218007301253_CloudTrail_us-east-1_20230710T1205Z_UljXNp9xLp8nsAGc.json

{"Records":[{"eventVersion":"1.08","userIdentity":{"type":"IAMUser","principalId":"AIDATFQR7NSC5AU2ZV3IE","arn":"arn:aws:iam::123837392027:user/bert-jan","accountId":"123837392027","accessKeyId":"AKIATFQR7NSC8Q4X20BJ","userName":"bert-jan"},"eventTime":"2023-07-10T11:59:51Z","eventSource":"ec2.amazonaws.com","eventName":"DescribeAccountAttributes","awsRegion":"us-east-1","sourceIPAddress":"192.168.10.20","userAgent":"stratus-red-team_b19c2145-9fa7-444c-9d93-23af79935857","requestParameters":{"accountAttributeNameSet":{},"filterSet":{}},"responseElements":null,"requestID":"81b29abe-4966-4aeb-9f05-8f92ee89d0a3","eventID":"205b0abb-e2dc-4ed9-bea3-68e03b2da869","readOnly":true,"eventType":"AwsApiCall","managementEvent":true,"recipientAccountId":"123837392027","eventCategory":"Management","tlsDetails":{"tlsVersion":"TLSv1.2","cipherSuite":"ECDHE-RSA-AES128-GCM-SHA256","clientProvidedHostHeader":"ec2.us-east-1.amazonaws.com"}},{"eventVersion":"1.08","userIdentity":{"type":"IAMUser","principalId":"AIDATFQR7NSC5AU2ZV3IE","arn":"arn:aws:iam::123837392027:user/bert-jan","accountId":"123837392027","accessKeyId":"AKIATFQR7NSC8Q4X20BJ","userName":"bert-jan"},"eventTime":"2023-07-10T11:59:56Z","eventSource":"iam.amazonaws.com","eventName":"GetUser","awsRegion":"us-east-1","sourceIPAddress":"192.168.10.20","userAgent":"APN/1.0 HashiCorp/1.0 Terraform/1.1.2 (+https://www.terraform.io) terraform-provider-aws/3.76.1 (+https://registry.terraform.io/providers/hashicorp/aws) aws-sdk-go/1.44.157 (go1.19.3; linux; amd64) stratus-red-team_1d949e3e-4092-4c96-a6ef-96a967510a46 HashiCorp-terraform-exec/0.17.3","requestParameters":null,"responseElements":null,"requestID":"d9b9d150-60c9-4a41-a597-ba14fb5cf69b","eventID":"c5fe468d-48a6-48d3-a71e-6c5e643f53eb","readOnly":true,"eventType":"AwsApiCall","managementEvent":true,"recipientAccountId":"123837392027","eventCategory":"Management","tlsDetails":{"tlsVersion":"TLSv1.2","cipherSuite":"ECDHE-RSA-AES128-GCM-SHA256","clientProvidedHostHeader":"iam.amazonaws.com"}},{"eventVersion":"1.08","userIdentity":{"type":"IAMUser","principalId":"AIDATFQR7NSC5AU2ZV3IE","arn":"arn:aws:iam::123837392027:user/bert-jan","accountId":"123837392027","accessKeyId":"AKIATFQR7NSC8Q4X20BJ","userName":"bert-jan"},"eventTime":"2023-07-10T11:59:56Z","eventSource":"iam.amazonaws.com","eventName":"GetUser","awsRegion":"us-east-1","sourceIPAddress":"192.168.10.20","userAgent":"APN/1.0 HashiCorp/1.0 Terraform/1.1.2 (+https://www.terraform.io) terraform-provider-aws/3.76.1 (+https://registry.terraform.io/providers/hashicorp/aws) aws-sdk-go/1.44.157 (go1.19.3; linux; amd64) stratus-red-team_1d949e3e-4092-4c96-a6ef-96a967510a46 HashiCorp-terraform-exec/0.17.3","requestParameters":null,"responseElements":null,"requestID":"09460f0c-80e6-479e-a804-fe296ac02297","eventID":"1a0ff603-8fa1-480a-8de4-1e5bc38fcbf3","readOnly":true,"eventType":"AwsApiCall","managementEvent":true,"recipientAccountId":"123837392027","eventCategory":"Management","tlsDetails":{"tlsVersion":"TLSv1.2","cipherSuite":"ECDHE-RSA-AES128-GCM-SHA256","clientProvidedHostHeader":"iam.amazonaws.com"}},{"eventVersion":"1.08","userIdentity":{"type":"IAMUser","principalId":"AIDATFQR7NSC5AU2ZV3IE","arn":"arn:aws:iam::123837392027:user/bert-jan","accountId":"123837392027","accessKeyId":"AKIATFQR7NSC8Q4X20BJ","userName":"bert-jan"},"eventTime":"2023-07-10T11:59:58Z","eventSource":"s3.amazonaws.com","eventName":"PutBucketTagging","awsRegion":"us-east-1","sourceIPAddress":"192.168.10.20","userAgent":"[APN/1.0 HashiCorp/1.0 Terraform/1.1.2 (+https://www.terraform.io) terraform-provider-aws/3.76.1 (+https://registry.terraform.io/providers/hashicorp/aws) aws-sdk-go/1.44.157 (go1.19.3; linux; amd64) stratus-red-team_1d949e3e-4092-4c96-a6ef-96a967510a46 HashiCorp-terraform-exec/0.17.3]","requestParameters":{"Tagging":{"xmlns":"http://s3.amazonaws.com/doc/2006-03-01/","TagSet":{"Tag":{"Value":true,"Key":"StratusRedTeam"}}},"tagging":"","bucketName":"stratus-red-team-ctes-bucket-qyxyekjbtk","Host":"stratus-red-team-ctes-bucket-qyxyekjbtk.s3.amazonaws.com"},"responseElements":null,"additionalEventData":{"SignatureVersion":"SigV4","CipherSuite":"ECDHE-RSA-AES128-GCM-SHA256","bytesTransferredIn":139,"AuthenticationMethod":"AuthHeader","x-amz-id-2":"+eORhs4AmQg2JNNh0RftZt1xjsyo8veiwTiK3DejahGJ18oGouYD0euq3xj4q4LQAhwcrjn8RiA=","bytesTransferredOut":0},"requestID":"F0XYCE5DWSR9ADBP","eventID":"b58e2c0b-f75b-4f05-a0e9-15e9b9bfecef","readOnly":false,"resources":[{"accountId":"123837392027","type":"AWS::S3::Bucket","ARN":"arn:aws:s3:::stratus-red-team-ctes-bucket-qyxyekjbtk"}],"eventType":"AwsApiCall","managementEvent":true,"recipientAccountId":"123837392027","eventCategory":"Management","tlsDetails":{"tlsVersion":"TLSv1.2","cipherSuite":"ECDHE-RSA-AES128-GCM-SHA256","clientProvidedHostHeader":"stratus-red-team-ctes-bucket-qyxyekjbtk.s3.amazonaws.com"}},{"eventVersion":"1.08","userIdentity":{"type":"IAMUser","principalId":"AIDATFQR7NSC5AU2ZV3IE","arn":"arn:aws:iam::123837392027:user/bert-jan","accountId":"123837392027","accessKeyId":"AKIATFQR7NSC8Q4X20BJ","userName":"bert-jan"},"eventTime":"2023-07-10T11:59:58Z","eventSource":"s3.amazonaws.com","eventName":"PutBucketPolicy","awsRegion":"us-east-1","sourceIPAddress":"192.168.10.20","userAgent":"[APN/1.0 HashiCorp/1.0 Terraform/1.1.2 (+https://www.terraform.io) terraform-provider-aws/3.76.1 (+https://registry.terraform.io/providers/hashicorp/aws) aws-sdk-go/1.44.157 (go1.19.3; linux; amd64) stratus-red-team_1d949e3e-4092-4c96-a6ef-96a967510a46 HashiCorp-terraform-exec/0.17.3]","requestParameters":{"bucketPolicy":{"Version":"2012-10-17","Statement":[{"Action":"s3:GetBucketAcl","Effect":"Allow","Principal":{"Service":"cloudtrail.amazonaws.com"},"Resource":"arn:aws:s3:::stratus-red-team-ctes-bucket-qyxyekjbtk","Sid":"AWSCloudTrailAclCheck"},{"Action":"s3:PutObject","Condition":{"StringEquals":{"s3:x-amz-acl":"bucket-owner-full-control"}},"Effect":"Allow","Principal":{"Service":"cloudtrail.amazonaws.com"},"Resource":"arn:aws:s3:::stratus-red-team-ctes-bucket-qyxyekjbtk/*","Sid":"AWSCloudTrailWrite"}]},"bucketName":"stratus-red-team-ctes-bucket-qyxyekjbtk","Host":"stratus-red-team-ctes-bucket-qyxyekjbtk.s3.amazonaws.com","policy":""},"responseElements":null,"additionalEventData":{"SignatureVersion":"SigV4","CipherSuite":"ECDHE-RSA-AES128-GCM-SHA256","bytesTransferredIn":494,"AuthenticationMethod":"AuthHeader","x-amz-id-2":"nYXxFQV/wJW6Q8m2FyK2HAI8cus359tlU7z9JFVzEsUpAMXvR6IOm2o/ukKHTitxkHKEsN4U/qU=","bytesTransferredOut":0},"requestID":"F0XQX2G7KS8GYAD2","eventID":"988f1043-3e3d-4d84-803b-1b4d00e0df90","readOnly":false,"resources":[{"accountId":"123837392027","type":"AWS::S3::Bucket","ARN":"arn:aws:s3:::stratus-red-team-ctes-bucket-qyxyekjbtk"}],"eventType":"AwsApiCall","managementEvent":true,"recipientAccountId":"123837392027","eventCategory":"Management","tlsDetails":{"tlsVersion":"TLSv1.2","cipherSuite":"ECDHE-RSA-AES128-GCM-SHA256","clientProvidedHostHeader":"stratus-red-team-ctes-bucket-qyxyekjbtk.s3.amazonaws.com"}},{"eventVersion":"1.08","userIdentity":{"type":"IAMUser","principalId":"AIDATFQR7NSC5AU2ZV3IE","arn":"arn:aws:iam::123837392027:user/bert-jan","accountId":"123837392027","accessKeyId":"AKIATFQR7NSC8Q4X20BJ","userName":"bert-jan"},"eventTime":"2023-07-10T12:00:02Z","eventSource":"s3.amazonaws.com","eventName":"GetBucketRequestPayment","awsRegion":"us-east-1","sourceIPAddress":"192.168.10.20","userAgent":"[APN/1.0 HashiCorp/1.0 Terraform/1.1.2 (+https://www.terraform.io) terraform-provider-aws/3.76.1 (+https://registry.terraform.io/providers/hashicorp/aws) aws-sdk-go/1.44.157 (go1.19.3; linux; amd64) stratus-red-team_1d949e3e-4092-4c96-a6ef-96a967510a46 HashiCorp-terraform-exec/0.17.3]","requestParameters":{"bucketName":"stratus-red-team-ctes-bucket-qyxyekjbtk","Host":"stratus-red-team-ctes-bucket-qyxyekjbtk.s3.amazonaws.com","requestPayment":""},"responseElements":null,"additionalEventData":{"SignatureVersion":"SigV4","CipherSuite":"ECDHE-RSA-AES128-GCM-SHA256","bytesTransferredIn":0,"AuthenticationMethod":"AuthHeader","x-amz-id-2":"McA1LBXhV/96SQf7L/oNPu62KbafpSo3thi3aOG64fOm8XKguL3bFgiMninRP/mULpWTF4+U/So=","bytesTransferredOut":172},"requestID":"6T7PEWH8YDPMZYNJ","eventID":"a8f9c9ca-2699-4671-95b3-c65680fe169f","readOnly":true,"resources":[{"accountId":"123837392027","type":"AWS::S3::Bucket","ARN":"arn:aws:s3:::stratus-red-team-ctes-bucket-qyxyekjbtk"}],"eventType":"AwsApiCall","managementEvent":true,"recipientAccountId":"123837392027","eventCategory":"Management","tlsDetails":{"tlsVersion":"TLSv1.2","cipherSuite":"ECDHE-RSA-AES128-GCM-SHA256","clientProvidedHostHeader":"stratus-red-team-ctes-bucket-qyxyekjbtk.s3.amazonaws.com"}},{"eventVersion":"1.08","userIdentity":{"type":"IAMUser","principalId":"AIDATFQR7NSC5AU2ZV3IE","arn":"arn:aws:iam::123837392027:user/bert-jan","accountId":"123837392027","accessKeyId":"AKIATFQR7NSC8Q4X20BJ","userName":"bert-jan"},"eventTime":"2023-07-10T12:00:01Z","eventSource":"s3.amazonaws.com","eventName":"GetBucketVersioning","awsRegion":"us-east-1","sourceIPAddress":"192.168.10.20","userAgent":"[APN/1.0 HashiCorp/1.0 Terraform/1.1.2 (+https://www.terraform.io) terraform-provider-aws/3.76.1 (+https://registry.terraform.io/providers/hashicorp/aws) aws-sdk-go/1.44.157 (go1.19.3; linux; amd64) stratus-red-team_1d949e3e-4092-4c96-a6ef-96a967510a46 HashiCorp-terraform-exec/0.17.3]","requestParameters":{"bucketName":"stratus-red-team-ctes-bucket-qyxyekjbtk","Host":"stratus-red-team-ctes-bucket-qyxyekjbtk.s3.amazonaws.com","versioning":""},"responseElements":null,"additionalEventData":{"SignatureVersion":"SigV4","CipherSuite":"ECDHE-RSA-AES128-GCM-SHA256","bytesTransferredIn":0,"AuthenticationMethod":"AuthHeader","x-amz-id-2":"ksCoE4Oxu8hohZAcrNKI33Hc5GuCKjOx13QL2yqdxNJ2attDAQhV09N68pIjRxgzxGgsCLiH8IE=","bytesTransferredOut":113},"requestID":"JW17MWTC0Q083JBH","eventID":"3f85a229-8c74-4555-98d1-4937c16011d4","readOnly":true,"resources":[{"accountId":"123837392027","type":"AWS::S3::Bucket","ARN":"arn:aws:s3:::stratus-red-team-ctes-bucket-qyxyekjbtk"}],"eventType":"AwsApiCall","managementEvent":true,"recipientAccountId":"123837392027","eventCategory":"Management","tlsDetails":{"tlsVersion":"TLSv1.2","cipherSuite":"ECDHE-RSA-AES128-GCM-SHA256","clientProvidedHostHeader":"stratus-red-team-ctes-bucket-qyxyekjbtk.s3.amazonaws.com"}},{"eventVersion":"1.08","userIdentity":{"type":"IAMUser","principalId":"AIDATFQR7NSC5AU2ZV3IE","arn":"arn:aws:iam::123837392027:user/bert-jan","accountId":"123837392027","accessKeyId":"AKIATFQR7NSC8Q4X20BJ","userName":"bert-jan"},"eventTime":"2023-07-10T12:00:00Z","eventSource":"s3.amazonaws.com","eventName":"GetBucketCors","awsRegion":"us-east-1","sourceIPAddress":"192.168.10.20","userAgent":"[APN/1.0 HashiCorp/1.0 Terraform/1.1.2 (+https://www.terraform.io) terraform-provider-aws/3.76.1 (+https://registry.terraform.io/providers/hashicorp/aws) aws-sdk-go/1.44.157 (go1.19.3; linux; amd64) stratus-red-team_1d949e3e-4092-4c96-a6ef-96a967510a46 HashiCorp-terraform-exec/0.17.3]","errorCode":"NoSuchCORSConfiguration","errorMessage":"The CORS configuration does not exist","requestParameters":{"bucketName":"stratus-red-team-ctes-bucket-qyxyekjbtk","Host":"stratus-red-team-ctes-bucket-qyxyekjbtk.s3.amazonaws.com","cors":""},"responseElements":null,"additionalEventData":{"SignatureVersion":"SigV4","CipherSuite":"ECDHE-RSA-AES128-GCM-SHA256","bytesTransferredIn":0,"AuthenticationMethod":"AuthHeader","x-amz-id-2":"4RS9BMomnioURtCQrrrpCVvsqlbvRwVkrtj4kkN93TyW1xzrSFC1sm2AVhg4d0K1dnbr/XFYCszULdYRHCV8Yw==","bytesTransferredOut":354},"requestID":"DXX0S9N6W7MF8MP2","eventID":"61b38ec9-0b96-44c4-a90b-d5a79439503e","readOnly":true,"resources":[{"accountId":"123837392027","type":"AWS::S3::Bucket","ARN":"arn:aws:s3:::stratus-red-team-ctes-bucket-qyxyekjbtk"}],"eventType":"AwsApiCall","managementEvent":true,"recipientAccountId":"123837392027","eventCategory":"Management","tlsDetails":{"tlsVersion":"TLSv1.2","cipherSuite":"ECDHE-RSA-AES128-GCM-SHA256","clientProvidedHostHeader":"stratus-red-team-ctes-bucket-qyxyekjbtk.s3.amazonaws.com"}},{"eventVersion":"1.08","userIdentity":{"type":"IAMUser","principalId":"AIDATFQR7NSC5AU2ZV3IE","arn":"arn:aws:iam::123837392027:user/bert-jan","accountId":"123837392027","accessKeyId":"AKIATFQR7NSC8Q4X20BJ","userName":"bert-jan"},"eventTime":"2023-07-10T12:00:00Z","eventSource":"s3.amazonaws.com","eventName":"GetBucketAcl","awsRegion":"us-east-1","sourceIPAddress":"192.168.10.20","userAgent":"[APN/1.0 HashiCorp/1.0 Terraform/1.1.2 (+https://www.terraform.io) terraform-provider-aws/3.76.1 (+https://registry.terraform.io/providers/hashicorp/aws) aws-sdk-go/1.44.157 (go1.19.3; linux; amd64) stratus-red-team_1d949e3e-4092-4c96-a6ef-96a967510a46 HashiCorp-terraform-exec/0.17.3]","requestParameters":{"bucketName":"stratus-red-team-ctes-bucket-qyxyekjbtk","Host":"stratus-red-team-ctes-bucket-qyxyekjbtk.s3.amazonaws.com","acl":""},"responseElements":null,"additionalEventData":{"SignatureVersion":"SigV4","CipherSuite":"ECDHE-RSA-AES128-GCM-SHA256","bytesTransferredIn":0,"AuthenticationMethod":"AuthHeader","x-amz-id-2":"AazPZb1aZDKUT3uKmPAP0frEITpZBqJ8Rt9u+fkSIvf/BaJ/JVx6yD4Bn6uEypNzk7DRlYKM8Ymr0pMw1SVn1A==","bytesTransferredOut":552},"requestID":"DXXEQWC7A66QJHKZ","eventID":"52fa1463-bb30-4d9c-b110-9271ebfc5f21","readOnly":true,"resources":[{"accountId":"123837392027","type":"AWS::S3::Bucket","ARN":"arn:aws:s3:::stratus-red-team-ctes-bucket-qyxyekjbtk"}],"eventType":"AwsApiCall","managementEvent":true,"recipientAccountId":"123837392027","eventCategory":"Management","tlsDetails":{"tlsVersion":"TLSv1.2","cipherSuite":"ECDHE-RSA-AES128-GCM-SHA256","clientProvidedHostHeader":"stratus-red-team-ctes-bucket-qyxyekjbtk.s3.amazonaws.com"}},{"eventVersion":"1.08","userIdentity":{"type":"IAMUser","principalId":"AIDATFQR7NSC5AU2ZV3IE","arn":"arn:aws:iam::123837392027:user/bert-jan","accountId":"123837392027","accessKeyId":"AKIATFQR7NSC8Q4X20BJ","userName":"bert-jan"},"eventTime":"2023-07-10T12:00:01Z","eventSource":"s3.amazonaws.com","eventName":"GetAccelerateConfiguration","awsRegion":"us-east-1","sourceIPAddress":"192.168.10.20","userAgent":"[APN/1.0 HashiCorp/1.0 Terraform/1.1.2 (+https://www.terraform.io) terraform-provider-aws/3.76.1 (+https://registry.terraform.io/providers/hashicorp/aws) aws-sdk-go/1.44.157 (go1.19.3; linux; amd64) stratus-red-team_1d949e3e-4092-4c96-a6ef-96a967510a46 HashiCorp-terraform-exec/0.17.3]","requestParameters":{"accelerate":"","bucketName":"stratus-red-team-ctes-bucket-qyxyekjbtk","Host":"stratus-red-team-ctes-bucket-qyxyekjbtk.s3.amazonaws.com"},"responseElements":null,"additionalEventData":{"SignatureVersion":"SigV4","CipherSuite":"ECDHE-RSA-AES128-GCM-SHA256","bytesTransferredIn":0,"AuthenticationMethod":"AuthHeader","x-amz-id-2":"GsgzAZnD/IwtJPr+S+Y17E6IJSSV21BpkkNzT2l+VVZ31AePxVb99JSdyh20EJN7UqekFpgrRyI=","bytesTransferredOut":113},"requestID":"JW1FCAXCA4KGJTQ8","eventID":"fd319a6e-510a-4114-804d-d692bdb36863","readOnly":true,"resources":[{"accountId":"123837392027","type":"AWS::S3::Bucket","ARN":"arn:aws:s3:::stratus-red-team-ctes-bucket-qyxyekjbtk"}],"eventType":"AwsApiCall","managementEvent":true,"recipientAccountId":"123837392027","eventCategory":"Management","tlsDetails":{"tlsVersion":"TLSv1.2","cipherSuite":"ECDHE-RSA-AES128-GCM-SHA256","clientProvidedHostHeader":"stratus-red-team-ctes-bucket-qyxyekjbtk.s3.amazonaws.com"}},{"eventVersion":"1.08","userIdentity":{"type":"IAMUser","principalId":"AIDATFQR7NSC5AU2ZV3IE","arn":"arn:aws:iam::123837392027:user/bert-jan","accountId":"123837392027","accessKeyId":"AKIATFQR7NSC8Q4X20BJ","userName":"bert-jan"},"eventTime":"2023-07-10T12:00:03Z","eventSource":"s3.amazonaws.com","eventName":"GetBucketReplication","awsRegion":"us-east-1","sourceIPAddress":"192.168.10.20","userAgent":"[APN/1.0 HashiCorp/1.0 Terraform/1.1.2 (+https://www.terraform.io) terraform-provider-aws/3.76.1 (+https://registry.terraform.io/providers/hashicorp/aws) aws-sdk-go/1.44.157 (go1.19.3; linux; amd64) stratus-red-team_1d949e3e-4092-4c96-a6ef-96a967510a46 HashiCorp-terraform-exec/0.17.3]","errorCode":"ReplicationConfigurationNotFoundError","errorMessage":"The replication configuration was not found","requestParameters":{"replication":"","bucketName":"stratus-red-team-ctes-bucket-qyxyekjbtk","Host":"stratus-red-team-ctes-bucket-qyxyekjbtk.s3.amazonaws.com"},"responseElements":null,"additionalEventData":{"SignatureVersion":"SigV4","CipherSuite":"ECDHE-RSA-AES128-GCM-SHA256","bytesTransferredIn":0,"AuthenticationMethod":"AuthHeader","x-amz-id-2":"Z/W18FkXcg2VxLJ8rmaXFJaPCA22bkMXHNhc0hsWCoj4rFTzMx+Ce434/AW6gnB7+rWB7ISgZmk=","bytesTransferredOut":362},"requestID":"FAG47VW6DAV6HNSS","eventID":"933e890c-59c2-4b02-94f9-d897105774d7","readOnly":true,"resources":[{"accountId":"123837392027","type":"AWS::S3::Bucket","ARN":"arn:aws:s3:::stratus-red-team-ctes-bucket-qyxyekjbtk"}],"eventType":"AwsApiCall","managementEvent":true,"recipientAccountId":"123837392027","eventCategory":"Management","tlsDetails":{"tlsVersion":"TLSv1.2","cipherSuite":"ECDHE-RSA-AES128-GCM-SHA256","clientProvidedHostHeader":"stratus-red-team-ctes-bucket-qyxyekjbtk.s3.amazonaws.com"}},{"eventVersion":"1.09","userIdentity":{"type":"IAMUser","principalId":"AIDATFQR7NSC5AU2ZV3IE","arn":"arn:aws:iam::123837392027:user/bert-jan","accountId":"123837392027","accessKeyId":"AKIATFQR7NSC8Q4X20BJ","userName":"bert-jan"},"eventTime":"2023-07-10T12:00:05Z","eventSource":"cloudtrail.amazonaws.com","eventName":"CreateTrail","awsRegion":"us-east-1","sourceIPAddress":"192.168.10.20","userAgent":"APN/1.0 HashiCorp/1.0 Terraform/1.1.2 (+https://www.terraform.io) terraform-provider-aws/3.76.1 (+https://registry.terraform.io/providers/hashicorp/aws) aws-sdk-go/1.44.157 (go1.19.3; linux; amd64) stratus-red-team_1d949e3e-4092-4c96-a6ef-96a967510a46 HashiCorp-terraform-exec/0.17.3","requestParameters":{"name":"stratus-red-team-ctes-trail-qyxyekjbtk","s3BucketName":"stratus-red-team-ctes-bucket-qyxyekjbtk","includeGlobalServiceEvents":true,"tagsList":[{"key":"StratusRedTeam","value":"true"}]},"responseElements":{"name":"stratus-red-team-ctes-trail-qyxyekjbtk","s3BucketName":"stratus-red-team-ctes-bucket-qyxyekjbtk","includeGlobalServiceEvents":true,"isMultiRegionTrail":false,"trailARN":"arn:aws:cloudtrail:us-east-1:123837392027:trail/stratus-red-team-ctes-trail-qyxyekjbtk","logFileValidationEnabled":false,"isOrganizationTrail":false},"requestID":"d370b91f-30a9-4f4d-b1a3-47e13d476c15","eventID":"ad384a22-c03e-4f3c-8520-86a31e79378d","readOnly":false,"eventType":"AwsApiCall","managementEvent":true,"recipientAccountId":"123837392027","eventCategory":"Management","tlsDetails":{"tlsVersion":"TLSv1.2","cipherSuite":"ECDHE-RSA-AES128-GCM-SHA256","clientProvidedHostHeader":"cloudtrail.us-east-1.amazonaws.com"}},{"eventVersion":"1.09","userIdentity":{"type":"IAMUser","principalId":"AIDATFQR7NSC5AU2ZV3IE","arn":"arn:aws:iam::123837392027:user/bert-jan","accountId":"123837392027","accessKeyId":"AKIATFQR7NSC8Q4X20BJ","userName":"bert-jan"},"eventTime":"2023-07-10T12:00:05Z","eventSource":"cloudtrail.amazonaws.com","eventName":"StartLogging","awsRegion":"us-east-1","sourceIPAddress":"192.168.10.20","userAgent":"APN/1.0 HashiCorp/1.0 Terraform/1.1.2 (+https://www.terraform.io) terraform-provider-aws/3.76.1 (+https://registry.terraform.io/providers/hashicorp/aws) aws-sdk-go/1.44.157 (go1.19.3; linux; amd64) stratus-red-team_1d949e3e-4092-4c96-a6ef-96a967510a46 HashiCorp-terraform-exec/0.17.3","requestParameters":{"name":"stratus-red-team-ctes-trail-qyxyekjbtk"},"responseElements":null,"requestID":"96c6e098-fb99-4935-8b9b-087e7bb48eef","eventID":"98cf02da-a187-453b-87fe-884d93a06a4c","readOnly":false,"eventType":"AwsApiCall","managementEvent":true,"recipientAccountId":"123837392027","eventCategory":"Management","tlsDetails":{"tlsVersion":"TLSv1.2","cipherSuite":"ECDHE-RSA-AES128-GCM-SHA256","clientProvidedHostHeader":"cloudtrail.us-east-1.amazonaws.com"}},{"eventVersion":"1.08","userIdentity":{"type":"IAMUser","principalId":"AIDATFQR7NSC5AU2ZV3IE","arn":"arn:aws:iam::123837392027:user/bert-jan","accountId":"123837392027","accessKeyId":"AKIATFQR7NSC8Q4X20BJ","userName":"bert-jan"},"eventTime":"2023-07-10T12:00:04Z","eventSource":"s3.amazonaws.com","eventName":"GetBucketObjectLockConfiguration","awsRegion":"us-east-1","sourceIPAddress":"192.168.10.20","userAgent":"[APN/1.0 HashiCorp/1.0 Terraform/1.1.2 (+https://www.terraform.io) terraform-provider-aws/3.76.1 (+https://registry.terraform.io/providers/hashicorp/aws) aws-sdk-go/1.44.157 (go1.19.3; linux; amd64) stratus-red-team_1d949e3e-4092-4c96-a6ef-96a967510a46 HashiCorp-terraform-exec/0.17.3]","errorCode":"ObjectLockConfigurationNotFoundError","errorMessage":"Object Lock configuration does not exist for this bucket","requestParameters":{"bucketName":"stratus-red-team-ctes-bucket-qyxyekjbtk","object-lock":"","Host":"stratus-red-team-ctes-bucket-qyxyekjbtk.s3.amazonaws.com"},"responseElements":null,"additionalEventData":{"SignatureVersion":"SigV4","CipherSuite":"ECDHE-RSA-AES128-GCM-SHA256","bytesTransferredIn":0,"AuthenticationMethod":"AuthHeader","x-amz-id-2":"YMIrNyAB5aCyvwvECF5AGUc4cXR76scqXob6+PaZ3bdH1KY8n3Ke2qm2C3dmyZ1Bic0v9y05LiMzC6n8J0x1Ig==","bytesTransferredOut":386},"requestID":"MTKKD0P7VHWJ0NSC","eventID":"e4e318b2-9a83-4070-b18e-07d51d09533a","readOnly":true,"resources":[{"accountId":"123837392027","type":"AWS::S3::Bucket","ARN":"arn:aws:s3:::stratus-red-team-ctes-bucket-qyxyekjbtk"}],"eventType":"AwsApiCall","managementEvent":true,"recipientAccountId":"123837392027","eventCategory":"Management","tlsDetails":{"tlsVersion":"TLSv1.2","cipherSuite":"ECDHE-RSA-AES128-GCM-SHA256","clientProvidedHostHeader":"stratus-red-team-ctes-bucket-qyxyekjbtk.s3.amazonaws.com"}},{"eventVersion":"1.08","userIdentity":{"type":"IAMUser","principalId":"AIDATFQR7NSC5AU2ZV3IE","arn":"arn:aws:iam::123837392027:user/bert-jan","accountId":"123837392027","accessKeyId":"AKIATFQR7NSC8Q4X20BJ","userName":"bert-jan"},"eventTime":"2023-07-10T12:00:03Z","eventSource":"s3.amazonaws.com","eventName":"GetBucketEncryption","awsRegion":"us-east-1","sourceIPAddress":"192.168.10.20","userAgent":"[APN/1.0 