# 🔍 AWS Health Check Report

**📅 Generated:** 2026-08-11 05:33:00 UTC

**🏢 Account ID:** 508137168365

**🌍 Region:** eu-central-1

---

## 📊 Executive Summary

| Metric | Value |
|--------|-------|
| 💰 Monthly Cost | **$1695.14** |
| 🔒 Security Findings | **14** |
| 🚨 Critical Issues | **3** |
| 🚀 Optimization Opportunities | **3** |
| 💵 Potential Monthly Savings | **$46.00** |

## 💰 Cost Analysis

**Total Monthly Cost:** $1695.14

### Cost by Service

| Service | Cost (USD) | % |
|---------|------------|---|
| Amazon Elastic Compute Cloud - Compute | $1692.05 | 99.8% |
| EC2 - Other | $2.15 | 0.1% |
| Amazon Virtual Private Cloud | $0.94 | 0.1% |
| AWS CloudShell | $0.00 | 0.0% |
| AWS Secrets Manager | $0.00 | 0.0% |

## 🔒 Security Audit

### Summary

| Severity | Count |
|----------|-------|
| 🚨 Critical | **3** |
| ⚠️ High | **4** |
| 📋 Medium | **5** |
| ℹ️ Low | **1** |

### Security Findings Detail

| Severity | Issue | Resource Name | What's Wrong | How to Fix |
|----------|-------|---------------|--------------|------------|
| 🚨 CRITICAL | RDP Port Open to Internet | `sg-02fb1909dd2006124` | Security group launch-wizard-3 (sg-02fb1909dd2006124) allows RDP (port 3389) fro | Restrict RDP access to specific IP addresses |
| 🚨 CRITICAL | SSH Port Open to Internet | `sg-0c01e3f8089b8b319` | Security group launch-wizard-2 (sg-0c01e3f8089b8b319) allows SSH (port 22) from  | Restrict SSH access to specific IP addresses |
| 🚨 CRITICAL | SSH Port Open to Internet | `sg-0b57710eeffe7e001` | Security group launch-wizard-1 (sg-0b57710eeffe7e001) allows SSH (port 22) from  | Restrict SSH access to specific IP addresses |
| 📋 MEDIUM | Unencrypted EBS Volume | `vol-09399b0f334ad58e9` | EBS volume vol-09399b0f334ad58e9 (200 GB) is not encrypted | Enable encryption for EBS volumes |
| ℹ️ LOW | Resources in Default VPC | `vpc-0f1d06c1fe156cc50` | 1 EC2 instances found in default VPC vpc-0f1d06c1fe156cc50 | Consider using custom VPCs for better network isolation |
| • INFO | EC2 Instance with Public IP | `i-0237da95ced8fe8e2` | Instance i-0237da95ced8fe8e2 (Bluechip) has public IP 63.176.33.172 | Review if public IP is necessary; consider using NAT Gateway |
| ⚠️ HIGH | IAM User Without MFA | `darshika.sathwara@calyzatech.com` | IAM user darshika.sathwara@calyzatech.com has console access but no MFA enabled | Enable MFA for all users with console access |
| ⚠️ HIGH | IAM User Without MFA | `ramesh.prajapati@calyzatech.com` | IAM user ramesh.prajapati@calyzatech.com has console access but no MFA enabled | Enable MFA for all users with console access |
| ⚠️ HIGH | IAM User Without MFA | `shamsh.pathan@calyzatech.com` | IAM user shamsh.pathan@calyzatech.com has console access but no MFA enabled | Enable MFA for all users with console access |
| 📋 MEDIUM | Unused Access Key | `shamsh.pathan@calyzatech.com` | User shamsh.pathan@calyzatech.com access key 1 not used in over 90 days | Rotate or delete unused access keys |
| ⚠️ HIGH | No Password Policy Configured | `password-policy` | No custom password policy is configured for the account | Configure a strong password policy |
| 📋 MEDIUM | Access Key Needs Rotation | `akash.kachhadiya@calyzatech.com` | User akash.kachhadiya@calyzatech.com has access key AKIAXMT2... that is 90 days  | Rotate access keys at least every 90 days |
| 📋 MEDIUM | Access Key Needs Rotation | `bhadresh.bhadreshwara@calyzatech.com` | User bhadresh.bhadreshwara@calyzatech.com has access key AKIAXMT2... that is 277 | Rotate access keys at least every 90 days |
| 📋 MEDIUM | Access Key Needs Rotation | `shamsh.pathan@calyzatech.com` | User shamsh.pathan@calyzatech.com has access key AKIAXMT2... that is 244 days ol | Rotate access keys at least every 90 days |

## 🚀 Optimization Recommendations

**💵 Potential Monthly Savings:** $46.00

**📅 Potential Annual Savings:** $552.00

### Recommendations Detail

| Category | Issue | Resource | Savings | Action Required |
|----------|-------|----------|---------|----------------|
| 🖥️ Compute | Underutilized EC2 Instance | `i-0237da95ced8fe8e2` | **$36.00/mo** | Consider downsizing instance type or using Auto Sc |
| 💾 Storage | S3 Bucket Without Lifecycle Policy | `cf-templates-1fe03f7mv66ex-ap-` | **$5.00/mo** | Add lifecycle policy to transition/expire old obje |
| 💾 Storage | S3 Bucket Without Lifecycle Policy | `gensc-ai-storage-508137168365` | **$5.00/mo** | Add lifecycle policy to transition/expire old obje |

## 🖥️ Resource Inventory

| Resource Type | Count |
|---------------|-------|
| EC2 Instances | 1 |
| EBS Volumes | 1 |
| RDS Instances | 0 |
| S3 Buckets | 5 |
| Lambda Functions | 0 |
| Load Balancers | 0 |
| NAT Gateways | 0 |
| Elastic IPs | 1 |