Total Monthly Cost: $1695.14
| Service | Cost (USD) | Percentage |
|---|---|---|
| Amazon Elastic Compute Cloud - Compute | $1692.05 | 99.8% |
| EC2 - Other | $2.15 | 0.1% |
| Amazon Virtual Private Cloud | $0.94 | 0.1% |
| AWS CloudShell | $0.00 | 0.0% |
| AWS Secrets Manager | $0.00 | 0.0% |
| Severity | Category | Issue & Description | Resource & How to Fix |
|---|---|---|---|
| đ¨ CRITICAL | Network Security |
RDP Port Open to Internet
Security group launch-wizard-3 (sg-02fb1909dd2006124) allows RDP (port 3389) from 0.0.0.0/0
|
sg-02fb1909dd2006124
đĄ Fix: Restrict RDP access to specific IP addresses
|
| đ¨ CRITICAL | Network Security |
SSH Port Open to Internet
Security group launch-wizard-2 (sg-0c01e3f8089b8b319) allows SSH (port 22) from 0.0.0.0/0
|
sg-0c01e3f8089b8b319
đĄ Fix: Restrict SSH access to specific IP addresses
|
| đ¨ CRITICAL | Network Security |
SSH Port Open to Internet
Security group launch-wizard-1 (sg-0b57710eeffe7e001) allows SSH (port 22) from 0.0.0.0/0
|
sg-0b57710eeffe7e001
đĄ Fix: Restrict SSH access to specific IP addresses
|
| đ MEDIUM | Data Security |
Unencrypted EBS Volume
EBS volume vol-09399b0f334ad58e9 (200 GB) is not encrypted
|
vol-09399b0f334ad58e9
đĄ Fix: Enable encryption for EBS volumes
|
| âšī¸ LOW | Architecture |
Resources in Default VPC
1 EC2 instances found in default VPC vpc-0f1d06c1fe156cc50
|
vpc-0f1d06c1fe156cc50
đĄ Fix: Consider using custom VPCs for better network isolation
|
| âĸ INFO | Network Security |
EC2 Instance with Public IP
Instance i-0237da95ced8fe8e2 (Bluechip) has public IP 63.176.33.172
|
i-0237da95ced8fe8e2
đĄ Fix: Review if public IP is necessary; consider using NAT Gateway
|
| â ī¸ HIGH | Identity & Access |
IAM User Without MFA
IAM user darshika.sathwara@calyzatech.com has console access but no MFA enabled
|
darshika.sathwara@calyzatech.com
đĄ Fix: Enable MFA for all users with console access
|
| â ī¸ HIGH | Identity & Access |
IAM User Without MFA
IAM user ramesh.prajapati@calyzatech.com has console access but no MFA enabled
|
ramesh.prajapati@calyzatech.com
đĄ Fix: Enable MFA for all users with console access
|
| â ī¸ HIGH | Identity & Access |
IAM User Without MFA
IAM user shamsh.pathan@calyzatech.com has console access but no MFA enabled
|
shamsh.pathan@calyzatech.com
đĄ Fix: Enable MFA for all users with console access
|
| đ MEDIUM | Identity & Access |
Unused Access Key
User shamsh.pathan@calyzatech.com access key 1 not used in over 90 days
|
shamsh.pathan@calyzatech.com
đĄ Fix: Rotate or delete unused access keys
|
| â ī¸ HIGH | Identity & Access |
No Password Policy Configured
No custom password policy is configured for the account
|
password-policy
đĄ Fix: Configure a strong password policy
|
| đ MEDIUM | Identity & Access |
Access Key Needs Rotation
User akash.kachhadiya@calyzatech.com has access key AKIAXMT2... that is 90 days old
|
akash.kachhadiya@calyzatech.com
đĄ Fix: Rotate access keys at least every 90 days
|
| đ MEDIUM | Identity & Access |
Access Key Needs Rotation
User bhadresh.bhadreshwara@calyzatech.com has access key AKIAXMT2... that is 277 days old
|
bhadresh.bhadreshwara@calyzatech.com
đĄ Fix: Rotate access keys at least every 90 days
|
| đ MEDIUM | Identity & Access |
Access Key Needs Rotation
User shamsh.pathan@calyzatech.com has access key AKIAXMT2... that is 244 days old
|
shamsh.pathan@calyzatech.com
đĄ Fix: Rotate access keys at least every 90 days
|
| Category | Issue & Details | Resource | Savings | Action Required |
|---|---|---|---|---|
| đĨī¸ Compute |
Underutilized EC2 Instance
Instance i-0237da95ced8fe8e2 (Bluechip) has 6.7% average CPU over 7 days. Consider rightsizing.
|
i-0237da95ced8fe8e2 |
$36.00 /month |
đĄ Consider downsizing instance type or using Auto Scaling
|
| đž Storage |
S3 Bucket Without Lifecycle Policy
Bucket cf-templates-1fe03f7mv66ex-ap-south-1 has no lifecycle policy for automatic data management
|
cf-templates-1fe03f7mv66ex-ap-south-1 |
$5.00 /month |
đĄ Add lifecycle policy to transition/expire old objects
|
| đž Storage |
S3 Bucket Without Lifecycle Policy
Bucket gensc-ai-storage-508137168365 has no lifecycle policy for automatic data management
|
gensc-ai-storage-508137168365 |
$5.00 /month |
đĄ Add lifecycle policy to transition/expire old objects
|