Demo on recorded data — get early access
FindingsCritical8High31Medium30Low9Info9Sign out

Findings

120 findings · run finished 2026-09-12 06:04Z · worst first

MediumNot readAccess entry created or widened by a deployer identitysandbox · eu-west-1‹generated-workload-17› +6not read
Disabling the key makes the existing log files unreadable now. A deletion that runs its course makes them unreadable permanently, without a single log file being touched. Access entry created or widened by a deployer identity on generated-workload-17 in eu-west-1 (account 345678901234): first seen 119 days ago and still present on the run that wrote this board; the weak set grew from 1 to 3 between the two runs, and none of the new members is covered by an allowlist entry.V-012 · f/9486vuk5d1 · e/JKLMNPQRSTUV e/RSTUVWXYZabc e/YZabcdefghij +9
MediumNot readAccess entry created or widened by a deployer identityprod-acct · eu-west-1‹generated-workload-87› +6not read
Disabling the key makes the existing log files unreadable now. A deletion that runs its course makes them unreadable permanently, without a single log file being touched. Access entry created or widened by a deployer identity on generated-workload-87 in eu-west-1 (account 123456789012): first seen 69 days ago and still present on the run that wrote this board; the weak set grew from 3 to 5 between the two runs, and none of the new members is covered by an allowlist entry.V-012 · f/477WMbwwNb · e/89ABCDEFGHJK e/FGHJKLMNPQRS e/NPQRSTUVWXYZ +7
MediumNot readAccess entry created or widened by a deployer identity234567890123 · eu-west-1‹generated-workload-7› +3not read
Disabling the key makes the existing log files unreadable now. A deletion that runs its course makes them unreadable permanently, without a single log file being touched. Access entry created or widened by a deployer identity on generated-workload-7 in eu-west-1 (account 234567890123): first seen 49 days ago and still present on the run that wrote this board; the weak set grew from 3 to 5 between the two runs, and none of the new members is covered by an allowlist entry.V-012 · f/HqrpEhqATW · e/89ABCDEFGHJK e/FGHJKLMNPQRS e/NPQRSTUVWXYZ +8
MediumNot readAccess entry created or widened by a deployer identityprod-acct · eu-west-1‹generated-workload-57› +4not read
Disabling the key makes the existing log files unreadable now. A deletion that runs its course makes them unreadable permanently, without a single log file being touched. Access entry created or widened by a deployer identity on generated-workload-57 in eu-west-1 (account 123456789012): first seen 39 days ago and still present on the run that wrote this board; the weak set grew from 1 to 3 between the two runs, and none of the new members is covered by an allowlist entry.V-012 · f/GNR4TaNDwM · e/JKLMNPQRSTUV e/RSTUVWXYZabc e/YZabcdefghij +4
LowNot readAccess entry created or widened by a deployer identity234567890123 · eu-west-1‹generated-workload-67› +7not read
Disabling the key makes the existing log files unreadable now. A deletion that runs its course makes them unreadable permanently, without a single log file being touched. Access entry created or widened by a deployer identity on generated-workload-67 in eu-west-1 (account 234567890123): first seen 109 days ago and still present on the run that wrote this board; the weak set grew from 3 to 5 between the two runs, and none of the new members is covered by an allowlist entry.V-012 · f/3uJGX4cQuf · e/UVWXYZabcdef e/bcdefghijkmn e/23456789ABCD +5
LowNot readAccess entry created or widened by a deployer identitysandbox · eu-west-1‹generated-workload-107› +5not read
Disabling the key makes the existing log files unreadable now. A deletion that runs its course makes them unreadable permanently, without a single log file being touched. Access entry created or widened by a deployer identity on generated-workload-107 in eu-west-1 (account 345678901234): first seen 29 days ago and still present on the run that wrote this board; the weak set grew from 3 to 5 between the two runs, and none of the new members is covered by an allowlist entry.V-012 · f/FmBdAo1r9B · e/UVWXYZabcdef e/bcdefghijkmn e/23456789ABCD +9
LowNot readAccess entry created or widened by a deployer identityprod-acct · eu-west-1‹generated-workload-27› +9not read