HashiCorp/1.0 Terraform/1.1.2 (+https://www.terraform.io) terraform-provider-aws/3.76.1 (+https://registry.terraform.io/providers/hashicorp/aws) aws-sdk-go/1.44.157 (go1.19.3; linux; amd64) stratus-red-team_1d949e3e-4092-4c96-a6ef-96a967510a46 HashiCorp-terraform-exec/0.17.3]","requestParameters":{"bucketName":"stratus-red-team-ctes-bucket-qyxyekjbtk","Host":"stratus-red-team-ctes-bucket-qyxyekjbtk.s3.amazonaws.com","encryption":""},"responseElements":null,"additionalEventData":{"SignatureVersion":"SigV4","CipherSuite":"ECDHE-RSA-AES128-GCM-SHA256","bytesTransferredIn":0,"AuthenticationMethod":"AuthHeader","x-amz-id-2":"/KLysnkOpdyQBFMRu9dFVipzhAtT/tn6O5ytClX9jn/4wnOBtTTmBJ6bp4tn1iWai61r6P5l4Jk=","bytesTransferredOut":321},"requestID":"FAG1V07V67D44H44","eventID":"204a9beb-9b1c-4083-9279-51bd05eb94aa","readOnly":true,"resources":[{"accountId":"123837392027","type":"AWS::S3::Bucket","ARN":"arn:aws:s3:::stratus-red-team-ctes-bucket-qyxyekjbtk"}],"eventType":"AwsApiCall","managementEvent":true,"recipientAccountId":"123837392027","eventCategory":"Management","tlsDetails":{"tlsVersion":"TLSv1.2","cipherSuite":"ECDHE-RSA-AES128-GCM-SHA256","clientProvidedHostHeader":"stratus-red-team-ctes-bucket-qyxyekjbtk.s3.amazonaws.com"}},{"eventVersion":"1.09","userIdentity":{"type":"IAMUser","principalId":"AIDATFQR7NSC5AU2ZV3IE","arn":"arn:aws:iam::123837392027:user/bert-jan","accountId":"123837392027","accessKeyId":"AKIATFQR7NSC8Q4X20BJ","userName":"bert-jan"},"eventTime":"2023-07-10T12:00:08Z","eventSource":"cloudtrail.amazonaws.com","eventName":"PutEventSelectors","awsRegion":"us-east-1","sourceIPAddress":"192.168.10.20","userAgent":"stratus-red-team_1d949e3e-4092-4c96-a6ef-96a967510a46","requestParameters":{"trailName":"stratus-red-team-ctes-trail-qyxyekjbtk","eventSelectors":[{"readWriteType":"ReadOnly","includeManagementEvents":false,"dataResources":[{"type":"AWS::S3::Object","values":[]},{"type":"AWS::Lambda::Function","values":[]}],"excludeManagementEventSources":[]}]},"responseElements":{"trailARN":"arn:aws:cloudtrail:us-east-1:123837392027:trail/stratus-red-team-ctes-trail-qyxyekjbtk","eventSelectors":[{"readWriteType":"ReadOnly","includeManagementEvents":false,"dataResources":[{"type":"AWS::S3::Object","values":[]},{"type":"AWS::Lambda::Function","values":[]}],"excludeManagementEventSources":[]}]},"requestID":"966e1d28-e542-4f65-aaae-170b63074607","eventID":"076e96d5-2983-473f-920a-2fc2d7e02777","readOnly":false,"eventType":"AwsApiCall","managementEvent":true,"recipientAccountId":"123837392027","eventCategory":"Management","tlsDetails":{"tlsVersion":"TLSv1.2","cipherSuite":"ECDHE-RSA-AES128-GCM-SHA256","clientProvidedHostHeader":"cloudtrail.us-east-1.amazonaws.com"}},{"eventVersion":"1.08","userIdentity":{"type":"IAMUser","principalId":"AIDATFQR7NSC5AU2ZV3IE","arn":"arn:aws:iam::123837392027:user/bert-jan","accountId":"123837392027","accessKeyId":"AKIATFQR7NSC8Q4X20BJ","userName":"bert-jan"},"eventTime":"2023-07-10T12:00:18Z","eventSource":"ec2.amazonaws.com","eventName":"DescribeAccountAttributes","awsRegion":"us-east-1","sourceIPAddress":"192.168.10.20","userAgent":"stratus-red-team_cdeeefe3-186a-4b18-a7fb-77a43e9de204","requestParameters":{"accountAttributeNameSet":{},"filterSet":{}},"responseElements":null,"requestID":"a7f79ec8-98cd-47da-b09c-33fab235a695","eventID":"4d9283cf-57f8-49c1-98db-c82f48823067","readOnly":true,"eventType":"AwsApiCall","managementEvent":true,"recipientAccountId":"123837392027","eventCategory":"Management","tlsDetails":{"tlsVersion":"TLSv1.2","cipherSuite":"ECDHE-RSA-AES128-GCM-SHA256","clientProvidedHostHeader":"ec2.us-east-1.amazonaws.com"}},{"eventVersion":"1.08","userIdentity":{"type":"IAMUser","principalId":"AIDATFQR7NSC5AU2ZV3IE","arn":"arn:aws:iam::123837392027:user/bert-jan","accountId":"123837392027","accessKeyId":"AKIATFQR7NSC8Q4X20BJ","userName":"bert-jan"},"eventTime":"2023-07-10T12:00:23Z","eventSource":"iam.amazonaws.com","eventName":"GetUser","awsRegion":"us-east-1","sourceIPAddress":"192.168.10.20","userAgent":"APN/1.0 HashiCorp/1.0 Terraform/1.1.2 (+https://www.terraform.io) terraform-provider-aws/3.76.1 (+https://registry.terraform.io/providers/hashicorp/aws) aws-sdk-go/1.44.157 (go1.19.3; linux; amd64) stratus-red-team_4990da05-9399-449e-b49f-82996a764ec9 HashiCorp-terraform-exec/0.17.3","requestParameters":null,"responseElements":null,"requestID":"5afc00bb-3a70-4fc6-a846-e03a16019950","eventID":"769e9990-679f-4687-8be6-cfe9e6d56ab2","readOnly":true,"eventType":"AwsApiCall","managementEvent":true,"recipientAccountId":"123837392027","eventCategory":"Management","tlsDetails":{"tlsVersion":"TLSv1.2","cipherSuite":"ECDHE-RSA-AES128-GCM-SHA256","clientProvidedHostHeader":"iam.amazonaws.com"}},{"eventVersion":"1.08","userIdentity":{"type":"IAMUser","principalId":"AIDATFQR7NSC5AU2ZV3IE","arn":"arn:aws:iam::123837392027:user/bert-jan","accountId":"123837392027","accessKeyId":"AKIATFQR7NSC8Q4X20BJ","userName":"bert-jan"},"eventTime":"2023-07-10T12:00:24Z","eventSource":"s3.amazonaws.com","eventName":"PutBucketTagging","awsRegion":"us-east-1","sourceIPAddress":"192.168.10.20","userAgent":"[APN/1.0 HashiCorp/1.0 Terraform/1.1.2 (+https://www.terraform.io) terraform-provider-aws/3.76.1 (+https://registry.terraform.io/providers/hashicorp/aws) aws-sdk-go/1.44.157 (go1.19.3; linux; amd64) stratus-red-team_4990da05-9399-449e-b49f-82996a764ec9 HashiCorp-terraform-exec/0.17.3]","requestParameters":{"Tagging":{"xmlns":"http://s3.amazonaws.com/doc/2006-03-01/","TagSet":{"Tag":{"Value":true,"Key":"StratusRedTeam"}}},"tagging":"","bucketName":"stratus-red-team-ctlr-bucket-zqfsvooxqj","Host":"stratus-red-team-ctlr-bucket-zqfsvooxqj.s3.amazonaws.com"},"responseElements":null,"additionalEventData":{"SignatureVersion":"SigV4","CipherSuite":"ECDHE-RSA-AES128-GCM-SHA256","bytesTransferredIn":139,"AuthenticationMethod":"AuthHeader","x-amz-id-2":"rqK1Nbj7DjmEcMbwej8pr89j9IDFZpXxY3sEm7ZPIkYHUGPON6SlVFuSlZnujHh+JyJPU/YV+a0=","bytesTransferredOut":0},"requestID":"FZH7BVQBHTDDC056","eventID":"802075d5-9761-417d-a32a-3277cd1dfc12","readOnly":false,"resources":[{"accountId":"123837392027","type":"AWS::S3::Bucket","ARN":"arn:aws:s3:::stratus-red-team-ctlr-bucket-zqfsvooxqj"}],"eventType":"AwsApiCall","managementEvent":true,"recipientAccountId":"123837392027","eventCategory":"Management","tlsDetails":{"tlsVersion":"TLSv1.2","cipherSuite":"ECDHE-RSA-AES128-GCM-SHA256","clientProvidedHostHeader":"stratus-red-team-ctlr-bucket-zqfsvooxqj.s3.amazonaws.com"}},{"eventVersion":"1.08","userIdentity":{"type":"IAMUser","principalId":"AIDATFQR7NSC5AU2ZV3IE","arn":"arn:aws:iam::123837392027:user/bert-jan","accountId":"123837392027","accessKeyId":"AKIATFQR7NSC8Q4X20BJ","userName":"bert-jan"},"eventTime":"2023-07-10T12:00:30Z","eventSource":"s3.amazonaws.com","eventName":"GetBucketObjectLockConfiguration","awsRegion":"us-east-1","sourceIPAddress":"192.168.10.20","userAgent":"[APN/1.0 HashiCorp/1.0 Terraform/1.1.2 (+https://www.terraform.io) terraform-provider-aws/3.76.1 (+https://registry.terraform.io/providers/hashicorp/aws) aws-sdk-go/1.44.157 (go1.19.3; linux; amd64) stratus-red-team_4990da05-9399-449e-b49f-82996a764ec9 HashiCorp-terraform-exec/0.17.3]","errorCode":"ObjectLockConfigurationNotFoundError","errorMessage":"Object Lock configuration does not exist for this bucket","requestParameters":{"bucketName":"stratus-red-team-ctlr-bucket-zqfsvooxqj","object-lock":"","Host":"stratus-red-team-ctlr-bucket-zqfsvooxqj.s3.amazonaws.com"},"responseElements":null,"additionalEventData":{"SignatureVersion":"SigV4","CipherSuite":"ECDHE-RSA-AES128-GCM-SHA256","bytesTransferredIn":0,"AuthenticationMethod":"AuthHeader","x-amz-id-2":"GvRjT54bTQvjqtEOL2PNRtNgEvr0kdZV3mDAkKsc5DSo2S3VnjeaWEaOauIsxLQgnTe1fYLYv6U=","bytesTransferredOut":374},"requestID":"H5SAEC0S7GT306DV","eventID":"14a0d606-9962-4858-b699-397e8293fd93","readOnly":true,"resources":[{"accountId":"123837392027","type":"AWS::S3::Bucket","ARN":"arn:aws:s3:::stratus-red-team-ctlr-bucket-zqfsvooxqj"}],"eventType":"AwsApiCall","managementEvent":true,"recipientAccountId":"123837392027","eventCategory":"Management","tlsDetails":{"tlsVersion":"TLSv1.2","cipherSuite":"ECDHE-RSA-AES128-GCM-SHA256","clientProvidedHostHeader":"stratus-red-team-ctlr-bucket-zqfsvooxqj.s3.amazonaws.com"}},{"eventVersion":"1.08","userIdentity":{"type":"IAMUser","principalId":"AIDATFQR7NSC5AU2ZV3IE","arn":"arn:aws:iam::123837392027:user/bert-jan","accountId":"123837392027","accessKeyId":"AKIATFQR7NSC8Q4X20BJ","userName":"bert-jan"},"eventTime":"2023-07-10T12:00:28Z","eventSource":"s3.amazonaws.com","eventName":"GetBucketRequestPayment","awsRegion":"us-east-1","sourceIPAddress":"192.168.10.20","userAgent":"[APN/1.0 HashiCorp/1.0 Terraform/1.1.2 (+https://www.terraform.io) terraform-provider-aws/3.76.1 (+https://registry.terraform.io/providers/hashicorp/aws) aws-sdk-go/1.44.157 (go1.19.3; linux; amd64) stratus-red-team_4990da05-9399-449e-b49f-82996a764ec9 HashiCorp-terraform-exec/0.17.3]","requestParameters":{"bucketName":"stratus-red-team-ctlr-bucket-zqfsvooxqj","Host":"stratus-red-team-ctlr-bucket-zqfsvooxqj.s3.amazonaws.com","requestPayment":""},"responseElements":null,"additionalEventData":{"SignatureVersion":"SigV4","CipherSuite":"ECDHE-RSA-AES128-GCM-SHA256","bytesTransferredIn":0,"AuthenticationMethod":"AuthHeader","x-amz-id-2":"PcFecPsUb9ykz9/13Y9Z0RvREZxWPKmB1vo2HO7sBYuXzxc5CnEIgJO4nAjQKVIA+9rRaYxI5iwL3RxkmrzQPraYslkHCoLs","bytesTransferredOut":172},"requestID":"67JP1WY4X7HF7A3P","eventID":"f2826229-2b6d-4d37-83a2-fd14bf0ff6f3","readOnly":true,"resources":[{"accountId":"123837392027","type":"AWS::S3::Bucket","ARN":"arn:aws:s3:::stratus-red-team-ctlr-bucket-zqfsvooxqj"}],"eventType":"AwsApiCall","managementEvent":true,"recipientAccountId":"123837392027","eventCategory":"Management","tlsDetails":{"tlsVersion":"TLSv1.2","cipherSuite":"ECDHE-RSA-AES128-GCM-SHA256","clientProvidedHostHeader":"stratus-red-team-ctlr-bucket-zqfsvooxqj.s3.amazonaws.com"}},{"eventVersion":"1.09","userIdentity":{"type":"IAMUser","principalId":"AIDATFQR7NSC5AU2ZV3IE","arn":"arn:aws:iam::123837392027:user/bert-jan","accountId":"123837392027","accessKeyId":"AKIATFQR7NSC8Q4X20BJ","userName":"bert-jan"},"eventTime":"2023-07-10T12:00:33Z","eventSource":"cloudtrail.amazonaws.com","eventName":"GetEventSelectors","awsRegion":"us-east-1","sourceIPAddress":"192.168.10.20","userAgent":"APN/1.0 HashiCorp/1.0 Terraform/1.1.2 (+https://www.terraform.io) terraform-provider-aws/3.76.1 (+https://registry.terraform.io/providers/hashicorp/aws) aws-sdk-go/1.44.157 (go1.19.3; linux; amd64) stratus-red-team_4990da05-9399-449e-b49f-82996a764ec9 HashiCorp-terraform-exec/0.17.3","requestParameters":{"trailName":"stratus-red-team-ctlr-trail-zqfsvooxqj"},"responseElements":null,"requestID":"47d4348a-d56e-41c9-a8fd-bd816fd29302","eventID":"7aa83266-600f-4bdc-91ff-1a8fcafa3578","readOnly":true,"eventType":"AwsApiCall","managementEvent":true,"recipientAccountId":"123837392027","eventCategory":"Management","tlsDetails":{"tlsVersion":"TLSv1.2","cipherSuite":"ECDHE-RSA-AES128-GCM-SHA256","clientProvidedHostHeader":"cloudtrail.us-east-1.amazonaws.com"}},{"eventVersion":"1.08","userIdentity":{"type":"IAMUser","principalId":"AIDATFQR7NSC5AU2ZV3IE","arn":"arn:aws:iam::123837392027:user/bert-jan","accountId":"123837392027","accessKeyId":"AKIATFQR7NSC8Q4X20BJ","userName":"bert-jan"},"eventTime":"2023-07-10T12:00:26Z","eventSource":"s3.amazonaws.com","eventName":"GetBucketPolicy","awsRegion":"us-east-1","sourceIPAddress":"192.168.10.20","userAgent":"[APN/1.0 HashiCorp/1.0 Terraform/1.1.2 (+https://www.terraform.io) terraform-provider-aws/3.76.1 (+https://registry.terraform.io/providers/hashicorp/aws) aws-sdk-go/1.44.157 (go1.19.3; linux; amd64) stratus-red-team_4990da05-9399-449e-b49f-82996a764ec9 HashiCorp-terraform-exec/0.17.3]","requestParameters":{"bucketName":"stratus-red-team-ctlr-bucket-zqfsvooxqj","Host":"stratus-red-team-ctlr-bucket-zqfsvooxqj.s3.amazonaws.com","policy":""},"responseElements":null,"additionalEventData":{"SignatureVersion":"SigV4","CipherSuite":"ECDHE-RSA-AES128-GCM-SHA256","bytesTransferredIn":0,"AuthenticationMethod":"AuthHeader","x-amz-id-2":"cx3apAU7AoQY+YA/oMEcwWcOXvs8VORO3raX7lYmf50kh0VGBUcJWbLyKRecVRPH7il+mjTSB7AYus0j1AYIpG/qoxzntbOFvR/D70wJhLo=","bytesTransferredOut":494},"requestID":"6VACDS1ENX2BQVK5","eventID":"13b44132-953c-4928-ac17-ecde7af18453","readOnly":true,"resources":[{"accountId":"123837392027","type":"AWS::S3::Bucket","ARN":"arn:aws:s3:::stratus-red-team-ctlr-bucket-zqfsvooxqj"}],"eventType":"AwsApiCall","managementEvent":true,"recipientAccountId":"123837392027","eventCategory":"Management","tlsDetails":{"tlsVersion":"TLSv1.2","cipherSuite":"ECDHE-RSA-AES128-GCM-SHA256","clientProvidedHostHeader":"stratus-red-team-ctlr-bucket-zqfsvooxqj.s3.amazonaws.com"}},{"eventVersion":"1.09","userIdentity":{"type":"IAMUser","principalId":"AIDATFQR7NSC5AU2ZV3IE","arn":"arn:aws:iam::123837392027:user/bert-jan","accountId":"123837392027","accessKeyId":"AKIATFQR7NSC8Q4X20BJ","userName":"bert-jan"},"eventTime":"2023-07-10T12:00:32Z","eventSource":"cloudtrail.amazonaws.com","eventName":"DescribeTrails","awsRegion":"us-east-1","sourceIPAddress":"192.168.10.20","userAgent":"APN/1.0 HashiCorp/1.0 Terraform/1.1.2 (+https://www.terraform.io) terraform-provider-aws/3.76.1 (+https://registry.terraform.io/providers/hashicorp/aws) aws-sdk-go/1.44.157 (go1.19.3; linux; amd64) stratus-red-team_4990da05-9399-449e-b49f-82996a764ec9 HashiCorp-terraform-exec/0.17.3","requestParameters":{"trailNameList":["stratus-red-team-ctlr-trail-zqfsvooxqj"]},"responseElements":null,"requestID":"68cfbb6c-8c99-4c4b-b84f-3da8b96136a5","eventID":"1cb263a2-209b-4515-a937-c375eba29433","readOnly":true,"eventType":"AwsApiCall","managementEvent":true,"recipientAccountId":"123837392027","eventCategory":"Management","tlsDetails":{"tlsVersion":"TLSv1.2","cipherSuite":"ECDHE-RSA-AES128-GCM-SHA256","clientProvidedHostHeader":"cloudtrail.us-east-1.amazonaws.com"}},{"eventVersion":"1.09","userIdentity":{"type":"IAMUser","principalId":"AIDATFQR7NSC5AU2ZV3IE","arn":"arn:aws:iam::123837392027:user/bert-jan","accountId":"123837392027","accessKeyId":"AKIATFQR7NSC8Q4X20BJ","userName":"bert-jan"},"eventTime":"2023-07-10T12:00:42Z","eventSource":"cloudtrail.amazonaws.com","eventName":"StopLogging","awsRegion":"us-east-1","sourceIPAddress":"192.168.10.20","userAgent":"stratus-red-team_1e5be608-6e03-4283-8d27-d37452a50f25","errorCode":"TrailNotFoundException","errorMessage":"Unknown trail: arn:aws:cloudtrail:us-east-1:123837392027:trail/stratus-red-team-ct-stop-trail-qzbgnfqisx for the user: 123837392027","requestParameters":{"name":"stratus-red-team-ct-stop-trail-qzbgnfqisx"},"responseElements":null,"requestID":"7c6cea2f-13c4-4048-8781-4589b8a2ee46","eventID":"9790ee84-ed2b-4866-83d1-f32af0dd4cd2","readOnly":false,"eventType":"AwsApiCall","managementEvent":true,"recipientAccountId":"123837392027","eventCategory":"Management","tlsDetails":{"tlsVersion":"TLSv1.2","cipherSuite":"ECDHE-RSA-AES128-GCM-SHA256","clientProvidedHostHeader":"cloudtrail.us-east-1.amazonaws.com"}},{"eventVersion":"1.08","userIdentity":{"type":"IAMUser","principalId":"AIDATFQR7NSC5AU2ZV3IE","arn":"arn:aws:iam::123837392027:user/bert-jan","accountId":"123837392027","accessKeyId":"AKIATFQR7NSC8Q4X20BJ","userName":"bert-jan"},"eventTime":"2023-07-10T12:01:22Z","eventSource":"ec2.amazonaws.com","eventName":"DescribeAccountAttributes","awsRegion":"us-east-1","sourceIPAddress":"192.168.10.20","userAgent":"stratus-red-team_b32ebbff-8230-4bdd-90b4-04b5cff48824","requestParameters":{"accountAttributeNameSet":{},"filterSet":{}},"responseElements":null,"requestID":"7e0d4f0f-6135-42a7-8aca-742b2ff5fe8e","eventID":"5de1d172-0572-4235-8fac-2ce67da46834","readOnly":true,"eventType":"AwsApiCall","managementEvent":true,"recipientAccountId":"123837392027","eventCategory":"Management","tlsDetails":{"tlsVersion":"TLSv1.2","cipherSuite":"ECDHE-RSA-AES128-GCM-SHA256","clientProvidedHostHeader":"ec2.us-east-1.amazonaws.com"}},{"eventVersion":"1.09","userIdentity":{"type":"IAMUser","principalId":"AIDATFQR7NSC5AU2ZV3IE","arn":"arn:aws:iam::123837392027:user/bert-jan","accountId":"123837392027","accessKeyId":"AKIATFQR7NSC8Q4X20BJ","userName":"bert-jan"},"eventTime":"2023-07-10T12:01:23Z","eventSource":"cloudtrail.amazonaws.com","eventName":"StopLogging","awsRegion":"us-east-1","sourceIPAddress":"192.168.10.20","userAgent":"stratus-red-team_717d4d39-593b-4170-9968-107547a1c12b","errorCode":"TrailNotFoundException","errorMessage":"Unknown trail: arn:aws:cloudtrail:us-east-1:123837392027:trail/stratus-red-team-ct-stop-trail-qzbgnfqisx for the user: 123837392027","requestParameters":{"name":"stratus-red-team-ct-stop-trail-qzbgnfqisx"},"responseElements":null,"requestID":"0d9cc2e0-7424-442f-af70-425cd946c494","eventID":"b4610d54-efe9-40b0-b9f9-71156081d520","readOnly":false,"eventType":"AwsApiCall","managementEvent":true,"recipientAccountId":"123837392027","eventCategory":"Management","tlsDetails":{"tlsVersion":"TLSv1.2","cipherSuite":"ECDHE-RSA-AES128-GCM-SHA256","clientProvidedHostHeader":"cloudtrail.us-east-1.amazonaws.com"}},{"eventVersion":"1.08","userIdentity":{"type":"IAMUser","principalId":"AIDATFQR7NSC5AU2ZV3IE","arn":"arn:aws:iam::123837392027:user/bert-jan","accountId":"123837392027","accessKeyId":"AKIATFQR7NSC8Q4X20BJ","userName":"bert-jan"},"eventTime":"2023-07-10T12:01:50Z","eventSource":"iam.amazonaws.com","eventName":"GetUser","awsRegion":"us-east-1","sourceIPAddress":"192.168.10.20","userAgent":"APN/1.0 HashiCorp/1.0 Terraform/1.1.2 (+https://www.terraform.io) terraform-provider-aws/3.76.1 (+https://registry.terraform.io/providers/hashicorp/aws) aws-sdk-go/1.44.157 (go1.19.3; linux; amd64) stratus-red-team_7d2a6913-ded3-49c6-a31c-0cdeebcc259c HashiCorp-terraform-exec/0.17.3","requestParameters":null,"responseElements":null,"requestID":"d36de03b-2b69-40d7-bdc7-bb2d311360be","eventID":"4ae3e9cc-09d2-43ec-834a-f664e2a2481c","readOnly":true,"eventType":"AwsApiCall","managementEvent":true,"recipientAccountId":"123837392027","eventCategory":"Management","tlsDetails":{"tlsVersion":"TLSv1.2","cipherSuite":"ECDHE-RSA-AES128-GCM-SHA256","clientProvidedHostHeader":"iam.amazonaws.com"}},{"eventVersion":"1.08","userIdentity":{"type":"IAMUser","principalId":"AIDATFQR7NSC5AU2ZV3IE","arn":"arn:aws:iam::123837392027:user/bert-jan","accountId":"123837392027","accessKeyId":"AKIATFQR7NSC8Q4X20BJ","userName":"bert-jan"},"eventTime":"2023-07-10T12:01:52Z","eventSource":"iam.amazonaws.com","eventName":"PutRolePolicy","awsRegion":"us-east-1","sourceIPAddress":"192.168.10.20","userAgent":"APN/1.0 HashiCorp/1.0 Terraform/1.1.2 (+https://www.terraform.io) terraform-provider-aws/3.76.1 (+https://registry.terraform.io/providers/hashicorp/aws) aws-sdk-go/1.44.157 (go1.19.3; linux; amd64) stratus-red-team_7d2a6913-ded3-49c6-a31c-0cdeebcc259c HashiCorp-terraform-exec/0.17.3","requestParameters":{"roleName":"stratus-red-team-leave-org-role","policyDocument":"{\"Statement\":[{\"Action\":[\"ec2:Describe*\"],\"Effect\":\"Allow\",\"Resource\":\"*\"}],\"Version\":\"2012-10-17\"}","policyName":"inline-policy"},"responseElements":null,"requestID":"067619d3-c0ba-4e37-80dc-b9433ea6ba2d","eventID":"39b115ed-5806-43b7-abd5-c4e078b1528a","readOnly":false,"eventType":"AwsApiCall","managementEvent":true,"recipientAccountId":"123837392027","eventCategory":"Management","tlsDetails":{"tlsVersion":"TLSv1.2","cipherSuite":"ECDHE-RSA-AES128-GCM-SHA256","clientProvidedHostHeader":"iam.amazonaws.com"}},{"eventVersion":"1.08","userIdentity":{"type":"IAMUser","principalId":"AIDATFQR7NSC5AU2ZV3IE","arn":"arn:aws:iam::123837392027:user/bert-jan","accountId":"123837392027","accessKeyId":"AKIATFQR7NSC8Q4X20BJ","userName":"bert-jan"},"eventTime":"2023-07-10T12:01:56Z","eventSource":"sts.amazonaws.com","eventName":"AssumeRole","awsRegion":"us-east-1","sourceIPAddress":"192.168.10.20","userAgent":"stratus-red-team_7d2a6913-ded3-49c6-a31c-0cdeebcc259c","errorCode":"AccessDenied","errorMessage":"User: arn:aws:iam::123837392027:user/bert-jan is not authorized to perform: sts:AssumeRole on resource: arn:aws:iam::123837392027:role/stratus-red-team-leave-org-role","requestParameters":null,"responseElements":null,"requestID":"7a8aa4c1-d365-4762-84c3-14b7eb354af4","eventID":"073c57c4-c3bb-4d4c-908e-29fa31eefc0d","readOnly":true,"eventType":"AwsApiCall","managementEvent":true,"recipientAccountId":"123837392027","eventCategory":"Management","tlsDetails":{"tlsVersion":"TLSv1.2","cipherSuite":"ECDHE-RSA-AES128-GCM-SHA256","clientProvidedHostHeader":"sts.us-east-1.amazonaws.com"}},{"eventVersion":"1.08","userIdentity":{"type":"IAMUser","principalId":"AIDATFQR7NSC5U6Q3TMDR","arn":"arn:aws:iam::123837392027:user/benjamin","accountId":"123837392027","accessKeyId":"AKIATFQR7NSCUXC3DDDP","userName":"benjamin"},"eventTime":"2023-07-10T12:01:54Z","eventSource":"account.amazonaws.com","eventName":"GetRegionOptStatus","awsRegion":"us-east-1","sourceIPAddress":"10.248.16.43","userAgent":"Boto3/1.26.165 Python/3.10.6 Linux/5.19.0-46-generic Botocore/1.29.165","requestParameters":{"RegionName":"eu-north-1"},"responseElements":null,"requestID":"95a23be3-fb49-45b2-a02c-0f8e8900c63c","eventID":"305387b5-cff7-40ad-8e32-c66b4bff250e","readOnly":true,"eventType":"AwsApiCall","managementEvent":true,"recipientAccountId":"123837392027","eventCategory":"Management"},{"eventVersion":"1.08","userIdentity":{"type":"IAMUser","principalId":"AIDATFQR7NSC5AU2ZV3IE","arn":"arn:aws:iam::123837392027:user/bert-jan","accountId":"123837392027","accessKeyId":"AKIATFQR7NSC8Q4X20BJ","userName":"bert-jan"},"eventTime":"2023-07-10T12:02:25Z","eventSource":"ec2.amazonaws.com","eventName":"CreateFlowLogs","awsRegion":"us-east-1","sourceIPAddress":"192.168.10.20","userAgent":"APN/1.0 