVhZWUhxbTlxM0JGSlRzMW1rc2dhUHJoaWZIYXJ2NmxDa0dTV3RXQ212My90dnpvSzU5VlZJRVVweTJDYlBVQkhtdVljNmJPS2xyWjkrSm1sY2VHVjY4ND0iLCJzIjoiMSJ9", "maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "125ba1b3-07c4-4216-9b60-937911a53d5a6", "record_id": "flaws_cloudtrail:0000157:125ba1b3-07c4-4216-9b60-937911a53d5a6", "row_index": 157, "timestamp": "2019-07-30T01:46:04Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "ASIAS0JW3FJSAP9S8LA2", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "140.178.2.6", "user_agent": "aws-cli/1.16.131 Python/3.7.1 Darwin/18.7.0 botocore/1.12.121", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1177, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "125ba1b3-07c4-4216-9b60-937911a53d5a6", "eventTime": "2019-07-30T01:46:04Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "140.178.2.6", "userAgent": "aws-cli/1.16.131 Python/3.7.1 Darwin/18.7.0 botocore/1.12.121", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "ASIAS0JW3FJSAP9S8LA2", "userName": "backup", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2019-07-30T01:32:41Z"}}}, "requestParameters": {"nextToken": "eyJ2IjoiMiIsImMiOiJKcFh3QXhka0t0M3JJY3ZxWE1mSVhCNWRkcEVFSllYeFYxZzRzbmZmb3huTXdoajhXVmNwdG9BNzRmZXRvcWdSWDdMbkFXN3p0enl6eE96cHFXeEN4Uit0bVN4dS9sV051eHB6R29pckpVeW9KV24rRUtKRDBoTVJUaVpLMHphZGEwSHlnUTVRMkRQdmxTQVBOWG9BRFJpV3hKTlBXODF1VDQvTEJ3NHpCYTdYdWtVRjFINGd1ci9GSlpqd2M1SDBUTTAwL00yTndKRHNLUT09IiwicyI6IjEifQ==", "maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "125ba1b3-07c4-4216-9b60-937911a53d5a6", "record_id": "flaws_cloudtrail:0000158:125ba1b3-07c4-4216-9b60-937911a53d5a6", "row_index": 158, "timestamp": "2019-07-30T01:46:04Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "ASIAS0JW3FJSAP9S8LA2", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "140.178.2.6", "user_agent": "aws-cli/1.16.131 Python/3.7.1 Darwin/18.7.0 botocore/1.12.121", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1177, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "125ba1b3-07c4-4216-9b60-937911a53d5a6", "eventTime": "2019-07-30T01:46:04Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "140.178.2.6", "userAgent": "aws-cli/1.16.131 Python/3.7.1 Darwin/18.7.0 botocore/1.12.121", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "ASIAS0JW3FJSAP9S8LA2", "userName": "backup", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2019-07-30T01:32:41Z"}}}, "requestParameters": {"nextToken": "eyJ2IjoiMiIsImMiOiJKcFh3QXhka0t0M3JJY3ZxWE1mSVhCNWRkcEVFSllYeFYxZzRzbmZmb3huTXdoajhXVmNwdG9BNzRmZXRvcWdSWDdMbkFXN3p0enl6eE96cHFXeEN4Uit0bVN4dS9sV051eHB6R29pckpVeW9KV24rRUtKRDBoTVJUaVpLMHphZGEwSHlnUTVRMkRQdmxTQVBOWG9BRFJpV3hKTlBXODF1VDQvTEJ3NHpCYTdYdWtVRjFINGd1ci9GSlpqd2M1SDBUTTAwL00yTndKRHNLUT09IiwicyI6IjEifQ==", "maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "12307c-0710-4ab2-a57d-4365999eeca7", "record_id": "flaws_cloudtrail:0000159:12307c-0710-4ab2-a57d-4365999eeca7", "row_index": 159, "timestamp": "2019-07-30T01:46:06Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "ASIAS0JW3FJSAP9S8LA2", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "140.178.2.6", "user_agent": "aws-cli/1.16.131 Python/3.7.1 Darwin/18.7.0 botocore/1.12.121", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1174, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "12307c-0710-4ab2-a57d-4365999eeca7", "eventTime": "2019-07-30T01:46:06Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "140.178.2.6", "userAgent": "aws-cli/1.16.131 Python/3.7.1 Darwin/18.7.0 botocore/1.12.121", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "ASIAS0JW3FJSAP9S8LA2", "userName": "backup", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2019-07-30T01:32:41Z"}}}, "requestParameters": {"nextToken": "eyJ2IjoiMiIsImMiOiJtMWkzZi9QR2hlb2syQ1pNZlhmRURJbVdPRmU2Q0tocThpSGk5NXRFdTJuRmE2U0VJUVZaZFcrNG9BSU03aTBDdzdCOUJBYlVQbDUraVBxK2lWNzZQekZTbEtvQ1hnTjBHeWtKQ29paXZPcWcyMWdFcXJOVWNTR3Ayd3FxelduWlNhckJTaTA3Z1p6ckNMUjdURnA1VHVYOHdWc1c0Znc4ZHA5b1oyWlRhSGNaOGJpSFQxdjdESWVFc29rQW9tMlh3UytPQlAxWVhYY0tzZz09IiwicyI6IjEifQ==", "maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "c339b6ac-d76c-46df-ac59-6606a511073", "record_id": "flaws_cloudtrail:0000160:c339b6ac-d76c-46df-ac59-6606a511073", "row_index": 160, "timestamp": "2019-07-30T01:46:06Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "ASIAS0JW3FJSAP9S8LA2", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "140.178.2.6", "user_agent": "aws-cli/1.16.131 Python/3.7.1 Darwin/18.7.0 botocore/1.12.121", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1175, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "c339b6ac-d76c-46df-ac59-6606a511073", "eventTime": "2019-07-30T01:46:06Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "140.178.2.6", "userAgent": "aws-cli/1.16.131 Python/3.7.1 Darwin/18.7.0 botocore/1.12.121", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "ASIAS0JW3FJSAP9S8LA2", "userName": "backup", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2019-07-30T01:32:41Z"}}}, "requestParameters": {"nextToken": "eyJ2IjoiMiIsImMiOiJHOU01MHkyc1lGWEswdXNtbXpZRzE1amcxMzRtYy9NWlpCT2lwaTFhQURZdnNhQ09Xalg2UGl3R2xrcy80SWZuQVFHbkJCZVl2UFRwUXJyeFMrenZhRVNoWFk1ZlpTVEdETnVvQUNXNzBJMjA4UlpCclJ2MXRrZSt4THhKL01iYVBBclV0K3NicytkYzdLZjkyMU9RTTFCYURGUVRqMkVHem5Oc3VNNFdRRUlDMFNlYmttdHdRNWJKVk9xejB6cWRzZUlHdS92N2wwR0tsUT09IiwicyI6IjEifQ==", "maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "12307c-0710-4ab2-a57d-4365999eeca7", "record_id": "flaws_cloudtrail:0000161:12307c-0710-4ab2-a57d-4365999eeca7", "row_index": 161, "timestamp": "2019-07-30T01:46:06Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "ASIAS0JW3FJSAP9S8LA2", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "140.178.2.6", "user_agent": "aws-cli/1.16.131 Python/3.7.1 Darwin/18.7.0 botocore/1.12.121", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1174, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "12307c-0710-4ab2-a57d-4365999eeca7", "eventTime": "2019-07-30T01:46:06Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "140.178.2.6", "userAgent": "aws-cli/1.16.131 Python/3.7.1 Darwin/18.7.0 botocore/1.12.121", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "ASIAS0JW3FJSAP9S8LA2", "userName": "backup", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2019-07-30T01:32:41Z"}}}, "requestParameters": {"nextToken": "eyJ2IjoiMiIsImMiOiJtMWkzZi9QR2hlb2syQ1pNZlhmRURJbVdPRmU2Q0tocThpSGk5NXRFdTJuRmE2U0VJUVZaZFcrNG9BSU03aTBDdzdCOUJBYlVQbDUraVBxK2lWNzZQekZTbEtvQ1hnTjBHeWtKQ29paXZPcWcyMWdFcXJOVWNTR3Ayd3FxelduWlNhckJTaTA3Z1p6ckNMUjdURnA1VHVYOHdWc1c0Znc4ZHA5b1oyWlRhSGNaOGJpSFQxdjdESWVFc29rQW9tMlh3UytPQlAxWVhYY0tzZz09IiwicyI6IjEifQ==", "maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "c339b6ac-d76c-46df-ac59-6606a511073", "record_id": "flaws_cloudtrail:0000162:c339b6ac-d76c-46df-ac59-6606a511073", "row_index": 162, "timestamp": "2019-07-30T01:46:06Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "ASIAS0JW3FJSAP9S8LA2", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "140.178.2.6", "user_agent": "aws-cli/1.16.131 Python/3.7.1 Darwin/18.7.0 botocore/1.12.121", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1175, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "c339b6ac-d76c-46df-ac59-6606a511073", "eventTime": "2019-07-30T01:46:06Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "140.178.2.6", "userAgent": "aws-cli/1.16.131 Python/3.7.1 Darwin/18.7.0 botocore/1.12.121", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "ASIAS0JW3FJSAP9S8LA2", "userName": "backup", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2019-07-30T01:32:41Z"}}}, "requestParameters": {"nextToken": "eyJ2IjoiMiIsImMiOiJHOU01MHkyc1lGWEswdXNtbXpZRzE1amcxMzRtYy9NWlpCT2lwaTFhQURZdnNhQ09Xalg2UGl3R2xrcy80SWZuQVFHbkJCZVl2UFRwUXJyeFMrenZhRVNoWFk1ZlpTVEdETnVvQUNXNzBJMjA4UlpCclJ2MXRrZSt4THhKL01iYVBBclV0K3NicytkYzdLZjkyMU9RTTFCYURGUVRqMkVHem5Oc3VNNFdRRUlDMFNlYmttdHdRNWJKVk9xejB6cWRzZUlHdS92N2wwR0tsUT09IiwicyI6IjEifQ==", "maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "d5d33f81-8c3f-423e-b3a7-b1b49e136f7f", "record_id": "flaws_cloudtrail:0000163:d5d33f81-8c3f-423e-b3a7-b1b49e136f7f", "row_index": 163, "timestamp": "2019-07-30T01:46:07Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "ASIAS0JW3FJSAP9S8LA2", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "140.178.2.6", "user_agent": "aws-cli/1.16.131 Python/3.7.1 Darwin/18.7.0 botocore/1.12.121", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1168, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "d5d33f81-8c3f-423e-b3a7-b1b49e136f7f", "eventTime": "2019-07-30T01:46:07Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "140.178.2.6", "userAgent": "aws-cli/1.16.131 Python/3.7.1 Darwin/18.7.0 botocore/1.12.121", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "ASIAS0JW3FJSAP9S8LA2", "userName": "backup", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2019-07-30T01:32:41Z"}}}, "requestParameters": {"nextToken": "eyJ2IjoiMiIsImMiOiJtZGZLSTBEak9yWHpwU1I2dkJiaCtRWnVQYnZXeHpYSHBRTnlvemttSGhpS2FSMDFCbk91Z2JUcXBEelYxSE9ySUdIR1VmbnQyL1dEYS93WXd5dHdGRkI1SXdYM2MxbzMrVzlSRDdxZldtaGZkcUVIZkNLc25maklaaGptbk1PYWs1ZkpjL2hma1lhTE55QjdLWXVSMFhjZnpVa1JhTThvUlU1dy9TRkdGUUo3T0R6a3RhR2FjMTlBUUpDMUpBdENwVUk4SUdzdFBRPT0iLCJzIjoiMSJ9", "maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "d5d33f81-8c3f-423e-b3a7-b1b49e136f7f", "record_id": "flaws_cloudtrail:0000164:d5d33f81-8c3f-423e-b3a7-b1b49e136f7f", "row_index": 164, "timestamp": "2019-07-30T01:46:07Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "ASIAS0JW3FJSAP9S8LA2", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "140.178.2.6", "user_agent": "aws-cli/1.16.131 Python/3.7.1 Darwin/18.7.0 botocore/1.12.121", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1168, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "d5d33f81-8c3f-423e-b3a7-b1b49e136f7f", "eventTime": "2019-07-30T01:46:07Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "140.178.2.6", "userAgent": "aws-cli/1.16.131 Python/3.7.1 Darwin/18.7.0 botocore/1.12.121", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "ASIAS0JW3FJSAP9S8LA2", "userName": "backup", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2019-07-30T01:32:41Z"}}}, "requestParameters": {"nextToken": "eyJ2IjoiMiIsImMiOiJtZGZLSTBEak9yWHpwU1I2dkJiaCtRWnVQYnZXeHpYSHBRTnlvemttSGhpS2FSMDFCbk91Z2JUcXBEelYxSE9ySUdIR1VmbnQyL1dEYS93WXd5dHdGRkI1SXdYM2MxbzMrVzlSRDdxZldtaGZkcUVIZkNLc25maklaaGptbk1PYWs1ZkpjL2hma1lhTE55QjdLWXVSMFhjZnpVa1JhTThvUlU1dy9TRkdGUUo3T0R6a3RhR2FjMTlBUUpDMUpBdENwVUk4SUdzdFBRPT0iLCJzIjoiMSJ9", "maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "444f90c6-e07e-4398-a990-09f585e0785d", "record_id": "flaws_cloudtrail:0000165:444f90c6-e07e-4398-a990-09f585e0785d", "row_index": 165, "timestamp": "2019-07-30T01:46:08Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "ASIAS0JW3FJSAP9S8LA2", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "140.178.2.6", "user_agent": "aws-cli/1.16.131 Python/3.7.1 Darwin/18.7.0 botocore/1.12.121", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1176, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "444f90c6-e07e-4398-a990-09f585e0785d", "eventTime": "2019-07-30T01:46:08Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "140.178.2.6", "userAgent": "aws-cli/1.16.131 Python/3.7.1 Darwin/18.7.0 botocore/1.12.121", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "ASIAS0JW3FJSAP9S8LA2", "userName": "backup", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2019-07-30T01:32:41Z"}}}, "requestParameters": {"nextToken": "eyJ2IjoiMiIsImMiOiJyUkdmZDZmQmNaRDRFV2JtR3dqanFYS0VyaWhnb2JybngzUVRwTTlPVjFYcllSMmxadVVlbVVoeW1xcmptTWdZcEpRcU04eUtpYmZBTytRcmFxWEV0dXU2UklleUs3K01QZ2twT0htaE5xdmQ0VTZPV2lzeXJFeXFmcnAvT3N2dFhOaXZld3B4RnVla2lUVVVjamVHZWk3YmdSTGI4b0UwSk5ETFJuUjdLNFpKTE4xN2tvbmtVWnVGd3JyaWtTYVZDSnlJS09LRjlZRjVKQT09IiwicyI6IjEifQ==", "maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "444f90c6-e07e-4398-a990-09f585e0785d", "record_id": "flaws_cloudtrail:0000166:444f90c6-e07e-4398-a990-09f585e0785d", "row_index": 166, "timestamp": "2019-07-30T01:46:08Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "ASIAS0JW3FJSAP9S8LA2", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "140.178.2.6", "user_agent": "aws-cli/1.16.131 Python/3.7.1 Darwin/18.7.0 botocore/1.12.121", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1176, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "444f90c6-e07e-4398-a990-09f585e0785d", "eventTime": "2019-07-30T01:46:08Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "140.178.2.6", "userAgent": "aws-cli/1.16.131 Python/3.7.1 Darwin/18.7.0 botocore/1.12.121", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "ASIAS0JW3FJSAP9S8LA2", "userName": "backup", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2019-07-30T01:32:41Z"}}}, "requestParameters": {"nextToken": "eyJ2IjoiMiIsImMiOiJyUkdmZDZmQmNaRDRFV2JtR3dqanFYS0VyaWhnb2JybngzUVRwTTlPVjFYcllSMmxadVVlbVVoeW1xcmptTWdZcEpRcU04eUtpYmZBTytRcmFxWEV0dXU2UklleUs3K01QZ2twT0htaE5xdmQ0VTZPV2lzeXJFeXFmcnAvT3N2dFhOaXZld3B4RnVla2lUVVVjamVHZWk3YmdSTGI4b0UwSk5ETFJuUjdLNFpKTE4xN2tvbmtVWnVGd3JyaWtTYVZDSnlJS09LRjlZRjVKQT09IiwicyI6IjEifQ==", "maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "fa246f8e-269e-4387-9692-cc70204f69", "record_id": "flaws_cloudtrail:0000167:fa246f8e-269e-4387-9692-cc70204f69", "row_index": 167, "timestamp": "2019-07-30T01:46:09Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "ASIAS0JW3FJSAP9S8LA2", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "140.178.2.6", "user_agent": "aws-cli/1.16.131 Python/3.7.1 Darwin/18.7.0 botocore/1.12.121", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1174, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "fa246f8e-269e-4387-9692-cc70204f69", "eventTime": "2019-07-30T01:46:09Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "140.178.2.6", "userAgent": "aws-cli/1.16.131 Python/3.7.1 Darwin/18.7.0 botocore/1.12.121", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "ASIAS0JW3FJSAP9S8LA2", "userName": "backup", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2019-07-30T01:32:41Z"}}}, "requestParameters": {"nextToken": "eyJ2IjoiMiIsImMiOiJsR1NGbjFJK1hXSUtsZGQwZjRWdnowYUFKUDVYdU1Ja3F1MVhhcnVDTUJBeU9PcGFDSHJ6S2Z4N3JZc1l0cXdCdXlUdnA5UUJUK2x1TGZqckxTeEMxY0NpUEdoOXIxNzZyMWtBMVhabWZ1dWlRaFJTcmUxU2dwQnBMdXd0em1MMWNnU00waUdUVlNVbU5QQk4yRXZNMFRrcXY3Qk81RkVGeVlOaUU1UXFUU1JOZXA5UUYzUkF5V2VGV2Rhc2c3VnZwa0lVa2xqZjZ1VWdlZz09IiwicyI6IjEifQ==", "maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "fa246f8e-269e-4387-9692-cc70204f69", "record_id": "flaws_cloudtrail:0000168:fa246f8e-269e-4387-9692-cc70204f69", "row_index": 168, "timestamp": "2019-07-30T01:46:09Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "ASIAS0JW3FJSAP9S8LA2", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "140.178.2.6", "user_agent": "aws-cli/1.16.131 Python/3.7.1 Darwin/18.7.0 botocore/1.12.121", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1174, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "fa246f8e-269e-4387-9692-cc70204f69", "eventTime": "2019-07-30T01:46:09Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "140.178.2.6", "userAgent": "aws-cli/1.16.131 Python/3.7.1 Darwin/18.7.0 botocore/1.12.121", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "ASIAS0JW3FJSAP9S8LA2", "userName": "backup", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2019-07-30T01:32:41Z"}}}, "requestParameters": {"nextToken": "eyJ2IjoiMiIsImMiOiJsR1NGbjFJK1hXSUtsZGQwZjRWdnowYUFKUDVYdU1Ja3F1MVhhcnVDTUJBeU9PcGFDSHJ6S2Z4N3JZc1l0cXdCdXlUdnA5UUJUK2x1TGZqckxTeEMxY0NpUEdoOXIxNzZyMWtBMVhabWZ1dWlRaFJTcmUxU2dwQnBMdXd0em1MMWNnU00waUdUVlNVbU5QQk4yRXZNMFRrcXY3Qk81RkVGeVlOaUU1UXFUU1JOZXA5UUYzUkF5V2VGV2Rhc2c3VnZwa0lVa2xqZjZ1VWdlZz09IiwicyI6IjEifQ==", "maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "6e41bd43-40e0-4e00-a09d-4bce2893c233", "record_id": "flaws_cloudtrail:0000169:6e41bd43-40e0-4e00-a09d-4bce2893c233", "row_index": 169, "timestamp": "2019-07-30T01:46:11Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "ASIAS0JW3FJSAP9S8LA2", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "140.178.2.6", "user_agent": "aws-cli/1.16.131 Python/3.7.1 Darwin/18.7.0 botocore/1.12.121", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1177, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "6e41bd43-40e0-4e00-a09d-4bce2893c233", "eventTime": "2019-07-30T01:46:11Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "140.178.2.6", "userAgent": "aws-cli/1.16.131 Python/3.7.1 Darwin/18.7.0 botocore/1.12.121", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "ASIAS0JW3FJSAP9S8LA2", "userName": "backup", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2019-07-30T01:32:41Z"}}}, "requestParameters": {"nextToken": "eyJ2IjoiMiIsImMiOiJMUlJGZWN4ZVlKUEM4eGNzeUd3bkM5c1pLUHIvSU1PSmdZU1ZJNHRiaU8xb21ZSXdOb2xueWl1dXRUbmpCbnEzbnRJWktPTVl5dkxnZXY5eFNyNE1NN1FSWk1pTkVRNU1WUEJHMHNsSzEyZXFuUzRuSU1DbHFXSmdkeVdMMDJpRXR1bkhIY1NnY3d0emV5Q0Npc2Zrb3loZVQ0L3g2OFN3MnNTL2xldGU0RDhSZUxreDNLa2xkSUxadFF2VjZVNWdxbW5FY2taaHFOWjVFQT09IiwicyI6IjEifQ==", "maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "6e41bd43-40e0-4e00-a09d-4bce2893c233", "record_id": "flaws_cloudtrail:0000170:6e41bd43-40e0-4e00-a09d-4bce2893c233", "row_index": 170, "timestamp": "2019-07-30T01:46:11Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "ASIAS0JW3FJSAP9S8LA2", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "140.178.2.6", "user_agent": "aws-cli/1.16.131 Python/3.7.1 Darwin/18.7.0 botocore/1.12.121", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1177, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "6e41bd43-40e0-4e00-a09d-4bce2893c233", "eventTime": "2019-07-30T01:46:11Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "140.178.2.6", "userAgent": "aws-cli/1.16.131 Python/3.7.1 Darwin/18.7.0 botocore/1.12.121", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "ASIAS0JW3FJSAP9S8LA2", "userName": "backup", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2019-07-30T01:32:41Z"}}}, "requestParameters": {"nextToken": "eyJ2IjoiMiIsImMiOiJMUlJGZWN4ZVlKUEM4eGNzeUd3bkM5c1pLUHIvSU1PSmdZU1ZJNHRiaU8xb21ZSXdOb2xueWl1dXRUbmpCbnEzbnRJWktPTVl5dkxnZXY5eFNyNE1NN1FSWk1pTkVRNU1WUEJHMHNsSzEyZXFuUzRuSU1DbHFXSmdkeVdMMDJpRXR1bkhIY1NnY3d0emV5Q0Npc2Zrb3loZVQ0L3g2OFN3MnNTL2xldGU0RDhSZUxreDNLa2xkSUxadFF2VjZVNWdxbW5FY2taaHFOWjVFQT09IiwicyI6IjEifQ==", "maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "ce4ba68f-f3fd-4088-af39-0369d2ff6246", "record_id": "flaws_cloudtrail:0000171:ce4ba68f-f3fd-4088-af39-0369d2ff6246", "row_index": 171, "timestamp": "2019-07-30T01:46:12Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "ASIAS0JW3FJSAP9S8LA2", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "140.178.2.6", "user_agent": "aws-cli/1.16.131 Python/3.7.1 Darwin/18.7.0 botocore/1.12.121", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1176, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "ce4ba68f-f3fd-4088-af39-0369d2ff6246", "eventTime": "2019-07-30T01:46:12Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "140.178.2.6", "userAgent": "aws-cli/1.16.131 Python/3.7.1 Darwin/18.7.0 botocore/1.12.121", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "ASIAS0JW3FJSAP9S8LA2", "userName": "backup", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2019-07-30T01:32:41Z"}}}, "requestParameters": {"nextToken": "eyJ2IjoiMiIsImMiOiJIZ1RWelJRWXVPTG92VExQaFgzczFHM1NISUVSWHF1eDBjbno0SEhpWkQveTUzQ2U5UFAvVWt5aGVzSHVyamtwcEowblZXWHp2Y2ZjMG1UQlp3blcxeERSWFJrVHdvSkZPQkl6VFV4WExmUGpLRm8wRnRMWnlRME1uZWpjK3BhZ3VBVFVFeEhxYllwVXROd00rZVRzVlBFVk9KeXBsR1p2YTFmS2ZRTWZzRi9EMjYzVnZoOEFYSnFISmQ4V2grSVlReEE5TStCcXlrRi8rdz09IiwicyI6IjEifQ==", "maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "ce4ba68f-f3fd-4088-af39-0369d2ff6246", "record_id": "flaws_cloudtrail:0000172:ce4ba68f-f3fd-4088-af39-0369d2ff6246", "row_index": 172, "timestamp": "2019-07-30T01:46:12Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "ASIAS0JW3FJSAP9S8LA2", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "140.178.2.6", "user_agent": "aws-cli/1.16.131 Python/3.7.1 Darwin/18.7.0 botocore/1.12.121", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1176, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "ce4ba68f-f3fd-4088-af39-0369d2ff6246", "eventTime": "2019-07-30T01:46:12Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "140.178.2.6", "userAgent": "aws-cli/1.16.131 Python/3.7.1 Darwin/18.7.0 botocore/1.12.121", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "ASIAS0JW3FJSAP9S8LA2", "userName": "backup", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2019-07-30T01:32:41Z"}}}, "requestParameters": {"nextToken": "eyJ2IjoiMiIsImMiOiJIZ1RWelJRWXVPTG92VExQaFgzczFHM1NISUVSWHF1eDBjbno0SEhpWkQveTUzQ2U5UFAvVWt5aGVzSHVyamtwcEowblZXWHp2Y2ZjMG1UQlp3blcxeERSWFJrVHdvSkZPQkl6VFV4WExmUGpLRm8wRnRMWnlRME1uZWpjK3BhZ3VBVFVFeEhxYllwVXROd00rZVRzVlBFVk9KeXBsR1p2YTFmS2ZRTWZzRi9EMjYzVnZoOEFYSnFISmQ4V2grSVlReEE5TStCcXlrRi8rdz09IiwicyI6IjEifQ==", "maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "b4dfae2d-8a1e-40b3-a187-b108f9bf4fb7", "record_id": "flaws_cloudtrail:0000173:b4dfae2d-8a1e-40b3-a187-b108f9bf4fb7", "row_index": 173, "timestamp": "2019-07-30T01:46:13Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "ASIAS0JW3FJSAP9S8LA2", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "140.178.2.6", "user_agent": "aws-cli/1.16.131 Python/3.7.1 Darwin/18.7.0 botocore/1.12.121", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1176, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "b4dfae2d-8a1e-40b3-a187-b108f9bf4fb7", "eventTime": "2019-07-30T01:46:13Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "140.178.2.6", "userAgent": "aws-cli/1.16.131 Python/3.7.1 Darwin/18.7.0 botocore/1.12.121", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "ASIAS0JW3FJSAP9S8LA2", "userName": "backup", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2019-07-30T01:32:41Z"}}}, "requestParameters": {"nextToken": "eyJ2IjoiMiIsImMiOiJ5UGRGdW8zcWpxS1hVZWFmYlNSY3hwenhVWjlHaFl0MDlCbE56RnFMS1AwOFNyT2Nia0hJbmtUemgyVVc1SExFcGc0NzhhUUljMFdXMDBaUXlna1BEOUlBVkhyTWZTQUtJVDJwaGhFaTVkZEVNZm9uRFduVjBkc3MweU9GUk8yNDhqaEY1bGM2TnpNNDZEZnZmYkhCbXpjN1FtdXZWenQwbzBlMlB3eko0S0UvMENIbm5WYXFSRE5MbVpjUk5CTGQ3ZktlbGJjSjhpRGNhUT09IiwicyI6IjEifQ==", "maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "b4dfae2d-8a1e-40b3-a187-b108f9bf4fb7", "record_id": "flaws_cloudtrail:0000174:b4dfae2d-8a1e-40b3-a187-b108f9bf4fb7", "row_index": 174, "timestamp": "2019-07-30T01:46:13Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "ASIAS0JW3FJSAP9S8LA2", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "140.178.2.6", "user_agent": "aws-cli/1.16.131 Python/3.7.1 Darwin/18.7.0 botocore/1.12.121", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1176, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "b4dfae2d-8a1e-40b3-a187-b108f9bf4fb7", "eventTime": "2019-07-30T01:46:13Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "140.178.2.6", "userAgent": "aws-cli/1.16.131 Python/3.7.1 Darwin/18.7.0 botocore/1.12.121", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "ASIAS0JW3FJSAP9S8LA2", "userName": "backup", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2019-07-30T01:32:41Z"}}}, "requestParameters": {"nextToken": "eyJ2IjoiMiIsImMiOiJ5UGRGdW8zcWpxS1hVZWFmYlNSY3hwenhVWjlHaFl0MDlCbE56RnFMS1AwOFNyT2Nia0hJbmtUemgyVVc1SExFcGc0NzhhUUljMFdXMDBaUXlna1BEOUlBVkhyTWZTQUtJVDJwaGhFaTVkZEVNZm9uRFduVjBkc3MweU9GUk8yNDhqaEY1bGM2TnpNNDZEZnZmYkhCbXpjN1FtdXZWenQwbzBlMlB3eko0S0UvMENIbm5WYXFSRE5MbVpjUk5CTGQ3ZktlbGJjSjhpRGNhUT09IiwicyI6IjEifQ==", "maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "22619fca-4d60-4f40-817f-905cf7636d39", "record_id": "flaws_cloudtrail:0000175:22619fca-4d60-4f40-817f-905cf7636d39", "row_index": 175, "timestamp": "2019-07-30T01:46:15Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "ASIAS0JW3FJSAP9S8LA2", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "140.178.2.6", "user_agent": "aws-cli/1.16.131 Python/3.7.1 Darwin/18.7.0 botocore/1.12.121", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1176, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "22619fca-4d60-4f40-817f-905cf7636d39", "eventTime": "2019-07-30T01:46:15Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "140.178.2.6", "userAgent": "aws-cli/1.16.131 Python/3.7.1 Darwin/18.7.0 botocore/1.12.121", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "ASIAS0JW3FJSAP9S8LA2", "userName": "backup", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2019-07-30T01:32:41Z"}}}, "requestParameters": {"nextToken": "eyJ2IjoiMiIsImMiOiJTZUkxQTBJWE0wYlhWbDByZURTV1FsVER1dFpzU3pFYklVRUZnM3VNcEhzYzRBTHpPQ0dXL2ErUmxiL3MveUE2bU91RDVFU2pwZTBpRUNab1lPTTdhcWRQb09iVjd1VlIxZE5DaTREa1FuRURyWStUa0lGMUFPekpNc0JXa1oxdzhraWpxQTJCaWJuSGVhZm9TYTVpc0JWcDJUaHFSb2J4VHFwV2pyOW9GRGF6ZVNWOWNQVUNIczE3aVQzVDBwM21vSGphZC96MlF2ZkU1dz09IiwicyI6IjEifQ==", "maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "22619fca-4d60-4f40-817f-905cf7636d39", "record_id": "flaws_cloudtrail:0000176:22619fca-4d60-4f40-817f-905cf7636d39", "row_index": 176, "timestamp": "2019-07-30T01:46:15Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "ASIAS0JW3FJSAP9S8LA2", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "140.178.2.6", "user_agent": "aws-cli/1.16.131 Python/3.7.1 Darwin/18.7.0 botocore/1.12.121", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1176, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "22619fca-4d60-4f40-817f-905cf7636d39", "eventTime": "2019-07-30T01:46:15Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "140.178.2.6", "userAgent": "aws-cli/1.16.131 Python/3.7.1 Darwin/18.7.0 botocore/1.12.121", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "ASIAS0JW3FJSAP9S8LA2", "userName": "backup", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2019-07-30T01:32:41Z"}}}, "requestParameters": {"nextToken": "eyJ2IjoiMiIsImMiOiJTZUkxQTBJWE0wYlhWbDByZURTV1FsVER1dFpzU3pFYklVRUZnM3VNcEhzYzRBTHpPQ0dXL2ErUmxiL3MveUE2bU91RDVFU2pwZTBpRUNab1lPTTdhcWRQb09iVjd1VlIxZE5DaTREa1FuRURyWStUa0lGMUFPekpNc0JXa1oxdzhraWpxQTJCaWJuSGVhZm9TYTVpc0JWcDJUaHFSb2J4VHFwV2pyOW9GRGF6ZVNWOWNQVUNIczE3aVQzVDBwM21vSGphZC96MlF2ZkU1dz09IiwicyI6IjEifQ==", "maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "8f980d07-86d5-4edd-8986-ee18077ebfd", "record_id": "flaws_cloudtrail:0000177:8f980d07-86d5-4edd-8986-ee18077ebfd", "row_index": 177, "timestamp": "2019-07-30T01:46:16Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "ASIAS0JW3FJSAP9S8LA2", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "140.178.2.6", "user_agent": "aws-cli/1.16.131 Python/3.7.1 Darwin/18.7.0 botocore/1.12.121", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1174, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "8f980d07-86d5-4edd-8986-ee18077ebfd", "eventTime": "2019-07-30T01:46:16Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "140.178.2.6", "userAgent": "aws-cli/1.16.131 Python/3.7.1 Darwin/18.7.0 botocore/1.12.121", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "ASIAS0JW3FJSAP9S8LA2", "userName": "backup", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2019-07-30T01:32:41Z"}}}, "requestParameters": {"nextToken": "eyJ2IjoiMiIsImMiOiJINXFKVVVUTlBJNmRCc2srdGZlK0hHNHZaSUFuOWdab2lYRnVaM2lxV2UxMFlKUUsycy9PN0ZUZjNxL0JIV0F2NXlVRTNYVkZBazkyeXFuNEJjWFpvQU9OZ2lUdDYxUXRyaG5FVVNIZVQxRHdHWUNveXhpNGoreVBmcUNPeDM5Qnl2SkxtVjJmTnNmYzFFSnJ6S2dFdTg2VFBBMEpVVFN1YVBwUHlSVHdTK092S1NPYmtHL25yc291dkEzeGZtcTg4cnBwemtUa1U0a2NaQT09IiwicyI6IjEifQ==", "maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "8f980d07-86d5-4edd-8986-ee18077ebfd", "record_id": "flaws_cloudtrail:0000178:8f980d07-86d5-4edd-8986-ee18077ebfd", "row_index": 178, "timestamp": "2019-07-30T01:46:16Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "ASIAS0JW3FJSAP9S8LA2", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "140.178.2.6", "user_agent": "aws-cli/1.16.131 Python/3.7.1 Darwin/18.7.0 botocore/1.12.121", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1174, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "8f980d07-86d5-4edd-8986-ee18077ebfd", "eventTime": "2019-07-30T01:46:16Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "140.178.2.6", "userAgent": "aws-cli/1.16.131 Python/3.7.1 Darwin/18.7.0 botocore/1.12.121", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "ASIAS0JW3FJSAP9S8LA2", "userName": "backup", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2019-07-30T01:32:41Z"}}}, "requestParameters": {"nextToken": "eyJ2IjoiMiIsImMiOiJINXFKVVVUTlBJNmRCc2srdGZlK0hHNHZaSUFuOWdab2lYRnVaM2lxV2UxMFlKUUsycy9PN0ZUZjNxL0JIV0F2NXlVRTNYVkZBazkyeXFuNEJjWFpvQU9OZ2lUdDYxUXRyaG5FVVNIZVQxRHdHWUNveXhpNGoreVBmcUNPeDM5Qnl2SkxtVjJmTnNmYzFFSnJ6S2dFdTg2VFBBMEpVVFN1YVBwUHlSVHdTK092S1NPYmtHL25yc291dkEzeGZtcTg4cnBwemtUa1U0a2NaQT09IiwicyI6IjEifQ==", "maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "f4981fff-edf0-4a38-a3c6-f0bd723c98fa", "record_id": "flaws_cloudtrail:0000179:f4981fff-edf0-4a38-a3c6-f0bd723c98fa", "row_index": 179, "timestamp": "2019-07-30T01:46:17Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "ASIAS0JW3FJSAP9S8LA2", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "140.178.2.6", "user_agent": "aws-cli/1.16.131 Python/3.7.1 Darwin/18.7.0 botocore/1.12.121", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1196, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "f4981fff-edf0-4a38-a3c6-f0bd723c98fa", "eventTime": "2019-07-30T01:46:17Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "140.178.2.6", "userAgent": "aws-cli/1.16.131 Python/3.7.1 Darwin/18.7.0 botocore/1.12.121", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "ASIAS0JW3FJSAP9S8LA2", "userName": "backup", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2019-07-30T01:32:41Z"}}}, "requestParameters": {"nextToken": "eyJ2IjoiMiIsImMiOiJGOThiSFBoK2R1dE40bnd5ODNvYTFRb3lCZWtHVzl3eW9DczVJZSsvM0g2TlI2OE1qY3pwOHZBdFZweWN5dUczVGhqR2lYLzhscUJXaGE2dUNpUEdCaEpIR21PMGpnODltOVN4UjZtSEJQeWx2KzZrUXlvRkVscm5GVWlsWXVaTXhlSGg4OUJDNnlFdjRtQWc5R0JaNkNPdzg0YWVaNk9CUmxtaVpQVmtndkVWWGNZaGlFL3NjSG85UWJzS3dSSWVkYlNWSHdIajRHS0ltYVhBVitjcEtHMklLeUxWS0hzPSIsInMiOiIxIn0=", "maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "f4981fff-edf0-4a38-a3c6-f0bd723c98fa", "record_id": "flaws_cloudtrail:0000180:f4981fff-edf0-4a38-a3c6-f0bd723c98fa", "row_index": 180, "timestamp": "2019-07-30T01:46:17Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "ASIAS0JW3FJSAP9S8LA2", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "140.178.2.6", "user_agent": "aws-cli/1.16.131 Python/3.7.1 Darwin/18.7.0 botocore/1.12.121", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1196, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "f4981fff-edf0-4a38-a3c6-f0bd723c98fa", "eventTime": "2019-07-30T01:46:17Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "140.178.2.6", "userAgent": "aws-cli/1.16.131 Python/3.7.1 Darwin/18.7.0 botocore/1.12.121", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "ASIAS0JW3FJSAP9S8LA2", "userName": "backup", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2019-07-30T01:32:41Z"}}}, "requestParameters": {"nextToken": "eyJ2IjoiMiIsImMiOiJGOThiSFBoK2R1dE40bnd5ODNvYTFRb3lCZWtHVzl3eW9DczVJZSsvM0g2TlI2OE1qY3pwOHZBdFZweWN5dUczVGhqR2lYLzhscUJXaGE2dUNpUEdCaEpIR21PMGpnODltOVN4UjZtSEJQeWx2KzZrUXlvRkVscm5GVWlsWXVaTXhlSGg4OUJDNnlFdjRtQWc5R0JaNkNPdzg0YWVaNk9CUmxtaVpQVmtndkVWWGNZaGlFL3NjSG85UWJzS3dSSWVkYlNWSHdIajRHS0ltYVhBVitjcEtHMklLeUxWS0hzPSIsInMiOiIxIn0=", "maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "862168efd-dd36-405d-afa3-c53365a400915", "record_id": "flaws_cloudtrail:0000181:862168efd-dd36-405d-afa3-c53365a400915", "row_index": 181, "timestamp": "2019-07-30T01:46:19Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "ASIAS0JW3FJSAP9S8LA2", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "140.178.2.6", "user_agent": "aws-cli/1.16.131 Python/3.7.1 Darwin/18.7.0 botocore/1.12.121", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1186, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "862168efd-dd36-405d-afa3-c53365a400915", "eventTime": "2019-07-30T01:46:19Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "140.178.2.6", "userAgent": "aws-cli/1.16.131 Python/3.7.1 Darwin/18.7.0 botocore/1.12.121", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "ASIAS0JW3FJSAP9S8LA2", "userName": "backup", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2019-07-30T01:32:41Z"}}}, "requestParameters": {"nextToken": "eyJ2IjoiMiIsImMiOiJ1NGpQQXdTRXJQZHd3aDk4Mko2bmVRdUNWcDYvaXdFOFRzcWFvVGhmbm9ETXFuTnVPak4rK1I3NWdxNHVkQ3dtMy9YbjczMmlVUDI0YzJpNDVkakFqVkxpSXJ0WEdvUHpEUHpvWnRNdGlHRGNySlVEclBrcE82elMrNDBQRmM3c3Yyd2xWNDdTUTAwd0FNbWVUZ1FZNWZyQ0lxcGZPV0xndEpZOFFsbWU5QnBrMkNvM2FITWJMMnIxTTUvRXJKTFZxQmVmeUJGUzkramRNbDdIZGh5NzlRPT0iLCJzIjoiMSJ9", "maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "862168efd-dd36-405d-afa3-c53365a400915", "record_id": "flaws_cloudtrail:0000182:862168efd-dd36-405d-afa3-c53365a400915", "row_index": 182, "timestamp": "2019-07-30T01:46:19Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "ASIAS0JW3FJSAP9S8LA2", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "140.178.2.6", "user_agent": "aws-cli/1.16.131 Python/3.7.1 Darwin/18.7.0 botocore/1.12.121", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1186, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "862168efd-dd36-405d-afa3-c53365a400915", "eventTime": "2019-07-30T01:46:19Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "140.178.2.6", "userAgent": "aws-cli/1.16.131 Python/3.7.1 Darwin/18.7.0 botocore/1.12.121", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "ASIAS0JW3FJSAP9S8LA2", "userName": "backup", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2019-07-30T01:32:41Z"}}}, "requestParameters": {"nextToken": "eyJ2IjoiMiIsImMiOiJ1NGpQQXdTRXJQZHd3aDk4Mko2bmVRdUNWcDYvaXdFOFRzcWFvVGhmbm9ETXFuTnVPak4rK1I3NWdxNHVkQ3dtMy9YbjczMmlVUDI0YzJpNDVkakFqVkxpSXJ0WEdvUHpEUHpvWnRNdGlHRGNySlVEclBrcE82elMrNDBQRmM3c3Yyd2xWNDdTUTAwd0FNbWVUZ1FZNWZyQ0lxcGZPV0xndEpZOFFsbWU5QnBrMkNvM2FITWJMMnIxTTUvRXJKTFZxQmVmeUJGUzkramRNbDdIZGh5NzlRPT0iLCJzIjoiMSJ9", "maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "4447e980-d056-4477-a633-11468e35101", "record_id": "flaws_cloudtrail:0000183:4447e980-d056-4477-a633-11468e35101", "row_index": 183, "timestamp": "2019-07-30T01:46:20Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "ASIAS0JW3FJSAP9S8LA2", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "140.178.2.6", "user_agent": "aws-cli/1.16.131 Python/3.7.1 Darwin/18.7.0 botocore/1.12.121", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1195, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "4447e980-d056-4477-a633-11468e35101", "eventTime": "2019-07-30T01:46:20Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "140.178.2.6", "userAgent": "aws-cli/1.16.131 Python/3.7.1 Darwin/18.7.0 botocore/1.12.121", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "ASIAS0JW3FJSAP9S8LA2", "userName": "backup", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2019-07-30T01:32:41Z"}}}, "requestParameters": {"nextToken": "eyJ2IjoiMiIsImMiOiJnQlM2WE5hMzRRZkEzeiszRi9US2tqdGk4MnhkNHBPVUlKb3JtVmZwY2xub3hiT1BMdmU2V0k2NnVuWTE4VElidDNjT1BZQTBQM3o3VkVETmJ0MGM4OFJScDZDTXNIZGMyK1lQaUFVbEJlaFZscGdJNjA0ZDlZWGNCekFxamRyekdUV1dteUJJYkwrNFM0bFRxelBCMmZNQUxvUGlERFA5WE5MRjBuaW9rRTN6bkh2NWt3UFhQaE4rL0dRL2tuOVFlSVBLYkVLNFd4VnkvTVhMOXJmcVNPdjJLaUQ0dzIwPSIsInMiOiIxIn0=", "maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "4447e980-d056-4477-a633-11468e35101", "record_id": "flaws_cloudtrail:0000184:4447e980-d056-4477-a633-11468e35101", "row_index": 184, "timestamp": "2019-07-30T01:46:20Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "ASIAS0JW3FJSAP9S8LA2", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "140.178.2.6", "user_agent": "aws-cli/1.16.131 Python/3.7.1 Darwin/18.7.0 botocore/1.12.121", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1195, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "4447e980-d056-4477-a633-11468e35101", "eventTime": "2019-07-30T01:46:20Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "140.178.2.6", "userAgent": "aws-cli/1.16.131 Python/3.7.1 Darwin/18.7.0 botocore/1.12.121", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "ASIAS0JW3FJSAP9S8LA2", "userName": "backup", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2019-07-30T01:32:41Z"}}}, "requestParameters": {"nextToken": "eyJ2IjoiMiIsImMiOiJnQlM2WE5hMzRRZkEzeiszRi9US2tqdGk4MnhkNHBPVUlKb3JtVmZwY2xub3hiT1BMdmU2V0k2NnVuWTE4VElidDNjT1BZQTBQM3o3VkVETmJ0MGM4OFJScDZDTXNIZGMyK1lQaUFVbEJlaFZscGdJNjA0ZDlZWGNCekFxamRyekdUV1dteUJJYkwrNFM0bFRxelBCMmZNQUxvUGlERFA5WE5MRjBuaW9rRTN6bkh2NWt3UFhQaE4rL0dRL2tuOVFlSVBLYkVLNFd4VnkvTVhMOXJmcVNPdjJLaUQ0dzIwPSIsInMiOiIxIn0=", "maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "16b20e3b-183e-4f1c-a3ce-edf91fa2dc1c", "record_id": "flaws_cloudtrail:0000185:16b20e3b-183e-4f1c-a3ce-edf91fa2dc1c", "row_index": 185, "timestamp": "2019-07-30T01:46:22Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "ASIAS0JW3FJSAP9S8LA2", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "140.178.2.6", "user_agent": "aws-cli/1.16.131 Python/3.7.1 Darwin/18.7.0 botocore/1.12.121", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1152, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "16b20e3b-183e-4f1c-a3ce-edf91fa2dc1c", "eventTime": "2019-07-30T01:46:22Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "140.178.2.6", "userAgent": "aws-cli/1.16.131 Python/3.7.1 Darwin/18.7.0 botocore/1.12.121", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "ASIAS0JW3FJSAP9S8LA2", "userName": "backup", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2019-07-30T01:32:41Z"}}}, "requestParameters": {"nextToken": "eyJ2IjoiMiIsImMiOiJPNkJDME5SUmlMWHIySmREUmg4Z2NsTW5iSXU1dzJncURaYkpGYnRWT21GWHhBdkdVSWVaLzcyR0UyeWdBRzh0dE1CR2xzd2JTeldkQkVmVG1NYjRyV1hOL213WlFFKzNXckNwWFpDRStwVEhNN0JVR294M2N5ZTl5ZEwrRHNtYWJRSUpzYzJLRW5lMXNHNHI3RHAvd2EzUVNCamhMdjZBTVlzSEt6YXgvbXU2dFBTQWovbzdyaXptQ2lKNGFLVT0iLCJzIjoiMSJ9", "maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "16b20e3b-183e-4f1c-a3ce-edf91fa2dc1c", "record_id": "flaws_cloudtrail:0000186:16b20e3b-183e-4f1c-a3ce-edf91fa2dc1c", "row_index": 186, "timestamp": "2019-07-30T01:46:22Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "ASIAS0JW3FJSAP9S8LA2", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "140.178.2.6", "user_agent": "aws-cli/1.16.131 Python/3.7.1 Darwin/18.7.0 botocore/1.12.121", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1152, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "16b20e3b-183e-4f1c-a3ce-edf91fa2dc1c", "eventTime": "2019-07-30T01:46:22Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "140.178.2.6", "userAgent": "aws-cli/1.16.131 Python/3.7.1 Darwin/18.7.0 botocore/1.12.121", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "ASIAS0JW3FJSAP9S8LA2", "userName": "backup", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2019-07-30T01:32:41Z"}}}, "requestParameters": {"nextToken": "eyJ2IjoiMiIsImMiOiJPNkJDME5SUmlMWHIySmREUmg4Z2NsTW5iSXU1dzJncURaYkpGYnRWT21GWHhBdkdVSWVaLzcyR0UyeWdBRzh0dE1CR2xzd2JTeldkQkVmVG1NYjRyV1hOL213WlFFKzNXckNwWFpDRStwVEhNN0JVR294M2N5ZTl5ZEwrRHNtYWJRSUpzYzJLRW5lMXNHNHI3RHAvd2EzUVNCamhMdjZBTVlzSEt6YXgvbXU2dFBTQWovbzdyaXptQ2lKNGFLVT0iLCJzIjoiMSJ9", "maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "e092ed5a-2db7-4cac-9b78-11ca23775c", "record_id": "flaws_cloudtrail:0000187:e092ed5a-2db7-4cac-9b78-11ca23775c", "row_index": 187, "timestamp": "2019-07-30T01:46:23Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "ASIAS0JW3FJSAP9S8LA2", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "140.178.2.6", "user_agent": "aws-cli/1.16.131 Python/3.7.1 Darwin/18.7.0 botocore/1.12.121", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1193, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "e092ed5a-2db7-4cac-9b78-11ca23775c", "eventTime": "2019-07-30T01:46:23Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "140.178.2.6", "userAgent": "aws-cli/1.16.131 Python/3.7.1 Darwin/18.7.0 botocore/1.12.121", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "ASIAS0JW3FJSAP9S8LA2", "userName": "backup", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2019-07-30T01:32:41Z"}}}, "requestParameters": {"nextToken": "eyJ2IjoiMiIsImMiOiI4NWJaZWY2a3gwMHB3WUZmOWMzQ1NweTM0L2dRQVBORUpGb0Q1TW9md1U5ZVlpU2lEbHIyM1VqQStVK00wZ0RPSjlyRTB2cmFRL1NqbHVoSmIwdmVZV3hxUWNwbngwOEc1TW5GNmFJTTlJalB4bEc2WnJuL3ZRMWNMRE5YZEtPSkdCa2lYNi9MZERwQ0kwc0w3L0tyL2xKaUZlN2Z5MXd2eFdwaEpNb1Y2R2R5YjJLME5DTkU4aDh0NFg3UXJqRXBQeGJBdXoxQUFTTHd5UWtHMTVEclIwdDVzUUVJTXZVPSIsInMiOiIxIn0=", "maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "e092ed5a-2db7-4cac-9b78-11ca23775c", "record_id": "flaws_cloudtrail:0000188:e092ed5a-2db7-4cac-9b78-11ca23775c", "row_index": 188, "timestamp": "2019-07-30T01:46:23Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "ASIAS0JW3FJSAP9S8LA2", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "140.178.2.6", "user_agent": "aws-cli/1.16.131 Python/3.7.1 Darwin/18.7.0 botocore/1.12.121", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1193, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "e092ed5a-2db7-4cac-9b78-11ca23775c", "eventTime": "2019-07-30T01:46:23Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "140.178.2.6", "userAgent": "aws-cli/1.16.131 Python/3.7.1 Darwin/18.7.0 botocore/1.12.121", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "ASIAS0JW3FJSAP9S8LA2", "userName": "backup", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2019-07-30T01:32:41Z"}}}, "requestParameters": {"nextToken": "eyJ2IjoiMiIsImMiOiI4NWJaZWY2a3gwMHB3WUZmOWMzQ1NweTM0L2dRQVBORUpGb0Q1TW9md1U5ZVlpU2lEbHIyM1VqQStVK00wZ0RPSjlyRTB2cmFRL1NqbHVoSmIwdmVZV3hxUWNwbngwOEc1TW5GNmFJTTlJalB4bEc2WnJuL3ZRMWNMRE5YZEtPSkdCa2lYNi9MZERwQ0kwc0w3L0tyL2xKaUZlN2Z5MXd2eFdwaEpNb1Y2R2R5YjJLME5DTkU4aDh0NFg3UXJqRXBQeGJBdXoxQUFTTHd5UWtHMTVEclIwdDVzUUVJTXZVPSIsInMiOiIxIn0=", "maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "2b88451-7956-4458-a506-d8da91245f5a", "record_id": "flaws_cloudtrail:0000189:2b88451-7956-4458-a506-d8da91245f5a", "row_index": 189, "timestamp": "2019-07-30T01:46:26Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "ASIAS0JW3FJSAP9S8LA2", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "140.178.2.6", "user_agent": "aws-cli/1.16.131 Python/3.7.1 Darwin/18.7.0 botocore/1.12.121", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1183, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "2b88451-7956-4458-a506-d8da91245f5a", "eventTime": "2019-07-30T01:46:26Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "140.178.2.6", "userAgent": "aws-cli/1.16.131 Python/3.7.1 Darwin/18.7.0 botocore/1.12.121", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "ASIAS0JW3FJSAP9S8LA2", "userName": "backup", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2019-07-30T01:32:41Z"}}}, "requestParameters": {"nextToken": "eyJ2IjoiMiIsImMiOiJHSXFJQ1FCQ3JHLzdKU3FPMXlqV0d3bkdWVzdaazk5dEl4VG1Ya3l4bXlBVzZyMkNBM3RZUWtmdTVKV0xmcXJ0K1ZXQ2tvSjVMYXZIRmY5eTd4TitTc05MSWFFcUU0eVlPeVUwV3VXamRyNU9lNVludjlxcUx2TTZHM25DUWZvcEtZcTNzZEN2dmZPU1RyQ0IxVFoxWk9RZ0xiOWwxbEtRQWhZelBwVEh3aGVDRUM0Nk9aTVdnVVJxSFJoRVZCbHhhTlpJWlJmRDlDVWFqV3ZuRWVtcUhBPT0iLCJzIjoiMSJ9", "maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "2b88451-7956-4458-a506-d8da91245f5a", "record_id": "flaws_cloudtrail:0000190:2b88451-7956-4458-a506-d8da91245f5a", "row_index": 190, "timestamp": "2019-07-30T01:46:26Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "ASIAS0JW3FJSAP9S8LA2", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "140.178.2.6", "user_agent": "aws-cli/1.16.131 Python/3.7.1 Darwin/18.7.0 botocore/1.12.121", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1183, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "2b88451-7956-4458-a506-d8da91245f5a", "eventTime": "2019-07-30T01:46:26Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "140.178.2.6", "userAgent": "aws-cli/1.16.131 Python/3.7.1 Darwin/18.7.0 botocore/1.12.121", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "ASIAS0JW3FJSAP9S8LA2", "userName": "backup", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2019-07-30T01:32:41Z"}}}, "requestParameters": {"nextToken": "eyJ2IjoiMiIsImMiOiJHSXFJQ1FCQ3JHLzdKU3FPMXlqV0d3bkdWVzdaazk5dEl4VG1Ya3l4bXlBVzZyMkNBM3RZUWtmdTVKV0xmcXJ0K1ZXQ2tvSjVMYXZIRmY5eTd4TitTc05MSWFFcUU0eVlPeVUwV3VXamRyNU9lNVludjlxcUx2TTZHM25DUWZvcEtZcTNzZEN2dmZPU1RyQ0IxVFoxWk9RZ0xiOWwxbEtRQWhZelBwVEh3aGVDRUM0Nk9aTVdnVVJxSFJoRVZCbHhhTlpJWlJmRDlDVWFqV3ZuRWVtcUhBPT0iLCJzIjoiMSJ9", "maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "654391f5-bbb2-4992-a064-4a92ab8e6436", "record_id": "flaws_cloudtrail:0000191:654391f5-bbb2-4992-a064-4a92ab8e6436", "row_index": 191, "timestamp": "2019-07-30T01:46:27Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "ASIAS0JW3FJSAP9S8LA2", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "140.178.2.6", "user_agent": "aws-cli/1.16.131 Python/3.7.1 Darwin/18.7.0 botocore/1.12.121", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1196, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "654391f5-bbb2-4992-a064-4a92ab8e6436", "eventTime": "2019-07-30T01:46:27Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "140.178.2.6", "userAgent": "aws-cli/1.16.131 Python/3.7.1 Darwin/18.7.0 botocore/1.12.121", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "ASIAS0JW3FJSAP9S8LA2", "userName": "backup", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2019-07-30T01:32:41Z"}}}, "requestParameters": {"nextToken": "eyJ2IjoiMiIsImMiOiJNZjVZTm5NQVNHbE9rZHhwN3IvY05Cb1FlMDJoaUp4TkRzUHBUb1VSaVRzMmp0TEZLbEEzTytoLzA5dlErMHBucmNFbXUxeDV4dUg0T3gyVlFNaUkxTGFicm9mV0RzNnNRMkJSYVdabG42Y2tXbWMzc2xSbld1OVlvRExoWUVjQmpzNDB1Zjh3VG1WdU9DNFZjbUZhMjNVWnczV2hUdkxRUE1FTE9hbFF1WTBpa2kyVS9MMmNpNU12UXBDUklBbUkxajBXdzRyOTZqR2RxcFhzRXRCeHpSejl4NjBRbHg0PSIsInMiOiIxIn0=", "maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "654391f5-bbb2-4992-a064-4a92ab8e6436", "record_id": "flaws_cloudtrail:0000192:654391f5-bbb2-4992-a064-4a92ab8e6436", "row_index": 192, "timestamp": "2019-07-30T01:46:27Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "ASIAS0JW3FJSAP9S8LA2", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "140.178.2.6", "user_agent": "aws-cli/1.16.131 Python/3.7.1 Darwin/18.7.0 botocore/1.12.121", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1196, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "654391f5-bbb2-4992-a064-4a92ab8e6436", "eventTime": "2019-07-30T01:46:27Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "140.178.2.6", "userAgent": "aws-cli/1.16.131 Python/3.7.1 Darwin/18.7.0 botocore/1.12.121", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "ASIAS0JW3FJSAP9S8LA2", "userName": "backup", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2019-07-30T01:32:41Z"}}}, "requestParameters": {"nextToken": "eyJ2IjoiMiIsImMiOiJNZjVZTm5NQVNHbE9rZHhwN3IvY05Cb1FlMDJoaUp4TkRzUHBUb1VSaVRzMmp0TEZLbEEzTytoLzA5dlErMHBucmNFbXUxeDV4dUg0T3gyVlFNaUkxTGFicm9mV0RzNnNRMkJSYVdabG42Y2tXbWMzc2xSbld1OVlvRExoWUVjQmpzNDB1Zjh3VG1WdU9DNFZjbUZhMjNVWnczV2hUdkxRUE1FTE9hbFF1WTBpa2kyVS9MMmNpNU12UXBDUklBbUkxajBXdzRyOTZqR2RxcFhzRXRCeHpSejl4NjBRbHg0PSIsInMiOiIxIn0=", "maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "0b508509c-0b34-4e60-ba7f-4561f3cf8afc", "record_id": "flaws_cloudtrail:0000193:0b508509c-0b34-4e60-ba7f-4561f3cf8afc", "row_index": 193, "timestamp": "2019-07-30T01:46:29Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "ASIAS0JW3FJSAP9S8LA2", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "140.178.2.6", "user_agent": "aws-cli/1.16.131 Python/3.7.1 Darwin/18.7.0 botocore/1.12.121", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1184, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "0b508509c-0b34-4e60-ba7f-4561f3cf8afc", "eventTime": "2019-07-30T01:46:29Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "140.178.2.6", "userAgent": "aws-cli/1.16.131 Python/3.7.1 Darwin/18.7.0 botocore/1.12.121", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "ASIAS0JW3FJSAP9S8LA2", "userName": "backup", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2019-07-30T01:32:41Z"}}}, "requestParameters": {"nextToken": "eyJ2IjoiMiIsImMiOiJ3aUVUamVTOU9hUjF1VHBzOU5HbDh3ZGptZnBsNVJpU0lMY29YTENPTS95RmdqR0Y0VksrdmluMjVxbVpVMFVtR0hYRFBDbmdoR01JMjlFa2twQjI2aUFOdldkclRIMElsYnB1THhIYjFLRnZ5OEZtcDJwSFJFb1ZvREJZTEtUcjE0RjFDLzJkZUVwekhoY3JtS202SDdFdjR1WnFKWnhxZGpzb0VyeUd4aS9hQ2ZUdEMvblExbW0yNWhtemJCb0t0elhzUG40bzVSSmJyNTM0SUdiUG93PT0iLCJzIjoiMSJ9", "maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "0b508509c-0b34-4e60-ba7f-4561f3cf8afc", "record_id": "flaws_cloudtrail:0000194:0b508509c-0b34-4e60-ba7f-4561f3cf8afc", "row_index": 194, "timestamp": "2019-07-30T01:46:29Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "ASIAS0JW3FJSAP9S8LA2", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "140.178.2.6", "user_agent": "aws-cli/1.16.131 Python/3.7.1 Darwin/18.7.0 botocore/1.12.121", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1184, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "0b508509c-0b34-4e60-ba7f-4561f3cf8afc", "eventTime": "2019-07-30T01:46:29Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "140.178.2.6", "userAgent": "aws-cli/1.16.131 Python/3.7.1 Darwin/18.7.0 botocore/1.12.121", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "ASIAS0JW3FJSAP9S8LA2", "userName": "backup", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2019-07-30T01:32:41Z"}}}, "requestParameters": {"nextToken": "eyJ2IjoiMiIsImMiOiJ3aUVUamVTOU9hUjF1VHBzOU5HbDh3ZGptZnBsNVJpU0lMY29YTENPTS95RmdqR0Y0VksrdmluMjVxbVpVMFVtR0hYRFBDbmdoR01JMjlFa2twQjI2aUFOdldkclRIMElsYnB1THhIYjFLRnZ5OEZtcDJwSFJFb1ZvREJZTEtUcjE0RjFDLzJkZUVwekhoY3JtS202SDdFdjR1WnFKWnhxZGpzb0VyeUd4aS9hQ2ZUdEMvblExbW0yNWhtemJCb0t0elhzUG40bzVSSmJyNTM0SUdiUG93PT0iLCJzIjoiMSJ9", "maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "2c696a59-09f6-4999-99b7-de308da70b03", "record_id": "flaws_cloudtrail:0000195:2c696a59-09f6-4999-99b7-de308da70b03", "row_index": 195, "timestamp": "2019-07-30T01:46:30Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "ASIAS0JW3FJSAP9S8LA2", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "140.178.2.6", "user_agent": "aws-cli/1.16.131 Python/3.7.1 Darwin/18.7.0 botocore/1.12.121", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1196, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "2c696a59-09f6-4999-99b7-de308da70b03", "eventTime": "2019-07-30T01:46:30Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "140.178.2.6", "userAgent": "aws-cli/1.16.131 Python/3.7.1 Darwin/18.7.0 botocore/1.12.121", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "ASIAS0JW3FJSAP9S8LA2", "userName": "backup", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2019-07-30T01:32:41Z"}}}, "requestParameters": {"nextToken": "eyJ2IjoiMiIsImMiOiJ1VXhBWjBqd3NOb25BLzVuckhNdGFrWXVLd2hzYXFZelcydE1mY1V0ajdrSjByRENGcFhwZnJHeFQ4RERLR3RTN3FKNE5TdWxHMzVxZ1J5eDNEMHg5V3JQTnlzbkc1OTBQYWViTXQ3NGJ3bERDLzg4ZXYvSEVOWE1OTWc2S2tsZ1lVWlRiSkx3K1RoTDBISS95U2dTbTlDSlU3VHlwQjJtdzZSMzZDYS9ORVlRdVRGNEFGWlI5T3k3UkJUYm1DWCtXU0NFaGMxUWlnd2FBUThZVWdEWXVmWFg5b3BEa1d3PSIsInMiOiIxIn0=", "maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "2c696a59-09f6-4999-99b7-de308da70b03", "record_id": "flaws_cloudtrail:0000196:2c696a59-09f6-4999-99b7-de308da70b03", "row_index": 196, "timestamp": "2019-07-30T01:46:30Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "ASIAS0JW3FJSAP9S8LA2", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "140.178.2.6", "user_agent": "aws-cli/1.16.131 Python/3.7.1 Darwin/18.7.0 botocore/1.12.121", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1196, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "2c696a59-09f6-4999-99b7-de308da70b03", "eventTime": "2019-07-30T01:46:30Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "140.178.2.6", "userAgent": "aws-cli/1.16.131 Python/3.7.1 Darwin/18.7.0 botocore/1.12.121", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "ASIAS0JW3FJSAP9S8LA2", "userName": "backup", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2019-07-30T01:32:41Z"}}}, "requestParameters": {"nextToken": "eyJ2IjoiMiIsImMiOiJ1VXhBWjBqd3NOb25BLzVuckhNdGFrWXVLd2hzYXFZelcydE1mY1V0ajdrSjByRENGcFhwZnJHeFQ4RERLR3RTN3FKNE5TdWxHMzVxZ1J5eDNEMHg5V3JQTnlzbkc1OTBQYWViTXQ3NGJ3bERDLzg4ZXYvSEVOWE1OTWc2S2tsZ1lVWlRiSkx3K1RoTDBISS95U2dTbTlDSlU3VHlwQjJtdzZSMzZDYS9ORVlRdVRGNEFGWlI5T3k3UkJUYm1DWCtXU0NFaGMxUWlnd2FBUThZVWdEWXVmWFg5b3BEa1d3PSIsInMiOiIxIn0=", "maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "13c96c1b-8d17-4771-8067-41e2528dca7d", "record_id": "flaws_cloudtrail:0000197:13c96c1b-8d17-4771-8067-41e2528dca7d", "row_index": 197, "timestamp": "2019-07-30T01:46:31Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "ASIAS0JW3FJSAP9S8LA2", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "140.178.2.6", "user_agent": "aws-cli/1.16.131 Python/3.7.1 Darwin/18.7.0 botocore/1.12.121", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1152, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "13c96c1b-8d17-4771-8067-41e2528dca7d", "eventTime": "2019-07-30T01:46:31Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "140.178.2.6", "userAgent": "aws-cli/1.16.131 Python/3.7.1 Darwin/18.7.0 botocore/1.12.121", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "ASIAS0JW3FJSAP9S8LA2", "userName": "backup", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2019-07-30T01:32:41Z"}}}, "requestParameters": {"nextToken": "eyJ2IjoiMiIsImMiOiJ5S3RUQ1FEZElyNXpwd2REYXBiaWFMZkJBRVhPQnRONHZpQmptTEMzSDUwV0lBSmlJRGMwT0Y0NFJaY2J3R2tMRE1aRVFUVTdYVStQdkVZOXJNTDk5dEl0b2R3TTJudFhyN1ZrZ2ttRDE5NzhTd3Z4NmRjNnI1b2I4Y3AySlVXMVB0Z1lCTWxLeGhYUzFMMDhlSjVJVkJESk11ZGlRbExJclIxUjRoS0pGNGMzRUF0a2dlcHA1ZVQyUFJEbFZ2Yz0iLCJzIjoiMSJ9", "maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "13c96c1b-8d17-4771-8067-41e2528dca7d", "record_id": "flaws_cloudtrail:0000198:13c96c1b-8d17-4771-8067-41e2528dca7d", "row_index": 198, "timestamp": "2019-07-30T01:46:31Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "ASIAS0JW3FJSAP9S8LA2", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "140.178.2.6", "user_agent": "aws-cli/1.16.131 Python/3.7.1 Darwin/18.7.0 botocore/1.12.121", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1152, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "13c96c1b-8d17-4771-8067-41e2528dca7d", "eventTime": "2019-07-30T01:46:31Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "140.178.2.6", "userAgent": "aws-cli/1.16.131 Python/3.7.1 Darwin/18.7.0 botocore/1.12.121", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "ASIAS0JW3FJSAP9S8LA2", "userName": "backup", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2019-07-30T01:32:41Z"}}}, "requestParameters": {"nextToken": "eyJ2IjoiMiIsImMiOiJ5S3RUQ1FEZElyNXpwd2REYXBiaWFMZkJBRVhPQnRONHZpQmptTEMzSDUwV0lBSmlJRGMwT0Y0NFJaY2J3R2tMRE1aRVFUVTdYVStQdkVZOXJNTDk5dEl0b2R3TTJudFhyN1ZrZ2ttRDE5NzhTd3Z4NmRjNnI1b2I4Y3AySlVXMVB0Z1lCTWxLeGhYUzFMMDhlSjVJVkJESk11ZGlRbExJclIxUjRoS0pGNGMzRUF0a2dlcHA1ZVQyUFJEbFZ2Yz0iLCJzIjoiMSJ9", "maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "ca58be51-3dcf-46d3-b172-ce4e2420ec5d", "record_id": "flaws_cloudtrail:0000199:ca58be51-3dcf-46d3-b172-ce4e2420ec5d", "row_index": 199, "timestamp": "2019-07-30T01:50:46Z", "event_type": "DescribeInstances", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "ASIAS0JW3FJSAP9S8LA2", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "140.178.2.6", "user_agent": "aws-cli/1.16.131 Python/3.7.1 Darwin/18.7.0 botocore/1.12.121", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 797, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "ca58be51-3dcf-46d3-b172-ce4e2420ec5d", "eventTime": "2019-07-30T01:50:46Z", "eventName": "DescribeInstances", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "140.178.2.6", "userAgent": "aws-cli/1.16.131 Python/3.7.1 Darwin/18.7.0 botocore/1.12.121", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "ASIAS0JW3FJSAP9S8LA2", "userName": "backup", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2019-07-30T01:32:41Z"}}}, "requestParameters": {"instancesSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "ca58be51-3dcf-46d3-b172-ce4e2420ec5d", "record_id": "flaws_cloudtrail:0000200:ca58be51-3dcf-46d3-b172-ce4e2420ec5d", "row_index": 200, "timestamp": "2019-07-30T01:50:46Z", "event_type": "DescribeInstances", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "ASIAS0JW3FJSAP9S8LA2", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "140.178.2.6", "user_agent": "aws-cli/1.16.131 Python/3.7.1 Darwin/18.7.0 botocore/1.12.121", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 797, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "ca58be51-3dcf-46d3-b172-ce4e2420ec5d", "eventTime": "2019-07-30T01:50:46Z", "eventName": "DescribeInstances", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "140.178.2.6", "userAgent": "aws-cli/1.16.131 Python/3.7.1 Darwin/18.7.0 botocore/1.12.121", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "ASIAS0JW3FJSAP9S8LA2", "userName": "backup", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2019-07-30T01:32:41Z"}}}, "requestParameters": {"instancesSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "60e01f2d-f12d-46c3-b016-3eafeaadce88", "record_id": "flaws_cloudtrail:0000201:60e01f2d-f12d-46c3-b016-3eafeaadce88", "row_index": 201, "timestamp": "2019-07-30T01:52:27Z", "event_type": "GetLaunchTemplateData", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "ASIAS0JW3FJSAP9S8LA2", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "140.178.2.6", "user_agent": "aws-cli/1.16.131 Python/3.7.1 Darwin/18.7.0 botocore/1.12.121", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 946, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "60e01f2d-f12d-46c3-b016-3eafeaadce88", "eventTime": "2019-07-30T01:52:27Z", "eventName": "GetLaunchTemplateData", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "140.178.2.6", "userAgent": "aws-cli/1.16.131 Python/3.7.1 Darwin/18.7.0 botocore/1.12.121", "awsRegion": "us-west-2", "errorCode": "Client.UnauthorizedOperation", "errorMessage": "You are not authorized to perform this operation.", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "ASIAS0JW3FJSAP9S8LA2", "userName": "backup", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2019-07-30T01:32:41Z"}}}, "requestParameters": {"GetLaunchTemplateDataRequest": {"InstanceId": "i-aa2d3b42e5c6e801a"}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "60e01f2d-f12d-46c3-b016-3eafeaadce88", "record_id": "flaws_cloudtrail:0000202:60e01f2d-f12d-46c3-b016-3eafeaadce88", "row_index": 202, "timestamp": "2019-07-30T01:52:27Z", "event_type": "GetLaunchTemplateData", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "ASIAS0JW3FJSAP9S8LA2", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "140.178.2.6", "user_agent": "aws-cli/1.16.131 Python/3.7.1 Darwin/18.7.0 botocore/1.12.121", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 946, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "60e01f2d-f12d-46c3-b016-3eafeaadce88", "eventTime": "2019-07-30T01:52:27Z", "eventName": "GetLaunchTemplateData", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "140.178.2.6", "userAgent": "aws-cli/1.16.131 Python/3.7.1 Darwin/18.7.0 botocore/1.12.121", "awsRegion": "us-west-2", "errorCode": "Client.UnauthorizedOperation", "errorMessage": "You are not authorized to perform this operation.", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "ASIAS0JW3FJSAP9S8LA2", "userName": "backup", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2019-07-30T01:32:41Z"}}}, "requestParameters": {"GetLaunchTemplateDataRequest": {"InstanceId": "i-aa2d3b42e5c6e801a"}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "153804c4-2658-41f9-adc0-cfc3b879d38a", "record_id": "flaws_cloudtrail:0000203:153804c4-2658-41f9-adc0-cfc3b879d38a", "row_index": 203, "timestamp": "2019-07-30T01:55:33Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "ASIAS0JW3FJSAP9S8LA2", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "140.178.2.6", "user_agent": "aws-cli/1.16.131 Python/3.7.1 Darwin/18.7.0 botocore/1.12.121", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 883, "raw_record_depth": 5, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "153804c4-2658-41f9-adc0-cfc3b879d38a", "eventTime": "2019-07-30T01:55:33Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "140.178.2.6", "userAgent": "aws-cli/1.16.131 Python/3.7.1 Darwin/18.7.0 botocore/1.12.121", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "ASIAS0JW3FJSAP9S8LA2", "userName": "backup", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2019-07-30T01:32:41Z"}}}, "requestParameters": {"maxResults": 1000, "snapshotSet": {}, "ownersSet": {"items": [{"owner": "811596193553"}]}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "153804c4-2658-41f9-adc0-cfc3b879d38a", "record_id": "flaws_cloudtrail:0000204:153804c4-2658-41f9-adc0-cfc3b879d38a", "row_index": 204, "timestamp": "2019-07-30T01:55:33Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "ASIAS0JW3FJSAP9S8LA2", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "140.178.2.6", "user_agent": "aws-cli/1.16.131 Python/3.7.1 Darwin/18.7.0 botocore/1.12.121", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 883, "raw_record_depth": 5, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "153804c4-2658-41f9-adc0-cfc3b879d38a", "eventTime": "2019-07-30T01:55:33Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "140.178.2.6", "userAgent": "aws-cli/1.16.131 Python/3.7.1 Darwin/18.7.0 botocore/1.12.121", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "ASIAS0JW3FJSAP9S8LA2", "userName": "backup", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2019-07-30T01:32:41Z"}}}, "requestParameters": {"maxResults": 1000, "snapshotSet": {}, "ownersSet": {"items": [{"owner": "811596193553"}]}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "084086-1ffa-4339-b61a-b4484f71d0fb", "record_id": "flaws_cloudtrail:0000205:084086-1ffa-4339-b61a-b4484f71d0fb", "row_index": 205, "timestamp": "2019-07-30T01:58:07Z", "event_type": "DescribeImportSnapshotTasks", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "ASIA1XQHVFVITBJOOHW3", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "ec2-frontend-api.amazonaws.com", "user_agent": "ec2-frontend-api.amazonaws.com", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 820, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "084086-1ffa-4339-b61a-b4484f71d0fb", "eventTime": "2019-07-30T01:58:07Z", "eventName": "DescribeImportSnapshotTasks", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "ec2-frontend-api.amazonaws.com", "userAgent": "ec2-frontend-api.amazonaws.com", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "ASIA1XQHVFVITBJOOHW3", "userName": "backup", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2019-07-30T01:32:41Z"}}, "invokedBy": "ec2-frontend-api.amazonaws.com"}, "requestParameters": {"maxResults": 0}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "084086-1ffa-4339-b61a-b4484f71d0fb", "record_id": "flaws_cloudtrail:0000206:084086-1ffa-4339-b61a-b4484f71d0fb", "row_index": 206, "timestamp": "2019-07-30T01:58:07Z", "event_type": "DescribeImportSnapshotTasks", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "ASIA1XQHVFVITBJOOHW3", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "ec2-frontend-api.amazonaws.com", "user_agent": "ec2-frontend-api.amazonaws.com", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 820, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "084086-1ffa-4339-b61a-b4484f71d0fb", "eventTime": "2019-07-30T01:58:07Z", "eventName": "DescribeImportSnapshotTasks", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "ec2-frontend-api.amazonaws.com", "userAgent": "ec2-frontend-api.amazonaws.com", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "ASIA1XQHVFVITBJOOHW3", "userName": "backup", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2019-07-30T01:32:41Z"}}, "invokedBy": "ec2-frontend-api.amazonaws.com"}, "requestParameters": {"maxResults": 0}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "d54ca6e1-02cd-47d5-a2b0-1a918f452b57", "record_id": "flaws_cloudtrail:0000207:d54ca6e1-02cd-47d5-a2b0-1a918f452b57", "row_index": 207, "timestamp": "2019-07-30T01:58:37Z", "event_type": "DescribeLaunchTemplates", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "ASIAS0JW3FJSAP9S8LA2", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "140.178.2.6", "user_agent": "aws-cli/1.16.131 Python/3.7.1 Darwin/18.7.0 botocore/1.12.121", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 806, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "d54ca6e1-02cd-47d5-a2b0-1a918f452b57", "eventTime": "2019-07-30T01:58:37Z", "eventName": "DescribeLaunchTemplates", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "140.178.2.6", "userAgent": "aws-cli/1.16.131 Python/3.7.1 Darwin/18.7.0 botocore/1.12.121", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "ASIAS0JW3FJSAP9S8LA2", "userName": "backup", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2019-07-30T01:32:41Z"}}}, "requestParameters": {"DescribeLaunchTemplatesRequest": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "d54ca6e1-02cd-47d5-a2b0-1a918f452b57", "record_id": "flaws_cloudtrail:0000208:d54ca6e1-02cd-47d5-a2b0-1a918f452b57", "row_index": 208, "timestamp": "2019-07-30T01:58:37Z", "event_type": "DescribeLaunchTemplates", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "ASIAS0JW3FJSAP9S8LA2", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "140.178.2.6", "user_agent": "aws-cli/1.16.131 Python/3.7.1 Darwin/18.7.0 botocore/1.12.121", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 806, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "d54ca6e1-02cd-47d5-a2b0-1a918f452b57", "eventTime": "2019-07-30T01:58:37Z", "eventName": "DescribeLaunchTemplates", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "140.178.2.6", "userAgent": "aws-cli/1.16.131 Python/3.7.1 Darwin/18.7.0 botocore/1.12.121", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "ASIAS0JW3FJSAP9S8LA2", "userName": "backup", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2019-07-30T01:32:41Z"}}}, "requestParameters": {"DescribeLaunchTemplatesRequest": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "479202f9-f9df-43ba-978c-c3b4d36aedf8", "record_id": "flaws_cloudtrail:0000209:479202f9-f9df-43ba-978c-c3b4d36aedf8", "row_index": 209, "timestamp": "2019-07-30T02:31:35Z", "event_type": "AssumeRole", "event_source": "sts.amazonaws.com", "principal": {"type": "AWSService", "arn": null, "account_id": null, "principal_id": null, "user_name": null, "access_key_id": null, "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "ec2.amazonaws.com", "user_agent": "ec2.amazonaws.com", "aws_region": "us-west-2"}, "resource_arns": ["arn:aws:iam::811596193553:role/flaws"], "raw_record_size_bytes": 1883, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "resources", "responseElements", "sharedEventID", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "479202f9-f9df-43ba-978c-c3b4d36aedf8", "eventTime": "2019-07-30T02:31:35Z", "eventName": "AssumeRole", "eventSource": "sts.