{ "report_metadata": { "generated_at": "2026-08-11T06:03:21.342903", "tool_version": "1.0.0", "account_info": { "account_id": "508137168365", "user_arn": "arn:aws:iam::508137168365:user/bhadresh.bhadreshwara@calyzatech.com", "user_id": "AIDAXMT2V3XWYQO57IX7Z", "region": "all-regions" } }, "cost_analysis": { "total_cost": 3767.26, "cost_by_service": [ { "service": "Amazon Elastic Compute Cloud - Compute", "cost": 3215.17, "currency": "USD", "percentage": 85.3 }, { "service": "AWS Business Support+", "cost": 290.94, "currency": "USD", "percentage": 7.7 }, { "service": "Tax", "cost": 243.67, "currency": "USD", "percentage": 6.5 }, { "service": "EC2 - Other", "cost": 9.84, "currency": "USD", "percentage": 0.3 }, { "service": "Amazon Virtual Private Cloud", "cost": 6.16, "currency": "USD", "percentage": 0.2 }, { "service": "AWS Secrets Manager", "cost": 1.02, "currency": "USD", "percentage": 0.0 }, { "service": "AWS Cost Explorer", "cost": 0.38, "currency": "USD", "percentage": 0.0 }, { "service": "Amazon Relational Database Service", "cost": 0.07, "currency": "USD", "percentage": 0.0 }, { "service": "AWS Amplify", "cost": 0.0, "currency": "USD", "percentage": 0.0 }, { "service": "AWS CloudShell", "cost": 0.0, "currency": "USD", "percentage": 0.0 }, { "service": "Amazon Simple Storage Service", "cost": 0.0, "currency": "USD", "percentage": 0.0 }, { "service": "Claude 3 Haiku (Amazon Bedrock Edition)", "cost": 0.0, "currency": "USD", "percentage": 0.0 } ], "cost_by_region": [ { "region": "eu-central-1", "cost": 3222.66 }, { "region": "global", "cost": 290.94 }, { "region": "NoRegion", "cost": 243.67 }, { "region": "us-east-1", "cost": 5.19 }, { "region": "ap-south-1", "cost": 4.59 }, { "region": "ap-northeast-1", "cost": 0.22 } ], "cost_trend": [ { "date": "2026-07-12", "cost": 1.12 }, { "date": "2026-07-13", "cost": 1.12 }, { "date": "2026-07-14", "cost": 1.12 }, { "date": "2026-07-15", "cost": 1.12 }, { "date": "2026-07-16", "cost": 1.12 }, { "date": "2026-07-17", "cost": 1.12 }, { "date": "2026-07-18", "cost": 1.19 }, { "date": "2026-07-19", "cost": 1.13 }, { "date": "2026-07-20", "cost": 1.13 }, { "date": "2026-07-21", "cost": 1.13 }, { "date": "2026-07-22", "cost": 1.13 }, { "date": "2026-07-23", "cost": 1.13 }, { "date": "2026-07-24", "cost": 1.13 }, { "date": "2026-07-25", "cost": 1.13 }, { "date": "2026-07-26", "cost": 1.13 }, { "date": "2026-07-27", "cost": 1.13 }, { "date": "2026-07-28", "cost": 1.15 }, { "date": "2026-07-29", "cost": 1.13 }, { "date": "2026-07-30", "cost": 1.13 }, { "date": "2026-07-31", "cost": 1.13 }, { "date": "2026-08-01", "cost": 0.49 }, { "date": "2026-08-02", "cost": 0.49 }, { "date": "2026-08-03", "cost": 0.49 }, { "date": "2026-08-04", "cost": 0.49 }, { "date": "2026-08-05", "cost": 0.49 }, { "date": "2026-08-06", "cost": 0.49 }, { "date": "2026-08-07", "cost": 0.49 }, { "date": "2026-08-08", "cost": 0.49 }, { "date": "2026-08-09", "cost": 0.49 }, { "date": "2026-08-10", "cost": 0.79 } ], "forecast": { "predicted_cost": 30.25, "prediction_interval_lower": 27.22, "prediction_interval_upper": 33.27, "currency": "USD" }, "top_cost_drivers": [], "anomalies": [], "recommendations": [], "data_source": "billing_api", "estimation_note": null }, "resource_inventory": { "ec2_instances": [ { "instance_id": "i-0237da95ced8fe8e2", "instance_type": "g7e.12xlarge", "state": "running", "name": "Bluechip", "launch_time": "2026-08-07 12:03:15+00:00", "private_ip": "172.31.24.168", "public_ip": "63.176.33.172", "vpc_id": "vpc-0f1d06c1fe156cc50", "region": "eu-central-1" }, { "instance_id": "i-03ac8e5680a75303e", "instance_type": "t2.micro", "state": "running", "name": "GenAi", "launch_time": "2026-02-02 