HashiCorp/1.0 Terraform/1.1.2 (+https://www.terraform.io) terraform-provider-aws/3.76.1 (+https://registry.terraform.io/providers/hashicorp/aws) aws-sdk-go/1.44.157 (go1.19.3; linux; amd64) stratus-red-team_20f9795b-aa02-4c8e-bad6-bd338ec09f59 HashiCorp-terraform-exec/0.17.3","requestParameters":{"CreateFlowLogsRequest":{"ResourceId":{"tag":1,"content":"vpc-0255d384b4b458b46"},"MaxAggregationInterval":600,"ResourceType":"VPC","LogDestination":"arn:aws:logs:us-east-1:123837392027:log-group:/stratus-red-team/vpc-flow-logs","TagSpecification":{"ResourceType":"vpc-flow-log","tag":1,"Tag":{"Value":true,"tag":1,"Key":"StratusRedTeam"}},"DeliverLogsPermissionArn":"arn:aws:iam::123837392027:role/stratus-red-team-remove-flow-logs-role","LogDestinationType":"cloud-watch-logs","TrafficType":"REJECT"}},"responseElements":{"CreateFlowLogsResponse":{"xmlns":"http://ec2.amazonaws.com/doc/2016-11-15/","requestId":"353ea5d4-f889-46d4-a632-ed784656dda4","clientToken":"oueUIFMk93wJinrrwc0QUGz+O0GaqjxHhhquvXQ1UQc=","unsuccessful":"","flowLogIdSet":{"item":"fl-064ed3a785e4a37ef"}}},"requestID":"353ea5d4-f889-46d4-a632-ed784656dda4","eventID":"a3fbe842-f8df-4bb3-accf-1407cc925cbd","readOnly":false,"eventType":"AwsApiCall","managementEvent":true,"recipientAccountId":"123837392027","eventCategory":"Management","tlsDetails":{"tlsVersion":"TLSv1.2","cipherSuite":"ECDHE-RSA-AES128-GCM-SHA256","clientProvidedHostHeader":"ec2.us-east-1.amazonaws.com"}},{"eventVersion":"1.08","userIdentity":{"type":"IAMUser","principalId":"AIDATFQR7NSC5AU2ZV3IE","arn":"arn:aws:iam::123837392027:user/bert-jan","accountId":"123837392027","accessKeyId":"AKIATFQR7NSC8Q4X20BJ","userName":"bert-jan"},"eventTime":"2023-07-10T12:02:22Z","eventSource":"ec2.amazonaws.com","eventName":"DescribeVpcClassicLinkDnsSupport","awsRegion":"us-east-1","sourceIPAddress":"192.168.10.20","userAgent":"APN/1.0 HashiCorp/1.0 Terraform/1.1.2 (+https://www.terraform.io) terraform-provider-aws/3.76.1 (+https://registry.terraform.io/providers/hashicorp/aws) aws-sdk-go/1.44.157 (go1.19.3; linux; amd64) stratus-red-team_20f9795b-aa02-4c8e-bad6-bd338ec09f59 HashiCorp-terraform-exec/0.17.3","requestParameters":{"DescribeVpcClassicLinkDnsSupportRequest":{"VpcIds":{"tag":1,"content":"vpc-0255d384b4b458b46"}}},"responseElements":null,"requestID":"5f85079d-dd9a-4c5e-80f4-05e1ca618073","eventID":"0c019fbb-d213-4bcc-8578-cde3dae0f618","readOnly":true,"eventType":"AwsApiCall","managementEvent":true,"recipientAccountId":"123837392027","eventCategory":"Management","tlsDetails":{"tlsVersion":"TLSv1.2","cipherSuite":"ECDHE-RSA-AES128-GCM-SHA256","clientProvidedHostHeader":"ec2.us-east-1.amazonaws.com"}},{"eventVersion":"1.08","userIdentity":{"type":"IAMUser","principalId":"AIDATFQR7NSC5AU2ZV3IE","arn":"arn:aws:iam::123837392027:user/bert-jan","accountId":"123837392027","accessKeyId":"AKIATFQR7NSC8Q4X20BJ","userName":"bert-jan"},"eventTime":"2023-07-10T12:02:44Z","eventSource":"iam.amazonaws.com","eventName":"ListAttachedRolePolicies","awsRegion":"us-east-1","sourceIPAddress":"192.168.10.20","userAgent":"APN/1.0 HashiCorp/1.0 Terraform/1.1.2 (+https://www.terraform.io) terraform-provider-aws/3.76.1 (+https://registry.terraform.io/providers/hashicorp/aws) aws-sdk-go/1.44.157 (go1.19.3; linux; amd64) stratus-red-team_9cbca289-7886-421c-b241-fcd2b1f14019 HashiCorp-terraform-exec/0.17.3","requestParameters":{"roleName":"stratus-red-team-get-usr-data-role"},"responseElements":null,"requestID":"5d4f257d-93c9-45da-ba85-6e29030f06fb","eventID":"24133fbc-d15f-4ed2-ab09-505fc95c1359","readOnly":true,"eventType":"AwsApiCall","managementEvent":true,"recipientAccountId":"123837392027","eventCategory":"Management","tlsDetails":{"tlsVersion":"TLSv1.2","cipherSuite":"ECDHE-RSA-AES128-GCM-SHA256","clientProvidedHostHeader":"iam.amazonaws.com"}},{"eventVersion":"1.08","userIdentity":{"type":"AssumedRole","principalId":"AROATFQR7NSCWCZMFXMXZ:aws-go-sdk-1688990565286187801","arn":"arn:aws:sts::123837392027:assumed-role/stratus-red-team-get-usr-data-role/aws-go-sdk-1688990565286187801","accountId":"123837392027","accessKeyId":"ASIATFQR7NSC2632JLFK","sessionContext":{"sessionIssuer":{"type":"Role","principalId":"AROATFQR7NSCWCZMFXMXZ","arn":"arn:aws:iam::123837392027:role/stratus-red-team-get-usr-data-role","accountId":"123837392027","userName":"stratus-red-team-get-usr-data-role"},"webIdFederationData":{},"attributes":{"creationDate":"2023-07-10T12:02:54Z","mfaAuthenticated":"false"}}},"eventTime":"2023-07-10T12:02:55Z","eventSource":"ec2.amazonaws.com","eventName":"DescribeInstanceAttribute","awsRegion":"us-east-1","sourceIPAddress":"192.168.10.20","userAgent":"stratus-red-team_9cbca289-7886-421c-b241-fcd2b1f14019","errorCode":"Client.UnauthorizedOperation","errorMessage":"You are not authorized to perform this operation. Encoded authorization failure message: qRdHZdkYrcbIaWXeJCxEhP8i3AS-a5mWHt0X0nCAng7YoDRzsAifUlI9I-HE1gBd7ngjca_M0izW4cWRZ4MwNFd6h9W9cYfIxlhW1vF36-aferdHDMxNbWbnzPrVAFnkdUzjMkNBhcguwIqmgtxLiXo7voyvbXxlkzfJ-fVsAiCRjENXwXDZlEyflNoHWJXi5AWyP1MpREglotTLHRWYCZy25HD_MXDBvqxNcbl2tiRFpYxWlhdhNpfzFFqlg8biSYC_yjo4JibSMuCJkyRGHvwLIWCdwhVdED3blIYEwKEebym1xoRkcllbvjzHSGEzxpgh9NcdrGajfjc1UVn5ivsO907dTLmuPlh8QmR0EK3Wc7Vx99EgvtBB0NkJIKvjcfB44RqFZxeTt2FLH_Ez9pWTJzmaVOXuQDOcsDep4urlzeNcZzdciCCv5v8pxOQHxQHDuqVrfuL2dvvf5G1pIeaoEtrIFpJm06LPLeHUIGnMvL_gd4G7SHoPV0NGFf0aEf73Bvt-0sJfpQ1qc8NildgvCYlNW6tfLriA1gAxPrWP_sSdxkvaK4hgFHE6xodre6PniwjA2-cszCk","requestParameters":{"instanceId":"i-8107c9c0","attribute":"userData"},"responseElements":null,"requestID":"f7e7137f-1462-47f5-b5d0-310772804a36","eventID":"f4574dc5-9747-435c-bb53-22f2454be3b7","readOnly":true,"eventType":"AwsApiCall","managementEvent":true,"recipientAccountId":"123837392027","eventCategory":"Management","tlsDetails":{"tlsVersion":"TLSv1.2","cipherSuite":"ECDHE-RSA-AES128-GCM-SHA256","clientProvidedHostHeader":"ec2.us-east-1.amazonaws.com"}},{"eventVersion":"1.08","userIdentity":{"type":"AssumedRole","principalId":"AROATFQR7NSCWCZMFXMXZ:aws-go-sdk-1688990565286187801","arn":"arn:aws:sts::123837392027:assumed-role/stratus-red-team-get-usr-data-role/aws-go-sdk-1688990565286187801","accountId":"123837392027","accessKeyId":"ASIATFQR7NSC2632JLFK","sessionContext":{"sessionIssuer":{"type":"Role","principalId":"AROATFQR7NSCWCZMFXMXZ","arn":"arn:aws:iam::123837392027:role/stratus-red-team-get-usr-data-role","accountId":"123837392027","userName":"stratus-red-team-get-usr-data-role"},"webIdFederationData":{},"attributes":{"creationDate":"2023-07-10T12:02:54Z","mfaAuthenticated":"false"}}},"eventTime":"2023-07-10T12:02:57Z","eventSource":"ec2.amazonaws.com","eventName":"DescribeInstanceAttribute","awsRegion":"us-east-1","sourceIPAddress":"192.168.10.20","userAgent":"stratus-red-team_9cbca289-7886-421c-b241-fcd2b1f14019","errorCode":"Client.UnauthorizedOperation","errorMessage":"You are not authorized to perform this operation. Encoded authorization failure message: C0VKxzJZVaarmRw_q0Hm5F9b3hBIYAILAVayHj98YyCZA5DXO6wlGD6rrR_ZMsbY6e0mesYS2AB0-jvvM9fNYKHtgcpYt6wQi6QXh1boeG3oXYiTvy06LF8Iqh2lff3-nWVQafbnGoT2RzmDqhwOkkUpyI11i2d2XI3ZwhtNvFgDjfRxIYiJXlPVikrBsO07VpFV9k54D0Ji1RPYTY7R8bhRuGYJfbcQ60niZPFImUA20H1yaIp7d4T7SCuOYy29WOgduZ9EfLcJFmY8JWa8V9KtgvTuRqw4x-6HBx6n3CYnjFyJElOwaV2nZssfGXkc07wGi1ZHRKU2FSUR9UedxEsx777Qz0ypdaekgWT4pq_Tuacx_KT-l23FlqaLYL1sS_-p8apArV_Obc75ujM56T4V38TMknL2KXGJoshIRA-HFTDtjk7LijBLrZJnvWxiNoe-hO5yEq1YAcpxjF8SAeYV36UfDPFhWOp6fx_iGsBoR-NV4to3pwwH64WJoJO-cKBWol7ED_PJjDXpkTf6tczLXUVTEw8QEQ8AgXdnA-LH3wCGtS6jZ1Zt2n_CiVih0AycMi7cgxOw","requestParameters":{"instanceId":"i-867d08fc","attribute":"userData"},"responseElements":null,"requestID":"cd34f225-1788-4788-9a47-df19028ddf97","eventID":"ceb35bc6-147d-4753-8901-56b1d3325cf0","readOnly":true,"eventType":"AwsApiCall","managementEvent":true,"recipientAccountId":"123837392027","eventCategory":"Management","tlsDetails":{"tlsVersion":"TLSv1.2","cipherSuite":"ECDHE-RSA-AES128-GCM-SHA256","clientProvidedHostHeader":"ec2.us-east-1.amazonaws.com"}},{"eventVersion":"1.08","userIdentity":{"type":"AssumedRole","principalId":"AROATFQR7NSCWCZMFXMXZ:aws-go-sdk-1688990565286187801","arn":"arn:aws:sts::123837392027:assumed-role/stratus-red-team-get-usr-data-role/aws-go-sdk-1688990565286187801","accountId":"123837392027","accessKeyId":"ASIATFQR7NSC2632JLFK","sessionContext":{"sessionIssuer":{"type":"Role","principalId":"AROATFQR7NSCWCZMFXMXZ","arn":"arn:aws:iam::123837392027:role/stratus-red-team-get-usr-data-role","accountId":"123837392027","userName":"stratus-red-team-get-usr-data-role"},"webIdFederationData":{},"attributes":{"creationDate":"2023-07-10T12:02:54Z","mfaAuthenticated":"false"}}},"eventTime":"2023-07-10T12:02:56Z","eventSource":"ec2.amazonaws.com","eventName":"DescribeInstanceAttribute","awsRegion":"us-east-1","sourceIPAddress":"192.168.10.20","userAgent":"stratus-red-team_9cbca289-7886-421c-b241-fcd2b1f14019","errorCode":"Client.UnauthorizedOperation","errorMessage":"You are not authorized to perform this operation. Encoded authorization failure message: GZIb3dVbNj6dZEi7S8IP30r3xWwbYUGBONioGhcCqkr5uDcbqLySo15qAD0ZX9YWZoPK-OuEx0Df2cMlUYutTCMkgDIU-rJbsZZ1gGBcaOeNXd53Uf-4bZf2kimlTioy48qkAm0I4q_sbmycUooA3kDgLBpSl58eoQTvOp0ps0S3xLeLfIC55WR5V6gtKOZcKdHJzHkZzx_jPcoUmt-DwKR2BDR87r7THRpVf5YZktY-jmDAJXLDiu-5Y2lZUkec19Y3gUhBw0_l_MCW3pmTb7npPss1rfdWXaU5-24Sp4f0ulfEhpZ4DLdt_hjPykFkfoVNtuZiqUuhgCDTomivugXY8B1DbYi2aDi45wnLson17EycMxzINi5k-aYmY6MF_u2x8RSZv3hzQW1gEHIMU5O1I-DpTf51OMgLh86Yl7wBewv025yxxOZp81jVgELpMMvOb9cB-js1dMPbAoFU4q8KPIxdg3Ge0YeoMFLmh1JZj0_lA-HqWhw8ZbwgfMyG--lGtU5nrpJyk--EacPIdr0kbKLd9bJNnBo-Xg7uKwuw6e-yjeHqgP-njjtTOVaCi5aqq0L6osWp","requestParameters":{"instanceId":"i-f2a41e93","attribute":"userData"},"responseElements":null,"requestID":"d49f0e13-b0b9-4aee-99be-fc4cd46a6f98","eventID":"becab99b-3ae7-4c7a-b923-d2c407b85ddd","readOnly":true,"eventType":"AwsApiCall","managementEvent":true,"recipientAccountId":"123837392027","eventCategory":"Management","tlsDetails":{"tlsVersion":"TLSv1.2","cipherSuite":"ECDHE-RSA-AES128-GCM-SHA256","clientProvidedHostHeader":"ec2.us-east-1.amazonaws.com"}},{"eventVersion":"1.08","userIdentity":{"type":"AssumedRole","principalId":"AROATFQR7NSCWCZMFXMXZ:aws-go-sdk-1688990565286187801","arn":"arn:aws:sts::123837392027:assumed-role/stratus-red-team-get-usr-data-role/aws-go-sdk-1688990565286187801","accountId":"123837392027","accessKeyId":"ASIATFQR7NSC2632JLFK","sessionContext":{"sessionIssuer":{"type":"Role","principalId":"AROATFQR7NSCWCZMFXMXZ","arn":"arn:aws:iam::123837392027:role/stratus-red-team-get-usr-data-role","accountId":"123837392027","userName":"stratus-red-team-get-usr-data-role"},"webIdFederationData":{},"attributes":{"creationDate":"2023-07-10T12:02:54Z","mfaAuthenticated":"false"}}},"eventTime":"2023-07-10T12:02:56Z","eventSource":"ec2.amazonaws.com","eventName":"DescribeInstanceAttribute","awsRegion":"us-east-1","sourceIPAddress":"192.168.10.20","userAgent":"stratus-red-team_9cbca289-7886-421c-b241-fcd2b1f14019","errorCode":"Client.UnauthorizedOperation","errorMessage":"You