Findings

Disabling the key makes the existing log files unreadable now. A deletion that runs its course makes them unreadable permanently, without a single log file being touched. Default policy version changed on an attached policy by a non-deployer on generated-workload-32 in eu-west-1 (account 345678901234): first seen 44 days ago and still present on the run that wrote this board; the weak set grew from 0 to 2 between the two runs, and none of the new members is covered by an allowlist entry.V-003 · f/GP1E5CpqsD · e/Zabcdefghijk e/ghijkmnopqrs e/789ABCDEFGHJ +6

Disabling the key makes the existing log files unreadable now. A deletion that runs its course makes them unreadable permanently, without a single log file being touched. Default policy version changed on an attached policy by a non-deployer on generated-workload-102 in eu-west-1 (account 123456789012): first seen 174 days ago and still present on the run that wrote this board; the weak set grew from 2 to 4 between the two runs, and none of the new members is covered by an allowlist entry.V-003 · f/TXXFKFQSDR · e/PQRSTUVWXYZa e/WXYZabcdefgh e/defghijkmnop +4

Disabling the key makes the existing log files unreadable now. A deletion that runs its course makes them unreadable permanently, without a single log file being touched. Default policy version changed on an attached policy by a non-deployer on generated-workload-22 in eu-west-1 (account 234567890123): first seen 154 days ago and still present on the run that wrote this board; the weak set grew from 2 to 4 between the two runs, and none of the new members is covered by an allowlist entry.V-003 · f/DVL5oUvKVV · e/PQRSTUVWXYZa e/WXYZabcdefgh e/defghijkmnop +5

Disabling the key makes the existing log files unreadable now. A deletion that runs its course makes them unreadable permanently, without a single log file being touched. Default policy version changed on an attached policy by a non-deployer on generated-workload-72 in eu-west-1 (account 123456789012): first seen 144 days ago and still present on the run that wrote this board; the weak set grew from 0 to 2 between the two runs, and none of the new members is covered by an allowlist entry.V-003 · f/7X3QLtQoNy · e/Zabcdefghijk e/ghijkmnopqrs e/789ABCDEFGHJ +1

Disabling the key makes the existing log files unreadable now. A deletion that runs its course makes them unreadable permanently, without a single log file being touched. Default policy version changed on an attached policy by a non-deployer on generated-workload-42 in eu-west-1 (account 123456789012): first seen 114 days ago and still present on the run that wrote this board; the weak set grew from 2 to 4 between the two runs, and none of the new members is covered by an allowlist entry.V-003 · f/G4XRD56Ufj · e/3456789ABCDE e/ABCDEFGHJKLM e/HJKLMNPQRSTU +7

Disabling the key makes the existing log files unreadable now. A deletion that runs its course makes them unreadable permanently, without a single log file being touched. Default policy version changed on an attached policy by a non-deployer on generated-workload-62 in eu-west-1 (account 345678901234): first seen 74 days ago and still present on the run that wrote this board; the weak set grew from 2 to 4 between the two runs, and none of the new members is covered by an allowlist entry.V-003 · f/DgDRrFHxud · e/PQRSTUVWXYZa e/WXYZabcdefgh e/defghijkmnop +9

Disabling the key makes the existing log files unreadable now. A deletion that runs its course makes them unreadable permanently, without a single log file being touched. Default policy version changed on an attached policy by a non-deployer on generated-workload-112 in eu-west-1 (account 234567890123): first seen 64 days ago and still present on the run that wrote this board; the weak set grew from 0 to 2 between the two runs, and none of the new members is covered by an allowlist entry.V-003 · f/5s1aU9pWLu · e/Zabcdefghijk e/ghijkmnopqrs e/789ABCDEFGHJ +5

Disabling the key makes the existing log files unreadable now. A deletion that runs its course makes them unreadable permanently, without a single log file being touched. Default policy version changed on an attached policy by a non-deployer on generated-workload-82 in eu-west-1 (account 234567890123): first seen 34 days ago and still present on the run that wrote this board; the weak set grew from 2 to 4 between the two runs, and none of the new members is covered by an allowlist entry.V-003 · f/6tvoDDpoWT · e/3456789ABCDE e/ABCDEFGHJKLM e/HJKLMNPQRSTU +2