04:42:13+00:00", "private_ip": "172.31.7.65", "public_ip": "3.7.8.27", "vpc_id": "vpc-02d91c7ad0eb51967", "region": "ap-south-1" } ], "ec2_volumes": [ { "volume_id": "vol-09399b0f334ad58e9", "size_gb": 200, "volume_type": "gp3", "state": "in-use", "attached_to": "i-0237da95ced8fe8e2", "encrypted": false, "name": "", "region": "eu-central-1" }, { "volume_id": "vol-0a61c05cbd5df04b4", "size_gb": 8, "volume_type": "gp3", "state": "in-use", "attached_to": "i-03ac8e5680a75303e", "encrypted": false, "name": "", "region": "ap-south-1" } ], "ec2_security_groups": [ { "group_id": "sg-0fadea70e9affc2ad", "group_name": "seminal-brands-lambda-2026010619124085460000000b", "description": "Security group for Lambda functions", "vpc_id": "vpc-037b11ed81fa67391", "inbound_rules_count": 0, "outbound_rules_count": 1, "region": "us-east-1" }, { "group_id": "sg-031897561b957d277", "group_name": "seminal-brands-rds-20260106191311644900000014", "description": "Security group for RDS", "vpc_id": "vpc-037b11ed81fa67391", "inbound_rules_count": 1, "outbound_rules_count": 1, "region": "us-east-1" }, { "group_id": "sg-0f881ddaab5d8c3f4", "group_name": "default", "description": "default VPC security group", "vpc_id": "vpc-037b11ed81fa67391", "inbound_rules_count": 1, "outbound_rules_count": 1, "region": "us-east-1" }, { "group_id": "sg-07e42140ef9a91c55", "group_name": "seminal-brands-ecs-2026010619124381680000000e", "description": "Security group for ECS tasks", "vpc_id": "vpc-037b11ed81fa67391", "inbound_rules_count": 3, "outbound_rules_count": 1, "region": "us-east-1" }, { "group_id": "sg-06ff2506ead950584", "group_name": "seminal-brands-api-alb-20260106191240851600000009", "description": "Security group for API Application Load Balancer", "vpc_id": "vpc-037b11ed81fa67391", "inbound_rules_count": 2, "outbound_rules_count": 1, "region": "us-east-1" }, { "group_id": "sg-008d6ce7cda58cacc", "group_name": "seminal-brands-bastion-2026010619124131510000000c", "description": "Security group for Bastion host", "vpc_id": "vpc-037b11ed81fa67391", "inbound_rules_count": 1, "outbound_rules_count": 1, "region": "us-east-1" }, { "group_id": "sg-013291af17e848f7e", "group_name": "default", "description": "default VPC security group", "vpc_id": "vpc-0c30fc33808222b3f", "inbound_rules_count": 1, "outbound_rules_count": 1, "region": "us-east-1" }, { "group_id": "sg-0928a537b32e0625b", "group_name": "seminal-brands-celery-alb-2026010619124085390000000a", "description": "Security group for Celery Application Load Balancer", "vpc_id": "vpc-037b11ed81fa67391", "inbound_rules_count": 2, "outbound_rules_count": 1, "region": "us-east-1" }, { "group_id": "sg-0e0db95e7019f28aa", "group_name": "seminal-brands-redis-2026010619124615260000000f", "description": "Security group for ElastiCache Redis", "vpc_id": "vpc-037b11ed81fa67391", "inbound_rules_count": 1, "outbound_rules_count": 1, "region": "us-east-1" }, { "group_id": "sg-023cf8e8ab0021073", "group_name": "default", "description": "default VPC security group", "vpc_id": "vpc-007cce8e3b4fa32df", "inbound_rules_count": 1, "outbound_rules_count": 1, "region": "us-east-2" }, { "group_id": "sg-0d41ea21ac0ba01ee", "group_name": "default", "description": "default VPC security group", "vpc_id": "vpc-02305e8f41bcfb97a", "inbound_rules_count": 1, "outbound_rules_count": 1, "region": "us-west-1" }, { "group_id": "sg-0c9229114a172e49f", "group_name": "default", "description": "default VPC security group", "vpc_id": "vpc-0b89958ebd99d9e4e", "inbound_rules_count": 1, "outbound_rules_count": 1, "region": "us-west-2" }, { "group_id": "sg-00b73242605b5c802", "group_name": "default", "description": "default VPC security group", "vpc_id": "vpc-01e26f1bf62027214", "inbound_rules_count": 1, "outbound_rules_count": 