are not authorized to perform this operation. Encoded authorization failure message: 7omGdG4RfzMvuENWle1fcojrH4LTAbzr1O2q4KOiwXzzFTgjevknYmdNs3yuaT0xZ-1j_vVfSpYMX-LZYCFE1Q9MVbrlOwQKCn1PjzShw83Z-Crv_mm8-j53RCEs4cGulTK_rpKjEqIIlmyIqO4fJgpncn3xCcMBi7CZHnh3J4qp9SQuIvNAFCw23pIHTv2Zn66SSlit_7eqBuf9VFM-twERaq7l9W3LOfHiYW2VnxCLyB6ALzkGRn-hkwCMnvoWnsHH6jdvoO_ZFIpT7ZPtotSnVMik6Wqm7JpYeLsx0Df3nwtVFa9zDT9eUVKT2tubD4UCFKWL1qFifRc7x8telGt1pAQRAriByvafv1Javgc1TuRlqnMnVOerMFrGQwueBOmJ4c9jiM4t144KdsYhmVqjFhJSyd7eDiE1vnhJ_ixOJZPfdl4tLA_I2dSlald_yI8KArGmtkW4gt_DsHXUaRdaOYCxjgXF-NuR89IE_5rqSZ0z3DPPmymShgs9NMfvBGmtmZieClYnjCwzJUaTFGCm3PCLgOGADt55H5Tsb9zFWEeotOlzogw3KB77BQlL_zu4XFKb8cUv","requestParameters":{"instanceId":"i-34d324a6","attribute":"userData"},"responseElements":null,"requestID":"60af204e-8955-4929-a0dd-9795005b6d1b","eventID":"bb66d584-375e-41a5-aa57-9c87161b5eb5","readOnly":true,"eventType":"AwsApiCall","managementEvent":true,"recipientAccountId":"123837392027","eventCategory":"Management","tlsDetails":{"tlsVersion":"TLSv1.2","cipherSuite":"ECDHE-RSA-AES128-GCM-SHA256","clientProvidedHostHeader":"ec2.us-east-1.amazonaws.com"}},{"eventVersion":"1.08","userIdentity":{"type":"AssumedRole","principalId":"AROATFQR7NSCWCZMFXMXZ:aws-go-sdk-1688990565286187801","arn":"arn:aws:sts::123837392027:assumed-role/stratus-red-team-get-usr-data-role/aws-go-sdk-1688990565286187801","accountId":"123837392027","accessKeyId":"ASIATFQR7NSC2632JLFK","sessionContext":{"sessionIssuer":{"type":"Role","principalId":"AROATFQR7NSCWCZMFXMXZ","arn":"arn:aws:iam::123837392027:role/stratus-red-team-get-usr-data-role","accountId":"123837392027","userName":"stratus-red-team-get-usr-data-role"},"webIdFederationData":{},"attributes":{"creationDate":"2023-07-10T12:02:54Z","mfaAuthenticated":"false"}}},"eventTime":"2023-07-10T12:02:56Z","eventSource":"ec2.amazonaws.com","eventName":"DescribeInstanceAttribute","awsRegion":"us-east-1","sourceIPAddress":"192.168.10.20","userAgent":"stratus-red-team_9cbca289-7886-421c-b241-fcd2b1f14019","errorCode":"Client.UnauthorizedOperation","errorMessage":"You are not authorized to perform this operation. Encoded authorization failure message: VTq8U-_9nmIRJJE7ZC9UBkSk7jJO8APhsVPeXyuBU6pgi_-A7KjqXD7Lh6h8nnL3GUSfiavinCrrsR1afPv79c5T_ZEZDa5an2I25568SZclHYiVm-f9JVp3dIbJ67GvsYpkidIBl3nU4p173KAp-idJnKePp4oDwnsYztUv_faBwHy-Bjmqyz5edAK30YncaPRzOgAnlcRz6l96RFhdfgmjAb12DArbQM5ZWw939N57nBX3dVEFyd_4SN6xGfCRUozbOL2AOt3l39zmPVjyS4R9CFtFJo5zAvffM7UCvo9z6Wx-uPBnK6ciF32BErCbKP7s3Fos9UmXRqTRg3Z0RiyHkjhdBvrh6wnxs67bizKQG52776-TzTXEmzfSLmkSbgm1E6pQSmv5Nl_Sa5HOqaGhPoJq6IWuNGTzKksGOcxWuQzgZrlOLU2r_ozPvR7dknruyeYKBMIYTwWk31fgmCg3y5CxUMg0REL3Jd2xPPJEEQj_5Ula3o0Pxwco7F55cG5TRKVwXBvtNvt7feKsBBTjRy9kUNb61O5AhLV1Q8U4BTeU8foz-yMcQeHF-OnnGclFwJgsvw96fg","requestParameters":{"instanceId":"i-dc4c8f63","attribute":"userData"},"responseElements":null,"requestID":"c1f2ae33-36a4-46e6-8d8d-24ca3e57d34b","eventID":"67727e18-a012-4d75-bedd-a2ef963b43c2","readOnly":true,"eventType":"AwsApiCall","managementEvent":true,"recipientAccountId":"123837392027","eventCategory":"Management","tlsDetails":{"tlsVersion":"TLSv1.2","cipherSuite":"ECDHE-RSA-AES128-GCM-SHA256","clientProvidedHostHeader":"ec2.us-east-1.amazonaws.com"}},{"eventVersion":"1.08","userIdentity":{"type":"AssumedRole","principalId":"AROATFQR7NSCWCZMFXMXZ:aws-go-sdk-1688990565286187801","arn":"arn:aws:sts::123837392027:assumed-role/stratus-red-team-get-usr-data-role/aws-go-sdk-1688990565286187801","accountId":"123837392027","accessKeyId":"ASIATFQR7NSC2632JLFK","sessionContext":{"sessionIssuer":{"type":"Role","principalId":"AROATFQR7NSCWCZMFXMXZ","arn":"arn:aws:iam::123837392027:role/stratus-red-team-get-usr-data-role","accountId":"123837392027","userName":"stratus-red-team-get-usr-data-role"},"webIdFederationData":{},"attributes":{"creationDate":"2023-07-10T12:02:54Z","mfaAuthenticated":"false"}}},"eventTime":"2023-07-10T12:02:57Z","eventSource":"ec2.amazonaws.com","eventName":"DescribeInstanceAttribute","awsRegion":"us-east-1","sourceIPAddress":"192.168.10.20","userAgent":"stratus-red-team_9cbca289-7886-421c-b241-fcd2b1f14019","errorCode":"Client.UnauthorizedOperation","errorMessage":"You are not authorized to perform this operation. Encoded authorization failure message: dE4UQLsvJS1qdjB3PaRQFndggewustkqlaStqYlzUgU2FIX9heZ5bVseeBIF8nV3J0NOtYuHpBnKe-4BhShs1wJiOhoL3-QXq2G5jLnezDmoykWnwbYrgCC_I7CtkcDgomnSIEHBHF37PFyCqwUeFIgRpV9DDtz00q7xiNiBWatqkX3k6PyjeU_f31ljzUtbMghbjKirEYI7-u43tJ8T5nJ3vZvSSX0-sSoVK66i5ZmnuMq5eRpzpbGiEJC5AnWIckZ8V8j4aJYVJHS5mkJQptfzLuCRAUQIL5wgWQgqYI6k2mlh4ycp64_0qxwmexZyN5YpDIYS2PJkTo2FfAo5CsPbM3GIZFPbO9qySjN-c6_OENsXgyRjANz6o4q4lsMOdsVyjQ9gh2EfCVnVHA7xtRl7U65V7KbeFGXA20Xn8-UKZJvKJmvJvC9IaShuMVWgcfVzz9P510LX_mFBYJbPu_RaWuQLMLqqIxk91iYRs6HLRd1sbf5TyK0kD0yW_wYIwpgwvs2NVq5MOzB1szzw_oP1GQkIxNkhRgZjJSZ9ZhvnRyRrTq9ubA4hOmo7aW88YOLQGPURrE_n","requestParameters":{"instanceId":"i-7d8e8548","attribute":"userData"},"responseElements":null,"requestID":"72902442-7cf4-4c26-a411-bdbf60e8ca67","eventID":"fb5e67f9-9a17-4efa-900f-21ecd1ca744b","readOnly":true,"eventType":"AwsApiCall","managementEvent":true,"recipientAccountId":"123837392027","eventCategory":"Management","tlsDetails":{"tlsVersion":"TLSv1.2","cipherSuite":"ECDHE-RSA-AES128-GCM-SHA256","clientProvidedHostHeader":"ec2.us-east-1.amazonaws.com"}},{"eventVersion":"1.08","userIdentity":{"type":"AssumedRole","principalId":"AROATFQR7NSCWCZMFXMXZ:aws-go-sdk-1688990565286187801","arn":"arn:aws:sts::123837392027:assumed-role/stratus-red-team-get-usr-data-role/aws-go-sdk-1688990565286187801","accountId":"123837392027","accessKeyId":"ASIATFQR7NSC2632JLFK","sessionContext":{"sessionIssuer":{"type":"Role","principalId":"AROATFQR7NSCWCZMFXMXZ","arn":"arn:aws:iam::123837392027:role/stratus-red-team-get-usr-data-role","accountId":"123837392027","userName":"stratus-red-team-get-usr-data-role"},"webIdFederationData":{},"attributes":{"creationDate":"2023-07-10T12:02:54Z","mfaAuthenticated":"false"}}},"eventTime":"2023-07-10T12:02:57Z","eventSource":"ec2.amazonaws.com","eventName":"DescribeInstanceAttribute","awsRegion":"us-east-1","sourceIPAddress":"192.168.10.20","userAgent":"stratus-red-team_9cbca289-7886-421c-b241-fcd2b1f14019","errorCode":"Client.UnauthorizedOperation","errorMessage":"You are not authorized to perform this operation. Encoded authorization failure message: 2DqzzPimrMt7-M-yFJI_JfDvu5Ut2WPVHUjx4hx_fKqAk5zNFSTp2QeCK3x6adxbpIo7IvmB2KTWJk631pwHyh9xYarXScuxPYok8ttgez1V7vuM2jPLXKvN1ZJk89dghIGiAXN-bLy1TZIpdk2MHtNtTbjoiPL_LoBpTtwl_yuh8TTgD6fh7SkrgbVSXmLZXnZpfwlxHvwq0DvjI661R34adCu-sUsNCoo1U9dg_waV-Qx3jvbo1XPPD3mtWGDBcQBIbf8201SrC7bhVKUmbFZIUZHJcLD2P8UnxtZ6avXvIyk81MJoWkrUMUmrypVIyQaL9zUqJfXcZd7cJ2V4yPDX1u6bnTzW8L4bu67RcAhnZWYh6aBQK02aFE8ktaxD7OMmr3V5UId1hP7Tya941J7JN4GVSRZ4ckBxcYxrRfj2mkRS3NjC6_rTmQ8WSu5Vmtn4Kzmvmq5fLw60AVFZEl_mQhz6CensFYH0HO_i35XsEJPCY0hCuj6kMxX4AIPmcnhtttCYdzGOZV2YzuJMCMSHFqnde2LRtwnJd-MezRM0PlQXs0eg4xbaWXHoDgucjO_QepKOQ9LFmw","requestParameters":{"instanceId":"i-0a34046d","attribute":"userData"},"responseElements":null,"requestID":"bd1c923f-9bc0-40ac-880b-e74542cc69b4","eventID":"156fe62a-498c-4a54-b91f-5a7bc51b470e","readOnly":true,"eventType":"AwsApiCall","managementEvent":true,"recipientAccountId":"123837392027","eventCategory":"Management","tlsDetails":{"tlsVersion":"TLSv1.2","cipherSuite":"ECDHE-RSA-AES128-GCM-SHA256","clientProvidedHostHeader":"ec2.us-east-1.amazonaws.com"}},{"eventVersion":"1.08","userIdentity":{"type":"AssumedRole","principalId":"AROATFQR7NSCWCZMFXMXZ:aws-go-sdk-1688990565286187801","arn":"arn:aws:sts::123837392027:assumed-role/stratus-red-team-get-usr-data-role/aws-go-sdk-1688990565286187801","accountId":"123837392027","accessKeyId":"ASIATFQR7NSC2632JLFK","sessionContext":{"sessionIssuer":{"type":"Role","principalId":"AROATFQR7NSCWCZMFXMXZ","arn":"arn:aws:iam::123837392027:role/stratus-red-team-get-usr-data-role","accountId":"123837392027","userName":"stratus-red-team-get-usr-data-role"},"webIdFederationData":{},"attributes":{"creationDate":"2023-07-10T12:02:54Z","mfaAuthenticated":"false"}}},"eventTime":"2023-07-10T12:02:57Z","eventSource":"ec2.amazonaws.com","eventName":"DescribeInstanceAttribute","awsRegion":"us-east-1","sourceIPAddress":"192.168.10.20","userAgent":"stratus-red-team_9cbca289-7886-421c-b241-fcd2b1f14019","errorCode":"Client.UnauthorizedOperation","errorMessage":"You are not authorized to perform this operation. Encoded authorization failure message: MeuC-TgmWeMwtkgSdNLqR-Df3Q9rFq3s-CP4Q18ZkxGRQxZ2jWH7FYzNFp7zDz5OPdPU-KkAkYgtQCNxjmhrNNWXZhC6gpbUxIIpbhWw9JQ1xoRFvO-lflVQcXUCC9yVC46zgaI3HeG9_wOF2l16ce_XOjJIXmy1sUWWCaJYKwS5qcepr4tJM8VNziuYjhZGdWoD2ZNJBK8dZ2EHYaDRUbIRk_-N8Xpl-1_gLatZh-aFPaaSL_wOAqTtmjiq-2o1F-mqVMuTp1wRe8HGnKx6Npu1-7hfJE5N4cIO-gTHNF5OvcERU4DRVTLZWNJfBxY379z7HOMhB2SjpsG1pusb9YqqJ6kRXRg-jOdGPTIH3NnXoU72r-EJW3UJuKHSjO9USSMUbDa4lN1vI_T5nxMzHZLGTjtrQXtWipd7-9U-2yUyT2UQb1EC-zkpLznaeIXo3R5Frts89E5JUnZ32IH0BWQ-8s-fQrzN1Kzuw_OusxA3FtJa2UfKyTuy_XbfELIuE96lo_ELI96-0g1t5bXt3u_rH8jOpv1DAKySCLZHG4JxnlL4NkvRkOmGRdGc7hfGq_ZFpOy6gtIssQ","requestParameters":{"instanceId":"i-65903502","attribute":"userData"},"responseElements":null,"requestID":"a10a8f82-18c2-4070-bc1c-e887a605fbc9","eventID":"9f225158-b341-4ed2-bc69-18f8274d1f1f","readOnly":true,"eventType":"AwsApiCall","managementEvent":true,"recipientAccountId":"123837392027","eventCategory":"Management","tlsDetails":{"tlsVersion":"TLSv1.2","cipherSuite":"ECDHE-RSA-AES128-GCM-SHA256","clientProvidedHostHeader":"ec2.us-east-1.amazonaws.com"}},{"eventVersion":"1.08","userIdentity":{"type":"AssumedRole","principalId":"AROATFQR7NSCWCZMFXMXZ:aws-go-sdk-1688990565286187801","arn":"arn:aws:sts::123837392027:assumed-role/stratus-red-team-get-usr-data-role/aws-go-sdk-1688990565286187801","accountId":"123837392027","accessKeyId":"ASIATFQR7NSC2632JLFK","sessionContext":{"sessionIssuer":{"type":"Role","principalId":"AROATFQR7NSCWCZMFXMXZ","arn":"arn:aws:iam::123837392027:role/stratus-red-team-get-usr-data-role","accountId":"123837392027","userName":"stratus-red-team-get-usr-data-role"},"webIdFederationData":{},"attributes":{"creationDate":"2023-07-10T12:02:54Z","mfaAuthenticated":"false"}}},"eventTime":"2023-07-10T12:02:55Z","eventSource":"ec2.amazonaws.com","eventName":"DescribeInstanceAttribute","awsRegion":"us-east-1","sourceIPAddress":"192.168.10.20","userAgent":"stratus-red-team_9cbca289-7886-421c-b241-fcd2b1f14019","errorCode":"Client.UnauthorizedOperation","errorMessage":"You are not authorized to perform this