Findings

Disabling the key makes the existing log files unreadable now. A deletion that runs its course makes them unreadable permanently, without a single log file being touched. Trail KMS key disabled or scheduled for deletion on generated-workload-101 in us-west-2 (account 345678901234): first seen 167 days ago and still present on the run that wrote this board; the weak set grew from 1 to 3 between the two runs, and none of the new members is covered by an allowlist entry.V-002 · f/Dpozcecxtf · e/NPQRSTUVWXYZ e/VWXYZabcdefg e/cdefghijkmno +3

Disabling the key makes the existing log files unreadable now. A deletion that runs its course makes them unreadable permanently, without a single log file being touched. Trail KMS key disabled or scheduled for deletion on generated-workload-21 in us-west-2 (account 123456789012): first seen 147 days ago and still present on the run that wrote this board; the weak set grew from 1 to 3 between the two runs, and none of the new members is covered by an allowlist entry.V-002 · f/DQKgLQfvca · e/NPQRSTUVWXYZ e/VWXYZabcdefg e/cdefghijkmno +4

Disabling the key makes the existing log files unreadable now. A deletion that runs its course makes them unreadable permanently, without a single log file being touched. Trail KMS key disabled or scheduled for deletion on generated-workload-61 in us-west-2 (account 234567890123): first seen 67 days ago and still present on the run that wrote this board; the weak set grew from 1 to 3 between the two runs, and none of the new members is covered by an allowlist entry.V-002 · f/BrNpNx68gA · e/NPQRSTUVWXYZ e/VWXYZabcdefg e/cdefghijkmno +8

Disabling the key makes the existing log files unreadable now. A deletion that runs its course makes them unreadable permanently, without a single log file being touched. OIDC provider client id added on generated-workload-45 in us-east-1 (account 123456789012): first seen 135 days ago and still present on the run that wrote this board; the weak set grew from 1 to 3 between the two runs, and none of the new members is covered by an allowlist entry.V-009 · f/7Xn4EfUed5 · e/6789ABCDEFGH e/DEFGHJKLMNPQ e/LMNPQRSTUVWX +1

Disabling the key makes the existing log files unreadable now. A deletion that runs its course makes them unreadable permanently, without a single log file being touched. OIDC provider client id added on generated-workload-85 in us-east-1 (account 234567890123): first seen 55 days ago and still present on the run that wrote this board; the weak set grew from 1 to 3 between the two runs, and none of the new members is covered by an allowlist entry.V-009 · f/AZu723CLkZ · e/6789ABCDEFGH e/DEFGHJKLMNPQ e/LMNPQRSTUVWX +5

Disabling the key makes the existing log files unreadable now. A deletion that runs its course makes them unreadable permanently, without a single log file being touched. OIDC provider client id added on generated-workload-5 in us-east-1 (account 345678901234): first seen 35 days ago and still present on the run that wrote this board; the weak set grew from 1 to 3 between the two runs, and none of the new members is covered by an allowlist entry.V-009 · f/FMFFSvbwzc · e/6789ABCDEFGH e/DEFGHJKLMNPQ e/LMNPQRSTUVWX +6

Disabling the key makes the existing log files unreadable now. A deletion that runs its course makes them unreadable permanently, without a single log file being touched. Access key minted on another user on generated-workload-93 in eu-central-1 (account 123456789012): first seen 111 days ago and still present on the run that wrote this board; the weak set grew from 1 to 3 between the two runs, and none of the new members is covered by an allowlist entry.V-004 · f/GMskVvih1C · e/EFGHJKLMNPQR e/MNPQRSTUVWXY e/UVWXYZabcdef +4

Disabling the key makes the existing log files unreadable now. A deletion that runs its course makes them unreadable permanently, without a single log file being touched. Access key minted on another user on generated-workload-13 in eu-central-1 (account 234567890123): first seen 91 days ago and still present on the run that wrote this board; the weak set grew from 1 to 3 between the two runs, and none of the new members is covered by an allowlist entry.V-004 · f/7fz68kAfKY · e/EFGHJKLMNPQR e/MNPQRSTUVWXY e/UVWXYZabcdef +5

Disabling the key makes the existing log files unreadable now. A deletion that runs its course makes them unreadable permanently, without a single log file being touched. Access key minted on another user on generated-workload-53 in eu-central-1 (account 345678901234): first seen 11 days ago and still present on the run that wrote this board; the weak set grew from 1 to 3 between the two runs, and none of the new members is covered by an allowlist entry.V-004 · f/FMc9nYTPDJ · e/EFGHJKLMNPQR e/MNPQRSTUVWXY e/UVWXYZabcdef +9

Disabling the key makes the existing log files unreadable now. A deletion that runs its course makes them unreadable permanently, without a single log file being touched. Access entry created or widened by a deployer identity on generated-workload-77 in eu-west-1 (account 345678901234): first seen 179 days ago and still present on the run that wrote this board; the weak set grew from 1 to 3 between the two runs, and none of the new members is covered by an allowlist entry.V-012 · f/4xd3CVdDLn · e/efghijkmnopq e/56789ABCDEFG e/CDEFGHJKLMNP +6

Disabling the key makes the existing log files unreadable now. A deletion that runs its course makes them unreadable permanently, without a single log file being touched. Access entry created or widened by a deployer identity on generated-workload-37 in eu-west-1 (account 234567890123): first seen 79 days ago and still present on the run that wrote this board; the weak set grew from 1 to 3 between the two runs, and none of the new members is covered by an allowlist entry.V-012 · f/znw4WBaQFp · e/efghijkmnopq e/56789ABCDEFG e/CDEFGHJKLMNP +2

Disabling the key makes the existing log files unreadable now. A deletion that runs its course makes them unreadable permanently, without a single log file being touched. Console login without MFA on generated-workload-69 in ap-southeast-1 (account 123456789012): first seen 123 days ago and still present on the run that wrote this board; the weak set grew from 1 to 3 between the two runs, and none of the new members is covered by an allowlist entry.V-022 · f/2s2ZhzYaPj · e/WXYZabcdefgh e/defghijkmnop e/456789ABCDEF +7

Disabling the key makes the existing log files unreadable now. A deletion that runs its course makes them unreadable permanently, without a single log file being touched. Console login without MFA on generated-workload-109 in ap-southeast-1 (account 234567890123): first seen 43 days ago and still present on the run that wrote this board; the weak set grew from 1 to 3 between the two runs, and none of the new members is covered by an allowlist entry.V-022 · f/kQ474mDYyP · e/WXYZabcdefgh e/defghijkmnop e/456789ABCDEF +2

Disabling the key makes the existing log files unreadable now. A deletion that runs its course makes them unreadable permanently, without a single log file being touched. Console login without MFA on generated-workload-29 in ap-southeast-1 (account 345678901234): first seen 23 days ago and still present on the run that wrote this board; the weak set grew from 1 to 3 between the two runs, and none of the new members is covered by an allowlist entry.V-022 · f/BXCtmhEQyJ · e/WXYZabcdefgh e/defghijkmnop e/456789ABCDEF +3