{
  "report_metadata": {
    "generated_at": "2026-08-10T11:38:25.518470",
    "tool_version": "1.0.0",
    "account_info": {
      "account_id": "508137168365",
      "user_arn": "arn:aws:iam::508137168365:user/bhadresh.bhadreshwara@calyzatech.com",
      "user_id": "AIDAXMT2V3XWYQO57IX7Z",
      "region": "eu-central-1"
    }
  },
  "cost_analysis": {
    "total_cost": 1695.14,
    "cost_by_service": [
      {
        "service": "Amazon Elastic Compute Cloud - Compute",
        "cost": 1692.05,
        "currency": "USD",
        "percentage": 99.8
      },
      {
        "service": "EC2 - Other",
        "cost": 2.15,
        "currency": "USD",
        "percentage": 0.1
      },
      {
        "service": "Amazon Virtual Private Cloud",
        "cost": 0.94,
        "currency": "USD",
        "percentage": 0.1
      },
      {
        "service": "AWS CloudShell",
        "cost": 0.0,
        "currency": "USD",
        "percentage": 0.0
      },
      {
        "service": "AWS Secrets Manager",
        "cost": 0.0,
        "currency": "USD",
        "percentage": 0.0
      }
    ],
    "cost_by_region": [
      {
        "region": "eu-central-1",
        "cost": 1695.14
      },
      {
        "region": "global",
        "cost": 153.18
      },
      {
        "region": "us-east-1",
        "cost": 34.17
      },
      {
        "region": "ap-south-1",
        "cost": 4.61
      },
      {
        "region": "ap-northeast-1",
        "cost": 0.2
      }
    ],
    "cost_trend": [
      {
        "date": "2026-07-11",
        "cost": 0.0
      },
      {
        "date": "2026-07-12",
        "cost": 0.0
      },
      {
        "date": "2026-07-13",
        "cost": 0.0
      },
      {
        "date": "2026-07-14",
        "cost": 0.0
      },
      {
        "date": "2026-07-15",
        "cost": 0.0
      },
      {
        "date": "2026-07-16",
        "cost": 0.0
      },
      {
        "date": "2026-07-17",
        "cost": 0.0
      },
      {
        "date": "2026-07-18",
        "cost": 0.0
      },
      {
        "date": "2026-07-19",
        "cost": 0.0
      },
      {
        "date": "2026-07-20",
        "cost": 0.0
      },
      {
        "date": "2026-07-21",
        "cost": 0.0
      },
      {
        "date": "2026-07-22",
        "cost": 0.0
      },
      {
        "date": "2026-07-23",
        "cost": 0.0
      },
      {
        "date": "2026-07-24",
        "cost": 187.06
      },
      {
        "date": "2026-07-25",
        "cost": 215.14
      },
      {
        "date": "2026-07-26",
        "cost": 215.16
      },
      {
        "date": "2026-07-27",
        "cost": 215.16
      },
      {
        "date": "2026-07-28",
        "cost": 215.3
      },
      {
        "date": "2026-07-29",
        "cost": 215.77
      },
      {
        "date": "2026-07-30",
        "cost": 215.77
      },
      {
        "date": "2026-07-31",
        "cost": 215.77
      },
      {
        "date": "2026-08-01",
        "cost": 215.77
      },
      {
        "date": "2026-08-02",
        "cost": 215.77
      },
      {
        "date": "2026-08-03",
        "cost": 215.77
      },
      {
        "date": "2026-08-04",
        "cost": 220.19
      },
      {
        "date": "2026-08-05",
        "cost": 415.24
      },
      {
        "date": "2026-08-06",
        "cost": 485.35
      },
      {
        "date": "2026-08-07",
        "cost": 358.19
      },
      {
        "date": "2026-08-08",
        "cost": 392.62
      },
      {
        "date": "2026-08-09",
        "cost": 392.3
      }
    ],
    "forecast": null,
    "top_cost_drivers": [
      {
        "type": "EC2",
        "detail": "g7e.8xlarge",
        "cost": 1692.05
      },
      {
        "type": "EC2",
        "detail": "NoInstanceType",
        "cost": 0.0
      }
    ],
    "anomalies": [],
    "recommendations": [],
    "data_source": "billing_api",
    "estimation_note": null
  },
  "resource_inventory": {
    "ec2_instances": [
      {
        "instance_id": "i-0237da95ced8fe8e2",
