🔍 AWS Health Check Report

📅 Generated: 2026-08-11 05:33:45 UTC

đŸĸ Account: 508137168365 | 🌍 Region: ap-south-1

👤 Scanned by: bhadresh.bhadreshwara@calyzatech.com

📊 Executive Summary

$4.61
💰 Monthly Cost
6
🚨 Critical Issues
17
🔒 Security Findings
$14.18
đŸ’ĩ Potential Savings/mo

💰 Cost Analysis

Total Monthly Cost: $4.61

ServiceCost (USD)Percentage
Amazon Virtual Private Cloud $2.53
54.9%
EC2 - Other $2.07
44.9%
Claude 3 Haiku (Amazon Bedrock Edition) $0.01
0.2%
AWS CloudShell $0.00
0.0%
AWS Lambda $0.00
0.0%
Amazon Simple Storage Service $0.00
0.0%

🔒 Security Audit

6
🚨 Critical
4
⚠ī¸ High
5
📋 Medium
1
ℹī¸ Low
Severity Category Issue & Description Resource & How to Fix
🚨 CRITICAL Network Security
Security Group Open to All Traffic
Security group launch-wizard-1 (sg-02e9a530d4f061ac2) allows ALL inbound traffic from 0.0.0.0/0
 sg-02e9a530d4f061ac2
💡 Fix: Restrict inbound rules to specific IPs and ports
🚨 CRITICAL Network Security
SSH Port Open to Internet
Security group launch-wizard-1 (sg-02e9a530d4f061ac2) allows SSH (port 22) from 0.0.0.0/0
 sg-02e9a530d4f061ac2
💡 Fix: Restrict SSH access to specific IP addresses
🚨 CRITICAL Network Security
SSH Port Open to Internet
Security group launch-wizard-2 (sg-0bc5292619620eb75) allows SSH (port 22) from 0.0.0.0/0
 sg-0bc5292619620eb75
💡 Fix: Restrict SSH access to specific IP addresses
🚨 CRITICAL Network Security
SSH Port Open to Internet
Security group launch-wizard-3 (sg-03a0b41324c87a1cf) allows SSH (port 22) from 0.0.0.0/0
 sg-03a0b41324c87a1cf
💡 Fix: Restrict SSH access to specific IP addresses
🚨 CRITICAL Network Security
SSH Port Open to Internet
Security group launch-wizard-5 (sg-09c817780f51b283f) allows SSH (port 22) from 0.0.0.0/0
 sg-09c817780f51b283f
💡 Fix: Restrict SSH access to specific IP addresses
🚨 CRITICAL Network Security
SSH Port Open to Internet
Security group launch-wizard-4 (sg-0b2f48d32d3180b76) allows SSH (port 22) from 0.0.0.0/0
 sg-0b2f48d32d3180b76
💡 Fix: Restrict SSH access to specific IP addresses
📋 MEDIUM Data Security
Unencrypted EBS Volume
EBS volume vol-0a61c05cbd5df04b4 (8 GB) is not encrypted
 vol-0a61c05cbd5df04b4
💡 Fix: Enable encryption for EBS volumes
ℹī¸ LOW Architecture
Resources in Default VPC
1 EC2 instances found in default VPC vpc-02d91c7ad0eb51967
 vpc-02d91c7ad0eb51967
💡 Fix: Consider using custom VPCs for better network isolation
â€ĸ INFO Network Security
EC2 Instance with Public IP
Instance i-03ac8e5680a75303e (GenAi) has public IP 3.7.8.27
 i-03ac8e5680a75303e
💡 Fix: Review if public IP is necessary; consider using NAT Gateway
⚠ī¸ HIGH Identity & Access
IAM User Without MFA
IAM user darshika.sathwara@calyzatech.com has console access but no MFA enabled
 darshika.sathwara@calyzatech.com
💡 Fix: Enable MFA for all users with console access
⚠ī¸ HIGH Identity & Access
IAM User Without MFA
IAM user ramesh.prajapati@calyzatech.com has console access but no MFA enabled
 ramesh.prajapati@calyzatech.com
💡 Fix: Enable MFA for all users with console access
⚠ī¸ HIGH Identity & Access
IAM User Without MFA
IAM user shamsh.pathan@calyzatech.com has console access but no MFA enabled
 shamsh.pathan@calyzatech.com
💡 Fix: Enable MFA for all users with console access
📋 MEDIUM Identity & Access
Unused Access Key
User shamsh.pathan@calyzatech.com access key 1 not used in over 90 days
 shamsh.pathan@calyzatech.com
💡 Fix: Rotate or delete unused access keys
⚠ī¸ HIGH Identity & Access
No Password Policy Configured
No custom password policy is configured for the account
 password-policy
💡 Fix: Configure a strong password policy
📋 MEDIUM Identity & Access
Access Key Needs Rotation
User akash.kachhadiya@calyzatech.com has access key AKIAXMT2... that is 90 days old
 akash.kachhadiya@calyzatech.com
💡 Fix: Rotate access keys at least every 90 days
📋 MEDIUM Identity & Access
Access Key Needs Rotation
User bhadresh.bhadreshwara@calyzatech.com has access key AKIAXMT2... that is 277 days old
 bhadresh.bhadreshwara@calyzatech.com
💡 Fix: Rotate access keys at least every 90 days
📋 MEDIUM Identity & Access
Access Key Needs Rotation
User shamsh.pathan@calyzatech.com has access key AKIAXMT2... that is 244 days old
 shamsh.pathan@calyzatech.com
💡 Fix: Rotate access keys at least every 90 days

🚀 Optimization Recommendations

$14.18
đŸ’ĩ Monthly Savings
$170.16
📅 Annual Savings
3
📋 Recommendations
Category Issue & Details Resource Savings Action Required
💾 Storage
S3 Bucket Without Lifecycle Policy
Bucket cf-templates-1fe03f7mv66ex-ap-south-1 has no lifecycle policy for automatic data management
 cf-templates-1fe03f7mv66ex-ap-south-1 $5.00
/month
💡 Add lifecycle policy to transition/expire old objects
💾 Storage
S3 Bucket Without Lifecycle Policy
Bucket gensc-ai-storage-508137168365 has no lifecycle policy for automatic data management
 gensc-ai-storage-508137168365 $5.00
/month
💡 Add lifecycle policy to transition/expire old objects
đŸ–Ĩī¸ Compute
Underutilized EC2 Instance
Instance i-03ac8e5680a75303e (GenAi) has 2.3% average CPU over 7 days. Consider rightsizing.
 i-03ac8e5680a75303e $4.18
/month
💡 Consider downsizing instance type or using Auto Scaling

đŸ–Ĩī¸ Resource Inventory

1
EC2 Instances
1
EBS Volumes
5
S3 Buckets
2
Lambda Functions
0
RDS Instances
0
Load Balancers