Findings

Disabling the key makes the existing log files unreadable now. A deletion that runs its course makes them unreadable permanently, without a single log file being touched. Trail KMS key disabled or scheduled for deletion on generated-workload-51 in us-west-2 (account 123456789012): first seen 177 days ago and still present on the run that wrote this board; the weak set grew from 3 to 5 between the two runs, and none of the new members is covered by an allowlist entry.V-002 · f/DArBrzYvAq · e/CDEFGHJKLMNP e/KLMNPQRSTUVW e/STUVWXYZabcd +7

Disabling the key makes the existing log files unreadable now. A deletion that runs its course makes them unreadable permanently, without a single log file being touched. Trail KMS key disabled or scheduled for deletion on generated-workload-91 in us-west-2 (account 234567890123): first seen 97 days ago and still present on the run that wrote this board; the weak set grew from 3 to 5 between the two runs, and none of the new members is covered by an allowlist entry.V-002 · f/63pnVoyK9k · e/CDEFGHJKLMNP e/KLMNPQRSTUVW e/STUVWXYZabcd +2

Disabling the key makes the existing log files unreadable now. A deletion that runs its course makes them unreadable permanently, without a single log file being touched. Trail KMS key disabled or scheduled for deletion on generated-workload-11 in us-west-2 (account 345678901234): first seen 77 days ago and still present on the run that wrote this board; the weak set grew from 3 to 5 between the two runs, and none of the new members is covered by an allowlist entry.V-002 · f/BTsLef3kEm · e/CDEFGHJKLMNP e/KLMNPQRSTUVW e/STUVWXYZabcd +3

Disabling the key makes the existing log files unreadable now. A deletion that runs its course makes them unreadable permanently, without a single log file being touched. OIDC provider client id added on generated-workload-75 in us-east-1 (account 123456789012): first seen 165 days ago and still present on the run that wrote this board; the weak set grew from 3 to 5 between the two runs, and none of the new members is covered by an allowlist entry.V-009 · f/7SkpPP2J2i · e/cdefghijkmno e/3456789ABCDE e/ABCDEFGHJKLM +4

Disabling the key makes the existing log files unreadable now. A deletion that runs its course makes them unreadable permanently, without a single log file being touched. OIDC provider client id added on generated-workload-115 in us-east-1 (account 234567890123): first seen 85 days ago and still present on the run that wrote this board; the weak set grew from 3 to 5 between the two runs, and none of the new members is covered by an allowlist entry.V-009 · f/ujyUkbdM7A · e/cdefghijkmno e/3456789ABCDE e/ABCDEFGHJKLM +8

Disabling the key makes the existing log files unreadable now. A deletion that runs its course makes them unreadable permanently, without a single log file being touched. OIDC provider client id added on generated-workload-35 in us-east-1 (account 345678901234): first seen 65 days ago and still present on the run that wrote this board; the weak set grew from 3 to 5 between the two runs, and none of the new members is covered by an allowlist entry.V-009 · f/6cMXScTxyH · e/cdefghijkmno e/3456789ABCDE e/ABCDEFGHJKLM +9

Disabling the key makes the existing log files unreadable now. A deletion that runs its course makes them unreadable permanently, without a single log file being touched. Access key minted on another user on generated-workload-43 in eu-central-1 (account 234567890123): first seen 121 days ago and still present on the run that wrote this board; the weak set grew from 3 to 5 between the two runs, and none of the new members is covered by an allowlist entry.V-004 · f/9arjj6K8xM · e/456789ABCDEF e/BCDEFGHJKLMN e/JKLMNPQRSTUV +8

Disabling the key makes the existing log files unreadable now. A deletion that runs its course makes them unreadable permanently, without a single log file being touched. Access key minted on another user on generated-workload-83 in eu-central-1 (account 345678901234): first seen 41 days ago and still present on the run that wrote this board; the weak set grew from 3 to 5 between the two runs, and none of the new members is covered by an allowlist entry.V-004 · f/B1xDU9W4A4 · e/456789ABCDEF e/BCDEFGHJKLMN e/JKLMNPQRSTUV +3

Disabling the key makes the existing log files unreadable now. A deletion that runs its course makes them unreadable permanently, without a single log file being touched. Access key minted on another user on generated-workload-3 in eu-central-1 (account 123456789012): first seen 21 days ago and still present on the run that wrote this board; the weak set grew from 3 to 5 between the two runs, and none of the new members is covered by an allowlist entry.V-004 · f/E7Xtx9Cehz · e/456789ABCDEF e/BCDEFGHJKLMN e/JKLMNPQRSTUV +4

Disabling the key makes the existing log files unreadable now. A deletion that runs its course makes them unreadable permanently, without a single log file being touched. Access entry created or widened by a deployer identity on generated-workload-67 in eu-west-1 (account 234567890123): first seen 109 days ago and still present on the run that wrote this board; the weak set grew from 3 to 5 between the two runs, and none of the new members is covered by an allowlist entry.V-012 · f/3uJGX4cQuf · e/UVWXYZabcdef e/bcdefghijkmn e/23456789ABCD +5

Disabling the key makes the existing log files unreadable now. A deletion that runs its course makes them unreadable permanently, without a single log file being touched. Access entry created or widened by a deployer identity on generated-workload-107 in eu-west-1 (account 345678901234): first seen 29 days ago and still present on the run that wrote this board; the weak set grew from 3 to 5 between the two runs, and none of the new members is covered by an allowlist entry.V-012 · f/FmBdAo1r9B · e/UVWXYZabcdef e/bcdefghijkmn e/23456789ABCD +9

Disabling the key makes the existing log files unreadable now. A deletion that runs its course makes them unreadable permanently, without a single log file being touched. Access entry created or widened by a deployer identity on generated-workload-27 in eu-west-1 (account 123456789012): first seen 9 days ago and still present on the run that wrote this board; the weak set grew from 3 to 5 between the two runs, and none of the new members is covered by an allowlist entry.V-012 · f/2fmt3vedCj · e/UVWXYZabcdef e/bcdefghijkmn e/23456789ABCD +1

Disabling the key makes the existing log files unreadable now. A deletion that runs its course makes them unreadable permanently, without a single log file being touched. Console login without MFA on generated-workload-99 in ap-southeast-1 (account 123456789012): first seen 153 days ago and still present on the run that wrote this board; the weak set grew from 3 to 5 between the two runs, and none of the new members is covered by an allowlist entry.V-022 · f/FQqkPQgVGk · e/LMNPQRSTUVWX e/TUVWXYZabcde e/abcdefghijkm +1

Disabling the key makes the existing log files unreadable now. A deletion that runs its course makes them unreadable permanently, without a single log file being touched. Console login without MFA on generated-workload-19 in ap-southeast-1 (account 234567890123): first seen 133 days ago and still present on the run that wrote this board; the weak set grew from 3 to 5 between the two runs, and none of the new members is covered by an allowlist entry.V-022 · f/62BKeBazBe · e/LMNPQRSTUVWX e/TUVWXYZabcde e/abcdefghijkm +2

Disabling the key makes the existing log files unreadable now. A deletion that runs its course makes them unreadable permanently, without a single log file being touched. Console login without MFA on generated-workload-59 in ap-southeast-1 (account 345678901234): first seen 53 days ago and still present on the run that wrote this board; the weak set grew from 3 to 5 between the two runs, and none of the new members is covered by an allowlist entry.V-022 · f/Ga5RWkJjqP · e/LMNPQRSTUVWX e/TUVWXYZabcde e/abcdefghijkm +6