1, "region": "eu-west-1" }, { "group_id": "sg-09cffd25e4652d19e", "group_name": "default", "description": "default VPC security group", "vpc_id": "vpc-0a71e1bb87ff00af3", "inbound_rules_count": 1, "outbound_rules_count": 1, "region": "eu-west-2" }, { "group_id": "sg-02488d67a1a1f0a9f", "group_name": "default", "description": "default VPC security group", "vpc_id": "vpc-0f1d06c1fe156cc50", "inbound_rules_count": 1, "outbound_rules_count": 1, "region": "eu-central-1" }, { "group_id": "sg-02fb1909dd2006124", "group_name": "launch-wizard-3", "description": "launch-wizard-3 created 2026-08-05T04:39:24.770Z", "vpc_id": "vpc-0f1d06c1fe156cc50", "inbound_rules_count": 1, "outbound_rules_count": 1, "region": "eu-central-1" }, { "group_id": "sg-0c01e3f8089b8b319", "group_name": "launch-wizard-2", "description": "launch-wizard-2 created 2026-07-24T03:06:49.859Z", "vpc_id": "vpc-0f1d06c1fe156cc50", "inbound_rules_count": 3, "outbound_rules_count": 1, "region": "eu-central-1" }, { "group_id": "sg-0b57710eeffe7e001", "group_name": "launch-wizard-1", "description": "launch-wizard-1 created 2026-07-23T15:53:54.288Z", "vpc_id": "vpc-0f1d06c1fe156cc50", "inbound_rules_count": 1, "outbound_rules_count": 1, "region": "eu-central-1" }, { "group_id": "sg-04613f402f88ad778", "group_name": "rocky-launch-wizard", "description": "Rocky GPU workstation launch-wizard-4 created 2026-07-22T06:24:06.859Z", "vpc_id": "vpc-02d91c7ad0eb51967", "inbound_rules_count": 3, "outbound_rules_count": 1, "region": "ap-south-1" }, { "group_id": "sg-02e9a530d4f061ac2", "group_name": "launch-wizard-1", "description": "launch-wizard-1 created 2025-11-06T09:31:11.096Z", "vpc_id": "vpc-02d91c7ad0eb51967", "inbound_rules_count": 4, "outbound_rules_count": 1, "region": "ap-south-1" }, { "group_id": "sg-0bc5292619620eb75", "group_name": "launch-wizard-2", "description": "launch-wizard-2 created 2026-01-10T08:53:37.217Z", "vpc_id": "vpc-02d91c7ad0eb51967", "inbound_rules_count": 3, "outbound_rules_count": 1, "region": "ap-south-1" }, { "group_id": "sg-0e75e23ce00c2ffda", "group_name": "ansys-rocky-sg", "description": "SSH and DCV access for Ansys GPU workstation", "vpc_id": "vpc-02d91c7ad0eb51967", "inbound_rules_count": 3, "outbound_rules_count": 1, "region": "ap-south-1" }, { "group_id": "sg-03a0b41324c87a1cf", "group_name": "launch-wizard-3", "description": "launch-wizard-3 created 2026-07-18T05:39:43.910Z", "vpc_id": "vpc-02d91c7ad0eb51967", "inbound_rules_count": 1, "outbound_rules_count": 1, "region": "ap-south-1" }, { "group_id": "sg-002e441e1b8940e12", "group_name": "default", "description": "default VPC security group", "vpc_id": "vpc-02d91c7ad0eb51967", "inbound_rules_count": 1, "outbound_rules_count": 1, "region": "ap-south-1" }, { "group_id": "sg-09c817780f51b283f", "group_name": "launch-wizard-5", "description": "launch-wizard-5 created 2026-07-22T18:12:59.434Z", "vpc_id": "vpc-02d91c7ad0eb51967", "inbound_rules_count": 1, "outbound_rules_count": 1, "region": "ap-south-1" }, { "group_id": "sg-0b2f48d32d3180b76", "group_name": "launch-wizard-4", "description": "launch-wizard-4 created 2026-07-22T16:37:32.082Z", "vpc_id": "vpc-02d91c7ad0eb51967", "inbound_rules_count": 1, "outbound_rules_count": 1, "region": "ap-south-1" }, { "group_id": "sg-009ba4f07980b6395", "group_name": "default", "description": "default VPC security group", "vpc_id": "vpc-07ae76496a234528d", "inbound_rules_count": 1, "outbound_rules_count": 1, "region": "ap-southeast-1" }, { "group_id": "sg-0d5cf47fcb0fe185a", "group_name": "default", "description": "default VPC security group", "vpc_id": "vpc-0e7d000f037be9847", "inbound_rules_count": 1, "outbound_rules_count": 1, "region": "ap-southeast-2" }, { "group_id": "sg-01ebd35caa1445e88", "group_name": "default", "description": "default