        "instance_type": "g7e.12xlarge",
        "state": "running",
        "name": "Bluechip",
        "launch_time": "2026-08-07 12:03:15+00:00",
        "private_ip": "172.31.24.168",
        "public_ip": "63.176.33.172",
        "vpc_id": "vpc-0f1d06c1fe156cc50",
        "region": "eu-central-1"
      }
    ],
    "ec2_volumes": [
      {
        "volume_id": "vol-09399b0f334ad58e9",
        "size_gb": 200,
        "volume_type": "gp3",
        "state": "in-use",
        "attached_to": "i-0237da95ced8fe8e2",
        "encrypted": false,
        "name": "",
        "region": "eu-central-1"
      }
    ],
    "ec2_security_groups": [
      {
        "group_id": "sg-02488d67a1a1f0a9f",
        "group_name": "default",
        "description": "default VPC security group",
        "vpc_id": "vpc-0f1d06c1fe156cc50",
        "inbound_rules_count": 1,
        "outbound_rules_count": 1,
        "region": "eu-central-1"
      },
      {
        "group_id": "sg-02fb1909dd2006124",
        "group_name": "launch-wizard-3",
        "description": "launch-wizard-3 created 2026-08-05T04:39:24.770Z",
        "vpc_id": "vpc-0f1d06c1fe156cc50",
        "inbound_rules_count": 1,
        "outbound_rules_count": 1,
        "region": "eu-central-1"
      },
      {
        "group_id": "sg-0c01e3f8089b8b319",
        "group_name": "launch-wizard-2",
        "description": "launch-wizard-2 created 2026-07-24T03:06:49.859Z",
        "vpc_id": "vpc-0f1d06c1fe156cc50",
        "inbound_rules_count": 3,
        "outbound_rules_count": 1,
        "region": "eu-central-1"
      },
      {
        "group_id": "sg-0b57710eeffe7e001",
        "group_name": "launch-wizard-1",
        "description": "launch-wizard-1 created 2026-07-23T15:53:54.288Z",
        "vpc_id": "vpc-0f1d06c1fe156cc50",
        "inbound_rules_count": 1,
        "outbound_rules_count": 1,
        "region": "eu-central-1"
      }
    ],
    "ec2_elastic_ips": [
      {
        "public_ip": "63.176.33.172",
        "allocation_id": "eipalloc-02dd769f7d764b651",
        "instance_id": "i-0237da95ced8fe8e2",
        "association_id": "eipassoc-014374a19976475fc",
        "is_attached": true,
        "region": "eu-central-1"
      }
    ],
    "rds_instances": [],
    "s3_buckets": [
      {
        "bucket_name": "cf-templates-1fe03f7mv66ex-ap-south-1",
        "creation_date": "2026-05-12 11:42:42+00:00",
        "region": "ap-south-1"
      },
      {
        "bucket_name": "fraud-detection-llm-ramesh-20260512",
        "creation_date": "2026-05-12 11:50:47+00:00",
        "region": "ap-south-1"
      },
      {
        "bucket_name": "gensc-ai-storage-508137168365",
        "creation_date": "2026-06-08 07:31:46+00:00",
        "region": "ap-south-1"
      },
      {
        "bucket_name": "seminal-brands-enterprise-documents-508137168365",
        "creation_date": "2026-04-29 05:30:45+00:00",
        "region": "us-east-1"
      },
      {
        "bucket_name": "seminal-brands-logos-508137168365",
        "creation_date": "2026-05-01 06:43:55+00:00",
        "region": "us-east-1"
      }
    ],
    "lambda_functions": [],
    "ecs_clusters": [],
    "load_balancers": [],
    "nat_gateways": [],
    "vpcs": [
      {
        "vpc_id": "vpc-0f1d06c1fe156cc50",
        "cidr_block": "172.31.0.0/16",
        "state": "available",
        "is_default": true,
        "name": "",
        "region": "eu-central-1"
      }
    ],
    "ecr_repositories": [],
    "cloudfront_distributions": [],
    "secrets": [],
    "summary": {
      "total_ec2_instances": 1,
      "running_ec2_instances": 1,
      "stopped_ec2_instances": 0,
      "total_ebs_volumes": 1,
      "unattached_volumes": 0,
      "total_ebs_storage_gb": 200,
      "total_security_groups": 4,
      "total_elastic_ips": 1,
      "unused_elastic_ips": 0,
      "total_rds_instances": 0,
      "total_s3_buckets": 5,
      "total_lambda_functions": 0,
      "total_ecs_clusters": 0,
      "total_load_balancers": 0,
      "total_nat_gateways": 0,
      "total_vpcs": 1,
      "total_ecr_repositories": 0,
