Findings

Disabling the key makes the existing log files unreadable now. A deletion that runs its course makes them unreadable permanently, without a single log file being touched. Administrator-equivalent AWS-managed policy on a service principal on generated-workload-76 in us-west-2 (account 234567890123): first seen 172 days ago and still present on the run that wrote this board; the weak set grew from 0 to 2 between the two runs, and none of the new members is covered by an allowlist entry.V-010 · f/BaGGY9vEX4 · e/defghijkmnop e/456789ABCDEF e/BCDEFGHJKLMN +5

Disabling the key makes the existing log files unreadable now. A deletion that runs its course makes them unreadable permanently, without a single log file being touched. Administrator-equivalent AWS-managed policy on a service principal on generated-workload-116 in us-west-2 (account 345678901234): first seen 92 days ago and still present on the run that wrote this board; the weak set grew from 0 to 2 between the two runs, and none of the new members is covered by an allowlist entry.V-010 · f/FZdwXvfs3R · e/defghijkmnop e/456789ABCDEF e/BCDEFGHJKLMN +9

Disabling the key makes the existing log files unreadable now. A deletion that runs its course makes them unreadable permanently, without a single log file being touched. Administrator-equivalent AWS-managed policy on a service principal on generated-workload-36 in us-west-2 (account 123456789012): first seen 72 days ago and still present on the run that wrote this board; the weak set grew from 0 to 2 between the two runs, and none of the new members is covered by an allowlist entry.V-010 · f/F7qU6gjwsT · e/defghijkmnop e/456789ABCDEF e/BCDEFGHJKLMN +1