Findings

Disabling the key makes the existing log files unreadable now. A deletion that runs its course makes them unreadable permanently, without a single log file being touched. Administrator-equivalent AWS-managed policy on a service principal on generated-workload-56 in us-west-2 (account 345678901234): first seen 32 days ago and still present on the run that wrote this board; the weak set grew from 0 to 2 between the two runs, and none of the new members is covered by an allowlist entry.V-010 · f/DSTWvQYDBY · e/HJKLMNPQRSTU e/QRSTUVWXYZab e/XYZabcdefghi +3

Disabling the key makes the existing log files unreadable now. A deletion that runs its course makes them unreadable permanently, without a single log file being touched. Administrator-equivalent AWS-managed policy on a service principal on generated-workload-46 in us-west-2 (account 234567890123): first seen 142 days ago and still present on the run that wrote this board; the weak set grew from 2 to 4 between the two runs, and none of the new members is covered by an allowlist entry.V-010 · f/HvuWDYyCrp · e/789ABCDEFGHJ e/EFGHJKLMNPQR e/MNPQRSTUVWXY +2

Disabling the key makes the existing log files unreadable now. A deletion that runs its course makes them unreadable permanently, without a single log file being touched. Administrator-equivalent AWS-managed policy on a service principal on generated-workload-96 in us-west-2 (account 123456789012): first seen 132 days ago and still present on the run that wrote this board; the weak set grew from 0 to 2 between the two runs, and none of the new members is covered by an allowlist entry.V-010 · f/3oPt823ZaP · e/HJKLMNPQRSTU e/QRSTUVWXYZab e/XYZabcdefghi +7

Disabling the key makes the existing log files unreadable now. A deletion that runs its course makes them unreadable permanently, without a single log file being touched. Administrator-equivalent AWS-managed policy on a service principal on generated-workload-66 in us-west-2 (account 123456789012): first seen 102 days ago and still present on the run that wrote this board; the weak set grew from 2 to 4 between the two runs, and none of the new members is covered by an allowlist entry.V-010 · f/8cyu4rwePo · e/TUVWXYZabcde e/abcdefghijkm e/123456789ABC +4

Disabling the key makes the existing log files unreadable now. A deletion that runs its course makes them unreadable permanently, without a single log file being touched. Administrator-equivalent AWS-managed policy on a service principal on generated-workload-86 in us-west-2 (account 345678901234): first seen 62 days ago and still present on the run that wrote this board; the weak set grew from 2 to 4 between the two runs, and none of the new members is covered by an allowlist entry.V-010 · f/31uQZehnMk · e/789ABCDEFGHJ e/EFGHJKLMNPQR e/MNPQRSTUVWXY +6

Disabling the key makes the existing log files unreadable now. A deletion that runs its course makes them unreadable permanently, without a single log file being touched. Administrator-equivalent AWS-managed policy on a service principal on generated-workload-6 in us-west-2 (account 123456789012): first seen 42 days ago and still present on the run that wrote this board; the weak set grew from 2 to 4 between the two runs, and none of the new members is covered by an allowlist entry.V-010 · f/A8GGP4kTWS · e/789ABCDEFGHJ e/EFGHJKLMNPQR e/MNPQRSTUVWXY +7

Disabling the key makes the existing log files unreadable now. A deletion that runs its course makes them unreadable permanently, without a single log file being touched. Administrator-equivalent AWS-managed policy on a service principal on generated-workload-106 in us-west-2 (account 234567890123): first seen 22 days ago and still present on the run that wrote this board; the weak set grew from 2 to 4 between the two runs, and none of the new members is covered by an allowlist entry.V-010 · f/HmdFSucgoD · e/TUVWXYZabcde e/abcdefghijkm e/123456789ABC +8

Disabling the key makes the existing log files unreadable now. A deletion that runs its course makes them unreadable permanently, without a single log file being touched. Administrator-equivalent AWS-managed policy on a service principal on generated-workload-26 in us-west-2 (account 345678901234): first seen 2 days ago and still present on the run that wrote this board; the weak set grew from 2 to 4 between the two runs, and none of the new members is covered by an allowlist entry.V-010 · f/HskYzEnvuA · e/TUVWXYZabcde e/abcdefghijkm e/123456789ABC +9