      "total_cloudfront_distributions": 0,
      "total_secrets": 0,
      "regions_scanned": [
        "eu-central-1"
      ]
    },
    "iam_summary": {
      "users": 5,
      "groups": 1,
      "roles": 28,
      "policies": 1,
      "mfa_devices": 3,
      "access_keys": 2
    }
  },
  "security_audit": {
    "findings": [
      {
        "severity": "CRITICAL",
        "category": "Network Security",
        "title": "RDP Port Open to Internet",
        "description": "Security group launch-wizard-3 (sg-02fb1909dd2006124) allows RDP (port 3389) from 0.0.0.0/0",
        "resource": "sg-02fb1909dd2006124",
        "region": "eu-central-1",
        "recommendation": "Restrict RDP access to specific IP addresses",
        "timestamp": "2026-08-10T11:38:00.987826"
      },
      {
        "severity": "CRITICAL",
        "category": "Network Security",
        "title": "SSH Port Open to Internet",
        "description": "Security group launch-wizard-2 (sg-0c01e3f8089b8b319) allows SSH (port 22) from 0.0.0.0/0",
        "resource": "sg-0c01e3f8089b8b319",
        "region": "eu-central-1",
        "recommendation": "Restrict SSH access to specific IP addresses",
        "timestamp": "2026-08-10T11:38:00.987851"
      },
      {
        "severity": "CRITICAL",
        "category": "Network Security",
        "title": "SSH Port Open to Internet",
        "description": "Security group launch-wizard-1 (sg-0b57710eeffe7e001) allows SSH (port 22) from 0.0.0.0/0",
        "resource": "sg-0b57710eeffe7e001",
        "region": "eu-central-1",
        "recommendation": "Restrict SSH access to specific IP addresses",
        "timestamp": "2026-08-10T11:38:00.987861"
      },
      {
        "severity": "MEDIUM",
        "category": "Data Security",
        "title": "Unencrypted EBS Volume",
        "description": "EBS volume vol-09399b0f334ad58e9 (200 GB) is not encrypted",
        "resource": "vol-09399b0f334ad58e9",
        "region": "eu-central-1",
        "recommendation": "Enable encryption for EBS volumes",
        "timestamp": "2026-08-10T11:38:01.471344"
      },
      {
        "severity": "LOW",
        "category": "Architecture",
        "title": "Resources in Default VPC",
        "description": "1 EC2 instances found in default VPC vpc-0f1d06c1fe156cc50",
        "resource": "vpc-0f1d06c1fe156cc50",
        "region": "eu-central-1",
        "recommendation": "Consider using custom VPCs for better network isolation",
        "timestamp": "2026-08-10T11:38:03.023331"
      },
      {
        "severity": "INFO",
        "category": "Network Security",
        "title": "EC2 Instance with Public IP",
        "description": "Instance i-0237da95ced8fe8e2 (Bluechip) has public IP 63.176.33.172",
        "resource": "i-0237da95ced8fe8e2",
        "region": "eu-central-1",
        "recommendation": "Review if public IP is necessary; consider using NAT Gateway",
        "timestamp": "2026-08-10T11:38:03.517209"
      },
      {
        "severity": "HIGH",
        "category": "Identity & Access",
        "title": "IAM User Without MFA",
        "description": "IAM user darshika.sathwara@calyzatech.com has console access but no MFA enabled",
        "resource": "darshika.sathwara@calyzatech.com",
        "region": "global",
        "recommendation": "Enable MFA for all users with console access",
        "timestamp": "2026-08-10T11:38:09.126894"
      },
      {
        "severity": "HIGH",
        "category": "Identity & Access",
        "title": "IAM User Without MFA",
        "description": "IAM user ramesh.prajapati@calyzatech.com has console access but no MFA enabled",
        "resource": "ramesh.prajapati@calyzatech.com",
        "region": "global",
        "recommendation": "Enable MFA for all users with console access",
        "timestamp": "2026-08-10T11:38:09.566517"
      },
      {
        "severity": "HIGH",
        "category": "Identity & Access",
        "title": "IAM User Without MFA",
        "description": "IAM user shamsh.pathan@calyzatech.com has console access but no MFA enabled",