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "ec2.amazonaws.com", "userAgent": "ec2.amazonaws.com", "awsRegion": "us-west-2", "userIdentity": {"type": "AWSService", "invokedBy": "ec2.amazonaws.com"}, "requestParameters": {"roleSessionName": "i-aa2d3b42e5c6e801a", "roleArn": "arn:aws:iam::811596193553:role/flaws"}, "responseElements": {"credentials": {"accessKeyId": "ASIA0EU6XJZ6W1QZJJAW", "expiration": "Jul 30, 2019 8:49:56 AM", "sessionToken": "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"}}, "resources": [{"ARN": "arn:aws:iam::811596193553:role/flaws", "accountId": "811596193553", "type": "AWS::IAM::Role"}]}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "479202f9-f9df-43ba-978c-c3b4d36aedf8", "record_id": "flaws_cloudtrail:0000210:479202f9-f9df-43ba-978c-c3b4d36aedf8", "row_index": 210, "timestamp": "2019-07-30T02:31:35Z", "event_type": "AssumeRole", "event_source": "sts.amazonaws.com", "principal": {"type": "AWSService", "arn": null, "account_id": null, "principal_id": null, "user_name": null, "access_key_id": null, "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "ec2.amazonaws.com", "user_agent": "ec2.amazonaws.com", "aws_region": "us-west-2"}, "resource_arns": ["arn:aws:iam::811596193553:role/flaws"], "raw_record_size_bytes": 1883, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "resources", "responseElements", "sharedEventID", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "479202f9-f9df-43ba-978c-c3b4d36aedf8", "eventTime": "2019-07-30T02:31:35Z", "eventName": "AssumeRole", "eventSource": "sts.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "ec2.amazonaws.com", "userAgent": "ec2.amazonaws.com", "awsRegion": "us-west-2", "userIdentity": {"type": "AWSService", "invokedBy": "ec2.amazonaws.com"}, "requestParameters": {"roleSessionName": "i-aa2d3b42e5c6e801a", "roleArn": "arn:aws:iam::811596193553:role/flaws"}, "responseElements": {"credentials": {"accessKeyId": "ASIA0EU6XJZ6W1QZJJAW", "expiration": "Jul 30, 2019 8:49:56 AM", "sessionToken": "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"}}, "resources": [{"ARN": "arn:aws:iam::811596193553:role/flaws", "accountId": "811596193553", "type": "AWS::IAM::Role"}]}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "c747b1a2-7bbe-4a25-9458-ee1f80ec7d75", "record_id": "flaws_cloudtrail:0000211:c747b1a2-7bbe-4a25-9458-ee1f80ec7d75", "row_index": 211, "timestamp": "2019-07-30T02:40:40Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "198.3.215.7", "user_agent": "aws-cli/1.16.206 Python/3.6.5 Darwin/18.6.0 botocore/1.12.196", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 750, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "c747b1a2-7bbe-4a25-9458-ee1f80ec7d75", "eventTime": "2019-07-30T02:40:40Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "198.3.215.7", "userAgent": "aws-cli/1.16.206 Python/3.6.5 Darwin/18.6.0 botocore/1.12.196", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "c747b1a2-7bbe-4a25-9458-ee1f80ec7d75", "record_id": "flaws_cloudtrail:0000212:c747b1a2-7bbe-4a25-9458-ee1f80ec7d75", "row_index": 212, "timestamp": "2019-07-30T02:40:40Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "198.3.215.7", "user_agent": "aws-cli/1.16.206 Python/3.6.5 Darwin/18.6.0 botocore/1.12.196", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 750, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "c747b1a2-7bbe-4a25-9458-ee1f80ec7d75", "eventTime": "2019-07-30T02:40:40Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "198.3.215.7", "userAgent": "aws-cli/1.16.206 Python/3.6.5 Darwin/18.6.0 botocore/1.12.196", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "8fcdec58-c72d-40c6-ad31-782fd00a068c", "record_id": "flaws_cloudtrail:0000213:8fcdec58-c72d-40c6-ad31-782fd00a068c", "row_index": 213, "timestamp": "2019-07-30T02:40:41Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "198.3.215.7", "user_agent": "aws-cli/1.16.206 Python/3.6.5 Darwin/18.6.0 botocore/1.12.196", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1069, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "8fcdec58-c72d-40c6-ad31-782fd00a068c", "eventTime": "2019-07-30T02:40:41Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "198.3.215.7", "userAgent": "aws-cli/1.16.206 Python/3.6.5 Darwin/18.6.0 botocore/1.12.196", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"nextToken": "eyJ2IjoiMiIsImMiOiJIOUtCMWFFLzdLaUZRN1hYSmZIanU1SzdkdFpGZ3NPb0JDMWdobWFneXNQelU3elZFeTF5cUVvWlQxd1lZYisvemRoZlZrLyt5VzNXdnpsU1dLV1hFUUsxU1Zkenlub2k0NzEzNHBGU2ZNRURyT0hCVllhMGNiODdmTDhBakVsSlNIaXI2VHF1TTRvUkpWYnRBOHpUZEMvbjBPRWREL0s0UmNRYXg3b3JWc1pBZGZZaDNqdldvaEQ3eFl1WWxnVkpjeGRQekpaYWFhMD0iLCJzIjoiMSJ9", "maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "8fcdec58-c72d-40c6-ad31-782fd00a068c", "record_id": "flaws_cloudtrail:0000214:8fcdec58-c72d-40c6-ad31-782fd00a068c", "row_index": 214, "timestamp": "2019-07-30T02:40:41Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "198.3.215.7", "user_agent": "aws-cli/1.16.206 Python/3.6.5 Darwin/18.6.0 botocore/1.12.196", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1069, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "8fcdec58-c72d-40c6-ad31-782fd00a068c", "eventTime": "2019-07-30T02:40:41Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "198.3.215.7", "userAgent": "aws-cli/1.16.206 Python/3.6.5 Darwin/18.6.0 botocore/1.12.196", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"nextToken": "eyJ2IjoiMiIsImMiOiJIOUtCMWFFLzdLaUZRN1hYSmZIanU1SzdkdFpGZ3NPb0JDMWdobWFneXNQelU3elZFeTF5cUVvWlQxd1lZYisvemRoZlZrLyt5VzNXdnpsU1dLV1hFUUsxU1Zkenlub2k0NzEzNHBGU2ZNRURyT0hCVllhMGNiODdmTDhBakVsSlNIaXI2VHF1TTRvUkpWYnRBOHpUZEMvbjBPRWREL0s0UmNRYXg3b3JWc1pBZGZZaDNqdldvaEQ3eFl1WWxnVkpjeGRQekpaYWFhMD0iLCJzIjoiMSJ9", "maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "cfdf9abe-c3e6-4c3d-bdda-e8ddcbab7cdf", "record_id": "flaws_cloudtrail:0000215:cfdf9abe-c3e6-4c3d-bdda-e8ddcbab7cdf", "row_index": 215, "timestamp": "2019-07-30T02:40:43Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "198.3.215.7", "user_agent": "aws-cli/1.16.206 Python/3.6.5 Darwin/18.6.0 botocore/1.12.196", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1077, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "cfdf9abe-c3e6-4c3d-bdda-e8ddcbab7cdf", "eventTime": "2019-07-30T02:40:43Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "198.3.215.7", "userAgent": "aws-cli/1.16.206 Python/3.6.5 Darwin/18.6.0 botocore/1.12.196", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"nextToken": "eyJ2IjoiMiIsImMiOiIwTFg2Y0tRbktBSWhwSXdmSC9wNHlzaXppU2xHZlM3STQ3SkVTSWhqd2tDemMyRVZRK0orYkx0ejAzZnBkMjJOVlpCTXluWjZzQUF1cG0ydEtMTm95QVNvL1BwM2w5OU5ZOTJITjVEcHZnbGZCaE5IbGJkVVNJa1dBOEVpRS81WUdybUlidHhwV3RRMUt2MkRrWFZLQWIza0YxbUdGdnBNMWxwT2RwbnVJWmNhMUl4aWJlNytiTThsL0N5RDVFSDFDb2lNZE52bzNJZ0ZLUT09IiwicyI6IjEifQ==", "maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "cfdf9abe-c3e6-4c3d-bdda-e8ddcbab7cdf", "record_id": "flaws_cloudtrail:0000216:cfdf9abe-c3e6-4c3d-bdda-e8ddcbab7cdf", "row_index": 216, "timestamp": "2019-07-30T02:40:43Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "198.3.215.7", "user_agent": "aws-cli/1.16.206 Python/3.6.5 Darwin/18.6.0 botocore/1.12.196", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1077, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "cfdf9abe-c3e6-4c3d-bdda-e8ddcbab7cdf", "eventTime": "2019-07-30T02:40:43Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "198.3.215.7", "userAgent": "aws-cli/1.16.206 Python/3.6.5 Darwin/18.6.0 botocore/1.12.196", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"nextToken": "eyJ2IjoiMiIsImMiOiIwTFg2Y0tRbktBSWhwSXdmSC9wNHlzaXppU2xHZlM3STQ3SkVTSWhqd2tDemMyRVZRK0orYkx0ejAzZnBkMjJOVlpCTXluWjZzQUF1cG0ydEtMTm95QVNvL1BwM2w5OU5ZOTJITjVEcHZnbGZCaE5IbGJkVVNJa1dBOEVpRS81WUdybUlidHhwV3RRMUt2MkRrWFZLQWIza0YxbUdGdnBNMWxwT2RwbnVJWmNhMUl4aWJlNytiTThsL0N5RDVFSDFDb2lNZE52bzNJZ0ZLUT09IiwicyI6IjEifQ==", "maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "04429-0b19-47c0-b77c-b00174cefb1a", "record_id": "flaws_cloudtrail:0000217:04429-0b19-47c0-b77c-b00174cefb1a", "row_index": 217, "timestamp": "2019-07-30T02:40:44Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "198.3.215.7", "user_agent": "aws-cli/1.16.206 Python/3.6.5 Darwin/18.6.0 botocore/1.12.196", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1074, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "04429-0b19-47c0-b77c-b00174cefb1a", "eventTime": "2019-07-30T02:40:44Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "198.3.215.7", "userAgent": "aws-cli/1.16.206 Python/3.6.5 Darwin/18.6.0 botocore/1.12.196", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"nextToken": "eyJ2IjoiMiIsImMiOiJnQjBXVFNlbXFtbTNyejRjSktEaDkxS3RrcGQySXhXbU5zS3gyc2dLZDdYRXkxNExPakp4OFpVeFM1VGlkd04yMUZnWHNabGJOT2ZPOWNjdFBXTW42ZEs3MlZTRWRBMnRkdFJSTUNoM29MUVYzd1VFTS8rTVpjSTNUNHpVTWpRMDBHb3kxeXZJVW1XTG9sM1oyOUFCSjNheUlHRGZmdTY3WTNFNzJlckVVL0Y4Yjc5Q24wUjVKSzBicG9FVDJwQ3FqYWx5UXBKWElsdzd2QT09IiwicyI6IjEifQ==", "maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "04429-0b19-47c0-b77c-b00174cefb1a", "record_id": "flaws_cloudtrail:0000218:04429-0b19-47c0-b77c-b00174cefb1a", "row_index": 218, "timestamp": "2019-07-30T02:40:44Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "198.3.215.7", "user_agent": "aws-cli/1.16.206 Python/3.6.5 Darwin/18.6.0 botocore/1.12.196", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1074, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "04429-0b19-47c0-b77c-b00174cefb1a", "eventTime": "2019-07-30T02:40:44Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "198.3.215.7", "userAgent": "aws-cli/1.16.206 Python/3.6.5 Darwin/18.6.0 botocore/1.12.196", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"nextToken": "eyJ2IjoiMiIsImMiOiJnQjBXVFNlbXFtbTNyejRjSktEaDkxS3RrcGQySXhXbU5zS3gyc2dLZDdYRXkxNExPakp4OFpVeFM1VGlkd04yMUZnWHNabGJOT2ZPOWNjdFBXTW42ZEs3MlZTRWRBMnRkdFJSTUNoM29MUVYzd1VFTS8rTVpjSTNUNHpVTWpRMDBHb3kxeXZJVW1XTG9sM1oyOUFCSjNheUlHRGZmdTY3WTNFNzJlckVVL0Y4Yjc5Q24wUjVKSzBicG9FVDJwQ3FqYWx5UXBKWElsdzd2QT09IiwicyI6IjEifQ==", "maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "5ecacdbe-cea3-4b96-b662-ac6316b355790", "record_id": "flaws_cloudtrail:0000219:5ecacdbe-cea3-4b96-b662-ac6316b355790", "row_index": 219, "timestamp": "2019-07-30T02:40:46Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "198.3.215.7", "user_agent": "aws-cli/1.16.206 Python/3.6.5 Darwin/18.6.0 botocore/1.12.196", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1078, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "5ecacdbe-cea3-4b96-b662-ac6316b355790", "eventTime": "2019-07-30T02:40:46Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "198.3.215.7", "userAgent": "aws-cli/1.16.206 Python/3.6.5 Darwin/18.6.0 botocore/1.12.196", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"nextToken": "eyJ2IjoiMiIsImMiOiJ2Y0I5cGd5UmdnSE9yT1dMemVqVFBMbU04UE55SnJKaDRvdHpkQjNWYU9IdnpVZ3BaV0V0VFU2RjRQTW0raVBkNmZmU25OeWwzbEUyQkQxRWZRRXNwYUxuY09weFNoRm1FUDBCcWpGbmZpYWNDMDZSVlZxdnNuODNuemk2cXFydEZhTXg1anZJb3R6L2NxcHdmV0dtSE5SODhjb2pYaXU4U3NMSjRET3pSb2ErK0MwZHhhb3BTQ3hpd3M2LzJvK0RsY1FTS1hHLzNwR2xMdz09IiwicyI6IjEifQ==", "maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "5ecacdbe-cea3-4b96-b662-ac6316b355790", "record_id": "flaws_cloudtrail:0000220:5ecacdbe-cea3-4b96-b662-ac6316b355790", "row_index": 220, "timestamp": "2019-07-30T02:40:46Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "198.3.215.7", "user_agent": "aws-cli/1.16.206 Python/3.6.5 Darwin/18.6.0 botocore/1.12.196", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1078, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "5ecacdbe-cea3-4b96-b662-ac6316b355790", "eventTime": "2019-07-30T02:40:46Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "198.3.215.7", "userAgent": "aws-cli/1.16.206 Python/3.6.5 Darwin/18.6.0 botocore/1.12.196", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"nextToken": "eyJ2IjoiMiIsImMiOiJ2Y0I5cGd5UmdnSE9yT1dMemVqVFBMbU04UE55SnJKaDRvdHpkQjNWYU9IdnpVZ3BaV0V0VFU2RjRQTW0raVBkNmZmU25OeWwzbEUyQkQxRWZRRXNwYUxuY09weFNoRm1FUDBCcWpGbmZpYWNDMDZSVlZxdnNuODNuemk2cXFydEZhTXg1anZJb3R6L2NxcHdmV0dtSE5SODhjb2pYaXU4U3NMSjRET3pSb2ErK0MwZHhhb3BTQ3hpd3M2LzJvK0RsY1FTS1hHLzNwR2xMdz09IiwicyI6IjEifQ==", "maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "a570a9a8-02e0-471f-a60f-b55b077c9b31", "record_id": "flaws_cloudtrail:0000221:a570a9a8-02e0-471f-a60f-b55b077c9b31", "row_index": 221, "timestamp": "2019-07-30T02:40:47Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "198.3.215.7", "user_agent": "aws-cli/1.16.206 Python/3.6.5 Darwin/18.6.0 botocore/1.12.196", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1077, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "a570a9a8-02e0-471f-a60f-b55b077c9b31", "eventTime": "2019-07-30T02:40:47Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "198.3.215.7", "userAgent": "aws-cli/1.16.206 Python/3.6.5 Darwin/18.6.0 botocore/1.12.196", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"nextToken": "eyJ2IjoiMiIsImMiOiIxcHFVNEgxMEdlN1U5TGE0Ym0rNnF1VXNsUnRoUno5VGc3ZFJjUmY0cksvSEFhUi9jVkZRY2ZWelFlVzJHSHFJbEJXWDhDd2xLUlZzSU84RnU3TkEyaUdOQUVycVpVd0x1bWNvTWtEUzA3YjlMZ1FRWHVZalpraDJPTDJXVk9PS1ROdmdSRnQrVHd5RWxDU0RDN25OUldxUUsvYlU0RVhlaG1BTkM4TU5pZnpTdlpJTjRRRE9FaVNtR2M1VG1Xam83MW95S2ZIK21mWDA3QT09IiwicyI6IjEifQ==", "maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "a570a9a8-02e0-471f-a60f-b55b077c9b31", "record_id": "flaws_cloudtrail:0000222:a570a9a8-02e0-471f-a60f-b55b077c9b31", "row_index": 222, "timestamp": "2019-07-30T02:40:47Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "198.3.215.7", "user_agent": "aws-cli/1.16.206 Python/3.6.5 Darwin/18.6.0 botocore/1.12.196", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1077, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "a570a9a8-02e0-471f-a60f-b55b077c9b31", "eventTime": "2019-07-30T02:40:47Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "198.3.215.7", "userAgent": "aws-cli/1.16.206 Python/3.6.5 Darwin/18.6.0 botocore/1.12.196", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"nextToken": "eyJ2IjoiMiIsImMiOiIxcHFVNEgxMEdlN1U5TGE0Ym0rNnF1VXNsUnRoUno5VGc3ZFJjUmY0cksvSEFhUi9jVkZRY2ZWelFlVzJHSHFJbEJXWDhDd2xLUlZzSU84RnU3TkEyaUdOQUVycVpVd0x1bWNvTWtEUzA3YjlMZ1FRWHVZalpraDJPTDJXVk9PS1ROdmdSRnQrVHd5RWxDU0RDN25OUldxUUsvYlU0RVhlaG1BTkM4TU5pZnpTdlpJTjRRRE9FaVNtR2M1VG1Xam83MW95S2ZIK21mWDA3QT09IiwicyI6IjEifQ==", "maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "3db0ef20-c0e6-48ea-8397-e799d66b43cd", "record_id": "flaws_cloudtrail:0000223:3db0ef20-c0e6-48ea-8397-e799d66b43cd", "row_index": 223, "timestamp": "2019-07-30T02:40:48Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "198.3.215.7", "user_agent": "aws-cli/1.16.206 Python/3.6.5 Darwin/18.6.0 botocore/1.12.196", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1069, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "3db0ef20-c0e6-48ea-8397-e799d66b43cd", "eventTime": "2019-07-30T02:40:48Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "198.3.215.7", "userAgent": "aws-cli/1.16.206 Python/3.6.5 Darwin/18.6.0 botocore/1.12.196", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"nextToken": "eyJ2IjoiMiIsImMiOiIwSkdRS3hjcVRXbGtGa05sTWJIaEo4UXh1MHRKSk4raGZlckNxa2NiaUk5MVAwY1BDZkprNlRkWEtHNTVSMHBqOU9rQXhWeGhSVTROaWE1MERlWTEvQnZmYmlkU1NMdVBhaFEyWWNSVm4veXBVK0p2OEhhK0w3QlN2ZTdSUm15NitLOTB2TlNzYUt1djNiek41NzBsOXlzck9qWmtCM01DY1RHLzdBZC9mVmZnZm13STlIVEkwRUdvMVppamJoMERhWGZtQnhEdTFRPT0iLCJzIjoiMSJ9", "maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "3db0ef20-c0e6-48ea-8397-e799d66b43cd", "record_id": "flaws_cloudtrail:0000224:3db0ef20-c0e6-48ea-8397-e799d66b43cd", "row_index": 224, "timestamp": "2019-07-30T02:40:48Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "198.3.215.7", "user_agent": "aws-cli/1.16.206 Python/3.6.5 Darwin/18.6.0 botocore/1.12.196", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1069, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "3db0ef20-c0e6-48ea-8397-e799d66b43cd", "eventTime": "2019-07-30T02:40:48Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "198.3.215.7", "userAgent": "aws-cli/1.16.206 Python/3.6.5 Darwin/18.6.0 botocore/1.12.196", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"nextToken": "eyJ2IjoiMiIsImMiOiIwSkdRS3hjcVRXbGtGa05sTWJIaEo4UXh1MHRKSk4raGZlckNxa2NiaUk5MVAwY1BDZkprNlRkWEtHNTVSMHBqOU9rQXhWeGhSVTROaWE1MERlWTEvQnZmYmlkU1NMdVBhaFEyWWNSVm4veXBVK0p2OEhhK0w3QlN2ZTdSUm15NitLOTB2TlNzYUt1djNiek41NzBsOXlzck9qWmtCM01DY1RHLzdBZC9mVmZnZm13STlIVEkwRUdvMVppamJoMERhWGZtQnhEdTFRPT0iLCJzIjoiMSJ9", "maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "2893e31d-603f-4ee2-aa87-50050f4d5f4", "record_id": "flaws_cloudtrail:0000225:2893e31d-603f-4ee2-aa87-50050f4d5f4", "row_index": 225, "timestamp": "2019-07-30T02:40:49Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "198.3.215.7", "user_agent": "aws-cli/1.16.206 Python/3.6.5 Darwin/18.6.0 botocore/1.12.196", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1074, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "2893e31d-603f-4ee2-aa87-50050f4d5f4", "eventTime": "2019-07-30T02:40:49Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "198.3.215.7", "userAgent": "aws-cli/1.16.206 Python/3.6.5 Darwin/18.6.0 botocore/1.12.196", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"nextToken": "eyJ2IjoiMiIsImMiOiJ2cS95UFJacDNKYTc0Q1VZdmVaTzVRaDFpOHJlNkNaQTg1R1RzNGR1YVJuODVqcm9vSm9hN2JnVEdJQmhEV2NxdWRPVmdZb2hpZ09Uc2xCNUJSOFgzTEMyZHRrOWhiK0NjUGc4c25ROHJ0ZVovRUwzWjNpTkluRGFGc3JCWWs1eHhqaTk2bkhjbEtxVkZGeDgydUcrSTZ3Tm03RUkyM1RaRWpxaFloSk85RDNsN1FhMGRsQ2taOU5UL3dES3kyNEFvV3lwZmpOL3NuamRGZz09IiwicyI6IjEifQ==", "maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "2893e31d-603f-4ee2-aa87-50050f4d5f4", "record_id": "flaws_cloudtrail:0000226:2893e31d-603f-4ee2-aa87-50050f4d5f4", "row_index": 226, "timestamp": "2019-07-30T02:40:49Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "198.3.215.7", "user_agent": "aws-cli/1.16.206 Python/3.6.5 Darwin/18.6.0 botocore/1.12.196", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1074, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "2893e31d-603f-4ee2-aa87-50050f4d5f4", "eventTime": "2019-07-30T02:40:49Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "198.3.215.7", "userAgent": "aws-cli/1.16.206 Python/3.6.5 Darwin/18.6.0 botocore/1.12.196", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"nextToken": "eyJ2IjoiMiIsImMiOiJ2cS95UFJacDNKYTc0Q1VZdmVaTzVRaDFpOHJlNkNaQTg1R1RzNGR1YVJuODVqcm9vSm9hN2JnVEdJQmhEV2NxdWRPVmdZb2hpZ09Uc2xCNUJSOFgzTEMyZHRrOWhiK0NjUGc4c25ROHJ0ZVovRUwzWjNpTkluRGFGc3JCWWs1eHhqaTk2bkhjbEtxVkZGeDgydUcrSTZ3Tm03RUkyM1RaRWpxaFloSk85RDNsN1FhMGRsQ2taOU5UL3dES3kyNEFvV3lwZmpOL3NuamRGZz09IiwicyI6IjEifQ==", "maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "542a0a26-71de-4d8a-a09f-79d5c47245d7", "record_id": "flaws_cloudtrail:0000227:542a0a26-71de-4d8a-a09f-79d5c47245d7", "row_index": 227, "timestamp": "2019-07-30T02:40:51Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "198.3.215.7", "user_agent": "aws-cli/1.16.206 Python/3.6.5 Darwin/18.6.0 botocore/1.12.196", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1077, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "542a0a26-71de-4d8a-a09f-79d5c47245d7", "eventTime": "2019-07-30T02:40:51Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "198.3.215.7", "userAgent": "aws-cli/1.16.206 Python/3.6.5 Darwin/18.6.0 botocore/1.12.196", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"nextToken": "eyJ2IjoiMiIsImMiOiJya21iWjNwaGRKYmpKZ3lOT1lvY2RhclhVNS9SZ205V0R4ZHh3bDBKQWlheDNveFlGQUNtcUFzc2NBUTlFcmQwSlBOWmttWG9ZTzFITVRLb1pjOWJaTEk4Z0cvcG8rYnRLVXBFSmRqNlFxbkwzWS9xU2hQU09MNHJvOVY4b1pTUGZnUFdOK1NxTVRMT1lPWmM0aEFpWDllS0h5K3ZpTmhGZEhwM3BncVdQQ1dOd3Vla1RBK1J0ekNvZUlNZG8rYUU1T2V0TW9COEprdy9WZz09IiwicyI6IjEifQ==", "maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "542a0a26-71de-4d8a-a09f-79d5c47245d7", "record_id": "flaws_cloudtrail:0000228:542a0a26-71de-4d8a-a09f-79d5c47245d7", "row_index": 228, "timestamp": "2019-07-30T02:40:51Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "198.3.215.7", "user_agent": "aws-cli/1.16.206 Python/3.6.5 Darwin/18.6.0 botocore/1.12.196", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1077, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "542a0a26-71de-4d8a-a09f-79d5c47245d7", "eventTime": "2019-07-30T02:40:51Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "198.3.215.7", "userAgent": "aws-cli/1.16.206 Python/3.6.5 Darwin/18.6.0 botocore/1.12.196", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"nextToken": "eyJ2IjoiMiIsImMiOiJya21iWjNwaGRKYmpKZ3lOT1lvY2RhclhVNS9SZ205V0R4ZHh3bDBKQWlheDNveFlGQUNtcUFzc2NBUTlFcmQwSlBOWmttWG9ZTzFITVRLb1pjOWJaTEk4Z0cvcG8rYnRLVXBFSmRqNlFxbkwzWS9xU2hQU09MNHJvOVY4b1pTUGZnUFdOK1NxTVRMT1lPWmM0aEFpWDllS0h5K3ZpTmhGZEhwM3BncVdQQ1dOd3Vla1RBK1J0ekNvZUlNZG8rYUU1T2V0TW9COEprdy9WZz09IiwicyI6IjEifQ==", "maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "d32fafc3-a590-4b58-b6e8-5c684fdb30bb", "record_id": "flaws_cloudtrail:0000229:d32fafc3-a590-4b58-b6e8-5c684fdb30bb", "row_index": 229, "timestamp": "2019-07-30T02:40:52Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "198.3.215.7", "user_agent": "aws-cli/1.16.206 Python/3.6.5 Darwin/18.6.0 botocore/1.12.196", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1077, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "d32fafc3-a590-4b58-b6e8-5c684fdb30bb", "eventTime": "2019-07-30T02:40:52Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "198.3.215.7", "userAgent": "aws-cli/1.16.206 Python/3.6.5 Darwin/18.6.0 botocore/1.12.196", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"nextToken": "eyJ2IjoiMiIsImMiOiIwdkZNc0Qrbjdjd0dRSytyVjB1b3d6cVRaamZpUG1QQVExQ1RWZFg2ZEJKR0YyZTQza01EakFwMGZ4WmVBUUp2Q1lqTWI3SWg4eFBqVUdQSzUrRTA5TWQvSmt0cElhTEVIRk9haU9jWnRNd055YjMxeTZqdVJ1UThUYTlXdjdSWWR0OWw0cU1KNzIvSmtoS3R5bmpMeGd0QTcrQTdLSE9oS2NaZ21YUTFNNnFXTXNlbzZab3RqaVFzN09DMVdjb0tRcEpIZHI2djdmMVZwdz09IiwicyI6IjEifQ==", "maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "d32fafc3-a590-4b58-b6e8-5c684fdb30bb", "record_id": "flaws_cloudtrail:0000230:d32fafc3-a590-4b58-b6e8-5c684fdb30bb", "row_index": 230, "timestamp": "2019-07-30T02:40:52Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "198.3.215.7", "user_agent": "aws-cli/1.16.206 Python/3.6.5 Darwin/18.6.0 botocore/1.12.196", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1077, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "d32fafc3-a590-4b58-b6e8-5c684fdb30bb", "eventTime": "2019-07-30T02:40:52Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "198.3.215.7", "userAgent": "aws-cli/1.16.206 Python/3.6.5 Darwin/18.6.0 botocore/1.12.196", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"nextToken": "eyJ2IjoiMiIsImMiOiIwdkZNc0Qrbjdjd0dRSytyVjB1b3d6cVRaamZpUG1QQVExQ1RWZFg2ZEJKR0YyZTQza01EakFwMGZ4WmVBUUp2Q1lqTWI3SWg4eFBqVUdQSzUrRTA5TWQvSmt0cElhTEVIRk9haU9jWnRNd055YjMxeTZqdVJ1UThUYTlXdjdSWWR0OWw0cU1KNzIvSmtoS3R5bmpMeGd0QTcrQTdLSE9oS2NaZ21YUTFNNnFXTXNlbzZab3RqaVFzN09DMVdjb0tRcEpIZHI2djdmMVZwdz09IiwicyI6IjEifQ==", "maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "efe468ee-9a20-4115-b53b-445f9b7bd909", "record_id": "flaws_cloudtrail:0000231:efe468ee-9a20-4115-b53b-445f9b7bd909", "row_index": 231, "timestamp": "2019-07-30T02:40:53Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "198.3.215.7", "user_agent": "aws-cli/1.16.206 Python/3.6.5 Darwin/18.6.0 botocore/1.12.196", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1077, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "efe468ee-9a20-4115-b53b-445f9b7bd909", "eventTime": "2019-07-30T02:40:53Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "198.3.215.7", "userAgent": "aws-cli/1.16.206 Python/3.6.5 Darwin/18.6.0 botocore/1.12.196", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"nextToken": "eyJ2IjoiMiIsImMiOiIyNkxKV29yeUUrVUJ5NlhxUEMyYkRTSjRCYWNqN3RiTzd0d2pjekFOdmFtT2R4S0dBVEN4WEkyV3lRK2RsMnRJbTMvWVlFcXI5ZDF4R1lEZGhBT015akFmUGE2R1pYUmNQQm9tTmNEai9ScVdxSml5R2YzUXlYN0Y2SWpudWFPQUVRUFR1c0xaWjFGWVQ2MTNFVmFST2hzSzhGdUt6QXlma3NCa1VFNnFYc0p1VXB6cXpiaFRqWitSckN6cmQvL2xtOXpIbmp1K3pzU3lFUT09IiwicyI6IjEifQ==", "maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "efe468ee-9a20-4115-b53b-445f9b7bd909", "record_id": "flaws_cloudtrail:0000232:efe468ee-9a20-4115-b53b-445f9b7bd909", "row_index": 232, "timestamp": "2019-07-30T02:40:53Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "198.3.215.7", "user_agent": "aws-cli/1.16.206 Python/3.6.5 Darwin/18.6.0 botocore/1.12.196", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1077, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "efe468ee-9a20-4115-b53b-445f9b7bd909", "eventTime": "2019-07-30T02:40:53Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "198.3.215.7", "userAgent": "aws-cli/1.16.206 Python/3.6.5 Darwin/18.6.0 botocore/1.12.196", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"nextToken": "eyJ2IjoiMiIsImMiOiIyNkxKV29yeUUrVUJ5NlhxUEMyYkRTSjRCYWNqN3RiTzd0d2pjekFOdmFtT2R4S0dBVEN4WEkyV3lRK2RsMnRJbTMvWVlFcXI5ZDF4R1lEZGhBT015akFmUGE2R1pYUmNQQm9tTmNEai9ScVdxSml5R2YzUXlYN0Y2SWpudWFPQUVRUFR1c0xaWjFGWVQ2MTNFVmFST2hzSzhGdUt6QXlma3NCa1VFNnFYc0p1VXB6cXpiaFRqWitSckN6cmQvL2xtOXpIbmp1K3pzU3lFUT09IiwicyI6IjEifQ==", "maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "98bac17f-aa2a-4b85-a633-34092dd25", "record_id": "flaws_cloudtrail:0000233:98bac17f-aa2a-4b85-a633-34092dd25", "row_index": 233, "timestamp": "2019-07-30T02:40:55Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "198.3.215.7", "user_agent": "aws-cli/1.16.206 Python/3.6.5 Darwin/18.6.0 botocore/1.12.196", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1074, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "98bac17f-aa2a-4b85-a633-34092dd25", "eventTime": "2019-07-30T02:40:55Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "198.3.215.7", "userAgent": "aws-cli/1.16.206 Python/3.6.5 Darwin/18.6.0 botocore/1.12.196", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"nextToken": "eyJ2IjoiMiIsImMiOiJ2WERPdEl2blBSRTQxSHJ4UTdTT3c1TXFoVVFKNi9PZlcxQ2d2d2lTaWZnRlFCOUJmT3BWcUs3VTZvNG85T29NSVgyQzQxMGFNcnAxVUkrK0dyZVA0REtUNnNqVExvWCtwTlE4aDBFNXRXemJONk9MekNhSEJpMGVvb0pkNkY0bEhDRzRJRHkzR2pneDFFdTFEMXhYTFFIYVFjVDBFVnBmOFRHNmNZMUxQV3pQVTRkVEpMVXFqNkZ2Z2FMMERZTXdkeFNzM1FZNXQyMkEzUT09IiwicyI6IjEifQ==", "maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "98bac17f-aa2a-4b85-a633-34092dd25", "record_id": "flaws_cloudtrail:0000234:98bac17f-aa2a-4b85-a633-34092dd25", "row_index": 234, "timestamp": "2019-07-30T02:40:55Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "198.3.215.7", "user_agent": "aws-cli/1.16.206 Python/3.6.5 Darwin/18.6.0 botocore/1.12.196", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1074, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "98bac17f-aa2a-4b85-a633-34092dd25", "eventTime": "2019-07-30T02:40:55Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "198.3.215.7", "userAgent": "aws-cli/1.16.206 Python/3.6.5 Darwin/18.6.0 botocore/1.12.196", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"nextToken": "eyJ2IjoiMiIsImMiOiJ2WERPdEl2blBSRTQxSHJ4UTdTT3c1TXFoVVFKNi9PZlcxQ2d2d2lTaWZnRlFCOUJmT3BWcUs3VTZvNG85T29NSVgyQzQxMGFNcnAxVUkrK0dyZVA0REtUNnNqVExvWCtwTlE4aDBFNXRXemJONk9MekNhSEJpMGVvb0pkNkY0bEhDRzRJRHkzR2pneDFFdTFEMXhYTFFIYVFjVDBFVnBmOFRHNmNZMUxQV3pQVTRkVEpMVXFqNkZ2Z2FMMERZTXdkeFNzM1FZNXQyMkEzUT09IiwicyI6IjEifQ==", "maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "791ad2e2-a379-439a-a672-3030a1060f33", "record_id": "flaws_cloudtrail:0000235:791ad2e2-a379-439a-a672-3030a1060f33", "row_index": 235, "timestamp": "2019-07-30T02:40:56Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "198.3.215.7", "user_agent": "aws-cli/1.16.206 Python/3.6.5 Darwin/18.6.0 botocore/1.12.196", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1078, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "791ad2e2-a379-439a-a672-3030a1060f33", "eventTime": "2019-07-30T02:40:56Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "198.3.215.7", "userAgent": "aws-cli/1.16.206 Python/3.6.5 Darwin/18.6.0 botocore/1.12.196", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"nextToken": "eyJ2IjoiMiIsImMiOiJ3ZURjMFI3WVdobitPL2Vnb2xJcEIwQmExNmRFTVBqcXd5V0c0ZlNnbGlYbCtzeis2NmtKcG5Yc2VzbktnSCtlZnluTGZSU2FuVHlveUxXR1ZWaDdsd0pOWSt0STVGREdJbExGV3FBcHVoTHh0NFRNTStMbk9jNGVuUlB4RFZkV2ZYbWZHc3I4Y00zM09rMTRaWUNzcDkrMk9QTE9VMVd3V0FyeTZiU2pOKzZDN2V2eFBiS3pMcDRrMW5yQUQxR28zWVFyWU9BQVJHajB4QT09IiwicyI6IjEifQ==", "maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "791ad2e2-a379-439a-a672-3030a1060f33", "record_id": "flaws_cloudtrail:0000236:791ad2e2-a379-439a-a672-3030a1060f33", "row_index": 236, "timestamp": "2019-07-30T02:40:56Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "198.3.215.7", "user_agent": "aws-cli/1.16.206 Python/3.6.5 Darwin/18.6.0 botocore/1.12.196", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1078, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "791ad2e2-a379-439a-a672-3030a1060f33", "eventTime": "2019-07-30T02:40:56Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "198.3.215.7", "userAgent": "aws-cli/1.16.206 Python/3.6.5 Darwin/18.6.0 botocore/1.12.196", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"nextToken": "eyJ2IjoiMiIsImMiOiJ3ZURjMFI3WVdobitPL2Vnb2xJcEIwQmExNmRFTVBqcXd5V0c0ZlNnbGlYbCtzeis2NmtKcG5Yc2VzbktnSCtlZnluTGZSU2FuVHlveUxXR1ZWaDdsd0pOWSt0STVGREdJbExGV3FBcHVoTHh0NFRNTStMbk9jNGVuUlB4RFZkV2ZYbWZHc3I4Y00zM09rMTRaWUNzcDkrMk9QTE9VMVd3V0FyeTZiU2pOKzZDN2V2eFBiS3pMcDRrMW5yQUQxR28zWVFyWU9BQVJHajB4QT09IiwicyI6IjEifQ==", "maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "b4c686332-4c36-4c0a-a14e-a7a96a5558ba", "record_id": "flaws_cloudtrail:0000237:b4c686332-4c36-4c0a-a14e-a7a96a5558ba", "row_index": 237, "timestamp": "2019-07-30T02:40:57Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "198.3.215.7", "user_agent": "aws-cli/1.16.206 Python/3.6.5 Darwin/18.6.0 botocore/1.12.196", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1078, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "b4c686332-4c36-4c0a-a14e-a7a96a5558ba", "eventTime": "2019-07-30T02:40:57Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "198.3.215.7", "userAgent": "aws-cli/1.16.206 Python/3.6.5 Darwin/18.6.0 botocore/1.12.196", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"nextToken": "eyJ2IjoiMiIsImMiOiJCYWhUMlRHbmZIY0F4NVRrUmtLSGM3UW1JWm0zOTNRaGRtMmVWaHVtZkJmeE5FVDE3a0RTRFYyQTNrK29GQnlrdWc2MjRrMVlEY1drRjNyM3N3d0grR1dEZ3VFN2NxZHFpdUQxTVoyS21SMFZkMS9QVDBaZW1PSDRCeTBDUzdVeW51K0EzbFVldHozOUlmV0l4YTN5VWRyb3ErQUdmU3dyS0ZGZFZoNmcxRy9MTFlYTUJCWkViZFBqSGhhM3l3R3BSMHFiUkl1bHdmenpzZz09IiwicyI6IjEifQ==", "maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "b4c686332-4c36-4c0a-a14e-a7a96a5558ba", "record_id": "flaws_cloudtrail:0000238:b4c686332-4c36-4c0a-a14e-a7a96a5558ba", "row_index": 238, "timestamp": "2019-07-30T02:40:57Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "198.3.215.7", "user_agent": "aws-cli/1.16.206 Python/3.6.5 Darwin/18.6.0 botocore/1.12.196", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1078, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "b4c686332-4c36-4c0a-a14e-a7a96a5558ba", "eventTime": "2019-07-30T02:40:57Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "198.3.215.7", "userAgent": "aws-cli/1.16.206 Python/3.6.5 Darwin/18.6.0 botocore/1.12.196", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"nextToken": "eyJ2IjoiMiIsImMiOiJCYWhUMlRHbmZIY0F4NVRrUmtLSGM3UW1JWm0zOTNRaGRtMmVWaHVtZkJmeE5FVDE3a0RTRFYyQTNrK29GQnlrdWc2MjRrMVlEY1drRjNyM3N3d0grR1dEZ3VFN2NxZHFpdUQxTVoyS21SMFZkMS9QVDBaZW1PSDRCeTBDUzdVeW51K0EzbFVldHozOUlmV0l4YTN5VWRyb3ErQUdmU3dyS0ZGZFZoNmcxRy9MTFlYTUJCWkViZFBqSGhhM3l3R3BSMHFiUkl1bHdmenpzZz09IiwicyI6IjEifQ==", "maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "ed1519d0-a7ac-4910-a0bd-d29ac8cc44e0", "record_id": "flaws_cloudtrail:0000239:ed1519d0-a7ac-4910-a0bd-d29ac8cc44e0", "row_index": 239, "timestamp": "2019-07-30T02:40:58Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "198.3.215.7", "user_agent": "aws-cli/1.16.206 Python/3.6.5 Darwin/18.6.0 botocore/1.12.196", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1097, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "ed1519d0-a7ac-4910-a0bd-d29ac8cc44e0", "eventTime": "2019-07-30T02:40:58Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "198.3.215.7", "userAgent": "aws-cli/1.16.206 Python/3.6.5 Darwin/18.6.0 botocore/1.12.196", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"nextToken": "eyJ2IjoiMiIsImMiOiJHR0VNVjduSGlwNHY4cHAvTDNlUkZqSmhXajloWkNPb29kbVJGR1lBR3kwTmFnNHNqampkK0Z5QllZV1hJQnU0WUlxQk9VQjhoYldHT1ZZS2pHdkREM05xTm5tK2Y3YTJWd2VLSno0OHgwU0pjZVkva2VYZjlWNHB5SDlzNVdldGZzVGpKd3dnWk5Od08weDV5V2FiUUJFTnZCRVpOelVmRWFQLzNzZEpUa1RCQ2F6cEdjOVcxZkh6VUFKWTloVWxYbVNyNGdVUWg2eGxPc2ZLRkpWcENtVUhRbWRlN1hzPSIsInMiOiIxIn0=", "maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "ed1519d0-a7ac-4910-a0bd-d29ac8cc44e0", "record_id": "flaws_cloudtrail:0000240:ed1519d0-a7ac-4910-a0bd-d29ac8cc44e0", "row_index": 240, "timestamp": "2019-07-30T02:40:58Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "198.3.215.7", "user_agent": "aws-cli/1.16.206 Python/3.6.5 Darwin/18.6.0 botocore/1.12.196", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1097, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "ed1519d0-a7ac-4910-a0bd-d29ac8cc44e0", "eventTime": "2019-07-30T02:40:58Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "198.3.215.7", "userAgent": "aws-cli/1.16.206 Python/3.6.5 Darwin/18.6.0 botocore/1.12.196", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"nextToken": "eyJ2IjoiMiIsImMiOiJHR0VNVjduSGlwNHY4cHAvTDNlUkZqSmhXajloWkNPb29kbVJGR1lBR3kwTmFnNHNqampkK0Z5QllZV1hJQnU0WUlxQk9VQjhoYldHT1ZZS2pHdkREM05xTm5tK2Y3YTJWd2VLSno0OHgwU0pjZVkva2VYZjlWNHB5SDlzNVdldGZzVGpKd3dnWk5Od08weDV5V2FiUUJFTnZCRVpOelVmRWFQLzNzZEpUa1RCQ2F6cEdjOVcxZkh6VUFKWTloVWxYbVNyNGdVUWg2eGxPc2ZLRkpWcENtVUhRbWRlN1hzPSIsInMiOiIxIn0=", "maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "3472f183-85fd-4a56-824a-784ebe4a7cfd", "record_id": "flaws_cloudtrail:0000241:3472f183-85fd-4a56-824a-784ebe4a7cfd", "row_index": 241, "timestamp": "2019-07-30T02:40:59Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "198.3.215.7", "user_agent": "aws-cli/1.16.206 Python/3.6.5 Darwin/18.6.0 botocore/1.12.196", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1085, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "3472f183-85fd-4a56-824a-784ebe4a7cfd", "eventTime": "2019-07-30T02:40:59Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "198.3.215.7", "userAgent": "aws-cli/1.16.206 Python/3.6.5 Darwin/18.6.0 botocore/1.12.196", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"nextToken": "eyJ2IjoiMiIsImMiOiJBUXVObFJaT0wvVGI5T2U3dkdXVEZaZ0xUREMyQkdCQ3dYcDJEZG5FREdKeGlsQ3V6eXJZam5QRzY4V3IzR2Evb1JkcjFzU3d0UDYvYzFxRVV2SDZCSTAva1hPQ3JnSkJ5dFVDc2Y3Sm9qenFqbDdIbDI4a3R6dk5ic01Jd0s0Tm9xR0wyamNnWW9jb0V3NXkxdjJJcFIwNjNtUkZJQWwyaWZIMyswSGwrbkVlRWg3OElOUGhud2QxUVAxMVBRQ1IyRFlreFhaVTJUR0NRejJJaENqKzRBPT0iLCJzIjoiMSJ9", "maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "186aee35-252f-4256-8339-a3bfa3b0c88b", "record_id": "flaws_cloudtrail:0000242:186aee35-252f-4256-8339-a3bfa3b0c88b", "row_index": 242, "timestamp": "2019-07-30T02:40:59Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "198.3.215.7", "user_agent": "aws-cli/1.16.206 Python/3.6.5 Darwin/18.6.0 botocore/1.12.196", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1097, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "186aee35-252f-4256-8339-a3bfa3b0c88b", "eventTime": "2019-07-30T02:40:59Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "198.3.215.7", "userAgent": "aws-cli/1.16.206 Python/3.6.5 Darwin/18.6.0 botocore/1.12.196", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"nextToken": "eyJ2IjoiMiIsImMiOiJUTkRYSXJEVlVicHFYRDEyZGNuNXp6a3FONU5pdHJDbXdhUmNyWGwxWHdhRlFEOGlUR1BQbUhOV1FRRUlCcDJBaGc5d3FMWmFvNVBlck10a095M2hJR3pLaHJybnUrNnhiQzFBRzVuaGRDV0I3NGI2SWdzc2x2SkVvTmlTVVVUOGQzcG9BaldCY3pHcVNvZWdhZERyMVZFL255bTlaSmZpQjJBSHRkNkUxVUNwV3NaZkoyckswS1lLb3M1TWhlYkswak1Rb2pwdWtEUkVqZ2g5clA3YmcvNU5JUm1wUlRBPSIsInMiOiIxIn0=", "maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "3472f183-85fd-4a56-824a-784ebe4a7cfd", "record_id": "flaws_cloudtrail:0000243:3472f183-85fd-4a56-824a-784ebe4a7cfd", "row_index": 243, "timestamp": "2019-07-30T02:40:59Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "198.3.215.7", "user_agent": "aws-cli/1.16.206 Python/3.6.5 Darwin/18.6.0 botocore/1.12.196", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1085, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "3472f183-85fd-4a56-824a-784ebe4a7cfd", "eventTime": "2019-07-30T02:40:59Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "198.3.215.7", "userAgent": "aws-cli/1.16.206 Python/3.6.5 Darwin/18.6.0 botocore/1.12.196", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"nextToken": "eyJ2IjoiMiIsImMiOiJBUXVObFJaT0wvVGI5T2U3dkdXVEZaZ0xUREMyQkdCQ3dYcDJEZG5FREdKeGlsQ3V6eXJZam5QRzY4V3IzR2Evb1JkcjFzU3d0UDYvYzFxRVV2SDZCSTAva1hPQ3JnSkJ5dFVDc2Y3Sm9qenFqbDdIbDI4a3R6dk5ic01Jd0s0Tm9xR0wyamNnWW9jb0V3NXkxdjJJcFIwNjNtUkZJQWwyaWZIMyswSGwrbkVlRWg3OElOUGhud2QxUVAxMVBRQ1IyRFlreFhaVTJUR0NRejJJaENqKzRBPT0iLCJzIjoiMSJ9", "maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "186aee35-252f-4256-8339-a3bfa3b0c88b", "record_id": "flaws_cloudtrail:0000244:186aee35-252f-4256-8339-a3bfa3b0c88b", "row_index": 244, "timestamp": "2019-07-30T02:40:59Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "198.3.215.7", "user_agent": "aws-cli/1.16.206 Python/3.6.5 Darwin/18.6.0 botocore/1.12.196", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1097, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "186aee35-252f-4256-8339-a3bfa3b0c88b", "eventTime": "2019-07-30T02:40:59Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "198.3.215.7", "userAgent": "aws-cli/1.16.206 Python/3.6.5 Darwin/18.6.0 botocore/1.12.196", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"nextToken": "eyJ2IjoiMiIsImMiOiJUTkRYSXJEVlVicHFYRDEyZGNuNXp6a3FONU5pdHJDbXdhUmNyWGwxWHdhRlFEOGlUR1BQbUhOV1FRRUlCcDJBaGc5d3FMWmFvNVBlck10a095M2hJR3pLaHJybnUrNnhiQzFBRzVuaGRDV0I3NGI2SWdzc2x2SkVvTmlTVVVUOGQzcG9BaldCY3pHcVNvZWdhZERyMVZFL255bTlaSmZpQjJBSHRkNkUxVUNwV3NaZkoyckswS1lLb3M1TWhlYkswak1Rb2pwdWtEUkVqZ2g5clA3YmcvNU5JUm1wUlRBPSIsInMiOiIxIn0=", "maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "8b911253-1255-46b1-a5d1-88ca2d6f81bc", "record_id": "flaws_cloudtrail:0000245:8b911253-1255-46b1-a5d1-88ca2d6f81bc", "row_index": 245, "timestamp": "2019-07-30T02:41:00Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "198.3.215.7", "user_agent": "aws-cli/1.16.206 Python/3.6.5 Darwin/18.6.0 botocore/1.12.196", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1053, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "8b911253-1255-46b1-a5d1-88ca2d6f81bc", "eventTime": "2019-07-30T02:41:00Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "198.3.215.7", "userAgent": "aws-cli/1.16.206 Python/3.6.5 Darwin/18.6.0 botocore/1.12.196", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"nextToken": "eyJ2IjoiMiIsImMiOiI0UTRZdGtHMU5sWWJrOUhGZ24rd2UzV0tSSjRRdEhMNGErYTkvWWlDcDNINVBkQWsxKzc4azRTdE11RFI4SDBWNU1ENFJRaSs0MWdMS3lvMmd2RmxwYk1DUGw0V085NytjWHdnSmozc0xKb2gzV29uRjJESWVJWWFuSTlzMTgrekh6NUl5RnRJYnRUMUFUUEtLdUcrSkZ3Yk0wVmhPSFFhNzRZQzkyaG5Db01Sd2VnRWRnMXhQU2ZzTkttb3JyUT0iLCJzIjoiMSJ9", "maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "8b911253-1255-46b1-a5d1-88ca2d6f81bc", "record_id": "flaws_cloudtrail:0000246:8b911253-1255-46b1-a5d1-88ca2d6f81bc", "row_index": 246, "timestamp": "2019-07-30T02:41:00Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "198.3.215.7", "user_agent": "aws-cli/1.16.206 Python/3.6.5 Darwin/18.6.0 botocore/1.12.196", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1053, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "8b911253-1255-46b1-a5d1-88ca2d6f81bc", "eventTime": "2019-07-30T02:41:00Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "198.3.215.7", "userAgent": "aws-cli/1.16.206 Python/3.6.5 Darwin/18.6.0 botocore/1.12.196", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"nextToken": "eyJ2IjoiMiIsImMiOiI0UTRZdGtHMU5sWWJrOUhGZ24rd2UzV0tSSjRRdEhMNGErYTkvWWlDcDNINVBkQWsxKzc4azRTdE11RFI4SDBWNU1ENFJRaSs0MWdMS3lvMmd2RmxwYk1DUGw0V085NytjWHdnSmozc0xKb2gzV29uRjJESWVJWWFuSTlzMTgrekh6NUl5RnRJYnRUMUFUUEtLdUcrSkZ3Yk0wVmhPSFFhNzRZQzkyaG5Db01Sd2VnRWRnMXhQU2ZzTkttb3JyUT0iLCJzIjoiMSJ9", "maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "d8ad4e09-a32a-498a-b0c7-9ecbb2202a39", "record_id": "flaws_cloudtrail:0000247:d8ad4e09-a32a-498a-b0c7-9ecbb2202a39", "row_index": 247, "timestamp": "2019-07-30T02:41:01Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "198.3.215.7", "user_agent": "aws-cli/1.16.206 Python/3.6.5 Darwin/18.6.0 botocore/1.12.196", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1097, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "d8ad4e09-a32a-498a-b0c7-9ecbb2202a39", "eventTime": "2019-07-30T02:41:01Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "198.3.215.7", "userAgent": "aws-cli/1.16.206 Python/3.6.5 Darwin/18.6.0 botocore/1.12.196", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"nextToken": "eyJ2IjoiMiIsImMiOiJHdS9EZ1Jyejd2WUVxNXd4Q1dDQWhiMXNPQUZudEw1OFJZd0kxT0ZVeVdGMkJSbHZBdVpDSWhuSWlBU3BJL29GQmhORThUUmN2SzJUSTdMTEp6Z1k5ejNUNG1YcmZMUFg2czMwREQ5YVM0T0pJVkE5MUNIWERSeld0YXNHeG1yZEVJVS9QZFBmaXo0Tjhjc01YaGNVM3JpNTNjMjFVZGxnZ2MzMURtcVNvbFJveWxpQ3VXQ1ZpT1NzeEN4NW5GYkUzZG03OHQ0SWtHS09wNXgzMkZtWDhjc0pEenN1M3dBPSIsInMiOiIxIn0=", "maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "d8ad4e09-a32a-498a-b0c7-9ecbb2202a39", "record_id": "flaws_cloudtrail:0000248:d8ad4e09-a32a-498a-b0c7-9ecbb2202a39", "row_index": 248, "timestamp": "2019-07-30T02:41:01Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "198.3.215.7", "user_agent": "aws-cli/1.16.206 Python/3.6.5 Darwin/18.6.0 botocore/1.12.196", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1097, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "d8ad4e09-a32a-498a-b0c7-9ecbb2202a39", "eventTime": "2019-07-30T02:41:01Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "198.3.215.7", "userAgent": "aws-cli/1.16.206 Python/3.6.5 Darwin/18.6.0 botocore/1.12.196", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"nextToken": "eyJ2IjoiMiIsImMiOiJHdS9EZ1Jyejd2WUVxNXd4Q1dDQWhiMXNPQUZudEw1OFJZd0kxT0ZVeVdGMkJSbHZBdVpDSWhuSWlBU3BJL29GQmhORThUUmN2SzJUSTdMTEp6Z1k5ejNUNG1YcmZMUFg2czMwREQ5YVM0T0pJVkE5MUNIWERSeld0YXNHeG1yZEVJVS9QZFBmaXo0Tjhjc01YaGNVM3JpNTNjMjFVZGxnZ2MzMURtcVNvbFJveWxpQ3VXQ1ZpT1NzeEN4NW5GYkUzZG03OHQ0SWtHS09wNXgzMkZtWDhjc0pEenN1M3dBPSIsInMiOiIxIn0=", "maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "f8015ecb-cd5d-4d07-b13b-ac590621f1c4", "record_id": "flaws_cloudtrail:0000249:f8015ecb-cd5d-4d07-b13b-ac590621f1c4", "row_index": 249, "timestamp": "2019-07-30T02:41:02Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "198.3.215.7", "user_agent": "aws-cli/1.16.206 Python/3.6.5 Darwin/18.6.0 botocore/1.12.196", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1085, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "f8015ecb-cd5d-4d07-b13b-ac590621f1c4", "eventTime": "2019-07-30T02:41:02Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "198.3.215.7", "userAgent": "aws-cli/1.16.206 Python/3.6.5 Darwin/18.6.0 botocore/1.12.196", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"nextToken": "eyJ2IjoiMiIsImMiOiJaV1lrQ0dWaXpqQzZCM2l2Vk53QWl4VFk2KzN3SkxzUFN1cStnUldiWWlFMTU3MGp4TytEVVhESDliRHU1elVaTUo2K3IyZ2hNK0VCRDczNUJ1TVFJSHg3MWVNQWtEU2l5bTU4STlQQ3NjZGtMTkhkalFwZDl2aWt5L3o2WXRxVnppZ3IxOUM4NU1qMzJzaGdST1dta2F1Z3VLdmJaaWY5VkFRTHJpTTU1b1RyblNmQnpMS2kxcG1sUzdMdFVkRDdJcWVXdTkxQm1GZjJ3QUNJUzFmUlZBPT0iLCJzIjoiMSJ9", "maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "f8015ecb-cd5d-4d07-b13b-ac590621f1c4", "record_id": "flaws_cloudtrail:0000250:f8015ecb-cd5d-4d07-b13b-ac590621f1c4", "row_index": 250, "timestamp": "2019-07-30T02:41:02Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "198.3.215.7", "user_agent": "aws-cli/1.16.206 Python/3.6.5 Darwin/18.6.0 botocore/1.12.196", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1085, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "f8015ecb-cd5d-4d07-b13b-ac590621f1c4", "eventTime": "2019-07-30T02:41:02Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "198.3.215.7", "userAgent": "aws-cli/1.16.206 Python/3.6.5 Darwin/18.6.0 botocore/1.12.196", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"nextToken": "eyJ2IjoiMiIsImMiOiJaV1lrQ0dWaXpqQzZCM2l2Vk53QWl4VFk2KzN3SkxzUFN1cStnUldiWWlFMTU3MGp4TytEVVhESDliRHU1elVaTUo2K3IyZ2hNK0VCRDczNUJ1TVFJSHg3MWVNQWtEU2l5bTU4STlQQ3NjZGtMTkhkalFwZDl2aWt5L3o2WXRxVnppZ3IxOUM4NU1qMzJzaGdST1dta2F1Z3VLdmJaaWY5VkFRTHJpTTU1b1RyblNmQnpMS2kxcG1sUzdMdFVkRDdJcWVXdTkxQm1GZjJ3QUNJUzFmUlZBPT0iLCJzIjoiMSJ9", "maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "920b3d29-9db1-43ce-bae3-ce392ecb8a51", "record_id": "flaws_cloudtrail:0000251:920b3d29-9db1-43ce-bae3-ce392ecb8a51", "row_index": 251, "timestamp": "2019-07-30T02:41:03Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "198.3.215.7", "user_agent": "aws-cli/1.16.206 Python/3.6.5 Darwin/18.6.0 botocore/1.12.196", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1085, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "920b3d29-9db1-43ce-bae3-ce392ecb8a51", "eventTime": "2019-07-30T02:41:03Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "198.3.215.7", "userAgent": "aws-cli/1.16.206 Python/3.6.5 Darwin/18.6.0 botocore/1.12.196", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"nextToken": "eyJ2IjoiMiIsImMiOiJCblNmYlVxL3NqaTVaSDNwYW9wTGErVDM0Umkyb1hJQ2pSSGM2Nml3c1Fscm01ZklsUUJEUG1EYVJhUVhPa1UvVWlUSnpFMTlqWXZ5SlI4UGZoRGdnWnJlUDZrQmc5K0VnMi9BZzR1dDdJTFNVdEFqOXRRK2NLSm9FRzBnQTZJb2xoT0pNS1V0NnlVQUJ6Y2RYS29NcDZvbGpEUno5OXo3VmxXczl2MHA0bTZqR2RNVUhaeUNyYlRyZjhITnFzTWdNWHhjdGJQVXVyNTU1dEJGRDQ1YlRRPT0iLCJzIjoiMSJ9", "maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "38c0eb48-76a7-4185-a3b7-a76cd704a9cf", "record_id": "flaws_cloudtrail:0000252:38c0eb48-76a7-4185-a3b7-a76cd704a9cf", "row_index": 252, "timestamp": "2019-07-30T02:41:03Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "198.3.215.7", "user_agent": "aws-cli/1.16.206 Python/3.6.5 Darwin/18.6.0 botocore/1.12.196", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1097, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "38c0eb48-76a7-4185-a3b7-a76cd704a9cf", "eventTime": "2019-07-30T02:41:03Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "198.3.215.7", "userAgent": "aws-cli/1.16.206 Python/3.6.5 Darwin/18.6.0 botocore/1.12.196", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"nextToken": "eyJ2IjoiMiIsImMiOiJLeXdyYU80aldaQUF6YUVXVzczT0ZzSFBVK21uSWduMFdFUVpEbUhlZk1nbFc5d3VLUUg2NE5VaGRyMjdZNGJMemx6TEo0Y1psUHFkU3hmSEd3Z213ZGVyUWNnQWFzWDlkZ2JlaEhPZ2g2MUxlTTJ3aGlkMndleG1EaE9ibnFobkpIcHg1OWtvK3pLRUc5TGtrTU9ZMmNOOUhTRDB4ZklRMEhjNlhjS3lqdmh0cGFkbHlOQzF1TkZnN1JpRVdnOXhPT1VnemhSWU9tdUM1OWNOUkk1MUVacGhYSWZncDk4PSIsInMiOiIxIn0=", "maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "920b3d29-9db1-43ce-bae3-ce392ecb8a51", "record_id": "flaws_cloudtrail:0000253:920b3d29-9db1-43ce-bae3-ce392ecb8a51", "row_index": 253, "timestamp": "2019-07-30T02:41:03Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "198.3.215.7", "user_agent": "aws-cli/1.16.206 Python/3.6.5 Darwin/18.6.0 botocore/1.12.196", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1085, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "920b3d29-9db1-43ce-bae3-ce392ecb8a51", "eventTime": "2019-07-30T02:41:03Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "198.3.215.7", "userAgent": "aws-cli/1.16.206 Python/3.6.5 Darwin/18.6.0 botocore/1.12.196", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"nextToken": "eyJ2IjoiMiIsImMiOiJCblNmYlVxL3NqaTVaSDNwYW9wTGErVDM0Umkyb1hJQ2pSSGM2Nml3c1Fscm01ZklsUUJEUG1EYVJhUVhPa1UvVWlUSnpFMTlqWXZ5SlI4UGZoRGdnWnJlUDZrQmc5K0VnMi9BZzR1dDdJTFNVdEFqOXRRK2NLSm9FRzBnQTZJb2xoT0pNS1V0NnlVQUJ6Y2RYS29NcDZvbGpEUno5OXo3VmxXczl2MHA0bTZqR2RNVUhaeUNyYlRyZjhITnFzTWdNWHhjdGJQVXVyNTU1dEJGRDQ1YlRRPT0iLCJzIjoiMSJ9", "maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "38c0eb48-76a7-4185-a3b7-a76cd704a9cf", "record_id": "flaws_cloudtrail:0000254:38c0eb48-76a7-4185-a3b7-a76cd704a9cf", "row_index": 254, "timestamp": "2019-07-30T02:41:03Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "198.3.215.7", "user_agent": "aws-cli/1.16.206 Python/3.6.5 Darwin/18.6.0 botocore/1.12.196", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1097, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "38c0eb48-76a7-4185-a3b7-a76cd704a9cf", "eventTime": "2019-07-30T02:41:03Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "198.3.215.7", "userAgent": "aws-cli/1.16.206 Python/3.6.5 Darwin/18.6.0 botocore/1.12.196", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"nextToken": "eyJ2IjoiMiIsImMiOiJLeXdyYU80aldaQUF6YUVXVzczT0ZzSFBVK21uSWduMFdFUVpEbUhlZk1nbFc5d3VLUUg2NE5VaGRyMjdZNGJMemx6TEo0Y1psUHFkU3hmSEd3Z213ZGVyUWNnQWFzWDlkZ2JlaEhPZ2g2MUxlTTJ3aGlkMndleG1EaE9ibnFobkpIcHg1OWtvK3pLRUc5TGtrTU9ZMmNOOUhTRDB4ZklRMEhjNlhjS3lqdmh0cGFkbHlOQzF1TkZnN1JpRVdnOXhPT1VnemhSWU9tdUM1OWNOUkk1MUVacGhYSWZncDk4PSIsInMiOiIxIn0=", "maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "dab771f9-48ee-48c5-95fa-5d31c29f4d0f", "record_id": "flaws_cloudtrail:0000255:dab771f9-48ee-48c5-95fa-5d31c29f4d0f", "row_index": 255, "timestamp": "2019-07-30T02:41:04Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "198.3.215.7", "user_agent": "aws-cli/1.16.206 Python/3.6.5 Darwin/18.6.0 botocore/1.12.196", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1097, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "dab771f9-48ee-48c5-95fa-5d31c29f4d0f", "eventTime": "2019-07-30T02:41:04Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "198.3.215.7", "userAgent": "aws-cli/1.16.206 Python/3.6.5 Darwin/18.6.0 botocore/1.12.196", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"nextToken": "eyJ2IjoiMiIsImMiOiJYMDc2a0NYaG9nVmVIN2ZRL0N0TENIcE1FaG9UYXowcEtGZTl6OWlqQU10SndZNWdaUFNGcGVlNERjVUx5Z2RJdEUwZHFUNnYxMVJ4ZVNDbGN2VVVGdHJsUXVjYThvU2dnYW8rQThQeTBzRWNFd29qNTM2UHlmQnlGRkFFaDNDdzlRbkdaWG1wRld3MTdoU2lqWFhkVDF3ckJhT0k2R1RVZGtwTHFBNXJvTU1NYWFMdTgrQy9BZ2t5ZW1nSTdkbnFIbHRQTkV4MDRtWHAxM1JFT0M4TURLSEw5VHRURm9VPSIsInMiOiIxIn0=", "maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "dab771f9-48ee-48c5-95fa-5d31c29f4d0f", "record_id": "flaws_cloudtrail:0000256:dab771f9-48ee-48c5-95fa-5d31c29f4d0f", "row_index": 256, "timestamp": "2019-07-30T02:41:04Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "198.3.215.7", "user_agent": "aws-cli/1.16.206 Python/3.6.5 Darwin/18.6.0 botocore/1.12.196", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1097, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "dab771f9-48ee-48c5-95fa-5d31c29f4d0f", "eventTime": "2019-07-30T02:41:04Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "198.3.215.7", "userAgent": "aws-cli/1.16.206 Python/3.6.5 Darwin/18.6.0 botocore/1.12.196", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"nextToken": "eyJ2IjoiMiIsImMiOiJYMDc2a0NYaG9nVmVIN2ZRL0N0TENIcE1FaG9UYXowcEtGZTl6OWlqQU10SndZNWdaUFNGcGVlNERjVUx5Z2RJdEUwZHFUNnYxMVJ4ZVNDbGN2VVVGdHJsUXVjYThvU2dnYW8rQThQeTBzRWNFd29qNTM2UHlmQnlGRkFFaDNDdzlRbkdaWG1wRld3MTdoU2lqWFhkVDF3ckJhT0k2R1RVZGtwTHFBNXJvTU1NYWFMdTgrQy9BZ2t5ZW1nSTdkbnFIbHRQTkV4MDRtWHAxM1JFT0M4TURLSEw5VHRURm9VPSIsInMiOiIxIn0=", "maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "7ef15d39-c52f-43a0-9a2b-a847e84c5d75", "record_id": "flaws_cloudtrail:0000257:7ef15d39-c52f-43a0-9a2b-a847e84c5d75", "row_index": 257, "timestamp": "2019-07-30T02:41:05Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "198.3.215.7", "user_agent": "aws-cli/1.16.206 Python/3.6.5 Darwin/18.6.0 botocore/1.12.196", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1053, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "7ef15d39-c52f-43a0-9a2b-a847e84c5d75", "eventTime": "2019-07-30T02:41:05Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "198.3.215.7", "userAgent": "aws-cli/1.16.206 Python/3.6.5 Darwin/18.6.0 botocore/1.12.196", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"nextToken": "eyJ2IjoiMiIsImMiOiI4WmJVT0pic0FraHNWam1vV3NIYVljVmRTSi9wR0VFbFlqVUpSMUd2SnZOR25WMHIrSnJvNW1EMU04L0gwUVBpTmNkNVNDMlVUaVFGS2hsSFlEZnlnWWdWaFN2TnVRTForWG1lZ00wN0YrWmZ4Qk9NUkFVN1ErcXQ3TnVjdzEySXBpSzFMTDRtRWc0S2RyLy85VThjaU5aWjRhWVFub1hRUFI3ZUZZTml0Yy9lUnFVVERBdmw4T1VUV1hSS0Vuaz0iLCJzIjoiMSJ9", "maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "7ef15d39-c52f-43a0-9a2b-a847e84c5d75", "record_id": "flaws_cloudtrail:0000258:7ef15d39-c52f-43a0-9a2b-a847e84c5d75", "row_index": 258, "timestamp": "2019-07-30T02:41:05Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "198.3.215.7", "user_agent": "aws-cli/1.16.206 Python/3.6.5 Darwin/18.6.0 botocore/1.12.196", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1053, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "7ef15d39-c52f-43a0-9a2b-a847e84c5d75", "eventTime": "2019-07-30T02:41:05Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "198.3.215.7", "userAgent": "aws-cli/1.16.206 Python/3.6.5 Darwin/18.6.0 botocore/1.12.196", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"nextToken": "eyJ2IjoiMiIsImMiOiI4WmJVT0pic0FraHNWam1vV3NIYVljVmRTSi9wR0VFbFlqVUpSMUd2SnZOR25WMHIrSnJvNW1EMU04L0gwUVBpTmNkNVNDMlVUaVFGS2hsSFlEZnlnWWdWaFN2TnVRTForWG1lZ00wN0YrWmZ4Qk9NUkFVN1ErcXQ3TnVjdzEySXBpSzFMTDRtRWc0S2RyLy85VThjaU5aWjRhWVFub1hRUFI3ZUZZTml0Yy9lUnFVVERBdmw4T1VUV1hSS0Vuaz0iLCJzIjoiMSJ9", "maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "d2f99e01-23ff-4598-9ac1-d6bae7392a6a", "record_id": "flaws_cloudtrail:0000259:d2f99e01-23ff-4598-9ac1-d6bae7392a6a", "row_index": 259, "timestamp": "2019-07-30T02:47:11Z", "event_type": "DescribeWorkspaceBundles", "event_source": "workspaces.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "198.3.215.7", "user_agent": "aws-cli/1.16.206 Python/3.6.5 Darwin/18.6.0 botocore/1.12.196", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 907, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "d2f99e01-23ff-4598-9ac1-d6bae7392a6a", "eventTime": "2019-07-30T02:47:11Z", "eventName": "DescribeWorkspaceBundles", "eventSource": "workspaces.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "198.3.215.7", "userAgent": "aws-cli/1.16.206 Python/3.6.5 Darwin/18.6.0 botocore/1.12.196", "awsRegion": "us-west-2", "errorCode": "AccessDenied", "errorMessage": "User: arn:aws:iam::811596193553:user/backup is not authorized to perform: workspaces:DescribeWorkspaceBundles on resource: arn:aws:workspaces:us-west-2:811596193553:workspacebundle/*", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "d2f99e01-23ff-4598-9ac1-d6bae7392a6a", "record_id": "flaws_cloudtrail:0000260:d2f99e01-23ff-4598-9ac1-d6bae7392a6a", "row_index": 260, "timestamp": "2019-07-30T02:47:11Z", "event_type": "DescribeWorkspaceBundles", "event_source": "workspaces.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "198.3.215.7", "user_agent": "aws-cli/1.16.206 Python/3.6.5 Darwin/18.6.0 botocore/1.12.196", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 907, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "d2f99e01-23ff-4598-9ac1-d6bae7392a6a", "eventTime": "2019-07-30T02:47:11Z", "eventName": "DescribeWorkspaceBundles", "eventSource": "workspaces.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "198.3.215.7", "userAgent": "aws-cli/1.16.206 Python/3.6.5 Darwin/18.6.0 botocore/1.12.196", "awsRegion": "us-west-2", "errorCode": "AccessDenied", "errorMessage": "User: arn:aws:iam::811596193553:user/backup is not authorized to perform: workspaces:DescribeWorkspaceBundles on resource: arn:aws:workspaces:us-west-2:811596193553:workspacebundle/*", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "b625935-aa1f-4197-99ee-e7ed590e5bb9", "record_id": "flaws_cloudtrail:0000261:b625935-aa1f-4197-99ee-e7ed590e5bb9", "row_index": 261, "timestamp": "2019-07-30T02:48:55Z", "event_type": "ListBuckets", "event_source": "s3.amazonaws.com", "principal": {"type": "AssumedRole", "arn": "arn:aws:sts::811596193553:assumed-role/flaws/i-aa2d3b42e5c6e801a", "account_id": "811596193553", "principal_id": "AROACW5CSA8C8WHOB3O7Q:i-aa2d3b42e5c6e801a", "user_name": null, "access_key_id": "ASIA0EU6XJZ6W1QZJJAW", "session_issuer_arn": "arn:aws:iam::811596193553:role/flaws", "session_issuer_user_name": "flaws"}, "network": {"source_ip": "140.178.2.6", "user_agent": "[aws-cli/1.16.131 Python/3.7.1 Darwin/18.7.0 botocore/1.12.121]", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1156, "raw_record_depth": 4, "raw_record_top_level_keys": ["additionalEventData", "awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "b625935-aa1f-4197-99ee-e7ed590e5bb9", "eventTime": "2019-07-30T02:48:55Z", "eventName": "ListBuckets", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "140.178.2.6", "userAgent": "[aws-cli/1.16.131 Python/3.7.1 Darwin/18.7.0 botocore/1.12.121]", "awsRegion": "us-west-2", "errorCode": "AccessDenied", "errorMessage": "Access Denied", "userIdentity": {"type": "AssumedRole", "principalId": "AROACW5CSA8C8WHOB3O7Q:i-aa2d3b42e5c6e801a", "arn": "arn:aws:sts::811596193553:assumed-role/flaws/i-aa2d3b42e5c6e801a", "accountId": "811596193553", "accessKeyId": "ASIA0EU6XJZ6W1QZJJAW", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2019-07-30T02:31:35Z"}, "sessionIssuer": {"type": "Role", "principalId": "AROACW5CSA8C8WHOB3O7Q", "arn": "arn:aws:iam::811596193553:role/flaws", "accountId": "811596193553", "userName": "flaws"}}}, "requestParameters": {"host": ["s3.us-west-2.amazonaws.com"]}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "b625935-aa1f-4197-99ee-e7ed590e5bb9", "record_id": "flaws_cloudtrail:0000262:b625935-aa1f-4197-99ee-e7ed590e5bb9", "row_index": 262, "timestamp": "2019-07-30T02:48:55Z", "event_type": "ListBuckets", "event_source": "s3.amazonaws.com", "principal": {"type": "AssumedRole", "arn": "arn:aws:sts::811596193553:assumed-role/flaws/i-aa2d3b42e5c6e801a", "account_id": "811596193553", "principal_id": "AROACW5CSA8C8WHOB3O7Q:i-aa2d3b42e5c6e801a", "user_name": null, "access_key_id": "ASIA0EU6XJZ6W1QZJJAW", "session_issuer_arn": "arn:aws:iam::811596193553:role/flaws", "session_issuer_user_name": "flaws"}, "network": {"source_ip": "140.178.2.6", "user_agent": "[aws-cli/1.16.131 Python/3.7.1 Darwin/18.7.0 botocore/1.12.121]", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1156, "raw_record_depth": 4, "raw_record_top_level_keys": ["additionalEventData", "awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "b625935-aa1f-4197-99ee-e7ed590e5bb9", "eventTime": "2019-07-30T02:48:55Z", "eventName": "ListBuckets", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "140.178.2.6", "userAgent": "[aws-cli/1.16.131 Python/3.7.1 Darwin/18.7.0 botocore/1.12.121]", "awsRegion": "us-west-2", "errorCode": "AccessDenied", "errorMessage": "Access Denied", "userIdentity": {"type": "AssumedRole", "principalId": "AROACW5CSA8C8WHOB3O7Q:i-aa2d3b42e5c6e801a", "arn": "arn:aws:sts::811596193553:assumed-role/flaws/i-aa2d3b42e5c6e801a", "accountId": "811596193553", "accessKeyId": "ASIA0EU6XJZ6W1QZJJAW", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2019-07-30T02:31:35Z"}, "sessionIssuer": {"type": "Role", "principalId": "AROACW5CSA8C8WHOB3O7Q", "arn": "arn:aws:iam::811596193553:role/flaws", "accountId": "811596193553", "userName": "flaws"}}}, "requestParameters": {"host": ["s3.us-west-2.amazonaws.com"]}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "e086817-f66f-4044-a190-16f990d7d360", "record_id": "flaws_cloudtrail:0000263:e086817-f66f-4044-a190-16f990d7d360", "row_index": 263, "timestamp": "2019-07-30T02:52:13Z", "event_type": "CreatePolicy", "event_source": "iam.