Disabling the key makes the existing log files unreadable now. A deletion that runs its course makes them unreadable permanently, without a single log file being touched. Access entry created or widened by a deployer identity on generated-workload-27 in eu-west-1 (account 123456789012): first seen 9 days ago and still present on the run that wrote this board; the weak set grew from 3 to 5 between the two runs, and none of the new members is covered by an allowlist entry.V-012 · f/2fmt3vedCj · e/UVWXYZabcdef e/bcdefghijkmn e/23456789ABCD +1
InfoNot readAccess entry created or widened by a deployer identitysandbox · eu-west-1‹generated-workload-77› +3not read
Disabling the key makes the existing log files unreadable now. A deletion that runs its course makes them unreadable permanently, without a single log file being touched. Access entry created or widened by a deployer identity on generated-workload-77 in eu-west-1 (account 345678901234): first seen 179 days ago and still present on the run that wrote this board; the weak set grew from 1 to 3 between the two runs, and none of the new members is covered by an allowlist entry.V-012 · f/4xd3CVdDLn · e/efghijkmnopq e/56789ABCDEFG e/CDEFGHJKLMNP +6
InfoNot readAccess entry created or widened by a deployer identity234567890123 · eu-west-1‹generated-workload-37› +5not read
Disabling the key makes the existing log files unreadable now. A deletion that runs its course makes them unreadable permanently, without a single log file being touched. Access entry created or widened by a deployer identity on generated-workload-37 in eu-west-1 (account 234567890123): first seen 79 days ago and still present on the run that wrote this board; the weak set grew from 1 to 3 between the two runs, and none of the new members is covered by an allowlist entry.V-012 · f/znw4WBaQFp · e/efghijkmnopq e/56789ABCDEFG e/CDEFGHJKLMNP +2
MediumConsole login without MFA234567890123 · ap-southeast-1‹generated-workload-49› +3163d
Disabling the key makes the existing log files unreadable now. A deletion that runs its course makes them unreadable permanently, without a single log file being touched. Console login without MFA on generated-workload-49 in ap-southeast-1 (account 234567890123): first seen 163 days ago and still present on the run that wrote this board; the weak set grew from 1 to 3 between the two runs, and none of the new members is covered by an allowlist entry.V-022 · f/5j1pTRrfKk · e/ABCDEFGHJKLM e/HJKLMNPQRSTU e/QRSTUVWXYZab +5
MediumConsole login without MFAprod-acct · ap-southeast-1‹generated-workload-39› +793d
Disabling the key makes the existing log files unreadable now. A deletion that runs its course makes them unreadable permanently, without a single log file being touched. Console login without MFA on generated-workload-39 in ap-southeast-1 (account 123456789012): first seen 93 days ago and still present on the run that wrote this board; the weak set grew from 3 to 5 between the two runs, and none of the new members is covered by an allowlist entry.V-022 · f/A2fuTxUG7u · e/ghijkmnopqrs e/789ABCDEFGHJ e/EFGHJKLMNPQR +4
MediumConsole login without MFAsandbox · ap-southeast-1‹generated-workload-89› +883d
Disabling the key makes the existing log files unreadable now. A deletion that runs its course makes them unreadable permanently, without a single log file being touched. Console login without MFA on generated-workload-89 in ap-southeast-1 (account 345678901234): first seen 83 days ago and still present on the run that wrote this board; the weak set grew from 1 to 3 between the two runs, and none of the new members is covered by an allowlist entry.V-022 · f/5nuZAvQeaE · e/ABCDEFGHJKLM e/HJKLMNPQRSTU e/QRSTUVWXYZab +9
MediumConsole login without MFAprod-acct · ap-southeast-1‹generated-workload-9› +563d
Disabling the key makes the existing log files unreadable now. A deletion that runs its course makes them unreadable permanently, without a single log file being touched. Console login without MFA on generated-workload-9 in ap-southeast-1 (account 123456789012): first seen 63 days ago and still present on the run that wrote this board; the weak set grew from 1 to 3 between the two runs, and none of the new members is covered by an allowlist entry.V-022 · f/4zt61QNTzM · e/ABCDEFGHJKLM e/HJKLMNPQRSTU e/QRSTUVWXYZab +1
