Treat AWS account 798513555087 as vendor-managed (Midnight Digital Pvt. Ltd.), not Runwal-owned. Runwal has IAM-level AdministratorAccess but no root-account, billing-write, or org-master control. All

Decision

Treat AWS account 798513555087 as vendor-managed (Midnight Digital Pvt. Ltd.), not Runwal-owned. Runwal has IAM-level AdministratorAccess but no root-account, billing-write, or org-master control. All future AWS work in this account must factor vendor sovereignty risk. Recommend P0 contract verification, P1 root-email transfer + resource inventory, P2 full billing access for Runwal user, P3 migration to Runwal-owned account.

Rationale

Audit via AWS MCP confirmed: root email aws@themidnight.in, account contact Sagar Gauswami / Midnight Digital, equal-admin user Jay-chavda with full billing. Runwal’s IAM AdministratorAccess can be revoked by vendor at any time via root override. Strategic-weight finding triggered by AJ’s correct suspicion.

Alternatives Rejected

Outcome

Pending