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "198.3.215.7", "user_agent": "aws-cli/1.16.206 Python/3.6.5 Darwin/18.6.0 botocore/1.12.196", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 829, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "e086817-f66f-4044-a190-16f990d7d360", "eventTime": "2019-07-30T02:52:13Z", "eventName": "CreatePolicy", "eventSource": "iam.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "198.3.215.7", "userAgent": "aws-cli/1.16.206 Python/3.6.5 Darwin/18.6.0 botocore/1.12.196", "awsRegion": "us-east-1", "errorCode": "AccessDenied", "errorMessage": "User: arn:aws:iam::811596193553:user/backup is not authorized to perform: iam:CreatePolicy on resource: policy test-create", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "e086817-f66f-4044-a190-16f990d7d360", "record_id": "flaws_cloudtrail:0000264:e086817-f66f-4044-a190-16f990d7d360", "row_index": 264, "timestamp": "2019-07-30T02:52:13Z", "event_type": "CreatePolicy", "event_source": "iam.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "198.3.215.7", "user_agent": "aws-cli/1.16.206 Python/3.6.5 Darwin/18.6.0 botocore/1.12.196", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 829, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "e086817-f66f-4044-a190-16f990d7d360", "eventTime": "2019-07-30T02:52:13Z", "eventName": "CreatePolicy", "eventSource": "iam.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "198.3.215.7", "userAgent": "aws-cli/1.16.206 Python/3.6.5 Darwin/18.6.0 botocore/1.12.196", "awsRegion": "us-east-1", "errorCode": "AccessDenied", "errorMessage": "User: arn:aws:iam::811596193553:user/backup is not authorized to perform: iam:CreatePolicy on resource: policy test-create", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "e342be25-95f0-4421-9466-8ea113d16999", "record_id": "flaws_cloudtrail:0000265:e342be25-95f0-4421-9466-8ea113d16999", "row_index": 265, "timestamp": "2019-07-30T02:52:47Z", "event_type": "GetSessionToken", "event_source": "sts.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "140.178.2.6", "user_agent": "aws-sdk-go/1.4.14 (go1.11.4; darwin; amd64)", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 1052, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "e342be25-95f0-4421-9466-8ea113d16999", "eventTime": "2019-07-30T02:52:47Z", "eventName": "GetSessionToken", "eventSource": "sts.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "140.178.2.6", "userAgent": "aws-sdk-go/1.4.14 (go1.11.4; darwin; amd64)", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"durationSeconds": 14400}, "responseElements": {"credentials": {"accessKeyId": "ASIA1DVC1KONNOA1CHJ2", "expiration": "Jul 30, 2019 6:52:47 AM", "sessionToken": "FQoGZXIvYXdzEBwaDETWOdAw38szQis5vCKrAZBcD+SspA3dd7A8FclBzpUw3uEtOsq3LVI0jyddvJHIZKUrFFBQRcf2qYi/drvsTJLj5N5vI7Z+oO1cBm3TqcMSpdmiMphKFWbVvf4fFOiNnAfuY0NJ3EzyN3qqP9IqO9KcvBBOfT/89GpFN28Ra1FQNGhNyFrzeOml0kzgVJHV3H5maBLJIjY1CaBay7h9V3gyJXUDaGwt9HStlQUC0rMFUpZY7xI8LbP/Ayj/4f7pBQ=="}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "e342be25-95f0-4421-9466-8ea113d16999", "record_id": "flaws_cloudtrail:0000266:e342be25-95f0-4421-9466-8ea113d16999", "row_index": 266, "timestamp": "2019-07-30T02:52:47Z", "event_type": "GetSessionToken", "event_source": "sts.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "140.178.2.6", "user_agent": "aws-sdk-go/1.4.14 (go1.11.4; darwin; amd64)", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 1052, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "e342be25-95f0-4421-9466-8ea113d16999", "eventTime": "2019-07-30T02:52:47Z", "eventName": "GetSessionToken", "eventSource": "sts.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "140.178.2.6", "userAgent": "aws-sdk-go/1.4.14 (go1.11.4; darwin; amd64)", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"durationSeconds": 14400}, "responseElements": {"credentials": {"accessKeyId": "ASIA1DVC1KONNOA1CHJ2", "expiration": "Jul 30, 2019 6:52:47 AM", "sessionToken": "FQoGZXIvYXdzEBwaDETWOdAw38szQis5vCKrAZBcD+SspA3dd7A8FclBzpUw3uEtOsq3LVI0jyddvJHIZKUrFFBQRcf2qYi/drvsTJLj5N5vI7Z+oO1cBm3TqcMSpdmiMphKFWbVvf4fFOiNnAfuY0NJ3EzyN3qqP9IqO9KcvBBOfT/89GpFN28Ra1FQNGhNyFrzeOml0kzgVJHV3H5maBLJIjY1CaBay7h9V3gyJXUDaGwt9HStlQUC0rMFUpZY7xI8LbP/Ayj/4f7pBQ=="}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "1959abb1-2002-4191-b544-d40aa68aabef", "record_id": "flaws_cloudtrail:0000267:1959abb1-2002-4191-b544-d40aa68aabef", "row_index": 267, "timestamp": "2019-07-30T02:52:55Z", "event_type": "GetCallerIdentity", "event_source": "sts.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "ASIA1DVC1KONNOA1CHJ2", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "140.178.2.6", "user_agent": "aws-cli/1.16.131 Python/3.7.1 Darwin/18.7.0 botocore/1.12.121", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 867, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "1959abb1-2002-4191-b544-d40aa68aabef", "eventTime": "2019-07-30T02:52:55Z", "eventName": "GetCallerIdentity", "eventSource": "sts.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "140.178.2.6", "userAgent": "aws-cli/1.16.131 Python/3.7.1 Darwin/18.7.0 botocore/1.12.121", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "ASIA1DVC1KONNOA1CHJ2", "userName": "Level6", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2019-07-30T02:52:47Z"}}}, "responseElements": {"userId": "AIDADO2GQD0K8TEF7KW1V", "account": "811596193553", "arn": "arn:aws:iam::811596193553:user/Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "1959abb1-2002-4191-b544-d40aa68aabef", "record_id": "flaws_cloudtrail:0000268:1959abb1-2002-4191-b544-d40aa68aabef", "row_index": 268, "timestamp": "2019-07-30T02:52:55Z", "event_type": "GetCallerIdentity", "event_source": "sts.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "ASIA1DVC1KONNOA1CHJ2", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "140.178.2.6", "user_agent": "aws-cli/1.16.131 Python/3.7.1 Darwin/18.7.0 botocore/1.12.121", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 867, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "1959abb1-2002-4191-b544-d40aa68aabef", "eventTime": "2019-07-30T02:52:55Z", "eventName": "GetCallerIdentity", "eventSource": "sts.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "140.178.2.6", "userAgent": "aws-cli/1.16.131 Python/3.7.1 Darwin/18.7.0 botocore/1.12.121", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "ASIA1DVC1KONNOA1CHJ2", "userName": "Level6", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2019-07-30T02:52:47Z"}}}, "responseElements": {"userId": "AIDADO2GQD0K8TEF7KW1V", "account": "811596193553", "arn": "arn:aws:iam::811596193553:user/Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "8aa7cbab-0c39-48c3-8f3a-26d9acc9457c", "record_id": "flaws_cloudtrail:0000269:8aa7cbab-0c39-48c3-8f3a-26d9acc9457c", "row_index": 269, "timestamp": "2019-07-30T02:52:58Z", "event_type": "ListPolicies", "event_source": "iam.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "198.3.215.7", "user_agent": "aws-cli/1.16.206 Python/3.6.5 Darwin/18.6.0 botocore/1.12.196", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 825, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "8aa7cbab-0c39-48c3-8f3a-26d9acc9457c", "eventTime": "2019-07-30T02:52:58Z", "eventName": "ListPolicies", "eventSource": "iam.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "198.3.215.7", "userAgent": "aws-cli/1.16.206 Python/3.6.5 Darwin/18.6.0 botocore/1.12.196", "awsRegion": "us-east-1", "errorCode": "AccessDenied", "errorMessage": "User: arn:aws:iam::811596193553:user/backup is not authorized to perform: iam:ListPolicies on resource: policy path /", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "8aa7cbab-0c39-48c3-8f3a-26d9acc9457c", "record_id": "flaws_cloudtrail:0000270:8aa7cbab-0c39-48c3-8f3a-26d9acc9457c", "row_index": 270, "timestamp": "2019-07-30T02:52:58Z", "event_type": "ListPolicies", "event_source": "iam.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "198.3.215.7", "user_agent": "aws-cli/1.16.206 Python/3.6.5 Darwin/18.6.0 botocore/1.12.196", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 825, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "8aa7cbab-0c39-48c3-8f3a-26d9acc9457c", "eventTime": "2019-07-30T02:52:58Z", "eventName": "ListPolicies", "eventSource": "iam.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "198.3.215.7", "userAgent": "aws-cli/1.16.206 Python/3.6.5 Darwin/18.6.0 botocore/1.12.196", "awsRegion": "us-east-1", "errorCode": "AccessDenied", "errorMessage": "User: arn:aws:iam::811596193553:user/backup is not authorized to perform: iam:ListPolicies on resource: policy path /", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "95116-6297-482b-85a6-ec46b74c151e", "record_id": "flaws_cloudtrail:0000271:95116-6297-482b-85a6-ec46b74c151e", "row_index": 271, "timestamp": "2019-07-30T02:53:55Z", "event_type": "DescribeSubnets", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "198.3.215.7", "user_agent": "aws-cli/1.16.206 Python/3.6.5 Darwin/18.6.0 botocore/1.12.196", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 690, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "95116-6297-482b-85a6-ec46b74c151e", "eventTime": "2019-07-30T02:53:55Z", "eventName": "DescribeSubnets", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "198.3.215.7", "userAgent": "aws-cli/1.16.206 Python/3.6.5 Darwin/18.6.0 botocore/1.12.196", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"subnetSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "95116-6297-482b-85a6-ec46b74c151e", "record_id": "flaws_cloudtrail:0000272:95116-6297-482b-85a6-ec46b74c151e", "row_index": 272, "timestamp": "2019-07-30T02:53:55Z", "event_type": "DescribeSubnets", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "198.3.215.7", "user_agent": "aws-cli/1.16.206 Python/3.6.5 Darwin/18.6.0 botocore/1.12.196", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 690, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "95116-6297-482b-85a6-ec46b74c151e", "eventTime": "2019-07-30T02:53:55Z", "eventName": "DescribeSubnets", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "198.3.215.7", "userAgent": "aws-cli/1.16.206 Python/3.6.5 Darwin/18.6.0 botocore/1.12.196", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"subnetSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "06e63c28-6084-40f3-8e02-8d1bbde9474a", "record_id": "flaws_cloudtrail:0000273:06e63c28-6084-40f3-8e02-8d1bbde9474a", "row_index": 273, "timestamp": "2019-07-30T02:54:13Z", "event_type": "GetSessionToken", "event_source": "sts.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "ASIA1DVC1KONNOA1CHJ2", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "140.178.2.6", "user_agent": "aws-cli/1.16.131 Python/3.7.1 Darwin/18.7.0 botocore/1.12.121", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 844, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "06e63c28-6084-40f3-8e02-8d1bbde9474a", "eventTime": "2019-07-30T02:54:13Z", "eventName": "GetSessionToken", "eventSource": "sts.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "140.178.2.6", "userAgent": "aws-cli/1.16.131 Python/3.7.1 Darwin/18.7.0 botocore/1.12.121", "awsRegion": "us-east-1", "errorCode": "AccessDeniedException", "errorMessage": "An unknown error occurred", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "ASIA1DVC1KONNOA1CHJ2", "userName": "Level6", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2019-07-30T02:52:47Z"}}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "06e63c28-6084-40f3-8e02-8d1bbde9474a", "record_id": "flaws_cloudtrail:0000274:06e63c28-6084-40f3-8e02-8d1bbde9474a", "row_index": 274, "timestamp": "2019-07-30T02:54:13Z", "event_type": "GetSessionToken", "event_source": "sts.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "ASIA1DVC1KONNOA1CHJ2", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "140.178.2.6", "user_agent": "aws-cli/1.16.131 Python/3.7.1 Darwin/18.7.0 botocore/1.12.121", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 844, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "06e63c28-6084-40f3-8e02-8d1bbde9474a", "eventTime": "2019-07-30T02:54:13Z", "eventName": "GetSessionToken", "eventSource": "sts.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "140.178.2.6", "userAgent": "aws-cli/1.16.131 Python/3.7.1 Darwin/18.7.0 botocore/1.12.121", "awsRegion": "us-east-1", "errorCode": "AccessDeniedException", "errorMessage": "An unknown error occurred", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "ASIA1DVC1KONNOA1CHJ2", "userName": "Level6", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2019-07-30T02:52:47Z"}}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "9d15c601-747e-4704-8892-c38e0e99bc17", "record_id": "flaws_cloudtrail:0000275:9d15c601-747e-4704-8892-c38e0e99bc17", "row_index": 275, "timestamp": "2019-07-30T02:54:36Z", "event_type": "DescribeSecurityGroups", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "198.3.215.7", "user_agent": "aws-cli/1.16.206 Python/3.6.5 Darwin/18.6.0 botocore/1.12.196", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 731, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "9d15c601-747e-4704-8892-c38e0e99bc17", "eventTime": "2019-07-30T02:54:36Z", "eventName": "DescribeSecurityGroups", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "198.3.215.7", "userAgent": "aws-cli/1.16.206 Python/3.6.5 Darwin/18.6.0 botocore/1.12.196", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"securityGroupSet": {}, "securityGroupIdSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "9d15c601-747e-4704-8892-c38e0e99bc17", "record_id": "flaws_cloudtrail:0000276:9d15c601-747e-4704-8892-c38e0e99bc17", "row_index": 276, "timestamp": "2019-07-30T02:54:36Z", "event_type": "DescribeSecurityGroups", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "198.3.215.7", "user_agent": "aws-cli/1.16.206 Python/3.6.5 Darwin/18.6.0 botocore/1.12.196", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 731, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "9d15c601-747e-4704-8892-c38e0e99bc17", "eventTime": "2019-07-30T02:54:36Z", "eventName": "DescribeSecurityGroups", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "198.3.215.7", "userAgent": "aws-cli/1.16.206 Python/3.6.5 Darwin/18.6.0 botocore/1.12.196", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"securityGroupSet": {}, "securityGroupIdSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "25849de-890d-46c5-a1cd-59894aec31cb", "record_id": "flaws_cloudtrail:0000277:25849de-890d-46c5-a1cd-59894aec31cb", "row_index": 277, "timestamp": "2019-07-30T02:56:37Z", "event_type": "DescribeInstances", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "198.3.215.7", "user_agent": "aws-cli/1.16.206 Python/3.6.5 Darwin/18.6.0 botocore/1.12.196", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 780, "raw_record_depth": 8, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "25849de-890d-46c5-a1cd-59894aec31cb", "eventTime": "2019-07-30T02:56:37Z", "eventName": "DescribeInstances", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "198.3.215.7", "userAgent": "aws-cli/1.16.206 Python/3.6.5 Darwin/18.6.0 botocore/1.12.196", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"instancesSet": {}, "filterSet": {"items": [{"name": "instance-state-name", "valueSet": {"items": {"__truncated_type": "list"}}}]}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "25849de-890d-46c5-a1cd-59894aec31cb", "record_id": "flaws_cloudtrail:0000278:25849de-890d-46c5-a1cd-59894aec31cb", "row_index": 278, "timestamp": "2019-07-30T02:56:37Z", "event_type": "DescribeInstances", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "198.3.215.7", "user_agent": "aws-cli/1.16.206 Python/3.6.5 Darwin/18.6.0 botocore/1.12.196", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 780, "raw_record_depth": 8, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "25849de-890d-46c5-a1cd-59894aec31cb", "eventTime": "2019-07-30T02:56:37Z", "eventName": "DescribeInstances", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "198.3.215.7", "userAgent": "aws-cli/1.16.206 Python/3.6.5 Darwin/18.6.0 botocore/1.12.196", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"instancesSet": {}, "filterSet": {"items": [{"name": "instance-state-name", "valueSet": {"items": {"__truncated_type": "list"}}}]}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "89527c2-c927-454c-8654-9bcaa131012b", "record_id": "flaws_cloudtrail:0000279:89527c2-c927-454c-8654-9bcaa131012b", "row_index": 279, "timestamp": "2019-07-30T02:57:42Z", "event_type": "DescribeSecurityGroups", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "198.3.215.7", "user_agent": "aws-cli/1.16.206 Python/3.6.5 Darwin/18.6.0 botocore/1.12.196", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 765, "raw_record_depth": 5, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "89527c2-c927-454c-8654-9bcaa131012b", "eventTime": "2019-07-30T02:57:42Z", "eventName": "DescribeSecurityGroups", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "198.3.215.7", "userAgent": "aws-cli/1.16.206 Python/3.6.5 Darwin/18.6.0 botocore/1.12.196", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"securityGroupSet": {}, "securityGroupIdSet": {"items": [{"groupId": "sg-f7054cea"}]}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "89527c2-c927-454c-8654-9bcaa131012b", "record_id": "flaws_cloudtrail:0000280:89527c2-c927-454c-8654-9bcaa131012b", "row_index": 280, "timestamp": "2019-07-30T02:57:42Z", "event_type": "DescribeSecurityGroups", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "198.3.215.7", "user_agent": "aws-cli/1.16.206 Python/3.6.5 Darwin/18.6.0 botocore/1.12.196", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 765, "raw_record_depth": 5, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "89527c2-c927-454c-8654-9bcaa131012b", "eventTime": "2019-07-30T02:57:42Z", "eventName": "DescribeSecurityGroups", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "198.3.215.7", "userAgent": "aws-cli/1.16.206 Python/3.6.5 Darwin/18.6.0 botocore/1.12.196", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"securityGroupSet": {}, "securityGroupIdSet": {"items": [{"groupId": "sg-f7054cea"}]}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "67d5e872-592e-4c14-a592-0ca34c8a0c01", "record_id": "flaws_cloudtrail:0000281:67d5e872-592e-4c14-a592-0ca34c8a0c01", "row_index": 281, "timestamp": "2019-07-30T02:57:48Z", "event_type": "GetCallerIdentity", "event_source": "sts.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "ASIA1DVC1KONNOA1CHJ2", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "140.178.2.6", "user_agent": "aws-cli/1.16.131 Python/3.7.1 Darwin/18.7.0 botocore/1.12.121", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 868, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "67d5e872-592e-4c14-a592-0ca34c8a0c01", "eventTime": "2019-07-30T02:57:48Z", "eventName": "GetCallerIdentity", "eventSource": "sts.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "140.178.2.6", "userAgent": "aws-cli/1.16.131 Python/3.7.1 Darwin/18.7.0 botocore/1.12.121", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "ASIA1DVC1KONNOA1CHJ2", "userName": "Level6", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2019-07-30T02:52:47Z"}}}, "responseElements": {"userId": "AIDADO2GQD0K8TEF7KW1V", "account": "811596193553", "arn": "arn:aws:iam::811596193553:user/Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "67d5e872-592e-4c14-a592-0ca34c8a0c01", "record_id": "flaws_cloudtrail:0000282:67d5e872-592e-4c14-a592-0ca34c8a0c01", "row_index": 282, "timestamp": "2019-07-30T02:57:48Z", "event_type": "GetCallerIdentity", "event_source": "sts.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "ASIA1DVC1KONNOA1CHJ2", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "140.178.2.6", "user_agent": "aws-cli/1.16.131 Python/3.7.1 Darwin/18.7.0 botocore/1.12.121", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 868, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "67d5e872-592e-4c14-a592-0ca34c8a0c01", "eventTime": "2019-07-30T02:57:48Z", "eventName": "GetCallerIdentity", "eventSource": "sts.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "140.178.2.6", "userAgent": "aws-cli/1.16.131 Python/3.7.1 Darwin/18.7.0 botocore/1.12.121", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "ASIA1DVC1KONNOA1CHJ2", "userName": "Level6", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2019-07-30T02:52:47Z"}}}, "responseElements": {"userId": "AIDADO2GQD0K8TEF7KW1V", "account": "811596193553", "arn": "arn:aws:iam::811596193553:user/Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "7ac17b97-7bf6-4964-8e92-841362f7bac87", "record_id": "flaws_cloudtrail:0000283:7ac17b97-7bf6-4964-8e92-841362f7bac87", "row_index": 283, "timestamp": "2019-07-30T02:59:36Z", "event_type": "CreateAccessKey", "event_source": "iam.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "198.3.215.7", "user_agent": "aws-cli/1.16.206 Python/3.6.5 Darwin/18.6.0 botocore/1.12.196", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 830, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "7ac17b97-7bf6-4964-8e92-841362f7bac87", "eventTime": "2019-07-30T02:59:36Z", "eventName": "CreateAccessKey", "eventSource": "iam.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "198.3.215.7", "userAgent": "aws-cli/1.16.206 Python/3.6.5 Darwin/18.6.0 botocore/1.12.196", "awsRegion": "us-east-1", "errorCode": "AccessDenied", "errorMessage": "User: arn:aws:iam::811596193553:user/backup is not authorized to perform: iam:CreateAccessKey on resource: user backup", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "7ac17b97-7bf6-4964-8e92-841362f7bac87", "record_id": "flaws_cloudtrail:0000284:7ac17b97-7bf6-4964-8e92-841362f7bac87", "row_index": 284, "timestamp": "2019-07-30T02:59:36Z", "event_type": "CreateAccessKey", "event_source": "iam.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "198.3.215.7", "user_agent": "aws-cli/1.16.206 Python/3.6.5 Darwin/18.6.0 botocore/1.12.196", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 830, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "7ac17b97-7bf6-4964-8e92-841362f7bac87", "eventTime": "2019-07-30T02:59:36Z", "eventName": "CreateAccessKey", "eventSource": "iam.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "198.3.215.7", "userAgent": "aws-cli/1.16.206 Python/3.6.5 Darwin/18.6.0 botocore/1.12.196", "awsRegion": "us-east-1", "errorCode": "AccessDenied", "errorMessage": "User: arn:aws:iam::811596193553:user/backup is not authorized to perform: iam:CreateAccessKey on resource: user backup", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "18b35733-7553-4d27-9706-62f123a0bca9", "record_id": "flaws_cloudtrail:0000285:18b35733-7553-4d27-9706-62f123a0bca9", "row_index": 285, "timestamp": "2019-07-30T03:01:00Z", "event_type": "GetCallerIdentity", "event_source": "sts.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "ASIA1DVC1KONNOA1CHJ2", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "140.178.2.6", "user_agent": "aws-cli/1.16.131 Python/3.7.1 Darwin/18.7.0 botocore/1.12.121", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 868, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "18b35733-7553-4d27-9706-62f123a0bca9", "eventTime": "2019-07-30T03:01:00Z", "eventName": "GetCallerIdentity", "eventSource": "sts.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "140.178.2.6", "userAgent": "aws-cli/1.16.131 Python/3.7.1 Darwin/18.7.0 botocore/1.12.121", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "ASIA1DVC1KONNOA1CHJ2", "userName": "Level6", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2019-07-30T02:52:47Z"}}}, "responseElements": {"userId": "AIDADO2GQD0K8TEF7KW1V", "account": "811596193553", "arn": "arn:aws:iam::811596193553:user/Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "18b35733-7553-4d27-9706-62f123a0bca9", "record_id": "flaws_cloudtrail:0000286:18b35733-7553-4d27-9706-62f123a0bca9", "row_index": 286, "timestamp": "2019-07-30T03:01:00Z", "event_type": "GetCallerIdentity", "event_source": "sts.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "ASIA1DVC1KONNOA1CHJ2", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "140.178.2.6", "user_agent": "aws-cli/1.16.131 Python/3.7.1 Darwin/18.7.0 botocore/1.12.121", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 868, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "18b35733-7553-4d27-9706-62f123a0bca9", "eventTime": "2019-07-30T03:01:00Z", "eventName": "GetCallerIdentity", "eventSource": "sts.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "140.178.2.6", "userAgent": "aws-cli/1.16.131 Python/3.7.1 Darwin/18.7.0 botocore/1.12.121", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "ASIA1DVC1KONNOA1CHJ2", "userName": "Level6", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2019-07-30T02:52:47Z"}}}, "responseElements": {"userId": "AIDADO2GQD0K8TEF7KW1V", "account": "811596193553", "arn": "arn:aws:iam::811596193553:user/Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "5074cb9c-29ec-4385-aeb4-b7f044898e6a", "record_id": "flaws_cloudtrail:0000287:5074cb9c-29ec-4385-aeb4-b7f044898e6a", "row_index": 287, "timestamp": "2019-07-30T03:01:35Z", "event_type": "GetSessionToken", "event_source": "sts.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "ASIA1DVC1KONNOA1CHJ2", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "140.178.2.6", "user_agent": "aws-cli/1.16.131 Python/3.7.1 Darwin/18.7.0 botocore/1.12.121", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 845, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "5074cb9c-29ec-4385-aeb4-b7f044898e6a", "eventTime": "2019-07-30T03:01:35Z", "eventName": "GetSessionToken", "eventSource": "sts.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "140.178.2.6", "userAgent": "aws-cli/1.16.131 Python/3.7.1 Darwin/18.7.0 botocore/1.12.121", "awsRegion": "us-east-1", "errorCode": "AccessDeniedException", "errorMessage": "An unknown error occurred", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "ASIA1DVC1KONNOA1CHJ2", "userName": "Level6", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2019-07-30T02:52:47Z"}}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "5074cb9c-29ec-4385-aeb4-b7f044898e6a", "record_id": "flaws_cloudtrail:0000288:5074cb9c-29ec-4385-aeb4-b7f044898e6a", "row_index": 288, "timestamp": "2019-07-30T03:01:35Z", "event_type": "GetSessionToken", "event_source": "sts.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "ASIA1DVC1KONNOA1CHJ2", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "140.178.2.6", "user_agent": "aws-cli/1.16.131 Python/3.7.1 Darwin/18.7.0 botocore/1.12.121", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 845, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "5074cb9c-29ec-4385-aeb4-b7f044898e6a", "eventTime": "2019-07-30T03:01:35Z", "eventName": "GetSessionToken", "eventSource": "sts.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "140.178.2.6", "userAgent": "aws-cli/1.16.131 Python/3.7.1 Darwin/18.7.0 botocore/1.12.121", "awsRegion": "us-east-1", "errorCode": "AccessDeniedException", "errorMessage": "An unknown error occurred", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "ASIA1DVC1KONNOA1CHJ2", "userName": "Level6", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2019-07-30T02:52:47Z"}}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "a86c668e-1652-4d38-a61b-516a25f7a87a", "record_id": "flaws_cloudtrail:0000289:a86c668e-1652-4d38-a61b-516a25f7a87a", "row_index": 289, "timestamp": "2019-07-30T03:01:43Z", "event_type": "GetUser", "event_source": "iam.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "198.3.215.7", "user_agent": "aws-cli/1.16.206 Python/3.6.5 Darwin/18.6.0 botocore/1.12.196", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 813, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "a86c668e-1652-4d38-a61b-516a25f7a87a", "eventTime": "2019-07-30T03:01:43Z", "eventName": "GetUser", "eventSource": "iam.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "198.3.215.7", "userAgent": "aws-cli/1.16.206 Python/3.6.5 Darwin/18.6.0 botocore/1.12.196", "awsRegion": "us-east-1", "errorCode": "AccessDenied", "errorMessage": "User: arn:aws:iam::811596193553:user/backup is not authorized to perform: iam:GetUser on resource: user backup", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "a86c668e-1652-4d38-a61b-516a25f7a87a", "record_id": "flaws_cloudtrail:0000290:a86c668e-1652-4d38-a61b-516a25f7a87a", "row_index": 290, "timestamp": "2019-07-30T03:01:43Z", "event_type": "GetUser", "event_source": "iam.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "198.3.215.7", "user_agent": "aws-cli/1.16.206 Python/3.6.5 Darwin/18.6.0 botocore/1.12.196", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 813, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "a86c668e-1652-4d38-a61b-516a25f7a87a", "eventTime": "2019-07-30T03:01:43Z", "eventName": "GetUser", "eventSource": "iam.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "198.3.215.7", "userAgent": "aws-cli/1.16.206 Python/3.6.5 Darwin/18.6.0 botocore/1.12.196", "awsRegion": "us-east-1", "errorCode": "AccessDenied", "errorMessage": "User: arn:aws:iam::811596193553:user/backup is not authorized to perform: iam:GetUser on resource: user backup", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "02506fb6-a1f0-4e09-9c66-2684af54c71d", "record_id": "flaws_cloudtrail:0000291:02506fb6-a1f0-4e09-9c66-2684af54c71d", "row_index": 291, "timestamp": "2019-07-30T03:02:13Z", "event_type": "GetUser", "event_source": "iam.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "140.178.2.6", "user_agent": "aws-cli/1.16.131 Python/3.7.1 Darwin/18.7.0 botocore/1.12.121", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 658, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "02506fb6-a1f0-4e09-9c66-2684af54c71d", "eventTime": "2019-07-30T03:02:13Z", "eventName": "GetUser", "eventSource": "iam.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "140.178.2.6", "userAgent": "aws-cli/1.16.131 Python/3.7.1 Darwin/18.7.0 botocore/1.12.121", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "02506fb6-a1f0-4e09-9c66-2684af54c71d", "record_id": "flaws_cloudtrail:0000292:02506fb6-a1f0-4e09-9c66-2684af54c71d", "row_index": 292, "timestamp": "2019-07-30T03:02:13Z", "event_type": "GetUser", "event_source": "iam.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "140.178.2.6", "user_agent": "aws-cli/1.16.131 Python/3.7.1 Darwin/18.7.0 botocore/1.12.121", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 658, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "02506fb6-a1f0-4e09-9c66-2684af54c71d", "eventTime": "2019-07-30T03:02:13Z", "eventName": "GetUser", "eventSource": "iam.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "140.178.2.6", "userAgent": "aws-cli/1.16.131 Python/3.7.1 Darwin/18.7.0 botocore/1.12.121", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "5734feab-99fe-4422-afb0-6e1ff871e589", "record_id": "flaws_cloudtrail:0000293:5734feab-99fe-4422-afb0-6e1ff871e589", "row_index": 293, "timestamp": "2019-07-30T03:02:29Z", "event_type": "ListAttachedUserPolicies", "event_source": "iam.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "140.178.2.6", "user_agent": "aws-cli/1.16.131 Python/3.7.1 Darwin/18.7.0 botocore/1.12.121", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 692, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "5734feab-99fe-4422-afb0-6e1ff871e589", "eventTime": "2019-07-30T03:02:29Z", "eventName": "ListAttachedUserPolicies", "eventSource": "iam.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "140.178.2.6", "userAgent": "aws-cli/1.16.131 Python/3.7.1 Darwin/18.7.0 botocore/1.12.121", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"userName": "Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "5734feab-99fe-4422-afb0-6e1ff871e589", "record_id": "flaws_cloudtrail:0000294:5734feab-99fe-4422-afb0-6e1ff871e589", "row_index": 294, "timestamp": "2019-07-30T03:02:29Z", "event_type": "ListAttachedUserPolicies", "event_source": "iam.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "140.178.2.6", "user_agent": "aws-cli/1.16.131 Python/3.7.1 Darwin/18.7.0 botocore/1.12.121", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 692, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "5734feab-99fe-4422-afb0-6e1ff871e589", "eventTime": "2019-07-30T03:02:29Z", "eventName": "ListAttachedUserPolicies", "eventSource": "iam.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "140.178.2.6", "userAgent": "aws-cli/1.16.131 Python/3.7.1 Darwin/18.7.0 botocore/1.12.121", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"userName": "Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "bc298fff-3beb-4734-a382-d0bbe938435d", "record_id": "flaws_cloudtrail:0000295:bc298fff-3beb-4734-a382-d0bbe938435d", "row_index": 295, "timestamp": "2019-07-30T03:03:04Z", "event_type": "GetPolicy", "event_source": "iam.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "140.178.2.6", "user_agent": "aws-cli/1.16.131 Python/3.7.1 Darwin/18.7.0 botocore/1.12.121", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 721, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "bc298fff-3beb-4734-a382-d0bbe938435d", "eventTime": "2019-07-30T03:03:04Z", "eventName": "GetPolicy", "eventSource": "iam.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "140.178.2.6", "userAgent": "aws-cli/1.16.131 Python/3.7.1 Darwin/18.7.0 botocore/1.12.121", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"policyArn": "arn:aws:iam::811596193553:policy/list_apigateways"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "bc298fff-3beb-4734-a382-d0bbe938435d", "record_id": "flaws_cloudtrail:0000296:bc298fff-3beb-4734-a382-d0bbe938435d", "row_index": 296, "timestamp": "2019-07-30T03:03:04Z", "event_type": "GetPolicy", "event_source": "iam.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "140.178.2.6", "user_agent": "aws-cli/1.16.131 Python/3.7.1 Darwin/18.7.0 botocore/1.12.121", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 721, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "bc298fff-3beb-4734-a382-d0bbe938435d", "eventTime": "2019-07-30T03:03:04Z", "eventName": "GetPolicy", "eventSource": "iam.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "140.178.2.6", "userAgent": "aws-cli/1.16.131 Python/3.7.1 Darwin/18.7.0 botocore/1.12.121", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"policyArn": "arn:aws:iam::811596193553:policy/list_apigateways"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "7a0295ce-9831-4b1b-ad42-3cd657529", "record_id": "flaws_cloudtrail:0000297:7a0295ce-9831-4b1b-ad42-3cd657529", "row_index": 297, "timestamp": "2019-07-30T03:03:29Z", "event_type": "GetPolicyVersion", "event_source": "iam.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "140.178.2.6", "user_agent": "aws-cli/1.16.131 Python/3.7.1 Darwin/18.7.0 botocore/1.12.121", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 742, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "7a0295ce-9831-4b1b-ad42-3cd657529", "eventTime": "2019-07-30T03:03:29Z", "eventName": "GetPolicyVersion", "eventSource": "iam.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "140.178.2.6", "userAgent": "aws-cli/1.16.131 Python/3.7.1 Darwin/18.7.0 botocore/1.12.121", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"policyArn": "arn:aws:iam::811596193553:policy/list_apigateways", "versionId": "v4"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "7a0295ce-9831-4b1b-ad42-3cd657529", "record_id": "flaws_cloudtrail:0000298:7a0295ce-9831-4b1b-ad42-3cd657529", "row_index": 298, "timestamp": "2019-07-30T03:03:29Z", "event_type": "GetPolicyVersion", "event_source": "iam.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "140.178.2.6", "user_agent": "aws-cli/1.16.131 Python/3.7.1 Darwin/18.7.0 botocore/1.12.121", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 742, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "7a0295ce-9831-4b1b-ad42-3cd657529", "eventTime": "2019-07-30T03:03:29Z", "eventName": "GetPolicyVersion", "eventSource": "iam.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "140.178.2.6", "userAgent": "aws-cli/1.16.131 Python/3.7.1 Darwin/18.7.0 botocore/1.12.121", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"policyArn": "arn:aws:iam::811596193553:policy/list_apigateways", "versionId": "v4"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "8ab0e85d-1247-41d3-9cdb-19acf561aa48", "record_id": "flaws_cloudtrail:0000299:8ab0e85d-1247-41d3-9cdb-19acf561aa48", "row_index": 299, "timestamp": "2019-07-30T03:03:39Z", "event_type": "ListAccessKeys", "event_source": "iam.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "198.3.215.7", "user_agent": "aws-cli/1.16.206 Python/3.6.5 Darwin/18.6.0 botocore/1.12.196", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 831, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "8ab0e85d-1247-41d3-9cdb-19acf561aa48", "eventTime": "2019-07-30T03:03:39Z", "eventName": "ListAccessKeys", "eventSource": "iam.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "198.3.215.7", "userAgent": "aws-cli/1.16.206 Python/3.6.5 Darwin/18.6.0 botocore/1.12.196", "awsRegion": "us-east-1", "errorCode": "AccessDenied", "errorMessage": "User: arn:aws:iam::811596193553:user/backup is not authorized to perform: iam:ListAccessKeys on resource: user nullbackup", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "8ab0e85d-1247-41d3-9cdb-19acf561aa48", "record_id": "flaws_cloudtrail:0000300:8ab0e85d-1247-41d3-9cdb-19acf561aa48", "row_index": 300, "timestamp": "2019-07-30T03:03:39Z", "event_type": "ListAccessKeys", "event_source": "iam.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "198.3.215.7", "user_agent": "aws-cli/1.16.206 Python/3.6.5 Darwin/18.6.0 botocore/1.12.196", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 831, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "8ab0e85d-1247-41d3-9cdb-19acf561aa48", "eventTime": "2019-07-30T03:03:39Z", "eventName": "ListAccessKeys", "eventSource": "iam.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "198.3.215.7", "userAgent": "aws-cli/1.16.206 Python/3.6.5 Darwin/18.6.0 botocore/1.12.196", "awsRegion": "us-east-1", "errorCode": "AccessDenied", "errorMessage": "User: arn:aws:iam::811596193553:user/backup is not authorized to perform: iam:ListAccessKeys on resource: user nullbackup", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "295c98e0-3648-4608-81ec-12c1859ccf84", "record_id": "flaws_cloudtrail:0000301:295c98e0-3648-4608-81ec-12c1859ccf84", "row_index": 301, "timestamp": "2019-07-30T03:04:12Z", "event_type": "GetApis", "event_source": "apigateway.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "92.9.8.72", "user_agent": "aws-cli/1.16.131 Python/3.7.1 Darwin/18.7.0 botocore/1.12.121", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 862, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "errorCode", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "readOnly", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "295c98e0-3648-4608-81ec-12c1859ccf84", "eventTime": "2019-07-30T03:04:12Z", "eventName": "GetApis", "eventSource": "apigateway.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "92.9.8.72", "userAgent": "aws-cli/1.16.131 Python/3.7.1 Darwin/18.7.0 botocore/1.12.121", "awsRegion": "us-west-2", "errorCode": "AccessDeniedException", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "responseElements": {"Message": "User: arn:aws:iam::811596193553:user/Level6 is not authorized to perform: apigateway:GET on resource: arn:aws:apigateway:us-west-2::/apis"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "295c98e0-3648-4608-81ec-12c1859ccf84", "record_id": "flaws_cloudtrail:0000302:295c98e0-3648-4608-81ec-12c1859ccf84", "row_index": 302, "timestamp": "2019-07-30T03:04:12Z", "event_type": "GetApis", "event_source": "apigateway.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "92.9.8.72", "user_agent": "aws-cli/1.16.131 Python/3.7.1 Darwin/18.7.0 botocore/1.12.121", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 862, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "errorCode", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "readOnly", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "295c98e0-3648-4608-81ec-12c1859ccf84", "eventTime": "2019-07-30T03:04:12Z", "eventName": "GetApis", "eventSource": "apigateway.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "92.9.8.72", "userAgent": "aws-cli/1.16.131 Python/3.7.1 Darwin/18.7.0 botocore/1.12.121", "awsRegion": "us-west-2", "errorCode": "AccessDeniedException", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "responseElements": {"Message": "User: arn:aws:iam::811596193553:user/Level6 is not authorized to perform: apigateway:GET on resource: arn:aws:apigateway:us-west-2::/apis"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "196858b-2270-40d0-a7ac-d13bc23e3115", "record_id": "flaws_cloudtrail:0000303:196858b-2270-40d0-a7ac-d13bc23e3115", "row_index": 303, "timestamp": "2019-07-30T03:04:38Z", "event_type": "ListGroups", "event_source": "iam.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "198.3.215.7", "user_agent": "aws-cli/1.16.206 Python/3.6.5 Darwin/18.6.0 botocore/1.12.196", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 834, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "196858b-2270-40d0-a7ac-d13bc23e3115", "eventTime": "2019-07-30T03:04:38Z", "eventName": "ListGroups", "eventSource": "iam.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "198.3.215.7", "userAgent": "aws-cli/1.16.206 Python/3.6.5 Darwin/18.6.0 botocore/1.12.196", "awsRegion": "us-east-1", "errorCode": "AccessDenied", "errorMessage": "User: arn:aws:iam::811596193553:user/backup is not authorized to perform: iam:ListGroups on resource: arn:aws:iam::811596193553:group/", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "196858b-2270-40d0-a7ac-d13bc23e3115", "record_id": "flaws_cloudtrail:0000304:196858b-2270-40d0-a7ac-d13bc23e3115", "row_index": 304, "timestamp": "2019-07-30T03:04:38Z", "event_type": "ListGroups", "event_source": "iam.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "198.3.215.7", "user_agent": "aws-cli/1.16.206 Python/3.6.5 Darwin/18.6.0 botocore/1.12.196", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 834, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "196858b-2270-40d0-a7ac-d13bc23e3115", "eventTime": "2019-07-30T03:04:38Z", "eventName": "ListGroups", "eventSource": "iam.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "198.3.215.7", "userAgent": "aws-cli/1.16.206 Python/3.6.5 Darwin/18.6.0 botocore/1.12.196", "awsRegion": "us-east-1", "errorCode": "AccessDenied", "errorMessage": "User: arn:aws:iam::811596193553:user/backup is not authorized to perform: iam:ListGroups on resource: arn:aws:iam::811596193553:group/", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "854bdebd-cfbf-4d10-9315-a056bd5e1702", "record_id": "flaws_cloudtrail:0000305:854bdebd-cfbf-4d10-9315-a056bd5e1702", "row_index": 305, "timestamp": "2019-07-30T03:04:46Z", "event_type": "GetApi", "event_source": "apigateway.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "4.6.2.246", "user_agent": "aws-cli/1.16.131 Python/3.7.1 Darwin/18.7.0 botocore/1.12.121", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 881, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "errorCode", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "readOnly", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "854bdebd-cfbf-4d10-9315-a056bd5e1702", "eventTime": "2019-07-30T03:04:46Z", "eventName": "GetApi", "eventSource": "apigateway.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "4.6.2.246", "userAgent": "aws-cli/1.16.131 Python/3.7.1 Darwin/18.7.0 botocore/1.12.121", "awsRegion": "us-west-2", "errorCode": "AccessDeniedException", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"apiId": "restapis"}, "responseElements": {"Message": "User: arn:aws:iam::811596193553:user/Level6 is not authorized to perform: apigateway:GET on resource: arn:aws:apigateway:us-west-2::/apis/restapis"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "854bdebd-cfbf-4d10-9315-a056bd5e1702", "record_id": "flaws_cloudtrail:0000306:854bdebd-cfbf-4d10-9315-a056bd5e1702", "row_index": 306, "timestamp": "2019-07-30T03:04:46Z", "event_type": "GetApi", "event_source": "apigateway.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "4.6.2.246", "user_agent": "aws-cli/1.16.131 Python/3.7.1 Darwin/18.7.0 botocore/1.12.121", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 881, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "errorCode", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "readOnly", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "854bdebd-cfbf-4d10-9315-a056bd5e1702", "eventTime": "2019-07-30T03:04:46Z", "eventName": "GetApi", "eventSource": "apigateway.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "4.6.2.246", "userAgent": "aws-cli/1.16.131 Python/3.7.1 Darwin/18.7.0 botocore/1.12.121", "awsRegion": "us-west-2", "errorCode": "AccessDeniedException", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"apiId": "restapis"}, "responseElements": {"Message": "User: arn:aws:iam::811596193553:user/Level6 is not authorized to perform: apigateway:GET on resource: arn:aws:apigateway:us-west-2::/apis/restapis"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "f8a6cb60-78c7-4860-8e19-f72c1ad78b17", "record_id": "flaws_cloudtrail:0000307:f8a6cb60-78c7-4860-8e19-f72c1ad78b17", "row_index": 307, "timestamp": "2019-07-30T03:04:57Z", "event_type": "ListGroupsForUser", "event_source": "iam.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "198.3.215.7", "user_agent": "aws-cli/1.16.206 Python/3.6.5 Darwin/18.6.0 botocore/1.12.196", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 833, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "f8a6cb60-78c7-4860-8e19-f72c1ad78b17", "eventTime": "2019-07-30T03:04:57Z", "eventName": "ListGroupsForUser", "eventSource": "iam.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "198.3.215.7", "userAgent": "aws-cli/1.16.206 Python/3.6.5 Darwin/18.6.0 botocore/1.12.196", "awsRegion": "us-east-1", "errorCode": "AccessDenied", "errorMessage": "User: arn:aws:iam::811596193553:user/backup is not authorized to perform: iam:ListGroupsForUser on resource: user backup", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "f8a6cb60-78c7-4860-8e19-f72c1ad78b17", "record_id": "flaws_cloudtrail:0000308:f8a6cb60-78c7-4860-8e19-f72c1ad78b17", "row_index": 308, "timestamp": "2019-07-30T03:04:57Z", "event_type": "ListGroupsForUser", "event_source": "iam.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "198.3.215.7", "user_agent": "aws-cli/1.16.206 Python/3.6.5 Darwin/18.6.0 botocore/1.12.196", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 833, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "f8a6cb60-78c7-4860-8e19-f72c1ad78b17", "eventTime": "2019-07-30T03:04:57Z", "eventName": "ListGroupsForUser", "eventSource": "iam.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "198.3.215.7", "userAgent": "aws-cli/1.16.206 Python/3.6.5 Darwin/18.6.0 botocore/1.12.196", "awsRegion": "us-east-1", "errorCode": "AccessDenied", "errorMessage": "User: arn:aws:iam::811596193553:user/backup is not authorized to perform: iam:ListGroupsForUser on resource: user backup", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "c8f3d206-0828-4f93-af2c-0a91b394d418", "record_id": "flaws_cloudtrail:0000309:c8f3d206-0828-4f93-af2c-0a91b394d418", "row_index": 309, "timestamp": "2019-07-30T03:06:17Z", "event_type": "GetApi", "event_source": "apigateway.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "255.215.220.94", "user_agent": "aws-cli/1.16.131 Python/3.7.1 Darwin/18.7.0 botocore/1.12.121", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 903, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "errorCode", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "readOnly", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "c8f3d206-0828-4f93-af2c-0a91b394d418", "eventTime": "2019-07-30T03:06:17Z", "eventName": "GetApi", "eventSource": "apigateway.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.215.220.94", "userAgent": "aws-cli/1.16.131 Python/3.7.1 Darwin/18.7.0 botocore/1.12.121", "awsRegion": "us-west-2", "errorCode": "AccessDeniedException", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"apiId": "%2Frestapis%2F"}, "responseElements": {"Message": "User: arn:aws:iam::811596193553:user/Level6 is not authorized to perform: apigateway:GET on resource: arn:aws:apigateway:us-west-2::/apis/%2Frestapis%2F"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "c8f3d206-0828-4f93-af2c-0a91b394d418", "record_id": "flaws_cloudtrail:0000310:c8f3d206-0828-4f93-af2c-0a91b394d418", "row_index": 310, "timestamp": "2019-07-30T03:06:17Z", "event_type": "GetApi", "event_source": "apigateway.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "255.215.220.94", "user_agent": "aws-cli/1.16.131 Python/3.7.1 Darwin/18.7.0 botocore/1.12.121", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 903, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "errorCode", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "readOnly", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "c8f3d206-0828-4f93-af2c-0a91b394d418", "eventTime": "2019-07-30T03:06:17Z", "eventName": "GetApi", "eventSource": "apigateway.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.215.220.94", "userAgent": "aws-cli/1.16.131 Python/3.7.1 Darwin/18.7.0 botocore/1.12.121", "awsRegion": "us-west-2", "errorCode": "AccessDeniedException", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"apiId": "%2Frestapis%2F"}, "responseElements": {"Message": "User: arn:aws:iam::811596193553:user/Level6 is not authorized to perform: apigateway:GET on resource: arn:aws:apigateway:us-west-2::/apis/%2Frestapis%2F"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "76e091363-a4f8-46dd-bb57-8d61167cfb", "record_id": "flaws_cloudtrail:0000311:76e091363-a4f8-46dd-bb57-8d61167cfb", "row_index": 311, "timestamp": "2019-07-30T03:08:03Z", "event_type": "GetRestApis", "event_source": "apigateway.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "140.178.2.6", "user_agent": "aws-cli/1.16.131 Python/3.7.1 Darwin/18.7.0 botocore/1.12.121", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 853, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "76e091363-a4f8-46dd-bb57-8d61167cfb", "eventTime": "2019-07-30T03:08:03Z", "eventName": "GetRestApis", "eventSource": "apigateway.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "140.178.2.6", "userAgent": "aws-cli/1.16.131 Python/3.7.1 Darwin/18.7.0 botocore/1.12.121", "awsRegion": "us-west-2", "errorCode": "AccessDenied", "errorMessage": "User: arn:aws:iam::811596193553:user/Level6 is not authorized to perform: apigateway:GET on resource: arn:aws:apigateway:us-west-2::/restapis", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "76e091363-a4f8-46dd-bb57-8d61167cfb", "record_id": "flaws_cloudtrail:0000312:76e091363-a4f8-46dd-bb57-8d61167cfb", "row_index": 312, "timestamp": "2019-07-30T03:08:03Z", "event_type": "GetRestApis", "event_source": "apigateway.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "140.178.2.6", "user_agent": "aws-cli/1.16.131 Python/3.7.1 Darwin/18.7.0 botocore/1.12.121", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 853, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "76e091363-a4f8-46dd-bb57-8d61167cfb", "eventTime": "2019-07-30T03:08:03Z", "eventName": "GetRestApis", "eventSource": "apigateway.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "140.178.2.6", "userAgent": "aws-cli/1.16.131 Python/3.7.1 Darwin/18.7.0 botocore/1.12.121", "awsRegion": "us-west-2", "errorCode": "AccessDenied", "errorMessage": "User: arn:aws:iam::811596193553:user/Level6 is not authorized to perform: apigateway:GET on resource: arn:aws:apigateway:us-west-2::/restapis", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "15e3d2f8-49f2-445f-9899-a4a36a06e0cf", "record_id": "flaws_cloudtrail:0000313:15e3d2f8-49f2-445f-9899-a4a36a06e0cf", "row_index": 313, "timestamp": "2019-07-30T03:09:23Z", "event_type": "ListFunctions202224", "event_source": "lambda.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "140.178.2.6", "user_agent": "aws-cli/1.16.131 Python/3.7.1 Darwin/18.7.0 botocore/1.12.121", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 673, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "15e3d2f8-49f2-445f-9899-a4a36a06e0cf", "eventTime": "2019-07-30T03:09:23Z", "eventName": "ListFunctions202224", "eventSource": "lambda.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "140.178.2.6", "userAgent": "aws-cli/1.16.131 Python/3.7.1 Darwin/18.7.0 botocore/1.12.121", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "15e3d2f8-49f2-445f-9899-a4a36a06e0cf", "record_id": "flaws_cloudtrail:0000314:15e3d2f8-49f2-445f-9899-a4a36a06e0cf", "row_index": 314, "timestamp": "2019-07-30T03:09:23Z", "event_type": "ListFunctions202224", "event_source": "lambda.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "140.178.2.6", "user_agent": "aws-cli/1.16.131 Python/3.7.1 Darwin/18.7.0 botocore/1.12.121", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 673, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "15e3d2f8-49f2-445f-9899-a4a36a06e0cf", "eventTime": "2019-07-30T03:09:23Z", "eventName": "ListFunctions202224", "eventSource": "lambda.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "140.178.2.6", "userAgent": "aws-cli/1.16.131 Python/3.7.1 Darwin/18.7.0 botocore/1.12.121", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "a0c6d67f-f29e-4237-9d1c-43bf56457d03", "record_id": "flaws_cloudtrail:0000315:a0c6d67f-f29e-4237-9d1c-43bf56457d03", "row_index": 315, "timestamp": "2019-07-30T03:10:02Z", "event_type": "GetPolicy202224v2", "event_source": "lambda.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "140.178.2.6", "user_agent": "aws-cli/1.16.131 Python/3.7.1 Darwin/18.7.0 botocore/1.12.121", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 693, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "a0c6d67f-f29e-4237-9d1c-43bf56457d03", "eventTime": "2019-07-30T03:10:02Z", "eventName": "GetPolicy202224v2", "eventSource": "lambda.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "140.178.2.6", "userAgent": "aws-cli/1.16.131 Python/3.7.1 Darwin/18.7.0 botocore/1.12.121", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"functionName": "Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "a0c6d67f-f29e-4237-9d1c-43bf56457d03", "record_id": "flaws_cloudtrail:0000316:a0c6d67f-f29e-4237-9d1c-43bf56457d03", "row_index": 316, "timestamp": "2019-07-30T03:10:02Z", "event_type": "GetPolicy202224v2", "event_source": "lambda.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "140.178.2.6", "user_agent": "aws-cli/1.16.131 Python/3.7.1 Darwin/18.7.0 botocore/1.12.121", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 693, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "a0c6d67f-f29e-4237-9d1c-43bf56457d03", "eventTime": "2019-07-30T03:10:02Z", "eventName": "GetPolicy202224v2", "eventSource": "lambda.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "140.178.2.6", "userAgent": "aws-cli/1.16.131 Python/3.7.1 Darwin/18.7.0 botocore/1.12.121", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"functionName": "Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "7044aae0-ec7e-4aa1-98da-1eb74274fb68", "record_id": "flaws_cloudtrail:0000317:7044aae0-ec7e-4aa1-98da-1eb74274fb68", "row_index": 317, "timestamp": "2019-07-30T03:10:20Z", "event_type": "GetRestApi", "event_source": "apigateway.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "140.178.2.6", "user_agent": "aws-cli/1.16.131 Python/3.7.1 Darwin/18.7.0 botocore/1.12.121", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 721, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "readOnly", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "7044aae0-ec7e-4aa1-98da-1eb74274fb68", "eventTime": "2019-07-30T03:10:20Z", "eventName": "GetRestApi", "eventSource": "apigateway.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "140.178.2.6", "userAgent": "aws-cli/1.16.131 Python/3.7.1 Darwin/18.7.0 botocore/1.12.121", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"restApiId": "s33ppypa75", "template": false}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "7044aae0-ec7e-4aa1-98da-1eb74274fb68", "record_id": "flaws_cloudtrail:0000318:7044aae0-ec7e-4aa1-98da-1eb74274fb68", "row_index": 318, "timestamp": "2019-07-30T03:10:20Z", "event_type": "GetRestApi", "event_source": "apigateway.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "140.178.2.6", "user_agent": "aws-cli/1.16.131 Python/3.7.1 Darwin/18.7.0 botocore/1.12.121", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 721, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "readOnly", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "7044aae0-ec7e-4aa1-98da-1eb74274fb68", "eventTime": "2019-07-30T03:10:20Z", "eventName": "GetRestApi", "eventSource": "apigateway.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "140.178.2.6", "userAgent": "aws-cli/1.16.131 Python/3.7.1 Darwin/18.7.0 botocore/1.12.121", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"restApiId": "s33ppypa75", "template": false}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "4a97fc60-5b62-4fb9-b2ee-f2ce014ae541", "record_id": "flaws_cloudtrail:0000319:4a97fc60-5b62-4fb9-b2ee-f2ce014ae541", "row_index": 319, "timestamp": "2019-07-30T03:10:56Z", "event_type": "GetStages", "event_source": "apigateway.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "140.178.2.6", "user_agent": "aws-cli/1.16.131 Python/3.7.1 Darwin/18.7.0 botocore/1.12.121", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 722, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "readOnly", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "4a97fc60-5b62-4fb9-b2ee-f2ce014ae541", "eventTime": "2019-07-30T03:10:56Z", "eventName": "GetStages", "eventSource": "apigateway.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "140.178.2.6", "userAgent": "aws-cli/1.16.131 Python/3.7.1 Darwin/18.7.0 botocore/1.12.121", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"restApiId": "s33ppypa75", "template": false}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "4a97fc60-5b62-4fb9-b2ee-f2ce014ae541", "record_id": "flaws_cloudtrail:0000320:4a97fc60-5b62-4fb9-b2ee-f2ce014ae541", "row_index": 320, "timestamp": "2019-07-30T03:10:56Z", "event_type": "GetStages", "event_source": "apigateway.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "140.178.2.6", "user_agent": "aws-cli/1.16.131 Python/3.7.1 Darwin/18.7.0 botocore/1.12.121", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 722, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "readOnly", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "4a97fc60-5b62-4fb9-b2ee-f2ce014ae541", "eventTime": "2019-07-30T03:10:56Z", "eventName": "GetStages", "eventSource": "apigateway.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "140.178.2.6", "userAgent": "aws-cli/1.16.131 Python/3.7.1 Darwin/18.7.0 botocore/1.12.121", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"restApiId": "s33ppypa75", "template": false}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "4edc1b29-8b27-4649-b1c0-5b9175bf7ac7", "record_id": "flaws_cloudtrail:0000321:4edc1b29-8b27-4649-b1c0-5b9175bf7ac7", "row_index": 321, "timestamp": "2019-07-30T03:11:18Z", "event_type": "GetResources", "event_source": "apigateway.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "140.178.2.6", "user_agent": "aws-cli/1.16.131 Python/3.7.1 Darwin/18.7.0 botocore/1.12.121", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 725, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "readOnly", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "4edc1b29-8b27-4649-b1c0-5b9175bf7ac7", "eventTime": "2019-07-30T03:11:18Z", "eventName": "GetResources", "eventSource": "apigateway.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "140.178.2.6", "userAgent": "aws-cli/1.16.131 Python/3.7.1 Darwin/18.7.0 botocore/1.12.121", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"restApiId": "s33ppypa75", "template": false}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "4edc1b29-8b27-4649-b1c0-5b9175bf7ac7", "record_id": "flaws_cloudtrail:0000322:4edc1b29-8b27-4649-b1c0-5b9175bf7ac7", "row_index": 322, "timestamp": "2019-07-30T03:11:18Z", "event_type": "GetResources", "event_source": "apigateway.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "140.178.2.6", "user_agent": "aws-cli/1.16.131 Python/3.7.1 Darwin/18.7.0 botocore/1.12.121", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 725, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "readOnly", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "4edc1b29-8b27-4649-b1c0-5b9175bf7ac7", "eventTime": "2019-07-30T03:11:18Z", "eventName": "GetResources", "eventSource": "apigateway.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "140.178.2.6", "userAgent": "aws-cli/1.16.131 Python/3.7.1 Darwin/18.7.0 botocore/1.12.121", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"restApiId": "s33ppypa75", "template": false}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "cbe4a0e1-acac-40eb-9b06-657fc23ba86e", "record_id": "flaws_cloudtrail:0000323:cbe4a0e1-acac-40eb-9b06-657fc23ba86e", "row_index": 323, "timestamp": "2019-07-30T03:11:45Z", "event_type": "GetResources", "event_source": "apigateway.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "140.178.2.6", "user_agent": "aws-cli/1.16.131 Python/3.7.1 Darwin/18.7.0 botocore/1.12.121", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 725, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "readOnly", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "cbe4a0e1-acac-40eb-9b06-657fc23ba86e", "eventTime": "2019-07-30T03:11:45Z", "eventName": "GetResources", "eventSource": "apigateway.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "140.178.2.6", "userAgent": "aws-cli/1.16.131 Python/3.7.1 Darwin/18.7.0 botocore/1.12.121", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"restApiId": "s33ppypa75", "template": false}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "cbe4a0e1-acac-40eb-9b06-657fc23ba86e", "record_id": "flaws_cloudtrail:0000324:cbe4a0e1-acac-40eb-9b06-657fc23ba86e", "row_index": 324, "timestamp": "2019-07-30T03:11:45Z", "event_type": "GetResources", "event_source": "apigateway.