Disabling the key makes the existing log files unreadable now. A deletion that runs its course makes them unreadable permanently, without a single log file being touched. Administrator-equivalent AWS-managed policy on a service principal on generated-workload-76 in us-west-2 (account 234567890123): first seen 172 days ago and still present on the run that wrote this board; the weak set grew from 0 to 2 between the two runs, and none of the new members is covered by an allowlist entry.V-010 · f/BaGGY9vEX4 · e/defghijkmnop e/456789ABCDEF e/BCDEFGHJKLMN +5

Disabling the key makes the existing log files unreadable now. A deletion that runs its course makes them unreadable permanently, without a single log file being touched. Administrator-equivalent AWS-managed policy on a service principal on generated-workload-116 in us-west-2 (account 345678901234): first seen 92 days ago and still present on the run that wrote this board; the weak set grew from 0 to 2 between the two runs, and none of the new members is covered by an allowlist entry.V-010 · f/FZdwXvfs3R · e/defghijkmnop e/456789ABCDEF e/BCDEFGHJKLMN +9

Disabling the key makes the existing log files unreadable now. A deletion that runs its course makes them unreadable permanently, without a single log file being touched. Administrator-equivalent AWS-managed policy on a service principal on generated-workload-36 in us-west-2 (account 123456789012): first seen 72 days ago and still present on the run that wrote this board; the weak set grew from 0 to 2 between the two runs, and none of the new members is covered by an allowlist entry.V-010 · f/F7qU6gjwsT · e/defghijkmnop e/456789ABCDEF e/BCDEFGHJKLMN +1

observed on synthetic accountsV-013a · f/8qMQNSkNyV · e/8K95JNg2jDnJ

Disabling the key makes the existing log files unreadable now. A deletion that runs its course makes them unreadable permanently, without a single log file being touched. EC2 instance accepts IMDSv1 on generated-workload-48 in eu-central-1 (account 123456789012): first seen 156 days ago and still present on the run that wrote this board; the weak set grew from 0 to 2 between the two runs, and none of the new members is covered by an allowlist entry.V-013a · f/2MABPzB2Np · e/9ABCDEFGHJKL e/GHJKLMNPQRST e/PQRSTUVWXYZa +4

Disabling the key makes the existing log files unreadable now. A deletion that runs its course makes them unreadable permanently, without a single log file being touched. EC2 instance accepts IMDSv1 on generated-workload-8 in eu-central-1 (account 345678901234): first seen 56 days ago and still present on the run that wrote this board; the weak set grew from 0 to 2 between the two runs, and none of the new members is covered by an allowlist entry.V-013a · f/2dTniNd4qd · e/9ABCDEFGHJKL e/GHJKLMNPQRST e/PQRSTUVWXYZa +9

Disabling the key makes the existing log files unreadable now. A deletion that runs its course makes them unreadable permanently, without a single log file being touched. EC2 instance accepts IMDSv1 on generated-workload-98 in eu-central-1 (account 345678901234): first seen 146 days ago and still present on the run that wrote this board; the weak set grew from 2 to 4 between the two runs, and none of the new members is covered by an allowlist entry.V-013a · f/BSjCw2wbo5 · e/KLMNPQRSTUVW e/STUVWXYZabcd e/Zabcdefghijk +9

Disabling the key makes the existing log files unreadable now. A deletion that runs its course makes them unreadable permanently, without a single log file being touched. EC2 instance accepts IMDSv1 on generated-workload-18 in eu-central-1 (account 123456789012): first seen 126 days ago and still present on the run that wrote this board; the weak set grew from 2 to 4 between the two runs, and none of the new members is covered by an allowlist entry.V-013a · f/7mD96YMg1v · e/KLMNPQRSTUVW e/STUVWXYZabcd e/Zabcdefghijk +1

Disabling the key makes the existing log files unreadable now. A deletion that runs its course makes them unreadable permanently, without a single log file being touched. EC2 instance accepts IMDSv1 on generated-workload-38 in eu-central-1 (account 345678901234): first seen 86 days ago and still present on the run that wrote this board; the weak set grew from 2 to 4 between the two runs, and none of the new members is covered by an allowlist entry.V-013a · f/FrSNqE2JCa · e/fghijkmnopqr e/6789ABCDEFGH e/DEFGHJKLMNPQ +3