Disabling the key makes the existing log files unreadable now. A deletion that runs its course makes them unreadable permanently, without a single log file being touched. Default policy version changed on an attached policy by a non-deployer on generated-workload-2 in eu-west-1 (account 345678901234): first seen 14 days ago and still present on the run that wrote this board; the weak set grew from 2 to 4 between the two runs, and none of the new members is covered by an allowlist entry.V-003 · f/5Ynpo3N41f · e/3456789ABCDE e/ABCDEFGHJKLM e/HJKLMNPQRSTU +3

Disabling the key makes the existing log files unreadable now. A deletion that runs its course makes them unreadable permanently, without a single log file being touched. Default policy version changed on an attached policy by a non-deployer on generated-workload-92 in eu-west-1 (account 345678901234): first seen 104 days ago and still present on the run that wrote this board; the weak set grew from 0 to 2 between the two runs, and none of the new members is covered by an allowlist entry.V-003 · f/2VG3MsB7GC · e/DEFGHJKLMNPQ e/LMNPQRSTUVWX e/TUVWXYZabcde +3

Disabling the key makes the existing log files unreadable now. A deletion that runs its course makes them unreadable permanently, without a single log file being touched. Default policy version changed on an attached policy by a non-deployer on generated-workload-12 in eu-west-1 (account 123456789012): first seen 84 days ago and still present on the run that wrote this board; the weak set grew from 0 to 2 between the two runs, and none of the new members is covered by an allowlist entry.V-003 · f/H2nPpcxPT7 · e/DEFGHJKLMNPQ e/LMNPQRSTUVWX e/TUVWXYZabcde +4

Disabling the key makes the existing log files unreadable now. A deletion that runs its course makes them unreadable permanently, without a single log file being touched. Default policy version changed on an attached policy by a non-deployer on generated-workload-52 in eu-west-1 (account 234567890123): first seen 4 days ago and still present on the run that wrote this board; the weak set grew from 0 to 2 between the two runs, and none of the new members is covered by an allowlist entry.V-003 · f/2LRiP945Ug · e/DEFGHJKLMNPQ e/LMNPQRSTUVWX e/TUVWXYZabcde +8

Disabling the key makes the existing log files unreadable now. A deletion that runs its course makes them unreadable permanently, without a single log file being touched. Root account used on generated-workload-40 in us-east-1 (account 234567890123): first seen 100 days ago and still present on the run that wrote this board; the weak set grew from 0 to 2 between the two runs, and none of the new members is covered by an allowlist entry.V-001 · f/ArnVq4KxdQ · e/123456789ABC e/89ABCDEFGHJK e/FGHJKLMNPQRS +5

Disabling the key makes the existing log files unreadable now. A deletion that runs its course makes them unreadable permanently, without a single log file being touched. Root account used on generated-workload-0 in us-east-1 (account 123456789012): first seen 0 days ago and still present on the run that wrote this board; the weak set grew from 0 to 2 between the two runs, and none of the new members is covered by an allowlist entry.V-001 · f/A4kqZHhQXj · e/123456789ABC e/89ABCDEFGHJK e/FGHJKLMNPQRS +1

Disabling the key makes the existing log files unreadable now. A deletion that runs its course makes them unreadable permanently, without a single log file being touched. Root account used on generated-workload-50 in us-east-1 (account 345678901234): first seen 170 days ago and still present on the run that wrote this board; the weak set grew from 2 to 4 between the two runs, and none of the new members is covered by an allowlist entry.V-001 · f/FPMdGUXNkM · e/BCDEFGHJKLMN e/JKLMNPQRSTUV e/RSTUVWXYZabc +6

Disabling the key makes the existing log files unreadable now. A deletion that runs its course makes them unreadable permanently, without a single log file being touched. Root account used on generated-workload-70 in us-east-1 (account 234567890123): first seen 130 days ago and still present on the run that wrote this board; the weak set grew from 2 to 4 between the two runs, and none of the new members is covered by an allowlist entry.V-001 · f/DBnxaMaLQP · e/XYZabcdefghi e/efghijkmnopq e/56789ABCDEFG +8