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "140.178.2.6", "user_agent": "aws-cli/1.16.131 Python/3.7.1 Darwin/18.7.0 botocore/1.12.121", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 725, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "readOnly", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "cbe4a0e1-acac-40eb-9b06-657fc23ba86e", "eventTime": "2019-07-30T03:11:45Z", "eventName": "GetResources", "eventSource": "apigateway.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "140.178.2.6", "userAgent": "aws-cli/1.16.131 Python/3.7.1 Darwin/18.7.0 botocore/1.12.121", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"restApiId": "s33ppypa75", "template": false}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "79e90f05-def9-432f-b39d-d60160236391", "record_id": "flaws_cloudtrail:0000325:79e90f05-def9-432f-b39d-d60160236391", "row_index": 325, "timestamp": "2019-07-30T03:11:48Z", "event_type": "GetStages", "event_source": "apigateway.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "140.178.2.6", "user_agent": "aws-cli/1.16.131 Python/3.7.1 Darwin/18.7.0 botocore/1.12.121", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 722, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "readOnly", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "79e90f05-def9-432f-b39d-d60160236391", "eventTime": "2019-07-30T03:11:48Z", "eventName": "GetStages", "eventSource": "apigateway.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "140.178.2.6", "userAgent": "aws-cli/1.16.131 Python/3.7.1 Darwin/18.7.0 botocore/1.12.121", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"restApiId": "s33ppypa75", "template": false}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "79e90f05-def9-432f-b39d-d60160236391", "record_id": "flaws_cloudtrail:0000326:79e90f05-def9-432f-b39d-d60160236391", "row_index": 326, "timestamp": "2019-07-30T03:11:48Z", "event_type": "GetStages", "event_source": "apigateway.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "140.178.2.6", "user_agent": "aws-cli/1.16.131 Python/3.7.1 Darwin/18.7.0 botocore/1.12.121", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 722, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "readOnly", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "79e90f05-def9-432f-b39d-d60160236391", "eventTime": "2019-07-30T03:11:48Z", "eventName": "GetStages", "eventSource": "apigateway.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "140.178.2.6", "userAgent": "aws-cli/1.16.131 Python/3.7.1 Darwin/18.7.0 botocore/1.12.121", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"restApiId": "s33ppypa75", "template": false}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "b743d634-957f-4714-8c5a-555d81ef5005", "record_id": "flaws_cloudtrail:0000327:b743d634-957f-4714-8c5a-555d81ef5005", "row_index": 327, "timestamp": "2019-07-30T03:12:08Z", "event_type": "GetStage", "event_source": "apigateway.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "140.178.2.6", "user_agent": "aws-cli/1.16.131 Python/3.7.1 Darwin/18.7.0 botocore/1.12.121", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 740, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "readOnly", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "b743d634-957f-4714-8c5a-555d81ef5005", "eventTime": "2019-07-30T03:12:08Z", "eventName": "GetStage", "eventSource": "apigateway.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "140.178.2.6", "userAgent": "aws-cli/1.16.131 Python/3.7.1 Darwin/18.7.0 botocore/1.12.121", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"restApiId": "s33ppypa75", "stageName": "Prod", "template": false}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "b743d634-957f-4714-8c5a-555d81ef5005", "record_id": "flaws_cloudtrail:0000328:b743d634-957f-4714-8c5a-555d81ef5005", "row_index": 328, "timestamp": "2019-07-30T03:12:08Z", "event_type": "GetStage", "event_source": "apigateway.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "140.178.2.6", "user_agent": "aws-cli/1.16.131 Python/3.7.1 Darwin/18.7.0 botocore/1.12.121", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 740, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "readOnly", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "b743d634-957f-4714-8c5a-555d81ef5005", "eventTime": "2019-07-30T03:12:08Z", "eventName": "GetStage", "eventSource": "apigateway.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "140.178.2.6", "userAgent": "aws-cli/1.16.131 Python/3.7.1 Darwin/18.7.0 botocore/1.12.121", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"restApiId": "s33ppypa75", "stageName": "Prod", "template": false}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "8897a1c1-3923-44de-81fb-c50ffed7e1c3", "record_id": "flaws_cloudtrail:0000329:8897a1c1-3923-44de-81fb-c50ffed7e1c3", "row_index": 329, "timestamp": "2019-07-30T03:12:49Z", "event_type": "GetDeployment", "event_source": "apigateway.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "140.178.2.6", "user_agent": "aws-cli/1.16.131 Python/3.7.1 Darwin/18.7.0 botocore/1.12.121", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 750, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "readOnly", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "8897a1c1-3923-44de-81fb-c50ffed7e1c3", "eventTime": "2019-07-30T03:12:49Z", "eventName": "GetDeployment", "eventSource": "apigateway.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "140.178.2.6", "userAgent": "aws-cli/1.16.131 Python/3.7.1 Darwin/18.7.0 botocore/1.12.121", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"deploymentId": "8gppiv", "restApiId": "s33ppypa75", "template": false}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "8897a1c1-3923-44de-81fb-c50ffed7e1c3", "record_id": "flaws_cloudtrail:0000330:8897a1c1-3923-44de-81fb-c50ffed7e1c3", "row_index": 330, "timestamp": "2019-07-30T03:12:49Z", "event_type": "GetDeployment", "event_source": "apigateway.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "140.178.2.6", "user_agent": "aws-cli/1.16.131 Python/3.7.1 Darwin/18.7.0 botocore/1.12.121", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 750, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "readOnly", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "8897a1c1-3923-44de-81fb-c50ffed7e1c3", "eventTime": "2019-07-30T03:12:49Z", "eventName": "GetDeployment", "eventSource": "apigateway.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "140.178.2.6", "userAgent": "aws-cli/1.16.131 Python/3.7.1 Darwin/18.7.0 botocore/1.12.121", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"deploymentId": "8gppiv", "restApiId": "s33ppypa75", "template": false}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "8759ec71-7732-403f-b40d-30e39f2b5534", "record_id": "flaws_cloudtrail:0000331:8759ec71-7732-403f-b40d-30e39f2b5534", "row_index": 331, "timestamp": "2019-07-30T03:12:59Z", "event_type": "AssumeRole", "event_source": "sts.amazonaws.com", "principal": {"type": "AWSService", "arn": null, "account_id": null, "principal_id": null, "user_name": null, "access_key_id": null, "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "lambda.amazonaws.com", "user_agent": "lambda.amazonaws.com", "aws_region": "us-west-2"}, "resource_arns": ["arn:aws:iam::811596193553:role/service-role/Level6"], "raw_record_size_bytes": 1613, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "resources", "responseElements", "sharedEventID", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "8759ec71-7732-403f-b40d-30e39f2b5534", "eventTime": "2019-07-30T03:12:59Z", "eventName": "AssumeRole", "eventSource": "sts.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "lambda.amazonaws.com", "userAgent": "lambda.amazonaws.com", "awsRegion": "us-west-2", "userIdentity": {"type": "AWSService", "invokedBy": "lambda.amazonaws.com"}, "requestParameters": {"roleSessionName": "Level6", "roleArn": "arn:aws:iam::811596193553:role/service-role/Level6"}, "responseElements": {"credentials": {"accessKeyId": "ASIACRDJ74IBRWIS8YN0", "expiration": "Jul 30, 2019 3:12:59 PM", "sessionToken": "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"}}, "resources": [{"ARN": "arn:aws:iam::811596193553:role/service-role/Level6", "accountId": "811596193553", "type": "AWS::IAM::Role"}]}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "f38191ef-58da-40e6-9840-0bad0d91c5c5", "record_id": "flaws_cloudtrail:0000332:f38191ef-58da-40e6-9840-0bad0d91c5c5", "row_index": 332, "timestamp": "2019-07-30T03:12:59Z", "event_type": "AssumeRole", "event_source": "sts.amazonaws.com", "principal": {"type": "AWSService", "arn": null, "account_id": null, "principal_id": null, "user_name": null, "access_key_id": null, "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "lambda.amazonaws.com", "user_agent": "lambda.amazonaws.com", "aws_region": "us-west-2"}, "resource_arns": ["arn:aws:iam::811596193553:role/service-role/Level6"], "raw_record_size_bytes": 1618, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "resources", "responseElements", "sharedEventID", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "f38191ef-58da-40e6-9840-0bad0d91c5c5", "eventTime": "2019-07-30T03:12:59Z", "eventName": "AssumeRole", "eventSource": "sts.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "lambda.amazonaws.com", "userAgent": "lambda.amazonaws.com", "awsRegion": "us-west-2", "userIdentity": {"type": "AWSService", "invokedBy": "lambda.amazonaws.com"}, "requestParameters": {"roleSessionName": "Level6", "roleArn": "arn:aws:iam::811596193553:role/service-role/Level6"}, "responseElements": {"credentials": {"accessKeyId": "ASIASJTJ6D0L5J0PJ8GX", "expiration": "Jul 30, 2019 3:12:59 PM", "sessionToken": "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"}}, "resources": [{"ARN": "arn:aws:iam::811596193553:role/service-role/Level6", "accountId": "811596193553", "type": "AWS::IAM::Role"}]}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "7d9b5c2c-ee15-4ad9-8f4f-8b5b55f1b960", "record_id": "flaws_cloudtrail:0000333:7d9b5c2c-ee15-4ad9-8f4f-8b5b55f1b960", "row_index": 333, "timestamp": "2019-07-30T03:12:59Z", "event_type": "CreateLogStream", "event_source": "logs.amazonaws.com", "principal": {"type": "AssumedRole", "arn": "arn:aws:sts::811596193553:assumed-role/Level6/Level6", "account_id": "811596193553", "principal_id": "AROAI4E1FBACLY3FPC6BB:Level6", "user_name": null, "access_key_id": "ASIASJTJ6D0L5J0PJ8GX", "session_issuer_arn": "arn:aws:iam::811596193553:role/service-role/Level6", "session_issuer_user_name": "Level6"}, "network": {"source_ip": "136.2.0.124", "user_agent": "awslambda-worker", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1028, "raw_record_depth": 4, "raw_record_top_level_keys": ["apiVersion", "awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "7d9b5c2c-ee15-4ad9-8f4f-8b5b55f1b960", "eventTime": "2019-07-30T03:12:59Z", "eventName": "CreateLogStream", "eventSource": "logs.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "136.2.0.124", "userAgent": "awslambda-worker", "awsRegion": "us-west-2", "userIdentity": {"type": "AssumedRole", "principalId": "AROAI4E1FBACLY3FPC6BB:Level6", "arn": "arn:aws:sts::811596193553:assumed-role/Level6/Level6", "accountId": "811596193553", "accessKeyId": "ASIASJTJ6D0L5J0PJ8GX", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2019-07-30T03:12:59Z"}, "sessionIssuer": {"type": "Role", "principalId": "AROAI4E1FBACLY3FPC6BB", "arn": "arn:aws:iam::811596193553:role/service-role/Level6", "accountId": "811596193553", "userName": "Level6"}}}, "requestParameters": {"logStreamName": "2019/07/30/[$LATEST]99feab4f4713fa25b3867a8525b19f7d", "logGroupName": "/aws/lambda/Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "f38191ef-58da-40e6-9840-0bad0d91c5c5", "record_id": "flaws_cloudtrail:0000334:f38191ef-58da-40e6-9840-0bad0d91c5c5", "row_index": 334, "timestamp": "2019-07-30T03:12:59Z", "event_type": "AssumeRole", "event_source": "sts.amazonaws.com", "principal": {"type": "AWSService", "arn": null, "account_id": null, "principal_id": null, "user_name": null, "access_key_id": null, "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "lambda.amazonaws.com", "user_agent": "lambda.amazonaws.com", "aws_region": "us-west-2"}, "resource_arns": ["arn:aws:iam::811596193553:role/service-role/Level6"], "raw_record_size_bytes": 1618, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "resources", "responseElements", "sharedEventID", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "f38191ef-58da-40e6-9840-0bad0d91c5c5", "eventTime": "2019-07-30T03:12:59Z", "eventName": "AssumeRole", "eventSource": "sts.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "lambda.amazonaws.com", "userAgent": "lambda.amazonaws.com", "awsRegion": "us-west-2", "userIdentity": {"type": "AWSService", "invokedBy": "lambda.amazonaws.com"}, "requestParameters": {"roleSessionName": "Level6", "roleArn": "arn:aws:iam::811596193553:role/service-role/Level6"}, "responseElements": {"credentials": {"accessKeyId": "ASIASJTJ6D0L5J0PJ8GX", "expiration": "Jul 30, 2019 3:12:59 PM", "sessionToken": "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"}}, "resources": [{"ARN": "arn:aws:iam::811596193553:role/service-role/Level6", "accountId": "811596193553", "type": "AWS::IAM::Role"}]}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "7d9b5c2c-ee15-4ad9-8f4f-8b5b55f1b960", "record_id": "flaws_cloudtrail:0000335:7d9b5c2c-ee15-4ad9-8f4f-8b5b55f1b960", "row_index": 335, "timestamp": "2019-07-30T03:12:59Z", "event_type": "CreateLogStream", "event_source": "logs.amazonaws.com", "principal": {"type": "AssumedRole", "arn": "arn:aws:sts::811596193553:assumed-role/Level6/Level6", "account_id": "811596193553", "principal_id": "AROAI4E1FBACLY3FPC6BB:Level6", "user_name": null, "access_key_id": "ASIASJTJ6D0L5J0PJ8GX", "session_issuer_arn": "arn:aws:iam::811596193553:role/service-role/Level6", "session_issuer_user_name": "Level6"}, "network": {"source_ip": "136.2.0.124", "user_agent": "awslambda-worker", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1028, "raw_record_depth": 4, "raw_record_top_level_keys": ["apiVersion", "awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "7d9b5c2c-ee15-4ad9-8f4f-8b5b55f1b960", "eventTime": "2019-07-30T03:12:59Z", "eventName": "CreateLogStream", "eventSource": "logs.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "136.2.0.124", "userAgent": "awslambda-worker", "awsRegion": "us-west-2", "userIdentity": {"type": "AssumedRole", "principalId": "AROAI4E1FBACLY3FPC6BB:Level6", "arn": "arn:aws:sts::811596193553:assumed-role/Level6/Level6", "accountId": "811596193553", "accessKeyId": "ASIASJTJ6D0L5J0PJ8GX", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2019-07-30T03:12:59Z"}, "sessionIssuer": {"type": "Role", "principalId": "AROAI4E1FBACLY3FPC6BB", "arn": "arn:aws:iam::811596193553:role/service-role/Level6", "accountId": "811596193553", "userName": "Level6"}}}, "requestParameters": {"logStreamName": "2019/07/30/[$LATEST]99feab4f4713fa25b3867a8525b19f7d", "logGroupName": "/aws/lambda/Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "8759ec71-7732-403f-b40d-30e39f2b5534", "record_id": "flaws_cloudtrail:0000336:8759ec71-7732-403f-b40d-30e39f2b5534", "row_index": 336, "timestamp": "2019-07-30T03:12:59Z", "event_type": "AssumeRole", "event_source": "sts.amazonaws.com", "principal": {"type": "AWSService", "arn": null, "account_id": null, "principal_id": null, "user_name": null, "access_key_id": null, "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "lambda.amazonaws.com", "user_agent": "lambda.amazonaws.com", "aws_region": "us-west-2"}, "resource_arns": ["arn:aws:iam::811596193553:role/service-role/Level6"], "raw_record_size_bytes": 1613, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "resources", "responseElements", "sharedEventID", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "8759ec71-7732-403f-b40d-30e39f2b5534", "eventTime": "2019-07-30T03:12:59Z", "eventName": "AssumeRole", "eventSource": "sts.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "lambda.amazonaws.com", "userAgent": "lambda.amazonaws.com", "awsRegion": "us-west-2", "userIdentity": {"type": "AWSService", "invokedBy": "lambda.amazonaws.com"}, "requestParameters": {"roleSessionName": "Level6", "roleArn": "arn:aws:iam::811596193553:role/service-role/Level6"}, "responseElements": {"credentials": {"accessKeyId": "ASIACRDJ74IBRWIS8YN0", "expiration": "Jul 30, 2019 3:12:59 PM", "sessionToken": "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"}}, "resources": [{"ARN": "arn:aws:iam::811596193553:role/service-role/Level6", "accountId": "811596193553", "type": "AWS::IAM::Role"}]}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "02a7d435-2319-462f-8319-5d5bd44cd5a0", "record_id": "flaws_cloudtrail:0000337:02a7d435-2319-462f-8319-5d5bd44cd5a0", "row_index": 337, "timestamp": "2019-07-30T03:17:37Z", "event_type": "CreateKeyPair", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "198.3.215.7", "user_agent": "aws-cli/1.16.206 Python/3.6.5 Darwin/18.6.0 botocore/1.12.196", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 792, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "02a7d435-2319-462f-8319-5d5bd44cd5a0", "eventTime": "2019-07-30T03:17:37Z", "eventName": "CreateKeyPair", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "198.3.215.7", "userAgent": "aws-cli/1.16.206 Python/3.6.5 Darwin/18.6.0 botocore/1.12.196", "awsRegion": "us-west-2", "errorCode": "Client.UnauthorizedOperation", "errorMessage": "You are not authorized to perform this operation.", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"keyName": "MyKeyPair"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "02a7d435-2319-462f-8319-5d5bd44cd5a0", "record_id": "flaws_cloudtrail:0000338:02a7d435-2319-462f-8319-5d5bd44cd5a0", "row_index": 338, "timestamp": "2019-07-30T03:17:37Z", "event_type": "CreateKeyPair", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "198.3.215.7", "user_agent": "aws-cli/1.16.206 Python/3.6.5 Darwin/18.6.0 botocore/1.12.196", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 792, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "02a7d435-2319-462f-8319-5d5bd44cd5a0", "eventTime": "2019-07-30T03:17:37Z", "eventName": "CreateKeyPair", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "198.3.215.7", "userAgent": "aws-cli/1.16.206 Python/3.6.5 Darwin/18.6.0 botocore/1.12.196", "awsRegion": "us-west-2", "errorCode": "Client.UnauthorizedOperation", "errorMessage": "You are not authorized to perform this operation.", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"keyName": "MyKeyPair"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "37ce373c-10e2-4167-9195-d00b41f97b66", "record_id": "flaws_cloudtrail:0000339:37ce373c-10e2-4167-9195-d00b41f97b66", "row_index": 339, "timestamp": "2019-07-30T03:20:50Z", "event_type": "ListBuckets", "event_source": "s3.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "54.250.189.6", "user_agent": "[aws-cli/1.16.200 Python/3.7.4 Darwin/18.5.0 botocore/1.12.190]", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 798, "raw_record_depth": 3, "raw_record_top_level_keys": ["additionalEventData", "awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "37ce373c-10e2-4167-9195-d00b41f97b66", "eventTime": "2019-07-30T03:20:50Z", "eventName": "ListBuckets", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "54.250.189.6", "userAgent": "[aws-cli/1.16.200 Python/3.7.4 Darwin/18.5.0 botocore/1.12.190]", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"host": ["s3.amazonaws.com"]}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "37ce373c-10e2-4167-9195-d00b41f97b66", "record_id": "flaws_cloudtrail:0000340:37ce373c-10e2-4167-9195-d00b41f97b66", "row_index": 340, "timestamp": "2019-07-30T03:20:50Z", "event_type": "ListBuckets", "event_source": "s3.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "54.250.189.6", "user_agent": "[aws-cli/1.16.200 Python/3.7.4 Darwin/18.5.0 botocore/1.12.190]", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 798, "raw_record_depth": 3, "raw_record_top_level_keys": ["additionalEventData", "awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "37ce373c-10e2-4167-9195-d00b41f97b66", "eventTime": "2019-07-30T03:20:50Z", "eventName": "ListBuckets", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "54.250.189.6", "userAgent": "[aws-cli/1.16.200 Python/3.7.4 Darwin/18.5.0 botocore/1.12.190]", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"host": ["s3.amazonaws.com"]}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "81a967cf-3717-4056-86f1-777056bb58", "record_id": "flaws_cloudtrail:0000341:81a967cf-3717-4056-86f1-777056bb58", "row_index": 341, "timestamp": "2019-07-30T03:22:33Z", "event_type": "ListBuckets", "event_source": "s3.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "54.250.189.6", "user_agent": "[aws-cli/1.16.200 Python/3.7.4 Darwin/18.5.0 botocore/1.12.190]", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 798, "raw_record_depth": 3, "raw_record_top_level_keys": ["additionalEventData", "awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "81a967cf-3717-4056-86f1-777056bb58", "eventTime": "2019-07-30T03:22:33Z", "eventName": "ListBuckets", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "54.250.189.6", "userAgent": "[aws-cli/1.16.200 Python/3.7.4 Darwin/18.5.0 botocore/1.12.190]", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"host": ["s3.amazonaws.com"]}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "81a967cf-3717-4056-86f1-777056bb58", "record_id": "flaws_cloudtrail:0000342:81a967cf-3717-4056-86f1-777056bb58", "row_index": 342, "timestamp": "2019-07-30T03:22:33Z", "event_type": "ListBuckets", "event_source": "s3.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "54.250.189.6", "user_agent": "[aws-cli/1.16.200 Python/3.7.4 Darwin/18.5.0 botocore/1.12.190]", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 798, "raw_record_depth": 3, "raw_record_top_level_keys": ["additionalEventData", "awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "81a967cf-3717-4056-86f1-777056bb58", "eventTime": "2019-07-30T03:22:33Z", "eventName": "ListBuckets", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "54.250.189.6", "userAgent": "[aws-cli/1.16.200 Python/3.7.4 Darwin/18.5.0 botocore/1.12.190]", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"host": ["s3.amazonaws.com"]}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "09a73ee0-5e92-4fc4-b2ec-cdfa45e8f156", "record_id": "flaws_cloudtrail:0000343:09a73ee0-5e92-4fc4-b2ec-cdfa45e8f156", "row_index": 343, "timestamp": "2019-07-30T03:27:24Z", "event_type": "ModifySnapshotAttribute", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "198.3.215.7", "user_agent": "aws-cli/1.16.206 Python/3.6.5 Darwin/18.6.0 botocore/1.12.196", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 924, "raw_record_depth": 6, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "09a73ee0-5e92-4fc4-b2ec-cdfa45e8f156", "eventTime": "2019-07-30T03:27:24Z", "eventName": "ModifySnapshotAttribute", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "198.3.215.7", "userAgent": "aws-cli/1.16.206 Python/3.6.5 Darwin/18.6.0 botocore/1.12.196", "awsRegion": "us-west-2", "errorCode": "Client.UnauthorizedOperation", "errorMessage": "You are not authorized to perform this operation.", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"snapshotId": "snap-19323016", "createVolumePermission": {"add": {"items": [{"userId": "642574392309"}]}}, "attributeType": "CREATE_VOLUME_PERMISSION"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "09a73ee0-5e92-4fc4-b2ec-cdfa45e8f156", "record_id": "flaws_cloudtrail:0000344:09a73ee0-5e92-4fc4-b2ec-cdfa45e8f156", "row_index": 344, "timestamp": "2019-07-30T03:27:24Z", "event_type": "ModifySnapshotAttribute", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "198.3.215.7", "user_agent": "aws-cli/1.16.206 Python/3.6.5 Darwin/18.6.0 botocore/1.12.196", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 924, "raw_record_depth": 6, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "09a73ee0-5e92-4fc4-b2ec-cdfa45e8f156", "eventTime": "2019-07-30T03:27:24Z", "eventName": "ModifySnapshotAttribute", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "198.3.215.7", "userAgent": "aws-cli/1.16.206 Python/3.6.5 Darwin/18.6.0 botocore/1.12.196", "awsRegion": "us-west-2", "errorCode": "Client.UnauthorizedOperation", "errorMessage": "You are not authorized to perform this operation.", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"snapshotId": "snap-19323016", "createVolumePermission": {"add": {"items": [{"userId": "642574392309"}]}}, "attributeType": "CREATE_VOLUME_PERMISSION"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "472164e2-0cbe-448a-a4fc-89adaec55a5b", "record_id": "flaws_cloudtrail:0000345:472164e2-0cbe-448a-a4fc-89adaec55a5b", "row_index": 345, "timestamp": "2019-07-30T03:29:41Z", "event_type": "GetCallerIdentity", "event_source": "sts.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "198.3.215.7", "user_agent": "aws-cli/1.16.206 Python/3.6.5 Darwin/18.6.0 botocore/1.12.196", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 767, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "472164e2-0cbe-448a-a4fc-89adaec55a5b", "eventTime": "2019-07-30T03:29:41Z", "eventName": "GetCallerIdentity", "eventSource": "sts.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "198.3.215.7", "userAgent": "aws-cli/1.16.206 Python/3.6.5 Darwin/18.6.0 botocore/1.12.196", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "responseElements": {"userId": "AIDA9BO36HFBHKGJAO9C1", "account": "811596193553", "arn": "arn:aws:iam::811596193553:user/backup"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "472164e2-0cbe-448a-a4fc-89adaec55a5b", "record_id": "flaws_cloudtrail:0000346:472164e2-0cbe-448a-a4fc-89adaec55a5b", "row_index": 346, "timestamp": "2019-07-30T03:29:41Z", "event_type": "GetCallerIdentity", "event_source": "sts.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "198.3.215.7", "user_agent": "aws-cli/1.16.206 Python/3.6.5 Darwin/18.6.0 botocore/1.12.196", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 767, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "472164e2-0cbe-448a-a4fc-89adaec55a5b", "eventTime": "2019-07-30T03:29:41Z", "eventName": "GetCallerIdentity", "eventSource": "sts.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "198.3.215.7", "userAgent": "aws-cli/1.16.206 Python/3.6.5 Darwin/18.6.0 botocore/1.12.196", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "responseElements": {"userId": "AIDA9BO36HFBHKGJAO9C1", "account": "811596193553", "arn": "arn:aws:iam::811596193553:user/backup"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "9fedc7af-1ae2-4a5e-bdea-0cb612f7be30", "record_id": "flaws_cloudtrail:0000347:9fedc7af-1ae2-4a5e-bdea-0cb612f7be30", "row_index": 347, "timestamp": "2019-07-30T03:31:14Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "198.3.215.7", "user_agent": "aws-cli/1.16.206 Python/3.6.5 Darwin/18.6.0 botocore/1.12.196", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 784, "raw_record_depth": 5, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "9fedc7af-1ae2-4a5e-bdea-0cb612f7be30", "eventTime": "2019-07-30T03:31:14Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "198.3.215.7", "userAgent": "aws-cli/1.16.206 Python/3.6.5 Darwin/18.6.0 botocore/1.12.196", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"maxResults": 1000, "snapshotSet": {}, "ownersSet": {"items": [{"owner": "811596193553"}]}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "9fedc7af-1ae2-4a5e-bdea-0cb612f7be30", "record_id": "flaws_cloudtrail:0000348:9fedc7af-1ae2-4a5e-bdea-0cb612f7be30", "row_index": 348, "timestamp": "2019-07-30T03:31:14Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "198.3.215.7", "user_agent": "aws-cli/1.16.206 Python/3.6.5 Darwin/18.6.0 botocore/1.12.196", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 784, "raw_record_depth": 5, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "9fedc7af-1ae2-4a5e-bdea-0cb612f7be30", "eventTime": "2019-07-30T03:31:14Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "198.3.215.7", "userAgent": "aws-cli/1.16.206 Python/3.6.5 Darwin/18.6.0 botocore/1.12.196", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"maxResults": 1000, "snapshotSet": {}, "ownersSet": {"items": [{"owner": "811596193553"}]}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "a50dc63e-5d1e-456e-843c-20c21c1a1414", "record_id": "flaws_cloudtrail:0000349:a50dc63e-5d1e-456e-843c-20c21c1a1414", "row_index": 349, "timestamp": "2019-07-30T03:31:35Z", "event_type": "AssumeRole", "event_source": "sts.amazonaws.com", "principal": {"type": "AWSService", "arn": null, "account_id": null, "principal_id": null, "user_name": null, "access_key_id": null, "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "ec2.amazonaws.com", "user_agent": "ec2.amazonaws.com", "aws_region": "us-west-2"}, "resource_arns": ["arn:aws:iam::811596193553:role/flaws"], "raw_record_size_bytes": 1882, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "resources", "responseElements", "sharedEventID", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "a50dc63e-5d1e-456e-843c-20c21c1a1414", "eventTime": "2019-07-30T03:31:35Z", "eventName": "AssumeRole", "eventSource": "sts.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "ec2.amazonaws.com", "userAgent": "ec2.amazonaws.com", "awsRegion": "us-west-2", "userIdentity": {"type": "AWSService", "invokedBy": "ec2.amazonaws.com"}, "requestParameters": {"roleSessionName": "i-aa2d3b42e5c6e801a", "roleArn": "arn:aws:iam::811596193553:role/flaws"}, "responseElements": {"credentials": {"accessKeyId": "ASIA4A6WWUDEVWWH4YQP", "expiration": "Jul 30, 2019 9:50:58 AM", "sessionToken": "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"}}, "resources": [{"ARN": "arn:aws:iam::811596193553:role/flaws", "accountId": "811596193553", "type": "AWS::IAM::Role"}]}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "a50dc63e-5d1e-456e-843c-20c21c1a1414", "record_id": "flaws_cloudtrail:0000350:a50dc63e-5d1e-456e-843c-20c21c1a1414", "row_index": 350, "timestamp": "2019-07-30T03:31:35Z", "event_type": "AssumeRole", "event_source": "sts.amazonaws.com", "principal": {"type": "AWSService", "arn": null, "account_id": null, "principal_id": null, "user_name": null, "access_key_id": null, "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "ec2.amazonaws.com", "user_agent": "ec2.amazonaws.com", "aws_region": "us-west-2"}, "resource_arns": ["arn:aws:iam::811596193553:role/flaws"], "raw_record_size_bytes": 1882, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "resources", "responseElements", "sharedEventID", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "a50dc63e-5d1e-456e-843c-20c21c1a1414", "eventTime": "2019-07-30T03:31:35Z", "eventName": "AssumeRole", "eventSource": "sts.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "ec2.amazonaws.com", "userAgent": "ec2.amazonaws.com", "awsRegion": "us-west-2", "userIdentity": {"type": "AWSService", "invokedBy": "ec2.amazonaws.com"}, "requestParameters": {"roleSessionName": "i-aa2d3b42e5c6e801a", "roleArn": "arn:aws:iam::811596193553:role/flaws"}, "responseElements": {"credentials": {"accessKeyId": "ASIA4A6WWUDEVWWH4YQP", "expiration": "Jul 30, 2019 9:50:58 AM", "sessionToken": "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"}}, "resources": [{"ARN": "arn:aws:iam::811596193553:role/flaws", "accountId": "811596193553", "type": "AWS::IAM::Role"}]}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "307520b15-3300-4604-83c3-8c9b906342c6", "record_id": "flaws_cloudtrail:0000351:307520b15-3300-4604-83c3-8c9b906342c6", "row_index": 351, "timestamp": "2019-07-30T03:31:53Z", "event_type": "ModifySnapshotAttribute", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "198.3.215.7", "user_agent": "aws-cli/1.16.206 Python/3.6.5 Darwin/18.6.0 botocore/1.12.196", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 934, "raw_record_depth": 6, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "307520b15-3300-4604-83c3-8c9b906342c6", "eventTime": "2019-07-30T03:31:53Z", "eventName": "ModifySnapshotAttribute", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "198.3.215.7", "userAgent": "aws-cli/1.16.206 Python/3.6.5 Darwin/18.6.0 botocore/1.12.196", "awsRegion": "us-west-2", "errorCode": "Client.UnauthorizedOperation", "errorMessage": "You are not authorized to perform this operation.", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"snapshotId": "snap-83d15d668fb2941db", "createVolumePermission": {"add": {"items": [{"userId": "642574392309"}]}}, "attributeType": "CREATE_VOLUME_PERMISSION"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "307520b15-3300-4604-83c3-8c9b906342c6", "record_id": "flaws_cloudtrail:0000352:307520b15-3300-4604-83c3-8c9b906342c6", "row_index": 352, "timestamp": "2019-07-30T03:31:53Z", "event_type": "ModifySnapshotAttribute", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "198.3.215.7", "user_agent": "aws-cli/1.16.206 Python/3.6.5 Darwin/18.6.0 botocore/1.12.196", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 934, "raw_record_depth": 6, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "307520b15-3300-4604-83c3-8c9b906342c6", "eventTime": "2019-07-30T03:31:53Z", "eventName": "ModifySnapshotAttribute", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "198.3.215.7", "userAgent": "aws-cli/1.16.206 Python/3.6.5 Darwin/18.6.0 botocore/1.12.196", "awsRegion": "us-west-2", "errorCode": "Client.UnauthorizedOperation", "errorMessage": "You are not authorized to perform this operation.", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"snapshotId": "snap-83d15d668fb2941db", "createVolumePermission": {"add": {"items": [{"userId": "642574392309"}]}}, "attributeType": "CREATE_VOLUME_PERMISSION"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "82c4c1d0-e21e-4af6-8540-97a32d4cf709", "record_id": "flaws_cloudtrail:0000353:82c4c1d0-e21e-4af6-8540-97a32d4cf709", "row_index": 353, "timestamp": "2019-07-30T03:35:27Z", "event_type": "CreateVolume", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "198.3.215.7", "user_agent": "aws-cli/1.16.206 Python/3.6.5 Darwin/18.6.0 botocore/1.12.196", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 813, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "82c4c1d0-e21e-4af6-8540-97a32d4cf709", "eventTime": "2019-07-30T03:35:27Z", "eventName": "CreateVolume", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "198.3.215.7", "userAgent": "aws-cli/1.16.206 Python/3.6.5 Darwin/18.6.0 botocore/1.12.196", "awsRegion": "us-west-2", "errorCode": "Client.InvalidZone.NotFound", "errorMessage": "The zone 'us-west-2' does not exist.", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"snapshotId": "snap-83d15d668fb2941db", "zone": "us-west-2"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "82c4c1d0-e21e-4af6-8540-97a32d4cf709", "record_id": "flaws_cloudtrail:0000354:82c4c1d0-e21e-4af6-8540-97a32d4cf709", "row_index": 354, "timestamp": "2019-07-30T03:35:27Z", "event_type": "CreateVolume", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "198.3.215.7", "user_agent": "aws-cli/1.16.206 Python/3.6.5 Darwin/18.6.0 botocore/1.12.196", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 813, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "82c4c1d0-e21e-4af6-8540-97a32d4cf709", "eventTime": "2019-07-30T03:35:27Z", "eventName": "CreateVolume", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "198.3.215.7", "userAgent": "aws-cli/1.16.206 Python/3.6.5 Darwin/18.6.0 botocore/1.12.196", "awsRegion": "us-west-2", "errorCode": "Client.InvalidZone.NotFound", "errorMessage": "The zone 'us-west-2' does not exist.", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"snapshotId": "snap-83d15d668fb2941db", "zone": "us-west-2"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "d010876a-2e42-4971-89fa-b447854cc080", "record_id": "flaws_cloudtrail:0000355:d010876a-2e42-4971-89fa-b447854cc080", "row_index": 355, "timestamp": "2019-07-30T03:37:02Z", "event_type": "DescribeSubnets", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "198.3.215.7", "user_agent": "aws-cli/1.16.206 Python/3.6.5 Darwin/18.6.0 botocore/1.12.196", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 692, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "d010876a-2e42-4971-89fa-b447854cc080", "eventTime": "2019-07-30T03:37:02Z", "eventName": "DescribeSubnets", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "198.3.215.7", "userAgent": "aws-cli/1.16.206 Python/3.6.5 Darwin/18.6.0 botocore/1.12.196", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"subnetSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "d010876a-2e42-4971-89fa-b447854cc080", "record_id": "flaws_cloudtrail:0000356:d010876a-2e42-4971-89fa-b447854cc080", "row_index": 356, "timestamp": "2019-07-30T03:37:02Z", "event_type": "DescribeSubnets", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "198.3.215.7", "user_agent": "aws-cli/1.16.206 Python/3.6.5 Darwin/18.6.0 botocore/1.12.196", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 692, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "d010876a-2e42-4971-89fa-b447854cc080", "eventTime": "2019-07-30T03:37:02Z", "eventName": "DescribeSubnets", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "198.3.215.7", "userAgent": "aws-cli/1.16.206 Python/3.6.5 Darwin/18.6.0 botocore/1.12.196", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"subnetSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "0abcaec8-d885-4186-88bb-912f9e111db2", "record_id": "flaws_cloudtrail:0000357:0abcaec8-d885-4186-88bb-912f9e111db2", "row_index": 357, "timestamp": "2019-07-30T03:37:11Z", "event_type": "CreateVolume", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "198.3.215.7", "user_agent": "aws-cli/1.16.206 Python/3.6.5 Darwin/18.6.0 botocore/1.12.196", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1516, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "0abcaec8-d885-4186-88bb-912f9e111db2", "eventTime": "2019-07-30T03:37:11Z", "eventName": "CreateVolume", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "198.3.215.7", "userAgent": "aws-cli/1.16.206 Python/3.6.5 Darwin/18.6.0 botocore/1.12.196", "awsRegion": "us-west-2", "errorCode": "Client.UnauthorizedOperation", "errorMessage": "You are not authorized to perform this operation. Encoded authorization failure message: bakcMw5sTUYYLSG5ANJgHw5rY6CGpOyisqTzCZtUQ7o5NgSwf8mK7Sr2GbElv5GwtbjoWAhli5Cik0h6J0WKFkyEAp7T9Ul7t3ZubEINGWU-qvZmcaCH-Iw4NasyXrD_G-8QJdWmoSjY1s8fESgs6UhMTxLIYmrDmusy1QmJPwSRM1OfMipnS9iX9snzmdcH5J4guPQYEfhJn-yG_tYmaEip4vHt0BPfpKGHrUS6H46yj35JpkMQI8pAU-9enNkdPjVRE-IdgKBwQzy5BUEtjy354178zHKSu8vviONp5AfDmYA5Dtvczm52EAhg5AXgkPhdRRrjkHuxjHl0XDTmB7a9HwyRCrFdiI-GwKGKLQjhKrFIMXE7RdtV2uwUgLZkcA4Cz3Y56FaZ_k3SLBBgojt-JpzYxGvm9F119WAem39S1WkCUN1fZKXjT4ckpxNr1zVd5Oa717bjb2LdAcuu2-26j8tEjDjHSiLbuiI5N_dh9Bo-Hf6Av8kzQDKnlqHmj6SQEeeDRx3Rzu5mU52bO6CntxjNoN9LQrpOAK1XYPDV8UAGepDsB3uATWRkHDf9sK1fTmlStuz8-3wr6p6zEnWrQ1rO0ZFbbF8ojYNY-jpdqkVDZHjPHICLFvkTBBhxmx8lzwj8", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"snapshotId": "snap-83d15d668fb2941db", "zone": "us-west-2a"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "0abcaec8-d885-4186-88bb-912f9e111db2", "record_id": "flaws_cloudtrail:0000358:0abcaec8-d885-4186-88bb-912f9e111db2", "row_index": 358, "timestamp": "2019-07-30T03:37:11Z", "event_type": "CreateVolume", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "198.3.215.7", "user_agent": "aws-cli/1.16.206 Python/3.6.5 Darwin/18.6.0 botocore/1.12.196", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1516, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "0abcaec8-d885-4186-88bb-912f9e111db2", "eventTime": "2019-07-30T03:37:11Z", "eventName": "CreateVolume", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "198.3.215.7", "userAgent": "aws-cli/1.16.206 Python/3.6.5 Darwin/18.6.0 botocore/1.12.196", "awsRegion": "us-west-2", "errorCode": "Client.UnauthorizedOperation", "errorMessage": "You are not authorized to perform this operation. Encoded authorization failure message: bakcMw5sTUYYLSG5ANJgHw5rY6CGpOyisqTzCZtUQ7o5NgSwf8mK7Sr2GbElv5GwtbjoWAhli5Cik0h6J0WKFkyEAp7T9Ul7t3ZubEINGWU-qvZmcaCH-Iw4NasyXrD_G-8QJdWmoSjY1s8fESgs6UhMTxLIYmrDmusy1QmJPwSRM1OfMipnS9iX9snzmdcH5J4guPQYEfhJn-yG_tYmaEip4vHt0BPfpKGHrUS6H46yj35JpkMQI8pAU-9enNkdPjVRE-IdgKBwQzy5BUEtjy354178zHKSu8vviONp5AfDmYA5Dtvczm52EAhg5AXgkPhdRRrjkHuxjHl0XDTmB7a9HwyRCrFdiI-GwKGKLQjhKrFIMXE7RdtV2uwUgLZkcA4Cz3Y56FaZ_k3SLBBgojt-JpzYxGvm9F119WAem39S1WkCUN1fZKXjT4ckpxNr1zVd5Oa717bjb2LdAcuu2-26j8tEjDjHSiLbuiI5N_dh9Bo-Hf6Av8kzQDKnlqHmj6SQEeeDRx3Rzu5mU52bO6CntxjNoN9LQrpOAK1XYPDV8UAGepDsB3uATWRkHDf9sK1fTmlStuz8-3wr6p6zEnWrQ1rO0ZFbbF8ojYNY-jpdqkVDZHjPHICLFvkTBBhxmx8lzwj8", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"snapshotId": "snap-83d15d668fb2941db", "zone": "us-west-2a"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "85ce10c3-040d-4c83-be36-c4772d325e3e", "record_id": "flaws_cloudtrail:0000359:85ce10c3-040d-4c83-be36-c4772d325e3e", "row_index": 359, "timestamp": "2019-07-30T03:40:49Z", "event_type": "DecodeAuthorizationMessage", "event_source": "sts.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "198.3.215.7", "user_agent": "aws-cli/1.16.206 Python/3.6.5 Darwin/18.6.0 botocore/1.12.196", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 826, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "85ce10c3-040d-4c83-be36-c4772d325e3e", "eventTime": "2019-07-30T03:40:49Z", "eventName": "DecodeAuthorizationMessage", "eventSource": "sts.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "198.3.215.7", "userAgent": "aws-cli/1.16.206 Python/3.6.5 Darwin/18.6.0 botocore/1.12.196", "awsRegion": "us-east-1", "errorCode": "AccessDenied", "errorMessage": "User: arn:aws:iam::811596193553:user/backup is not authorized to perform: sts:DecodeAuthorizationMessage", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "85ce10c3-040d-4c83-be36-c4772d325e3e", "record_id": "flaws_cloudtrail:0000360:85ce10c3-040d-4c83-be36-c4772d325e3e", "row_index": 360, "timestamp": "2019-07-30T03:40:49Z", "event_type": "DecodeAuthorizationMessage", "event_source": "sts.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "198.3.215.7", "user_agent": "aws-cli/1.16.206 Python/3.6.5 Darwin/18.6.0 botocore/1.12.196", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 826, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "85ce10c3-040d-4c83-be36-c4772d325e3e", "eventTime": "2019-07-30T03:40:49Z", "eventName": "DecodeAuthorizationMessage", "eventSource": "sts.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "198.3.215.7", "userAgent": "aws-cli/1.16.206 Python/3.6.5 Darwin/18.6.0 botocore/1.12.196", "awsRegion": "us-east-1", "errorCode": "AccessDenied", "errorMessage": "User: arn:aws:iam::811596193553:user/backup is not authorized to perform: sts:DecodeAuthorizationMessage", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "6bea0e59-56fb-4370-9b64-65ca88c3834d", "record_id": "flaws_cloudtrail:0000361:6bea0e59-56fb-4370-9b64-65ca88c3834d", "row_index": 361, "timestamp": "2019-07-30T03:43:40Z", "event_type": "ModifySnapshotAttribute", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "198.3.215.7", "user_agent": "aws-cli/1.16.206 Python/3.6.5 Darwin/18.6.0 botocore/1.12.196", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 933, "raw_record_depth": 6, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "6bea0e59-56fb-4370-9b64-65ca88c3834d", "eventTime": "2019-07-30T03:43:40Z", "eventName": "ModifySnapshotAttribute", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "198.3.215.7", "userAgent": "aws-cli/1.16.206 Python/3.6.5 Darwin/18.6.0 botocore/1.12.196", "awsRegion": "us-west-2", "errorCode": "Client.UnauthorizedOperation", "errorMessage": "You are not authorized to perform this operation.", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"snapshotId": "snap-83d15d668fb2941db", "createVolumePermission": {"add": {"items": [{"userId": "642574392309"}]}}, "attributeType": "CREATE_VOLUME_PERMISSION"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "6bea0e59-56fb-4370-9b64-65ca88c3834d", "record_id": "flaws_cloudtrail:0000362:6bea0e59-56fb-4370-9b64-65ca88c3834d", "row_index": 362, "timestamp": "2019-07-30T03:43:40Z", "event_type": "ModifySnapshotAttribute", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "198.3.215.7", "user_agent": "aws-cli/1.16.206 Python/3.6.5 Darwin/18.6.0 botocore/1.12.196", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 933, "raw_record_depth": 6, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "6bea0e59-56fb-4370-9b64-65ca88c3834d", "eventTime": "2019-07-30T03:43:40Z", "eventName": "ModifySnapshotAttribute", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "198.3.215.7", "userAgent": "aws-cli/1.16.206 Python/3.6.5 Darwin/18.6.0 botocore/1.12.196", "awsRegion": "us-west-2", "errorCode": "Client.UnauthorizedOperation", "errorMessage": "You are not authorized to perform this operation.", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"snapshotId": "snap-83d15d668fb2941db", "createVolumePermission": {"add": {"items": [{"userId": "642574392309"}]}}, "attributeType": "CREATE_VOLUME_PERMISSION"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "e05f6828-0526-4cb2-aff4-1e357b0a444b", "record_id": "flaws_cloudtrail:0000363:e05f6828-0526-4cb2-aff4-1e357b0a444b", "row_index": 363, "timestamp": "2019-07-30T03:44:04Z", "event_type": "CreateVolume", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "198.3.215.7", "user_agent": "aws-cli/1.16.206 Python/3.6.5 Darwin/18.6.0 botocore/1.12.196", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1515, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "e05f6828-0526-4cb2-aff4-1e357b0a444b", "eventTime": "2019-07-30T03:44:04Z", "eventName": "CreateVolume", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "198.3.215.7", "userAgent": "aws-cli/1.16.206 Python/3.6.5 Darwin/18.6.0 botocore/1.12.196", "awsRegion": "us-west-2", "errorCode": "Client.UnauthorizedOperation", "errorMessage": "You are not authorized to perform this operation. Encoded authorization failure message: k3xbvva2gtNPVycX5uDjhLmjNoAYp15ljBhhY7ca2pFC0ra4XiBcc6LjNjPMUrT-hBF9n0CutJUU4G1pIwCt_wA4f4wdW7gbiNFIO1_jRskJJdmd74lnWB06Wr21OYkbKG1mhVrR5VivyXNpoVKe8sWXASnzste6zORwNFY4ESfAiuGD4wv-sq5OLwfz3tTa5OkOmnT4tfiVCXDKEysHLKcuswjqEsVZ-P8Ypj2EbvFcfb2R3F66cb2o3HAaZ48khDuVFOyea38ksGzsT5SedcEqGiNMuvcTvcFGwUQsnt5K9f1-XJGidt25yZx5kvX50y3M-0Bl3eGrfqkrEnT3pGefnZ9E4y2WGLfjgzrZwvB1B4pF225ooJejGY_cwXyeV7fSIL30eQXVQX5uCY_U-4XLaIOOFD5vZermaHITUpTKk8Kd94Ufl3GNm9N1kRojwcIBELhSR9WmcOiLkni4a2WCo0XiFpdBkewUTxoSGQRz5ZcqFKWA_p940jHtYEDG4pI7RW37-4dS4Otonv6mFmr7B2KBZmJMNSeisoWICbp-3lAH7vwoEhXyEc1csY-c2g16U_beb0bNkWrGBI4OHQntzVvMUFIPywKOpO5I4K9uqRDAgUy0WTwaG4UeyRQWqKAlkQc", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"snapshotId": "snap-83d15d668fb2941db", "zone": "us-west-2b"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "e05f6828-0526-4cb2-aff4-1e357b0a444b", "record_id": "flaws_cloudtrail:0000364:e05f6828-0526-4cb2-aff4-1e357b0a444b", "row_index": 364, "timestamp": "2019-07-30T03:44:04Z", "event_type": "CreateVolume", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "198.3.215.7", "user_agent": "aws-cli/1.16.206 Python/3.6.5 Darwin/18.6.0 botocore/1.12.196", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1515, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "e05f6828-0526-4cb2-aff4-1e357b0a444b", "eventTime": "2019-07-30T03:44:04Z", "eventName": "CreateVolume", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "198.3.215.7", "userAgent": "aws-cli/1.16.206 Python/3.6.5 Darwin/18.6.0 botocore/1.12.196", "awsRegion": "us-west-2", "errorCode": "Client.UnauthorizedOperation", "errorMessage": "You are not authorized to perform this operation. Encoded authorization failure message: k3xbvva2gtNPVycX5uDjhLmjNoAYp15ljBhhY7ca2pFC0ra4XiBcc6LjNjPMUrT-hBF9n0CutJUU4G1pIwCt_wA4f4wdW7gbiNFIO1_jRskJJdmd74lnWB06Wr21OYkbKG1mhVrR5VivyXNpoVKe8sWXASnzste6zORwNFY4ESfAiuGD4wv-sq5OLwfz3tTa5OkOmnT4tfiVCXDKEysHLKcuswjqEsVZ-P8Ypj2EbvFcfb2R3F66cb2o3HAaZ48khDuVFOyea38ksGzsT5SedcEqGiNMuvcTvcFGwUQsnt5K9f1-XJGidt25yZx5kvX50y3M-0Bl3eGrfqkrEnT3pGefnZ9E4y2WGLfjgzrZwvB1B4pF225ooJejGY_cwXyeV7fSIL30eQXVQX5uCY_U-4XLaIOOFD5vZermaHITUpTKk8Kd94Ufl3GNm9N1kRojwcIBELhSR9WmcOiLkni4a2WCo0XiFpdBkewUTxoSGQRz5ZcqFKWA_p940jHtYEDG4pI7RW37-4dS4Otonv6mFmr7B2KBZmJMNSeisoWICbp-3lAH7vwoEhXyEc1csY-c2g16U_beb0bNkWrGBI4OHQntzVvMUFIPywKOpO5I4K9uqRDAgUy0WTwaG4UeyRQWqKAlkQc", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"snapshotId": "snap-83d15d668fb2941db", "zone": "us-west-2b"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "52d24acb-acf2-4e25-b5ba-f7de93a55e40", "record_id": "flaws_cloudtrail:0000365:52d24acb-acf2-4e25-b5ba-f7de93a55e40", "row_index": 365, "timestamp": "2019-07-30T03:44:07Z", "event_type": "CreateVolume", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "198.3.215.7", "user_agent": "aws-cli/1.16.206 Python/3.6.5 Darwin/18.6.0 botocore/1.12.196", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1518, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "52d24acb-acf2-4e25-b5ba-f7de93a55e40", "eventTime": "2019-07-30T03:44:07Z", "eventName": "CreateVolume", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "198.3.215.7", "userAgent": "aws-cli/1.16.206 Python/3.6.5 Darwin/18.6.0 botocore/1.12.196", "awsRegion": "us-west-2", "errorCode": "Client.UnauthorizedOperation", "errorMessage": "You are not authorized to perform this operation. Encoded authorization failure message: GaBAH28xPELBpZ52nVEf7dDZW78JZ_a6Qp7jkHw07AhFqL2fguNMHr_COGLhj5Pqncts2LVClwk7z0TCAl0SYocXOfJgXY9Yt05BwJlmY0McdQFW7-3HCjeOs5Gc_ENvCPJSCJNYuX0wrVc5OjIK6wTqpCP66nXflNXmpKBnTFfDkBaeDtBtPOrPp6nYcLkb0liFfAEszidn9v-m-SOG-cKKopXGKe5xIXMxUuN9j2KJXjZ6C55pMO-Ku1JiGZmAJv3h3AreGGZTlTi2nMg-YJvlY6XlO-xQ5T4r-0ol3PyeWYfaxK6UdzFrEGdb5bd90WBIClvD_UBrQbx4MQgX90KLmrFqSoaR1FwLkMpemsqlSsDM3DTzZFnAJRuovtaL86d9wzCzLFhVkl3EO2_QQTdWrFZF55mZOA3rTGz-qTp81vLjkburcLxWhp_fWF2wrzpt1B7vhRoceRcxPqeqTdwi4XjjJL2bChm5EBkl-FYkeqAOfzb1SFTL03cr7EITl46pToRkhN7yGFSOP7YvPLUXe9KGVFCWjjInhq-ef-nVDngAMibx_AMGRJBm5yH79pREK-kofl8tgfJjSHsNgTcBjXOKXDQu67PRg3305xnI34AKM7BSXdzilGEvES1aipewtvDNKA", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"snapshotId": "snap-83d15d668fb2941db", "zone": "us-west-2c"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "52d24acb-acf2-4e25-b5ba-f7de93a55e40", "record_id": "flaws_cloudtrail:0000366:52d24acb-acf2-4e25-b5ba-f7de93a55e40", "row_index": 366, "timestamp": "2019-07-30T03:44:07Z", "event_type": "CreateVolume", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "198.3.215.7", "user_agent": "aws-cli/1.16.206 Python/3.6.5 Darwin/18.6.0 botocore/1.12.196", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1518, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "52d24acb-acf2-4e25-b5ba-f7de93a55e40", "eventTime": "2019-07-30T03:44:07Z", "eventName": "CreateVolume", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "198.3.215.7", "userAgent": "aws-cli/1.16.206 Python/3.6.5 Darwin/18.6.0 botocore/1.12.196", "awsRegion": "us-west-2", "errorCode": "Client.UnauthorizedOperation", "errorMessage": "You are not authorized to perform this operation. Encoded authorization failure message: GaBAH28xPELBpZ52nVEf7dDZW78JZ_a6Qp7jkHw07AhFqL2fguNMHr_COGLhj5Pqncts2LVClwk7z0TCAl0SYocXOfJgXY9Yt05BwJlmY0McdQFW7-3HCjeOs5Gc_ENvCPJSCJNYuX0wrVc5OjIK6wTqpCP66nXflNXmpKBnTFfDkBaeDtBtPOrPp6nYcLkb0liFfAEszidn9v-m-SOG-cKKopXGKe5xIXMxUuN9j2KJXjZ6C55pMO-Ku1JiGZmAJv3h3AreGGZTlTi2nMg-YJvlY6XlO-xQ5T4r-0ol3PyeWYfaxK6UdzFrEGdb5bd90WBIClvD_UBrQbx4MQgX90KLmrFqSoaR1FwLkMpemsqlSsDM3DTzZFnAJRuovtaL86d9wzCzLFhVkl3EO2_QQTdWrFZF55mZOA3rTGz-qTp81vLjkburcLxWhp_fWF2wrzpt1B7vhRoceRcxPqeqTdwi4XjjJL2bChm5EBkl-FYkeqAOfzb1SFTL03cr7EITl46pToRkhN7yGFSOP7YvPLUXe9KGVFCWjjInhq-ef-nVDngAMibx_AMGRJBm5yH79pREK-kofl8tgfJjSHsNgTcBjXOKXDQu67PRg3305xnI34AKM7BSXdzilGEvES1aipewtvDNKA", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"snapshotId": "snap-83d15d668fb2941db", "zone": "us-west-2c"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "c29278a5-d29d-4cb2-aeb5-853a9cd32366", "record_id": "flaws_cloudtrail:0000367:c29278a5-d29d-4cb2-aeb5-853a9cd32366", "row_index": 367, "timestamp": "2019-07-30T03:44:40Z", "event_type": "CreateVolume", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "198.3.215.7", "user_agent": "aws-cli/1.16.206 Python/3.6.5 Darwin/18.6.0 botocore/1.12.196", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1518, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "c29278a5-d29d-4cb2-aeb5-853a9cd32366", "eventTime": "2019-07-30T03:44:40Z", "eventName": "CreateVolume", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "198.3.215.7", "userAgent": "aws-cli/1.16.206 Python/3.6.5 Darwin/18.6.0 botocore/1.12.196", "awsRegion": "us-west-2", "errorCode": "Client.UnauthorizedOperation", "errorMessage": "You are not authorized to perform this operation. Encoded authorization failure message: a5wQrW_qC7zkBiEu6fxVFFma_hKS933Oq6NaW4_Bc-mV3bFmOaM193OTkTkmSs_QgLowS77pnBPk9G-d1V4Pr1t1j10r-2a8ft66sIWn7Y8gmDB95ITKnUbdRZ6lpcBoOoq-8247X7fAOMop92bqn3UpPEIkTHbZvlIKejpM_RxlBS3k3zBr9D0a9riNemy1BEBVvuL3tF3BShp3VKhjjaK-OM8yHlk2YEgl4j--PtH4OLBZ9LV7BkwbYuhwuNNLZ8ZWUMjMvyW8hJBSazbCmtrVEca2CpvzuQ7-d7g3GeQaqas-2xf1uJBtA_ixt56-0WZCIM3Yjl9UVTlR9Udrmi2VdrOjDjWDc27RWuFNG9Mhg6mqw3JTysDBPL1MkIbBN2JWW_WBtCJeyy3jlKCy_KejuVRRAQX-anVOmJO2Jvlo5-nnXrDGUskpJdD6UX6yJmsWEeJ8nKBglMYR21yQ3Gspfp2EUXWJJVpcGTn_UXzL_XCwhFadm__PuR_DY7yekfWBELgu1nIR19wL47FFStreC4aqNiZmdnKunlOZQllQ6ykmATgsZttiUokop6-h1DOULzzpILB1dQHuplYjFwAtsOnG6LCdlcjnGXU-8nNC9jOCygNnQhZYuSJ_-k1Ny2e-nqeNEg", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"snapshotId": "snap-83d15d668fb2941db", "zone": "us-west-2a"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "c29278a5-d29d-4cb2-aeb5-853a9cd32366", "record_id": "flaws_cloudtrail:0000368:c29278a5-d29d-4cb2-aeb5-853a9cd32366", "row_index": 368, "timestamp": "2019-07-30T03:44:40Z", "event_type": "CreateVolume", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "198.3.215.7", "user_agent": "aws-cli/1.16.206 Python/3.6.5 Darwin/18.6.0 botocore/1.12.196", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1518, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "c29278a5-d29d-4cb2-aeb5-853a9cd32366", "eventTime": "2019-07-30T03:44:40Z", "eventName": "CreateVolume", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "198.3.215.7", "userAgent": "aws-cli/1.16.206 Python/3.6.5 Darwin/18.6.0 botocore/1.12.196", "awsRegion": "us-west-2", "errorCode": "Client.UnauthorizedOperation", "errorMessage": "You are not authorized to perform this operation. Encoded authorization failure message: a5wQrW_qC7zkBiEu6fxVFFma_hKS933Oq6NaW4_Bc-mV3bFmOaM193OTkTkmSs_QgLowS77pnBPk9G-d1V4Pr1t1j10r-2a8ft66sIWn7Y8gmDB95ITKnUbdRZ6lpcBoOoq-8247X7fAOMop92bqn3UpPEIkTHbZvlIKejpM_RxlBS3k3zBr9D0a9riNemy1BEBVvuL3tF3BShp3VKhjjaK-OM8yHlk2YEgl4j--PtH4OLBZ9LV7BkwbYuhwuNNLZ8ZWUMjMvyW8hJBSazbCmtrVEca2CpvzuQ7-d7g3GeQaqas-2xf1uJBtA_ixt56-0WZCIM3Yjl9UVTlR9Udrmi2VdrOjDjWDc27RWuFNG9Mhg6mqw3JTysDBPL1MkIbBN2JWW_WBtCJeyy3jlKCy_KejuVRRAQX-anVOmJO2Jvlo5-nnXrDGUskpJdD6UX6yJmsWEeJ8nKBglMYR21yQ3Gspfp2EUXWJJVpcGTn_UXzL_XCwhFadm__PuR_DY7yekfWBELgu1nIR19wL47FFStreC4aqNiZmdnKunlOZQllQ6ykmATgsZttiUokop6-h1DOULzzpILB1dQHuplYjFwAtsOnG6LCdlcjnGXU-8nNC9jOCygNnQhZYuSJ_-k1Ny2e-nqeNEg", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"snapshotId": "snap-83d15d668fb2941db", "zone": "us-west-2a"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "edbcec2e-d0ef-4564-ab0b-8e29dc798853", "record_id": "flaws_cloudtrail:0000369:edbcec2e-d0ef-4564-ab0b-8e29dc798853", "row_index": 369, "timestamp": "2019-07-30T03:46:26Z", "event_type": "DescribeVolumes", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "198.3.215.7", "user_agent": "aws-cli/1.16.206 Python/3.6.5 Darwin/18.6.0 botocore/1.12.196", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 712, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "edbcec2e-d0ef-4564-ab0b-8e29dc798853", "eventTime": "2019-07-30T03:46:26Z", "eventName": "DescribeVolumes", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "198.3.215.7", "userAgent": "aws-cli/1.16.206 Python/3.6.5 Darwin/18.6.0 botocore/1.12.196", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"maxResults": 1000, "volumeSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "edbcec2e-d0ef-4564-ab0b-8e29dc798853", "record_id": "flaws_cloudtrail:0000370:edbcec2e-d0ef-4564-ab0b-8e29dc798853", "row_index": 370, "timestamp": "2019-07-30T03:46:26Z", "event_type": "DescribeVolumes", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "198.3.215.7", "user_agent": "aws-cli/1.16.206 Python/3.6.5 Darwin/18.6.0 botocore/1.12.196", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 712, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "edbcec2e-d0ef-4564-ab0b-8e29dc798853", "eventTime": "2019-07-30T03:46:26Z", "eventName": "DescribeVolumes", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "198.3.215.7", "userAgent": "aws-cli/1.16.206 Python/3.6.5 Darwin/18.6.0 botocore/1.12.196", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"maxResults": 1000, "volumeSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "beefd8e7-25cb-4caf-804d-940b1502dd66", "record_id": "flaws_cloudtrail:0000371:beefd8e7-25cb-4caf-804d-940b1502dd66", "row_index": 371, "timestamp": "2019-07-30T04:31:35Z", "event_type": "AssumeRole", "event_source": "sts.amazonaws.com", "principal": {"type": "AWSService", "arn": null, "account_id": null, "principal_id": null, "user_name": null, "access_key_id": null, "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "ec2.amazonaws.com", "user_agent": "ec2.amazonaws.com", "aws_region": "us-west-2"}, "resource_arns": ["arn:aws:iam::811596193553:role/flaws"], "raw_record_size_bytes": 1883, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "resources", "responseElements", "sharedEventID", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "beefd8e7-25cb-4caf-804d-940b1502dd66", "eventTime": "2019-07-30T04:31:35Z", "eventName": "AssumeRole", "eventSource": "sts.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "ec2.amazonaws.com", "userAgent": "ec2.amazonaws.com", "awsRegion": "us-west-2", "userIdentity": {"type": "AWSService", "invokedBy": "ec2.amazonaws.com"}, "requestParameters": {"roleSessionName": "i-aa2d3b42e5c6e801a", "roleArn": "arn:aws:iam::811596193553:role/flaws"}, "responseElements": {"credentials": {"accessKeyId": "ASIAGTRJMND6EYHH4Z69", "expiration": "Jul 30, 2019 10:40:48 AM", "sessionToken": "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"}}, "resources": [{"ARN": "arn:aws:iam::811596193553:role/flaws", "accountId": "811596193553", "type": "AWS::IAM::Role"}]}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "beefd8e7-25cb-4caf-804d-940b1502dd66", "record_id": "flaws_cloudtrail:0000372:beefd8e7-25cb-4caf-804d-940b1502dd66", "row_index": 372, "timestamp": "2019-07-30T04:31:35Z", "event_type": "AssumeRole", "event_source": "sts.amazonaws.com", "principal": {"type": "AWSService", "arn": null, "account_id": null, "principal_id": null, "user_name": null, "access_key_id": null, "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "ec2.amazonaws.com", "user_agent": "ec2.amazonaws.com", "aws_region": "us-west-2"}, "resource_arns": ["arn:aws:iam::811596193553:role/flaws"], "raw_record_size_bytes": 1883, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "resources", "responseElements", "sharedEventID", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "beefd8e7-25cb-4caf-804d-940b1502dd66", "eventTime": "2019-07-30T04:31:35Z", "eventName": "AssumeRole", "eventSource": "sts.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "ec2.amazonaws.com", "userAgent": "ec2.amazonaws.com", "awsRegion": "us-west-2", "userIdentity": {"type": "AWSService", "invokedBy": "ec2.amazonaws.com"}, "requestParameters": {"roleSessionName": "i-aa2d3b42e5c6e801a", "roleArn": "arn:aws:iam::811596193553:role/flaws"}, "responseElements": {"credentials": {"accessKeyId": "ASIAGTRJMND6EYHH4Z69", "expiration": "Jul 30, 2019 10:40:48 AM", "sessionToken": "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"}}, "resources": [{"ARN": "arn:aws:iam::811596193553:role/flaws", "accountId": "811596193553", "type": "AWS::IAM::Role"}]}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "1b8d8e3f-a5e9-46f5-b278-7860f266d85f", "record_id": "flaws_cloudtrail:0000373:1b8d8e3f-a5e9-46f5-b278-7860f266d85f", "row_index": 373, "timestamp": "2019-07-30T05:31:35Z", "event_type": "AssumeRole", "event_source": "sts.amazonaws.com", "principal": {"type": "AWSService", "arn": null, "account_id": null, "principal_id": null, "user_name": null, "access_key_id": null, "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "ec2.amazonaws.com", "user_agent": "ec2.amazonaws.com", "aws_region": "us-west-2"}, "resource_arns": ["arn:aws:iam::811596193553:role/flaws"], "raw_record_size_bytes": 1881, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "resources", "responseElements", "sharedEventID", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "1b8d8e3f-a5e9-46f5-b278-7860f266d85f", "eventTime": "2019-07-30T05:31:35Z", "eventName": "AssumeRole", "eventSource": "sts.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "ec2.amazonaws.com", "userAgent": "ec2.amazonaws.com", "awsRegion": "us-west-2", "userIdentity": {"type": "AWSService", "invokedBy": "ec2.amazonaws.com"}, "requestParameters": {"roleSessionName": "i-aa2d3b42e5c6e801a", "roleArn": "arn:aws:iam::811596193553:role/flaws"}, "responseElements": {"credentials": {"accessKeyId": "ASIA5XYFT5O5RXZHDGTE", "expiration": "Jul 30, 2019 11:46:43 AM", "sessionToken": "AgoJb3JpZ2luX2VjEA4aCXVzLXdlc3QtMiJHMEUCIQDJYbl1VvvPKpAb1csRrfW5eEbEbZBFP5KSBjGQrWtR5wIgRS3WIin8OIGJVvG/ym4Da6yytDKgckrZyO7h9QWpQ8Mq4wMIh///////////ARAAGgw5NzU0MjYyNjIwMjkiDNeDQ7Ohr+UTG9teWiq3A4+DQ8bK72mWwNjmt+6NUK4UeSEG6vUPaP2Z9ENBrkyIA5Ji1jjT4X9l5pF4Hza0bsiFfFL9DvIvt2APmktt0JfaLUg0WZnNl88aXqB5bVCaDtHNRcR1adHwv61ay5FZR2B6DXACPh7Rq3Nd04eq0fAgSPRtDDxjr0kbBWSy0tvNnw7FIFZLXPz+OzAxE+jWj+9/QX5FBHw+5l5h+L11x4sKk/6p0ap7XlxvEVrXTEizY33JVbRzx0nILgT0b/5fTaV/6HBKjledWopdnfSXusG/qGfjc9DP5cJW5Xo4o89gNuuG9HER4TCVsKiohT3bX26jmYibHs03ncHDlSPRZ2g4T7oKjMyJ+fCFJaqjyyYYRTwlZF2TknZTiiaJVb51yNh3r/7REjU1T3I2I2+6e2wE+eIZ6/llqjOZRhkOE561HxKSoqvM3lBGdsBN2d9oYPCdWKG4tJJJbgdW/M4HWgvxW3eW4h0LR0NiGlEcKvPT0G6Lq8P0pDfWyIgLsXiuB7cgccvvH6xebOhJZyxaGahevd3ZOwGMujk6YJTXWKw/Kwyzwvn0ikdhnh900R9gncsnBu209RIwt6z/6QU6tAH5koQb9+8DRJAMq3pb/YEMe601hEAXqErczRpUUUp2pbBsvdBzhnhvQ+S4KXTDhTYaOvOHLhCgTKOZWPtKDhcAeNHflyK/2DLDwzkqDnF+DW4kb3wied+HpsfLOQGlcrO3zyjIeGz1qcV3oxTKMfhaOizyTpMGbZ58hhZGKnLXEAptqX2+T2oQ6HdnAq4kcpueMFBH7wP9hznoFS8c4FNgXygcgfSVziuelds6q8xzquA78A8="}}, "resources": [{"ARN": "arn:aws:iam::811596193553:role/flaws", "accountId": "811596193553", "type": "AWS::IAM::Role"}]}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "1b8d8e3f-a5e9-46f5-b278-7860f266d85f", "record_id": "flaws_cloudtrail:0000374:1b8d8e3f-a5e9-46f5-b278-7860f266d85f", "row_index": 374, "timestamp": "2019-07-30T05:31:35Z", "event_type": "AssumeRole", "event_source": "sts.amazonaws.com", "principal": {"type": "AWSService", "arn": null, "account_id": null, "principal_id": null, "user_name": null, "access_key_id": null, "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "ec2.amazonaws.com", "user_agent": "ec2.amazonaws.com", "aws_region": "us-west-2"}, "resource_arns": ["arn:aws:iam::811596193553:role/flaws"], "raw_record_size_bytes": 1881, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "resources", "responseElements", "sharedEventID", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "1b8d8e3f-a5e9-46f5-b278-7860f266d85f", "eventTime": "2019-07-30T05:31:35Z", "eventName": "AssumeRole", "eventSource": "sts.