VPC security group", "vpc_id": "vpc-076b8b1c9eab1ee63", "inbound_rules_count": 1, "outbound_rules_count": 1, "region": "ap-northeast-1" } ], "ec2_elastic_ips": [ { "public_ip": "3.223.79.234", "allocation_id": "eipalloc-0cee5132be649296e", "instance_id": "", "association_id": "", "is_attached": false, "region": "us-east-1" }, { "public_ip": "34.238.203.244", "allocation_id": "eipalloc-004936a76640b02b6", "instance_id": "", "association_id": "", "is_attached": false, "region": "us-east-1" }, { "public_ip": "35.175.165.206", "allocation_id": "eipalloc-002573c93ce53b388", "instance_id": "", "association_id": "", "is_attached": false, "region": "us-east-1" }, { "public_ip": "63.176.33.172", "allocation_id": "eipalloc-02dd769f7d764b651", "instance_id": "i-0237da95ced8fe8e2", "association_id": "eipassoc-014374a19976475fc", "is_attached": true, "region": "eu-central-1" }, { "public_ip": "3.7.8.27", "allocation_id": "eipalloc-0364a36f793086d84", "instance_id": "i-03ac8e5680a75303e", "association_id": "eipassoc-017f22a2a4050e724", "is_attached": true, "region": "ap-south-1" } ], "rds_instances": [], "s3_buckets": [ { "bucket_name": "cf-templates-1fe03f7mv66ex-ap-south-1", "creation_date": "2026-05-12 11:42:42+00:00", "region": "ap-south-1" }, { "bucket_name": "fraud-detection-llm-ramesh-20260512", "creation_date": "2026-05-12 11:50:47+00:00", "region": "ap-south-1" }, { "bucket_name": "gensc-ai-storage-508137168365", "creation_date": "2026-06-08 07:31:46+00:00", "region": "ap-south-1" }, { "bucket_name": "seminal-brands-enterprise-documents-508137168365", "creation_date": "2026-04-29 05:30:45+00:00", "region": "us-east-1" }, { "bucket_name": "seminal-brands-logos-508137168365", "creation_date": "2026-05-01 06:43:55+00:00", "region": "us-east-1" } ], "lambda_functions": [ { "function_name": "seminal-brands-lambda", "runtime": "python3.11", "memory": 128, "timeout": 100, "last_modified": "2026-01-06T19:22:14.026+0000", "code_size": 685, "region": "us-east-1" }, { "function_name": "gensc-ai-backend-lambda", "runtime": "python3.11", "memory": 1024, "timeout": 90, "last_modified": "2026-06-08T08:31:19.000+0000", "code_size": 19934818, "region": "ap-south-1" }, { "function_name": "fraud-detection-llm-dev-processor", "runtime": "python3.11", "memory": 512, "timeout": 30, "last_modified": "2026-05-12T17:26:38.000+0000", "code_size": 2372, "region": "ap-south-1" } ], "ecs_clusters": [], "load_balancers": [], "nat_gateways": [], "vpcs": [ { "vpc_id": "vpc-037b11ed81fa67391", "cidr_block": "10.0.0.0/16", "state": "available", "is_default": false, "name": "seminal-brands-vpc", "region": "us-east-1" }, { "vpc_id": "vpc-0c30fc33808222b3f", "cidr_block": "172.31.0.0/16", "state": "available", "is_default": true, "name": "", "region": "us-east-1" }, { "vpc_id": "vpc-007cce8e3b4fa32df", "cidr_block": "172.31.0.0/16", "state": "available", "is_default": true, "name": "", "region": "us-east-2" }, { "vpc_id": "vpc-02305e8f41bcfb97a", "cidr_block": "172.31.0.0/16", "state": "available", "is_default": true, "name": "", "region": "us-west-1" }, { "vpc_id": "vpc-0b89958ebd99d9e4e", "cidr_block": "172.31.0.0/16", "state": "available", "is_default": true, "name": "", "region": "us-west-2" }, { "vpc_id": "vpc-01e26f1bf62027214", "cidr_block": "172.31.0.0/16", "state": "available", "is_default": true, "name": "", "region": "eu-west-1" }, { "vpc_id": "vpc-0a71e1bb87ff00af3", "cidr_block": "172.31.0.0/16", "state": "available", "is_default": true, "name": "", "region": "eu-west-2" }, { "vpc_id": "vpc-0f1d06c1fe156cc50", "cidr_block": "172.31.0.0/16", "state": "available", "is_default": true, "name": "", "region": "eu-central-1" }, { "vpc_id": "vpc