Disabling the key makes the existing log files unreadable now. A deletion that runs its course makes them unreadable permanently, without a single log file being touched. Root account used on generated-workload-90 in us-east-1 (account 123456789012): first seen 90 days ago and still present on the run that wrote this board; the weak set grew from 2 to 4 between the two runs, and none of the new members is covered by an allowlist entry.V-001 · f/DfdL2AHeme · e/BCDEFGHJKLMN e/JKLMNPQRSTUV e/RSTUVWXYZabc +1

Disabling the key makes the existing log files unreadable now. A deletion that runs its course makes them unreadable permanently, without a single log file being touched. Root account used on generated-workload-10 in us-east-1 (account 234567890123): first seen 70 days ago and still present on the run that wrote this board; the weak set grew from 2 to 4 between the two runs, and none of the new members is covered by an allowlist entry.V-001 · f/9BQ7kMQMV8 · e/BCDEFGHJKLMN e/JKLMNPQRSTUV e/RSTUVWXYZabc +2

Disabling the key makes the existing log files unreadable now. A deletion that runs its course makes them unreadable permanently, without a single log file being touched. Root account used on generated-workload-110 in us-east-1 (account 345678901234): first seen 50 days ago and still present on the run that wrote this board; the weak set grew from 2 to 4 between the two runs, and none of the new members is covered by an allowlist entry.V-001 · f/AoVegcFput · e/XYZabcdefghi e/efghijkmnopq e/56789ABCDEFG +3

Disabling the key makes the existing log files unreadable now. A deletion that runs its course makes them unreadable permanently, without a single log file being touched. Root account used on generated-workload-30 in us-east-1 (account 123456789012): first seen 30 days ago and still present on the run that wrote this board; the weak set grew from 2 to 4 between the two runs, and none of the new members is covered by an allowlist entry.V-001 · f/5uhB1vwvc2 · e/XYZabcdefghi e/efghijkmnopq e/56789ABCDEFG +4

Disabling the key makes the existing log files unreadable now. A deletion that runs its course makes them unreadable permanently, without a single log file being touched. Root account used on generated-workload-80 in us-east-1 (account 345678901234): first seen 20 days ago and still present on the run that wrote this board; the weak set grew from 0 to 2 between the two runs, and none of the new members is covered by an allowlist entry.V-001 · f/8MB3yj9q2u · e/123456789ABC e/89ABCDEFGHJK e/FGHJKLMNPQRS +9

Disabling the key makes the existing log files unreadable now. A deletion that runs its course makes them unreadable permanently, without a single log file being touched. Root account used on generated-workload-100 in us-east-1 (account 234567890123): first seen 160 days ago and still present on the run that wrote this board; the weak set grew from 0 to 2 between the two runs, and none of the new members is covered by an allowlist entry.V-001 · f/9zRn53YkWH · e/MNPQRSTUVWXY e/UVWXYZabcdef e/bcdefghijkmn +2

Disabling the key makes the existing log files unreadable now. A deletion that runs its course makes them unreadable permanently, without a single log file being touched. Root account used on generated-workload-20 in us-east-1 (account 345678901234): first seen 140 days ago and still present on the run that wrote this board; the weak set grew from 0 to 2 between the two runs, and none of the new members is covered by an allowlist entry.V-001 · f/BvuA23pvFc · e/MNPQRSTUVWXY e/UVWXYZabcdef e/bcdefghijkmn +3

Disabling the key makes the existing log files unreadable now. A deletion that runs its course makes them unreadable permanently, without a single log file being touched. Root account used on generated-workload-60 in us-east-1 (account 123456789012): first seen 60 days ago and still present on the run that wrote this board; the weak set grew from 0 to 2 between the two runs, and none of the new members is covered by an allowlist entry.V-001 · f/EZaYZ4FN6u · e/MNPQRSTUVWXY e/UVWXYZabcdef e/bcdefghijkmn +7

observed on synthetic accountsV-004 · f/5VA7vrDB4E · t/4b1c9e0a-1234-4abc-8def-0123456789ab