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "ec2.amazonaws.com", "userAgent": "ec2.amazonaws.com", "awsRegion": "us-west-2", "userIdentity": {"type": "AWSService", "invokedBy": "ec2.amazonaws.com"}, "requestParameters": {"roleSessionName": "i-aa2d3b42e5c6e801a", "roleArn": "arn:aws:iam::811596193553:role/flaws"}, "responseElements": {"credentials": {"accessKeyId": "ASIA5XYFT5O5RXZHDGTE", "expiration": "Jul 30, 2019 11:46:43 AM", "sessionToken": "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"}}, "resources": [{"ARN": "arn:aws:iam::811596193553:role/flaws", "accountId": "811596193553", "type": "AWS::IAM::Role"}]}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "b10d8268-5b5b-4303-8dea-11bbff0e82e9", "record_id": "flaws_cloudtrail:0000375:b10d8268-5b5b-4303-8dea-11bbff0e82e9", "row_index": 375, "timestamp": "2019-07-30T06:23:23Z", "event_type": "AssumeRole", "event_source": "sts.amazonaws.com", "principal": {"type": "AWSService", "arn": null, "account_id": null, "principal_id": null, "user_name": null, "access_key_id": null, "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "config.amazonaws.com", "user_agent": "config.amazonaws.com", "aws_region": "us-west-2"}, "resource_arns": ["arn:aws:iam::811596193553:role/service-role/config-role-us-west-2"], "raw_record_size_bytes": 1937, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "resources", "responseElements", "sharedEventID", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "b10d8268-5b5b-4303-8dea-11bbff0e82e9", "eventTime": "2019-07-30T06:23:23Z", "eventName": "AssumeRole", "eventSource": "sts.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "config.amazonaws.com", "userAgent": "config.amazonaws.com", "awsRegion": "us-west-2", "userIdentity": {"type": "AWSService", "invokedBy": "config.amazonaws.com"}, "requestParameters": {"roleArn": "arn:aws:iam::811596193553:role/service-role/config-role-us-west-2", "roleSessionName": "AWSConfig"}, "responseElements": {"credentials": {"accessKeyId": "ASIA39UQNBYD72LYECJ1", "expiration": "Jul 30, 2019 7:23:23 AM", "sessionToken": "AgoJb3JpZ2luX2VjEA8aCXVzLXdlc3QtMiJHMEUCIHCe47+7ktYRQWuqRqNgWYdRo6WJbiyZffLwR3wrsm4BAiEApwtlw2wPggaUAf6iymM1OnagN6XisZc368CCclNDj1Mq8QIIiP//////////ARAAGgw5NzU0MjYyNjIwMjkiDCWH1NETUk5cGQCLJCrFAnzidxnvpELc50l4l1ViWK3Ph8HSyZw3cBSNzxXphPoHp3uij33rVVRBvEFKvmDqjM/MHdSaLF2qfgixofxVIdza3p34Ms+dxctNo4LnzrjCidSslZsnHKnzbYGzvLFbtYCEHh+jPswMUgf7CsQwUKfmf3uENWnQmhOKIgV5TTiv1boSXllLsCBQe2pUF930KoX5A9UQq8UmYGdv8H9Xa7uL8RI9ZeGPd9qevtQ4GRAZ9MD83v/SOG4U5NVSrq87okxhDDOlp24zG4byrxeYK+obXvUavisOTgTVG0J71iIRcSxR74Twf0Y4by83dcyY+RgOJVWQi0Jn0K5Yefz8B+mYuj9DD+W4MNkTwZSwFMcMaq3EIwiYJKu4EaA0VTsAOBRfVgpzHuMAZsHSuXElb6nHdIp/fMu+fAuYcPouD1Tgv6iZQDIw28T/6QU6tAGpU6oBpVKu5nAUgXCREwhK6AsOTMDGtF4EajO47n0kWb3edcjG85lFjGt61nJQVV/LlwdewCkE/ZJgQHJzeZ8r/G/CKpFa8uBrScMYuA6WGB0FinrtL0/S+Ty0xmoArN54vFjmD16kAhHc5qzWTtTgLVnCnLRim9oOPrF9kRZUE5pT9NQpW3VcFdZvWovPEUl6h63R3DufMcgiEjA9lc1/UQrRVJtj9Hgye08gwV/w9SK8bMY="}, "assumedRoleUser": {"assumedRoleId": "AROASM3HWKK95VDO4HH81:AWSConfig", "arn": "arn:aws:sts::811596193553:assumed-role/config-role-us-west-2/AWSConfig"}}, "resources": [{"ARN": "arn:aws:iam::811596193553:role/service-role/config-role-us-west-2", "accountId": "811596193553", "type": "AWS::IAM::Role"}]}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "b10d8268-5b5b-4303-8dea-11bbff0e82e9", "record_id": "flaws_cloudtrail:0000376:b10d8268-5b5b-4303-8dea-11bbff0e82e9", "row_index": 376, "timestamp": "2019-07-30T06:23:23Z", "event_type": "AssumeRole", "event_source": "sts.amazonaws.com", "principal": {"type": "AWSService", "arn": null, "account_id": null, "principal_id": null, "user_name": null, "access_key_id": null, "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "config.amazonaws.com", "user_agent": "config.amazonaws.com", "aws_region": "us-west-2"}, "resource_arns": ["arn:aws:iam::811596193553:role/service-role/config-role-us-west-2"], "raw_record_size_bytes": 1937, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "resources", "responseElements", "sharedEventID", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "b10d8268-5b5b-4303-8dea-11bbff0e82e9", "eventTime": "2019-07-30T06:23:23Z", "eventName": "AssumeRole", "eventSource": "sts.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "config.amazonaws.com", "userAgent": "config.amazonaws.com", "awsRegion": "us-west-2", "userIdentity": {"type": "AWSService", "invokedBy": "config.amazonaws.com"}, "requestParameters": {"roleArn": "arn:aws:iam::811596193553:role/service-role/config-role-us-west-2", "roleSessionName": "AWSConfig"}, "responseElements": {"credentials": {"accessKeyId": "ASIA39UQNBYD72LYECJ1", "expiration": "Jul 30, 2019 7:23:23 AM", "sessionToken": "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"}, "assumedRoleUser": {"assumedRoleId": "AROASM3HWKK95VDO4HH81:AWSConfig", "arn": "arn:aws:sts::811596193553:assumed-role/config-role-us-west-2/AWSConfig"}}, "resources": [{"ARN": "arn:aws:iam::811596193553:role/service-role/config-role-us-west-2", "accountId": "811596193553", "type": "AWS::IAM::Role"}]}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "d1e5e74e-4bdd-40cd-9acc-5ee3d6be1025", "record_id": "flaws_cloudtrail:0000377:d1e5e74e-4bdd-40cd-9acc-5ee3d6be1025", "row_index": 377, "timestamp": "2019-07-30T06:24:28Z", "event_type": "AssumeRole", "event_source": "sts.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIAM45EQO749PXSOPHC", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "148.46.211.193", "user_agent": "Boto3/1.18.4 Python/3.9.6 Linux/5.10.0-8-amd64 Botocore/1.21.4", "aws_region": "us-west-2"}, "resource_arns": ["arn:aws:iam::811596193553:role/data-reader-44"], "raw_record_size_bytes": 689, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "requestParameters", "resources", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "d1e5e74e-4bdd-40cd-9acc-5ee3d6be1025", "eventTime": "2019-07-30T06:24:28Z", "eventName": "AssumeRole", "eventSource": "sts.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "148.46.211.193", "userAgent": "Boto3/1.18.4 Python/3.9.6 Linux/5.10.0-8-amd64 Botocore/1.21.4", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIAM45EQO749PXSOPHC", "userName": "backup"}, "requestParameters": {"roleArn": "arn:aws:iam::811596193553:role/data-reader-44", "roleSessionName": "reader-7520"}, "resources": [{"ARN": "arn:aws:iam::811596193553:role/data-reader-44"}]}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "6740fae8-b38e-4892-8d97-28717ad83f70", "record_id": "flaws_cloudtrail:0000378:6740fae8-b38e-4892-8d97-28717ad83f70", "row_index": 378, "timestamp": "2019-07-30T06:25:21Z", "event_type": "ListBuckets", "event_source": "s3.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIAM45EQO749PXSOPHC", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "148.46.211.193", "user_agent": "Boto3/1.18.4 Python/3.9.6 Linux/5.10.0-8-amd64 Botocore/1.21.4", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 507, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "6740fae8-b38e-4892-8d97-28717ad83f70", "eventTime": "2019-07-30T06:25:21Z", "eventName": "ListBuckets", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "148.46.211.193", "userAgent": "Boto3/1.18.4 Python/3.9.6 Linux/5.10.0-8-amd64 Botocore/1.21.4", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIAM45EQO749PXSOPHC", "userName": "backup"}}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "12ac38be-59a2-4a2d-9b42-9db431c06df5", "record_id": "flaws_cloudtrail:0000379:12ac38be-59a2-4a2d-9b42-9db431c06df5", "row_index": 379, "timestamp": "2019-07-30T06:26:33Z", "event_type": "GetBucketAcl", "event_source": "s3.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIAM45EQO749PXSOPHC", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "148.46.211.193", "user_agent": "Boto3/1.18.4 Python/3.9.6 Linux/5.10.0-8-amd64 Botocore/1.21.4", "aws_region": "us-west-2"}, "resource_arns": ["arn:aws:s3:::prod-data-7947"], "raw_record_size_bytes": 612, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "requestParameters", "resources", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "12ac38be-59a2-4a2d-9b42-9db431c06df5", "eventTime": "2019-07-30T06:26:33Z", "eventName": "GetBucketAcl", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "148.46.211.193", "userAgent": "Boto3/1.18.4 Python/3.9.6 Linux/5.10.0-8-amd64 Botocore/1.21.4", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIAM45EQO749PXSOPHC", "userName": "backup"}, "requestParameters": {"bucketName": "prod-data-7947"}, "resources": [{"ARN": "arn:aws:s3:::prod-data-7947"}]}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "d838bbb7-fd9a-4106-a026-1a9f7868c3eb", "record_id": "flaws_cloudtrail:0000380:d838bbb7-fd9a-4106-a026-1a9f7868c3eb", "row_index": 380, "timestamp": "2019-07-30T06:27:12Z", "event_type": "GetBucketAcl", "event_source": "s3.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIAM45EQO749PXSOPHC", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "148.46.211.193", "user_agent": "Boto3/1.18.4 Python/3.9.6 Linux/5.10.0-8-amd64 Botocore/1.21.4", "aws_region": "us-west-2"}, "resource_arns": ["arn:aws:s3:::prod-data-7947-archive"], "raw_record_size_bytes": 628, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "requestParameters", "resources", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "d838bbb7-fd9a-4106-a026-1a9f7868c3eb", "eventTime": "2019-07-30T06:27:12Z", "eventName": "GetBucketAcl", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "148.46.211.193", "userAgent": "Boto3/1.18.4 Python/3.9.6 Linux/5.10.0-8-amd64 Botocore/1.21.4", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIAM45EQO749PXSOPHC", "userName": "backup"}, "requestParameters": {"bucketName": "prod-data-7947-archive"}, "resources": [{"ARN": "arn:aws:s3:::prod-data-7947-archive"}]}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "7e7e0c44-f719-4be9-a000-75d3dd263919", "record_id": "flaws_cloudtrail:0000381:7e7e0c44-f719-4be9-a000-75d3dd263919", "row_index": 381, "timestamp": "2019-07-30T06:29:05Z", "event_type": "ListObjects", "event_source": "s3.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIAM45EQO749PXSOPHC", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "148.46.211.193", "user_agent": "Boto3/1.18.4 Python/3.9.6 Linux/5.10.0-8-amd64 Botocore/1.21.4", "aws_region": "us-west-2"}, "resource_arns": ["arn:aws:s3:::prod-data-7947"], "raw_record_size_bytes": 632, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "requestParameters", "resources", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "7e7e0c44-f719-4be9-a000-75d3dd263919", "eventTime": "2019-07-30T06:29:05Z", "eventName": "ListObjects", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "148.46.211.193", "userAgent": "Boto3/1.18.4 Python/3.9.6 Linux/5.10.0-8-amd64 Botocore/1.21.4", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIAM45EQO749PXSOPHC", "userName": "backup"}, "requestParameters": {"bucketName": "prod-data-7947", "prefix": "customer/"}, "resources": [{"ARN": "arn:aws:s3:::prod-data-7947"}]}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "0b415276-2130-4391-9c75-c10359e8b397", "record_id": "flaws_cloudtrail:0000382:0b415276-2130-4391-9c75-c10359e8b397", "row_index": 382, "timestamp": "2019-07-30T06:30:20Z", "event_type": "GetObject", "event_source": "s3.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIAM45EQO749PXSOPHC", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "148.46.211.193", "user_agent": "Boto3/1.18.4 Python/3.9.6 Linux/5.10.0-8-amd64 Botocore/1.21.4", "aws_region": "us-west-2"}, "resource_arns": ["arn:aws:s3:::prod-data-7947"], "raw_record_size_bytes": 637, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "requestParameters", "resources", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "0b415276-2130-4391-9c75-c10359e8b397", "eventTime": "2019-07-30T06:30:20Z", "eventName": "GetObject", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "148.46.211.193", "userAgent": "Boto3/1.18.4 Python/3.9.6 Linux/5.10.0-8-amd64 Botocore/1.21.4", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIAM45EQO749PXSOPHC", "userName": "backup"}, "requestParameters": {"bucketName": "prod-data-7947", "key": "customer/05289.json"}, "resources": [{"ARN": "arn:aws:s3:::prod-data-7947"}]}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "07cff56f-4034-4b67-abee-a20651e7abca", "record_id": "flaws_cloudtrail:0000383:07cff56f-4034-4b67-abee-a20651e7abca", "row_index": 383, "timestamp": "2019-07-30T06:30:42Z", "event_type": "GetObject", "event_source": "s3.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIAM45EQO749PXSOPHC", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "148.46.211.193", "user_agent": "Boto3/1.18.4 Python/3.9.6 Linux/5.10.0-8-amd64 Botocore/1.21.4", "aws_region": "us-west-2"}, "resource_arns": ["arn:aws:s3:::prod-data-7947"], "raw_record_size_bytes": 637, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "requestParameters", "resources", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "07cff56f-4034-4b67-abee-a20651e7abca", "eventTime": "2019-07-30T06:30:42Z", "eventName": "GetObject", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "148.46.211.193", "userAgent": "Boto3/1.18.4 Python/3.9.6 Linux/5.10.0-8-amd64 Botocore/1.21.4", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIAM45EQO749PXSOPHC", "userName": "backup"}, "requestParameters": {"bucketName": "prod-data-7947", "key": "customer/03434.json"}, "resources": [{"ARN": "arn:aws:s3:::prod-data-7947"}]}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "07b670ee-9232-4bff-9802-c6a3e73aefa2", "record_id": "flaws_cloudtrail:0000384:07b670ee-9232-4bff-9802-c6a3e73aefa2", "row_index": 384, "timestamp": "2019-07-30T06:31:31Z", "event_type": "GetObject", "event_source": "s3.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIAM45EQO749PXSOPHC", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "148.46.211.193", "user_agent": "Boto3/1.18.4 Python/3.9.6 Linux/5.10.0-8-amd64 Botocore/1.21.4", "aws_region": "us-west-2"}, "resource_arns": ["arn:aws:s3:::prod-data-7947"], "raw_record_size_bytes": 637, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "requestParameters", "resources", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "07b670ee-9232-4bff-9802-c6a3e73aefa2", "eventTime": "2019-07-30T06:31:31Z", "eventName": "GetObject", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "148.46.211.193", "userAgent": "Boto3/1.18.4 Python/3.9.6 Linux/5.10.0-8-amd64 Botocore/1.21.4", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIAM45EQO749PXSOPHC", "userName": "backup"}, "requestParameters": {"bucketName": "prod-data-7947", "key": "customer/01379.json"}, "resources": [{"ARN": "arn:aws:s3:::prod-data-7947"}]}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "57bc9ef7-bec1-4434-b69c-8f082f64bb0b", "record_id": "flaws_cloudtrail:0000385:57bc9ef7-bec1-4434-b69c-8f082f64bb0b", "row_index": 385, "timestamp": "2019-07-30T06:31:35Z", "event_type": "AssumeRole", "event_source": "sts.amazonaws.com", "principal": {"type": "AWSService", "arn": null, "account_id": null, "principal_id": null, "user_name": null, "access_key_id": null, "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "ec2.amazonaws.com", "user_agent": "ec2.amazonaws.com", "aws_region": "us-west-2"}, "resource_arns": ["arn:aws:iam::811596193553:role/flaws"], "raw_record_size_bytes": 1880, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "resources", "responseElements", "sharedEventID", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "57bc9ef7-bec1-4434-b69c-8f082f64bb0b", "eventTime": "2019-07-30T06:31:35Z", "eventName": "AssumeRole", "eventSource": "sts.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "ec2.amazonaws.com", "userAgent": "ec2.amazonaws.com", "awsRegion": "us-west-2", "userIdentity": {"type": "AWSService", "invokedBy": "ec2.amazonaws.com"}, "requestParameters": {"roleSessionName": "i-aa2d3b42e5c6e801a", "roleArn": "arn:aws:iam::811596193553:role/flaws"}, "responseElements": {"credentials": {"accessKeyId": "ASIA43S99241JU9V8M26", "expiration": "Jul 30, 2019 12:49:11 PM", "sessionToken": "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"}}, "resources": [{"ARN": "arn:aws:iam::811596193553:role/flaws", "accountId": "811596193553", "type": "AWS::IAM::Role"}]}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "57bc9ef7-bec1-4434-b69c-8f082f64bb0b", "record_id": "flaws_cloudtrail:0000386:57bc9ef7-bec1-4434-b69c-8f082f64bb0b", "row_index": 386, "timestamp": "2019-07-30T06:31:35Z", "event_type": "AssumeRole", "event_source": "sts.amazonaws.com", "principal": {"type": "AWSService", "arn": null, "account_id": null, "principal_id": null, "user_name": null, "access_key_id": null, "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "ec2.amazonaws.com", "user_agent": "ec2.amazonaws.com", "aws_region": "us-west-2"}, "resource_arns": ["arn:aws:iam::811596193553:role/flaws"], "raw_record_size_bytes": 1880, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "resources", "responseElements", "sharedEventID", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "57bc9ef7-bec1-4434-b69c-8f082f64bb0b", "eventTime": "2019-07-30T06:31:35Z", "eventName": "AssumeRole", "eventSource": "sts.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "ec2.amazonaws.com", "userAgent": "ec2.amazonaws.com", "awsRegion": "us-west-2", "userIdentity": {"type": "AWSService", "invokedBy": "ec2.amazonaws.com"}, "requestParameters": {"roleSessionName": "i-aa2d3b42e5c6e801a", "roleArn": "arn:aws:iam::811596193553:role/flaws"}, "responseElements": {"credentials": {"accessKeyId": "ASIA43S99241JU9V8M26", "expiration": "Jul 30, 2019 12:49:11 PM", "sessionToken": "AgoJb3JpZ2luX2VjEA8aCXVzLXdlc3QtMiJGMEQCIHRek4ewHsK99Sn2GHundYLThNcTyUHWJSYrg7wuA4fnAiAB/H7Crf9mh5+aNvBXtyjUOIlq8PnW4KhqtbNjQfSFCyrjAwiI//////////8BEAAaDDk3NTQyNjI2MjAyOSIM3J/jpKmPQ6FRhFv0KrcDwgSxy+soCoWA1InIy868x7V/poWVasTnZxGQCYDvVTPJs7tYjwA8ajsF5jkj8h2rKk3ADRt8pgc9KORTcLHbMhtUMMFfpo/19QCSBZvcmMzxMU+pdZMjgJo0PJtCjt54x3uTpvbM/novbv8OpGvN1d3U4/1FMHuV+73DlVAS8f7y2G1q23ltTDBVYr+gq9Up3YJyMblQ0uMs919tLqxdCM1jLrggSXMR+UxdXdwcv7Gb/aMsgDewLqNpSvYcFgCwNlMymGKCtpqRHSV5WxlFdbNrrbWkiqCR8VVLCGoRrZB9C6Pt8uzcsM/gRH0wSpCQGGxmVId50s0f7ISI31FwcZXJSih71wBTdebykrbiPuMAL0Iv2Ccy0/0b1PediiBwKNopniWHogJU1D29+DNbvGvLeNptlJ2qWewGdHTBWscMkHNMK24mEhJYdXlSOLyL0rwmWnhMJRkeYuiEtYcLq56Kytl0SWQDvXBUO2+wli+rnppWRo/GYZzO/PTc5cuTCrfvHd6yYg6zEK4JNA6u3fsGmoRJJT1UPwLRnfvsJ3tu4ZOcTzQLAY2TnLLwkJu1JtrWABfs2jDHyP/pBTq1AeU3IOxNaSqOvq4mvNfP90nPEsIkketq6INcQU191qRN8f82heuY5QBX0hvF9TkSZV+tXZHQKocfWuroiEtzUYDzO3LcKqjj3r3NzUOtkPxd1xPh91mOLN4HYI6n1Y6YrYswEmUhKSHy3k5LPYd6qCNShRizJl907sVMzd8/EoNebcPKRQ5nXT+C5OLwhS8VY50huNloKxd+V0iaJJeyYSSO9Ww6gQNj20BeMrForz0WmW+N2BY="}}, "resources": [{"ARN": "arn:aws:iam::811596193553:role/flaws", "accountId": "811596193553", "type": "AWS::IAM::Role"}]}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "a32fd4bc-2bd4-421b-b556-6885d4a7f6fa", "record_id": "flaws_cloudtrail:0000387:a32fd4bc-2bd4-421b-b556-6885d4a7f6fa", "row_index": 387, "timestamp": "2019-07-30T06:32:20Z", "event_type": "GetObject", "event_source": "s3.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIAM45EQO749PXSOPHC", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "148.46.211.193", "user_agent": "Boto3/1.18.4 Python/3.9.6 Linux/5.10.0-8-amd64 Botocore/1.21.4", "aws_region": "us-west-2"}, "resource_arns": ["arn:aws:s3:::prod-data-7947"], "raw_record_size_bytes": 637, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "requestParameters", "resources", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "a32fd4bc-2bd4-421b-b556-6885d4a7f6fa", "eventTime": "2019-07-30T06:32:20Z", "eventName": "GetObject", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "148.46.211.193", "userAgent": "Boto3/1.18.4 Python/3.9.6 Linux/5.10.0-8-amd64 Botocore/1.21.4", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIAM45EQO749PXSOPHC", "userName": "backup"}, "requestParameters": {"bucketName": "prod-data-7947", "key": "customer/08534.json"}, "resources": [{"ARN": "arn:aws:s3:::prod-data-7947"}]}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "a9e2eb1b-4cd0-4de0-85ca-fba8a929f649", "record_id": "flaws_cloudtrail:0000388:a9e2eb1b-4cd0-4de0-85ca-fba8a929f649", "row_index": 388, "timestamp": "2019-07-30T06:32:47Z", "event_type": "GetObject", "event_source": "s3.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIAM45EQO749PXSOPHC", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "148.46.211.193", "user_agent": "Boto3/1.18.4 Python/3.9.6 Linux/5.10.0-8-amd64 Botocore/1.21.4", "aws_region": "us-west-2"}, "resource_arns": ["arn:aws:s3:::prod-data-7947"], "raw_record_size_bytes": 637, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "requestParameters", "resources", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "a9e2eb1b-4cd0-4de0-85ca-fba8a929f649", "eventTime": "2019-07-30T06:32:47Z", "eventName": "GetObject", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "148.46.211.193", "userAgent": "Boto3/1.18.4 Python/3.9.6 Linux/5.10.0-8-amd64 Botocore/1.21.4", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIAM45EQO749PXSOPHC", "userName": "backup"}, "requestParameters": {"bucketName": "prod-data-7947", "key": "customer/03985.json"}, "resources": [{"ARN": "arn:aws:s3:::prod-data-7947"}]}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "f3dfe046-f2f2-475e-8c41-fbea21616d5a", "record_id": "flaws_cloudtrail:0000389:f3dfe046-f2f2-475e-8c41-fbea21616d5a", "row_index": 389, "timestamp": "2019-07-30T06:37:57Z", "event_type": "ListBuckets", "event_source": "s3.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "16.51.32.250", "user_agent": "[aws-cli/1.11.13 Python/3.5.2 Linux/4.4.0-145-generic botocore/1.4.70]", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 808, "raw_record_depth": 3, "raw_record_top_level_keys": ["additionalEventData", "awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "f3dfe046-f2f2-475e-8c41-fbea21616d5a", "eventTime": "2019-07-30T06:37:57Z", "eventName": "ListBuckets", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "16.51.32.250", "userAgent": "[aws-cli/1.11.13 Python/3.5.2 Linux/4.4.0-145-generic botocore/1.4.70]", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"host": ["s3.amazonaws.com"]}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "f3dfe046-f2f2-475e-8c41-fbea21616d5a", "record_id": "flaws_cloudtrail:0000390:f3dfe046-f2f2-475e-8c41-fbea21616d5a", "row_index": 390, "timestamp": "2019-07-30T06:37:57Z", "event_type": "ListBuckets", "event_source": "s3.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "16.51.32.250", "user_agent": "[aws-cli/1.11.13 Python/3.5.2 Linux/4.4.0-145-generic botocore/1.4.70]", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 808, "raw_record_depth": 3, "raw_record_top_level_keys": ["additionalEventData", "awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "f3dfe046-f2f2-475e-8c41-fbea21616d5a", "eventTime": "2019-07-30T06:37:57Z", "eventName": "ListBuckets", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "16.51.32.250", "userAgent": "[aws-cli/1.11.13 Python/3.5.2 Linux/4.4.0-145-generic botocore/1.4.70]", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"host": ["s3.amazonaws.com"]}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "119dfde6-aee9-4bf4-ab7a-8ca0a6f0f452", "record_id": "flaws_cloudtrail:0000391:119dfde6-aee9-4bf4-ab7a-8ca0a6f0f452", "row_index": 391, "timestamp": "2019-07-30T07:31:35Z", "event_type": "AssumeRole", "event_source": "sts.amazonaws.com", "principal": {"type": "AWSService", "arn": null, "account_id": null, "principal_id": null, "user_name": null, "access_key_id": null, "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "ec2.amazonaws.com", "user_agent": "ec2.amazonaws.com", "aws_region": "us-west-2"}, "resource_arns": ["arn:aws:iam::811596193553:role/flaws"], "raw_record_size_bytes": 1883, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "resources", "responseElements", "sharedEventID", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "119dfde6-aee9-4bf4-ab7a-8ca0a6f0f452", "eventTime": "2019-07-30T07:31:35Z", "eventName": "AssumeRole", "eventSource": "sts.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "ec2.amazonaws.com", "userAgent": "ec2.amazonaws.com", "awsRegion": "us-west-2", "userIdentity": {"type": "AWSService", "invokedBy": "ec2.amazonaws.com"}, "requestParameters": {"roleSessionName": "i-aa2d3b42e5c6e801a", "roleArn": "arn:aws:iam::811596193553:role/flaws"}, "responseElements": {"credentials": {"accessKeyId": "ASIASIMQEZR2ZD61XPLL", "expiration": "Jul 30, 2019 1:46:00 PM", "sessionToken": "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"}}, "resources": [{"ARN": "arn:aws:iam::811596193553:role/flaws", "accountId": "811596193553", "type": "AWS::IAM::Role"}]}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "119dfde6-aee9-4bf4-ab7a-8ca0a6f0f452", "record_id": "flaws_cloudtrail:0000392:119dfde6-aee9-4bf4-ab7a-8ca0a6f0f452", "row_index": 392, "timestamp": "2019-07-30T07:31:35Z", "event_type": "AssumeRole", "event_source": "sts.amazonaws.com", "principal": {"type": "AWSService", "arn": null, "account_id": null, "principal_id": null, "user_name": null, "access_key_id": null, "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "ec2.amazonaws.com", "user_agent": "ec2.amazonaws.com", "aws_region": "us-west-2"}, "resource_arns": ["arn:aws:iam::811596193553:role/flaws"], "raw_record_size_bytes": 1883, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "resources", "responseElements", "sharedEventID", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "119dfde6-aee9-4bf4-ab7a-8ca0a6f0f452", "eventTime": "2019-07-30T07:31:35Z", "eventName": "AssumeRole", "eventSource": "sts.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "ec2.amazonaws.com", "userAgent": "ec2.amazonaws.com", "awsRegion": "us-west-2", "userIdentity": {"type": "AWSService", "invokedBy": "ec2.amazonaws.com"}, "requestParameters": {"roleSessionName": "i-aa2d3b42e5c6e801a", "roleArn": "arn:aws:iam::811596193553:role/flaws"}, "responseElements": {"credentials": {"accessKeyId": "ASIASIMQEZR2ZD61XPLL", "expiration": "Jul 30, 2019 1:46:00 PM", "sessionToken": "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"}}, "resources": [{"ARN": "arn:aws:iam::811596193553:role/flaws", "accountId": "811596193553", "type": "AWS::IAM::Role"}]}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "db328966-fab3-41ed-8532-565dfba8b263", "record_id": "flaws_cloudtrail:0000393:db328966-fab3-41ed-8532-565dfba8b263", "row_index": 393, "timestamp": "2019-07-30T07:33:51Z", "event_type": "ListBuckets", "event_source": "s3.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "16.51.32.250", "user_agent": "[aws-cli/1.11.13 Python/3.5.2 Linux/4.4.0-145-generic botocore/1.4.70]", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 805, "raw_record_depth": 3, "raw_record_top_level_keys": ["additionalEventData", "awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "db328966-fab3-41ed-8532-565dfba8b263", "eventTime": "2019-07-30T07:33:51Z", "eventName": "ListBuckets", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "16.51.32.250", "userAgent": "[aws-cli/1.11.13 Python/3.5.2 Linux/4.4.0-145-generic botocore/1.4.70]", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"host": ["s3.amazonaws.com"]}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "db328966-fab3-41ed-8532-565dfba8b263", "record_id": "flaws_cloudtrail:0000394:db328966-fab3-41ed-8532-565dfba8b263", "row_index": 394, "timestamp": "2019-07-30T07:33:51Z", "event_type": "ListBuckets", "event_source": "s3.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "16.51.32.250", "user_agent": "[aws-cli/1.11.13 Python/3.5.2 Linux/4.4.0-145-generic botocore/1.4.70]", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 805, "raw_record_depth": 3, "raw_record_top_level_keys": ["additionalEventData", "awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "db328966-fab3-41ed-8532-565dfba8b263", "eventTime": "2019-07-30T07:33:51Z", "eventName": "ListBuckets", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "16.51.32.250", "userAgent": "[aws-cli/1.11.13 Python/3.5.2 Linux/4.4.0-145-generic botocore/1.4.70]", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"host": ["s3.amazonaws.com"]}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "6e4276f1-5945-4912-a6f8-7bb314a1c65b", "record_id": "flaws_cloudtrail:0000395:6e4276f1-5945-4912-a6f8-7bb314a1c65b", "row_index": 395, "timestamp": "2019-07-30T08:31:35Z", "event_type": "AssumeRole", "event_source": "sts.amazonaws.com", "principal": {"type": "AWSService", "arn": null, "account_id": null, "principal_id": null, "user_name": null, "access_key_id": null, "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "ec2.amazonaws.com", "user_agent": "ec2.amazonaws.com", "aws_region": "us-west-2"}, "resource_arns": ["arn:aws:iam::811596193553:role/flaws"], "raw_record_size_bytes": 1882, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "resources", "responseElements", "sharedEventID", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "6e4276f1-5945-4912-a6f8-7bb314a1c65b", "eventTime": "2019-07-30T08:31:35Z", "eventName": "AssumeRole", "eventSource": "sts.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "ec2.amazonaws.com", "userAgent": "ec2.amazonaws.com", "awsRegion": "us-west-2", "userIdentity": {"type": "AWSService", "invokedBy": "ec2.amazonaws.com"}, "requestParameters": {"roleSessionName": "i-aa2d3b42e5c6e801a", "roleArn": "arn:aws:iam::811596193553:role/flaws"}, "responseElements": {"credentials": {"accessKeyId": "ASIAKV3R51TGLIB4DKO3", "expiration": "Jul 30, 2019 3:05:04 PM", "sessionToken": "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"}}, "resources": [{"ARN": "arn:aws:iam::811596193553:role/flaws", "accountId": "811596193553", "type": "AWS::IAM::Role"}]}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "6e4276f1-5945-4912-a6f8-7bb314a1c65b", "record_id": "flaws_cloudtrail:0000396:6e4276f1-5945-4912-a6f8-7bb314a1c65b", "row_index": 396, "timestamp": "2019-07-30T08:31:35Z", "event_type": "AssumeRole", "event_source": "sts.amazonaws.com", "principal": {"type": "AWSService", "arn": null, "account_id": null, "principal_id": null, "user_name": null, "access_key_id": null, "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "ec2.amazonaws.com", "user_agent": "ec2.amazonaws.com", "aws_region": "us-west-2"}, "resource_arns": ["arn:aws:iam::811596193553:role/flaws"], "raw_record_size_bytes": 1882, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "resources", "responseElements", "sharedEventID", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "6e4276f1-5945-4912-a6f8-7bb314a1c65b", "eventTime": "2019-07-30T08:31:35Z", "eventName": "AssumeRole", "eventSource": "sts.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "ec2.amazonaws.com", "userAgent": "ec2.amazonaws.com", "awsRegion": "us-west-2", "userIdentity": {"type": "AWSService", "invokedBy": "ec2.amazonaws.com"}, "requestParameters": {"roleSessionName": "i-aa2d3b42e5c6e801a", "roleArn": "arn:aws:iam::811596193553:role/flaws"}, "responseElements": {"credentials": {"accessKeyId": "ASIAKV3R51TGLIB4DKO3", "expiration": "Jul 30, 2019 3:05:04 PM", "sessionToken": "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"}}, "resources": [{"ARN": "arn:aws:iam::811596193553:role/flaws", "accountId": "811596193553", "type": "AWS::IAM::Role"}]}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "ba5623a6-e004-4cd2-ba95-fefcbc89f58a", "record_id": "flaws_cloudtrail:0000397:ba5623a6-e004-4cd2-ba95-fefcbc89f58a", "row_index": 397, "timestamp": "2019-07-30T09:31:35Z", "event_type": "AssumeRole", "event_source": "sts.amazonaws.com", "principal": {"type": "AWSService", "arn": null, "account_id": null, "principal_id": null, "user_name": null, "access_key_id": null, "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "ec2.amazonaws.com", "user_agent": "ec2.amazonaws.com", "aws_region": "us-west-2"}, "resource_arns": ["arn:aws:iam::811596193553:role/flaws"], "raw_record_size_bytes": 1882, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "resources", "responseElements", "sharedEventID", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "ba5623a6-e004-4cd2-ba95-fefcbc89f58a", "eventTime": "2019-07-30T09:31:35Z", "eventName": "AssumeRole", "eventSource": "sts.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "ec2.amazonaws.com", "userAgent": "ec2.amazonaws.com", "awsRegion": "us-west-2", "userIdentity": {"type": "AWSService", "invokedBy": "ec2.amazonaws.com"}, "requestParameters": {"roleSessionName": "i-aa2d3b42e5c6e801a", "roleArn": "arn:aws:iam::811596193553:role/flaws"}, "responseElements": {"credentials": {"accessKeyId": "ASIA34Y4Z1QMIPQZ1YXW", "expiration": "Jul 30, 2019 3:36:33 PM", "sessionToken": "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"}}, "resources": [{"ARN": "arn:aws:iam::811596193553:role/flaws", "accountId": "811596193553", "type": "AWS::IAM::Role"}]}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "ba5623a6-e004-4cd2-ba95-fefcbc89f58a", "record_id": "flaws_cloudtrail:0000398:ba5623a6-e004-4cd2-ba95-fefcbc89f58a", "row_index": 398, "timestamp": "2019-07-30T09:31:35Z", "event_type": "AssumeRole", "event_source": "sts.amazonaws.com", "principal": {"type": "AWSService", "arn": null, "account_id": null, "principal_id": null, "user_name": null, "access_key_id": null, "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "ec2.amazonaws.com", "user_agent": "ec2.amazonaws.com", "aws_region": "us-west-2"}, "resource_arns": ["arn:aws:iam::811596193553:role/flaws"], "raw_record_size_bytes": 1882, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "resources", "responseElements", "sharedEventID", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "ba5623a6-e004-4cd2-ba95-fefcbc89f58a", "eventTime": "2019-07-30T09:31:35Z", "eventName": "AssumeRole", "eventSource": "sts.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "ec2.amazonaws.com", "userAgent": "ec2.amazonaws.com", "awsRegion": "us-west-2", "userIdentity": {"type": "AWSService", "invokedBy": "ec2.amazonaws.com"}, "requestParameters": {"roleSessionName": "i-aa2d3b42e5c6e801a", "roleArn": "arn:aws:iam::811596193553:role/flaws"}, "responseElements": {"credentials": {"accessKeyId": "ASIA34Y4Z1QMIPQZ1YXW", "expiration": "Jul 30, 2019 3:36:33 PM", "sessionToken": "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"}}, "resources": [{"ARN": "arn:aws:iam::811596193553:role/flaws", "accountId": "811596193553", "type": "AWS::IAM::Role"}]}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "ad251778a-4f4e-420d-9aea-926ce3b6348e", "record_id": "flaws_cloudtrail:0000399:ad251778a-4f4e-420d-9aea-926ce3b6348e", "row_index": 399, "timestamp": "2019-07-30T10:31:35Z", "event_type": "AssumeRole", "event_source": "sts.amazonaws.com", "principal": {"type": "AWSService", "arn": null, "account_id": null, "principal_id": null, "user_name": null, "access_key_id": null, "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "ec2.amazonaws.com", "user_agent": "ec2.amazonaws.com", "aws_region": "us-west-2"}, "resource_arns": ["arn:aws:iam::811596193553:role/flaws"], "raw_record_size_bytes": 1881, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "resources", "responseElements", "sharedEventID", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "ad251778a-4f4e-420d-9aea-926ce3b6348e", "eventTime": "2019-07-30T10:31:35Z", "eventName": "AssumeRole", "eventSource": "sts.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "ec2.amazonaws.com", "userAgent": "ec2.amazonaws.com", "awsRegion": "us-west-2", "userIdentity": {"type": "AWSService", "invokedBy": "ec2.amazonaws.com"}, "requestParameters": {"roleSessionName": "i-aa2d3b42e5c6e801a", "roleArn": "arn:aws:iam::811596193553:role/flaws"}, "responseElements": {"credentials": {"accessKeyId": "ASIA9C2UF7OXD2IXKGQM", "expiration": "Jul 30, 2019 4:32:18 PM", "sessionToken": "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"}}, "resources": [{"ARN": "arn:aws:iam::811596193553:role/flaws", "accountId": "811596193553", "type": "AWS::IAM::Role"}]}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "ad251778a-4f4e-420d-9aea-926ce3b6348e", "record_id": "flaws_cloudtrail:0000400:ad251778a-4f4e-420d-9aea-926ce3b6348e", "row_index": 400, "timestamp": "2019-07-30T10:31:35Z", "event_type": "AssumeRole", "event_source": "sts.amazonaws.com", "principal": {"type": "AWSService", "arn": null, "account_id": null, "principal_id": null, "user_name": null, "access_key_id": null, "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "ec2.amazonaws.com", "user_agent": "ec2.amazonaws.com", "aws_region": "us-west-2"}, "resource_arns": ["arn:aws:iam::811596193553:role/flaws"], "raw_record_size_bytes": 1881, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "resources", "responseElements", "sharedEventID", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "ad251778a-4f4e-420d-9aea-926ce3b6348e", "eventTime": "2019-07-30T10:31:35Z", "eventName": "AssumeRole", "eventSource": "sts.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "ec2.amazonaws.com", "userAgent": "ec2.amazonaws.com", "awsRegion": "us-west-2", "userIdentity": {"type": "AWSService", "invokedBy": "ec2.amazonaws.com"}, "requestParameters": {"roleSessionName": "i-aa2d3b42e5c6e801a", "roleArn": "arn:aws:iam::811596193553:role/flaws"}, "responseElements": {"credentials": {"accessKeyId": "ASIA9C2UF7OXD2IXKGQM", "expiration": "Jul 30, 2019 4:32:18 PM", "sessionToken": "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"}}, "resources": [{"ARN": "arn:aws:iam::811596193553:role/flaws", "accountId": "811596193553", "type": "AWS::IAM::Role"}]}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "205570ff-173b-472a-909a-47c981948a8d", "record_id": "flaws_cloudtrail:0000401:205570ff-173b-472a-909a-47c981948a8d", "row_index": 401, "timestamp": "2019-07-30T11:31:35Z", "event_type": "AssumeRole", "event_source": "sts.amazonaws.com", "principal": {"type": "AWSService", "arn": null, "account_id": null, "principal_id": null, "user_name": null, "access_key_id": null, "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "ec2.amazonaws.com", "user_agent": "ec2.amazonaws.com", "aws_region": "us-west-2"}, "resource_arns": ["arn:aws:iam::811596193553:role/flaws"], "raw_record_size_bytes": 1880, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "resources", "responseElements", "sharedEventID", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "205570ff-173b-472a-909a-47c981948a8d", "eventTime": "2019-07-30T11:31:35Z", "eventName": "AssumeRole", "eventSource": "sts.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "ec2.amazonaws.com", "userAgent": "ec2.amazonaws.com", "awsRegion": "us-west-2", "userIdentity": {"type": "AWSService", "invokedBy": "ec2.amazonaws.com"}, "requestParameters": {"roleSessionName": "i-aa2d3b42e5c6e801a", "roleArn": "arn:aws:iam::811596193553:role/flaws"}, "responseElements": {"credentials": {"accessKeyId": "ASIA320Y7CO95CWPE45V", "expiration": "Jul 30, 2019 5:38:45 PM", "sessionToken": "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"}}, "resources": [{"ARN": "arn:aws:iam::811596193553:role/flaws", "accountId": "811596193553", "type": "AWS::IAM::Role"}]}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "205570ff-173b-472a-909a-47c981948a8d", "record_id": "flaws_cloudtrail:0000402:205570ff-173b-472a-909a-47c981948a8d", "row_index": 402, "timestamp": "2019-07-30T11:31:35Z", "event_type": "AssumeRole", "event_source": "sts.amazonaws.com", "principal": {"type": "AWSService", "arn": null, "account_id": null, "principal_id": null, "user_name": null, "access_key_id": null, "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "ec2.amazonaws.com", "user_agent": "ec2.amazonaws.com", "aws_region": "us-west-2"}, "resource_arns": ["arn:aws:iam::811596193553:role/flaws"], "raw_record_size_bytes": 1880, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "resources", "responseElements", "sharedEventID", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "205570ff-173b-472a-909a-47c981948a8d", "eventTime": "2019-07-30T11:31:35Z", "eventName": "AssumeRole", "eventSource": "sts.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "ec2.amazonaws.com", "userAgent": "ec2.amazonaws.com", "awsRegion": "us-west-2", "userIdentity": {"type": "AWSService", "invokedBy": "ec2.amazonaws.com"}, "requestParameters": {"roleSessionName": "i-aa2d3b42e5c6e801a", "roleArn": "arn:aws:iam::811596193553:role/flaws"}, "responseElements": {"credentials": {"accessKeyId": "ASIA320Y7CO95CWPE45V", "expiration": "Jul 30, 2019 5:38:45 PM", "sessionToken": "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"}}, "resources": [{"ARN": "arn:aws:iam::811596193553:role/flaws", "accountId": "811596193553", "type": "AWS::IAM::Role"}]}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "91cdf9e1-ac0f-420f-b2d7-3ebad2059a9b", "record_id": "flaws_cloudtrail:0000403:91cdf9e1-ac0f-420f-b2d7-3ebad2059a9b", "row_index": 403, "timestamp": "2019-07-30T11:42:50Z", "event_type": "ListBuckets", "event_source": "s3.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "6.3.3.245", "user_agent": "[aws-cli/1.16.96 Python/2.7.15+ Linux/4.15.0-54-generic botocore/1.12.86]", "aws_region": "eu-west-1"}, "resource_arns": [], "raw_record_size_bytes": 817, "raw_record_depth": 3, "raw_record_top_level_keys": ["additionalEventData", "awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "91cdf9e1-ac0f-420f-b2d7-3ebad2059a9b", "eventTime": "2019-07-30T11:42:50Z", "eventName": "ListBuckets", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "6.3.3.245", "userAgent": "[aws-cli/1.16.96 Python/2.7.15+ Linux/4.15.0-54-generic botocore/1.12.86]", "awsRegion": "eu-west-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"host": ["s3.eu-west-1.amazonaws.com"]}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "91cdf9e1-ac0f-420f-b2d7-3ebad2059a9b", "record_id": "flaws_cloudtrail:0000404:91cdf9e1-ac0f-420f-b2d7-3ebad2059a9b", "row_index": 404, "timestamp": "2019-07-30T11:42:50Z", "event_type": "ListBuckets", "event_source": "s3.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "6.3.3.245", "user_agent": "[aws-cli/1.16.96 Python/2.7.15+ Linux/4.15.0-54-generic botocore/1.12.86]", "aws_region": "eu-west-1"}, "resource_arns": [], "raw_record_size_bytes": 817, "raw_record_depth": 3, "raw_record_top_level_keys": ["additionalEventData", "awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "91cdf9e1-ac0f-420f-b2d7-3ebad2059a9b", "eventTime": "2019-07-30T11:42:50Z", "eventName": "ListBuckets", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "6.3.3.245", "userAgent": "[aws-cli/1.16.96 Python/2.7.15+ Linux/4.15.0-54-generic botocore/1.12.86]", "awsRegion": "eu-west-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"host": ["s3.eu-west-1.amazonaws.com"]}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "6e6c4351-b8ea-477b-b37a-aab96eefa3d8", "record_id": "flaws_cloudtrail:0000405:6e6c4351-b8ea-477b-b37a-aab96eefa3d8", "row_index": 405, "timestamp": "2019-07-30T11:42:51Z", "event_type": "ListBuckets", "event_source": "s3.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "6.3.3.245", "user_agent": "[aws-cli/1.16.96 Python/2.7.15+ Linux/4.15.0-54-generic botocore/1.12.86]", "aws_region": "ap-southeast-1"}, "resource_arns": [], "raw_record_size_bytes": 827, "raw_record_depth": 3, "raw_record_top_level_keys": ["additionalEventData", "awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "6e6c4351-b8ea-477b-b37a-aab96eefa3d8", "eventTime": "2019-07-30T11:42:51Z", "eventName": "ListBuckets", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "6.3.3.245", "userAgent": "[aws-cli/1.16.96 Python/2.7.15+ Linux/4.15.0-54-generic botocore/1.12.86]", "awsRegion": "ap-southeast-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"host": ["s3.ap-southeast-1.amazonaws.com"]}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "55b3c5a2-7232-4e7f-9684-e9516afa28e6", "record_id": "flaws_cloudtrail:0000406:55b3c5a2-7232-4e7f-9684-e9516afa28e6", "row_index": 406, "timestamp": "2019-07-30T11:42:51Z", "event_type": "ListBuckets", "event_source": "s3.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "6.3.3.245", "user_agent": "[aws-cli/1.16.96 Python/2.7.15+ Linux/4.15.0-54-generic botocore/1.12.86]", "aws_region": "ap-southeast-2"}, "resource_arns": [], "raw_record_size_bytes": 827, "raw_record_depth": 3, "raw_record_top_level_keys": ["additionalEventData", "awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "55b3c5a2-7232-4e7f-9684-e9516afa28e6", "eventTime": "2019-07-30T11:42:51Z", "eventName": "ListBuckets", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "6.3.3.245", "userAgent": "[aws-cli/1.16.96 Python/2.7.15+ Linux/4.15.0-54-generic botocore/1.12.86]", "awsRegion": "ap-southeast-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"host": ["s3.ap-southeast-2.amazonaws.com"]}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "426cb6d8-ee80-43f9-a524-20686c", "record_id": "flaws_cloudtrail:0000407:426cb6d8-ee80-43f9-a524-20686c", "row_index": 407, "timestamp": "2019-07-30T11:42:51Z", "event_type": "ListBuckets", "event_source": "s3.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "6.3.3.245", "user_agent": "[aws-cli/1.16.96 Python/2.7.15+ Linux/4.15.0-54-generic botocore/1.12.86]", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 801, "raw_record_depth": 3, "raw_record_top_level_keys": ["additionalEventData", "awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "426cb6d8-ee80-43f9-a524-20686c", "eventTime": "2019-07-30T11:42:51Z", "eventName": "ListBuckets", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "6.3.3.245", "userAgent": "[aws-cli/1.16.96 Python/2.7.15+ Linux/4.15.0-54-generic botocore/1.12.86]", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"host": ["s3.amazonaws.com"]}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "49ebc224-d471-4836-be45-b178885a5ee5", "record_id": "flaws_cloudtrail:0000408:49ebc224-d471-4836-be45-b178885a5ee5", "row_index": 408, "timestamp": "2019-07-30T11:42:51Z", "event_type": "ListBuckets", "event_source": "s3.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "6.3.3.245", "user_agent": "[aws-cli/1.16.96 Python/2.7.15+ Linux/4.15.0-54-generic botocore/1.12.86]", "aws_region": "us-west-1"}, "resource_arns": [], "raw_record_size_bytes": 818, "raw_record_depth": 3, "raw_record_top_level_keys": ["additionalEventData", "awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "49ebc224-d471-4836-be45-b178885a5ee5", "eventTime": "2019-07-30T11:42:51Z", "eventName": "ListBuckets", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "6.3.3.245", "userAgent": "[aws-cli/1.16.96 Python/2.7.15+ Linux/4.15.0-54-generic botocore/1.12.86]", "awsRegion": "us-west-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"host": ["s3.us-west-1.amazonaws.com"]}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "13a7d9ff-8614-4c78-9077-3703ad5a386a", "record_id": "flaws_cloudtrail:0000409:13a7d9ff-8614-4c78-9077-3703ad5a386a", "row_index": 409, "timestamp": "2019-07-30T11:42:51Z", "event_type": "ListBuckets", "event_source": "s3.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "6.3.3.245", "user_agent": "[aws-cli/1.16.96 Python/2.7.15+ Linux/4.15.0-54-generic botocore/1.12.86]", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 817, "raw_record_depth": 3, "raw_record_top_level_keys": ["additionalEventData", "awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "13a7d9ff-8614-4c78-9077-3703ad5a386a", "eventTime": "2019-07-30T11:42:51Z", "eventName": "ListBuckets", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "6.3.3.245", "userAgent": "[aws-cli/1.16.96 Python/2.7.15+ Linux/4.15.0-54-generic botocore/1.12.86]", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"host": ["s3.us-west-2.amazonaws.com"]}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "6e6c4351-b8ea-477b-b37a-aab96eefa3d8", "record_id": "flaws_cloudtrail:0000410:6e6c4351-b8ea-477b-b37a-aab96eefa3d8", "row_index": 410, "timestamp": "2019-07-30T11:42:51Z", "event_type": "ListBuckets", "event_source": "s3.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "6.3.3.245", "user_agent": "[aws-cli/1.16.96 Python/2.7.15+ Linux/4.15.0-54-generic botocore/1.12.86]", "aws_region": "ap-southeast-1"}, "resource_arns": [], "raw_record_size_bytes": 827, "raw_record_depth": 3, "raw_record_top_level_keys": ["additionalEventData", "awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "6e6c4351-b8ea-477b-b37a-aab96eefa3d8", "eventTime": "2019-07-30T11:42:51Z", "eventName": "ListBuckets", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "6.3.3.245", "userAgent": "[aws-cli/1.16.96 Python/2.7.15+ Linux/4.15.0-54-generic botocore/1.12.86]", "awsRegion": "ap-southeast-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"host": ["s3.ap-southeast-1.amazonaws.com"]}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "55b3c5a2-7232-4e7f-9684-e9516afa28e6", "record_id": "flaws_cloudtrail:0000411:55b3c5a2-7232-4e7f-9684-e9516afa28e6", "row_index": 411, "timestamp": "2019-07-30T11:42:51Z", "event_type": "ListBuckets", "event_source": "s3.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "6.3.3.245", "user_agent": "[aws-cli/1.16.96 Python/2.7.15+ Linux/4.15.0-54-generic botocore/1.12.86]", "aws_region": "ap-southeast-2"}, "resource_arns": [], "raw_record_size_bytes": 827, "raw_record_depth": 3, "raw_record_top_level_keys": ["additionalEventData", "awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "55b3c5a2-7232-4e7f-9684-e9516afa28e6", "eventTime": "2019-07-30T11:42:51Z", "eventName": "ListBuckets", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "6.3.3.245", "userAgent": "[aws-cli/1.16.96 Python/2.7.15+ Linux/4.15.0-54-generic botocore/1.12.86]", "awsRegion": "ap-southeast-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"host": ["s3.ap-southeast-2.amazonaws.com"]}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "426cb6d8-ee80-43f9-a524-20686c", "record_id": "flaws_cloudtrail:0000412:426cb6d8-ee80-43f9-a524-20686c", "row_index": 412, "timestamp": "2019-07-30T11:42:51Z", "event_type": "ListBuckets", "event_source": "s3.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "6.3.3.245", "user_agent": "[aws-cli/1.16.96 Python/2.7.15+ Linux/4.15.0-54-generic botocore/1.12.86]", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 801, "raw_record_depth": 3, "raw_record_top_level_keys": ["additionalEventData", "awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "426cb6d8-ee80-43f9-a524-20686c", "eventTime": "2019-07-30T11:42:51Z", "eventName": "ListBuckets", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "6.3.3.245", "userAgent": "[aws-cli/1.16.96 Python/2.7.15+ Linux/4.15.0-54-generic botocore/1.12.86]", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"host": ["s3.amazonaws.com"]}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "49ebc224-d471-4836-be45-b178885a5ee5", "record_id": "flaws_cloudtrail:0000413:49ebc224-d471-4836-be45-b178885a5ee5", "row_index": 413, "timestamp": "2019-07-30T11:42:51Z", "event_type": "ListBuckets", "event_source": "s3.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "6.3.3.245", "user_agent": "[aws-cli/1.16.96 Python/2.7.15+ Linux/4.15.0-54-generic botocore/1.12.86]", "aws_region": "us-west-1"}, "resource_arns": [], "raw_record_size_bytes": 818, "raw_record_depth": 3, "raw_record_top_level_keys": ["additionalEventData", "awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "49ebc224-d471-4836-be45-b178885a5ee5", "eventTime": "2019-07-30T11:42:51Z", "eventName": "ListBuckets", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "6.3.3.245", "userAgent": "[aws-cli/1.16.96 Python/2.7.15+ Linux/4.15.0-54-generic botocore/1.12.86]", "awsRegion": "us-west-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"host": ["s3.us-west-1.amazonaws.com"]}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "13a7d9ff-8614-4c78-9077-3703ad5a386a", "record_id": "flaws_cloudtrail:0000414:13a7d9ff-8614-4c78-9077-3703ad5a386a", "row_index": 414, "timestamp": "2019-07-30T11:42:51Z", "event_type": "ListBuckets", "event_source": "s3.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "6.3.3.245", "user_agent": "[aws-cli/1.16.96 Python/2.7.15+ Linux/4.15.0-54-generic botocore/1.12.86]", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 817, "raw_record_depth": 3, "raw_record_top_level_keys": ["additionalEventData", "awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "13a7d9ff-8614-4c78-9077-3703ad5a386a", "eventTime": "2019-07-30T11:42:51Z", "eventName": "ListBuckets", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "6.3.3.245", "userAgent": "[aws-cli/1.16.96 Python/2.7.15+ Linux/4.15.0-54-generic botocore/1.12.86]", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"host": ["s3.us-west-2.amazonaws.com"]}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "552060c4d-eea9-4190-8de1-5e2129e1c9c3", "record_id": "flaws_cloudtrail:0000415:552060c4d-eea9-4190-8de1-5e2129e1c9c3", "row_index": 415, "timestamp": "2019-07-30T11:42:52Z", "event_type": "ListBuckets", "event_source": "s3.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "6.3.3.245", "user_agent": "[aws-cli/1.16.96 Python/2.7.15+ Linux/4.15.0-54-generic botocore/1.12.86]", "aws_region": "ap-northeast-1"}, "resource_arns": [], "raw_record_size_bytes": 826, "raw_record_depth": 3, "raw_record_top_level_keys": ["additionalEventData", "awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "552060c4d-eea9-4190-8de1-5e2129e1c9c3", "eventTime": "2019-07-30T11:42:52Z", "eventName": "ListBuckets", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "6.3.3.245", "userAgent": "[aws-cli/1.16.96 Python/2.7.15+ Linux/4.15.0-54-generic botocore/1.12.86]", "awsRegion": "ap-northeast-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"host": ["s3.ap-northeast-1.amazonaws.com"]}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "67e6a131-8486-4bef-91c5-a2926c4e29b5", "record_id": "flaws_cloudtrail:0000416:67e6a131-8486-4bef-91c5-a2926c4e29b5", "row_index": 416, "timestamp": "2019-07-30T11:42:52Z", "event_type": "ListBuckets", "event_source": "s3.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "6.3.3.245", "user_agent": "[aws-cli/1.16.96 Python/2.7.15+ Linux/4.15.0-54-generic botocore/1.12.86]", "aws_region": "sa-east-1"}, "resource_arns": [], "raw_record_size_bytes": 817, "raw_record_depth": 3, "raw_record_top_level_keys": ["additionalEventData", "awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "67e6a131-8486-4bef-91c5-a2926c4e29b5", "eventTime": "2019-07-30T11:42:52Z", "eventName": "ListBuckets", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "6.3.3.245", "userAgent": "[aws-cli/1.16.96 Python/2.7.15+ Linux/4.15.0-54-generic botocore/1.12.86]", "awsRegion": "sa-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"host": ["s3.sa-east-1.amazonaws.com"]}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "552060c4d-eea9-4190-8de1-5e2129e1c9c3", "record_id": "flaws_cloudtrail:0000417:552060c4d-eea9-4190-8de1-5e2129e1c9c3", "row_index": 417, "timestamp": "2019-07-30T11:42:52Z", "event_type": "ListBuckets", "event_source": "s3.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "6.3.3.245", "user_agent": "[aws-cli/1.16.96 Python/2.7.15+ Linux/4.15.0-54-generic botocore/1.12.86]", "aws_region": "ap-northeast-1"}, "resource_arns": [], "raw_record_size_bytes": 826, "raw_record_depth": 3, "raw_record_top_level_keys": ["additionalEventData", "awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "552060c4d-eea9-4190-8de1-5e2129e1c9c3", "eventTime": "2019-07-30T11:42:52Z", "eventName": "ListBuckets", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "6.3.3.245", "userAgent": "[aws-cli/1.16.96 Python/2.7.15+ Linux/4.15.0-54-generic botocore/1.12.86]", "awsRegion": "ap-northeast-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"host": ["s3.ap-northeast-1.amazonaws.com"]}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "67e6a131-8486-4bef-91c5-a2926c4e29b5", "record_id": "flaws_cloudtrail:0000418:67e6a131-8486-4bef-91c5-a2926c4e29b5", "row_index": 418, "timestamp": "2019-07-30T11:42:52Z", "event_type": "ListBuckets", "event_source": "s3.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "6.3.3.245", "user_agent": "[aws-cli/1.16.96 Python/2.7.15+ Linux/4.15.0-54-generic botocore/1.12.86]", "aws_region": "sa-east-1"}, "resource_arns": [], "raw_record_size_bytes": 817, "raw_record_depth": 3, "raw_record_top_level_keys": ["additionalEventData", "awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "67e6a131-8486-4bef-91c5-a2926c4e29b5", "eventTime": "2019-07-30T11:42:52Z", "eventName": "ListBuckets", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "6.3.3.245", "userAgent": "[aws-cli/1.16.96 Python/2.7.15+ Linux/4.15.0-54-generic botocore/1.12.86]", "awsRegion": "sa-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"host": ["s3.sa-east-1.amazonaws.com"]}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "897905fae-99b4-46e2-b226-be36aef36691", "record_id": "flaws_cloudtrail:0000419:897905fae-99b4-46e2-b226-be36aef36691", "row_index": 419, "timestamp": "2019-07-30T11:44:11Z", "event_type": "ListBuckets", "event_source": "s3.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "6.3.3.245", "user_agent": "[aws-cli/1.16.96 Python/2.7.15+ Linux/4.15.0-54-generic botocore/1.12.86]", "aws_region": "ap-southeast-1"}, "resource_arns": [], "raw_record_size_bytes": 828, "raw_record_depth": 3, "raw_record_top_level_keys": ["additionalEventData", "awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "897905fae-99b4-46e2-b226-be36aef36691", "eventTime": "2019-07-30T11:44:11Z", "eventName": "ListBuckets", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "6.3.3.245", "userAgent": "[aws-cli/1.16.96 Python/2.7.15+ Linux/4.15.0-54-generic botocore/1.12.86]", "awsRegion": "ap-southeast-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"host": ["s3.ap-southeast-1.amazonaws.com"]}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "81c4a5a8-7049-4437-83b5-d0fec82b7290", "record_id": "flaws_cloudtrail:0000420:81c4a5a8-7049-4437-83b5-d0fec82b7290", "row_index": 420, "timestamp": "2019-07-30T11:44:11Z", "event_type": "ListBuckets", "event_source": "s3.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "6.3.3.245", "user_agent": "[aws-cli/1.16.96 Python/2.7.15+ Linux/4.15.0-54-generic botocore/1.12.86]", "aws_region": "eu-west-1"}, "resource_arns": [], "raw_record_size_bytes": 817, "raw_record_depth": 3, "raw_record_top_level_keys": ["additionalEventData", "awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "81c4a5a8-7049-4437-83b5-d0fec82b7290", "eventTime": "2019-07-30T11:44:11Z", "eventName": "ListBuckets", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "6.3.3.245", "userAgent": "[aws-cli/1.16.96 Python/2.7.15+ Linux/4.15.0-54-generic botocore/1.12.86]", "awsRegion": "eu-west-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"host": ["s3.eu-west-1.amazonaws.com"]}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "897905fae-99b4-46e2-b226-be36aef36691", "record_id": "flaws_cloudtrail:0000421:897905fae-99b4-46e2-b226-be36aef36691", "row_index": 421, "timestamp": "2019-07-30T11:44:11Z", "event_type": "ListBuckets", "event_source": "s3.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "6.3.3.245", "user_agent": "[aws-cli/1.16.96 Python/2.7.15+ Linux/4.15.0-54-generic botocore/1.12.86]", "aws_region": "ap-southeast-1"}, "resource_arns": [], "raw_record_size_bytes": 828, "raw_record_depth": 3, "raw_record_top_level_keys": ["additionalEventData", "awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "897905fae-99b4-46e2-b226-be36aef36691", "eventTime": "2019-07-30T11:44:11Z", "eventName": "ListBuckets", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "6.3.3.245", "userAgent": "[aws-cli/1.16.96 Python/2.7.15+ Linux/4.15.0-54-generic botocore/1.12.86]", "awsRegion": "ap-southeast-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"host": ["s3.ap-southeast-1.amazonaws.com"]}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "81c4a5a8-7049-4437-83b5-d0fec82b7290", "record_id": "flaws_cloudtrail:0000422:81c4a5a8-7049-4437-83b5-d0fec82b7290", "row_index": 422, "timestamp": "2019-07-30T11:44:11Z", "event_type": "ListBuckets", "event_source": "s3.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "6.3.3.245", "user_agent": "[aws-cli/1.16.96 Python/2.7.15+ Linux/4.15.0-54-generic botocore/1.12.86]", "aws_region": "eu-west-1"}, "resource_arns": [], "raw_record_size_bytes": 817, "raw_record_depth": 3, "raw_record_top_level_keys": ["additionalEventData", "awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "81c4a5a8-7049-4437-83b5-d0fec82b7290", "eventTime": "2019-07-30T11:44:11Z", "eventName": "ListBuckets", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "6.3.3.245", "userAgent": "[aws-cli/1.16.96 Python/2.7.15+ Linux/4.15.0-54-generic botocore/1.12.86]", "awsRegion": "eu-west-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"host": ["s3.eu-west-1.amazonaws.com"]}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "d1bcd409-55ae-4717-8b33-50e13cbae130", "record_id": "flaws_cloudtrail:0000423:d1bcd409-55ae-4717-8b33-50e13cbae130", "row_index": 423, "timestamp": "2019-07-30T11:44:12Z", "event_type": "ListBuckets", "event_source": "s3.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "6.3.3.245", "user_agent": "[aws-cli/1.16.96 Python/2.7.15+ Linux/4.15.0-54-generic botocore/1.12.86]", "aws_region": "ap-northeast-1"}, "resource_arns": [], "raw_record_size_bytes": 826, "raw_record_depth": 3, "raw_record_top_level_keys": ["additionalEventData", "awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "d1bcd409-55ae-4717-8b33-50e13cbae130", "eventTime": "2019-07-30T11:44:12Z", "eventName": "ListBuckets", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "6.3.3.245", "userAgent": "[aws-cli/1.16.96 Python/2.7.15+ Linux/4.15.0-54-generic botocore/1.12.86]", "awsRegion": "ap-northeast-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"host": ["s3.ap-northeast-1.amazonaws.com"]}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "0f3120e3-53f1-4ad2-88de-fdd44ac48cb5", "record_id": "flaws_cloudtrail:0000424:0f3120e3-53f1-4ad2-88de-fdd44ac48cb5", "row_index": 424, "timestamp": "2019-07-30T11:44:12Z", "event_type": "ListBuckets", "event_source": "s3.