Demo on recorded data — install Watch free
FindingsCritical1High8Medium3Sign out

Findings

12 findings · run finished 2026-09-12 06:04Z · worst first

CriticalBackDefault policy version changed on an attached policy by a non-deployersandbox · eu-west-1‹generated-workload-32› +744d
Disabling the key makes the existing log files unreadable now. A deletion that runs its course makes them unreadable permanently, without a single log file being touched. Default policy version changed on an attached policy by a non-deployer on generated-workload-32 in eu-west-1 (account 345678901234): first seen 44 days ago and still present on the run that wrote this board; the weak set grew from 0 to 2 between the two runs, and none of the new members is covered by an allowlist entry.V-003 · f/GP1E5CpqsD · e/Zabcdefghijk e/ghijkmnopqrs e/789ABCDEFGHJ +6
Default policy version changed on an attached policy by a non-deployer8
HighBack‹generated-workload-102› +7prod-acct · eu-west-1 / payments-prod-cluster-2‹i-00000000000000066›174d
Disabling the key makes the existing log files unreadable now. A deletion that runs its course makes them unreadable permanently, without a single log file being touched. Default policy version changed on an attached policy by a non-deployer on generated-workload-102 in eu-west-1 (account 123456789012): first seen 174 days ago and still present on the run that wrote this board; the weak set grew from 2 to 4 between the two runs, and none of the new members is covered by an allowlist entry.V-003 · f/TXXFKFQSDR · e/PQRSTUVWXYZa e/WXYZabcdefgh e/defghijkmnop +4
HighBack‹generated-workload-22› +4234567890123 · eu-west-1‹i-00000000000000016›154d
Disabling the key makes the existing log files unreadable now. A deletion that runs its course makes them unreadable permanently, without a single log file being touched. Default policy version changed on an attached policy by a non-deployer on generated-workload-22 in eu-west-1 (account 234567890123): first seen 154 days ago and still present on the run that wrote this board; the weak set grew from 2 to 4 between the two runs, and none of the new members is covered by an allowlist entry.V-003 · f/DVL5oUvKVV · e/PQRSTUVWXYZa e/WXYZabcdefgh e/defghijkmnop +5
HighBack‹generated-workload-72› +5prod-acct · eu-west-1 / payments-prod-cluster-0‹i-00000000000000048›144d
Disabling the key makes the existing log files unreadable now. A deletion that runs its course makes them unreadable permanently, without a single log file being touched. Default policy version changed on an attached policy by a non-deployer on generated-workload-72 in eu-west-1 (account 123456789012): first seen 144 days ago and still present on the run that wrote this board; the weak set grew from 0 to 2 between the two runs, and none of the new members is covered by an allowlist entry.V-003 · f/7X3QLtQoNy · e/Zabcdefghijk e/ghijkmnopqrs e/789ABCDEFGHJ +1
HighBack‹generated-workload-42› +3prod-acct · eu-west-1 / payments-prod-cluster-2‹i-0000000000000002a›114d
Disabling the key makes the existing log files unreadable now. A deletion that runs its course makes them unreadable permanently, without a single log file being touched. Default policy version changed on an attached policy by a non-deployer on generated-workload-42 in eu-west-1 (account 123456789012): first seen 114 days ago and still present on the run that wrote this board; the weak set grew from 2 to 4 between the two runs, and none of the new members is covered by an allowlist entry.V-003 · f/G4XRD56Ufj · e/3456789ABCDE e/ABCDEFGHJKLM e/HJKLMNPQRSTU +7
HighBack‹generated-workload-62› +9sandbox · eu-west-1‹i-0000000000000003e›74d
Disabling the key makes the existing log files unreadable now. A deletion that runs its course makes them unreadable permanently, without a single log file being touched. Default policy version changed on an attached policy by a non-deployer on generated-workload-62 in eu-west-1 (account 345678901234): first seen 74 days ago and still present on the run that wrote this board; the weak set grew from 2 to 4 between the two runs, and none of the new members is covered by an allowlist entry.V-003 · f/DgDRrFHxud · e/PQRSTUVWXYZa e/WXYZabcdefgh e/defghijkmnop +9