Disabling the key makes the existing log files unreadable now. A deletion that runs its course makes them unreadable permanently, without a single log file being touched. Access key minted on another user on generated-workload-23 in eu-central-1 (account 345678901234): first seen 161 days ago and still present on the run that wrote this board; the weak set grew from 3 to 5 between the two runs, and none of the new members is covered by an allowlist entry.V-004 · f/95WftKfNAF · e/QRSTUVWXYZab e/XYZabcdefghi e/efghijkmnopq +6

Disabling the key makes the existing log files unreadable now. A deletion that runs its course makes them unreadable permanently, without a single log file being touched. Access key minted on another user on generated-workload-73 in eu-central-1 (account 234567890123): first seen 151 days ago and still present on the run that wrote this board; the weak set grew from 1 to 3 between the two runs, and none of the new members is covered by an allowlist entry.V-004 · f/CFXkn5tQvF · e/abcdefghijkm e/123456789ABC e/89ABCDEFGHJK +2

Disabling the key makes the existing log files unreadable now. A deletion that runs its course makes them unreadable permanently, without a single log file being touched. Access key minted on another user on generated-workload-63 in eu-central-1 (account 123456789012): first seen 81 days ago and still present on the run that wrote this board; the weak set grew from 3 to 5 between the two runs, and none of the new members is covered by an allowlist entry.V-004 · f/AgFoTMag59 · e/QRSTUVWXYZab e/XYZabcdefghi e/efghijkmnopq +1

Disabling the key makes the existing log files unreadable now. A deletion that runs its course makes them unreadable permanently, without a single log file being touched. Access key minted on another user on generated-workload-113 in eu-central-1 (account 345678901234): first seen 71 days ago and still present on the run that wrote this board; the weak set grew from 1 to 3 between the two runs, and none of the new members is covered by an allowlist entry.V-004 · f/F4sHUGvTHN · e/abcdefghijkm e/123456789ABC e/89ABCDEFGHJK +6

Disabling the key makes the existing log files unreadable now. A deletion that runs its course makes them unreadable permanently, without a single log file being touched. Access key minted on another user on generated-workload-33 in eu-central-1 (account 123456789012): first seen 51 days ago and still present on the run that wrote this board; the weak set grew from 1 to 3 between the two runs, and none of the new members is covered by an allowlist entry.V-004 · f/GfmbB7AHbU · e/abcdefghijkm e/123456789ABC e/89ABCDEFGHJK +7

Disabling the key makes the existing log files unreadable now. A deletion that runs its course makes them unreadable permanently, without a single log file being touched. Access key minted on another user on generated-workload-103 in eu-central-1 (account 234567890123): first seen 1 days ago and still present on the run that wrote this board; the weak set grew from 3 to 5 between the two runs, and none of the new members is covered by an allowlist entry.V-004 · f/7rNaK68Eqg · e/QRSTUVWXYZab e/XYZabcdefghi e/efghijkmnopq +5

Disabling the key makes the existing log files unreadable now. A deletion that runs its course makes them unreadable permanently, without a single log file being touched. Access key minted on another user on generated-workload-43 in eu-central-1 (account 234567890123): first seen 121 days ago and still present on the run that wrote this board; the weak set grew from 3 to 5 between the two runs, and none of the new members is covered by an allowlist entry.V-004 · f/9arjj6K8xM · e/456789ABCDEF e/BCDEFGHJKLMN e/JKLMNPQRSTUV +8

Disabling the key makes the existing log files unreadable now. A deletion that runs its course makes them unreadable permanently, without a single log file being touched. Access key minted on another user on generated-workload-83 in eu-central-1 (account 345678901234): first seen 41 days ago and still present on the run that wrote this board; the weak set grew from 3 to 5 between the two runs, and none of the new members is covered by an allowlist entry.V-004 · f/B1xDU9W4A4 · e/456789ABCDEF e/BCDEFGHJKLMN e/JKLMNPQRSTUV +3

Disabling the key makes the existing log files unreadable now. A deletion that runs its course makes them unreadable permanently, without a single log file being touched. Access key minted on another user on generated-workload-3 in eu-central-1 (account 123456789012): first seen 21 days ago and still present on the run that wrote this board; the weak set grew from 3 to 5 between the two runs, and none of the new members is covered by an allowlist entry.V-004 · f/E7Xtx9Cehz · e/456789ABCDEF e/BCDEFGHJKLMN e/JKLMNPQRSTUV +4