-02d91c7ad0eb51967", "cidr_block": "172.31.0.0/16", "state": "available", "is_default": true, "name": "", "region": "ap-south-1" }, { "vpc_id": "vpc-07ae76496a234528d", "cidr_block": "172.31.0.0/16", "state": "available", "is_default": true, "name": "", "region": "ap-southeast-1" }, { "vpc_id": "vpc-0e7d000f037be9847", "cidr_block": "172.31.0.0/16", "state": "available", "is_default": true, "name": "", "region": "ap-southeast-2" }, { "vpc_id": "vpc-076b8b1c9eab1ee63", "cidr_block": "172.31.0.0/16", "state": "available", "is_default": true, "name": "", "region": "ap-northeast-1" } ], "ecr_repositories": [], "cloudfront_distributions": [], "secrets": [ { "name": "seminal-brands-app-secrets-db54e72e", "created_date": "2026-01-06 19:12:29.153000+00:00", "last_accessed": "2026-01-06 00:00:00+00:00", "region": "us-east-1" }, { "name": "seminal-brands-api-keys-db54e72e", "created_date": "2026-01-06 19:12:29.155000+00:00", "last_accessed": "2026-01-06 00:00:00+00:00", "region": "us-east-1" }, { "name": "seminal-brands-redis-connection-db54e72e", "created_date": "2026-01-06 19:12:29.156000+00:00", "last_accessed": "2026-01-06 00:00:00+00:00", "region": "us-east-1" }, { "name": "seminal-brands-db-credentials-db54e72e", "created_date": "2026-01-06 19:12:29.294000+00:00", "last_accessed": "2026-01-06 00:00:00+00:00", "region": "us-east-1" }, { "name": "seminal-brands-app-secrets-38b31bf0", "created_date": "2026-01-06 19:39:31.363000+00:00", "last_accessed": "", "region": "us-east-1" }, { "name": "seminal-brands-redis-connection-38b31bf0", "created_date": "2026-01-06 19:39:31.391000+00:00", "last_accessed": "", "region": "us-east-1" }, { "name": "seminal-brands-db-credentials-38b31bf0", "created_date": "2026-01-06 19:39:31.392000+00:00", "last_accessed": "", "region": "us-east-1" }, { "name": "seminal-brands-api-keys-38b31bf0", "created_date": "2026-01-06 19:39:31.394000+00:00", "last_accessed": "2026-01-06 00:00:00+00:00", "region": "us-east-1" } ], "summary": { "total_ec2_instances": 2, "running_ec2_instances": 2, "stopped_ec2_instances": 0, "total_ebs_volumes": 2, "unattached_volumes": 0, "total_ebs_storage_gb": 208, "total_security_groups": 29, "total_elastic_ips": 5, "unused_elastic_ips": 3, "total_rds_instances": 0, "total_s3_buckets": 5, "total_lambda_functions": 3, "total_ecs_clusters": 0, "total_load_balancers": 0, "total_nat_gateways": 0, "total_vpcs": 12, "total_ecr_repositories": 0, "total_cloudfront_distributions": 0, "total_secrets": 8, "regions_scanned": [ "us-east-1", "us-east-2", "us-west-1", "us-west-2", "eu-west-1", "eu-west-2", "eu-central-1", "ap-south-1", "ap-southeast-1", "ap-southeast-2", "ap-northeast-1" ] }, "iam_summary": { "users": 5, "groups": 1, "roles": 28, "policies": 1, "mfa_devices": 3, "access_keys": 2 } }, "security_audit": { "findings": [ { "severity": "CRITICAL", "category": "Network Security", "title": "SSH Port Open to Internet", "description": "Security group seminal-brands-bastion-2026010619124131510000000c (sg-008d6ce7cda58cacc) allows SSH (port 22) from 0.0.0.0/0", "resource": "sg-008d6ce7cda58cacc", "region": "us-east-1", "recommendation": "Restrict SSH access to specific IP addresses", "timestamp": "2026-08-11T06:01:26.686762" }, { "severity": "CRITICAL", "category": "Network Security", "title": "RDP Port Open to Internet", "description": "Security group launch-wizard-3 (sg-02fb1909dd2006124) allows RDP (port 3389) from 0.0.0.0/0", "resource": "sg-02fb1909dd2006124", "region": "eu-central-1", "recommendation": "Restrict RDP access to specific IP addresses", "timestamp": "2026-08-11T06:01:49.941671" }, { "severity": "CRITICAL", "category": "Network Security", "title": "SSH Port Open to Internet", "description": "Security group