MediumConsole login without MFA234567890123 · ap-southeast-1‹generated-workload-79› +513d
Disabling the key makes the existing log files unreadable now. A deletion that runs its course makes them unreadable permanently, without a single log file being touched. Console login without MFA on generated-workload-79 in ap-southeast-1 (account 234567890123): first seen 13 days ago and still present on the run that wrote this board; the weak set grew from 3 to 5 between the two runs, and none of the new members is covered by an allowlist entry.V-022 · f/FJmKonjviW · e/ghijkmnopqrs e/789ABCDEFGHJ e/EFGHJKLMNPQR +8
LowConsole login without MFAprod-acct · ap-southeast-1‹generated-workload-99› +4153d
Disabling the key makes the existing log files unreadable now. A deletion that runs its course makes them unreadable permanently, without a single log file being touched. Console login without MFA on generated-workload-99 in ap-southeast-1 (account 123456789012): first seen 153 days ago and still present on the run that wrote this board; the weak set grew from 3 to 5 between the two runs, and none of the new members is covered by an allowlist entry.V-022 · f/FQqkPQgVGk · e/LMNPQRSTUVWX e/TUVWXYZabcde e/abcdefghijkm +1
LowConsole login without MFA234567890123 · ap-southeast-1‹generated-workload-19› +8133d
Disabling the key makes the existing log files unreadable now. A deletion that runs its course makes them unreadable permanently, without a single log file being touched. Console login without MFA on generated-workload-19 in ap-southeast-1 (account 234567890123): first seen 133 days ago and still present on the run that wrote this board; the weak set grew from 3 to 5 between the two runs, and none of the new members is covered by an allowlist entry.V-022 · f/62BKeBazBe · e/LMNPQRSTUVWX e/TUVWXYZabcde e/abcdefghijkm +2
LowConsole login without MFAsandbox · ap-southeast-1‹generated-workload-59› +653d
Disabling the key makes the existing log files unreadable now. A deletion that runs its course makes them unreadable permanently, without a single log file being touched. Console login without MFA on generated-workload-59 in ap-southeast-1 (account 345678901234): first seen 53 days ago and still present on the run that wrote this board; the weak set grew from 3 to 5 between the two runs, and none of the new members is covered by an allowlist entry.V-022 · f/Ga5RWkJjqP · e/LMNPQRSTUVWX e/TUVWXYZabcde e/abcdefghijkm +6
InfoConsole login without MFAprod-acct · ap-southeast-1‹generated-workload-69› +9123d
Disabling the key makes the existing log files unreadable now. A deletion that runs its course makes them unreadable permanently, without a single log file being touched. Console login without MFA on generated-workload-69 in ap-southeast-1 (account 123456789012): first seen 123 days ago and still present on the run that wrote this board; the weak set grew from 1 to 3 between the two runs, and none of the new members is covered by an allowlist entry.V-022 · f/2s2ZhzYaPj · e/WXYZabcdefgh e/defghijkmnop e/456789ABCDEF +7
InfoConsole login without MFA234567890123 · ap-southeast-1‹generated-workload-109› +743d
Disabling the key makes the existing log files unreadable now. A deletion that runs its course makes them unreadable permanently, without a single log file being touched. Console login without MFA on generated-workload-109 in ap-southeast-1 (account 234567890123): first seen 43 days ago and still present on the run that wrote this board; the weak set grew from 1 to 3 between the two runs, and none of the new members is covered by an allowlist entry.V-022 · f/kQ474mDYyP · e/WXYZabcdefgh e/defghijkmnop e/456789ABCDEF +2
InfoConsole login without MFAsandbox · ap-southeast-1‹generated-workload-29› +423d
Disabling the key makes the existing log files unreadable now. A deletion that runs its course makes them unreadable permanently, without a single log file being touched. Console login without MFA on generated-workload-29 in ap-southeast-1 (account 345678901234): first seen 23 days ago and still present on the run that wrote this board; the weak set grew from 1 to 3 between the two runs, and none of the new members is covered by an allowlist entry.V-022 · f/BXCtmhEQyJ · e/WXYZabcdefgh e/defghijkmnop e/456789ABCDEF +3