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "6.3.3.245", "user_agent": "[aws-cli/1.16.96 Python/2.7.15+ Linux/4.15.0-54-generic botocore/1.12.86]", "aws_region": "ap-southeast-2"}, "resource_arns": [], "raw_record_size_bytes": 827, "raw_record_depth": 3, "raw_record_top_level_keys": ["additionalEventData", "awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "0f3120e3-53f1-4ad2-88de-fdd44ac48cb5", "eventTime": "2019-07-30T11:44:12Z", "eventName": "ListBuckets", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "6.3.3.245", "userAgent": "[aws-cli/1.16.96 Python/2.7.15+ Linux/4.15.0-54-generic botocore/1.12.86]", "awsRegion": "ap-southeast-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"host": ["s3.ap-southeast-2.amazonaws.com"]}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "2ac38ae9-bd07-4e9d-9ad8-50bf39fc8926", "record_id": "flaws_cloudtrail:0000425:2ac38ae9-bd07-4e9d-9ad8-50bf39fc8926", "row_index": 425, "timestamp": "2019-07-30T11:44:12Z", "event_type": "ListBuckets", "event_source": "s3.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "6.3.3.245", "user_agent": "[aws-cli/1.16.96 Python/2.7.15+ Linux/4.15.0-54-generic botocore/1.12.86]", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 807, "raw_record_depth": 3, "raw_record_top_level_keys": ["additionalEventData", "awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "2ac38ae9-bd07-4e9d-9ad8-50bf39fc8926", "eventTime": "2019-07-30T11:44:12Z", "eventName": "ListBuckets", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "6.3.3.245", "userAgent": "[aws-cli/1.16.96 Python/2.7.15+ Linux/4.15.0-54-generic botocore/1.12.86]", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"host": ["s3.amazonaws.com"]}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "542265af-9f60-497c-91e1-0f547be512d3", "record_id": "flaws_cloudtrail:0000426:542265af-9f60-497c-91e1-0f547be512d3", "row_index": 426, "timestamp": "2019-07-30T11:44:12Z", "event_type": "ListBuckets", "event_source": "s3.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "6.3.3.245", "user_agent": "[aws-cli/1.16.96 Python/2.7.15+ Linux/4.15.0-54-generic botocore/1.12.86]", "aws_region": "us-west-1"}, "resource_arns": [], "raw_record_size_bytes": 814, "raw_record_depth": 3, "raw_record_top_level_keys": ["additionalEventData", "awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "542265af-9f60-497c-91e1-0f547be512d3", "eventTime": "2019-07-30T11:44:12Z", "eventName": "ListBuckets", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "6.3.3.245", "userAgent": "[aws-cli/1.16.96 Python/2.7.15+ Linux/4.15.0-54-generic botocore/1.12.86]", "awsRegion": "us-west-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"host": ["s3.us-west-1.amazonaws.com"]}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "f9dc8844-1518-4dbf-8191-1e9d78150", "record_id": "flaws_cloudtrail:0000427:f9dc8844-1518-4dbf-8191-1e9d78150", "row_index": 427, "timestamp": "2019-07-30T11:44:12Z", "event_type": "ListBuckets", "event_source": "s3.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "6.3.3.245", "user_agent": "[aws-cli/1.16.96 Python/2.7.15+ Linux/4.15.0-54-generic botocore/1.12.86]", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 812, "raw_record_depth": 3, "raw_record_top_level_keys": ["additionalEventData", "awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "f9dc8844-1518-4dbf-8191-1e9d78150", "eventTime": "2019-07-30T11:44:12Z", "eventName": "ListBuckets", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "6.3.3.245", "userAgent": "[aws-cli/1.16.96 Python/2.7.15+ Linux/4.15.0-54-generic botocore/1.12.86]", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"host": ["s3.us-west-2.amazonaws.com"]}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "d1bcd409-55ae-4717-8b33-50e13cbae130", "record_id": "flaws_cloudtrail:0000428:d1bcd409-55ae-4717-8b33-50e13cbae130", "row_index": 428, "timestamp": "2019-07-30T11:44:12Z", "event_type": "ListBuckets", "event_source": "s3.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "6.3.3.245", "user_agent": "[aws-cli/1.16.96 Python/2.7.15+ Linux/4.15.0-54-generic botocore/1.12.86]", "aws_region": "ap-northeast-1"}, "resource_arns": [], "raw_record_size_bytes": 826, "raw_record_depth": 3, "raw_record_top_level_keys": ["additionalEventData", "awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "d1bcd409-55ae-4717-8b33-50e13cbae130", "eventTime": "2019-07-30T11:44:12Z", "eventName": "ListBuckets", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "6.3.3.245", "userAgent": "[aws-cli/1.16.96 Python/2.7.15+ Linux/4.15.0-54-generic botocore/1.12.86]", "awsRegion": "ap-northeast-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"host": ["s3.ap-northeast-1.amazonaws.com"]}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "0f3120e3-53f1-4ad2-88de-fdd44ac48cb5", "record_id": "flaws_cloudtrail:0000429:0f3120e3-53f1-4ad2-88de-fdd44ac48cb5", "row_index": 429, "timestamp": "2019-07-30T11:44:12Z", "event_type": "ListBuckets", "event_source": "s3.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "6.3.3.245", "user_agent": "[aws-cli/1.16.96 Python/2.7.15+ Linux/4.15.0-54-generic botocore/1.12.86]", "aws_region": "ap-southeast-2"}, "resource_arns": [], "raw_record_size_bytes": 827, "raw_record_depth": 3, "raw_record_top_level_keys": ["additionalEventData", "awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "0f3120e3-53f1-4ad2-88de-fdd44ac48cb5", "eventTime": "2019-07-30T11:44:12Z", "eventName": "ListBuckets", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "6.3.3.245", "userAgent": "[aws-cli/1.16.96 Python/2.7.15+ Linux/4.15.0-54-generic botocore/1.12.86]", "awsRegion": "ap-southeast-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"host": ["s3.ap-southeast-2.amazonaws.com"]}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "2ac38ae9-bd07-4e9d-9ad8-50bf39fc8926", "record_id": "flaws_cloudtrail:0000430:2ac38ae9-bd07-4e9d-9ad8-50bf39fc8926", "row_index": 430, "timestamp": "2019-07-30T11:44:12Z", "event_type": "ListBuckets", "event_source": "s3.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "6.3.3.245", "user_agent": "[aws-cli/1.16.96 Python/2.7.15+ Linux/4.15.0-54-generic botocore/1.12.86]", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 807, "raw_record_depth": 3, "raw_record_top_level_keys": ["additionalEventData", "awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "2ac38ae9-bd07-4e9d-9ad8-50bf39fc8926", "eventTime": "2019-07-30T11:44:12Z", "eventName": "ListBuckets", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "6.3.3.245", "userAgent": "[aws-cli/1.16.96 Python/2.7.15+ Linux/4.15.0-54-generic botocore/1.12.86]", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"host": ["s3.amazonaws.com"]}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "542265af-9f60-497c-91e1-0f547be512d3", "record_id": "flaws_cloudtrail:0000431:542265af-9f60-497c-91e1-0f547be512d3", "row_index": 431, "timestamp": "2019-07-30T11:44:12Z", "event_type": "ListBuckets", "event_source": "s3.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "6.3.3.245", "user_agent": "[aws-cli/1.16.96 Python/2.7.15+ Linux/4.15.0-54-generic botocore/1.12.86]", "aws_region": "us-west-1"}, "resource_arns": [], "raw_record_size_bytes": 814, "raw_record_depth": 3, "raw_record_top_level_keys": ["additionalEventData", "awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "542265af-9f60-497c-91e1-0f547be512d3", "eventTime": "2019-07-30T11:44:12Z", "eventName": "ListBuckets", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "6.3.3.245", "userAgent": "[aws-cli/1.16.96 Python/2.7.15+ Linux/4.15.0-54-generic botocore/1.12.86]", "awsRegion": "us-west-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"host": ["s3.us-west-1.amazonaws.com"]}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "f9dc8844-1518-4dbf-8191-1e9d78150", "record_id": "flaws_cloudtrail:0000432:f9dc8844-1518-4dbf-8191-1e9d78150", "row_index": 432, "timestamp": "2019-07-30T11:44:12Z", "event_type": "ListBuckets", "event_source": "s3.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "6.3.3.245", "user_agent": "[aws-cli/1.16.96 Python/2.7.15+ Linux/4.15.0-54-generic botocore/1.12.86]", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 812, "raw_record_depth": 3, "raw_record_top_level_keys": ["additionalEventData", "awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "f9dc8844-1518-4dbf-8191-1e9d78150", "eventTime": "2019-07-30T11:44:12Z", "eventName": "ListBuckets", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "6.3.3.245", "userAgent": "[aws-cli/1.16.96 Python/2.7.15+ Linux/4.15.0-54-generic botocore/1.12.86]", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"host": ["s3.us-west-2.amazonaws.com"]}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "0882c5cd-75fd-4a35-886a-47c92f1c96bc", "record_id": "flaws_cloudtrail:0000433:0882c5cd-75fd-4a35-886a-47c92f1c96bc", "row_index": 433, "timestamp": "2019-07-30T11:44:13Z", "event_type": "ListBuckets", "event_source": "s3.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "6.3.3.245", "user_agent": "[aws-cli/1.16.96 Python/2.7.15+ Linux/4.15.0-54-generic botocore/1.12.86]", "aws_region": "sa-east-1"}, "resource_arns": [], "raw_record_size_bytes": 817, "raw_record_depth": 3, "raw_record_top_level_keys": ["additionalEventData", "awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "0882c5cd-75fd-4a35-886a-47c92f1c96bc", "eventTime": "2019-07-30T11:44:13Z", "eventName": "ListBuckets", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "6.3.3.245", "userAgent": "[aws-cli/1.16.96 Python/2.7.15+ Linux/4.15.0-54-generic botocore/1.12.86]", "awsRegion": "sa-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"host": ["s3.sa-east-1.amazonaws.com"]}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "0882c5cd-75fd-4a35-886a-47c92f1c96bc", "record_id": "flaws_cloudtrail:0000434:0882c5cd-75fd-4a35-886a-47c92f1c96bc", "row_index": 434, "timestamp": "2019-07-30T11:44:13Z", "event_type": "ListBuckets", "event_source": "s3.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "6.3.3.245", "user_agent": "[aws-cli/1.16.96 Python/2.7.15+ Linux/4.15.0-54-generic botocore/1.12.86]", "aws_region": "sa-east-1"}, "resource_arns": [], "raw_record_size_bytes": 817, "raw_record_depth": 3, "raw_record_top_level_keys": ["additionalEventData", "awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "0882c5cd-75fd-4a35-886a-47c92f1c96bc", "eventTime": "2019-07-30T11:44:13Z", "eventName": "ListBuckets", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "6.3.3.245", "userAgent": "[aws-cli/1.16.96 Python/2.7.15+ Linux/4.15.0-54-generic botocore/1.12.86]", "awsRegion": "sa-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"host": ["s3.sa-east-1.amazonaws.com"]}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "7134c57b-a5a8-4866-ab54-bb14f355716d2", "record_id": "flaws_cloudtrail:0000435:7134c57b-a5a8-4866-ab54-bb14f355716d2", "row_index": 435, "timestamp": "2019-07-30T11:44:24Z", "event_type": "ListBuckets", "event_source": "s3.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "6.3.3.245", "user_agent": "[aws-cli/1.16.96 Python/2.7.15+ Linux/4.15.0-54-generic botocore/1.12.86]", "aws_region": "eu-west-1"}, "resource_arns": [], "raw_record_size_bytes": 818, "raw_record_depth": 3, "raw_record_top_level_keys": ["additionalEventData", "awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "7134c57b-a5a8-4866-ab54-bb14f355716d2", "eventTime": "2019-07-30T11:44:24Z", "eventName": "ListBuckets", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "6.3.3.245", "userAgent": "[aws-cli/1.16.96 Python/2.7.15+ Linux/4.15.0-54-generic botocore/1.12.86]", "awsRegion": "eu-west-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"host": ["s3.eu-west-1.amazonaws.com"]}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "7134c57b-a5a8-4866-ab54-bb14f355716d2", "record_id": "flaws_cloudtrail:0000436:7134c57b-a5a8-4866-ab54-bb14f355716d2", "row_index": 436, "timestamp": "2019-07-30T11:44:24Z", "event_type": "ListBuckets", "event_source": "s3.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "6.3.3.245", "user_agent": "[aws-cli/1.16.96 Python/2.7.15+ Linux/4.15.0-54-generic botocore/1.12.86]", "aws_region": "eu-west-1"}, "resource_arns": [], "raw_record_size_bytes": 818, "raw_record_depth": 3, "raw_record_top_level_keys": ["additionalEventData", "awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "7134c57b-a5a8-4866-ab54-bb14f355716d2", "eventTime": "2019-07-30T11:44:24Z", "eventName": "ListBuckets", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "6.3.3.245", "userAgent": "[aws-cli/1.16.96 Python/2.7.15+ Linux/4.15.0-54-generic botocore/1.12.86]", "awsRegion": "eu-west-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"host": ["s3.eu-west-1.amazonaws.com"]}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "2b33aff1-90e9-4d77-aa00-849b7c501b36", "record_id": "flaws_cloudtrail:0000437:2b33aff1-90e9-4d77-aa00-849b7c501b36", "row_index": 437, "timestamp": "2019-07-30T11:44:25Z", "event_type": "ListBuckets", "event_source": "s3.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "6.3.3.245", "user_agent": "[aws-cli/1.16.96 Python/2.7.15+ Linux/4.15.0-54-generic botocore/1.12.86]", "aws_region": "ap-southeast-1"}, "resource_arns": [], "raw_record_size_bytes": 827, "raw_record_depth": 3, "raw_record_top_level_keys": ["additionalEventData", "awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "2b33aff1-90e9-4d77-aa00-849b7c501b36", "eventTime": "2019-07-30T11:44:25Z", "eventName": "ListBuckets", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "6.3.3.245", "userAgent": "[aws-cli/1.16.96 Python/2.7.15+ Linux/4.15.0-54-generic botocore/1.12.86]", "awsRegion": "ap-southeast-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"host": ["s3.ap-southeast-1.amazonaws.com"]}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "7aa104ff-9e82-4aa7-83ed-ec9941852940", "record_id": "flaws_cloudtrail:0000438:7aa104ff-9e82-4aa7-83ed-ec9941852940", "row_index": 438, "timestamp": "2019-07-30T11:44:25Z", "event_type": "ListBuckets", "event_source": "s3.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "6.3.3.245", "user_agent": "[aws-cli/1.16.96 Python/2.7.15+ Linux/4.15.0-54-generic botocore/1.12.86]", "aws_region": "ap-southeast-2"}, "resource_arns": [], "raw_record_size_bytes": 827, "raw_record_depth": 3, "raw_record_top_level_keys": ["additionalEventData", "awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "7aa104ff-9e82-4aa7-83ed-ec9941852940", "eventTime": "2019-07-30T11:44:25Z", "eventName": "ListBuckets", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "6.3.3.245", "userAgent": "[aws-cli/1.16.96 Python/2.7.15+ Linux/4.15.0-54-generic botocore/1.12.86]", "awsRegion": "ap-southeast-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"host": ["s3.ap-southeast-2.amazonaws.com"]}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "2b33aff1-90e9-4d77-aa00-849b7c501b36", "record_id": "flaws_cloudtrail:0000439:2b33aff1-90e9-4d77-aa00-849b7c501b36", "row_index": 439, "timestamp": "2019-07-30T11:44:25Z", "event_type": "ListBuckets", "event_source": "s3.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "6.3.3.245", "user_agent": "[aws-cli/1.16.96 Python/2.7.15+ Linux/4.15.0-54-generic botocore/1.12.86]", "aws_region": "ap-southeast-1"}, "resource_arns": [], "raw_record_size_bytes": 827, "raw_record_depth": 3, "raw_record_top_level_keys": ["additionalEventData", "awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "2b33aff1-90e9-4d77-aa00-849b7c501b36", "eventTime": "2019-07-30T11:44:25Z", "eventName": "ListBuckets", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "6.3.3.245", "userAgent": "[aws-cli/1.16.96 Python/2.7.15+ Linux/4.15.0-54-generic botocore/1.12.86]", "awsRegion": "ap-southeast-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"host": ["s3.ap-southeast-1.amazonaws.com"]}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "7aa104ff-9e82-4aa7-83ed-ec9941852940", "record_id": "flaws_cloudtrail:0000440:7aa104ff-9e82-4aa7-83ed-ec9941852940", "row_index": 440, "timestamp": "2019-07-30T11:44:25Z", "event_type": "ListBuckets", "event_source": "s3.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "6.3.3.245", "user_agent": "[aws-cli/1.16.96 Python/2.7.15+ Linux/4.15.0-54-generic botocore/1.12.86]", "aws_region": "ap-southeast-2"}, "resource_arns": [], "raw_record_size_bytes": 827, "raw_record_depth": 3, "raw_record_top_level_keys": ["additionalEventData", "awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "7aa104ff-9e82-4aa7-83ed-ec9941852940", "eventTime": "2019-07-30T11:44:25Z", "eventName": "ListBuckets", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "6.3.3.245", "userAgent": "[aws-cli/1.16.96 Python/2.7.15+ Linux/4.15.0-54-generic botocore/1.12.86]", "awsRegion": "ap-southeast-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"host": ["s3.ap-southeast-2.amazonaws.com"]}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "2612cfba-23ef-4f8a-9663-e393b846330", "record_id": "flaws_cloudtrail:0000441:2612cfba-23ef-4f8a-9663-e393b846330", "row_index": 441, "timestamp": "2019-07-30T11:44:26Z", "event_type": "ListBuckets", "event_source": "s3.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "6.3.3.245", "user_agent": "[aws-cli/1.16.96 Python/2.7.15+ Linux/4.15.0-54-generic botocore/1.12.86]", "aws_region": "ap-northeast-1"}, "resource_arns": [], "raw_record_size_bytes": 823, "raw_record_depth": 3, "raw_record_top_level_keys": ["additionalEventData", "awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "2612cfba-23ef-4f8a-9663-e393b846330", "eventTime": "2019-07-30T11:44:26Z", "eventName": "ListBuckets", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "6.3.3.245", "userAgent": "[aws-cli/1.16.96 Python/2.7.15+ Linux/4.15.0-54-generic botocore/1.12.86]", "awsRegion": "ap-northeast-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"host": ["s3.ap-northeast-1.amazonaws.com"]}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "84a69788-303d-4efa-a9f2-ede5124e17e3", "record_id": "flaws_cloudtrail:0000442:84a69788-303d-4efa-a9f2-ede5124e17e3", "row_index": 442, "timestamp": "2019-07-30T11:44:26Z", "event_type": "ListBuckets", "event_source": "s3.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "6.3.3.245", "user_agent": "[aws-cli/1.16.96 Python/2.7.15+ Linux/4.15.0-54-generic botocore/1.12.86]", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 807, "raw_record_depth": 3, "raw_record_top_level_keys": ["additionalEventData", "awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "84a69788-303d-4efa-a9f2-ede5124e17e3", "eventTime": "2019-07-30T11:44:26Z", "eventName": "ListBuckets", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "6.3.3.245", "userAgent": "[aws-cli/1.16.96 Python/2.7.15+ Linux/4.15.0-54-generic botocore/1.12.86]", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"host": ["s3.amazonaws.com"]}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "6970e7db-7f3f-426e-a4bd-7b93cc71496e", "record_id": "flaws_cloudtrail:0000443:6970e7db-7f3f-426e-a4bd-7b93cc71496e", "row_index": 443, "timestamp": "2019-07-30T11:44:26Z", "event_type": "ListBuckets", "event_source": "s3.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "6.3.3.245", "user_agent": "[aws-cli/1.16.96 Python/2.7.15+ Linux/4.15.0-54-generic botocore/1.12.86]", "aws_region": "us-west-1"}, "resource_arns": [], "raw_record_size_bytes": 817, "raw_record_depth": 3, "raw_record_top_level_keys": ["additionalEventData", "awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "6970e7db-7f3f-426e-a4bd-7b93cc71496e", "eventTime": "2019-07-30T11:44:26Z", "eventName": "ListBuckets", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "6.3.3.245", "userAgent": "[aws-cli/1.16.96 Python/2.7.15+ Linux/4.15.0-54-generic botocore/1.12.86]", "awsRegion": "us-west-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"host": ["s3.us-west-1.amazonaws.com"]}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "2612cfba-23ef-4f8a-9663-e393b846330", "record_id": "flaws_cloudtrail:0000444:2612cfba-23ef-4f8a-9663-e393b846330", "row_index": 444, "timestamp": "2019-07-30T11:44:26Z", "event_type": "ListBuckets", "event_source": "s3.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "6.3.3.245", "user_agent": "[aws-cli/1.16.96 Python/2.7.15+ Linux/4.15.0-54-generic botocore/1.12.86]", "aws_region": "ap-northeast-1"}, "resource_arns": [], "raw_record_size_bytes": 823, "raw_record_depth": 3, "raw_record_top_level_keys": ["additionalEventData", "awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "2612cfba-23ef-4f8a-9663-e393b846330", "eventTime": "2019-07-30T11:44:26Z", "eventName": "ListBuckets", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "6.3.3.245", "userAgent": "[aws-cli/1.16.96 Python/2.7.15+ Linux/4.15.0-54-generic botocore/1.12.86]", "awsRegion": "ap-northeast-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"host": ["s3.ap-northeast-1.amazonaws.com"]}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "84a69788-303d-4efa-a9f2-ede5124e17e3", "record_id": "flaws_cloudtrail:0000445:84a69788-303d-4efa-a9f2-ede5124e17e3", "row_index": 445, "timestamp": "2019-07-30T11:44:26Z", "event_type": "ListBuckets", "event_source": "s3.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "6.3.3.245", "user_agent": "[aws-cli/1.16.96 Python/2.7.15+ Linux/4.15.0-54-generic botocore/1.12.86]", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 807, "raw_record_depth": 3, "raw_record_top_level_keys": ["additionalEventData", "awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "84a69788-303d-4efa-a9f2-ede5124e17e3", "eventTime": "2019-07-30T11:44:26Z", "eventName": "ListBuckets", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "6.3.3.245", "userAgent": "[aws-cli/1.16.96 Python/2.7.15+ Linux/4.15.0-54-generic botocore/1.12.86]", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"host": ["s3.amazonaws.com"]}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "6970e7db-7f3f-426e-a4bd-7b93cc71496e", "record_id": "flaws_cloudtrail:0000446:6970e7db-7f3f-426e-a4bd-7b93cc71496e", "row_index": 446, "timestamp": "2019-07-30T11:44:26Z", "event_type": "ListBuckets", "event_source": "s3.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "6.3.3.245", "user_agent": "[aws-cli/1.16.96 Python/2.7.15+ Linux/4.15.0-54-generic botocore/1.12.86]", "aws_region": "us-west-1"}, "resource_arns": [], "raw_record_size_bytes": 817, "raw_record_depth": 3, "raw_record_top_level_keys": ["additionalEventData", "awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "6970e7db-7f3f-426e-a4bd-7b93cc71496e", "eventTime": "2019-07-30T11:44:26Z", "eventName": "ListBuckets", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "6.3.3.245", "userAgent": "[aws-cli/1.16.96 Python/2.7.15+ Linux/4.15.0-54-generic botocore/1.12.86]", "awsRegion": "us-west-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"host": ["s3.us-west-1.amazonaws.com"]}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "9f83164-48e1-4e58-8ce8-86a8b8c55ff6", "record_id": "flaws_cloudtrail:0000447:9f83164-48e1-4e58-8ce8-86a8b8c55ff6", "row_index": 447, "timestamp": "2019-07-30T11:44:27Z", "event_type": "ListBuckets", "event_source": "s3.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "6.3.3.245", "user_agent": "[aws-cli/1.16.96 Python/2.7.15+ Linux/4.15.0-54-generic botocore/1.12.86]", "aws_region": "sa-east-1"}, "resource_arns": [], "raw_record_size_bytes": 814, "raw_record_depth": 3, "raw_record_top_level_keys": ["additionalEventData", "awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "9f83164-48e1-4e58-8ce8-86a8b8c55ff6", "eventTime": "2019-07-30T11:44:27Z", "eventName": "ListBuckets", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "6.3.3.245", "userAgent": "[aws-cli/1.16.96 Python/2.7.15+ Linux/4.15.0-54-generic botocore/1.12.86]", "awsRegion": "sa-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"host": ["s3.sa-east-1.amazonaws.com"]}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "7401afc5-1eac-45c6-a83e-8d26a04427b2", "record_id": "flaws_cloudtrail:0000448:7401afc5-1eac-45c6-a83e-8d26a04427b2", "row_index": 448, "timestamp": "2019-07-30T11:44:27Z", "event_type": "ListBuckets", "event_source": "s3.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "6.3.3.245", "user_agent": "[aws-cli/1.16.96 Python/2.7.15+ Linux/4.15.0-54-generic botocore/1.12.86]", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 817, "raw_record_depth": 3, "raw_record_top_level_keys": ["additionalEventData", "awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "7401afc5-1eac-45c6-a83e-8d26a04427b2", "eventTime": "2019-07-30T11:44:27Z", "eventName": "ListBuckets", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "6.3.3.245", "userAgent": "[aws-cli/1.16.96 Python/2.7.15+ Linux/4.15.0-54-generic botocore/1.12.86]", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"host": ["s3.us-west-2.amazonaws.com"]}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "9f83164-48e1-4e58-8ce8-86a8b8c55ff6", "record_id": "flaws_cloudtrail:0000449:9f83164-48e1-4e58-8ce8-86a8b8c55ff6", "row_index": 449, "timestamp": "2019-07-30T11:44:27Z", "event_type": "ListBuckets", "event_source": "s3.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "6.3.3.245", "user_agent": "[aws-cli/1.16.96 Python/2.7.15+ Linux/4.15.0-54-generic botocore/1.12.86]", "aws_region": "sa-east-1"}, "resource_arns": [], "raw_record_size_bytes": 814, "raw_record_depth": 3, "raw_record_top_level_keys": ["additionalEventData", "awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "9f83164-48e1-4e58-8ce8-86a8b8c55ff6", "eventTime": "2019-07-30T11:44:27Z", "eventName": "ListBuckets", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "6.3.3.245", "userAgent": "[aws-cli/1.16.96 Python/2.7.15+ Linux/4.15.0-54-generic botocore/1.12.86]", "awsRegion": "sa-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"host": ["s3.sa-east-1.amazonaws.com"]}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "7401afc5-1eac-45c6-a83e-8d26a04427b2", "record_id": "flaws_cloudtrail:0000450:7401afc5-1eac-45c6-a83e-8d26a04427b2", "row_index": 450, "timestamp": "2019-07-30T11:44:27Z", "event_type": "ListBuckets", "event_source": "s3.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "6.3.3.245", "user_agent": "[aws-cli/1.16.96 Python/2.7.15+ Linux/4.15.0-54-generic botocore/1.12.86]", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 817, "raw_record_depth": 3, "raw_record_top_level_keys": ["additionalEventData", "awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "7401afc5-1eac-45c6-a83e-8d26a04427b2", "eventTime": "2019-07-30T11:44:27Z", "eventName": "ListBuckets", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "6.3.3.245", "userAgent": "[aws-cli/1.16.96 Python/2.7.15+ Linux/4.15.0-54-generic botocore/1.12.86]", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"host": ["s3.us-west-2.amazonaws.com"]}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "0f8689c4-baa3-4205-9256-85d8e2b000bc", "record_id": "flaws_cloudtrail:0000451:0f8689c4-baa3-4205-9256-85d8e2b000bc", "row_index": 451, "timestamp": "2019-07-30T11:45:58Z", "event_type": "ListBuckets", "event_source": "s3.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "6.3.3.245", "user_agent": "[aws-cli/1.16.96 Python/2.7.15+ Linux/4.15.0-54-generic botocore/1.12.86]", "aws_region": "eu-west-1"}, "resource_arns": [], "raw_record_size_bytes": 812, "raw_record_depth": 3, "raw_record_top_level_keys": ["additionalEventData", "awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "0f8689c4-baa3-4205-9256-85d8e2b000bc", "eventTime": "2019-07-30T11:45:58Z", "eventName": "ListBuckets", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "6.3.3.245", "userAgent": "[aws-cli/1.16.96 Python/2.7.15+ Linux/4.15.0-54-generic botocore/1.12.86]", "awsRegion": "eu-west-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"host": ["s3.eu-west-1.amazonaws.com"]}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "0f8689c4-baa3-4205-9256-85d8e2b000bc", "record_id": "flaws_cloudtrail:0000452:0f8689c4-baa3-4205-9256-85d8e2b000bc", "row_index": 452, "timestamp": "2019-07-30T11:45:58Z", "event_type": "ListBuckets", "event_source": "s3.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "6.3.3.245", "user_agent": "[aws-cli/1.16.96 Python/2.7.15+ Linux/4.15.0-54-generic botocore/1.12.86]", "aws_region": "eu-west-1"}, "resource_arns": [], "raw_record_size_bytes": 812, "raw_record_depth": 3, "raw_record_top_level_keys": ["additionalEventData", "awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "0f8689c4-baa3-4205-9256-85d8e2b000bc", "eventTime": "2019-07-30T11:45:58Z", "eventName": "ListBuckets", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "6.3.3.245", "userAgent": "[aws-cli/1.16.96 Python/2.7.15+ Linux/4.15.0-54-generic botocore/1.12.86]", "awsRegion": "eu-west-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"host": ["s3.eu-west-1.amazonaws.com"]}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "dc265dd2-8135-4d86-85a1-f6fec0ef1623", "record_id": "flaws_cloudtrail:0000453:dc265dd2-8135-4d86-85a1-f6fec0ef1623", "row_index": 453, "timestamp": "2019-07-30T11:45:59Z", "event_type": "ListBuckets", "event_source": "s3.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "6.3.3.245", "user_agent": "[aws-cli/1.16.96 Python/2.7.15+ Linux/4.15.0-54-generic botocore/1.12.86]", "aws_region": "ap-southeast-1"}, "resource_arns": [], "raw_record_size_bytes": 827, "raw_record_depth": 3, "raw_record_top_level_keys": ["additionalEventData", "awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "dc265dd2-8135-4d86-85a1-f6fec0ef1623", "eventTime": "2019-07-30T11:45:59Z", "eventName": "ListBuckets", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "6.3.3.245", "userAgent": "[aws-cli/1.16.96 Python/2.7.15+ Linux/4.15.0-54-generic botocore/1.12.86]", "awsRegion": "ap-southeast-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"host": ["s3.ap-southeast-1.amazonaws.com"]}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "751adaab-747d-4764-843d-daa3cdf9a455", "record_id": "flaws_cloudtrail:0000454:751adaab-747d-4764-843d-daa3cdf9a455", "row_index": 454, "timestamp": "2019-07-30T11:45:59Z", "event_type": "ListBuckets", "event_source": "s3.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "6.3.3.245", "user_agent": "[aws-cli/1.16.96 Python/2.7.15+ Linux/4.15.0-54-generic botocore/1.12.86]", "aws_region": "ap-southeast-2"}, "resource_arns": [], "raw_record_size_bytes": 827, "raw_record_depth": 3, "raw_record_top_level_keys": ["additionalEventData", "awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "751adaab-747d-4764-843d-daa3cdf9a455", "eventTime": "2019-07-30T11:45:59Z", "eventName": "ListBuckets", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "6.3.3.245", "userAgent": "[aws-cli/1.16.96 Python/2.7.15+ Linux/4.15.0-54-generic botocore/1.12.86]", "awsRegion": "ap-southeast-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"host": ["s3.ap-southeast-2.amazonaws.com"]}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "3faaaa74-e948-4f03-937b-9fda2a0bf652", "record_id": "flaws_cloudtrail:0000455:3faaaa74-e948-4f03-937b-9fda2a0bf652", "row_index": 455, "timestamp": "2019-07-30T11:45:59Z", "event_type": "ListBuckets", "event_source": "s3.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "6.3.3.245", "user_agent": "[aws-cli/1.16.96 Python/2.7.15+ Linux/4.15.0-54-generic botocore/1.12.86]", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 807, "raw_record_depth": 3, "raw_record_top_level_keys": ["additionalEventData", "awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "3faaaa74-e948-4f03-937b-9fda2a0bf652", "eventTime": "2019-07-30T11:45:59Z", "eventName": "ListBuckets", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "6.3.3.245", "userAgent": "[aws-cli/1.16.96 Python/2.7.15+ Linux/4.15.0-54-generic botocore/1.12.86]", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"host": ["s3.amazonaws.com"]}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "319ee76a-b980-4d4d-b3e9-371de79e4491", "record_id": "flaws_cloudtrail:0000456:319ee76a-b980-4d4d-b3e9-371de79e4491", "row_index": 456, "timestamp": "2019-07-30T11:45:59Z", "event_type": "ListBuckets", "event_source": "s3.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "6.3.3.245", "user_agent": "[aws-cli/1.16.96 Python/2.7.15+ Linux/4.15.0-54-generic botocore/1.12.86]", "aws_region": "us-west-1"}, "resource_arns": [], "raw_record_size_bytes": 817, "raw_record_depth": 3, "raw_record_top_level_keys": ["additionalEventData", "awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "319ee76a-b980-4d4d-b3e9-371de79e4491", "eventTime": "2019-07-30T11:45:59Z", "eventName": "ListBuckets", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "6.3.3.245", "userAgent": "[aws-cli/1.16.96 Python/2.7.15+ Linux/4.15.0-54-generic botocore/1.12.86]", "awsRegion": "us-west-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"host": ["s3.us-west-1.amazonaws.com"]}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "dc265dd2-8135-4d86-85a1-f6fec0ef1623", "record_id": "flaws_cloudtrail:0000457:dc265dd2-8135-4d86-85a1-f6fec0ef1623", "row_index": 457, "timestamp": "2019-07-30T11:45:59Z", "event_type": "ListBuckets", "event_source": "s3.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "6.3.3.245", "user_agent": "[aws-cli/1.16.96 Python/2.7.15+ Linux/4.15.0-54-generic botocore/1.12.86]", "aws_region": "ap-southeast-1"}, "resource_arns": [], "raw_record_size_bytes": 827, "raw_record_depth": 3, "raw_record_top_level_keys": ["additionalEventData", "awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "dc265dd2-8135-4d86-85a1-f6fec0ef1623", "eventTime": "2019-07-30T11:45:59Z", "eventName": "ListBuckets", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "6.3.3.245", "userAgent": "[aws-cli/1.16.96 Python/2.7.15+ Linux/4.15.0-54-generic botocore/1.12.86]", "awsRegion": "ap-southeast-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"host": ["s3.ap-southeast-1.amazonaws.com"]}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "751adaab-747d-4764-843d-daa3cdf9a455", "record_id": "flaws_cloudtrail:0000458:751adaab-747d-4764-843d-daa3cdf9a455", "row_index": 458, "timestamp": "2019-07-30T11:45:59Z", "event_type": "ListBuckets", "event_source": "s3.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "6.3.3.245", "user_agent": "[aws-cli/1.16.96 Python/2.7.15+ Linux/4.15.0-54-generic botocore/1.12.86]", "aws_region": "ap-southeast-2"}, "resource_arns": [], "raw_record_size_bytes": 827, "raw_record_depth": 3, "raw_record_top_level_keys": ["additionalEventData", "awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "751adaab-747d-4764-843d-daa3cdf9a455", "eventTime": "2019-07-30T11:45:59Z", "eventName": "ListBuckets", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "6.3.3.245", "userAgent": "[aws-cli/1.16.96 Python/2.7.15+ Linux/4.15.0-54-generic botocore/1.12.86]", "awsRegion": "ap-southeast-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"host": ["s3.ap-southeast-2.amazonaws.com"]}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "3faaaa74-e948-4f03-937b-9fda2a0bf652", "record_id": "flaws_cloudtrail:0000459:3faaaa74-e948-4f03-937b-9fda2a0bf652", "row_index": 459, "timestamp": "2019-07-30T11:45:59Z", "event_type": "ListBuckets", "event_source": "s3.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "6.3.3.245", "user_agent": "[aws-cli/1.16.96 Python/2.7.15+ Linux/4.15.0-54-generic botocore/1.12.86]", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 807, "raw_record_depth": 3, "raw_record_top_level_keys": ["additionalEventData", "awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "3faaaa74-e948-4f03-937b-9fda2a0bf652", "eventTime": "2019-07-30T11:45:59Z", "eventName": "ListBuckets", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "6.3.3.245", "userAgent": "[aws-cli/1.16.96 Python/2.7.15+ Linux/4.15.0-54-generic botocore/1.12.86]", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"host": ["s3.amazonaws.com"]}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "319ee76a-b980-4d4d-b3e9-371de79e4491", "record_id": "flaws_cloudtrail:0000460:319ee76a-b980-4d4d-b3e9-371de79e4491", "row_index": 460, "timestamp": "2019-07-30T11:45:59Z", "event_type": "ListBuckets", "event_source": "s3.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "6.3.3.245", "user_agent": "[aws-cli/1.16.96 Python/2.7.15+ Linux/4.15.0-54-generic botocore/1.12.86]", "aws_region": "us-west-1"}, "resource_arns": [], "raw_record_size_bytes": 817, "raw_record_depth": 3, "raw_record_top_level_keys": ["additionalEventData", "awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "319ee76a-b980-4d4d-b3e9-371de79e4491", "eventTime": "2019-07-30T11:45:59Z", "eventName": "ListBuckets", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "6.3.3.245", "userAgent": "[aws-cli/1.16.96 Python/2.7.15+ Linux/4.15.0-54-generic botocore/1.12.86]", "awsRegion": "us-west-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"host": ["s3.us-west-1.amazonaws.com"]}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "c897603d-548a-4e35-9b18-8d82209d5775", "record_id": "flaws_cloudtrail:0000461:c897603d-548a-4e35-9b18-8d82209d5775", "row_index": 461, "timestamp": "2019-07-30T11:46:00Z", "event_type": "ListBuckets", "event_source": "s3.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "6.3.3.245", "user_agent": "[aws-cli/1.16.96 Python/2.7.15+ Linux/4.15.0-54-generic botocore/1.12.86]", "aws_region": "ap-northeast-1"}, "resource_arns": [], "raw_record_size_bytes": 827, "raw_record_depth": 3, "raw_record_top_level_keys": ["additionalEventData", "awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "c897603d-548a-4e35-9b18-8d82209d5775", "eventTime": "2019-07-30T11:46:00Z", "eventName": "ListBuckets", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "6.3.3.245", "userAgent": "[aws-cli/1.16.96 Python/2.7.15+ Linux/4.15.0-54-generic botocore/1.12.86]", "awsRegion": "ap-northeast-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"host": ["s3.ap-northeast-1.amazonaws.com"]}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "150811ea1-8982-42c6-bf54-d2c75697aa", "record_id": "flaws_cloudtrail:0000462:150811ea1-8982-42c6-bf54-d2c75697aa", "row_index": 462, "timestamp": "2019-07-30T11:46:00Z", "event_type": "ListBuckets", "event_source": "s3.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "6.3.3.245", "user_agent": "[aws-cli/1.16.96 Python/2.7.15+ Linux/4.15.0-54-generic botocore/1.12.86]", "aws_region": "sa-east-1"}, "resource_arns": [], "raw_record_size_bytes": 816, "raw_record_depth": 3, "raw_record_top_level_keys": ["additionalEventData", "awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "150811ea1-8982-42c6-bf54-d2c75697aa", "eventTime": "2019-07-30T11:46:00Z", "eventName": "ListBuckets", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "6.3.3.245", "userAgent": "[aws-cli/1.16.96 Python/2.7.15+ Linux/4.15.0-54-generic botocore/1.12.86]", "awsRegion": "sa-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"host": ["s3.sa-east-1.amazonaws.com"]}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "c2ee002f-751a-4c98-a8fd-31392f8ecb8a", "record_id": "flaws_cloudtrail:0000463:c2ee002f-751a-4c98-a8fd-31392f8ecb8a", "row_index": 463, "timestamp": "2019-07-30T11:46:00Z", "event_type": "ListBuckets", "event_source": "s3.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "6.3.3.245", "user_agent": "[aws-cli/1.16.96 Python/2.7.15+ Linux/4.15.0-54-generic botocore/1.12.86]", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 817, "raw_record_depth": 3, "raw_record_top_level_keys": ["additionalEventData", "awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "c2ee002f-751a-4c98-a8fd-31392f8ecb8a", "eventTime": "2019-07-30T11:46:00Z", "eventName": "ListBuckets", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "6.3.3.245", "userAgent": "[aws-cli/1.16.96 Python/2.7.15+ Linux/4.15.0-54-generic botocore/1.12.86]", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"host": ["s3.us-west-2.amazonaws.com"]}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "c897603d-548a-4e35-9b18-8d82209d5775", "record_id": "flaws_cloudtrail:0000464:c897603d-548a-4e35-9b18-8d82209d5775", "row_index": 464, "timestamp": "2019-07-30T11:46:00Z", "event_type": "ListBuckets", "event_source": "s3.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "6.3.3.245", "user_agent": "[aws-cli/1.16.96 Python/2.7.15+ Linux/4.15.0-54-generic botocore/1.12.86]", "aws_region": "ap-northeast-1"}, "resource_arns": [], "raw_record_size_bytes": 827, "raw_record_depth": 3, "raw_record_top_level_keys": ["additionalEventData", "awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "c897603d-548a-4e35-9b18-8d82209d5775", "eventTime": "2019-07-30T11:46:00Z", "eventName": "ListBuckets", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "6.3.3.245", "userAgent": "[aws-cli/1.16.96 Python/2.7.15+ Linux/4.15.0-54-generic botocore/1.12.86]", "awsRegion": "ap-northeast-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"host": ["s3.ap-northeast-1.amazonaws.com"]}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "150811ea1-8982-42c6-bf54-d2c75697aa", "record_id": "flaws_cloudtrail:0000465:150811ea1-8982-42c6-bf54-d2c75697aa", "row_index": 465, "timestamp": "2019-07-30T11:46:00Z", "event_type": "ListBuckets", "event_source": "s3.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "6.3.3.245", "user_agent": "[aws-cli/1.16.96 Python/2.7.15+ Linux/4.15.0-54-generic botocore/1.12.86]", "aws_region": "sa-east-1"}, "resource_arns": [], "raw_record_size_bytes": 816, "raw_record_depth": 3, "raw_record_top_level_keys": ["additionalEventData", "awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "150811ea1-8982-42c6-bf54-d2c75697aa", "eventTime": "2019-07-30T11:46:00Z", "eventName": "ListBuckets", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "6.3.3.245", "userAgent": "[aws-cli/1.16.96 Python/2.7.15+ Linux/4.15.0-54-generic botocore/1.12.86]", "awsRegion": "sa-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"host": ["s3.sa-east-1.amazonaws.com"]}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "c2ee002f-751a-4c98-a8fd-31392f8ecb8a", "record_id": "flaws_cloudtrail:0000466:c2ee002f-751a-4c98-a8fd-31392f8ecb8a", "row_index": 466, "timestamp": "2019-07-30T11:46:00Z", "event_type": "ListBuckets", "event_source": "s3.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "6.3.3.245", "user_agent": "[aws-cli/1.16.96 Python/2.7.15+ Linux/4.15.0-54-generic botocore/1.12.86]", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 817, "raw_record_depth": 3, "raw_record_top_level_keys": ["additionalEventData", "awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "c2ee002f-751a-4c98-a8fd-31392f8ecb8a", "eventTime": "2019-07-30T11:46:00Z", "eventName": "ListBuckets", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "6.3.3.245", "userAgent": "[aws-cli/1.16.96 Python/2.7.15+ Linux/4.15.0-54-generic botocore/1.12.86]", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"host": ["s3.us-west-2.amazonaws.com"]}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "6570dfb6-7138-4441-9906-4ee0aeeba95b", "record_id": "flaws_cloudtrail:0000467:6570dfb6-7138-4441-9906-4ee0aeeba95b", "row_index": 467, "timestamp": "2019-07-30T11:47:32Z", "event_type": "ListBuckets", "event_source": "s3.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "6.3.3.245", "user_agent": "[aws-cli/1.16.96 Python/2.7.15+ Linux/4.15.0-54-generic botocore/1.12.86]", "aws_region": "eu-west-1"}, "resource_arns": [], "raw_record_size_bytes": 815, "raw_record_depth": 3, "raw_record_top_level_keys": ["additionalEventData", "awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "6570dfb6-7138-4441-9906-4ee0aeeba95b", "eventTime": "2019-07-30T11:47:32Z", "eventName": "ListBuckets", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "6.3.3.245", "userAgent": "[aws-cli/1.16.96 Python/2.7.15+ Linux/4.15.0-54-generic botocore/1.12.86]", "awsRegion": "eu-west-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"host": ["s3.eu-west-1.amazonaws.com"]}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "6570dfb6-7138-4441-9906-4ee0aeeba95b", "record_id": "flaws_cloudtrail:0000468:6570dfb6-7138-4441-9906-4ee0aeeba95b", "row_index": 468, "timestamp": "2019-07-30T11:47:32Z", "event_type": "ListBuckets", "event_source": "s3.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "6.3.3.245", "user_agent": "[aws-cli/1.16.96 Python/2.7.15+ Linux/4.15.0-54-generic botocore/1.12.86]", "aws_region": "eu-west-1"}, "resource_arns": [], "raw_record_size_bytes": 815, "raw_record_depth": 3, "raw_record_top_level_keys": ["additionalEventData", "awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "6570dfb6-7138-4441-9906-4ee0aeeba95b", "eventTime": "2019-07-30T11:47:32Z", "eventName": "ListBuckets", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "6.3.3.245", "userAgent": "[aws-cli/1.16.96 Python/2.7.15+ Linux/4.15.0-54-generic botocore/1.12.86]", "awsRegion": "eu-west-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"host": ["s3.eu-west-1.amazonaws.com"]}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "ccf5de1f-a133-422f-bf22-9fd9759ef4dd", "record_id": "flaws_cloudtrail:0000469:ccf5de1f-a133-422f-bf22-9fd9759ef4dd", "row_index": 469, "timestamp": "2019-07-30T11:47:33Z", "event_type": "ListBuckets", "event_source": "s3.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "6.3.3.245", "user_agent": "[aws-cli/1.16.96 Python/2.7.15+ Linux/4.15.0-54-generic botocore/1.12.86]", "aws_region": "ap-southeast-1"}, "resource_arns": [], "raw_record_size_bytes": 827, "raw_record_depth": 3, "raw_record_top_level_keys": ["additionalEventData", "awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "ccf5de1f-a133-422f-bf22-9fd9759ef4dd", "eventTime": "2019-07-30T11:47:33Z", "eventName": "ListBuckets", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "6.3.3.245", "userAgent": "[aws-cli/1.16.96 Python/2.7.15+ Linux/4.15.0-54-generic botocore/1.12.86]", "awsRegion": "ap-southeast-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"host": ["s3.ap-southeast-1.amazonaws.com"]}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "4a0c1bd2-4a7b-48bd-806b-50ef8fa7d058", "record_id": "flaws_cloudtrail:0000470:4a0c1bd2-4a7b-48bd-806b-50ef8fa7d058", "row_index": 470, "timestamp": "2019-07-30T11:47:33Z", "event_type": "ListBuckets", "event_source": "s3.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "6.3.3.245", "user_agent": "[aws-cli/1.16.96 Python/2.7.15+ Linux/4.15.0-54-generic botocore/1.12.86]", "aws_region": "ap-southeast-2"}, "resource_arns": [], "raw_record_size_bytes": 824, "raw_record_depth": 3, "raw_record_top_level_keys": ["additionalEventData", "awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "4a0c1bd2-4a7b-48bd-806b-50ef8fa7d058", "eventTime": "2019-07-30T11:47:33Z", "eventName": "ListBuckets", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "6.3.3.245", "userAgent": "[aws-cli/1.16.96 Python/2.7.15+ Linux/4.15.0-54-generic botocore/1.12.86]", "awsRegion": "ap-southeast-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"host": ["s3.ap-southeast-2.amazonaws.com"]}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "90c01b5f-bb4f-4ef2-a570-d327f728d964", "record_id": "flaws_cloudtrail:0000471:90c01b5f-bb4f-4ef2-a570-d327f728d964", "row_index": 471, "timestamp": "2019-07-30T11:47:33Z", "event_type": "ListBuckets", "event_source": "s3.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "6.3.3.245", "user_agent": "[aws-cli/1.16.96 Python/2.7.15+ Linux/4.15.0-54-generic botocore/1.12.86]", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 807, "raw_record_depth": 3, "raw_record_top_level_keys": ["additionalEventData", "awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "90c01b5f-bb4f-4ef2-a570-d327f728d964", "eventTime": "2019-07-30T11:47:33Z", "eventName": "ListBuckets", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "6.3.3.245", "userAgent": "[aws-cli/1.16.96 Python/2.7.15+ Linux/4.15.0-54-generic botocore/1.12.86]", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"host": ["s3.amazonaws.com"]}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "ccf5de1f-a133-422f-bf22-9fd9759ef4dd", "record_id": "flaws_cloudtrail:0000472:ccf5de1f-a133-422f-bf22-9fd9759ef4dd", "row_index": 472, "timestamp": "2019-07-30T11:47:33Z", "event_type": "ListBuckets", "event_source": "s3.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "6.3.3.245", "user_agent": "[aws-cli/1.16.96 Python/2.7.15+ Linux/4.15.0-54-generic botocore/1.12.86]", "aws_region": "ap-southeast-1"}, "resource_arns": [], "raw_record_size_bytes": 827, "raw_record_depth": 3, "raw_record_top_level_keys": ["additionalEventData", "awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "ccf5de1f-a133-422f-bf22-9fd9759ef4dd", "eventTime": "2019-07-30T11:47:33Z", "eventName": "ListBuckets", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "6.3.3.245", "userAgent": "[aws-cli/1.16.96 Python/2.7.15+ Linux/4.15.0-54-generic botocore/1.12.86]", "awsRegion": "ap-southeast-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"host": ["s3.ap-southeast-1.amazonaws.com"]}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "4a0c1bd2-4a7b-48bd-806b-50ef8fa7d058", "record_id": "flaws_cloudtrail:0000473:4a0c1bd2-4a7b-48bd-806b-50ef8fa7d058", "row_index": 473, "timestamp": "2019-07-30T11:47:33Z", "event_type": "ListBuckets", "event_source": "s3.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "6.3.3.245", "user_agent": "[aws-cli/1.16.96 Python/2.7.15+ Linux/4.15.0-54-generic botocore/1.12.86]", "aws_region": "ap-southeast-2"}, "resource_arns": [], "raw_record_size_bytes": 824, "raw_record_depth": 3, "raw_record_top_level_keys": ["additionalEventData", "awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "4a0c1bd2-4a7b-48bd-806b-50ef8fa7d058", "eventTime": "2019-07-30T11:47:33Z", "eventName": "ListBuckets", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "6.3.3.245", "userAgent": "[aws-cli/1.16.96 Python/2.7.15+ Linux/4.15.0-54-generic botocore/1.12.86]", "awsRegion": "ap-southeast-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"host": ["s3.ap-southeast-2.amazonaws.com"]}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "90c01b5f-bb4f-4ef2-a570-d327f728d964", "record_id": "flaws_cloudtrail:0000474:90c01b5f-bb4f-4ef2-a570-d327f728d964", "row_index": 474, "timestamp": "2019-07-30T11:47:33Z", "event_type": "ListBuckets", "event_source": "s3.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "6.3.3.245", "user_agent": "[aws-cli/1.16.96 Python/2.7.15+ Linux/4.15.0-54-generic botocore/1.12.86]", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 807, "raw_record_depth": 3, "raw_record_top_level_keys": ["additionalEventData", "awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "90c01b5f-bb4f-4ef2-a570-d327f728d964", "eventTime": "2019-07-30T11:47:33Z", "eventName": "ListBuckets", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "6.3.3.245", "userAgent": "[aws-cli/1.16.96 Python/2.7.15+ Linux/4.15.0-54-generic botocore/1.12.86]", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"host": ["s3.amazonaws.com"]}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "48fce6b1-f03e-45e8-bd8f-902935c86787", "record_id": "flaws_cloudtrail:0000475:48fce6b1-f03e-45e8-bd8f-902935c86787", "row_index": 475, "timestamp": "2019-07-30T11:47:34Z", "event_type": "ListBuckets", "event_source": "s3.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "6.3.3.245", "user_agent": "[aws-cli/1.16.96 Python/2.7.15+ Linux/4.15.0-54-generic botocore/1.12.86]", "aws_region": "ap-northeast-1"}, "resource_arns": [], "raw_record_size_bytes": 827, "raw_record_depth": 3, "raw_record_top_level_keys": ["additionalEventData", "awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "48fce6b1-f03e-45e8-bd8f-902935c86787", "eventTime": "2019-07-30T11:47:34Z", "eventName": "ListBuckets", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "6.3.3.245", "userAgent": "[aws-cli/1.16.96 Python/2.7.15+ Linux/4.15.0-54-generic botocore/1.12.86]", "awsRegion": "ap-northeast-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"host": ["s3.ap-northeast-1.amazonaws.com"]}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "12fec5a8-2b31-4990-a4fc-c9976a3be76d", "record_id": "flaws_cloudtrail:0000476:12fec5a8-2b31-4990-a4fc-c9976a3be76d", "row_index": 476, "timestamp": "2019-07-30T11:47:34Z", "event_type": "ListBuckets", "event_source": "s3.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "6.3.3.245", "user_agent": "[aws-cli/1.16.96 Python/2.7.15+ Linux/4.15.0-54-generic botocore/1.12.86]", "aws_region": "sa-east-1"}, "resource_arns": [], "raw_record_size_bytes": 817, "raw_record_depth": 3, "raw_record_top_level_keys": ["additionalEventData", "awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "12fec5a8-2b31-4990-a4fc-c9976a3be76d", "eventTime": "2019-07-30T11:47:34Z", "eventName": "ListBuckets", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "6.3.3.245", "userAgent": "[aws-cli/1.16.96 Python/2.7.15+ Linux/4.15.0-54-generic botocore/1.12.86]", "awsRegion": "sa-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"host": ["s3.sa-east-1.amazonaws.com"]}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "6fc0c5a1-5ffd-4196-a4bc-27f1ecbd25b0", "record_id": "flaws_cloudtrail:0000477:6fc0c5a1-5ffd-4196-a4bc-27f1ecbd25b0", "row_index": 477, "timestamp": "2019-07-30T11:47:34Z", "event_type": "ListBuckets", "event_source": "s3.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "6.3.3.245", "user_agent": "[aws-cli/1.16.96 Python/2.7.15+ Linux/4.15.0-54-generic botocore/1.12.86]", "aws_region": "us-west-1"}, "resource_arns": [], "raw_record_size_bytes": 817, "raw_record_depth": 3, "raw_record_top_level_keys": ["additionalEventData", "awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "6fc0c5a1-5ffd-4196-a4bc-27f1ecbd25b0", "eventTime": "2019-07-30T11:47:34Z", "eventName": "ListBuckets", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "6.3.3.245", "userAgent": "[aws-cli/1.16.96 Python/2.7.15+ Linux/4.15.0-54-generic botocore/1.12.86]", "awsRegion": "us-west-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"host": ["s3.us-west-1.amazonaws.com"]}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "967556c9-c79a-49b3-b755-3502f06d1aca", "record_id": "flaws_cloudtrail:0000478:967556c9-c79a-49b3-b755-3502f06d1aca", "row_index": 478, "timestamp": "2019-07-30T11:47:34Z", "event_type": "ListBuckets", "event_source": "s3.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "6.3.3.245", "user_agent": "[aws-cli/1.16.96 Python/2.7.15+ Linux/4.15.0-54-generic botocore/1.12.86]", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 817, "raw_record_depth": 3, "raw_record_top_level_keys": ["additionalEventData", "awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "967556c9-c79a-49b3-b755-3502f06d1aca", "eventTime": "2019-07-30T11:47:34Z", "eventName": "ListBuckets", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "6.3.3.245", "userAgent": "[aws-cli/1.16.96 Python/2.7.15+ Linux/4.15.0-54-generic botocore/1.12.86]", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"host": ["s3.us-west-2.amazonaws.com"]}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "48fce6b1-f03e-45e8-bd8f-902935c86787", "record_id": "flaws_cloudtrail:0000479:48fce6b1-f03e-45e8-bd8f-902935c86787", "row_index": 479, "timestamp": "2019-07-30T11:47:34Z", "event_type": "ListBuckets", "event_source": "s3.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "6.3.3.245", "user_agent": "[aws-cli/1.16.96 Python/2.7.15+ Linux/4.15.0-54-generic botocore/1.12.86]", "aws_region": "ap-northeast-1"}, "resource_arns": [], "raw_record_size_bytes": 827, "raw_record_depth": 3, "raw_record_top_level_keys": ["additionalEventData", "awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "48fce6b1-f03e-45e8-bd8f-902935c86787", "eventTime": "2019-07-30T11:47:34Z", "eventName": "ListBuckets", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "6.3.3.245", "userAgent": "[aws-cli/1.16.96 Python/2.7.15+ Linux/4.15.0-54-generic botocore/1.12.86]", "awsRegion": "ap-northeast-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"host": ["s3.ap-northeast-1.amazonaws.com"]}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "12fec5a8-2b31-4990-a4fc-c9976a3be76d", "record_id": "flaws_cloudtrail:0000480:12fec5a8-2b31-4990-a4fc-c9976a3be76d", "row_index": 480, "timestamp": "2019-07-30T11:47:34Z", "event_type": "ListBuckets", "event_source": "s3.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "6.3.3.245", "user_agent": "[aws-cli/1.16.96 Python/2.7.15+ Linux/4.15.0-54-generic botocore/1.12.86]", "aws_region": "sa-east-1"}, "resource_arns": [], "raw_record_size_bytes": 817, "raw_record_depth": 3, "raw_record_top_level_keys": ["additionalEventData", "awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "12fec5a8-2b31-4990-a4fc-c9976a3be76d", "eventTime": "2019-07-30T11:47:34Z", "eventName": "ListBuckets", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "6.3.3.245", "userAgent": "[aws-cli/1.16.96 Python/2.7.15+ Linux/4.15.0-54-generic botocore/1.12.86]", "awsRegion": "sa-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"host": ["s3.sa-east-1.amazonaws.com"]}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "6fc0c5a1-5ffd-4196-a4bc-27f1ecbd25b0", "record_id": "flaws_cloudtrail:0000481:6fc0c5a1-5ffd-4196-a4bc-27f1ecbd25b0", "row_index": 481, "timestamp": "2019-07-30T11:47:34Z", "event_type": "ListBuckets", "event_source": "s3.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "6.3.3.245", "user_agent": "[aws-cli/1.16.96 Python/2.7.15+ Linux/4.15.0-54-generic botocore/1.12.86]", "aws_region": "us-west-1"}, "resource_arns": [], "raw_record_size_bytes": 817, "raw_record_depth": 3, "raw_record_top_level_keys": ["additionalEventData", "awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "6fc0c5a1-5ffd-4196-a4bc-27f1ecbd25b0", "eventTime": "2019-07-30T11:47:34Z", "eventName": "ListBuckets", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "6.3.3.245", "userAgent": "[aws-cli/1.16.96 Python/2.7.15+ Linux/4.15.0-54-generic botocore/1.12.86]", "awsRegion": "us-west-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"host": ["s3.us-west-1.amazonaws.com"]}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "967556c9-c79a-49b3-b755-3502f06d1aca", "record_id": "flaws_cloudtrail:0000482:967556c9-c79a-49b3-b755-3502f06d1aca", "row_index": 482, "timestamp": "2019-07-30T11:47:34Z", "event_type": "ListBuckets", "event_source": "s3.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "6.3.3.245", "user_agent": "[aws-cli/1.16.96 Python/2.7.15+ Linux/4.15.0-54-generic botocore/1.12.86]", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 817, "raw_record_depth": 3, "raw_record_top_level_keys": ["additionalEventData", "awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "967556c9-c79a-49b3-b755-3502f06d1aca", "eventTime": "2019-07-30T11:47:34Z", "eventName": "ListBuckets", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "6.3.3.245", "userAgent": "[aws-cli/1.16.96 Python/2.7.15+ Linux/4.15.0-54-generic botocore/1.12.86]", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"host": ["s3.us-west-2.amazonaws.com"]}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "2c0d2a19-20cd-4576-9167-492329c71883", "record_id": "flaws_cloudtrail:0000483:2c0d2a19-20cd-4576-9167-492329c71883", "row_index": 483, "timestamp": "2019-07-30T12:23:08Z", "event_type": "AssumeRole", "event_source": "sts.amazonaws.com", "principal": {"type": "AWSService", "arn": null, "account_id": null, "principal_id": null, "user_name": null, "access_key_id": null, "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "config.amazonaws.com", "user_agent": "config.amazonaws.com", "aws_region": "us-west-2"}, "resource_arns": ["arn:aws:iam::811596193553:role/service-role/config-role-us-west-2"], "raw_record_size_bytes": 1936, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "resources", "responseElements", "sharedEventID", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "2c0d2a19-20cd-4576-9167-492329c71883", "eventTime": "2019-07-30T12:23:08Z", "eventName": "AssumeRole", "eventSource": "sts.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "config.amazonaws.com", "userAgent": "config.amazonaws.com", "awsRegion": "us-west-2", "userIdentity": {"type": "AWSService", "invokedBy": "config.amazonaws.com"}, "requestParameters": {"roleArn": "arn:aws:iam::811596193553:role/service-role/config-role-us-west-2", "roleSessionName": "AWSConfig"}, "responseElements": {"credentials": {"accessKeyId": "ASIASEWB67XCYIA8FDX3", "expiration": "Jul 30, 2019 1:23:08 PM", "sessionToken": "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"}, "assumedRoleUser": {"assumedRoleId": "AROASM3HWKK95VDO4HH81:AWSConfig", "arn": "arn:aws:sts::811596193553:assumed-role/config-role-us-west-2/AWSConfig"}}, "resources": [{"ARN": "arn:aws:iam::811596193553:role/service-role/config-role-us-west-2", "accountId": "811596193553", "type": "AWS::IAM::Role"}]}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "2c0d2a19-20cd-4576-9167-492329c71883", "record_id": "flaws_cloudtrail:0000484:2c0d2a19-20cd-4576-9167-492329c71883", "row_index": 484, "timestamp": "2019-07-30T12:23:08Z", "event_type": "AssumeRole", "event_source": "sts.amazonaws.com", "principal": {"type": "AWSService", "arn": null, "account_id": null, "principal_id": null, "user_name": null, "access_key_id": null, "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "config.amazonaws.com", "user_agent": "config.amazonaws.com", "aws_region": "us-west-2"}, "resource_arns": ["arn:aws:iam::811596193553:role/service-role/config-role-us-west-2"], "raw_record_size_bytes": 1936, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "resources", "responseElements", "sharedEventID", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "2c0d2a19-20cd-4576-9167-492329c71883", "eventTime": "2019-07-30T12:23:08Z", "eventName": "AssumeRole", "eventSource": "sts.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "config.amazonaws.com", "userAgent": "config.amazonaws.com", "awsRegion": "us-west-2", "userIdentity": {"type": "AWSService", "invokedBy": "config.amazonaws.com"}, "requestParameters": {"roleArn": "arn:aws:iam::811596193553:role/service-role/config-role-us-west-2", "roleSessionName": "AWSConfig"}, "responseElements": {"credentials": {"accessKeyId": "ASIASEWB67XCYIA8FDX3", "expiration": "Jul 30, 2019 1:23:08 PM", "sessionToken": "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"}, "assumedRoleUser": {"assumedRoleId": "AROASM3HWKK95VDO4HH81:AWSConfig", "arn": "arn:aws:sts::811596193553:assumed-role/config-role-us-west-2/AWSConfig"}}, "resources": [{"ARN": "arn:aws:iam::811596193553:role/service-role/config-role-us-west-2", "accountId": "811596193553", "type": "AWS::IAM::Role"}]}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "308d97e7-b9ee-4232-b2eb-e4dcd5110f67", "record_id": "flaws_cloudtrail:0000485:308d97e7-b9ee-4232-b2eb-e4dcd5110f67", "row_index": 485, "timestamp": "2019-07-30T12:31:35Z", "event_type": "AssumeRole", "event_source": "sts.amazonaws.com", "principal": {"type": "AWSService", "arn": null, "account_id": null, "principal_id": null, "user_name": null, "access_key_id": null, "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "ec2.amazonaws.com", "user_agent": "ec2.amazonaws.com", "aws_region": "us-west-2"}, "resource_arns": ["arn:aws:iam::811596193553:role/flaws"], "raw_record_size_bytes": 1878, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "resources", "responseElements", "sharedEventID", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "308d97e7-b9ee-4232-b2eb-e4dcd5110f67", "eventTime": "2019-07-30T12:31:35Z", "eventName": "AssumeRole", "eventSource": "sts.