{
  "report_metadata": {
    "generated_at": "2026-08-11T05:33:45.297680",
    "tool_version": "1.0.0",
    "account_info": {
      "account_id": "508137168365",
      "user_arn": "arn:aws:iam::508137168365:user/bhadresh.bhadreshwara@calyzatech.com",
      "user_id": "AIDAXMT2V3XWYQO57IX7Z",
      "region": "ap-south-1"
    }
  },
  "cost_analysis": {
    "total_cost": 4.61,
    "cost_by_service": [
      {
        "service": "Amazon Virtual Private Cloud",
        "cost": 2.53,
        "currency": "USD",
        "percentage": 54.9
      },
      {
        "service": "EC2 - Other",
        "cost": 2.07,
        "currency": "USD",
        "percentage": 44.9
      },
      {
        "service": "Claude 3 Haiku (Amazon Bedrock Edition)",
        "cost": 0.01,
        "currency": "USD",
        "percentage": 0.2
      },
      {
        "service": "AWS CloudShell",
        "cost": 0.0,
        "currency": "USD",
        "percentage": 0.0
      },
      {
        "service": "AWS Lambda",
        "cost": 0.0,
        "currency": "USD",
        "percentage": 0.0
      },
      {
        "service": "Amazon Simple Storage Service",
        "cost": 0.0,
        "currency": "USD",
        "percentage": 0.0
      }
    ],
    "cost_by_region": [
      {
        "region": "eu-central-1",
        "cost": 1695.14
      },
      {
        "region": "global",
        "cost": 153.18
      },
      {
        "region": "us-east-1",
        "cost": 34.17
      },
      {
        "region": "ap-south-1",
        "cost": 4.61
      },
      {
        "region": "ap-northeast-1",
        "cost": 0.2
      }
    ],
    "cost_trend": [
      {
        "date": "2026-07-12",
        "cost": 0.14
      },
      {
        "date": "2026-07-13",
        "cost": 0.14
      },
      {
        "date": "2026-07-14",
        "cost": 0.14
      },
      {
        "date": "2026-07-15",
        "cost": 0.14
      },
      {
        "date": "2026-07-16",
        "cost": 0.14
      },
      {
        "date": "2026-07-17",
        "cost": 0.14
      },
      {
        "date": "2026-07-18",
        "cost": 0.16
      },
      {
        "date": "2026-07-19",
        "cost": 0.16
      },
      {
        "date": "2026-07-20",
        "cost": 0.16
      },
      {
        "date": "2026-07-21",
        "cost": 0.16
      },
      {
        "date": "2026-07-22",
        "cost": 0.21
      },
      {
        "date": "2026-07-23",
        "cost": 1.15
      },
      {
        "date": "2026-07-24",
        "cost": 0.17
      },
      {
        "date": "2026-07-25",
        "cost": 0.17
      },
      {
        "date": "2026-07-26",
        "cost": 0.17
      },
      {
        "date": "2026-07-27",
        "cost": 0.17
      },
      {
        "date": "2026-07-28",
        "cost": 0.17
      },
      {
        "date": "2026-07-29",
        "cost": 0.17
      },
      {
        "date": "2026-07-30",
        "cost": 0.17
      },
      {
        "date": "2026-07-31",
        "cost": 0.18
      },
      {
        "date": "2026-08-01",
        "cost": 0.47
      },
      {
        "date": "2026-08-02",
        "cost": 0.47
      },
      {
        "date": "2026-08-03",
        "cost": 0.47
      },
      {
        "date": "2026-08-04",
        "cost": 0.47
      },
      {
        "date": "2026-08-05",
        "cost": 0.47
      },
      {
        "date": "2026-08-06",
        "cost": 0.47
      },
      {
        "date": "2026-08-07",
        "cost": 0.47
      },
      {
        "date": "2026-08-08",
        "cost": 0.47
      },
      {
        "date": "2026-08-09",
        "cost": 0.47
      },
      {
        "date": "2026-08-10",
        "cost": 0.37
      }
    ],
    "forecast": {
      "predicted_cost": 11.24,
      "prediction_interval_lower": 10.11,
      "prediction_interval_upper": 12.36,
      "currency": "USD"
    },
    "top_cost_drivers": [],
    "anomalies": [],
    "recommendations": [
      {
        "category": "Budget",
        "priority": "Medium",
        "title": "Cost Increase Predicted",