Disabling the key makes the existing log files unreadable now. A deletion that runs its course makes them unreadable permanently, without a single log file being touched. EC2 instance accepts IMDSv1 on generated-workload-88 in eu-central-1 (account 234567890123): first seen 76 days ago and still present on the run that wrote this board; the weak set grew from 0 to 2 between the two runs, and none of the new members is covered by an allowlist entry.V-013a · f/2dySnCctFp · e/9ABCDEFGHJKL e/GHJKLMNPQRST e/PQRSTUVWXYZa +8

Disabling the key makes the existing log files unreadable now. A deletion that runs its course makes them unreadable permanently, without a single log file being touched. EC2 instance accepts IMDSv1 on generated-workload-58 in eu-central-1 (account 234567890123): first seen 46 days ago and still present on the run that wrote this board; the weak set grew from 2 to 4 between the two runs, and none of the new members is covered by an allowlist entry.V-013a · f/EsNA78d342 · e/KLMNPQRSTUVW e/STUVWXYZabcd e/Zabcdefghijk +5

Disabling the key makes the existing log files unreadable now. A deletion that runs its course makes them unreadable permanently, without a single log file being touched. EC2 instance accepts IMDSv1 on generated-workload-78 in eu-central-1 (account 123456789012): first seen 6 days ago and still present on the run that wrote this board; the weak set grew from 2 to 4 between the two runs, and none of the new members is covered by an allowlist entry.V-013a · f/DXc2x28NM4 · e/fghijkmnopqr e/6789ABCDEFGH e/DEFGHJKLMNPQ +7

Disabling the key makes the existing log files unreadable now. A deletion that runs its course makes them unreadable permanently, without a single log file being touched. EC2 instance accepts IMDSv1 on generated-workload-68 in eu-central-1 (account 345678901234): first seen 116 days ago and still present on the run that wrote this board; the weak set grew from 0 to 2 between the two runs, and none of the new members is covered by an allowlist entry.V-013a · f/PzHuBi8RGP · e/VWXYZabcdefg e/cdefghijkmno e/3456789ABCDE +6

Disabling the key makes the existing log files unreadable now. A deletion that runs its course makes them unreadable permanently, without a single log file being touched. EC2 instance accepts IMDSv1 on generated-workload-108 in eu-central-1 (account 123456789012): first seen 36 days ago and still present on the run that wrote this board; the weak set grew from 0 to 2 between the two runs, and none of the new members is covered by an allowlist entry.V-013a · f/Hfz9XK3P2R · e/VWXYZabcdefg e/cdefghijkmno e/3456789ABCDE +1

Disabling the key makes the existing log files unreadable now. A deletion that runs its course makes them unreadable permanently, without a single log file being touched. EC2 instance accepts IMDSv1 on generated-workload-28 in eu-central-1 (account 234567890123): first seen 16 days ago and still present on the run that wrote this board; the weak set grew from 0 to 2 between the two runs, and none of the new members is covered by an allowlist entry.V-013a · f/5J86YzUpUa · e/VWXYZabcdefg e/cdefghijkmno e/3456789ABCDE +2

observed on synthetic accountsV-025 · f/CL26TbwQFY · no record cited

Disabling the key makes the existing log files unreadable now. A deletion that runs its course makes them unreadable permanently, without a single log file being touched. Trail KMS key disabled or scheduled for deletion on generated-workload-71 in us-west-2 (account 345678901234): first seen 137 days ago and still present on the run that wrote this board; the weak set grew from 3 to 5 between the two runs, and none of the new members is covered by an allowlist entry.V-002 · f/HEvE2Er7r8 · e/YZabcdefghij e/fghijkmnopqr e/6789ABCDEFGH +9

Disabling the key makes the existing log files unreadable now. A deletion that runs its course makes them unreadable permanently, without a single log file being touched. Trail KMS key disabled or scheduled for deletion on generated-workload-41 in us-west-2 (account 345678901234): first seen 107 days ago and still present on the run that wrote this board; the weak set grew from 1 to 3 between the two runs, and none of the new members is covered by an allowlist entry.V-002 · f/Hs3wrok7Jh · e/23456789ABCD e/9ABCDEFGHJKL e/GHJKLMNPQRST +6

