Demo on recorded data — install Watch free
Findings›f/8qMQNSkNyVSign out

EC2 instance accepts IMDSv1 <on "prod">

Highnew
Rule
V-013a
Account
123456789012
Where
account-wide
First seen
2026-09-08
Last seen
2026-09-10 (0 days)
Verdict
not rated

What Firekeeper saw

observed on synthetic accounts

Resources

No resource is named on this finding.

Evidence

e/8K95JNg2jDnJ

Guidance

This rule has no written guidance yet.

Across the last 30 runs

FromToRunsState
2026-09-122026-09-121new
2026-08-142026-09-1129no board input for that run

Decisions on this finding

  • D-01J9Q700000000000000000000 Accepted risk on one finding: V-013a f/8qMQNSkNyV, up to High
    Active · signed by alice@example.com · expires 2026-10-12 (in 30 days)
    “IMDSv1 stays until the agent upgrade lands”
    Active, but not holding this finding this run: either it was signed or approved after the run that wrote this board and counts from the next run, or the finding changed since it was signed.

See every decision

Not a problem?

Signing one of these quiets this finding. Nothing changes until you sign with your passkey, and it ends on its own date unless someone renews it.

Not a problem

Quiets this finding alone, while what it cites stays as it is now. Up to 30 days.

Accept all like this

Quiets every finding of rule V-013a with exactly these facts that is on the board today. A new one that matches later stays loud until a keeper lets it through.