Disabling the key makes the existing log files unreadable now. A deletion that runs its course makes them unreadable permanently, without a single log file being touched. Access key minted on another user on generated-workload-93 in eu-central-1 (account 123456789012): first seen 111 days ago and still present on the run that wrote this board; the weak set grew from 1 to 3 between the two runs, and none of the new members is covered by an allowlist entry.V-004 · f/GMskVvih1C · e/EFGHJKLMNPQR e/MNPQRSTUVWXY e/UVWXYZabcdef +4

Disabling the key makes the existing log files unreadable now. A deletion that runs its course makes them unreadable permanently, without a single log file being touched. Access key minted on another user on generated-workload-13 in eu-central-1 (account 234567890123): first seen 91 days ago and still present on the run that wrote this board; the weak set grew from 1 to 3 between the two runs, and none of the new members is covered by an allowlist entry.V-004 · f/7fz68kAfKY · e/EFGHJKLMNPQR e/MNPQRSTUVWXY e/UVWXYZabcdef +5

Disabling the key makes the existing log files unreadable now. A deletion that runs its course makes them unreadable permanently, without a single log file being touched. Access key minted on another user on generated-workload-53 in eu-central-1 (account 345678901234): first seen 11 days ago and still present on the run that wrote this board; the weak set grew from 1 to 3 between the two runs, and none of the new members is covered by an allowlist entry.V-004 · f/FMc9nYTPDJ · e/EFGHJKLMNPQR e/MNPQRSTUVWXY e/UVWXYZabcdef +9

Disabling the key makes the existing log files unreadable now. A deletion that runs its course makes them unreadable permanently, without a single log file being touched. AMI shared publicly on generated-workload-24 in ap-southeast-1 (account 123456789012): first seen 168 days ago and still present on the run that wrote this board; the weak set grew from 0 to 2 between the two runs, and none of the new members is covered by an allowlist entry.V-008 · f/CriCJcMezw · e/RSTUVWXYZabc e/YZabcdefghij e/fghijkmnopqr +7

Disabling the key makes the existing log files unreadable now. A deletion that runs its course makes them unreadable permanently, without a single log file being touched. AMI shared publicly on generated-workload-64 in ap-southeast-1 (account 234567890123): first seen 88 days ago and still present on the run that wrote this board; the weak set grew from 0 to 2 between the two runs, and none of the new members is covered by an allowlist entry.V-008 · f/A1JSYkfbQM · e/RSTUVWXYZabc e/YZabcdefghij e/fghijkmnopqr +2

Disabling the key makes the existing log files unreadable now. A deletion that runs its course makes them unreadable permanently, without a single log file being touched. AMI shared publicly on generated-workload-74 in ap-southeast-1 (account 345678901234): first seen 158 days ago and still present on the run that wrote this board; the weak set grew from 2 to 4 between the two runs, and none of the new members is covered by an allowlist entry.V-008 · f/8RRpyPRrX6 · e/bcdefghijkmn e/23456789ABCD e/9ABCDEFGHJKL +3

Disabling the key makes the existing log files unreadable now. A deletion that runs its course makes them unreadable permanently, without a single log file being touched. AMI shared publicly on generated-workload-94 in ap-southeast-1 (account 234567890123): first seen 118 days ago and still present on the run that wrote this board; the weak set grew from 2 to 4 between the two runs, and none of the new members is covered by an allowlist entry.V-008 · f/74TBtiwU7L · e/FGHJKLMNPQRS e/NPQRSTUVWXYZ e/VWXYZabcdefg +5

Disabling the key makes the existing log files unreadable now. A deletion that runs its course makes them unreadable permanently, without a single log file being touched. AMI shared publicly on generated-workload-14 in ap-southeast-1 (account 345678901234): first seen 98 days ago and still present on the run that wrote this board; the weak set grew from 2 to 4 between the two runs, and none of the new members is covered by an allowlist entry.V-008 · f/AdjFkGnGsg · e/FGHJKLMNPQRS e/NPQRSTUVWXYZ e/VWXYZabcdefg +6