Disabling the key makes the existing log files unreadable now. A deletion that runs its course makes them unreadable permanently, without a single log file being touched. Trail KMS key disabled or scheduled for deletion on generated-workload-111 in us-west-2 (account 123456789012): first seen 57 days ago and still present on the run that wrote this board; the weak set grew from 3 to 5 between the two runs, and none of the new members is covered by an allowlist entry.V-002 · f/6LzBR2nYDk · e/YZabcdefghij e/fghijkmnopqr e/6789ABCDEFGH +4

Disabling the key makes the existing log files unreadable now. A deletion that runs its course makes them unreadable permanently, without a single log file being touched. Trail KMS key disabled or scheduled for deletion on generated-workload-31 in us-west-2 (account 234567890123): first seen 37 days ago and still present on the run that wrote this board; the weak set grew from 3 to 5 between the two runs, and none of the new members is covered by an allowlist entry.V-002 · f/2yuhos65Lw · e/YZabcdefghij e/fghijkmnopqr e/6789ABCDEFGH +5

Disabling the key makes the existing log files unreadable now. A deletion that runs its course makes them unreadable permanently, without a single log file being touched. Trail KMS key disabled or scheduled for deletion on generated-workload-81 in us-west-2 (account 123456789012): first seen 27 days ago and still present on the run that wrote this board; the weak set grew from 1 to 3 between the two runs, and none of the new members is covered by an allowlist entry.V-002 · f/DB71Lsa9gz · e/23456789ABCD e/9ABCDEFGHJKL e/GHJKLMNPQRST +1

Disabling the key makes the existing log files unreadable now. A deletion that runs its course makes them unreadable permanently, without a single log file being touched. Trail KMS key disabled or scheduled for deletion on generated-workload-1 in us-west-2 (account 234567890123): first seen 7 days ago and still present on the run that wrote this board; the weak set grew from 1 to 3 between the two runs, and none of the new members is covered by an allowlist entry.V-002 · f/2y2apsmrLL · e/23456789ABCD e/9ABCDEFGHJKL e/GHJKLMNPQRST +2

Disabling the key makes the existing log files unreadable now. A deletion that runs its course makes them unreadable permanently, without a single log file being touched. Trail KMS key disabled or scheduled for deletion on generated-workload-51 in us-west-2 (account 123456789012): first seen 177 days ago and still present on the run that wrote this board; the weak set grew from 3 to 5 between the two runs, and none of the new members is covered by an allowlist entry.V-002 · f/DArBrzYvAq · e/CDEFGHJKLMNP e/KLMNPQRSTUVW e/STUVWXYZabcd +7

Disabling the key makes the existing log files unreadable now. A deletion that runs its course makes them unreadable permanently, without a single log file being touched. Trail KMS key disabled or scheduled for deletion on generated-workload-91 in us-west-2 (account 234567890123): first seen 97 days ago and still present on the run that wrote this board; the weak set grew from 3 to 5 between the two runs, and none of the new members is covered by an allowlist entry.V-002 · f/63pnVoyK9k · e/CDEFGHJKLMNP e/KLMNPQRSTUVW e/STUVWXYZabcd +2

Disabling the key makes the existing log files unreadable now. A deletion that runs its course makes them unreadable permanently, without a single log file being touched. Trail KMS key disabled or scheduled for deletion on generated-workload-11 in us-west-2 (account 345678901234): first seen 77 days ago and still present on the run that wrote this board; the weak set grew from 3 to 5 between the two runs, and none of the new members is covered by an allowlist entry.V-002 · f/BTsLef3kEm · e/CDEFGHJKLMNP e/KLMNPQRSTUVW e/STUVWXYZabcd +3

Disabling the key makes the existing log files unreadable now. A deletion that runs its course makes them unreadable permanently, without a single log file being touched. Trail KMS key disabled or scheduled for deletion on generated-workload-101 in us-west-2 (account 345678901234): first seen 167 days ago and still present on the run that wrote this board; the weak set grew from 1 to 3 between the two runs, and none of the new members is covered by an allowlist entry.V-002 · f/Dpozcecxtf · e/NPQRSTUVWXYZ e/VWXYZabcdefg e/cdefghijkmno +3