launch-wizard-2 (sg-0c01e3f8089b8b319) allows SSH (port 22) from 0.0.0.0/0", "resource": "sg-0c01e3f8089b8b319", "region": "eu-central-1", "recommendation": "Restrict SSH access to specific IP addresses", "timestamp": "2026-08-11T06:01:49.941691" }, { "severity": "CRITICAL", "category": "Network Security", "title": "SSH Port Open to Internet", "description": "Security group launch-wizard-1 (sg-0b57710eeffe7e001) allows SSH (port 22) from 0.0.0.0/0", "resource": "sg-0b57710eeffe7e001", "region": "eu-central-1", "recommendation": "Restrict SSH access to specific IP addresses", "timestamp": "2026-08-11T06:01:49.941699" }, { "severity": "MEDIUM", "category": "Data Security", "title": "Unencrypted EBS Volume", "description": "EBS volume vol-09399b0f334ad58e9 (200 GB) is not encrypted", "resource": "vol-09399b0f334ad58e9", "region": "eu-central-1", "recommendation": "Enable encryption for EBS volumes", "timestamp": "2026-08-11T06:01:50.400316" }, { "severity": "LOW", "category": "Architecture", "title": "Resources in Default VPC", "description": "1 EC2 instances found in default VPC vpc-0f1d06c1fe156cc50", "resource": "vpc-0f1d06c1fe156cc50", "region": "eu-central-1", "recommendation": "Consider using custom VPCs for better network isolation", "timestamp": "2026-08-11T06:01:51.883729" }, { "severity": "INFO", "category": "Network Security", "title": "EC2 Instance with Public IP", "description": "Instance i-0237da95ced8fe8e2 (Bluechip) has public IP 63.176.33.172", "resource": "i-0237da95ced8fe8e2", "region": "eu-central-1", "recommendation": "Review if public IP is necessary; consider using NAT Gateway", "timestamp": "2026-08-11T06:01:52.373230" }, { "severity": "CRITICAL", "category": "Network Security", "title": "Security Group Open to All Traffic", "description": "Security group launch-wizard-1 (sg-02e9a530d4f061ac2) allows ALL inbound traffic from 0.0.0.0/0", "resource": "sg-02e9a530d4f061ac2", "region": "ap-south-1", "recommendation": "Restrict inbound rules to specific IPs and ports", "timestamp": "2026-08-11T06:01:52.466971" }, { "severity": "CRITICAL", "category": "Network Security", "title": "SSH Port Open to Internet", "description": "Security group launch-wizard-1 (sg-02e9a530d4f061ac2) allows SSH (port 22) from 0.0.0.0/0", "resource": "sg-02e9a530d4f061ac2", "region": "ap-south-1", "recommendation": "Restrict SSH access to specific IP addresses", "timestamp": "2026-08-11T06:01:52.466988" }, { "severity": "CRITICAL", "category": "Network Security", "title": "SSH Port Open to Internet", "description": "Security group launch-wizard-2 (sg-0bc5292619620eb75) allows SSH (port 22) from 0.0.0.0/0", "resource": "sg-0bc5292619620eb75", "region": "ap-south-1", "recommendation": "Restrict SSH access to specific IP addresses", "timestamp": "2026-08-11T06:01:52.466999" }, { "severity": "CRITICAL", "category": "Network Security", "title": "SSH Port Open to Internet", "description": "Security group launch-wizard-3 (sg-03a0b41324c87a1cf) allows SSH (port 22) from 0.0.0.0/0", "resource": "sg-03a0b41324c87a1cf", "region": "ap-south-1", "recommendation": "Restrict SSH access to specific IP addresses", "timestamp": "2026-08-11T06:01:52.467008" }, { "severity": "CRITICAL", "category": "Network Security", "title": "SSH Port Open to Internet", "description": "Security group launch-wizard-5 (sg-09c817780f51b283f) allows SSH (port 22) from 0.0.0.0/0", "resource": "sg-09c817780f51b283f", "region": "ap-south-1", "recommendation": "Restrict SSH access to specific IP addresses", "timestamp": "2026-08-11T06:01:52.467015" }, { "severity": "CRITICAL", "category": "Network Security", "title": "SSH Port Open to Internet", "description": "Security group launch-wizard-4 (sg-0b2f48d32d3180b76) allows