        "description": "Forecast shows $11.24 next month, up from $4.61.",
        "potential_savings": "Review new resources and scaling policies"
      }
    ],
    "data_source": "billing_api",
    "estimation_note": null
  },
  "resource_inventory": {
    "ec2_instances": [
      {
        "instance_id": "i-03ac8e5680a75303e",
        "instance_type": "t2.micro",
        "state": "running",
        "name": "GenAi",
        "launch_time": "2026-02-02 04:42:13+00:00",
        "private_ip": "172.31.7.65",
        "public_ip": "3.7.8.27",
        "vpc_id": "vpc-02d91c7ad0eb51967",
        "region": "ap-south-1"
      }
    ],
    "ec2_volumes": [
      {
        "volume_id": "vol-0a61c05cbd5df04b4",
        "size_gb": 8,
        "volume_type": "gp3",
        "state": "in-use",
        "attached_to": "i-03ac8e5680a75303e",
        "encrypted": false,
        "name": "",
        "region": "ap-south-1"
      }
    ],
    "ec2_security_groups": [
      {
        "group_id": "sg-04613f402f88ad778",
        "group_name": "rocky-launch-wizard",
        "description": "Rocky GPU workstation launch-wizard-4 created 2026-07-22T06:24:06.859Z",
        "vpc_id": "vpc-02d91c7ad0eb51967",
        "inbound_rules_count": 3,
        "outbound_rules_count": 1,
        "region": "ap-south-1"
      },
      {
        "group_id": "sg-02e9a530d4f061ac2",
        "group_name": "launch-wizard-1",
        "description": "launch-wizard-1 created 2025-11-06T09:31:11.096Z",
        "vpc_id": "vpc-02d91c7ad0eb51967",
        "inbound_rules_count": 4,
        "outbound_rules_count": 1,
        "region": "ap-south-1"
      },
      {
        "group_id": "sg-0bc5292619620eb75",
        "group_name": "launch-wizard-2",
        "description": "launch-wizard-2 created 2026-01-10T08:53:37.217Z",
        "vpc_id": "vpc-02d91c7ad0eb51967",
        "inbound_rules_count": 3,
        "outbound_rules_count": 1,
        "region": "ap-south-1"
      },
      {
        "group_id": "sg-0e75e23ce00c2ffda",
        "group_name": "ansys-rocky-sg",
        "description": "SSH and DCV access for Ansys GPU workstation",
        "vpc_id": "vpc-02d91c7ad0eb51967",
        "inbound_rules_count": 3,
        "outbound_rules_count": 1,
        "region": "ap-south-1"
      },
      {
        "group_id": "sg-03a0b41324c87a1cf",
        "group_name": "launch-wizard-3",
        "description": "launch-wizard-3 created 2026-07-18T05:39:43.910Z",
        "vpc_id": "vpc-02d91c7ad0eb51967",
        "inbound_rules_count": 1,
        "outbound_rules_count": 1,
        "region": "ap-south-1"
      },
      {
        "group_id": "sg-002e441e1b8940e12",
        "group_name": "default",
        "description": "default VPC security group",
        "vpc_id": "vpc-02d91c7ad0eb51967",
        "inbound_rules_count": 1,
        "outbound_rules_count": 1,
        "region": "ap-south-1"
      },
      {
        "group_id": "sg-09c817780f51b283f",
        "group_name": "launch-wizard-5",
        "description": "launch-wizard-5 created 2026-07-22T18:12:59.434Z",
        "vpc_id": "vpc-02d91c7ad0eb51967",
        "inbound_rules_count": 1,
        "outbound_rules_count": 1,
        "region": "ap-south-1"
      },
      {
        "group_id": "sg-0b2f48d32d3180b76",
        "group_name": "launch-wizard-4",
        "description": "launch-wizard-4 created 2026-07-22T16:37:32.082Z",
        "vpc_id": "vpc-02d91c7ad0eb51967",
        "inbound_rules_count": 1,
        "outbound_rules_count": 1,
        "region": "ap-south-1"
      }
    ],
    "ec2_elastic_ips": [
      {
        "public_ip": "3.7.8.27",
        "allocation_id": "eipalloc-0364a36f793086d84",
        "instance_id": "i-03ac8e5680a75303e",
        "association_id": "eipassoc-017f22a2a4050e724",
        "is_attached": true,
        "region": "ap-south-1"
      }
    ],
    "rds_instances": [],
    "s3_buckets": [
      {
        "bucket_name": "cf-templates-1fe03f7mv66ex-ap-south-1",
        "creation_date": "2026-05-12 11:42:42+00:00",
        "region": "ap-south-1"
