# 🔍 AWS Health Check Report

**📅 Generated:** 2026-08-11 05:33:45 UTC

**🏢 Account ID:** 508137168365

**🌍 Region:** ap-south-1

---

## 📊 Executive Summary

| Metric | Value |
|--------|-------|
| 💰 Monthly Cost | **$4.61** |
| 🔒 Security Findings | **17** |
| 🚨 Critical Issues | **6** |
| 🚀 Optimization Opportunities | **3** |
| 💵 Potential Monthly Savings | **$14.18** |

## 💰 Cost Analysis

**Total Monthly Cost:** $4.61

### Cost by Service

| Service | Cost (USD) | % |
|---------|------------|---|
| Amazon Virtual Private Cloud | $2.53 | 54.9% |
| EC2 - Other | $2.07 | 44.9% |
| Claude 3 Haiku (Amazon Bedrock Edition) | $0.01 | 0.2% |
| AWS CloudShell | $0.00 | 0.0% |
| AWS Lambda | $0.00 | 0.0% |
| Amazon Simple Storage Service | $0.00 | 0.0% |

## 🔒 Security Audit

### Summary

| Severity | Count |
|----------|-------|
| 🚨 Critical | **6** |
| ⚠️ High | **4** |
| 📋 Medium | **5** |
| ℹ️ Low | **1** |

### Security Findings Detail

| Severity | Issue | Resource Name | What's Wrong | How to Fix |
|----------|-------|---------------|--------------|------------|
| 🚨 CRITICAL | Security Group Open to All Traffic | `sg-02e9a530d4f061ac2` | Security group launch-wizard-1 (sg-02e9a530d4f061ac2) allows ALL inbound traffic | Restrict inbound rules to specific IPs and ports |
| 🚨 CRITICAL | SSH Port Open to Internet | `sg-02e9a530d4f061ac2` | Security group launch-wizard-1 (sg-02e9a530d4f061ac2) allows SSH (port 22) from  | Restrict SSH access to specific IP addresses |
| 🚨 CRITICAL | SSH Port Open to Internet | `sg-0bc5292619620eb75` | Security group launch-wizard-2 (sg-0bc5292619620eb75) allows SSH (port 22) from  | Restrict SSH access to specific IP addresses |
| 🚨 CRITICAL | SSH Port Open to Internet | `sg-03a0b41324c87a1cf` | Security group launch-wizard-3 (sg-03a0b41324c87a1cf) allows SSH (port 22) from  | Restrict SSH access to specific IP addresses |
| 🚨 CRITICAL | SSH Port Open to Internet | `sg-09c817780f51b283f` | Security group launch-wizard-5 (sg-09c817780f51b283f) allows SSH (port 22) from  | Restrict SSH access to specific IP addresses |
| 🚨 CRITICAL | SSH Port Open to Internet | `sg-0b2f48d32d3180b76` | Security group launch-wizard-4 (sg-0b2f48d32d3180b76) allows SSH (port 22) from  | Restrict SSH access to specific IP addresses |
| 📋 MEDIUM | Unencrypted EBS Volume | `vol-0a61c05cbd5df04b4` | EBS volume vol-0a61c05cbd5df04b4 (8 GB) is not encrypted | Enable encryption for EBS volumes |
| ℹ️ LOW | Resources in Default VPC | `vpc-02d91c7ad0eb51967` | 1 EC2 instances found in default VPC vpc-02d91c7ad0eb51967 | Consider using custom VPCs for better network isolation |
| • INFO | EC2 Instance with Public IP | `i-03ac8e5680a75303e` | Instance i-03ac8e5680a75303e (GenAi) has public IP 3.7.8.27 | Review if public IP is necessary; consider using NAT Gateway |
| ⚠️ HIGH | IAM User Without MFA | `darshika.sathwara@calyzatech.com` | IAM user darshika.sathwara@calyzatech.com has console access but no MFA enabled | Enable MFA for all users with console access |
| ⚠️ HIGH | IAM User Without MFA | `ramesh.prajapati@calyzatech.com` | IAM user ramesh.prajapati@calyzatech.com has console access but no MFA enabled | Enable MFA for all users with console access |
| ⚠️ HIGH | IAM User Without MFA | `shamsh.pathan@calyzatech.com` | IAM user shamsh.pathan@calyzatech.com has console access but no MFA enabled | Enable MFA for all users with console access |
| 📋 MEDIUM | Unused Access Key | `shamsh.pathan@calyzatech.com` | User shamsh.pathan@calyzatech.com access key 1 not used in over 90 days | Rotate or delete unused access keys |
| ⚠️ HIGH | No Password Policy Configured | `password-policy` | No custom password policy is configured for the account | Configure a strong password policy |
| 📋 MEDIUM | Access Key Needs Rotation | `akash.kachhadiya@calyzatech.com` | User akash.kachhadiya@calyzatech.com has access key AKIAXMT2... that is 90 days  | Rotate access keys at least every 90 days |
| 📋 MEDIUM | Access Key Needs Rotation | `bhadresh.bhadreshwara@calyzatech.com` | User bhadresh.bhadreshwara@calyzatech.com has access key AKIAXMT2... that is 277 | Rotate access keys at least every 90 days |
| 📋 MEDIUM | Access Key Needs Rotation | `shamsh.pathan@calyzatech.com` | User shamsh.pathan@calyzatech.com has access key AKIAXMT2... that is 244 days ol | Rotate access keys at least every 90 days |

## 🚀 Optimization Recommendations

**💵 Potential Monthly Savings:** $14.18

**📅 Potential Annual Savings:** $170.16

### Recommendations Detail

| Category | Issue | Resource | Savings | Action Required |
|----------|-------|----------|---------|----------------|
| 💾 Storage | S3 Bucket Without Lifecycle Policy | `cf-templates-1fe03f7mv66ex-ap-` | **$5.00/mo** | Add lifecycle policy to transition/expire old obje |
| 💾 Storage | S3 Bucket Without Lifecycle Policy | `gensc-ai-storage-508137168365` | **$5.00/mo** | Add lifecycle policy to transition/expire old obje |
| 🖥️ Compute | Underutilized EC2 Instance | `i-03ac8e5680a75303e` | **$4.18/mo** | Consider downsizing instance type or using Auto Sc |

## 🖥️ Resource Inventory

| Resource Type | Count |
|---------------|-------|
| EC2 Instances | 1 |
| EBS Volumes | 1 |
| RDS Instances | 0 |
| S3 Buckets | 5 |
| Lambda Functions | 2 |
| Load Balancers | 0 |
| NAT Gateways | 0 |
| Elastic IPs | 1 |