SSH (port 22) from 0.0.0.0/0", "resource": "sg-0b2f48d32d3180b76", "region": "ap-south-1", "recommendation": "Restrict SSH access to specific IP addresses", "timestamp": "2026-08-11T06:01:52.467020" }, { "severity": "MEDIUM", "category": "Data Security", "title": "Unencrypted EBS Volume", "description": "EBS volume vol-0a61c05cbd5df04b4 (8 GB) is not encrypted", "resource": "vol-0a61c05cbd5df04b4", "region": "ap-south-1", "recommendation": "Enable encryption for EBS volumes", "timestamp": "2026-08-11T06:01:52.555091" }, { "severity": "LOW", "category": "Architecture", "title": "Resources in Default VPC", "description": "1 EC2 instances found in default VPC vpc-02d91c7ad0eb51967", "resource": "vpc-02d91c7ad0eb51967", "region": "ap-south-1", "recommendation": "Consider using custom VPCs for better network isolation", "timestamp": "2026-08-11T06:01:52.830435" }, { "severity": "INFO", "category": "Network Security", "title": "EC2 Instance with Public IP", "description": "Instance i-03ac8e5680a75303e (GenAi) has public IP 3.7.8.27", "resource": "i-03ac8e5680a75303e", "region": "ap-south-1", "recommendation": "Review if public IP is necessary; consider using NAT Gateway", "timestamp": "2026-08-11T06:01:52.934457" }, { "severity": "HIGH", "category": "Identity & Access", "title": "IAM User Without MFA", "description": "IAM user darshika.sathwara@calyzatech.com has console access but no MFA enabled", "resource": "darshika.sathwara@calyzatech.com", "region": "global", "recommendation": "Enable MFA for all users with console access", "timestamp": "2026-08-11T06:02:06.537389" }, { "severity": "HIGH", "category": "Identity & Access", "title": "IAM User Without MFA", "description": "IAM user ramesh.prajapati@calyzatech.com has console access but no MFA enabled", "resource": "ramesh.prajapati@calyzatech.com", "region": "global", "recommendation": "Enable MFA for all users with console access", "timestamp": "2026-08-11T06:02:06.963898" }, { "severity": "HIGH", "category": "Identity & Access", "title": "IAM User Without MFA", "description": "IAM user shamsh.pathan@calyzatech.com has console access but no MFA enabled", "resource": "shamsh.pathan@calyzatech.com", "region": "global", "recommendation": "Enable MFA for all users with console access", "timestamp": "2026-08-11T06:02:07.383217" }, { "severity": "MEDIUM", "category": "Identity & Access", "title": "Unused Access Key", "description": "User shamsh.pathan@calyzatech.com access key 1 not used in over 90 days", "resource": "shamsh.pathan@calyzatech.com", "region": "global", "recommendation": "Rotate or delete unused access keys", "timestamp": "2026-08-11T06:02:08.892328" }, { "severity": "HIGH", "category": "Identity & Access", "title": "No Password Policy Configured", "description": "No custom password policy is configured for the account", "resource": "password-policy", "region": "global", "recommendation": "Configure a strong password policy", "timestamp": "2026-08-11T06:02:09.528553" }, { "severity": "MEDIUM", "category": "Identity & Access", "title": "Access Key Needs Rotation", "description": "User akash.kachhadiya@calyzatech.com has access key AKIAXMT2... that is 90 days old", "resource": "akash.kachhadiya@calyzatech.com", "region": "global", "recommendation": "Rotate access keys at least every 90 days", "timestamp": "2026-08-11T06:02:10.340059" }, { "severity": "MEDIUM", "category": "Identity & Access", "title": "Access Key Needs Rotation", "description": "User bhadresh.bhadreshwara@calyzatech.com has access key AKIAXMT2... that is 277 days old", "resource": "bhadresh.bhadreshwara@calyzatech.com", "region": "global", "recommendation": "Rotate access keys at least every 90 