Disabling the key makes the existing log files unreadable now. A deletion that runs its course makes them unreadable permanently, without a single log file being touched. Trail KMS key disabled or scheduled for deletion on generated-workload-21 in us-west-2 (account 123456789012): first seen 147 days ago and still present on the run that wrote this board; the weak set grew from 1 to 3 between the two runs, and none of the new members is covered by an allowlist entry.V-002 · f/DQKgLQfvca · e/NPQRSTUVWXYZ e/VWXYZabcdefg e/cdefghijkmno +4

Disabling the key makes the existing log files unreadable now. A deletion that runs its course makes them unreadable permanently, without a single log file being touched. Trail KMS key disabled or scheduled for deletion on generated-workload-61 in us-west-2 (account 234567890123): first seen 67 days ago and still present on the run that wrote this board; the weak set grew from 1 to 3 between the two runs, and none of the new members is covered by an allowlist entry.V-002 · f/BrNpNx68gA · e/NPQRSTUVWXYZ e/VWXYZabcdefg e/cdefghijkmno +8

Disabling the key makes the existing log files unreadable now. A deletion that runs its course makes them unreadable permanently, without a single log file being touched. OIDC provider client id added on generated-workload-25 in us-east-1 (account 234567890123): first seen 175 days ago and still present on the run that wrote this board; the weak set grew from 1 to 3 between the two runs, and none of the new members is covered by an allowlist entry.V-009 · f/AhcbpHrrdB · e/STUVWXYZabcd e/Zabcdefghijk e/ghijkmnopqrs +8

Disabling the key makes the existing log files unreadable now. A deletion that runs its course makes them unreadable permanently, without a single log file being touched. OIDC provider client id added on generated-workload-95 in us-east-1 (account 345678901234): first seen 125 days ago and still present on the run that wrote this board; the weak set grew from 3 to 5 between the two runs, and none of the new members is covered by an allowlist entry.V-009 · f/E3vVZkXgLQ · e/GHJKLMNPQRST e/PQRSTUVWXYZa e/WXYZabcdefgh +6

Disabling the key makes the existing log files unreadable now. A deletion that runs its course makes them unreadable permanently, without a single log file being touched. OIDC provider client id added on generated-workload-15 in us-east-1 (account 123456789012): first seen 105 days ago and still present on the run that wrote this board; the weak set grew from 3 to 5 between the two runs, and none of the new members is covered by an allowlist entry.V-009 · f/Cu9RdzrAkZ · e/GHJKLMNPQRST e/PQRSTUVWXYZa e/WXYZabcdefgh +7

Disabling the key makes the existing log files unreadable now. A deletion that runs its course makes them unreadable permanently, without a single log file being touched. OIDC provider client id added on generated-workload-65 in us-east-1 (account 345678901234): first seen 95 days ago and still present on the run that wrote this board; the weak set grew from 1 to 3 between the two runs, and none of the new members is covered by an allowlist entry.V-009 · f/G2VqgQkQoe · e/STUVWXYZabcd e/Zabcdefghijk e/ghijkmnopqrs +3

Disabling the key makes the existing log files unreadable now. A deletion that runs its course makes them unreadable permanently, without a single log file being touched. OIDC provider client id added on generated-workload-55 in us-east-1 (account 234567890123): first seen 25 days ago and still present on the run that wrote this board; the weak set grew from 3 to 5 between the two runs, and none of the new members is covered by an allowlist entry.V-009 · f/4HAboUoZ4W · e/GHJKLMNPQRST e/PQRSTUVWXYZa e/WXYZabcdefgh +2

Disabling the key makes the existing log files unreadable now. A deletion that runs its course makes them unreadable permanently, without a single log file being touched. OIDC provider client id added on generated-workload-105 in us-east-1 (account 123456789012): first seen 15 days ago and still present on the run that wrote this board; the weak set grew from 1 to 3 between the two runs, and none of the new members is covered by an allowlist entry.V-009 · f/C23sHYSv3z · e/STUVWXYZabcd e/Zabcdefghijk e/ghijkmnopqrs +7