        "resource": "shamsh.pathan@calyzatech.com",
        "region": "global",
        "recommendation": "Enable MFA for all users with console access",
        "timestamp": "2026-08-10T11:38:09.990771"
      },
      {
        "severity": "MEDIUM",
        "category": "Identity & Access",
        "title": "Unused Access Key",
        "description": "User shamsh.pathan@calyzatech.com access key 1 not used in over 90 days",
        "resource": "shamsh.pathan@calyzatech.com",
        "region": "global",
        "recommendation": "Rotate or delete unused access keys",
        "timestamp": "2026-08-10T11:38:11.587645"
      },
      {
        "severity": "HIGH",
        "category": "Identity & Access",
        "title": "No Password Policy Configured",
        "description": "No custom password policy is configured for the account",
        "resource": "password-policy",
        "region": "global",
        "recommendation": "Configure a strong password policy",
        "timestamp": "2026-08-10T11:38:12.179688"
      },
      {
        "severity": "MEDIUM",
        "category": "Identity & Access",
        "title": "Access Key Needs Rotation",
        "description": "User bhadresh.bhadreshwara@calyzatech.com has access key AKIAXMT2... that is 277 days old",
        "resource": "bhadresh.bhadreshwara@calyzatech.com",
        "region": "global",
        "recommendation": "Rotate access keys at least every 90 days",
        "timestamp": "2026-08-10T11:38:13.198614"
      },
      {
        "severity": "MEDIUM",
        "category": "Identity & Access",
        "title": "Access Key Needs Rotation",
        "description": "User shamsh.pathan@calyzatech.com has access key AKIAXMT2... that is 244 days old",
        "resource": "shamsh.pathan@calyzatech.com",
        "region": "global",
        "recommendation": "Rotate access keys at least every 90 days",
        "timestamp": "2026-08-10T11:38:13.837548"
      }
    ],
    "summary": {
      "critical": 3,
      "high": 4,
      "medium": 4,
      "low": 1,
      "info": 1,
      "total": 13
    }
  },
  "optimization": {
    "recommendations": [
      {
        "category": "Compute",
        "title": "Underutilized EC2 Instance",
        "description": "Instance i-0237da95ced8fe8e2 (Bluechip) has 7.4% average CPU over 7 days. Consider rightsizing.",
        "resource": "i-0237da95ced8fe8e2",
        "region": "eu-central-1",
        "estimated_monthly_savings": 36.0,
        "effort": "Medium",
        "risk": "Medium",
        "action": "Consider downsizing instance type or using Auto Scaling",
        "timestamp": "2026-08-10T11:38:15.887445"
      },
      {
        "category": "Storage",
        "title": "S3 Bucket Without Lifecycle Policy",
        "description": "Bucket cf-templates-1fe03f7mv66ex-ap-south-1 has no lifecycle policy for automatic data management",
        "resource": "cf-templates-1fe03f7mv66ex-ap-south-1",
        "region": "global",
        "estimated_monthly_savings": 5.0,
        "effort": "Low",
        "risk": "Low",
        "action": "Add lifecycle policy to transition/expire old objects",
        "timestamp": "2026-08-10T11:38:20.679256"
      },
      {
        "category": "Storage",
        "title": "S3 Bucket Without Lifecycle Policy",
        "description": "Bucket gensc-ai-storage-508137168365 has no lifecycle policy for automatic data management",
        "resource": "gensc-ai-storage-508137168365",
        "region": "global",
        "estimated_monthly_savings": 5.0,
        "effort": "Low",
        "risk": "Low",
        "action": "Add lifecycle policy to transition/expire old objects",
        "timestamp": "2026-08-10T11:38:21.561498"
      }
    ],
    "summary": {
      "total_recommendations": 3,
      "potential_monthly_savings": 46.0,
      "potential_annual_savings": 552.0,
      "by_category": {
        "Compute": {
          "count": 1,
          "savings": 36.0
        },
        "Storage": {
          "count": 2,
          "savings": 10.0
        }
      }
    }
  }
}