days", "timestamp": "2026-08-11T06:02:10.565050" }, { "severity": "MEDIUM", "category": "Identity & Access", "title": "Access Key Needs Rotation", "description": "User shamsh.pathan@calyzatech.com has access key AKIAXMT2... that is 244 days old", "resource": "shamsh.pathan@calyzatech.com", "region": "global", "recommendation": "Rotate access keys at least every 90 days", "timestamp": "2026-08-11T06:02:11.204764" } ], "summary": { "critical": 10, "high": 4, "medium": 6, "low": 2, "info": 2, "total": 24 } }, "optimization": { "recommendations": [ { "category": "Networking", "title": "Unused Elastic IP", "description": "Elastic IP 3.223.79.234 is not associated with any resource", "resource": "eipalloc-0cee5132be649296e", "region": "us-east-1", "estimated_monthly_savings": 3.6, "effort": "Low", "risk": "Low", "action": "Release EIP: aws ec2 release-address --allocation-id eipalloc-0cee5132be649296e", "timestamp": "2026-08-11T06:02:12.738481" }, { "category": "Networking", "title": "Unused Elastic IP", "description": "Elastic IP 34.238.203.244 is not associated with any resource", "resource": "eipalloc-004936a76640b02b6", "region": "us-east-1", "estimated_monthly_savings": 3.6, "effort": "Low", "risk": "Low", "action": "Release EIP: aws ec2 release-address --allocation-id eipalloc-004936a76640b02b6", "timestamp": "2026-08-11T06:02:12.738498" }, { "category": "Networking", "title": "Unused Elastic IP", "description": "Elastic IP 35.175.165.206 is not associated with any resource", "resource": "eipalloc-002573c93ce53b388", "region": "us-east-1", "estimated_monthly_savings": 3.6, "effort": "Low", "risk": "Low", "action": "Release EIP: aws ec2 release-address --allocation-id eipalloc-002573c93ce53b388", "timestamp": "2026-08-11T06:02:12.738504" }, { "category": "Compute", "title": "Underutilized EC2 Instance", "description": "Instance i-0237da95ced8fe8e2 (Bluechip) has 6.6% average CPU over 7 days. Consider rightsizing.", "resource": "i-0237da95ced8fe8e2", "region": "eu-central-1", "estimated_monthly_savings": 36.0, "effort": "Medium", "risk": "Medium", "action": "Consider downsizing instance type or using Auto Scaling", "timestamp": "2026-08-11T06:02:51.230253" }, { "category": "Compute", "title": "Underutilized EC2 Instance", "description": "Instance i-03ac8e5680a75303e (GenAi) has 2.3% average CPU over 7 days. Consider rightsizing.", "resource": "i-03ac8e5680a75303e", "region": "ap-south-1", "estimated_monthly_savings": 4.18, "effort": "Medium", "risk": "Medium", "action": "Consider downsizing instance type or using Auto Scaling", "timestamp": "2026-08-11T06:02:55.167502" }, { "category": "Storage", "title": "S3 Bucket Without Lifecycle Policy", "description": "Bucket cf-templates-1fe03f7mv66ex-ap-south-1 has no lifecycle policy for automatic data management", "resource": "cf-templates-1fe03f7mv66ex-ap-south-1", "region": "global", "estimated_monthly_savings": 5.0, "effort": "Low", "risk": "Low", "action": "Add lifecycle policy to transition/expire old objects", "timestamp": "2026-08-11T06:03:16.651825" }, { "category": "Storage", "title": "S3 Bucket Without Lifecycle Policy", "description": "Bucket gensc-ai-storage-508137168365 has no lifecycle policy for automatic data management", "resource": "gensc-ai-storage-508137168365", "region": "global", "estimated_monthly_savings": 5.0, "effort": "Low", "risk": "Low", "action": "Add lifecycle policy to transition/expire old objects", "timestamp": "2026-08-11T06:03:17.528002" } ], "summary": { "total_recommendations": 7, "potential_monthly_savings": 60.98, "potential_annual_savings": 731.76, "by_category": { "Networking": { "count": 3, "savings": 10.8 }, "Compute": { "count": 2, "savings": 40.18 }, "Storage": { "count": 2, "savings": 10.0 } } } } }