      },
      {
        "bucket_name": "fraud-detection-llm-ramesh-20260512",
        "creation_date": "2026-05-12 11:50:47+00:00",
        "region": "ap-south-1"
      },
      {
        "bucket_name": "gensc-ai-storage-508137168365",
        "creation_date": "2026-06-08 07:31:46+00:00",
        "region": "ap-south-1"
      },
      {
        "bucket_name": "seminal-brands-enterprise-documents-508137168365",
        "creation_date": "2026-04-29 05:30:45+00:00",
        "region": "us-east-1"
      },
      {
        "bucket_name": "seminal-brands-logos-508137168365",
        "creation_date": "2026-05-01 06:43:55+00:00",
        "region": "us-east-1"
      }
    ],
    "lambda_functions": [
      {
        "function_name": "gensc-ai-backend-lambda",
        "runtime": "python3.11",
        "memory": 1024,
        "timeout": 90,
        "last_modified": "2026-06-08T08:31:19.000+0000",
        "code_size": 19934818,
        "region": "ap-south-1"
      },
      {
        "function_name": "fraud-detection-llm-dev-processor",
        "runtime": "python3.11",
        "memory": 512,
        "timeout": 30,
        "last_modified": "2026-05-12T17:26:38.000+0000",
        "code_size": 2372,
        "region": "ap-south-1"
      }
    ],
    "ecs_clusters": [],
    "load_balancers": [],
    "nat_gateways": [],
    "vpcs": [
      {
        "vpc_id": "vpc-02d91c7ad0eb51967",
        "cidr_block": "172.31.0.0/16",
        "state": "available",
        "is_default": true,
        "name": "",
        "region": "ap-south-1"
      }
    ],
    "ecr_repositories": [],
    "cloudfront_distributions": [],
    "secrets": [],
    "summary": {
      "total_ec2_instances": 1,
      "running_ec2_instances": 1,
      "stopped_ec2_instances": 0,
      "total_ebs_volumes": 1,
      "unattached_volumes": 0,
      "total_ebs_storage_gb": 8,
      "total_security_groups": 8,
      "total_elastic_ips": 1,
      "unused_elastic_ips": 0,
      "total_rds_instances": 0,
      "total_s3_buckets": 5,
      "total_lambda_functions": 2,
      "total_ecs_clusters": 0,
      "total_load_balancers": 0,
      "total_nat_gateways": 0,
      "total_vpcs": 1,
      "total_ecr_repositories": 0,
      "total_cloudfront_distributions": 0,
      "total_secrets": 0,
      "regions_scanned": [
        "ap-south-1"
      ]
    },
    "iam_summary": {
      "users": 5,
      "groups": 1,
      "roles": 28,
      "policies": 1,
      "mfa_devices": 3,
      "access_keys": 2
    }
  },
  "security_audit": {
    "findings": [
      {
        "severity": "CRITICAL",
        "category": "Network Security",
        "title": "Security Group Open to All Traffic",
        "description": "Security group launch-wizard-1 (sg-02e9a530d4f061ac2) allows ALL inbound traffic from 0.0.0.0/0",
        "resource": "sg-02e9a530d4f061ac2",
        "region": "ap-south-1",
        "recommendation": "Restrict inbound rules to specific IPs and ports",
        "timestamp": "2026-08-11T05:33:32.415489"
      },
      {
        "severity": "CRITICAL",
        "category": "Network Security",
        "title": "SSH Port Open to Internet",
        "description": "Security group launch-wizard-1 (sg-02e9a530d4f061ac2) allows SSH (port 22) from 0.0.0.0/0",
        "resource": "sg-02e9a530d4f061ac2",
        "region": "ap-south-1",
        "recommendation": "Restrict SSH access to specific IP addresses",
        "timestamp": "2026-08-11T05:33:32.415516"
      },
      {
        "severity": "CRITICAL",
        "category": "Network Security",
        "title": "SSH Port Open to Internet",
        "description": "Security group launch-wizard-2 (sg-0bc5292619620eb75) allows SSH (port 22) from 0.0.0.0/0",
        "resource": "sg-0bc5292619620eb75",
        "region": "ap-south-1",
        "recommendation": "Restrict SSH access to specific IP addresses",
        "timestamp": "2026-08-11T05:33:32.415527"
      },
      {
        "severity": "CRITICAL",
        "category": "Network Security",
        "title": "SSH Port Open to Internet",