Disabling the key makes the existing log files unreadable now. A deletion that runs its course makes them unreadable permanently, without a single log file being touched. OIDC provider client id added on generated-workload-75 in us-east-1 (account 123456789012): first seen 165 days ago and still present on the run that wrote this board; the weak set grew from 3 to 5 between the two runs, and none of the new members is covered by an allowlist entry.V-009 · f/7SkpPP2J2i · e/cdefghijkmno e/3456789ABCDE e/ABCDEFGHJKLM +4

Disabling the key makes the existing log files unreadable now. A deletion that runs its course makes them unreadable permanently, without a single log file being touched. OIDC provider client id added on generated-workload-115 in us-east-1 (account 234567890123): first seen 85 days ago and still present on the run that wrote this board; the weak set grew from 3 to 5 between the two runs, and none of the new members is covered by an allowlist entry.V-009 · f/ujyUkbdM7A · e/cdefghijkmno e/3456789ABCDE e/ABCDEFGHJKLM +8

Disabling the key makes the existing log files unreadable now. A deletion that runs its course makes them unreadable permanently, without a single log file being touched. OIDC provider client id added on generated-workload-35 in us-east-1 (account 345678901234): first seen 65 days ago and still present on the run that wrote this board; the weak set grew from 3 to 5 between the two runs, and none of the new members is covered by an allowlist entry.V-009 · f/6cMXScTxyH · e/cdefghijkmno e/3456789ABCDE e/ABCDEFGHJKLM +9

Disabling the key makes the existing log files unreadable now. A deletion that runs its course makes them unreadable permanently, without a single log file being touched. OIDC provider client id added on generated-workload-45 in us-east-1 (account 123456789012): first seen 135 days ago and still present on the run that wrote this board; the weak set grew from 1 to 3 between the two runs, and none of the new members is covered by an allowlist entry.V-009 · f/7Xn4EfUed5 · e/6789ABCDEFGH e/DEFGHJKLMNPQ e/LMNPQRSTUVWX +1

Disabling the key makes the existing log files unreadable now. A deletion that runs its course makes them unreadable permanently, without a single log file being touched. OIDC provider client id added on generated-workload-85 in us-east-1 (account 234567890123): first seen 55 days ago and still present on the run that wrote this board; the weak set grew from 1 to 3 between the two runs, and none of the new members is covered by an allowlist entry.V-009 · f/AZu723CLkZ · e/6789ABCDEFGH e/DEFGHJKLMNPQ e/LMNPQRSTUVWX +5

Disabling the key makes the existing log files unreadable now. A deletion that runs its course makes them unreadable permanently, without a single log file being touched. OIDC provider client id added on generated-workload-5 in us-east-1 (account 345678901234): first seen 35 days ago and still present on the run that wrote this board; the weak set grew from 1 to 3 between the two runs, and none of the new members is covered by an allowlist entry.V-009 · f/FMFFSvbwzc · e/6789ABCDEFGH e/DEFGHJKLMNPQ e/LMNPQRSTUVWX +6

Disabling the key makes the existing log files unreadable now. A deletion that runs its course makes them unreadable permanently, without a single log file being touched. Access entry created or widened by a deployer identity on generated-workload-47 in eu-west-1 (account 345678901234): first seen 149 days ago and still present on the run that wrote this board; the weak set grew from 3 to 5 between the two runs, and none of the new members is covered by an allowlist entry.V-012 · f/G8Rr7JPart · e/89ABCDEFGHJK e/FGHJKLMNPQRS e/NPQRSTUVWXYZ +3

Disabling the key makes the existing log files unreadable now. A deletion that runs its course makes them unreadable permanently, without a single log file being touched. Access entry created or widened by a deployer identity on generated-workload-97 in eu-west-1 (account 234567890123): first seen 139 days ago and still present on the run that wrote this board; the weak set grew from 1 to 3 between the two runs, and none of the new members is covered by an allowlist entry.V-012 · f/93wYzpmu7V · e/JKLMNPQRSTUV e/RSTUVWXYZabc e/YZabcdefghij +8