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "ec2.amazonaws.com", "userAgent": "ec2.amazonaws.com", "awsRegion": "us-west-2", "userIdentity": {"type": "AWSService", "invokedBy": "ec2.amazonaws.com"}, "requestParameters": {"roleSessionName": "i-aa2d3b42e5c6e801a", "roleArn": "arn:aws:iam::811596193553:role/flaws"}, "responseElements": {"credentials": {"accessKeyId": "ASIAIIJEV9LOGCMQRNYH", "expiration": "Jul 30, 2019 6:48:04 PM", "sessionToken": "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"}}, "resources": [{"ARN": "arn:aws:iam::811596193553:role/flaws", "accountId": "811596193553", "type": "AWS::IAM::Role"}]}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "308d97e7-b9ee-4232-b2eb-e4dcd5110f67", "record_id": "flaws_cloudtrail:0000486:308d97e7-b9ee-4232-b2eb-e4dcd5110f67", "row_index": 486, "timestamp": "2019-07-30T12:31:35Z", "event_type": "AssumeRole", "event_source": "sts.amazonaws.com", "principal": {"type": "AWSService", "arn": null, "account_id": null, "principal_id": null, "user_name": null, "access_key_id": null, "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "ec2.amazonaws.com", "user_agent": "ec2.amazonaws.com", "aws_region": "us-west-2"}, "resource_arns": ["arn:aws:iam::811596193553:role/flaws"], "raw_record_size_bytes": 1878, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "resources", "responseElements", "sharedEventID", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "308d97e7-b9ee-4232-b2eb-e4dcd5110f67", "eventTime": "2019-07-30T12:31:35Z", "eventName": "AssumeRole", "eventSource": "sts.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "ec2.amazonaws.com", "userAgent": "ec2.amazonaws.com", "awsRegion": "us-west-2", "userIdentity": {"type": "AWSService", "invokedBy": "ec2.amazonaws.com"}, "requestParameters": {"roleSessionName": "i-aa2d3b42e5c6e801a", "roleArn": "arn:aws:iam::811596193553:role/flaws"}, "responseElements": {"credentials": {"accessKeyId": "ASIAIIJEV9LOGCMQRNYH", "expiration": "Jul 30, 2019 6:48:04 PM", "sessionToken": "AgoJb3JpZ2luX2VjEBUaCXVzLXdlc3QtMiJHMEUCIQCrbBSNyLhQptKfURCSoxBs10rbuE5tBc+GRRVnbtf6agIgIol2zqQ3C+GOCB9WZhMv4i494+1343+lm+trNxfucFoq4wMIjv//////////ARAAGgw5NzU0MjYyNjIwMjkiDJAaD/xVADm1Y3TzTCq3A5c5FJKsntBZRrPrd1DYC1WrJqeDiQRUDzOWh+D5JXsQ+adpv5YwEHQ7SL3IRFUmx+NEgHoJZ6ppaDYAxQVJePCvU9bFZhxS5q44Ag7w9G2IOFXYT0IHlVrHL4tsjxGT1Gf6rB+9H3oWcmJrZkLG18EiwYbodt87s482RHLrQ7p4f9wGdIw/2i6q9T1Tc5VYHpeijfEgepw8physvLj9w2VzKuwtL1s0SXe6mM1fZ5I1HFyg7vtZiN/IRfkPuOxGNARZb8ZZDcA+cBHqkLnvOyfRLuzWXYPCq+x9gHOOiy9ZpuMZQLhSNSXn+oBA03UH9vQUKmBCXen0D17PX/GLP81OUrtkr0lyth72u4kBQAzJn3UeJO+44vbCqnOgEZ6b/9FKMj5nhZoZi3UVGgNSyKHGiIMEU3Y7nspmbtYD51Wi8RxJ4j9MEJd59HUZSPmXxZ7sFTfKxm2qGbQ+9mZWnMPOAw75K0TQW2rqKdOqAdqJFpcHYrpJlTKGoFZ50WeHNa0LJW3KVnJHOn7UzlMuOtT+NUqKT2VpyKga3n9oo/cDrMbu+w8aYPkwuCy9Z5KaqzlXsGFbam4wp/GA6gU6tAHaLI6NdR8RD3FIzvsBWEeyK7y8tcSsIcICRkvraKvpT91p7S4h3ThFEIWQk1PTHav4g30GhH2nsW7pq8IGIlRutYum/JkfLyZoFKeEFLLNW5WOqTF32XucRIUvto9Tweea8jFnUoBLVB6Y/pLnOZFJrLPe9svo92Otu/i61546Blr77nmLLh6KkoouiZrkoiHVJJIYqds6G1CyXowgtSu4/RKCZIXj17FnBXEeu2e9ZtkoC54="}}, "resources": [{"ARN": "arn:aws:iam::811596193553:role/flaws", "accountId": "811596193553", "type": "AWS::IAM::Role"}]}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "c202915e-9c3a-408d-832a-2409557826bb", "record_id": "flaws_cloudtrail:0000487:c202915e-9c3a-408d-832a-2409557826bb", "row_index": 487, "timestamp": "2019-07-30T13:31:35Z", "event_type": "AssumeRole", "event_source": "sts.amazonaws.com", "principal": {"type": "AWSService", "arn": null, "account_id": null, "principal_id": null, "user_name": null, "access_key_id": null, "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "ec2.amazonaws.com", "user_agent": "ec2.amazonaws.com", "aws_region": "us-west-2"}, "resource_arns": ["arn:aws:iam::811596193553:role/flaws"], "raw_record_size_bytes": 1879, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "resources", "responseElements", "sharedEventID", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "c202915e-9c3a-408d-832a-2409557826bb", "eventTime": "2019-07-30T13:31:35Z", "eventName": "AssumeRole", "eventSource": "sts.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "ec2.amazonaws.com", "userAgent": "ec2.amazonaws.com", "awsRegion": "us-west-2", "userIdentity": {"type": "AWSService", "invokedBy": "ec2.amazonaws.com"}, "requestParameters": {"roleSessionName": "i-aa2d3b42e5c6e801a", "roleArn": "arn:aws:iam::811596193553:role/flaws"}, "responseElements": {"credentials": {"accessKeyId": "ASIA7Q8GGQ2PPHUIAKNI", "expiration": "Jul 30, 2019 8:05:11 PM", "sessionToken": "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"}}, "resources": [{"ARN": "arn:aws:iam::811596193553:role/flaws", "accountId": "811596193553", "type": "AWS::IAM::Role"}]}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "c202915e-9c3a-408d-832a-2409557826bb", "record_id": "flaws_cloudtrail:0000488:c202915e-9c3a-408d-832a-2409557826bb", "row_index": 488, "timestamp": "2019-07-30T13:31:35Z", "event_type": "AssumeRole", "event_source": "sts.amazonaws.com", "principal": {"type": "AWSService", "arn": null, "account_id": null, "principal_id": null, "user_name": null, "access_key_id": null, "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "ec2.amazonaws.com", "user_agent": "ec2.amazonaws.com", "aws_region": "us-west-2"}, "resource_arns": ["arn:aws:iam::811596193553:role/flaws"], "raw_record_size_bytes": 1879, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "resources", "responseElements", "sharedEventID", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "c202915e-9c3a-408d-832a-2409557826bb", "eventTime": "2019-07-30T13:31:35Z", "eventName": "AssumeRole", "eventSource": "sts.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "ec2.amazonaws.com", "userAgent": "ec2.amazonaws.com", "awsRegion": "us-west-2", "userIdentity": {"type": "AWSService", "invokedBy": "ec2.amazonaws.com"}, "requestParameters": {"roleSessionName": "i-aa2d3b42e5c6e801a", "roleArn": "arn:aws:iam::811596193553:role/flaws"}, "responseElements": {"credentials": {"accessKeyId": "ASIA7Q8GGQ2PPHUIAKNI", "expiration": "Jul 30, 2019 8:05:11 PM", "sessionToken": "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"}}, "resources": [{"ARN": "arn:aws:iam::811596193553:role/flaws", "accountId": "811596193553", "type": "AWS::IAM::Role"}]}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "119c2c93-fc63-46d2-885c-30f615e0c4c4", "record_id": "flaws_cloudtrail:0000489:119c2c93-fc63-46d2-885c-30f615e0c4c4", "row_index": 489, "timestamp": "2019-07-30T14:31:35Z", "event_type": "AssumeRole", "event_source": "sts.amazonaws.com", "principal": {"type": "AWSService", "arn": null, "account_id": null, "principal_id": null, "user_name": null, "access_key_id": null, "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "ec2.amazonaws.com", "user_agent": "ec2.amazonaws.com", "aws_region": "us-west-2"}, "resource_arns": ["arn:aws:iam::811596193553:role/flaws"], "raw_record_size_bytes": 1882, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "resources", "responseElements", "sharedEventID", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "119c2c93-fc63-46d2-885c-30f615e0c4c4", "eventTime": "2019-07-30T14:31:35Z", "eventName": "AssumeRole", "eventSource": "sts.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "ec2.amazonaws.com", "userAgent": "ec2.amazonaws.com", "awsRegion": "us-west-2", "userIdentity": {"type": "AWSService", "invokedBy": "ec2.amazonaws.com"}, "requestParameters": {"roleSessionName": "i-aa2d3b42e5c6e801a", "roleArn": "arn:aws:iam::811596193553:role/flaws"}, "responseElements": {"credentials": {"accessKeyId": "ASIAA79SP9EEP0MGX5Y0", "expiration": "Jul 30, 2019 9:05:15 PM", "sessionToken": "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"}}, "resources": [{"ARN": "arn:aws:iam::811596193553:role/flaws", "accountId": "811596193553", "type": "AWS::IAM::Role"}]}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "119c2c93-fc63-46d2-885c-30f615e0c4c4", "record_id": "flaws_cloudtrail:0000490:119c2c93-fc63-46d2-885c-30f615e0c4c4", "row_index": 490, "timestamp": "2019-07-30T14:31:35Z", "event_type": "AssumeRole", "event_source": "sts.amazonaws.com", "principal": {"type": "AWSService", "arn": null, "account_id": null, "principal_id": null, "user_name": null, "access_key_id": null, "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "ec2.amazonaws.com", "user_agent": "ec2.amazonaws.com", "aws_region": "us-west-2"}, "resource_arns": ["arn:aws:iam::811596193553:role/flaws"], "raw_record_size_bytes": 1882, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "resources", "responseElements", "sharedEventID", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "119c2c93-fc63-46d2-885c-30f615e0c4c4", "eventTime": "2019-07-30T14:31:35Z", "eventName": "AssumeRole", "eventSource": "sts.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "ec2.amazonaws.com", "userAgent": "ec2.amazonaws.com", "awsRegion": "us-west-2", "userIdentity": {"type": "AWSService", "invokedBy": "ec2.amazonaws.com"}, "requestParameters": {"roleSessionName": "i-aa2d3b42e5c6e801a", "roleArn": "arn:aws:iam::811596193553:role/flaws"}, "responseElements": {"credentials": {"accessKeyId": "ASIAA79SP9EEP0MGX5Y0", "expiration": "Jul 30, 2019 9:05:15 PM", "sessionToken": "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"}}, "resources": [{"ARN": "arn:aws:iam::811596193553:role/flaws", "accountId": "811596193553", "type": "AWS::IAM::Role"}]}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "0f2e241f-84a3-4c83-8b6c-6dba400bd1ae", "record_id": "flaws_cloudtrail:0000491:0f2e241f-84a3-4c83-8b6c-6dba400bd1ae", "row_index": 491, "timestamp": "2019-07-30T15:06:21Z", "event_type": "AssumeRole", "event_source": "sts.amazonaws.com", "principal": {"type": "AWSService", "arn": null, "account_id": null, "principal_id": null, "user_name": null, "access_key_id": null, "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "lambda.amazonaws.com", "user_agent": "lambda.amazonaws.com", "aws_region": "us-west-2"}, "resource_arns": ["arn:aws:iam::811596193553:role/service-role/Level6"], "raw_record_size_bytes": 1618, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "resources", "responseElements", "sharedEventID", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "0f2e241f-84a3-4c83-8b6c-6dba400bd1ae", "eventTime": "2019-07-30T15:06:21Z", "eventName": "AssumeRole", "eventSource": "sts.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "lambda.amazonaws.com", "userAgent": "lambda.amazonaws.com", "awsRegion": "us-west-2", "userIdentity": {"type": "AWSService", "invokedBy": "lambda.amazonaws.com"}, "requestParameters": {"roleSessionName": "Level6", "roleArn": "arn:aws:iam::811596193553:role/service-role/Level6"}, "responseElements": {"credentials": {"accessKeyId": "ASIAAXYZEH3QH2U2XX49", "expiration": "Jul 31, 2019 3:06:21 AM", "sessionToken": "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"}}, "resources": [{"ARN": "arn:aws:iam::811596193553:role/service-role/Level6", "accountId": "811596193553", "type": "AWS::IAM::Role"}]}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "d981b904-7d66-44be-bee8-03f1f2c6d886", "record_id": "flaws_cloudtrail:0000492:d981b904-7d66-44be-bee8-03f1f2c6d886", "row_index": 492, "timestamp": "2019-07-30T15:06:21Z", "event_type": "CreateLogStream", "event_source": "logs.amazonaws.com", "principal": {"type": "AssumedRole", "arn": "arn:aws:sts::811596193553:assumed-role/Level6/Level6", "account_id": "811596193553", "principal_id": "AROAI4E1FBACLY3FPC6BB:Level6", "user_name": null, "access_key_id": "ASIAAXYZEH3QH2U2XX49", "session_issuer_arn": "arn:aws:iam::811596193553:role/service-role/Level6", "session_issuer_user_name": "Level6"}, "network": {"source_ip": "16.76.4.176", "user_agent": "awslambda-worker", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1028, "raw_record_depth": 4, "raw_record_top_level_keys": ["apiVersion", "awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "d981b904-7d66-44be-bee8-03f1f2c6d886", "eventTime": "2019-07-30T15:06:21Z", "eventName": "CreateLogStream", "eventSource": "logs.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "16.76.4.176", "userAgent": "awslambda-worker", "awsRegion": "us-west-2", "userIdentity": {"type": "AssumedRole", "principalId": "AROAI4E1FBACLY3FPC6BB:Level6", "arn": "arn:aws:sts::811596193553:assumed-role/Level6/Level6", "accountId": "811596193553", "accessKeyId": "ASIAAXYZEH3QH2U2XX49", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2019-07-30T15:06:21Z"}, "sessionIssuer": {"type": "Role", "principalId": "AROAI4E1FBACLY3FPC6BB", "arn": "arn:aws:iam::811596193553:role/service-role/Level6", "accountId": "811596193553", "userName": "Level6"}}}, "requestParameters": {"logStreamName": "2019/07/30/[$LATEST]4b843f8117d7c373cc3ec6a2887a1cc9", "logGroupName": "/aws/lambda/Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "aff450b6-56eb-4df0-b734-dcd136002fad", "record_id": "flaws_cloudtrail:0000493:aff450b6-56eb-4df0-b734-dcd136002fad", "row_index": 493, "timestamp": "2019-07-30T15:06:21Z", "event_type": "AssumeRole", "event_source": "sts.amazonaws.com", "principal": {"type": "AWSService", "arn": null, "account_id": null, "principal_id": null, "user_name": null, "access_key_id": null, "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "lambda.amazonaws.com", "user_agent": "lambda.amazonaws.com", "aws_region": "us-west-2"}, "resource_arns": ["arn:aws:iam::811596193553:role/service-role/Level6"], "raw_record_size_bytes": 1618, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "resources", "responseElements", "sharedEventID", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "aff450b6-56eb-4df0-b734-dcd136002fad", "eventTime": "2019-07-30T15:06:21Z", "eventName": "AssumeRole", "eventSource": "sts.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "lambda.amazonaws.com", "userAgent": "lambda.amazonaws.com", "awsRegion": "us-west-2", "userIdentity": {"type": "AWSService", "invokedBy": "lambda.amazonaws.com"}, "requestParameters": {"roleSessionName": "Level6", "roleArn": "arn:aws:iam::811596193553:role/service-role/Level6"}, "responseElements": {"credentials": {"accessKeyId": "ASIAJEZ2QYKX26R5RVKJ", "expiration": "Jul 31, 2019 3:06:21 AM", "sessionToken": "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"}}, "resources": [{"ARN": "arn:aws:iam::811596193553:role/service-role/Level6", "accountId": "811596193553", "type": "AWS::IAM::Role"}]}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "0f2e241f-84a3-4c83-8b6c-6dba400bd1ae", "record_id": "flaws_cloudtrail:0000494:0f2e241f-84a3-4c83-8b6c-6dba400bd1ae", "row_index": 494, "timestamp": "2019-07-30T15:06:21Z", "event_type": "AssumeRole", "event_source": "sts.amazonaws.com", "principal": {"type": "AWSService", "arn": null, "account_id": null, "principal_id": null, "user_name": null, "access_key_id": null, "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "lambda.amazonaws.com", "user_agent": "lambda.amazonaws.com", "aws_region": "us-west-2"}, "resource_arns": ["arn:aws:iam::811596193553:role/service-role/Level6"], "raw_record_size_bytes": 1618, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "resources", "responseElements", "sharedEventID", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "0f2e241f-84a3-4c83-8b6c-6dba400bd1ae", "eventTime": "2019-07-30T15:06:21Z", "eventName": "AssumeRole", "eventSource": "sts.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "lambda.amazonaws.com", "userAgent": "lambda.amazonaws.com", "awsRegion": "us-west-2", "userIdentity": {"type": "AWSService", "invokedBy": "lambda.amazonaws.com"}, "requestParameters": {"roleSessionName": "Level6", "roleArn": "arn:aws:iam::811596193553:role/service-role/Level6"}, "responseElements": {"credentials": {"accessKeyId": "ASIAAXYZEH3QH2U2XX49", "expiration": "Jul 31, 2019 3:06:21 AM", "sessionToken": "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"}}, "resources": [{"ARN": "arn:aws:iam::811596193553:role/service-role/Level6", "accountId": "811596193553", "type": "AWS::IAM::Role"}]}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "d981b904-7d66-44be-bee8-03f1f2c6d886", "record_id": "flaws_cloudtrail:0000495:d981b904-7d66-44be-bee8-03f1f2c6d886", "row_index": 495, "timestamp": "2019-07-30T15:06:21Z", "event_type": "CreateLogStream", "event_source": "logs.amazonaws.com", "principal": {"type": "AssumedRole", "arn": "arn:aws:sts::811596193553:assumed-role/Level6/Level6", "account_id": "811596193553", "principal_id": "AROAI4E1FBACLY3FPC6BB:Level6", "user_name": null, "access_key_id": "ASIAAXYZEH3QH2U2XX49", "session_issuer_arn": "arn:aws:iam::811596193553:role/service-role/Level6", "session_issuer_user_name": "Level6"}, "network": {"source_ip": "16.76.4.176", "user_agent": "awslambda-worker", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1028, "raw_record_depth": 4, "raw_record_top_level_keys": ["apiVersion", "awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "d981b904-7d66-44be-bee8-03f1f2c6d886", "eventTime": "2019-07-30T15:06:21Z", "eventName": "CreateLogStream", "eventSource": "logs.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "16.76.4.176", "userAgent": "awslambda-worker", "awsRegion": "us-west-2", "userIdentity": {"type": "AssumedRole", "principalId": "AROAI4E1FBACLY3FPC6BB:Level6", "arn": "arn:aws:sts::811596193553:assumed-role/Level6/Level6", "accountId": "811596193553", "accessKeyId": "ASIAAXYZEH3QH2U2XX49", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2019-07-30T15:06:21Z"}, "sessionIssuer": {"type": "Role", "principalId": "AROAI4E1FBACLY3FPC6BB", "arn": "arn:aws:iam::811596193553:role/service-role/Level6", "accountId": "811596193553", "userName": "Level6"}}}, "requestParameters": {"logStreamName": "2019/07/30/[$LATEST]4b843f8117d7c373cc3ec6a2887a1cc9", "logGroupName": "/aws/lambda/Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "aff450b6-56eb-4df0-b734-dcd136002fad", "record_id": "flaws_cloudtrail:0000496:aff450b6-56eb-4df0-b734-dcd136002fad", "row_index": 496, "timestamp": "2019-07-30T15:06:21Z", "event_type": "AssumeRole", "event_source": "sts.amazonaws.com", "principal": {"type": "AWSService", "arn": null, "account_id": null, "principal_id": null, "user_name": null, "access_key_id": null, "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "lambda.amazonaws.com", "user_agent": "lambda.amazonaws.com", "aws_region": "us-west-2"}, "resource_arns": ["arn:aws:iam::811596193553:role/service-role/Level6"], "raw_record_size_bytes": 1618, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "resources", "responseElements", "sharedEventID", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "aff450b6-56eb-4df0-b734-dcd136002fad", "eventTime": "2019-07-30T15:06:21Z", "eventName": "AssumeRole", "eventSource": "sts.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "lambda.amazonaws.com", "userAgent": "lambda.amazonaws.com", "awsRegion": "us-west-2", "userIdentity": {"type": "AWSService", "invokedBy": "lambda.amazonaws.com"}, "requestParameters": {"roleSessionName": "Level6", "roleArn": "arn:aws:iam::811596193553:role/service-role/Level6"}, "responseElements": {"credentials": {"accessKeyId": "ASIAJEZ2QYKX26R5RVKJ", "expiration": "Jul 31, 2019 3:06:21 AM", "sessionToken": "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"}}, "resources": [{"ARN": "arn:aws:iam::811596193553:role/service-role/Level6", "accountId": "811596193553", "type": "AWS::IAM::Role"}]}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "d6eb353b-16f2-4fcd-aca5-12a045658c533", "record_id": "flaws_cloudtrail:0000497:d6eb353b-16f2-4fcd-aca5-12a045658c533", "row_index": 497, "timestamp": "2019-07-30T15:31:36Z", "event_type": "AssumeRole", "event_source": "sts.amazonaws.com", "principal": {"type": "AWSService", "arn": null, "account_id": null, "principal_id": null, "user_name": null, "access_key_id": null, "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "ec2.amazonaws.com", "user_agent": "ec2.amazonaws.com", "aws_region": "us-west-2"}, "resource_arns": ["arn:aws:iam::811596193553:role/flaws"], "raw_record_size_bytes": 1883, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "resources", "responseElements", "sharedEventID", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "d6eb353b-16f2-4fcd-aca5-12a045658c533", "eventTime": "2019-07-30T15:31:36Z", "eventName": "AssumeRole", "eventSource": "sts.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "ec2.amazonaws.com", "userAgent": "ec2.amazonaws.com", "awsRegion": "us-west-2", "userIdentity": {"type": "AWSService", "invokedBy": "ec2.amazonaws.com"}, "requestParameters": {"roleSessionName": "i-aa2d3b42e5c6e801a", "roleArn": "arn:aws:iam::811596193553:role/flaws"}, "responseElements": {"credentials": {"accessKeyId": "ASIANB2TFY9ERNERDPXK", "expiration": "Jul 30, 2019 9:58:35 PM", "sessionToken": "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"}}, "resources": [{"ARN": "arn:aws:iam::811596193553:role/flaws", "accountId": "811596193553", "type": "AWS::IAM::Role"}]}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "d6eb353b-16f2-4fcd-aca5-12a045658c533", "record_id": "flaws_cloudtrail:0000498:d6eb353b-16f2-4fcd-aca5-12a045658c533", "row_index": 498, "timestamp": "2019-07-30T15:31:36Z", "event_type": "AssumeRole", "event_source": "sts.amazonaws.com", "principal": {"type": "AWSService", "arn": null, "account_id": null, "principal_id": null, "user_name": null, "access_key_id": null, "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "ec2.amazonaws.com", "user_agent": "ec2.amazonaws.com", "aws_region": "us-west-2"}, "resource_arns": ["arn:aws:iam::811596193553:role/flaws"], "raw_record_size_bytes": 1883, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "resources", "responseElements", "sharedEventID", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "d6eb353b-16f2-4fcd-aca5-12a045658c533", "eventTime": "2019-07-30T15:31:36Z", "eventName": "AssumeRole", "eventSource": "sts.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "ec2.amazonaws.com", "userAgent": "ec2.amazonaws.com", "awsRegion": "us-west-2", "userIdentity": {"type": "AWSService", "invokedBy": "ec2.amazonaws.com"}, "requestParameters": {"roleSessionName": "i-aa2d3b42e5c6e801a", "roleArn": "arn:aws:iam::811596193553:role/flaws"}, "responseElements": {"credentials": {"accessKeyId": "ASIANB2TFY9ERNERDPXK", "expiration": "Jul 30, 2019 9:58:35 PM", "sessionToken": "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"}}, "resources": [{"ARN": "arn:aws:iam::811596193553:role/flaws", "accountId": "811596193553", "type": "AWS::IAM::Role"}]}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "6a779943-6964-4028-b965-b4a2e2e9d50d", "record_id": "flaws_cloudtrail:0000499:6a779943-6964-4028-b965-b4a2e2e9d50d", "row_index": 499, "timestamp": "2019-07-30T15:31:51Z", "event_type": "GetCallerIdentity", "event_source": "sts.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "8.34.222.245", "user_agent": "aws-cli/1.16.140 Python/2.7.10 Darwin/18.6.0 botocore/1.12.130", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 771, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "6a779943-6964-4028-b965-b4a2e2e9d50d", "eventTime": "2019-07-30T15:31:51Z", "eventName": "GetCallerIdentity", "eventSource": "sts.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "8.34.222.245", "userAgent": "aws-cli/1.16.140 Python/2.7.10 Darwin/18.6.0 botocore/1.12.130", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "responseElements": {"userId": "AIDA9BO36HFBHKGJAO9C1", "account": "811596193553", "arn": "arn:aws:iam::811596193553:user/backup"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "6a779943-6964-4028-b965-b4a2e2e9d50d", "record_id": "flaws_cloudtrail:0000500:6a779943-6964-4028-b965-b4a2e2e9d50d", "row_index": 500, "timestamp": "2019-07-30T15:31:51Z", "event_type": "GetCallerIdentity", "event_source": "sts.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "8.34.222.245", "user_agent": "aws-cli/1.16.140 Python/2.7.10 Darwin/18.6.0 botocore/1.12.130", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 771, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "6a779943-6964-4028-b965-b4a2e2e9d50d", "eventTime": "2019-07-30T15:31:51Z", "eventName": "GetCallerIdentity", "eventSource": "sts.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "8.34.222.245", "userAgent": "aws-cli/1.16.140 Python/2.7.10 Darwin/18.6.0 botocore/1.12.130", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "responseElements": {"userId": "AIDA9BO36HFBHKGJAO9C1", "account": "811596193553", "arn": "arn:aws:iam::811596193553:user/backup"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "2b0e6935-7417-4541-8619-5843c60d0825", "record_id": "flaws_cloudtrail:0000501:2b0e6935-7417-4541-8619-5843c60d0825", "row_index": 501, "timestamp": "2019-07-30T15:51:42Z", "event_type": "GetRole", "event_source": "iam.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "240.252.161.77", "user_agent": "Boto3/1.9.171 Python/3.7.3 Linux/5.1.0-parrot1-3t-amd64 Botocore/1.12.171", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 711, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "2b0e6935-7417-4541-8619-5843c60d0825", "eventTime": "2019-07-30T15:51:42Z", "eventName": "GetRole", "eventSource": "iam.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "240.252.161.77", "userAgent": "Boto3/1.9.171 Python/3.7.3 Linux/5.1.0-parrot1-3t-amd64 Botocore/1.12.171", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"roleName": "AWSServiceRoleForCloudTrail"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "aa471aed-e07c-4189-b8f5-1ce5d1d1d6e5", "record_id": "flaws_cloudtrail:0000502:aa471aed-e07c-4189-b8f5-1ce5d1d1d6e5", "row_index": 502, "timestamp": "2019-07-30T15:51:42Z", "event_type": "ListAttachedRolePolicies", "event_source": "iam.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "240.252.161.77", "user_agent": "Boto3/1.9.171 Python/3.7.3 Linux/5.1.0-parrot1-3t-amd64 Botocore/1.12.171", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 727, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "aa471aed-e07c-4189-b8f5-1ce5d1d1d6e5", "eventTime": "2019-07-30T15:51:42Z", "eventName": "ListAttachedRolePolicies", "eventSource": "iam.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "240.252.161.77", "userAgent": "Boto3/1.9.171 Python/3.7.3 Linux/5.1.0-parrot1-3t-amd64 Botocore/1.12.171", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"roleName": "AWSServiceRoleForCloudTrail"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "f0328e39-a905-48cc-836d-bbd6b8e530e3", "record_id": "flaws_cloudtrail:0000503:f0328e39-a905-48cc-836d-bbd6b8e530e3", "row_index": 503, "timestamp": "2019-07-30T15:51:42Z", "event_type": "ListRoles", "event_source": "iam.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "240.252.161.77", "user_agent": "Boto3/1.9.171 Python/3.7.3 Linux/5.1.0-parrot1-3t-amd64 Botocore/1.12.171", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 675, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "f0328e39-a905-48cc-836d-bbd6b8e530e3", "eventTime": "2019-07-30T15:51:42Z", "eventName": "ListRoles", "eventSource": "iam.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "240.252.161.77", "userAgent": "Boto3/1.9.171 Python/3.7.3 Linux/5.1.0-parrot1-3t-amd64 Botocore/1.12.171", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "2b0e6935-7417-4541-8619-5843c60d0825", "record_id": "flaws_cloudtrail:0000504:2b0e6935-7417-4541-8619-5843c60d0825", "row_index": 504, "timestamp": "2019-07-30T15:51:42Z", "event_type": "GetRole", "event_source": "iam.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "240.252.161.77", "user_agent": "Boto3/1.9.171 Python/3.7.3 Linux/5.1.0-parrot1-3t-amd64 Botocore/1.12.171", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 711, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "2b0e6935-7417-4541-8619-5843c60d0825", "eventTime": "2019-07-30T15:51:42Z", "eventName": "GetRole", "eventSource": "iam.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "240.252.161.77", "userAgent": "Boto3/1.9.171 Python/3.7.3 Linux/5.1.0-parrot1-3t-amd64 Botocore/1.12.171", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"roleName": "AWSServiceRoleForCloudTrail"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "aa471aed-e07c-4189-b8f5-1ce5d1d1d6e5", "record_id": "flaws_cloudtrail:0000505:aa471aed-e07c-4189-b8f5-1ce5d1d1d6e5", "row_index": 505, "timestamp": "2019-07-30T15:51:42Z", "event_type": "ListAttachedRolePolicies", "event_source": "iam.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "240.252.161.77", "user_agent": "Boto3/1.9.171 Python/3.7.3 Linux/5.1.0-parrot1-3t-amd64 Botocore/1.12.171", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 727, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "aa471aed-e07c-4189-b8f5-1ce5d1d1d6e5", "eventTime": "2019-07-30T15:51:42Z", "eventName": "ListAttachedRolePolicies", "eventSource": "iam.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "240.252.161.77", "userAgent": "Boto3/1.9.171 Python/3.7.3 Linux/5.1.0-parrot1-3t-amd64 Botocore/1.12.171", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"roleName": "AWSServiceRoleForCloudTrail"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "f0328e39-a905-48cc-836d-bbd6b8e530e3", "record_id": "flaws_cloudtrail:0000506:f0328e39-a905-48cc-836d-bbd6b8e530e3", "row_index": 506, "timestamp": "2019-07-30T15:51:42Z", "event_type": "ListRoles", "event_source": "iam.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "240.252.161.77", "user_agent": "Boto3/1.9.171 Python/3.7.3 Linux/5.1.0-parrot1-3t-amd64 Botocore/1.12.171", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 675, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "f0328e39-a905-48cc-836d-bbd6b8e530e3", "eventTime": "2019-07-30T15:51:42Z", "eventName": "ListRoles", "eventSource": "iam.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "240.252.161.77", "userAgent": "Boto3/1.9.171 Python/3.7.3 Linux/5.1.0-parrot1-3t-amd64 Botocore/1.12.171", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "ec51accb-bfb6-4c6d-b4ef-78e42aa1cc82", "record_id": "flaws_cloudtrail:0000507:ec51accb-bfb6-4c6d-b4ef-78e42aa1cc82", "row_index": 507, "timestamp": "2019-07-30T15:51:43Z", "event_type": "ListInstanceProfilesForRole", "event_source": "iam.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "240.252.161.77", "user_agent": "Boto3/1.9.171 Python/3.7.3 Linux/5.1.0-parrot1-3t-amd64 Botocore/1.12.171", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 731, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "ec51accb-bfb6-4c6d-b4ef-78e42aa1cc82", "eventTime": "2019-07-30T15:51:43Z", "eventName": "ListInstanceProfilesForRole", "eventSource": "iam.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "240.252.161.77", "userAgent": "Boto3/1.9.171 Python/3.7.3 Linux/5.1.0-parrot1-3t-amd64 Botocore/1.12.171", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"roleName": "AWSServiceRoleForCloudTrail"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "c294eaac-d8e4-4829-8148-ef9562e90daa", "record_id": "flaws_cloudtrail:0000508:c294eaac-d8e4-4829-8148-ef9562e90daa", "row_index": 508, "timestamp": "2019-07-30T15:51:43Z", "event_type": "ListRolePolicies", "event_source": "iam.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "240.252.161.77", "user_agent": "Boto3/1.9.171 Python/3.7.3 Linux/5.1.0-parrot1-3t-amd64 Botocore/1.12.171", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 733, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "c294eaac-d8e4-4829-8148-ef9562e90daa", "eventTime": "2019-07-30T15:51:43Z", "eventName": "ListRolePolicies", "eventSource": "iam.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "240.252.161.77", "userAgent": "Boto3/1.9.171 Python/3.7.3 Linux/5.1.0-parrot1-3t-amd64 Botocore/1.12.171", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"roleName": "AWSServiceRoleForConfigMultiAccountSetup"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "317285-fedd-4a93-8acd-ad52ee5bb683", "record_id": "flaws_cloudtrail:0000509:317285-fedd-4a93-8acd-ad52ee5bb683", "row_index": 509, "timestamp": "2019-07-30T15:51:43Z", "event_type": "ListRolePolicies", "event_source": "iam.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "240.252.161.77", "user_agent": "Boto3/1.9.171 Python/3.7.3 Linux/5.1.0-parrot1-3t-amd64 Botocore/1.12.171", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 718, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "317285-fedd-4a93-8acd-ad52ee5bb683", "eventTime": "2019-07-30T15:51:43Z", "eventName": "ListRolePolicies", "eventSource": "iam.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "240.252.161.77", "userAgent": "Boto3/1.9.171 Python/3.7.3 Linux/5.1.0-parrot1-3t-amd64 Botocore/1.12.171", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"roleName": "AWSServiceRoleForCloudTrail"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "a9567e1c-a583-42e0-a435-7fbb934309e", "record_id": "flaws_cloudtrail:0000510:a9567e1c-a583-42e0-a435-7fbb934309e", "row_index": 510, "timestamp": "2019-07-30T15:51:43Z", "event_type": "ListRoleTags", "event_source": "iam.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "240.252.161.77", "user_agent": "Boto3/1.9.171 Python/3.7.3 Linux/5.1.0-parrot1-3t-amd64 Botocore/1.12.171", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 715, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "a9567e1c-a583-42e0-a435-7fbb934309e", "eventTime": "2019-07-30T15:51:43Z", "eventName": "ListRoleTags", "eventSource": "iam.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "240.252.161.77", "userAgent": "Boto3/1.9.171 Python/3.7.3 Linux/5.1.0-parrot1-3t-amd64 Botocore/1.12.171", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"roleName": "AWSServiceRoleForCloudTrail"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "b5f09a72-28e0-4767-a08f-8d05aa869f96", "record_id": "flaws_cloudtrail:0000511:b5f09a72-28e0-4767-a08f-8d05aa869f96", "row_index": 511, "timestamp": "2019-07-30T15:51:43Z", "event_type": "ListInstanceProfilesForRole", "event_source": "iam.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "240.252.161.77", "user_agent": "Boto3/1.9.171 Python/3.7.3 Linux/5.1.0-parrot1-3t-amd64 Botocore/1.12.171", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 744, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "b5f09a72-28e0-4767-a08f-8d05aa869f96", "eventTime": "2019-07-30T15:51:43Z", "eventName": "ListInstanceProfilesForRole", "eventSource": "iam.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "240.252.161.77", "userAgent": "Boto3/1.9.171 Python/3.7.3 Linux/5.1.0-parrot1-3t-amd64 Botocore/1.12.171", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"roleName": "AWSServiceRoleForConfigMultiAccountSetup"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "471d6bbf-3ec6-47d2-9526-3768e67ca119", "record_id": "flaws_cloudtrail:0000512:471d6bbf-3ec6-47d2-9526-3768e67ca119", "row_index": 512, "timestamp": "2019-07-30T15:51:43Z", "event_type": "GetRole", "event_source": "iam.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "240.252.161.77", "user_agent": "Boto3/1.9.171 Python/3.7.3 Linux/5.1.0-parrot1-3t-amd64 Botocore/1.12.171", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 714, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "471d6bbf-3ec6-47d2-9526-3768e67ca119", "eventTime": "2019-07-30T15:51:43Z", "eventName": "GetRole", "eventSource": "iam.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "240.252.161.77", "userAgent": "Boto3/1.9.171 Python/3.7.3 Linux/5.1.0-parrot1-3t-amd64 Botocore/1.12.171", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"roleName": "AWSServiceRoleForOrganizations"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "5b87a168-dd79-4eb4-91c7-cfcff95c595f", "record_id": "flaws_cloudtrail:0000513:5b87a168-dd79-4eb4-91c7-cfcff95c595f", "row_index": 513, "timestamp": "2019-07-30T15:51:43Z", "event_type": "GetRole", "event_source": "iam.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "240.252.161.77", "user_agent": "Boto3/1.9.171 Python/3.7.3 Linux/5.1.0-parrot1-3t-amd64 Botocore/1.12.171", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 724, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "5b87a168-dd79-4eb4-91c7-cfcff95c595f", "eventTime": "2019-07-30T15:51:43Z", "eventName": "GetRole", "eventSource": "iam.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "240.252.161.77", "userAgent": "Boto3/1.9.171 Python/3.7.3 Linux/5.1.0-parrot1-3t-amd64 Botocore/1.12.171", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"roleName": "AWSServiceRoleForConfigMultiAccountSetup"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "40236-7f1d-43ac-9529-2e18f24585b8", "record_id": "flaws_cloudtrail:0000514:40236-7f1d-43ac-9529-2e18f24585b8", "row_index": 514, "timestamp": "2019-07-30T15:51:43Z", "event_type": "ListAttachedRolePolicies", "event_source": "iam.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "240.252.161.77", "user_agent": "Boto3/1.9.171 Python/3.7.3 Linux/5.1.0-parrot1-3t-amd64 Botocore/1.12.171", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 738, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "40236-7f1d-43ac-9529-2e18f24585b8", "eventTime": "2019-07-30T15:51:43Z", "eventName": "ListAttachedRolePolicies", "eventSource": "iam.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "240.252.161.77", "userAgent": "Boto3/1.9.171 Python/3.7.3 Linux/5.1.0-parrot1-3t-amd64 Botocore/1.12.171", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"roleName": "AWSServiceRoleForConfigMultiAccountSetup"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "f18a2e21-43d3-4a4a-abed-dea464144771", "record_id": "flaws_cloudtrail:0000515:f18a2e21-43d3-4a4a-abed-dea464144771", "row_index": 515, "timestamp": "2019-07-30T15:51:43Z", "event_type": "ListRoleTags", "event_source": "iam.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "240.252.161.77", "user_agent": "Boto3/1.9.171 Python/3.7.3 Linux/5.1.0-parrot1-3t-amd64 Botocore/1.12.171", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 729, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "f18a2e21-43d3-4a4a-abed-dea464144771", "eventTime": "2019-07-30T15:51:43Z", "eventName": "ListRoleTags", "eventSource": "iam.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "240.252.161.77", "userAgent": "Boto3/1.9.171 Python/3.7.3 Linux/5.1.0-parrot1-3t-amd64 Botocore/1.12.171", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"roleName": "AWSServiceRoleForConfigMultiAccountSetup"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "ec51accb-bfb6-4c6d-b4ef-78e42aa1cc82", "record_id": "flaws_cloudtrail:0000516:ec51accb-bfb6-4c6d-b4ef-78e42aa1cc82", "row_index": 516, "timestamp": "2019-07-30T15:51:43Z", "event_type": "ListInstanceProfilesForRole", "event_source": "iam.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "240.252.161.77", "user_agent": "Boto3/1.9.171 Python/3.7.3 Linux/5.1.0-parrot1-3t-amd64 Botocore/1.12.171", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 731, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "ec51accb-bfb6-4c6d-b4ef-78e42aa1cc82", "eventTime": "2019-07-30T15:51:43Z", "eventName": "ListInstanceProfilesForRole", "eventSource": "iam.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "240.252.161.77", "userAgent": "Boto3/1.9.171 Python/3.7.3 Linux/5.1.0-parrot1-3t-amd64 Botocore/1.12.171", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"roleName": "AWSServiceRoleForCloudTrail"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "c294eaac-d8e4-4829-8148-ef9562e90daa", "record_id": "flaws_cloudtrail:0000517:c294eaac-d8e4-4829-8148-ef9562e90daa", "row_index": 517, "timestamp": "2019-07-30T15:51:43Z", "event_type": "ListRolePolicies", "event_source": "iam.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "240.252.161.77", "user_agent": "Boto3/1.9.171 Python/3.7.3 Linux/5.1.0-parrot1-3t-amd64 Botocore/1.12.171", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 733, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "c294eaac-d8e4-4829-8148-ef9562e90daa", "eventTime": "2019-07-30T15:51:43Z", "eventName": "ListRolePolicies", "eventSource": "iam.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "240.252.161.77", "userAgent": "Boto3/1.9.171 Python/3.7.3 Linux/5.1.0-parrot1-3t-amd64 Botocore/1.12.171", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"roleName": "AWSServiceRoleForConfigMultiAccountSetup"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "317285-fedd-4a93-8acd-ad52ee5bb683", "record_id": "flaws_cloudtrail:0000518:317285-fedd-4a93-8acd-ad52ee5bb683", "row_index": 518, "timestamp": "2019-07-30T15:51:43Z", "event_type": "ListRolePolicies", "event_source": "iam.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "240.252.161.77", "user_agent": "Boto3/1.9.171 Python/3.7.3 Linux/5.1.0-parrot1-3t-amd64 Botocore/1.12.171", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 718, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "317285-fedd-4a93-8acd-ad52ee5bb683", "eventTime": "2019-07-30T15:51:43Z", "eventName": "ListRolePolicies", "eventSource": "iam.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "240.252.161.77", "userAgent": "Boto3/1.9.171 Python/3.7.3 Linux/5.1.0-parrot1-3t-amd64 Botocore/1.12.171", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"roleName": "AWSServiceRoleForCloudTrail"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "a9567e1c-a583-42e0-a435-7fbb934309e", "record_id": "flaws_cloudtrail:0000519:a9567e1c-a583-42e0-a435-7fbb934309e", "row_index": 519, "timestamp": "2019-07-30T15:51:43Z", "event_type": "ListRoleTags", "event_source": "iam.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "240.252.161.77", "user_agent": "Boto3/1.9.171 Python/3.7.3 Linux/5.1.0-parrot1-3t-amd64 Botocore/1.12.171", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 715, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "a9567e1c-a583-42e0-a435-7fbb934309e", "eventTime": "2019-07-30T15:51:43Z", "eventName": "ListRoleTags", "eventSource": "iam.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "240.252.161.77", "userAgent": "Boto3/1.9.171 Python/3.7.3 Linux/5.1.0-parrot1-3t-amd64 Botocore/1.12.171", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"roleName": "AWSServiceRoleForCloudTrail"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "b5f09a72-28e0-4767-a08f-8d05aa869f96", "record_id": "flaws_cloudtrail:0000520:b5f09a72-28e0-4767-a08f-8d05aa869f96", "row_index": 520, "timestamp": "2019-07-30T15:51:43Z", "event_type": "ListInstanceProfilesForRole", "event_source": "iam.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "240.252.161.77", "user_agent": "Boto3/1.9.171 Python/3.7.3 Linux/5.1.0-parrot1-3t-amd64 Botocore/1.12.171", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 744, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "b5f09a72-28e0-4767-a08f-8d05aa869f96", "eventTime": "2019-07-30T15:51:43Z", "eventName": "ListInstanceProfilesForRole", "eventSource": "iam.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "240.252.161.77", "userAgent": "Boto3/1.9.171 Python/3.7.3 Linux/5.1.0-parrot1-3t-amd64 Botocore/1.12.171", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"roleName": "AWSServiceRoleForConfigMultiAccountSetup"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "471d6bbf-3ec6-47d2-9526-3768e67ca119", "record_id": "flaws_cloudtrail:0000521:471d6bbf-3ec6-47d2-9526-3768e67ca119", "row_index": 521, "timestamp": "2019-07-30T15:51:43Z", "event_type": "GetRole", "event_source": "iam.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "240.252.161.77", "user_agent": "Boto3/1.9.171 Python/3.7.3 Linux/5.1.0-parrot1-3t-amd64 Botocore/1.12.171", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 714, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "471d6bbf-3ec6-47d2-9526-3768e67ca119", "eventTime": "2019-07-30T15:51:43Z", "eventName": "GetRole", "eventSource": "iam.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "240.252.161.77", "userAgent": "Boto3/1.9.171 Python/3.7.3 Linux/5.1.0-parrot1-3t-amd64 Botocore/1.12.171", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"roleName": "AWSServiceRoleForOrganizations"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "5b87a168-dd79-4eb4-91c7-cfcff95c595f", "record_id": "flaws_cloudtrail:0000522:5b87a168-dd79-4eb4-91c7-cfcff95c595f", "row_index": 522, "timestamp": "2019-07-30T15:51:43Z", "event_type": "GetRole", "event_source": "iam.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "240.252.161.77", "user_agent": "Boto3/1.9.171 Python/3.7.3 Linux/5.1.0-parrot1-3t-amd64 Botocore/1.12.171", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 724, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "5b87a168-dd79-4eb4-91c7-cfcff95c595f", "eventTime": "2019-07-30T15:51:43Z", "eventName": "GetRole", "eventSource": "iam.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "240.252.161.77", "userAgent": "Boto3/1.9.171 Python/3.7.3 Linux/5.1.0-parrot1-3t-amd64 Botocore/1.12.171", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"roleName": "AWSServiceRoleForConfigMultiAccountSetup"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "40236-7f1d-43ac-9529-2e18f24585b8", "record_id": "flaws_cloudtrail:0000523:40236-7f1d-43ac-9529-2e18f24585b8", "row_index": 523, "timestamp": "2019-07-30T15:51:43Z", "event_type": "ListAttachedRolePolicies", "event_source": "iam.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "240.252.161.77", "user_agent": "Boto3/1.9.171 Python/3.7.3 Linux/5.1.0-parrot1-3t-amd64 Botocore/1.12.171", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 738, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "40236-7f1d-43ac-9529-2e18f24585b8", "eventTime": "2019-07-30T15:51:43Z", "eventName": "ListAttachedRolePolicies", "eventSource": "iam.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "240.252.161.77", "userAgent": "Boto3/1.9.171 Python/3.7.3 Linux/5.1.0-parrot1-3t-amd64 Botocore/1.12.171", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"roleName": "AWSServiceRoleForConfigMultiAccountSetup"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "f18a2e21-43d3-4a4a-abed-dea464144771", "record_id": "flaws_cloudtrail:0000524:f18a2e21-43d3-4a4a-abed-dea464144771", "row_index": 524, "timestamp": "2019-07-30T15:51:43Z", "event_type": "ListRoleTags", "event_source": "iam.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "240.252.161.77", "user_agent": "Boto3/1.9.171 Python/3.7.3 Linux/5.1.0-parrot1-3t-amd64 Botocore/1.12.171", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 729, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "f18a2e21-43d3-4a4a-abed-dea464144771", "eventTime": "2019-07-30T15:51:43Z", "eventName": "ListRoleTags", "eventSource": "iam.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "240.252.161.77", "userAgent": "Boto3/1.9.171 Python/3.7.3 Linux/5.1.0-parrot1-3t-amd64 Botocore/1.12.171", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"roleName": "AWSServiceRoleForConfigMultiAccountSetup"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "10732f7a-9cc5-47c3-99ad-78077d21fcab", "record_id": "flaws_cloudtrail:0000525:10732f7a-9cc5-47c3-99ad-78077d21fcab", "row_index": 525, "timestamp": "2019-07-30T15:51:44Z", "event_type": "ListRolePolicies", "event_source": "iam.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "240.252.161.77", "user_agent": "Boto3/1.9.171 Python/3.7.3 Linux/5.1.0-parrot1-3t-amd64 Botocore/1.12.171", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 717, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "10732f7a-9cc5-47c3-99ad-78077d21fcab", "eventTime": "2019-07-30T15:51:44Z", "eventName": "ListRolePolicies", "eventSource": "iam.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "240.252.161.77", "userAgent": "Boto3/1.9.171 Python/3.7.3 Linux/5.1.0-parrot1-3t-amd64 Botocore/1.12.171", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"roleName": "AWSServiceRoleForSupport"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "8acc3471-84af-410f-90ca-3d982bbf30a9", "record_id": "flaws_cloudtrail:0000526:8acc3471-84af-410f-90ca-3d982bbf30a9", "row_index": 526, "timestamp": "2019-07-30T15:51:44Z", "event_type": "ListInstanceProfilesForRole", "event_source": "iam.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "240.252.161.77", "user_agent": "Boto3/1.9.171 Python/3.7.3 Linux/5.1.0-parrot1-3t-amd64 Botocore/1.12.171", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 728, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "8acc3471-84af-410f-90ca-3d982bbf30a9", "eventTime": "2019-07-30T15:51:44Z", "eventName": "ListInstanceProfilesForRole", "eventSource": "iam.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "240.252.161.77", "userAgent": "Boto3/1.9.171 Python/3.7.3 Linux/5.1.0-parrot1-3t-amd64 Botocore/1.12.171", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"roleName": "AWSServiceRoleForSupport"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "134ed596-7d75-46cd-b2dc-6272ee3cad1d", "record_id": "flaws_cloudtrail:0000527:134ed596-7d75-46cd-b2dc-6272ee3cad1d", "row_index": 527, "timestamp": "2019-07-30T15:51:44Z", "event_type": "ListRoleTags", "event_source": "iam.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "240.252.161.77", "user_agent": "Boto3/1.9.171 Python/3.7.3 Linux/5.1.0-parrot1-3t-amd64 Botocore/1.12.171", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 713, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "134ed596-7d75-46cd-b2dc-6272ee3cad1d", "eventTime": "2019-07-30T15:51:44Z", "eventName": "ListRoleTags", "eventSource": "iam.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "240.252.161.77", "userAgent": "Boto3/1.9.171 Python/3.7.3 Linux/5.1.0-parrot1-3t-amd64 Botocore/1.12.171", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"roleName": "AWSServiceRoleForSupport"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "e5c2fdbc-4275-4a62-9802-feb3b826e8c0", "record_id": "flaws_cloudtrail:0000528:e5c2fdbc-4275-4a62-9802-feb3b826e8c0", "row_index": 528, "timestamp": "2019-07-30T15:51:44Z", "event_type": "ListRoleTags", "event_source": "iam.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "240.252.161.77", "user_agent": "Boto3/1.9.171 Python/3.7.3 Linux/5.1.0-parrot1-3t-amd64 Botocore/1.12.171", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 719, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "e5c2fdbc-4275-4a62-9802-feb3b826e8c0", "eventTime": "2019-07-30T15:51:44Z", "eventName": "ListRoleTags", "eventSource": "iam.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "240.252.161.77", "userAgent": "Boto3/1.9.171 Python/3.7.3 Linux/5.1.0-parrot1-3t-amd64 Botocore/1.12.171", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"roleName": "AWSServiceRoleForOrganizations"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "4ebd9177-8b7b-475e-860b-3e68d1c14f9c", "record_id": "flaws_cloudtrail:0000529:4ebd9177-8b7b-475e-860b-3e68d1c14f9c", "row_index": 529, "timestamp": "2019-07-30T15:51:44Z", "event_type": "ListRolePolicies", "event_source": "iam.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "240.252.161.77", "user_agent": "Boto3/1.9.171 Python/3.7.3 Linux/5.1.0-parrot1-3t-amd64 Botocore/1.12.171", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 723, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "4ebd9177-8b7b-475e-860b-3e68d1c14f9c", "eventTime": "2019-07-30T15:51:44Z", "eventName": "ListRolePolicies", "eventSource": "iam.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "240.252.161.77", "userAgent": "Boto3/1.9.171 Python/3.7.3 Linux/5.1.0-parrot1-3t-amd64 Botocore/1.12.171", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"roleName": "AWSServiceRoleForOrganizations"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "6c8a93af-1a8e-4f2d-b013-f897fd7b6b2f", "record_id": "flaws_cloudtrail:0000530:6c8a93af-1a8e-4f2d-b013-f897fd7b6b2f", "row_index": 530, "timestamp": "2019-07-30T15:51:44Z", "event_type": "ListAttachedRolePolicies", "event_source": "iam.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "240.252.161.77", "user_agent": "Boto3/1.9.171 Python/3.7.3 Linux/5.1.0-parrot1-3t-amd64 Botocore/1.12.171", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 725, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "6c8a93af-1a8e-4f2d-b013-f897fd7b6b2f", "eventTime": "2019-07-30T15:51:44Z", "eventName": "ListAttachedRolePolicies", "eventSource": "iam.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "240.252.161.77", "userAgent": "Boto3/1.9.171 Python/3.7.3 Linux/5.1.0-parrot1-3t-amd64 Botocore/1.12.171", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"roleName": "AWSServiceRoleForSupport"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "7ba180e2-88e5-4a31-9547-e33eb4bf90ce", "record_id": "flaws_cloudtrail:0000531:7ba180e2-88e5-4a31-9547-e33eb4bf90ce", "row_index": 531, "timestamp": "2019-07-30T15:51:44Z", "event_type": "GetRole", "event_source": "iam.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "240.252.161.77", "user_agent": "Boto3/1.9.171 Python/3.7.3 Linux/5.1.0-parrot1-3t-amd64 Botocore/1.12.171", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 708, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "7ba180e2-88e5-4a31-9547-e33eb4bf90ce", "eventTime": "2019-07-30T15:51:44Z", "eventName": "GetRole", "eventSource": "iam.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "240.252.161.77", "userAgent": "Boto3/1.9.171 Python/3.7.3 Linux/5.1.0-parrot1-3t-amd64 Botocore/1.12.171", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"roleName": "AWSServiceRoleForSupport"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "002ccb55-f0bc-4fef-a2cd-c40206e8df23", "record_id": "flaws_cloudtrail:0000532:002ccb55-f0bc-4fef-a2cd-c40206e8df23", "row_index": 532, "timestamp": "2019-07-30T15:51:44Z", "event_type": "ListAttachedRolePolicies", "event_source": "iam.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "240.252.161.77", "user_agent": "Boto3/1.9.171 Python/3.7.3 Linux/5.1.0-parrot1-3t-amd64 Botocore/1.12.171", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 731, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "002ccb55-f0bc-4fef-a2cd-c40206e8df23", "eventTime": "2019-07-30T15:51:44Z", "eventName": "ListAttachedRolePolicies", "eventSource": "iam.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "240.252.161.77", "userAgent": "Boto3/1.9.171 Python/3.7.3 Linux/5.1.0-parrot1-3t-amd64 Botocore/1.12.171", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"roleName": "AWSServiceRoleForOrganizations"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "e945e981-6609-4a49-9d45-bd74cf448ab5", "record_id": "flaws_cloudtrail:0000533:e945e981-6609-4a49-9d45-bd74cf448ab5", "row_index": 533, "timestamp": "2019-07-30T15:51:44Z", "event_type": "ListInstanceProfilesForRole", "event_source": "iam.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "240.252.161.77", "user_agent": "Boto3/1.9.171 Python/3.7.3 Linux/5.1.0-parrot1-3t-amd64 Botocore/1.12.171", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 734, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "e945e981-6609-4a49-9d45-bd74cf448ab5", "eventTime": "2019-07-30T15:51:44Z", "eventName": "ListInstanceProfilesForRole", "eventSource": "iam.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "240.252.161.77", "userAgent": "Boto3/1.9.171 Python/3.7.3 Linux/5.1.0-parrot1-3t-amd64 Botocore/1.12.171", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"roleName": "AWSServiceRoleForOrganizations"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "10732f7a-9cc5-47c3-99ad-78077d21fcab", "record_id": "flaws_cloudtrail:0000534:10732f7a-9cc5-47c3-99ad-78077d21fcab", "row_index": 534, "timestamp": "2019-07-30T15:51:44Z", "event_type": "ListRolePolicies", "event_source": "iam.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "240.252.161.77", "user_agent": "Boto3/1.9.171 Python/3.7.3 Linux/5.1.0-parrot1-3t-amd64 Botocore/1.12.171", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 717, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "10732f7a-9cc5-47c3-99ad-78077d21fcab", "eventTime": "2019-07-30T15:51:44Z", "eventName": "ListRolePolicies", "eventSource": "iam.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "240.252.161.77", "userAgent": "Boto3/1.9.171 Python/3.7.3 Linux/5.1.0-parrot1-3t-amd64 Botocore/1.12.171", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"roleName": "AWSServiceRoleForSupport"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "8acc3471-84af-410f-90ca-3d982bbf30a9", "record_id": "flaws_cloudtrail:0000535:8acc3471-84af-410f-90ca-3d982bbf30a9", "row_index": 535, "timestamp": "2019-07-30T15:51:44Z", "event_type": "ListInstanceProfilesForRole", "event_source": "iam.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "240.252.161.77", "user_agent": "Boto3/1.9.171 Python/3.7.3 Linux/5.1.0-parrot1-3t-amd64 Botocore/1.12.171", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 728, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "8acc3471-84af-410f-90ca-3d982bbf30a9", "eventTime": "2019-07-30T15:51:44Z", "eventName": "ListInstanceProfilesForRole", "eventSource": "iam.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "240.252.161.77", "userAgent": "Boto3/1.9.171 Python/3.7.3 Linux/5.1.0-parrot1-3t-amd64 Botocore/1.12.171", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"roleName": "AWSServiceRoleForSupport"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "134ed596-7d75-46cd-b2dc-6272ee3cad1d", "record_id": "flaws_cloudtrail:0000536:134ed596-7d75-46cd-b2dc-6272ee3cad1d", "row_index": 536, "timestamp": "2019-07-30T15:51:44Z", "event_type": "ListRoleTags", "event_source": "iam.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "240.252.161.77", "user_agent": "Boto3/1.9.171 Python/3.7.3 Linux/5.1.0-parrot1-3t-amd64 Botocore/1.12.171", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 713, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "134ed596-7d75-46cd-b2dc-6272ee3cad1d", "eventTime": "2019-07-30T15:51:44Z", "eventName": "ListRoleTags", "eventSource": "iam.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "240.252.161.77", "userAgent": "Boto3/1.9.171 Python/3.7.3 Linux/5.1.0-parrot1-3t-amd64 Botocore/1.12.171", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"roleName": "AWSServiceRoleForSupport"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "e5c2fdbc-4275-4a62-9802-feb3b826e8c0", "record_id": "flaws_cloudtrail:0000537:e5c2fdbc-4275-4a62-9802-feb3b826e8c0", "row_index": 537, "timestamp": "2019-07-30T15:51:44Z", "event_type": "ListRoleTags", "event_source": "iam.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "240.252.161.77", "user_agent": "Boto3/1.9.171 Python/3.7.3 Linux/5.1.0-parrot1-3t-amd64 Botocore/1.12.171", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 719, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "e5c2fdbc-4275-4a62-9802-feb3b826e8c0", "eventTime": "2019-07-30T15:51:44Z", "eventName": "ListRoleTags", "eventSource": "iam.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "240.252.161.77", "userAgent": "Boto3/1.9.171 Python/3.7.3 Linux/5.1.0-parrot1-3t-amd64 Botocore/1.12.171", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"roleName": "AWSServiceRoleForOrganizations"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "4ebd9177-8b7b-475e-860b-3e68d1c14f9c", "record_id": "flaws_cloudtrail:0000538:4ebd9177-8b7b-475e-860b-3e68d1c14f9c", "row_index": 538, "timestamp": "2019-07-30T15:51:44Z", "event_type": "ListRolePolicies", "event_source": "iam.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "240.252.161.77", "user_agent": "Boto3/1.9.171 Python/3.7.3 Linux/5.1.0-parrot1-3t-amd64 Botocore/1.12.171", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 723, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "4ebd9177-8b7b-475e-860b-3e68d1c14f9c", "eventTime": "2019-07-30T15:51:44Z", "eventName": "ListRolePolicies", "eventSource": "iam.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "240.252.161.77", "userAgent": "Boto3/1.9.171 Python/3.7.3 Linux/5.1.0-parrot1-3t-amd64 Botocore/1.12.171", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"roleName": "AWSServiceRoleForOrganizations"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "6c8a93af-1a8e-4f2d-b013-f897fd7b6b2f", "record_id": "flaws_cloudtrail:0000539:6c8a93af-1a8e-4f2d-b013-f897fd7b6b2f", "row_index": 539, "timestamp": "2019-07-30T15:51:44Z", "event_type": "ListAttachedRolePolicies", "event_source": "iam.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "240.252.161.77", "user_agent": "Boto3/1.9.171 Python/3.7.3 Linux/5.1.0-parrot1-3t-amd64 Botocore/1.12.171", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 725, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "6c8a93af-1a8e-4f2d-b013-f897fd7b6b2f", "eventTime": "2019-07-30T15:51:44Z", "eventName": "ListAttachedRolePolicies", "eventSource": "iam.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "240.252.161.77", "userAgent": "Boto3/1.9.171 Python/3.7.3 Linux/5.1.0-parrot1-3t-amd64 Botocore/1.12.171", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"roleName": "AWSServiceRoleForSupport"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "7ba180e2-88e5-4a31-9547-e33eb4bf90ce", "record_id": "flaws_cloudtrail:0000540:7ba180e2-88e5-4a31-9547-e33eb4bf90ce", "row_index": 540, "timestamp": "2019-07-30T15:51:44Z", "event_type": "GetRole", "event_source": "iam.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "240.252.161.77", "user_agent": "Boto3/1.9.171 Python/3.7.3 Linux/5.1.0-parrot1-3t-amd64 Botocore/1.12.171", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 708, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "7ba180e2-88e5-4a31-9547-e33eb4bf90ce", "eventTime": "2019-07-30T15:51:44Z", "eventName": "GetRole", "eventSource": "iam.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "240.252.161.77", "userAgent": "Boto3/1.9.171 Python/3.7.3 Linux/5.1.0-parrot1-3t-amd64 Botocore/1.12.171", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"roleName": "AWSServiceRoleForSupport"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "002ccb55-f0bc-4fef-a2cd-c40206e8df23", "record_id": "flaws_cloudtrail:0000541:002ccb55-f0bc-4fef-a2cd-c40206e8df23", "row_index": 541, "timestamp": "2019-07-30T15:51:44Z", "event_type": "ListAttachedRolePolicies", "event_source": "iam.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "240.252.161.77", "user_agent": "Boto3/1.9.171 Python/3.7.3 Linux/5.1.0-parrot1-3t-amd64 Botocore/1.12.171", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 731, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "002ccb55-f0bc-4fef-a2cd-c40206e8df23", "eventTime": "2019-07-30T15:51:44Z", "eventName": "ListAttachedRolePolicies", "eventSource": "iam.