        "description": "Security group launch-wizard-3 (sg-03a0b41324c87a1cf) allows SSH (port 22) from 0.0.0.0/0",
        "resource": "sg-03a0b41324c87a1cf",
        "region": "ap-south-1",
        "recommendation": "Restrict SSH access to specific IP addresses",
        "timestamp": "2026-08-11T05:33:32.415535"
      },
      {
        "severity": "CRITICAL",
        "category": "Network Security",
        "title": "SSH Port Open to Internet",
        "description": "Security group launch-wizard-5 (sg-09c817780f51b283f) allows SSH (port 22) from 0.0.0.0/0",
        "resource": "sg-09c817780f51b283f",
        "region": "ap-south-1",
        "recommendation": "Restrict SSH access to specific IP addresses",
        "timestamp": "2026-08-11T05:33:32.415541"
      },
      {
        "severity": "CRITICAL",
        "category": "Network Security",
        "title": "SSH Port Open to Internet",
        "description": "Security group launch-wizard-4 (sg-0b2f48d32d3180b76) allows SSH (port 22) from 0.0.0.0/0",
        "resource": "sg-0b2f48d32d3180b76",
        "region": "ap-south-1",
        "recommendation": "Restrict SSH access to specific IP addresses",
        "timestamp": "2026-08-11T05:33:32.415546"
      },
      {
        "severity": "MEDIUM",
        "category": "Data Security",
        "title": "Unencrypted EBS Volume",
        "description": "EBS volume vol-0a61c05cbd5df04b4 (8 GB) is not encrypted",
        "resource": "vol-0a61c05cbd5df04b4",
        "region": "ap-south-1",
        "recommendation": "Enable encryption for EBS volumes",
        "timestamp": "2026-08-11T05:33:32.502538"
      },
      {
        "severity": "LOW",
        "category": "Architecture",
        "title": "Resources in Default VPC",
        "description": "1 EC2 instances found in default VPC vpc-02d91c7ad0eb51967",
        "resource": "vpc-02d91c7ad0eb51967",
        "region": "ap-south-1",
        "recommendation": "Consider using custom VPCs for better network isolation",
        "timestamp": "2026-08-11T05:33:32.745174"
      },
      {
        "severity": "INFO",
        "category": "Network Security",
        "title": "EC2 Instance with Public IP",
        "description": "Instance i-03ac8e5680a75303e (GenAi) has public IP 3.7.8.27",
        "resource": "i-03ac8e5680a75303e",
        "region": "ap-south-1",
        "recommendation": "Review if public IP is necessary; consider using NAT Gateway",
        "timestamp": "2026-08-11T05:33:32.847725"
      },
      {
        "severity": "HIGH",
        "category": "Identity & Access",
        "title": "IAM User Without MFA",
        "description": "IAM user darshika.sathwara@calyzatech.com has console access but no MFA enabled",
        "resource": "darshika.sathwara@calyzatech.com",
        "region": "global",
        "recommendation": "Enable MFA for all users with console access",
        "timestamp": "2026-08-11T05:33:36.313625"
      },
      {
        "severity": "HIGH",
        "category": "Identity & Access",
        "title": "IAM User Without MFA",
        "description": "IAM user ramesh.prajapati@calyzatech.com has console access but no MFA enabled",
        "resource": "ramesh.prajapati@calyzatech.com",
        "region": "global",
        "recommendation": "Enable MFA for all users with console access",
        "timestamp": "2026-08-11T05:33:36.774320"
      },
      {
        "severity": "HIGH",
        "category": "Identity & Access",
        "title": "IAM User Without MFA",
        "description": "IAM user shamsh.pathan@calyzatech.com has console access but no MFA enabled",
        "resource": "shamsh.pathan@calyzatech.com",
        "region": "global",
        "recommendation": "Enable MFA for all users with console access",
        "timestamp": "2026-08-11T05:33:37.244987"
      },
      {
        "severity": "MEDIUM",
        "category": "Identity & Access",
        "title": "Unused Access Key",
        "description": "User shamsh.pathan@calyzatech.com access key 1 not used in over 90 days",