HighBack‹generated-workload-112› +3234567890123 · eu-west-1‹i-00000000000000070›64d
Disabling the key makes the existing log files unreadable now. A deletion that runs its course makes them unreadable permanently, without a single log file being touched. Default policy version changed on an attached policy by a non-deployer on generated-workload-112 in eu-west-1 (account 234567890123): first seen 64 days ago and still present on the run that wrote this board; the weak set grew from 0 to 2 between the two runs, and none of the new members is covered by an allowlist entry.V-003 · f/5s1aU9pWLu · e/Zabcdefghijk e/ghijkmnopqrs e/789ABCDEFGHJ +5
HighBack‹generated-workload-82› +8234567890123 · eu-west-1‹i-00000000000000052›34d
Disabling the key makes the existing log files unreadable now. A deletion that runs its course makes them unreadable permanently, without a single log file being touched. Default policy version changed on an attached policy by a non-deployer on generated-workload-82 in eu-west-1 (account 234567890123): first seen 34 days ago and still present on the run that wrote this board; the weak set grew from 2 to 4 between the two runs, and none of the new members is covered by an allowlist entry.V-003 · f/6tvoDDpoWT · e/3456789ABCDE e/ABCDEFGHJKLM e/HJKLMNPQRSTU +2
HighBack‹generated-workload-2› +5sandbox · eu-west-1‹i-00000000000000002›14d
Disabling the key makes the existing log files unreadable now. A deletion that runs its course makes them unreadable permanently, without a single log file being touched. Default policy version changed on an attached policy by a non-deployer on generated-workload-2 in eu-west-1 (account 345678901234): first seen 14 days ago and still present on the run that wrote this board; the weak set grew from 2 to 4 between the two runs, and none of the new members is covered by an allowlist entry.V-003 · f/5Ynpo3N41f · e/3456789ABCDE e/ABCDEFGHJKLM e/HJKLMNPQRSTU +3
Default policy version changed on an attached policy by a non-deployer3
MediumBack‹generated-workload-92› +4sandbox · eu-west-1‹i-0000000000000005c›104d
Disabling the key makes the existing log files unreadable now. A deletion that runs its course makes them unreadable permanently, without a single log file being touched. Default policy version changed on an attached policy by a non-deployer on generated-workload-92 in eu-west-1 (account 345678901234): first seen 104 days ago and still present on the run that wrote this board; the weak set grew from 0 to 2 between the two runs, and none of the new members is covered by an allowlist entry.V-003 · f/2VG3MsB7GC · e/DEFGHJKLMNPQ e/LMNPQRSTUVWX e/TUVWXYZabcde +3
MediumBack‹generated-workload-12› +8prod-acct · eu-west-1 / payments-prod-cluster-0‹i-0000000000000000c›84d
Disabling the key makes the existing log files unreadable now. A deletion that runs its course makes them unreadable permanently, without a single log file being touched. Default policy version changed on an attached policy by a non-deployer on generated-workload-12 in eu-west-1 (account 123456789012): first seen 84 days ago and still present on the run that wrote this board; the weak set grew from 0 to 2 between the two runs, and none of the new members is covered by an allowlist entry.V-003 · f/H2nPpcxPT7 · e/DEFGHJKLMNPQ e/LMNPQRSTUVWX e/TUVWXYZabcde +4
MediumBack‹generated-workload-52› +6234567890123 · eu-west-1‹i-00000000000000034›4d
Disabling the key makes the existing log files unreadable now. A deletion that runs its course makes them unreadable permanently, without a single log file being touched. Default policy version changed on an attached policy by a non-deployer on generated-workload-52 in eu-west-1 (account 234567890123): first seen 4 days ago and still present on the run that wrote this board; the weak set grew from 0 to 2 between the two runs, and none of the new members is covered by an allowlist entry.V-003 · f/2LRiP945Ug · e/DEFGHJKLMNPQ e/LMNPQRSTUVWX e/TUVWXYZabcde +8