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "240.252.161.77", "userAgent": "Boto3/1.9.171 Python/3.7.3 Linux/5.1.0-parrot1-3t-amd64 Botocore/1.12.171", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"roleName": "AWSServiceRoleForOrganizations"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "e945e981-6609-4a49-9d45-bd74cf448ab5", "record_id": "flaws_cloudtrail:0000542:e945e981-6609-4a49-9d45-bd74cf448ab5", "row_index": 542, "timestamp": "2019-07-30T15:51:44Z", "event_type": "ListInstanceProfilesForRole", "event_source": "iam.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "240.252.161.77", "user_agent": "Boto3/1.9.171 Python/3.7.3 Linux/5.1.0-parrot1-3t-amd64 Botocore/1.12.171", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 734, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "e945e981-6609-4a49-9d45-bd74cf448ab5", "eventTime": "2019-07-30T15:51:44Z", "eventName": "ListInstanceProfilesForRole", "eventSource": "iam.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "240.252.161.77", "userAgent": "Boto3/1.9.171 Python/3.7.3 Linux/5.1.0-parrot1-3t-amd64 Botocore/1.12.171", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"roleName": "AWSServiceRoleForOrganizations"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "b3417ea8-fc7f-4d2f-b622-d54b4ba953743", "record_id": "flaws_cloudtrail:0000543:b3417ea8-fc7f-4d2f-b622-d54b4ba953743", "row_index": 543, "timestamp": "2019-07-30T15:51:45Z", "event_type": "ListAttachedRolePolicies", "event_source": "iam.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "240.252.161.77", "user_agent": "Boto3/1.9.171 Python/3.7.3 Linux/5.1.0-parrot1-3t-amd64 Botocore/1.12.171", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 723, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "b3417ea8-fc7f-4d2f-b622-d54b4ba953743", "eventTime": "2019-07-30T15:51:45Z", "eventName": "ListAttachedRolePolicies", "eventSource": "iam.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "240.252.161.77", "userAgent": "Boto3/1.9.171 Python/3.7.3 Linux/5.1.0-parrot1-3t-amd64 Botocore/1.12.171", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"roleName": "config-role-us-west-2"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "cf80c40d-b131-43dc-b411-b415186a519", "record_id": "flaws_cloudtrail:0000544:cf80c40d-b131-43dc-b411-b415186a519", "row_index": 544, "timestamp": "2019-07-30T15:51:45Z", "event_type": "ListInstanceProfilesForRole", "event_source": "iam.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "240.252.161.77", "user_agent": "Boto3/1.9.171 Python/3.7.3 Linux/5.1.0-parrot1-3t-amd64 Botocore/1.12.171", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 735, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "cf80c40d-b131-43dc-b411-b415186a519", "eventTime": "2019-07-30T15:51:45Z", "eventName": "ListInstanceProfilesForRole", "eventSource": "iam.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "240.252.161.77", "userAgent": "Boto3/1.9.171 Python/3.7.3 Linux/5.1.0-parrot1-3t-amd64 Botocore/1.12.171", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"roleName": "AWSServiceRoleForTrustedAdvisor"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "136e8365-2d21-4169-883c-69a708c99308", "record_id": "flaws_cloudtrail:0000545:136e8365-2d21-4169-883c-69a708c99308", "row_index": 545, "timestamp": "2019-07-30T15:51:45Z", "event_type": "ListRolePolicies", "event_source": "iam.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "240.252.161.77", "user_agent": "Boto3/1.9.171 Python/3.7.3 Linux/5.1.0-parrot1-3t-amd64 Botocore/1.12.171", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 714, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "136e8365-2d21-4169-883c-69a708c99308", "eventTime": "2019-07-30T15:51:45Z", "eventName": "ListRolePolicies", "eventSource": "iam.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "240.252.161.77", "userAgent": "Boto3/1.9.171 Python/3.7.3 Linux/5.1.0-parrot1-3t-amd64 Botocore/1.12.171", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"roleName": "config-role-us-west-2"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "751b940b-6c7f-42c4-ab2e-da646af1dd6e", "record_id": "flaws_cloudtrail:0000546:751b940b-6c7f-42c4-ab2e-da646af1dd6e", "row_index": 546, "timestamp": "2019-07-30T15:51:45Z", "event_type": "ListInstanceProfilesForRole", "event_source": "iam.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "240.252.161.77", "user_agent": "Boto3/1.9.171 Python/3.7.3 Linux/5.1.0-parrot1-3t-amd64 Botocore/1.12.171", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 725, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "751b940b-6c7f-42c4-ab2e-da646af1dd6e", "eventTime": "2019-07-30T15:51:45Z", "eventName": "ListInstanceProfilesForRole", "eventSource": "iam.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "240.252.161.77", "userAgent": "Boto3/1.9.171 Python/3.7.3 Linux/5.1.0-parrot1-3t-amd64 Botocore/1.12.171", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"roleName": "config-role-us-west-2"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "b242808bc-e48a-461b-9787-b9f206c5f499", "record_id": "flaws_cloudtrail:0000547:b242808bc-e48a-461b-9787-b9f206c5f499", "row_index": 547, "timestamp": "2019-07-30T15:51:45Z", "event_type": "ListAttachedRolePolicies", "event_source": "iam.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "240.252.161.77", "user_agent": "Boto3/1.9.171 Python/3.7.3 Linux/5.1.0-parrot1-3t-amd64 Botocore/1.12.171", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 733, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "b242808bc-e48a-461b-9787-b9f206c5f499", "eventTime": "2019-07-30T15:51:45Z", "eventName": "ListAttachedRolePolicies", "eventSource": "iam.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "240.252.161.77", "userAgent": "Boto3/1.9.171 Python/3.7.3 Linux/5.1.0-parrot1-3t-amd64 Botocore/1.12.171", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"roleName": "AWSServiceRoleForTrustedAdvisor"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "8e6e2e15-e8ff-4ae0-b622-20add736600a1", "record_id": "flaws_cloudtrail:0000548:8e6e2e15-e8ff-4ae0-b622-20add736600a1", "row_index": 548, "timestamp": "2019-07-30T15:51:45Z", "event_type": "ListRoleTags", "event_source": "iam.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "240.252.161.77", "user_agent": "Boto3/1.9.171 Python/3.7.3 Linux/5.1.0-parrot1-3t-amd64 Botocore/1.12.171", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 721, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "8e6e2e15-e8ff-4ae0-b622-20add736600a1", "eventTime": "2019-07-30T15:51:45Z", "eventName": "ListRoleTags", "eventSource": "iam.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "240.252.161.77", "userAgent": "Boto3/1.9.171 Python/3.7.3 Linux/5.1.0-parrot1-3t-amd64 Botocore/1.12.171", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"roleName": "AWSServiceRoleForTrustedAdvisor"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "d90e0efa-5395-479a-b5c7-4258a9bd2fef", "record_id": "flaws_cloudtrail:0000549:d90e0efa-5395-479a-b5c7-4258a9bd2fef", "row_index": 549, "timestamp": "2019-07-30T15:51:45Z", "event_type": "GetRole", "event_source": "iam.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "240.252.161.77", "user_agent": "Boto3/1.9.171 Python/3.7.3 Linux/5.1.0-parrot1-3t-amd64 Botocore/1.12.171", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 715, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "d90e0efa-5395-479a-b5c7-4258a9bd2fef", "eventTime": "2019-07-30T15:51:45Z", "eventName": "GetRole", "eventSource": "iam.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "240.252.161.77", "userAgent": "Boto3/1.9.171 Python/3.7.3 Linux/5.1.0-parrot1-3t-amd64 Botocore/1.12.171", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"roleName": "AWSServiceRoleForTrustedAdvisor"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "a566e9f0-2021-4323-af1a-0ba90cf3b2ea", "record_id": "flaws_cloudtrail:0000550:a566e9f0-2021-4323-af1a-0ba90cf3b2ea", "row_index": 550, "timestamp": "2019-07-30T15:51:45Z", "event_type": "ListRolePolicies", "event_source": "iam.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "240.252.161.77", "user_agent": "Boto3/1.9.171 Python/3.7.3 Linux/5.1.0-parrot1-3t-amd64 Botocore/1.12.171", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 725, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "a566e9f0-2021-4323-af1a-0ba90cf3b2ea", "eventTime": "2019-07-30T15:51:45Z", "eventName": "ListRolePolicies", "eventSource": "iam.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "240.252.161.77", "userAgent": "Boto3/1.9.171 Python/3.7.3 Linux/5.1.0-parrot1-3t-amd64 Botocore/1.12.171", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"roleName": "AWSServiceRoleForTrustedAdvisor"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "715d5104-5f48-4695-a82c-0ac37b2ef4e3", "record_id": "flaws_cloudtrail:0000551:715d5104-5f48-4695-a82c-0ac37b2ef4e3", "row_index": 551, "timestamp": "2019-07-30T15:51:45Z", "event_type": "GetRole", "event_source": "iam.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "240.252.161.77", "user_agent": "Boto3/1.9.171 Python/3.7.3 Linux/5.1.0-parrot1-3t-amd64 Botocore/1.12.171", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 705, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "715d5104-5f48-4695-a82c-0ac37b2ef4e3", "eventTime": "2019-07-30T15:51:45Z", "eventName": "GetRole", "eventSource": "iam.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "240.252.161.77", "userAgent": "Boto3/1.9.171 Python/3.7.3 Linux/5.1.0-parrot1-3t-amd64 Botocore/1.12.171", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"roleName": "config-role-us-west-2"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "b3417ea8-fc7f-4d2f-b622-d54b4ba953743", "record_id": "flaws_cloudtrail:0000552:b3417ea8-fc7f-4d2f-b622-d54b4ba953743", "row_index": 552, "timestamp": "2019-07-30T15:51:45Z", "event_type": "ListAttachedRolePolicies", "event_source": "iam.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "240.252.161.77", "user_agent": "Boto3/1.9.171 Python/3.7.3 Linux/5.1.0-parrot1-3t-amd64 Botocore/1.12.171", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 723, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "b3417ea8-fc7f-4d2f-b622-d54b4ba953743", "eventTime": "2019-07-30T15:51:45Z", "eventName": "ListAttachedRolePolicies", "eventSource": "iam.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "240.252.161.77", "userAgent": "Boto3/1.9.171 Python/3.7.3 Linux/5.1.0-parrot1-3t-amd64 Botocore/1.12.171", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"roleName": "config-role-us-west-2"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "cf80c40d-b131-43dc-b411-b415186a519", "record_id": "flaws_cloudtrail:0000553:cf80c40d-b131-43dc-b411-b415186a519", "row_index": 553, "timestamp": "2019-07-30T15:51:45Z", "event_type": "ListInstanceProfilesForRole", "event_source": "iam.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "240.252.161.77", "user_agent": "Boto3/1.9.171 Python/3.7.3 Linux/5.1.0-parrot1-3t-amd64 Botocore/1.12.171", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 735, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "cf80c40d-b131-43dc-b411-b415186a519", "eventTime": "2019-07-30T15:51:45Z", "eventName": "ListInstanceProfilesForRole", "eventSource": "iam.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "240.252.161.77", "userAgent": "Boto3/1.9.171 Python/3.7.3 Linux/5.1.0-parrot1-3t-amd64 Botocore/1.12.171", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"roleName": "AWSServiceRoleForTrustedAdvisor"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "136e8365-2d21-4169-883c-69a708c99308", "record_id": "flaws_cloudtrail:0000554:136e8365-2d21-4169-883c-69a708c99308", "row_index": 554, "timestamp": "2019-07-30T15:51:45Z", "event_type": "ListRolePolicies", "event_source": "iam.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "240.252.161.77", "user_agent": "Boto3/1.9.171 Python/3.7.3 Linux/5.1.0-parrot1-3t-amd64 Botocore/1.12.171", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 714, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "136e8365-2d21-4169-883c-69a708c99308", "eventTime": "2019-07-30T15:51:45Z", "eventName": "ListRolePolicies", "eventSource": "iam.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "240.252.161.77", "userAgent": "Boto3/1.9.171 Python/3.7.3 Linux/5.1.0-parrot1-3t-amd64 Botocore/1.12.171", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"roleName": "config-role-us-west-2"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "751b940b-6c7f-42c4-ab2e-da646af1dd6e", "record_id": "flaws_cloudtrail:0000555:751b940b-6c7f-42c4-ab2e-da646af1dd6e", "row_index": 555, "timestamp": "2019-07-30T15:51:45Z", "event_type": "ListInstanceProfilesForRole", "event_source": "iam.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "240.252.161.77", "user_agent": "Boto3/1.9.171 Python/3.7.3 Linux/5.1.0-parrot1-3t-amd64 Botocore/1.12.171", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 725, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "751b940b-6c7f-42c4-ab2e-da646af1dd6e", "eventTime": "2019-07-30T15:51:45Z", "eventName": "ListInstanceProfilesForRole", "eventSource": "iam.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "240.252.161.77", "userAgent": "Boto3/1.9.171 Python/3.7.3 Linux/5.1.0-parrot1-3t-amd64 Botocore/1.12.171", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"roleName": "config-role-us-west-2"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "b242808bc-e48a-461b-9787-b9f206c5f499", "record_id": "flaws_cloudtrail:0000556:b242808bc-e48a-461b-9787-b9f206c5f499", "row_index": 556, "timestamp": "2019-07-30T15:51:45Z", "event_type": "ListAttachedRolePolicies", "event_source": "iam.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "240.252.161.77", "user_agent": "Boto3/1.9.171 Python/3.7.3 Linux/5.1.0-parrot1-3t-amd64 Botocore/1.12.171", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 733, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "b242808bc-e48a-461b-9787-b9f206c5f499", "eventTime": "2019-07-30T15:51:45Z", "eventName": "ListAttachedRolePolicies", "eventSource": "iam.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "240.252.161.77", "userAgent": "Boto3/1.9.171 Python/3.7.3 Linux/5.1.0-parrot1-3t-amd64 Botocore/1.12.171", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"roleName": "AWSServiceRoleForTrustedAdvisor"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "8e6e2e15-e8ff-4ae0-b622-20add736600a1", "record_id": "flaws_cloudtrail:0000557:8e6e2e15-e8ff-4ae0-b622-20add736600a1", "row_index": 557, "timestamp": "2019-07-30T15:51:45Z", "event_type": "ListRoleTags", "event_source": "iam.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "240.252.161.77", "user_agent": "Boto3/1.9.171 Python/3.7.3 Linux/5.1.0-parrot1-3t-amd64 Botocore/1.12.171", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 721, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "8e6e2e15-e8ff-4ae0-b622-20add736600a1", "eventTime": "2019-07-30T15:51:45Z", "eventName": "ListRoleTags", "eventSource": "iam.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "240.252.161.77", "userAgent": "Boto3/1.9.171 Python/3.7.3 Linux/5.1.0-parrot1-3t-amd64 Botocore/1.12.171", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"roleName": "AWSServiceRoleForTrustedAdvisor"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "d90e0efa-5395-479a-b5c7-4258a9bd2fef", "record_id": "flaws_cloudtrail:0000558:d90e0efa-5395-479a-b5c7-4258a9bd2fef", "row_index": 558, "timestamp": "2019-07-30T15:51:45Z", "event_type": "GetRole", "event_source": "iam.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "240.252.161.77", "user_agent": "Boto3/1.9.171 Python/3.7.3 Linux/5.1.0-parrot1-3t-amd64 Botocore/1.12.171", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 715, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "d90e0efa-5395-479a-b5c7-4258a9bd2fef", "eventTime": "2019-07-30T15:51:45Z", "eventName": "GetRole", "eventSource": "iam.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "240.252.161.77", "userAgent": "Boto3/1.9.171 Python/3.7.3 Linux/5.1.0-parrot1-3t-amd64 Botocore/1.12.171", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"roleName": "AWSServiceRoleForTrustedAdvisor"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "a566e9f0-2021-4323-af1a-0ba90cf3b2ea", "record_id": "flaws_cloudtrail:0000559:a566e9f0-2021-4323-af1a-0ba90cf3b2ea", "row_index": 559, "timestamp": "2019-07-30T15:51:45Z", "event_type": "ListRolePolicies", "event_source": "iam.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "240.252.161.77", "user_agent": "Boto3/1.9.171 Python/3.7.3 Linux/5.1.0-parrot1-3t-amd64 Botocore/1.12.171", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 725, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "a566e9f0-2021-4323-af1a-0ba90cf3b2ea", "eventTime": "2019-07-30T15:51:45Z", "eventName": "ListRolePolicies", "eventSource": "iam.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "240.252.161.77", "userAgent": "Boto3/1.9.171 Python/3.7.3 Linux/5.1.0-parrot1-3t-amd64 Botocore/1.12.171", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"roleName": "AWSServiceRoleForTrustedAdvisor"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "715d5104-5f48-4695-a82c-0ac37b2ef4e3", "record_id": "flaws_cloudtrail:0000560:715d5104-5f48-4695-a82c-0ac37b2ef4e3", "row_index": 560, "timestamp": "2019-07-30T15:51:45Z", "event_type": "GetRole", "event_source": "iam.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "240.252.161.77", "user_agent": "Boto3/1.9.171 Python/3.7.3 Linux/5.1.0-parrot1-3t-amd64 Botocore/1.12.171", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 705, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "715d5104-5f48-4695-a82c-0ac37b2ef4e3", "eventTime": "2019-07-30T15:51:45Z", "eventName": "GetRole", "eventSource": "iam.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "240.252.161.77", "userAgent": "Boto3/1.9.171 Python/3.7.3 Linux/5.1.0-parrot1-3t-amd64 Botocore/1.12.171", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"roleName": "config-role-us-west-2"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "78dbc689-7a80-4e78-8a39-450b973a55c7", "record_id": "flaws_cloudtrail:0000561:78dbc689-7a80-4e78-8a39-450b973a55c7", "row_index": 561, "timestamp": "2019-07-30T15:51:46Z", "event_type": "ListAttachedRolePolicies", "event_source": "iam.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "240.252.161.77", "user_agent": "Boto3/1.9.171 Python/3.7.3 Linux/5.1.0-parrot1-3t-amd64 Botocore/1.12.171", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 706, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "78dbc689-7a80-4e78-8a39-450b973a55c7", "eventTime": "2019-07-30T15:51:46Z", "eventName": "ListAttachedRolePolicies", "eventSource": "iam.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "240.252.161.77", "userAgent": "Boto3/1.9.171 Python/3.7.3 Linux/5.1.0-parrot1-3t-amd64 Botocore/1.12.171", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"roleName": "flaws"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "03c96e73-3fff-422d-b513-e362102aeeb4d", "record_id": "flaws_cloudtrail:0000562:03c96e73-3fff-422d-b513-e362102aeeb4d", "row_index": 562, "timestamp": "2019-07-30T15:51:46Z", "event_type": "ListRoleTags", "event_source": "iam.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "240.252.161.77", "user_agent": "Boto3/1.9.171 Python/3.7.3 Linux/5.1.0-parrot1-3t-amd64 Botocore/1.12.171", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 695, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "03c96e73-3fff-422d-b513-e362102aeeb4d", "eventTime": "2019-07-30T15:51:46Z", "eventName": "ListRoleTags", "eventSource": "iam.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "240.252.161.77", "userAgent": "Boto3/1.9.171 Python/3.7.3 Linux/5.1.0-parrot1-3t-amd64 Botocore/1.12.171", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"roleName": "flaws"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "f5c61844-a85c-48aa-87ca-59d76f8ef9d2", "record_id": "flaws_cloudtrail:0000563:f5c61844-a85c-48aa-87ca-59d76f8ef9d2", "row_index": 563, "timestamp": "2019-07-30T15:51:46Z", "event_type": "GetRole", "event_source": "iam.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "240.252.161.77", "user_agent": "Boto3/1.9.171 Python/3.7.3 Linux/5.1.0-parrot1-3t-amd64 Botocore/1.12.171", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 689, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "f5c61844-a85c-48aa-87ca-59d76f8ef9d2", "eventTime": "2019-07-30T15:51:46Z", "eventName": "GetRole", "eventSource": "iam.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "240.252.161.77", "userAgent": "Boto3/1.9.171 Python/3.7.3 Linux/5.1.0-parrot1-3t-amd64 Botocore/1.12.171", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"roleName": "flaws"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "c8caac4d-0175-4c50-a5a4-6b110aa071d4", "record_id": "flaws_cloudtrail:0000564:c8caac4d-0175-4c50-a5a4-6b110aa071d4", "row_index": 564, "timestamp": "2019-07-30T15:51:46Z", "event_type": "ListAttachedRolePolicies", "event_source": "iam.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "240.252.161.77", "user_agent": "Boto3/1.9.171 Python/3.7.3 Linux/5.1.0-parrot1-3t-amd64 Botocore/1.12.171", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 707, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "c8caac4d-0175-4c50-a5a4-6b110aa071d4", "eventTime": "2019-07-30T15:51:46Z", "eventName": "ListAttachedRolePolicies", "eventSource": "iam.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "240.252.161.77", "userAgent": "Boto3/1.9.171 Python/3.7.3 Linux/5.1.0-parrot1-3t-amd64 Botocore/1.12.171", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"roleName": "Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "2cdc22d4-a0ae-4928-9b55-5de76390a3b", "record_id": "flaws_cloudtrail:0000565:2cdc22d4-a0ae-4928-9b55-5de76390a3b", "row_index": 565, "timestamp": "2019-07-30T15:51:46Z", "event_type": "GetRole", "event_source": "iam.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "240.252.161.77", "user_agent": "Boto3/1.9.171 Python/3.7.3 Linux/5.1.0-parrot1-3t-amd64 Botocore/1.12.171", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 689, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "2cdc22d4-a0ae-4928-9b55-5de76390a3b", "eventTime": "2019-07-30T15:51:46Z", "eventName": "GetRole", "eventSource": "iam.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "240.252.161.77", "userAgent": "Boto3/1.9.171 Python/3.7.3 Linux/5.1.0-parrot1-3t-amd64 Botocore/1.12.171", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"roleName": "Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "feff524d-f75e-4d6f-9a68-c69f029491a7a", "record_id": "flaws_cloudtrail:0000566:feff524d-f75e-4d6f-9a68-c69f029491a7a", "row_index": 566, "timestamp": "2019-07-30T15:51:46Z", "event_type": "ListInstanceProfilesForRole", "event_source": "iam.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "240.252.161.77", "user_agent": "Boto3/1.9.171 Python/3.7.3 Linux/5.1.0-parrot1-3t-amd64 Botocore/1.12.171", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 710, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "feff524d-f75e-4d6f-9a68-c69f029491a7a", "eventTime": "2019-07-30T15:51:46Z", "eventName": "ListInstanceProfilesForRole", "eventSource": "iam.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "240.252.161.77", "userAgent": "Boto3/1.9.171 Python/3.7.3 Linux/5.1.0-parrot1-3t-amd64 Botocore/1.12.171", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"roleName": "flaws"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "daa552a5-16be-4e89-8836-a484325a19af", "record_id": "flaws_cloudtrail:0000567:daa552a5-16be-4e89-8836-a484325a19af", "row_index": 567, "timestamp": "2019-07-30T15:51:46Z", "event_type": "ListRoleTags", "event_source": "iam.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "240.252.161.77", "user_agent": "Boto3/1.9.171 Python/3.7.3 Linux/5.1.0-parrot1-3t-amd64 Botocore/1.12.171", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 710, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "daa552a5-16be-4e89-8836-a484325a19af", "eventTime": "2019-07-30T15:51:46Z", "eventName": "ListRoleTags", "eventSource": "iam.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "240.252.161.77", "userAgent": "Boto3/1.9.171 Python/3.7.3 Linux/5.1.0-parrot1-3t-amd64 Botocore/1.12.171", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"roleName": "config-role-us-west-2"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "45643f-0b1e-49ce-81c5-8f44d7ea8515", "record_id": "flaws_cloudtrail:0000568:45643f-0b1e-49ce-81c5-8f44d7ea8515", "row_index": 568, "timestamp": "2019-07-30T15:51:46Z", "event_type": "ListRolePolicies", "event_source": "iam.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "240.252.161.77", "user_agent": "Boto3/1.9.171 Python/3.7.3 Linux/5.1.0-parrot1-3t-amd64 Botocore/1.12.171", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 696, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "45643f-0b1e-49ce-81c5-8f44d7ea8515", "eventTime": "2019-07-30T15:51:46Z", "eventName": "ListRolePolicies", "eventSource": "iam.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "240.252.161.77", "userAgent": "Boto3/1.9.171 Python/3.7.3 Linux/5.1.0-parrot1-3t-amd64 Botocore/1.12.171", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"roleName": "flaws"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "78dbc689-7a80-4e78-8a39-450b973a55c7", "record_id": "flaws_cloudtrail:0000569:78dbc689-7a80-4e78-8a39-450b973a55c7", "row_index": 569, "timestamp": "2019-07-30T15:51:46Z", "event_type": "ListAttachedRolePolicies", "event_source": "iam.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "240.252.161.77", "user_agent": "Boto3/1.9.171 Python/3.7.3 Linux/5.1.0-parrot1-3t-amd64 Botocore/1.12.171", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 706, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "78dbc689-7a80-4e78-8a39-450b973a55c7", "eventTime": "2019-07-30T15:51:46Z", "eventName": "ListAttachedRolePolicies", "eventSource": "iam.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "240.252.161.77", "userAgent": "Boto3/1.9.171 Python/3.7.3 Linux/5.1.0-parrot1-3t-amd64 Botocore/1.12.171", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"roleName": "flaws"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "03c96e73-3fff-422d-b513-e362102aeeb4d", "record_id": "flaws_cloudtrail:0000570:03c96e73-3fff-422d-b513-e362102aeeb4d", "row_index": 570, "timestamp": "2019-07-30T15:51:46Z", "event_type": "ListRoleTags", "event_source": "iam.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "240.252.161.77", "user_agent": "Boto3/1.9.171 Python/3.7.3 Linux/5.1.0-parrot1-3t-amd64 Botocore/1.12.171", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 695, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "03c96e73-3fff-422d-b513-e362102aeeb4d", "eventTime": "2019-07-30T15:51:46Z", "eventName": "ListRoleTags", "eventSource": "iam.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "240.252.161.77", "userAgent": "Boto3/1.9.171 Python/3.7.3 Linux/5.1.0-parrot1-3t-amd64 Botocore/1.12.171", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"roleName": "flaws"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "f5c61844-a85c-48aa-87ca-59d76f8ef9d2", "record_id": "flaws_cloudtrail:0000571:f5c61844-a85c-48aa-87ca-59d76f8ef9d2", "row_index": 571, "timestamp": "2019-07-30T15:51:46Z", "event_type": "GetRole", "event_source": "iam.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "240.252.161.77", "user_agent": "Boto3/1.9.171 Python/3.7.3 Linux/5.1.0-parrot1-3t-amd64 Botocore/1.12.171", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 689, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "f5c61844-a85c-48aa-87ca-59d76f8ef9d2", "eventTime": "2019-07-30T15:51:46Z", "eventName": "GetRole", "eventSource": "iam.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "240.252.161.77", "userAgent": "Boto3/1.9.171 Python/3.7.3 Linux/5.1.0-parrot1-3t-amd64 Botocore/1.12.171", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"roleName": "flaws"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "c8caac4d-0175-4c50-a5a4-6b110aa071d4", "record_id": "flaws_cloudtrail:0000572:c8caac4d-0175-4c50-a5a4-6b110aa071d4", "row_index": 572, "timestamp": "2019-07-30T15:51:46Z", "event_type": "ListAttachedRolePolicies", "event_source": "iam.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "240.252.161.77", "user_agent": "Boto3/1.9.171 Python/3.7.3 Linux/5.1.0-parrot1-3t-amd64 Botocore/1.12.171", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 707, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "c8caac4d-0175-4c50-a5a4-6b110aa071d4", "eventTime": "2019-07-30T15:51:46Z", "eventName": "ListAttachedRolePolicies", "eventSource": "iam.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "240.252.161.77", "userAgent": "Boto3/1.9.171 Python/3.7.3 Linux/5.1.0-parrot1-3t-amd64 Botocore/1.12.171", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"roleName": "Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "2cdc22d4-a0ae-4928-9b55-5de76390a3b", "record_id": "flaws_cloudtrail:0000573:2cdc22d4-a0ae-4928-9b55-5de76390a3b", "row_index": 573, "timestamp": "2019-07-30T15:51:46Z", "event_type": "GetRole", "event_source": "iam.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "240.252.161.77", "user_agent": "Boto3/1.9.171 Python/3.7.3 Linux/5.1.0-parrot1-3t-amd64 Botocore/1.12.171", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 689, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "2cdc22d4-a0ae-4928-9b55-5de76390a3b", "eventTime": "2019-07-30T15:51:46Z", "eventName": "GetRole", "eventSource": "iam.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "240.252.161.77", "userAgent": "Boto3/1.9.171 Python/3.7.3 Linux/5.1.0-parrot1-3t-amd64 Botocore/1.12.171", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"roleName": "Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "feff524d-f75e-4d6f-9a68-c69f029491a7a", "record_id": "flaws_cloudtrail:0000574:feff524d-f75e-4d6f-9a68-c69f029491a7a", "row_index": 574, "timestamp": "2019-07-30T15:51:46Z", "event_type": "ListInstanceProfilesForRole", "event_source": "iam.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "240.252.161.77", "user_agent": "Boto3/1.9.171 Python/3.7.3 Linux/5.1.0-parrot1-3t-amd64 Botocore/1.12.171", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 710, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "feff524d-f75e-4d6f-9a68-c69f029491a7a", "eventTime": "2019-07-30T15:51:46Z", "eventName": "ListInstanceProfilesForRole", "eventSource": "iam.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "240.252.161.77", "userAgent": "Boto3/1.9.171 Python/3.7.3 Linux/5.1.0-parrot1-3t-amd64 Botocore/1.12.171", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"roleName": "flaws"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "daa552a5-16be-4e89-8836-a484325a19af", "record_id": "flaws_cloudtrail:0000575:daa552a5-16be-4e89-8836-a484325a19af", "row_index": 575, "timestamp": "2019-07-30T15:51:46Z", "event_type": "ListRoleTags", "event_source": "iam.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "240.252.161.77", "user_agent": "Boto3/1.9.171 Python/3.7.3 Linux/5.1.0-parrot1-3t-amd64 Botocore/1.12.171", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 710, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "daa552a5-16be-4e89-8836-a484325a19af", "eventTime": "2019-07-30T15:51:46Z", "eventName": "ListRoleTags", "eventSource": "iam.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "240.252.161.77", "userAgent": "Boto3/1.9.171 Python/3.7.3 Linux/5.1.0-parrot1-3t-amd64 Botocore/1.12.171", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"roleName": "config-role-us-west-2"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "45643f-0b1e-49ce-81c5-8f44d7ea8515", "record_id": "flaws_cloudtrail:0000576:45643f-0b1e-49ce-81c5-8f44d7ea8515", "row_index": 576, "timestamp": "2019-07-30T15:51:46Z", "event_type": "ListRolePolicies", "event_source": "iam.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "240.252.161.77", "user_agent": "Boto3/1.9.171 Python/3.7.3 Linux/5.1.0-parrot1-3t-amd64 Botocore/1.12.171", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 696, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "45643f-0b1e-49ce-81c5-8f44d7ea8515", "eventTime": "2019-07-30T15:51:46Z", "eventName": "ListRolePolicies", "eventSource": "iam.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "240.252.161.77", "userAgent": "Boto3/1.9.171 Python/3.7.3 Linux/5.1.0-parrot1-3t-amd64 Botocore/1.12.171", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"roleName": "flaws"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "0224df45-da56-43d1-aac4-dd3cb8263eae", "record_id": "flaws_cloudtrail:0000577:0224df45-da56-43d1-aac4-dd3cb8263eae", "row_index": 577, "timestamp": "2019-07-30T15:51:47Z", "event_type": "ListRolePolicies", "event_source": "iam.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "240.252.161.77", "user_agent": "Boto3/1.9.171 Python/3.7.3 Linux/5.1.0-parrot1-3t-amd64 Botocore/1.12.171", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 699, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "0224df45-da56-43d1-aac4-dd3cb8263eae", "eventTime": "2019-07-30T15:51:47Z", "eventName": "ListRolePolicies", "eventSource": "iam.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "240.252.161.77", "userAgent": "Boto3/1.9.171 Python/3.7.3 Linux/5.1.0-parrot1-3t-amd64 Botocore/1.12.171", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"roleName": "Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "48449-37b6-47d7-ba86-66d9a2e8a0ca", "record_id": "flaws_cloudtrail:0000578:48449-37b6-47d7-ba86-66d9a2e8a0ca", "row_index": 578, "timestamp": "2019-07-30T15:51:47Z", "event_type": "ListInstanceProfilesForRole", "event_source": "iam.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "240.252.161.77", "user_agent": "Boto3/1.9.171 Python/3.7.3 Linux/5.1.0-parrot1-3t-amd64 Botocore/1.12.171", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 707, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "48449-37b6-47d7-ba86-66d9a2e8a0ca", "eventTime": "2019-07-30T15:51:47Z", "eventName": "ListInstanceProfilesForRole", "eventSource": "iam.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "240.252.161.77", "userAgent": "Boto3/1.9.171 Python/3.7.3 Linux/5.1.0-parrot1-3t-amd64 Botocore/1.12.171", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"roleName": "Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "a4a577d9-1314-44a3-b032-8c607778e2a1", "record_id": "flaws_cloudtrail:0000579:a4a577d9-1314-44a3-b032-8c607778e2a1", "row_index": 579, "timestamp": "2019-07-30T15:51:47Z", "event_type": "ListAttachedRolePolicies", "event_source": "iam.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "240.252.161.77", "user_agent": "Boto3/1.9.171 Python/3.7.3 Linux/5.1.0-parrot1-3t-amd64 Botocore/1.12.171", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 715, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "a4a577d9-1314-44a3-b032-8c607778e2a1", "eventTime": "2019-07-30T15:51:47Z", "eventName": "ListAttachedRolePolicies", "eventSource": "iam.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "240.252.161.77", "userAgent": "Boto3/1.9.171 Python/3.7.3 Linux/5.1.0-parrot1-3t-amd64 Botocore/1.12.171", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"roleName": "SecurityMonkey"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "46b8a068-72ea-497c-9c7f-cc7f9b682776", "record_id": "flaws_cloudtrail:0000580:46b8a068-72ea-497c-9c7f-cc7f9b682776", "row_index": 580, "timestamp": "2019-07-30T15:51:47Z", "event_type": "ListRolePolicies", "event_source": "iam.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "240.252.161.77", "user_agent": "Boto3/1.9.171 Python/3.7.3 Linux/5.1.0-parrot1-3t-amd64 Botocore/1.12.171", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 707, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "46b8a068-72ea-497c-9c7f-cc7f9b682776", "eventTime": "2019-07-30T15:51:47Z", "eventName": "ListRolePolicies", "eventSource": "iam.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "240.252.161.77", "userAgent": "Boto3/1.9.171 Python/3.7.3 Linux/5.1.0-parrot1-3t-amd64 Botocore/1.12.171", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"roleName": "SecurityMonkey"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "e55eb5b0-3154-47aa-8636-bff076a69ec1", "record_id": "flaws_cloudtrail:0000581:e55eb5b0-3154-47aa-8636-bff076a69ec1", "row_index": 581, "timestamp": "2019-07-30T15:51:47Z", "event_type": "ListRoleTags", "event_source": "iam.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "240.252.161.77", "user_agent": "Boto3/1.9.171 Python/3.7.3 Linux/5.1.0-parrot1-3t-amd64 Botocore/1.12.171", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 695, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "e55eb5b0-3154-47aa-8636-bff076a69ec1", "eventTime": "2019-07-30T15:51:47Z", "eventName": "ListRoleTags", "eventSource": "iam.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "240.252.161.77", "userAgent": "Boto3/1.9.171 Python/3.7.3 Linux/5.1.0-parrot1-3t-amd64 Botocore/1.12.171", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"roleName": "Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "0556ffbd-5f27-48c8-b6e8-cd9edfb1d804", "record_id": "flaws_cloudtrail:0000582:0556ffbd-5f27-48c8-b6e8-cd9edfb1d804", "row_index": 582, "timestamp": "2019-07-30T15:51:47Z", "event_type": "GetRole", "event_source": "iam.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "240.252.161.77", "user_agent": "Boto3/1.9.171 Python/3.7.3 Linux/5.1.0-parrot1-3t-amd64 Botocore/1.12.171", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 699, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "0556ffbd-5f27-48c8-b6e8-cd9edfb1d804", "eventTime": "2019-07-30T15:51:47Z", "eventName": "GetRole", "eventSource": "iam.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "240.252.161.77", "userAgent": "Boto3/1.9.171 Python/3.7.3 Linux/5.1.0-parrot1-3t-amd64 Botocore/1.12.171", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"roleName": "SecurityMonkey"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "068fe9c2-494c-43ec-8725-1f11214c", "record_id": "flaws_cloudtrail:0000583:068fe9c2-494c-43ec-8725-1f11214c", "row_index": 583, "timestamp": "2019-07-30T15:51:47Z", "event_type": "ListInstanceProfilesForRole", "event_source": "iam.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "240.252.161.77", "user_agent": "Boto3/1.9.171 Python/3.7.3 Linux/5.1.0-parrot1-3t-amd64 Botocore/1.12.171", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 714, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "068fe9c2-494c-43ec-8725-1f11214c", "eventTime": "2019-07-30T15:51:47Z", "eventName": "ListInstanceProfilesForRole", "eventSource": "iam.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "240.252.161.77", "userAgent": "Boto3/1.9.171 Python/3.7.3 Linux/5.1.0-parrot1-3t-amd64 Botocore/1.12.171", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"roleName": "SecurityMonkey"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "0224df45-da56-43d1-aac4-dd3cb8263eae", "record_id": "flaws_cloudtrail:0000584:0224df45-da56-43d1-aac4-dd3cb8263eae", "row_index": 584, "timestamp": "2019-07-30T15:51:47Z", "event_type": "ListRolePolicies", "event_source": "iam.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "240.252.161.77", "user_agent": "Boto3/1.9.171 Python/3.7.3 Linux/5.1.0-parrot1-3t-amd64 Botocore/1.12.171", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 699, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "0224df45-da56-43d1-aac4-dd3cb8263eae", "eventTime": "2019-07-30T15:51:47Z", "eventName": "ListRolePolicies", "eventSource": "iam.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "240.252.161.77", "userAgent": "Boto3/1.9.171 Python/3.7.3 Linux/5.1.0-parrot1-3t-amd64 Botocore/1.12.171", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"roleName": "Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "48449-37b6-47d7-ba86-66d9a2e8a0ca", "record_id": "flaws_cloudtrail:0000585:48449-37b6-47d7-ba86-66d9a2e8a0ca", "row_index": 585, "timestamp": "2019-07-30T15:51:47Z", "event_type": "ListInstanceProfilesForRole", "event_source": "iam.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "240.252.161.77", "user_agent": "Boto3/1.9.171 Python/3.7.3 Linux/5.1.0-parrot1-3t-amd64 Botocore/1.12.171", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 707, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "48449-37b6-47d7-ba86-66d9a2e8a0ca", "eventTime": "2019-07-30T15:51:47Z", "eventName": "ListInstanceProfilesForRole", "eventSource": "iam.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "240.252.161.77", "userAgent": "Boto3/1.9.171 Python/3.7.3 Linux/5.1.0-parrot1-3t-amd64 Botocore/1.12.171", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"roleName": "Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "a4a577d9-1314-44a3-b032-8c607778e2a1", "record_id": "flaws_cloudtrail:0000586:a4a577d9-1314-44a3-b032-8c607778e2a1", "row_index": 586, "timestamp": "2019-07-30T15:51:47Z", "event_type": "ListAttachedRolePolicies", "event_source": "iam.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "240.252.161.77", "user_agent": "Boto3/1.9.171 Python/3.7.3 Linux/5.1.0-parrot1-3t-amd64 Botocore/1.12.171", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 715, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "a4a577d9-1314-44a3-b032-8c607778e2a1", "eventTime": "2019-07-30T15:51:47Z", "eventName": "ListAttachedRolePolicies", "eventSource": "iam.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "240.252.161.77", "userAgent": "Boto3/1.9.171 Python/3.7.3 Linux/5.1.0-parrot1-3t-amd64 Botocore/1.12.171", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"roleName": "SecurityMonkey"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "46b8a068-72ea-497c-9c7f-cc7f9b682776", "record_id": "flaws_cloudtrail:0000587:46b8a068-72ea-497c-9c7f-cc7f9b682776", "row_index": 587, "timestamp": "2019-07-30T15:51:47Z", "event_type": "ListRolePolicies", "event_source": "iam.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "240.252.161.77", "user_agent": "Boto3/1.9.171 Python/3.7.3 Linux/5.1.0-parrot1-3t-amd64 Botocore/1.12.171", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 707, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "46b8a068-72ea-497c-9c7f-cc7f9b682776", "eventTime": "2019-07-30T15:51:47Z", "eventName": "ListRolePolicies", "eventSource": "iam.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "240.252.161.77", "userAgent": "Boto3/1.9.171 Python/3.7.3 Linux/5.1.0-parrot1-3t-amd64 Botocore/1.12.171", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"roleName": "SecurityMonkey"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "e55eb5b0-3154-47aa-8636-bff076a69ec1", "record_id": "flaws_cloudtrail:0000588:e55eb5b0-3154-47aa-8636-bff076a69ec1", "row_index": 588, "timestamp": "2019-07-30T15:51:47Z", "event_type": "ListRoleTags", "event_source": "iam.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "240.252.161.77", "user_agent": "Boto3/1.9.171 Python/3.7.3 Linux/5.1.0-parrot1-3t-amd64 Botocore/1.12.171", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 695, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "e55eb5b0-3154-47aa-8636-bff076a69ec1", "eventTime": "2019-07-30T15:51:47Z", "eventName": "ListRoleTags", "eventSource": "iam.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "240.252.161.77", "userAgent": "Boto3/1.9.171 Python/3.7.3 Linux/5.1.0-parrot1-3t-amd64 Botocore/1.12.171", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"roleName": "Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "0556ffbd-5f27-48c8-b6e8-cd9edfb1d804", "record_id": "flaws_cloudtrail:0000589:0556ffbd-5f27-48c8-b6e8-cd9edfb1d804", "row_index": 589, "timestamp": "2019-07-30T15:51:47Z", "event_type": "GetRole", "event_source": "iam.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "240.252.161.77", "user_agent": "Boto3/1.9.171 Python/3.7.3 Linux/5.1.0-parrot1-3t-amd64 Botocore/1.12.171", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 699, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "0556ffbd-5f27-48c8-b6e8-cd9edfb1d804", "eventTime": "2019-07-30T15:51:47Z", "eventName": "GetRole", "eventSource": "iam.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "240.252.161.77", "userAgent": "Boto3/1.9.171 Python/3.7.3 Linux/5.1.0-parrot1-3t-amd64 Botocore/1.12.171", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"roleName": "SecurityMonkey"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "068fe9c2-494c-43ec-8725-1f11214c", "record_id": "flaws_cloudtrail:0000590:068fe9c2-494c-43ec-8725-1f11214c", "row_index": 590, "timestamp": "2019-07-30T15:51:47Z", "event_type": "ListInstanceProfilesForRole", "event_source": "iam.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "240.252.161.77", "user_agent": "Boto3/1.9.171 Python/3.7.3 Linux/5.1.0-parrot1-3t-amd64 Botocore/1.12.171", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 714, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "068fe9c2-494c-43ec-8725-1f11214c", "eventTime": "2019-07-30T15:51:47Z", "eventName": "ListInstanceProfilesForRole", "eventSource": "iam.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "240.252.161.77", "userAgent": "Boto3/1.9.171 Python/3.7.3 Linux/5.1.0-parrot1-3t-amd64 Botocore/1.12.171", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"roleName": "SecurityMonkey"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "c8c7d512-4012-4731-90d3-13d9734cd795", "record_id": "flaws_cloudtrail:0000591:c8c7d512-4012-4731-90d3-13d9734cd795", "row_index": 591, "timestamp": "2019-07-30T15:51:48Z", "event_type": "ListInstanceProfilesForRole", "event_source": "iam.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "240.252.161.77", "user_agent": "Boto3/1.9.171 Python/3.7.3 Linux/5.1.0-parrot1-3t-amd64 Botocore/1.12.171", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 720, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "c8c7d512-4012-4731-90d3-13d9734cd795", "eventTime": "2019-07-30T15:51:48Z", "eventName": "ListInstanceProfilesForRole", "eventSource": "iam.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "240.252.161.77", "userAgent": "Boto3/1.9.171 Python/3.7.3 Linux/5.1.0-parrot1-3t-amd64 Botocore/1.12.171", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"roleName": "SummitRouteAudit"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "d483ef44-ea03-4a3b-9068-78670cb77221", "record_id": "flaws_cloudtrail:0000592:d483ef44-ea03-4a3b-9068-78670cb77221", "row_index": 592, "timestamp": "2019-07-30T15:51:48Z", "event_type": "ListAttachedRolePolicies", "event_source": "iam.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "240.252.161.77", "user_agent": "Boto3/1.9.171 Python/3.7.3 Linux/5.1.0-parrot1-3t-amd64 Botocore/1.12.171", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 717, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "d483ef44-ea03-4a3b-9068-78670cb77221", "eventTime": "2019-07-30T15:51:48Z", "eventName": "ListAttachedRolePolicies", "eventSource": "iam.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "240.252.161.77", "userAgent": "Boto3/1.9.171 Python/3.7.3 Linux/5.1.0-parrot1-3t-amd64 Botocore/1.12.171", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"roleName": "SummitRouteAudit"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "0d5f3329-1886-4a5a-8c2c-64aa4463ae3e", "record_id": "flaws_cloudtrail:0000593:0d5f3329-1886-4a5a-8c2c-64aa4463ae3e", "row_index": 593, "timestamp": "2019-07-30T15:51:48Z", "event_type": "ListRolePolicies", "event_source": "iam.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "240.252.161.77", "user_agent": "Boto3/1.9.171 Python/3.7.3 Linux/5.1.0-parrot1-3t-amd64 Botocore/1.12.171", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 709, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "0d5f3329-1886-4a5a-8c2c-64aa4463ae3e", "eventTime": "2019-07-30T15:51:48Z", "eventName": "ListRolePolicies", "eventSource": "iam.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "240.252.161.77", "userAgent": "Boto3/1.9.171 Python/3.7.3 Linux/5.1.0-parrot1-3t-amd64 Botocore/1.12.171", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"roleName": "SummitRouteAudit"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "b3f114676-555e-482c-9b85-46c7eec6fe3d", "record_id": "flaws_cloudtrail:0000594:b3f114676-555e-482c-9b85-46c7eec6fe3d", "row_index": 594, "timestamp": "2019-07-30T15:51:48Z", "event_type": "GetRole", "event_source": "iam.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "240.252.161.77", "user_agent": "Boto3/1.9.171 Python/3.7.3 Linux/5.1.0-parrot1-3t-amd64 Botocore/1.12.171", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 701, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "b3f114676-555e-482c-9b85-46c7eec6fe3d", "eventTime": "2019-07-30T15:51:48Z", "eventName": "GetRole", "eventSource": "iam.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "240.252.161.77", "userAgent": "Boto3/1.9.171 Python/3.7.3 Linux/5.1.0-parrot1-3t-amd64 Botocore/1.12.171", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"roleName": "SummitRouteAudit"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "236a0e41-4e0c-4538-a62f-1fd0a2754859", "record_id": "flaws_cloudtrail:0000595:236a0e41-4e0c-4538-a62f-1fd0a2754859", "row_index": 595, "timestamp": "2019-07-30T15:51:48Z", "event_type": "ListRoleTags", "event_source": "iam.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "240.252.161.77", "user_agent": "Boto3/1.9.171 Python/3.7.3 Linux/5.1.0-parrot1-3t-amd64 Botocore/1.12.171", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 705, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "236a0e41-4e0c-4538-a62f-1fd0a2754859", "eventTime": "2019-07-30T15:51:48Z", "eventName": "ListRoleTags", "eventSource": "iam.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "240.252.161.77", "userAgent": "Boto3/1.9.171 Python/3.7.3 Linux/5.1.0-parrot1-3t-amd64 Botocore/1.12.171", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"roleName": "SummitRouteAudit"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "bb90089-d331-4439-852c-ad04f8b9fce1", "record_id": "flaws_cloudtrail:0000596:bb90089-d331-4439-852c-ad04f8b9fce1", "row_index": 596, "timestamp": "2019-07-30T15:51:48Z", "event_type": "ListRoleTags", "event_source": "iam.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "240.252.161.77", "user_agent": "Boto3/1.9.171 Python/3.7.3 Linux/5.1.0-parrot1-3t-amd64 Botocore/1.12.171", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 701, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "bb90089-d331-4439-852c-ad04f8b9fce1", "eventTime": "2019-07-30T15:51:48Z", "eventName": "ListRoleTags", "eventSource": "iam.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "240.252.161.77", "userAgent": "Boto3/1.9.171 Python/3.7.3 Linux/5.1.0-parrot1-3t-amd64 Botocore/1.12.171", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"roleName": "SecurityMonkey"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "c8c7d512-4012-4731-90d3-13d9734cd795", "record_id": "flaws_cloudtrail:0000597:c8c7d512-4012-4731-90d3-13d9734cd795", "row_index": 597, "timestamp": "2019-07-30T15:51:48Z", "event_type": "ListInstanceProfilesForRole", "event_source": "iam.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "240.252.161.77", "user_agent": "Boto3/1.9.171 Python/3.7.3 Linux/5.1.0-parrot1-3t-amd64 Botocore/1.12.171", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 720, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "c8c7d512-4012-4731-90d3-13d9734cd795", "eventTime": "2019-07-30T15:51:48Z", "eventName": "ListInstanceProfilesForRole", "eventSource": "iam.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "240.252.161.77", "userAgent": "Boto3/1.9.171 Python/3.7.3 Linux/5.1.0-parrot1-3t-amd64 Botocore/1.12.171", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"roleName": "SummitRouteAudit"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "d483ef44-ea03-4a3b-9068-78670cb77221", "record_id": "flaws_cloudtrail:0000598:d483ef44-ea03-4a3b-9068-78670cb77221", "row_index": 598, "timestamp": "2019-07-30T15:51:48Z", "event_type": "ListAttachedRolePolicies", "event_source": "iam.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "240.252.161.77", "user_agent": "Boto3/1.9.171 Python/3.7.3 Linux/5.1.0-parrot1-3t-amd64 Botocore/1.12.171", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 717, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "d483ef44-ea03-4a3b-9068-78670cb77221", "eventTime": "2019-07-30T15:51:48Z", "eventName": "ListAttachedRolePolicies", "eventSource": "iam.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "240.252.161.77", "userAgent": "Boto3/1.9.171 Python/3.7.3 Linux/5.1.0-parrot1-3t-amd64 Botocore/1.12.171", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"roleName": "SummitRouteAudit"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "0d5f3329-1886-4a5a-8c2c-64aa4463ae3e", "record_id": "flaws_cloudtrail:0000599:0d5f3329-1886-4a5a-8c2c-64aa4463ae3e", "row_index": 599, "timestamp": "2019-07-30T15:51:48Z", "event_type": "ListRolePolicies", "event_source": "iam.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "240.252.161.77", "user_agent": "Boto3/1.9.171 Python/3.7.3 Linux/5.1.0-parrot1-3t-amd64 Botocore/1.12.171", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 709, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "0d5f3329-1886-4a5a-8c2c-64aa4463ae3e", "eventTime": "2019-07-30T15:51:48Z", "eventName": "ListRolePolicies", "eventSource": "iam.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "240.252.161.77", "userAgent": "Boto3/1.9.171 Python/3.7.3 Linux/5.1.0-parrot1-3t-amd64 Botocore/1.12.171", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"roleName": "SummitRouteAudit"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "b3f114676-555e-482c-9b85-46c7eec6fe3d", "record_id": "flaws_cloudtrail:0000600:b3f114676-555e-482c-9b85-46c7eec6fe3d", "row_index": 600, "timestamp": "2019-07-30T15:51:48Z", "event_type": "GetRole", "event_source": "iam.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "240.252.161.77", "user_agent": "Boto3/1.9.171 Python/3.7.3 Linux/5.1.0-parrot1-3t-amd64 Botocore/1.12.171", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 701, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "b3f114676-555e-482c-9b85-46c7eec6fe3d", "eventTime": "2019-07-30T15:51:48Z", "eventName": "GetRole", "eventSource": "iam.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "240.252.161.77", "userAgent": "Boto3/1.9.171 Python/3.7.3 Linux/5.1.0-parrot1-3t-amd64 Botocore/1.12.171", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"roleName": "SummitRouteAudit"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "236a0e41-4e0c-4538-a62f-1fd0a2754859", "record_id": "flaws_cloudtrail:0000601:236a0e41-4e0c-4538-a62f-1fd0a2754859", "row_index": 601, "timestamp": "2019-07-30T15:51:48Z", "event_type": "ListRoleTags", "event_source": "iam.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "240.252.161.77", "user_agent": "Boto3/1.9.171 Python/3.7.3 Linux/5.1.0-parrot1-3t-amd64 Botocore/1.12.171", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 705, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "236a0e41-4e0c-4538-a62f-1fd0a2754859", "eventTime": "2019-07-30T15:51:48Z", "eventName": "ListRoleTags", "eventSource": "iam.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "240.252.161.77", "userAgent": "Boto3/1.9.171 Python/3.7.3 Linux/5.1.0-parrot1-3t-amd64 Botocore/1.12.171", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"roleName": "SummitRouteAudit"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "bb90089-d331-4439-852c-ad04f8b9fce1", "record_id": "flaws_cloudtrail:0000602:bb90089-d331-4439-852c-ad04f8b9fce1", "row_index": 602, "timestamp": "2019-07-30T15:51:48Z", "event_type": "ListRoleTags", "event_source": "iam.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "240.252.161.77", "user_agent": "Boto3/1.9.171 Python/3.7.3 Linux/5.1.0-parrot1-3t-amd64 Botocore/1.12.171", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 701, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "bb90089-d331-4439-852c-ad04f8b9fce1", "eventTime": "2019-07-30T15:51:48Z", "eventName": "ListRoleTags", "eventSource": "iam.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "240.252.161.77", "userAgent": "Boto3/1.9.171 Python/3.7.3 Linux/5.1.0-parrot1-3t-amd64 Botocore/1.12.171", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"roleName": "SecurityMonkey"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "2e3dbea6-642c-4c0e-a981-615dec12c8bd", "record_id": "flaws_cloudtrail:0000603:2e3dbea6-642c-4c0e-a981-615dec12c8bd", "row_index": 603, "timestamp": "2019-07-30T15:53:17Z", "event_type": "GetRole", "event_source": "iam.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "240.252.161.77", "user_agent": "Boto3/1.9.171 Python/3.7.3 Linux/5.1.0-parrot1-3t-amd64 Botocore/1.12.171", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 711, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "2e3dbea6-642c-4c0e-a981-615dec12c8bd", "eventTime": "2019-07-30T15:53:17Z", "eventName": "GetRole", "eventSource": "iam.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "240.252.161.77", "userAgent": "Boto3/1.9.171 Python/3.7.3 Linux/5.1.0-parrot1-3t-amd64 Botocore/1.12.171", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"roleName": "AWSServiceRoleForCloudTrail"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "037878d-9fc9-41de-a841-63e6960a33b1", "record_id": "flaws_cloudtrail:0000604:037878d-9fc9-41de-a841-63e6960a33b1", "row_index": 604, "timestamp": "2019-07-30T15:53:17Z", "event_type": "ListRoles", "event_source": "iam.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "240.252.161.77", "user_agent": "Boto3/1.9.171 Python/3.7.3 Linux/5.1.0-parrot1-3t-amd64 Botocore/1.12.171", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 669, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "037878d-9fc9-41de-a841-63e6960a33b1", "eventTime": "2019-07-30T15:53:17Z", "eventName": "ListRoles", "eventSource": "iam.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "240.252.161.77", "userAgent": "Boto3/1.9.171 Python/3.7.3 Linux/5.1.0-parrot1-3t-amd64 Botocore/1.12.171", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "2e3dbea6-642c-4c0e-a981-615dec12c8bd", "record_id": "flaws_cloudtrail:0000605:2e3dbea6-642c-4c0e-a981-615dec12c8bd", "row_index": 605, "timestamp": "2019-07-30T15:53:17Z", "event_type": "GetRole", "event_source": "iam.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "240.252.161.77", "user_agent": "Boto3/1.9.171 Python/3.7.3 Linux/5.1.0-parrot1-3t-amd64 Botocore/1.12.171", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 711, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "2e3dbea6-642c-4c0e-a981-615dec12c8bd", "eventTime": "2019-07-30T15:53:17Z", "eventName": "GetRole", "eventSource": "iam.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "240.252.161.77", "userAgent": "Boto3/1.9.171 Python/3.7.3 Linux/5.1.0-parrot1-3t-amd64 Botocore/1.12.171", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"roleName": "AWSServiceRoleForCloudTrail"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "037878d-9fc9-41de-a841-63e6960a33b1", "record_id": "flaws_cloudtrail:0000606:037878d-9fc9-41de-a841-63e6960a33b1", "row_index": 606, "timestamp": "2019-07-30T15:53:17Z", "event_type": "ListRoles", "event_source": "iam.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "240.252.161.77", "user_agent": "Boto3/1.9.171 Python/3.7.3 Linux/5.1.0-parrot1-3t-amd64 Botocore/1.12.171", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 669, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "037878d-9fc9-41de-a841-63e6960a33b1", "eventTime": "2019-07-30T15:53:17Z", "eventName": "ListRoles", "eventSource": "iam.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "240.252.161.77", "userAgent": "Boto3/1.9.171 Python/3.7.3 Linux/5.1.0-parrot1-3t-amd64 Botocore/1.12.171", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "8688e68f-0d24-49b8-b8d3-810f0eef472d", "record_id": "flaws_cloudtrail:0000607:8688e68f-0d24-49b8-b8d3-810f0eef472d", "row_index": 607, "timestamp": "2019-07-30T15:53:18Z", "event_type": "ListAttachedRolePolicies", "event_source": "iam.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "240.252.161.77", "user_agent": "Boto3/1.9.171 Python/3.7.3 Linux/5.1.0-parrot1-3t-amd64 Botocore/1.12.171", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 728, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "8688e68f-0d24-49b8-b8d3-810f0eef472d", "eventTime": "2019-07-30T15:53:18Z", "eventName": "ListAttachedRolePolicies", "eventSource": "iam.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "240.252.161.77", "userAgent": "Boto3/1.9.171 Python/3.7.3 Linux/5.1.0-parrot1-3t-amd64 Botocore/1.12.171", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"roleName": "AWSServiceRoleForCloudTrail"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "970924-d26d-440a-84fe-8c9fb8ae4961", "record_id": "flaws_cloudtrail:0000608:970924-d26d-440a-84fe-8c9fb8ae4961", "row_index": 608, "timestamp": "2019-07-30T15:53:18Z", "event_type": "ListRoleTags", "event_source": "iam.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "240.252.161.77", "user_agent": "Boto3/1.9.171 Python/3.7.3 Linux/5.1.0-parrot1-3t-amd64 Botocore/1.12.171", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 727, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "970924-d26d-440a-84fe-8c9fb8ae4961", "eventTime": "2019-07-30T15:53:18Z", "eventName": "ListRoleTags", "eventSource": "iam.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "240.252.161.77", "userAgent": "Boto3/1.9.171 Python/3.7.3 Linux/5.1.0-parrot1-3t-amd64 Botocore/1.12.171", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"roleName": "AWSServiceRoleForConfigMultiAccountSetup"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "ac52aad3-32d5-4f78-9ed4-48d67b17e010", "record_id": "flaws_cloudtrail:0000609:ac52aad3-32d5-4f78-9ed4-48d67b17e010", "row_index": 609, "timestamp": "2019-07-30T15:53:18Z", "event_type": "ListInstanceProfilesForRole", "event_source": "iam.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "240.252.161.77", "user_agent": "Boto3/1.9.171 Python/3.7.3 Linux/5.1.0-parrot1-3t-amd64 Botocore/1.12.171", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 731, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "ac52aad3-32d5-4f78-9ed4-48d67b17e010", "eventTime": "2019-07-30T15:53:18Z", "eventName": "ListInstanceProfilesForRole", "eventSource": "iam.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "240.252.161.77", "userAgent": "Boto3/1.9.171 Python/3.7.3 Linux/5.1.0-parrot1-3t-amd64 Botocore/1.12.171", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"roleName": "AWSServiceRoleForCloudTrail"}, "resources": []}}