        "resource": "shamsh.pathan@calyzatech.com",
        "region": "global",
        "recommendation": "Rotate or delete unused access keys",
        "timestamp": "2026-08-11T05:33:38.768401"
      },
      {
        "severity": "HIGH",
        "category": "Identity & Access",
        "title": "No Password Policy Configured",
        "description": "No custom password policy is configured for the account",
        "resource": "password-policy",
        "region": "global",
        "recommendation": "Configure a strong password policy",
        "timestamp": "2026-08-11T05:33:39.396219"
      },
      {
        "severity": "MEDIUM",
        "category": "Identity & Access",
        "title": "Access Key Needs Rotation",
        "description": "User akash.kachhadiya@calyzatech.com has access key AKIAXMT2... that is 90 days old",
        "resource": "akash.kachhadiya@calyzatech.com",
        "region": "global",
        "recommendation": "Rotate access keys at least every 90 days",
        "timestamp": "2026-08-11T05:33:40.212597"
      },
      {
        "severity": "MEDIUM",
        "category": "Identity & Access",
        "title": "Access Key Needs Rotation",
        "description": "User bhadresh.bhadreshwara@calyzatech.com has access key AKIAXMT2... that is 277 days old",
        "resource": "bhadresh.bhadreshwara@calyzatech.com",
        "region": "global",
        "recommendation": "Rotate access keys at least every 90 days",
        "timestamp": "2026-08-11T05:33:40.431647"
      },
      {
        "severity": "MEDIUM",
        "category": "Identity & Access",
        "title": "Access Key Needs Rotation",
        "description": "User shamsh.pathan@calyzatech.com has access key AKIAXMT2... that is 244 days old",
        "resource": "shamsh.pathan@calyzatech.com",
        "region": "global",
        "recommendation": "Rotate access keys at least every 90 days",
        "timestamp": "2026-08-11T05:33:41.075776"
      }
    ],
    "summary": {
      "critical": 6,
      "high": 4,
      "medium": 5,
      "low": 1,
      "info": 1,
      "total": 17
    }
  },
  "optimization": {
    "recommendations": [
      {
        "category": "Compute",
        "title": "Underutilized EC2 Instance",
        "description": "Instance i-03ac8e5680a75303e (GenAi) has 2.3% average CPU over 7 days. Consider rightsizing.",
        "resource": "i-03ac8e5680a75303e",
        "region": "ap-south-1",
        "estimated_monthly_savings": 4.18,
        "effort": "Medium",
        "risk": "Medium",
        "action": "Consider downsizing instance type or using Auto Scaling",
        "timestamp": "2026-08-11T05:33:41.622330"
      },
      {
        "category": "Storage",
        "title": "S3 Bucket Without Lifecycle Policy",
        "description": "Bucket cf-templates-1fe03f7mv66ex-ap-south-1 has no lifecycle policy for automatic data management",
        "resource": "cf-templates-1fe03f7mv66ex-ap-south-1",
        "region": "global",
        "estimated_monthly_savings": 5.0,
        "effort": "Low",
        "risk": "Low",
        "action": "Add lifecycle policy to transition/expire old objects",
        "timestamp": "2026-08-11T05:33:42.275775"
      },
      {
        "category": "Storage",
        "title": "S3 Bucket Without Lifecycle Policy",
        "description": "Bucket gensc-ai-storage-508137168365 has no lifecycle policy for automatic data management",
        "resource": "gensc-ai-storage-508137168365",
        "region": "global",
        "estimated_monthly_savings": 5.0,
        "effort": "Low",
        "risk": "Low",
        "action": "Add lifecycle policy to transition/expire old objects",
        "timestamp": "2026-08-11T05:33:42.362012"
      }
    ],
    "summary": {
      "total_recommendations": 3,
      "potential_monthly_savings": 14.18,
      "potential_annual_savings": 170.16,
      "by_category": {
        "Compute": {
          "count": 1,
          "savings": 4.18
        },
        "Storage": {
          "count": 2,
          "savings": 10.0
        }
      }
    }
  }
}