Also having to explain to checkbox checkers, that yes in fact we are using AMI's that are not owned by our organization, and that in fact shouldn't be showing up as a risk. We are in fact using the AWS managed AMI for our EKS cluster, because that is the entire point.