Disabling the key makes the existing log files unreadable now. A deletion that runs its course makes them unreadable permanently, without a single log file being touched. AMI shared publicly on generated-workload-114 in ap-southeast-1 (account 123456789012): first seen 78 days ago and still present on the run that wrote this board; the weak set grew from 2 to 4 between the two runs, and none of the new members is covered by an allowlist entry.V-008 · f/4dD9civYEE · e/bcdefghijkmn e/23456789ABCD e/9ABCDEFGHJKL +7

Disabling the key makes the existing log files unreadable now. A deletion that runs its course makes them unreadable permanently, without a single log file being touched. AMI shared publicly on generated-workload-34 in ap-southeast-1 (account 234567890123): first seen 58 days ago and still present on the run that wrote this board; the weak set grew from 2 to 4 between the two runs, and none of the new members is covered by an allowlist entry.V-008 · f/j7XD1icvyt · e/bcdefghijkmn e/23456789ABCD e/9ABCDEFGHJKL +8

Disabling the key makes the existing log files unreadable now. A deletion that runs its course makes them unreadable permanently, without a single log file being touched. AMI shared publicly on generated-workload-54 in ap-southeast-1 (account 123456789012): first seen 18 days ago and still present on the run that wrote this board; the weak set grew from 2 to 4 between the two runs, and none of the new members is covered by an allowlist entry.V-008 · f/AJoVqy3nYf · e/FGHJKLMNPQRS e/NPQRSTUVWXYZ e/VWXYZabcdefg +1

Disabling the key makes the existing log files unreadable now. A deletion that runs its course makes them unreadable permanently, without a single log file being touched. AMI shared publicly on generated-workload-104 in ap-southeast-1 (account 345678901234): first seen 8 days ago and still present on the run that wrote this board; the weak set grew from 0 to 2 between the two runs, and none of the new members is covered by an allowlist entry.V-008 · f/VnjcjwnMBR · e/RSTUVWXYZabc e/YZabcdefghij e/fghijkmnopqr +6

Disabling the key makes the existing log files unreadable now. A deletion that runs its course makes them unreadable permanently, without a single log file being touched. AMI shared publicly on generated-workload-44 in ap-southeast-1 (account 345678901234): first seen 128 days ago and still present on the run that wrote this board; the weak set grew from 0 to 2 between the two runs, and none of the new members is covered by an allowlist entry.V-008 · f/5aaW9ER6hH · e/56789ABCDEFG e/CDEFGHJKLMNP e/KLMNPQRSTUVW +9

Disabling the key makes the existing log files unreadable now. A deletion that runs its course makes them unreadable permanently, without a single log file being touched. AMI shared publicly on generated-workload-84 in ap-southeast-1 (account 123456789012): first seen 48 days ago and still present on the run that wrote this board; the weak set grew from 0 to 2 between the two runs, and none of the new members is covered by an allowlist entry.V-008 · f/5mr1sAbQ9K · e/56789ABCDEFG e/CDEFGHJKLMNP e/KLMNPQRSTUVW +4

Disabling the key makes the existing log files unreadable now. A deletion that runs its course makes them unreadable permanently, without a single log file being touched. AMI shared publicly on generated-workload-4 in ap-southeast-1 (account 234567890123): first seen 28 days ago and still present on the run that wrote this board; the weak set grew from 0 to 2 between the two runs, and none of the new members is covered by an allowlist entry.V-008 · f/3BBJZUDogz · e/56789ABCDEFG e/CDEFGHJKLMNP e/KLMNPQRSTUVW +5

Disabling the key makes the existing log files unreadable now. A deletion that runs its course makes them unreadable permanently, without a single log file being touched. Administrator-equivalent AWS-managed policy on a service principal on generated-workload-16 in us-west-2 (account 234567890123): first seen 112 days ago and still present on the run that wrote this board; the weak set grew from 0 to 2 between the two runs, and none of the new members is covered by an allowlist entry.V-010 · f/5zDhYAh8zQ · e/HJKLMNPQRSTU e/QRSTUVWXYZab e/XYZabcdefghi +8