operation. Encoded authorization failure message: CcKRw6GH2xpCcytMzjN0ac2l0Q3oafxt1a_YsK-aHdfpAP-o8TLfB2cgmdWAuMZzREHDkHc5hVebHcjoUeT7ezljilvNvwVwS-ACBG4uYDCUw50wR2oKa0sfWAHqjWiNtlols5We9QGoi6lGnH9fPgzJawr2d7MhZUspmGfNpYZgqzCdtbOsjsKo4S3Izbp9z6BCJWRoDUUehOUw5zkNw0CJFuk74o2vPLtqFUUrNzMHTQpvyJx7_G9yAjksKgQ7sAK6vngtmnA3OrEgG57mvLbAkTRCrBmmsr_u2Xk3SyE7mvVhPrwl1BCq93v3eZLp8OkN3EOZqER3BQyxlpFH7gjjOprnBB06z7GyWmbzy0vM5HZ3ic6EOrHlGoaXOW6f-RLH2m_4bLFWMtbWfc0s00QrCXU1mrQWkt_oqlts-UeD-JsNWG_itQd4Kh9pO6qPYyfjsMAThXVG6ZkGZU2tLp5juHasxwGilk-15QgdFG-iEia5diwKovUtvZcrMM76gUeB7tTeFMmffctMoKtKKG3nJqBbHI8Vq3R0lyaRUHHeY8BqIpJKjTD_1XQoAl9Ahq6Y5YS_yn5ycw","requestParameters":{"instanceId":"i-ee5be736","attribute":"userData"},"responseElements":null,"requestID":"6eea1c08-1ce8-41b1-a6d9-e31e2151d0bd","eventID":"b6897c0f-d765-4695-8884-6d6ed7a63722","readOnly":true,"eventType":"AwsApiCall","managementEvent":true,"recipientAccountId":"123837392027","eventCategory":"Management","tlsDetails":{"tlsVersion":"TLSv1.2","cipherSuite":"ECDHE-RSA-AES128-GCM-SHA256","clientProvidedHostHeader":"ec2.us-east-1.amazonaws.com"}},{"eventVersion":"1.08","userIdentity":{"type":"AssumedRole","principalId":"AROATFQR7NSCWCZMFXMXZ:aws-go-sdk-1688990565286187801","arn":"arn:aws:sts::123837392027:assumed-role/stratus-red-team-get-usr-data-role/aws-go-sdk-1688990565286187801","accountId":"123837392027","accessKeyId":"ASIATFQR7NSC2632JLFK","sessionContext":{"sessionIssuer":{"type":"Role","principalId":"AROATFQR7NSCWCZMFXMXZ","arn":"arn:aws:iam::123837392027:role/stratus-red-team-get-usr-data-role","accountId":"123837392027","userName":"stratus-red-team-get-usr-data-role"},"webIdFederationData":{},"attributes":{"creationDate":"2023-07-10T12:02:54Z","mfaAuthenticated":"false"}}},"eventTime":"2023-07-10T12:02:55Z","eventSource":"ec2.amazonaws.com","eventName":"DescribeInstanceAttribute","awsRegion":"us-east-1","sourceIPAddress":"192.168.10.20","userAgent":"stratus-red-team_9cbca289-7886-421c-b241-fcd2b1f14019","errorCode":"Client.UnauthorizedOperation","errorMessage":"You are not authorized to perform this operation. Encoded authorization failure message: Z_F6euBZ0gW5GXH25_rC_nDbOoigxmvF0hAufRORym4yLMfkJ9udFTEATpnMi1-GxyBxIyAc-btYI9RcETA-CDABYWF0MEmrTKxdgFDuG8KjwvuxOAlZMihfHRehGGdAEfhvLSygbGFYdN5pCGchN7aajlZjB-yK0h8pfHuBZTjaRVZjNrVppGE5dnS2TYivVmOF6wiOWP7EbW3zapC-tG0BGBrThsnzg4t51_xf2OL9iViolRnPYG5HknjptQrrQAc3jG4K-Dtq-pvYf8AZEKcJw06bds1yl_qXowwBbvq_ZQ0_bIMDlS9Tythl0MhpC799MNyQXxMms7Sg0_7b4Tce5t9Uukh2_R_72HVd8GJK9bYeX1qCSAlxc2AqlOiT8PJgGimAhkZyulgXxPWpv4arXrQcw65MdGC4BV-T5QoF87mWIf5d8yrxSH4xuYT15cXgsD3pQUHPCt5Trsf2nzaPMz3JdIfn6N9jibXqDLhSn40MjJnk3plS69f3p7gJr1ClwbN5eU-3t9drC1i5hyO_4J10quy3kDxguxkdhdRMTUOT9Xn8c3pQL2aALjX3eKaL_pabxv-pNZU","requestParameters":{"instanceId":"i-8d582f7b","attribute":"userData"},"responseElements":null,"requestID":"d11b4589-49ca-46c5-8a91-0da9f37e81d7","eventID":"91bc9d28-e014-49d4-ac84-bcee8d219c72","readOnly":true,"eventType":"AwsApiCall","managementEvent":true,"recipientAccountId":"123837392027","eventCategory":"Management","tlsDetails":{"tlsVersion":"TLSv1.2","cipherSuite":"ECDHE-RSA-AES128-GCM-SHA256","clientProvidedHostHeader":"ec2.us-east-1.amazonaws.com"}},{"eventVersion":"1.08","userIdentity":{"type":"AssumedRole","principalId":"AROATFQR7NSCWCZMFXMXZ:aws-go-sdk-1688990565286187801","arn":"arn:aws:sts::123837392027:assumed-role/stratus-red-team-get-usr-data-role/aws-go-sdk-1688990565286187801","accountId":"123837392027","accessKeyId":"ASIATFQR7NSC2632JLFK","sessionContext":{"sessionIssuer":{"type":"Role","principalId":"AROATFQR7NSCWCZMFXMXZ","arn":"arn:aws:iam::123837392027:role/stratus-red-team-get-usr-data-role","accountId":"123837392027","userName":"stratus-red-team-get-usr-data-role"},"webIdFederationData":{},"attributes":{"creationDate":"2023-07-10T12:02:54Z","mfaAuthenticated":"false"}}},"eventTime":"2023-07-10T12:02:55Z","eventSource":"ec2.amazonaws.com","eventName":"DescribeInstanceAttribute","awsRegion":"us-east-1","sourceIPAddress":"192.168.10.20","userAgent":"stratus-red-team_9cbca289-7886-421c-b241-fcd2b1f14019","errorCode":"Client.UnauthorizedOperation","errorMessage":"You are not authorized to perform this operation. Encoded authorization failure message: VT7wdpoLP_VUytH3IeJm1aF50a8XV1wOlaHQEP3Ee8s9iRqAJAwfxtRz-N464QuUUGmXPXtJl_Ra1O8TuhRbIoX9GXBrc4OgWMt_-3dqe1vBxeshJDydz_gR7Z8UemcxrbsYXLwKnJScOTwyWg7AM-00ZgJf2Aq_2GZ3gjrptg9YfmAFIcNvSMqh0OFqeF9xElNb-GMqE36Qn85a0TcFmJfs-0TaNcMbepX07MHoN-Pa4ggmSK5NXJJPgyX-dqbP_PjuQ4Xc-JtfkqUShRAH6kQj0GvdOUz1P08YiOVexD8bY5O_pGlUfdfQUi3UDrMa8WvVzR1Lg8Lh5WKrjcQ8WIIv882ozlQGQYStggdt9fnt-VC3HOyhVYEPVRQ5QIctS-kSXbXxl6wzSOCyEzZ4T0LU__wyLtn-wXp1BKNGMxd8b8FkY-lHKmZOe105MPIRHogJ5UAZGiAEtMnhMT53ixbd9e4SF_j5gdG_hpnqciwOlRdoMjx0vd12aIQEmqrrvjj6pJxleZRbvSgWwZr2rAyR0iVevGIU4JSKQT77G13KurBgLEC4IW4ZDX-fQ6kQESEScwtMPH4aMQ","requestParameters":{"instanceId":"i-4dc512df","attribute":"userData"},"responseElements":null,"requestID":"8dafb2c9-7ead-4f40-962a-348b1c85ba40","eventID":"947bc2bc-d5d6-46c8-a1a3-ca190fa1f17a","readOnly":true,"eventType":"AwsApiCall","managementEvent":true,"recipientAccountId":"123837392027","eventCategory":"Management","tlsDetails":{"tlsVersion":"TLSv1.2","cipherSuite":"ECDHE-RSA-AES128-GCM-SHA256","clientProvidedHostHeader":"ec2.us-east-1.amazonaws.com"}},{"eventVersion":"1.08","userIdentity":{"type":"AssumedRole","principalId":"AROATFQR7NSCWCZMFXMXZ:aws-go-sdk-1688990565286187801","arn":"arn:aws:sts::123837392027:assumed-role/stratus-red-team-get-usr-data-role/aws-go-sdk-1688990565286187801","accountId":"123837392027","accessKeyId":"ASIATFQR7NSC2632JLFK","sessionContext":{"sessionIssuer":{"type":"Role","principalId":"AROATFQR7NSCWCZMFXMXZ","arn":"arn:aws:iam::123837392027:role/stratus-red-team-get-usr-data-role","accountId":"123837392027","userName":"stratus-red-team-get-usr-data-role"},"webIdFederationData":{},"attributes":{"creationDate":"2023-07-10T12:02:54Z","mfaAuthenticated":"false"}}},"eventTime":"2023-07-10T12:02:55Z","eventSource":"ec2.amazonaws.com","eventName":"DescribeInstanceAttribute","awsRegion":"us-east-1","sourceIPAddress":"192.168.10.20","userAgent":"stratus-red-team_9cbca289-7886-421c-b241-fcd2b1f14019","errorCode":"Client.UnauthorizedOperation","errorMessage":"You are not authorized to perform this operation. Encoded authorization failure message: YKDqvMtG0imAoIn2lJc9lMDbdkYh6uitqgLMPJVZt4nRkaXa97NSrfJTdPgaqI5Z-ZZrNSEWnd9Ccw3n_777FpTLCh6FVeZZ1nGzg3Vxi6E6ROTaemwY3jH-FwbQjjdKuNmnLsva1Wd4ZYoygkNy2fVTkoHBsSQTbo6wRJwVBHqkUg8JKKYDaOyo6-hxdb65PWqomdulLfZnMost9cBeRTiTkz6hB9qhALi1sX3FJgBcleOlP-vc8G0eVnXhYCiZA4lgESgpWmfmfHecpFdqtaiwBXTer4-K3y5R5ZTRBz7_qKDkpw98UU4rv3_95GiPKaBM8z6c2m3QqiOV9Yf20b9JBBWK9m886SvJ0LqsTA2lgHzyQ_S18h8oyUNoJ8mCFQferDq9g4yIp9rA_hWHOKQi8DPqSMi2ZuayifIO4pwqasiBp88GSQ0KR9o22VGL6KXqz0_o859sTBW2haJL6Hc5qYXGyzL6gsLWEtCo8M4LOu03ii6Qw2P7g3M7TPR27E9sMOZx8sn_lTztDSfBK2Fm6kXU1CQbQHdGj-M9ICNMMhpjqD6MMPtVlAkhoMNMO0BVp8WN8CUduw","requestParameters":{"instanceId":"i-77cae250","attribute":"userData"},"responseElements":null,"requestID":"e9ad9e13-b821-4655-b025-ece75b9f82f0","eventID":"c6cc6589-4aa3-45e3-a646-6a0e3dbc05b6","readOnly":true,"eventType":"AwsApiCall","managementEvent":true,"recipientAccountId":"123837392027","eventCategory":"Management","tlsDetails":{"tlsVersion":"TLSv1.2","cipherSuite":"ECDHE-RSA-AES128-GCM-SHA256","clientProvidedHostHeader":"ec2.us-east-1.amazonaws.com"}},{"eventVersion":"1.08","userIdentity":{"type":"AssumedRole","principalId":"AROATFQR7NSCWCZMFXMXZ:aws-go-sdk-1688990565286187801","arn":"arn:aws:sts::123837392027:assumed-role/stratus-red-team-get-usr-data-role/aws-go-sdk-1688990565286187801","accountId":"123837392027","accessKeyId":"ASIATFQR7NSC2632JLFK","sessionContext":{"sessionIssuer":{"type":"Role","principalId":"AROATFQR7NSCWCZMFXMXZ","arn":"arn:aws:iam::123837392027:role/stratus-red-team-get-usr-data-role","accountId":"123837392027","userName":"stratus-red-team-get-usr-data-role"},"webIdFederationData":{},"attributes":{"creationDate":"2023-07-10T12:02:54Z","mfaAuthenticated":"false"}}},"eventTime":"2023-07-10T12:02:55Z","eventSource":"ec2.amazonaws.com","eventName":"DescribeInstanceAttribute","awsRegion":"us-east-1","sourceIPAddress":"192.168.10.20","userAgent":"stratus-red-team_9cbca289-7886-421c-b241-fcd2b1f14019","errorCode":"Client.UnauthorizedOperation","errorMessage":"You are not authorized to perform this operation. Encoded authorization failure message: mVD27y7FuiKlFK5Gy3SpTIkxdkZWtW5GHOIu8zPnc8movWApFUjaqLd7bR6v7fBbM-8STkVspLscBUw2bTC_jfoYws4OTVeJ6RAr6uTXCfVi0neksIwt5aocrB1Ffpme3LN1W-CVjyDmHdElj9mgThfeQSHKjsSSCDmAKjTqrr9btW7S2K9t5280c5qtU-rBk99BOP_48dXS5Qn7BiCoS2HKo7bC2hr7YDW1OMCPlJiWapF5YuIEO0RZEqL6IDLmR9Y-wQ9O08BmZyJ0p0H_YDp0sEwj4y-oHimGdFJ_ipSTesp1T4_fy6k3J8GSX1TmHWufW8Ms8iHhJdy34B_oweB6Xj66mxx1AM6k0xUFppEPQcompKR9b431fG1ZjENzS7m3mf7hInWuGeAWIg5-YxJ_8Tihgc2bMRE8sruehWgPlHsh7VwEg_sG4tbZauk2OmVOfCHMHNXtHOIDa8jwf5LFU9cu8hgtVKQ7PrXiXuWAj23LbxjbvBdNkNdCGaC1KALd0pdaUWkk3LhuEepK2YsAzQ79xujEouJ_dBx0x9nHOhFLAujKwMYfJpPSt1hkvKUkXC_zsZp7","requestParameters":{"instanceId":"i-0963a2e8","attribute":"userData"},"responseElements":null,"requestID":"78842fae-bba9-4bd0-a369-3de8324e5e49","eventID":"b1866d2a-a46b-4d8e-b3a9-9ccc330f64af","readOnly":true,"eventType":"AwsApiCall","managementEvent":true,"recipientAccountId":"123837392027","eventCategory":"Management","tlsDetails":{"tlsVersion":"TLSv1.2","cipherSuite":"ECDHE-RSA-AES128-GCM-SHA256","clientProvidedHostHeader":"ec2.us-east-1.amazonaws.com"}},{"eventVersion":"1.08","userIdentity":{"type":"AssumedRole","principalId":"AROATFQR7NSCWCZMFXMXZ:aws-go-sdk-1688990565286187801","arn":"arn:aws:sts::123837392027:assumed-role/stratus-red-team-get-usr-data-role/aws-go-sdk-1688990565286187801","accountId":"123837392027","accessKeyId":"ASIATFQR7NSC2632JLFK","sessionContext":{"sessionIssuer":{"type":"Role","principalId":"AROATFQR7NSCWCZMFXMXZ","arn":"arn:aws:iam::123837392027:role/stratus-red-team-get-usr-data-role","accountId":"123837392027","userName":"stratus-red-team-get-usr-data-role"},"webIdFederationData":{},"attributes":{"creationDate":"2023-07-10T12:02:54Z","mfaAuthenticated":"false"}}},"eventTime":"2023-07-10T12:02:56Z","eventSource":"ec2.amazonaws.com","eventName":"DescribeInstanceAttribute","awsRegion":"us-east-1","sourceIPAddress":"192.168.10.20","userAgent":"stratus-red-team_9cbca289-7886-421c-b241-fcd2b1f14019","errorCode":"Client.UnauthorizedOperation","errorMessage":"You are not authorized to perform this operation. Encoded authorization failure message: G-l2CGPK5z0Yfy0LTf-NF8qDwvfW4QUGqMzjSZ-86XndTiC_m4GJv-7asQ7rGt0xoEYZvSRJvM0CbaPQXMtJsjuPFPSn3GA7-J6dmEUPlzEIKP3ghdblXwHvYuaRQcYsUhM8RQeWBmbbJwVAWJ2bAgl0nE5mYR-t-6ul8XM1wCXuGz5KeZGuqGxFiFrKaX_UM1b-3QLdNjgwxwf_ZHeDmYbASQW0gKCLCl2XwERvhxpPYDSau3EUu8I3lpPcC5jnASIIY60swgivSrpdIaWtsSD4WeIEaXM_9s5TLJWDQBlspgQ8BGvzL6rFqfQhljbpREeGorcgL2iIhiVu_xRwemV6hjIK8Pi5t6pfaXVSUS1XtPhxfq7O8vyy49x4f-062rmxLcGs9ivDe_P0LznxLKdOFC7bH066Hytj2UPGom8O9uKYV3BglhNuMRRZHrUfrwhpKdNQSki-iBOzC8ly_-CZ_i1ZR66mJ0murBmZ8-Udc3A7HVynqk-2mZ0ZRbqui77R4YzU1NBjdsCGHBHTon0MnQXm1Bqmc6nEsmd4ubO2guuVRvuhte-PAKgb5lNVl0DKlYBpdydV","requestParameters":{"instanceId":"i-0c40acb1","attribute":"userData"},"responseElements":null,"requestID":"d78693df-9f8e-49ff-b0b0-b152a5c0eda2","eventID":"1ce351c0-4de6-4022-b29c-27280f27e85b","readOnly":true,"eventType":"AwsApiCall","managementEvent":true,"recipientAccountId":"123837392027","eventCategory":"Management","tlsDetails":{"tlsVersion":"TLSv1.2","cipherSuite":"ECDHE-RSA-AES128-GCM-SHA256","clientProvidedHostHeader":"ec2.us-east-1.amazonaws.com"}},{"eventVersion":"1.08","userIdentity":{"type":"AssumedRole","principalId":"AROATFQR7NSCWCZMFXMXZ:aws-go-sdk-1688990565286187801","arn":"arn:aws:sts::123837392027:assumed-role/stratus-red-team-get-usr-data-role/aws-go-sdk-1688990565286187801","accountId":"123837392027","accessKeyId":"ASIATFQR7NSC2632JLFK","sessionContext":{"sessionIssuer":{"type":"Role","principalId":"AROATFQR7NSCWCZMFXMXZ","arn":"arn:aws:iam::123837392027:role/stratus-red-team-get-usr-data-role","accountId":"123837392027","userName":"stratus-red-team-get-usr-data-role"},"webIdFederationData":{},"attributes":{"creationDate":"2023-07-10T12:02:54Z","mfaAuthenticated":"false"}}},"eventTime":"2023-07-10T12:02:56Z","eventSource":"ec2.amazonaws.com","eventName":"DescribeInstanceAttribute","awsRegion":"us-east-1","sourceIPAddress":"192.168.10.20","userAgent":"stratus-red-team_9cbca289-7886-421c-b241-fcd2b1f14019","errorCode":"Client.UnauthorizedOperation","errorMessage":"You are not authorized to perform this operation. Encoded authorization failure message: e6PpCEAGIsQZV27lsPGNCN_WKXdY6BkYn5YEqwYISkvn_4wZFWX1R30mIw92mPjmjl2xmW7FWIPoO-7ILja-mWKvAnWV-hnWdKOlga1jyHps5PoMMq5fwohfXoovbaHahIvIS0qx35Mg_jCL3_sdhNuJoPwmvs6oJefm2tpRWDlQyPM6KK3G8hXXkeBTEUT6Rgye7oxDVwRcCbXfBmILIXtoo1ahQJ8xy1MGZKEIMcb1sqqpP3yl1vNjkAInOqQMEN5iCdir7vOO4QEQax3YWsrgQy8r9KcYVz8rWsbOPrOVKc1xog7q6IOKIOb7avumPSMv1eGxG8AfgsqGdtN0af9Ro5mgvsucvlrxzpT5Hwlm1E2N51c1pTjsf2kvPBXInKt0DvUNPJwmWP7ue73TuKD2OjCPSLA7DDqDuhvS50aHi7J2-rKkWKmBOO0qtlcihe3Wg01tL3e_ny7RCqmBhbVAWrfdgBgaWQUID0WGKA3GbtsouFE9gDaXlyflQKcwCatCCViiAp0nW_QVbiBiuaTJcHdS_ynlxA4rAfnCijIrUYelJ-jVXWVoUMhIyEGOPt7gwLDb0RrV","requestParameters":{"instanceId":"i-7a1dfe61","attribute":"userData"},"responseElements":null,"requestID":"e15224fd-a00e-4950-890b-3049767ae9fe","eventID":"339403fe-d01e-4fb2-ab9a-ffa78e576876","readOnly":true,"eventType":"AwsApiCall","managementEvent":true,"recipientAccountId":"123837392027","eventCategory":"Management","tlsDetails":{"tlsVersion":"TLSv1.2","cipherSuite":"ECDHE-RSA-AES128-GCM-SHA256","clientProvidedHostHeader":"ec2.us-east-1.amazonaws.com"}},{"eventVersion":"1.08","userIdentity":{"type":"IAMUser","principalId":"AIDATFQR7NSC5AU2ZV3IE","arn":"arn:aws:iam::123837392027:user/bert-jan","accountId":"123837392027","accessKeyId":"AKIATFQR7NSC8Q4X20BJ","userName":"bert-jan"},"eventTime":"2023-07-10T12:03:23Z","eventSource":"ec2.amazonaws.com","eventName":"DescribeNatGateways","awsRegion":"us-east-1","sourceIPAddress":"192.168.10.20","userAgent":"APN/1.0 HashiCorp/1.0 Terraform/1.1.2 (+https://www.terraform.io) terraform-provider-aws/3.76.1 (+https://registry.terraform.io/providers/hashicorp/aws) aws-sdk-go/1.44.157 (go1.19.3; linux; amd64) stratus-red-team_3a63b39c-6bcc-408c-a49e-7dfd92c3ef20 HashiCorp-terraform-exec/0.17.3","requestParameters":{"DescribeNatGatewaysRequest":{"NatGatewayId":{"tag":1,"content":"nat-0dd264ee104155137"}}},"responseElements":null,"requestID":"eed14e24-412a-47b2-bd87-deba9233f79f","eventID":"eb939b65-3c42-4a9d-9d89-7b0c6dc5aa31","readOnly":true,"eventType":"AwsApiCall","managementEvent":true,"recipientAccountId":"123837392027","eventCategory":"Management","tlsDetails":{"tlsVersion":"TLSv1.2","cipherSuite":"ECDHE-RSA-AES128-GCM-SHA256","clientProvidedHostHeader":"ec2.us-east-1.amazonaws.com"}},{"eventVersion":"1.08","userIdentity":{"type":"IAMUser","principalId":"AIDATFQR7NSC5AU2ZV3IE","arn":"arn:aws:iam::123837392027:user/bert-jan","accountId":"123837392027","accessKeyId":"AKIATFQR7NSC8Q4X20BJ","userName":"bert-jan"},"eventTime":"2023-07-10T12:03:19Z","eventSource":"ec2.amazonaws.com","eventName":"DescribeNetworkInterfaces","awsRegion":"us-east-1","sourceIPAddress":"192.168.10.20","userAgent":"APN/1.0 HashiCorp/1.0 Terraform/1.1.2 (+https://www.terraform.io) terraform-provider-aws/3.76.1 (+https://registry.terraform.io/providers/hashicorp/aws) aws-sdk-go/1.44.157 (go1.19.3; linux; amd64) stratus-red-team_3a63b39c-6bcc-408c-a49e-7dfd92c3ef20 HashiCorp-terraform-exec/0.17.3","requestParameters":{"networkInterfaceIdSet":{"items":[{"networkInterfaceId":"eni-06b7a305fe9519d03"}]},"filterSet":{}},"responseElements":null,"requestID":"9797a430-58c2-44a7-b1fa-077a43063f67","eventID":"494d94aa-a4ba-4eb6-a76b-3d9ed3e5bc95","readOnly":true,"eventType":"AwsApiCall","managementEvent":true,"recipientAccountId":"123837392027","eventCategory":"Management","tlsDetails":{"tlsVersion":"TLSv1.2","cipherSuite":"ECDHE-RSA-AES128-GCM-SHA256","clientProvidedHostHeader":"ec2.us-east-1.amazonaws.com"}},{"eventVersion":"1.08","userIdentity":{"type":"IAMUser","principalId":"AIDATFQR7NSC5AU2ZV3IE","arn":"arn:aws:iam::123837392027:user/bert-jan","accountId":"123837392027","accessKeyId":"AKIATFQR7NSC8Q4X20BJ","userName":"bert-jan"},"eventTime":"2023-07-10T12:03:33Z","eventSource":"ec2.amazonaws.com","eventName":"DescribeNatGateways","awsRegion":"us-east-1","sourceIPAddress":"192.168.10.20","userAgent":"APN/1.0 HashiCorp/1.0 Terraform/1.1.2 (+https://www.terraform.io) terraform-provider-aws/3.76.1 (+https://registry.terraform.io/providers/hashicorp/aws) aws-sdk-go/1.44.157 (go1.19.3; linux; amd64) stratus-red-team_3a63b39c-6bcc-408c-a49e-7dfd92c3ef20 HashiCorp-terraform-exec/0.17.3","requestParameters":{"DescribeNatGatewaysRequest":{"NatGatewayId":{"tag":1,"content":"nat-0dd264ee104155137"}}},"responseElements":null,"requestID":"9f4b45df-ae88-4c46-91fa-603707b39825","eventID":"37ec6913-7e68-448e-8923-388b75eba9e9","readOnly":true,"eventType":"AwsApiCall","managementEvent":true,"recipientAccountId":"123837392027","eventCategory":"Management","tlsDetails":{"tlsVersion":"TLSv1.2","cipherSuite":"ECDHE-RSA-AES128-GCM-SHA256","clientProvidedHostHeader":"ec2.us-east-1.amazonaws.com"}},{"eventVersion":"1.08","userIdentity":{"type":"IAMUser","principalId":"AIDATFQR7NSC5AU2ZV3IE","arn":"arn:aws:iam::123837392027:user/bert-jan","accountId":"123837392027","accessKeyId":"AKIATFQR7NSC8Q4X20BJ","userName":"bert-jan"},"eventTime":"2023-07-10T12:03:18Z","eventSource":"ec2.amazonaws.com","eventName":"CreateNatGateway","awsRegion":"us-east-1","sourceIPAddress":"192.168.10.20","userAgent":"APN/1.0 HashiCorp/1.0 Terraform/1.1.2 (+https://www.terraform.io) terraform-provider-aws/3.76.1 (+https://registry.terraform.io/providers/hashicorp/aws) aws-sdk-go/1.44.157 (go1.19.3; linux; amd64) stratus-red-team_3a63b39c-6bcc-408c-a49e-7dfd92c3ef20 HashiCorp-terraform-exec/0.17.3","requestParameters":{"CreateNatGatewayRequest":{"ConnectivityType":"public","AllocationId":"eipalloc-04cbfdaf4b48e92d5","SubnetId":"subnet-0afaf7ba0564cac3a","ClientToken":"D9759983-1D94-463A-B3DC-867C6793D8B0","TagSpecification":{"ResourceType":"natgateway","tag":1,"Tag":[{"Value":true,"tag":1,"Key":"StratusRedTeam"},{"Value":"stratus-red-team-ec2-enumerate-vpc-us-east-1a","tag":2,"Key":"Name"}]}}},"responseElements":{"CreateNatGatewayResponse":{"xmlns":"http://ec2.amazonaws.com/doc/2016-11-15/","natGateway":{"connectivityType":"public","subnetId":"subnet-0afaf7ba0564cac3a","tagSet":{"item":[{"value":true,"key":"StratusRedTeam"},{"value":"stratus-red-team-ec2-enumerate-vpc-us-east-1a","key":"Name"}]},"natGatewayAddressSet":{"item":{"isPrimary":true,"allocationId":"eipalloc-04cbfdaf4b48e92d5","status":"associating"}},"createTime":"2023-07-10T12:03:18.000Z","vpcId":"vpc-04ae35a334cd7ef4f","natGatewayId":"nat-0dd264ee104155137","state":"pending"},"requestId":"5110ed83-ea28-4851-ade3-3bbbe6c20cc1","clientToken":"D9759983-1D94-463A-B3DC-867C6793D8B0"}},"requestID":"5110ed83-ea28-4851-ade3-3bbbe6c20cc1","eventID":"f94192be-ac87-46a2-9b88-ffb245b37ec6","readOnly":false,"eventType":"AwsApiCall","managementEvent":true,"recipientAccountId":"123837392027","eventCategory":"Management","tlsDetails":{"tlsVersion":"TLSv1.2","cipherSuite":"ECDHE-RSA-AES128-GCM-SHA256","clientProvidedHostHeader":"ec2.us-east-1.amazonaws.com"}},{"eventVersion":"1.08","userIdentity":{"type":"IAMUser","principalId":"AIDATFQR7NSC5AU2ZV3IE","arn":"arn:aws:iam::123837392027:user/bert-jan","accountId":"123837392027","accessKeyId":"AKIATFQR7NSC8Q4X20BJ","userName":"bert-jan"},"eventTime":"2023-07-10T12:03:18Z","eventSource":"ec2.amazonaws.com","eventName":"DescribeNetworkInterfaces","awsRegion":"us-east-1","sourceIPAddress":"192.168.10.20","userAgent":"APN/1.0 HashiCorp/1.0 Terraform/1.1.2 (+https://www.terraform.io) terraform-provider-aws/3.76.1 (+https://registry.terraform.io/providers/hashicorp/aws) aws-sdk-go/1.44.157 (go1.19.3; linux; amd64) stratus-red-team_3a63b39c-6bcc-408c-a49e-7dfd92c3ef20 HashiCorp-terraform-exec/0.17.3","requestParameters":{"networkInterfaceIdSet":{"items":[{"networkInterfaceId":"eni-06b7a305fe9519d03"}]},"filterSet":{}},"responseElements":null,"requestID":"4ec39b4b-8cad-411b-8b37-594891f010df","eventID":"cb41f794-de6b-4580-b86d-48a87da8b703","readOnly":true,"eventType":"AwsApiCall","managementEvent":true,"recipientAccountId":"123837392027","eventCategory":"Management","tlsDetails":{"tlsVersion":"TLSv1.2","cipherSuite":"ECDHE-RSA-AES128-GCM-SHA256","clientProvidedHostHeader":"ec2.us-east-1.amazonaws.com"}},{"eventVersion":"1.08","userIdentity":{"type":"IAMUser","principalId":"AIDATFQR7NSC5AU2ZV3IE","arn":"arn:aws:iam::123837392027:user/bert-jan","accountId":"123837392027","accessKeyId":"AKIATFQR7NSC8Q4X20BJ","userName":"bert-jan"},"eventTime":"2023-07-10T12:03:35Z","eventSource":"ec2.amazonaws.com","eventName":"DescribeTags","awsRegion":"us-east-1","sourceIPAddress":"192.168.10.20","userAgent":"APN/1.0 HashiCorp/1.0 Terraform/1.1.2 (+https://www.terraform.io) terraform-provider-aws/3.76.1 (+https://registry.terraform.io/providers/hashicorp/aws) aws-sdk-go/1.44.157 (go1.19.3; linux; amd64) stratus-red-team_3a63b39c-6bcc-408c-a49e-7dfd92c3ef20 HashiCorp-terraform-exec/0.17.3","requestParameters":{"filterSet":{"items":[{"name":"resource-id","valueSet":{"items":[{"value":"i-05c30218156bcc246"}]}},{"name":"key","valueSet":{"items":[{"value":"aws:ec2launchtemplate:id"}]}}]}},"responseElements":null,"requestID":"5181dacc-8cce-43a9-bc01-272ef51024d6","eventID":"b3500cc3-417a-4ec8-9886-f090351a4d52","readOnly":true,"eventType":"AwsApiCall","managementEvent":true,"recipientAccountId":"123837392027","eventCategory":"Management","tlsDetails":{"tlsVersion":"TLSv1.2","cipherSuite":"ECDHE-RSA-AES128-GCM-SHA256","clientProvidedHostHeader":"ec2.us-east-1.amazonaws.com"}}]}