Instances currently don't have a state like "allocating", "running", "down for maintenance", etc., so instances in a bad state show a misleading error when accessed.
They should have a top-level state and instances in a down state should provide clear messaging when accessed.
The administrative UI should show state information.
| Restricted Diffusion Commit | |
| Restricted Diffusion Commit | |
| Restricted Diffusion Commit | |
| Restricted Diffusion Commit | |
| Restricted Diffusion Commit |
Until we have this, there's also a narrow race window between the time that we bring up an instance and when we sync the first account. During this window, an attacker could load the instance and complete the "create admin account" workflow before we publish the real account.
Launching instances into an "initializing" state and preventing access until sync completes is the correct fix to prevent this attack and improve UX.