# 🔍 AWS Health Check Report

**📅 Generated:** 2026-08-11 06:03:21 UTC

**🏢 Account ID:** 508137168365

**🌍 Region:** all-regions

---

## 📊 Executive Summary

| Metric | Value |
|--------|-------|
| 💰 Monthly Cost | **$3767.26** |
| 🔒 Security Findings | **24** |
| 🚨 Critical Issues | **10** |
| 🚀 Optimization Opportunities | **7** |
| 💵 Potential Monthly Savings | **$60.98** |

## 💰 Cost Analysis

**Total Monthly Cost:** $3767.26

### Cost by Service

| Service | Cost (USD) | % |
|---------|------------|---|
| Amazon Elastic Compute Cloud - Compute | $3215.17 | 85.3% |
| AWS Business Support+ | $290.94 | 7.7% |
| Tax | $243.67 | 6.5% |
| EC2 - Other | $9.84 | 0.3% |
| Amazon Virtual Private Cloud | $6.16 | 0.2% |
| AWS Secrets Manager | $1.02 | 0.0% |
| AWS Cost Explorer | $0.38 | 0.0% |
| Amazon Relational Database Service | $0.07 | 0.0% |
| AWS Amplify | $0.00 | 0.0% |
| AWS CloudShell | $0.00 | 0.0% |

## 🔒 Security Audit

### Summary

| Severity | Count |
|----------|-------|
| 🚨 Critical | **10** |
| ⚠️ High | **4** |
| 📋 Medium | **6** |
| ℹ️ Low | **2** |

### Security Findings Detail

| Severity | Issue | Resource Name | What's Wrong | How to Fix |
|----------|-------|---------------|--------------|------------|
| 🚨 CRITICAL | SSH Port Open to Internet | `sg-008d6ce7cda58cacc` | Security group seminal-brands-bastion-2026010619124131510000000c (sg-008d6ce7cda | Restrict SSH access to specific IP addresses |
| 🚨 CRITICAL | RDP Port Open to Internet | `sg-02fb1909dd2006124` | Security group launch-wizard-3 (sg-02fb1909dd2006124) allows RDP (port 3389) fro | Restrict RDP access to specific IP addresses |
| 🚨 CRITICAL | SSH Port Open to Internet | `sg-0c01e3f8089b8b319` | Security group launch-wizard-2 (sg-0c01e3f8089b8b319) allows SSH (port 22) from  | Restrict SSH access to specific IP addresses |
| 🚨 CRITICAL | SSH Port Open to Internet | `sg-0b57710eeffe7e001` | Security group launch-wizard-1 (sg-0b57710eeffe7e001) allows SSH (port 22) from  | Restrict SSH access to specific IP addresses |
| 📋 MEDIUM | Unencrypted EBS Volume | `vol-09399b0f334ad58e9` | EBS volume vol-09399b0f334ad58e9 (200 GB) is not encrypted | Enable encryption for EBS volumes |
| ℹ️ LOW | Resources in Default VPC | `vpc-0f1d06c1fe156cc50` | 1 EC2 instances found in default VPC vpc-0f1d06c1fe156cc50 | Consider using custom VPCs for better network isolation |
| • INFO | EC2 Instance with Public IP | `i-0237da95ced8fe8e2` | Instance i-0237da95ced8fe8e2 (Bluechip) has public IP 63.176.33.172 | Review if public IP is necessary; consider using NAT Gateway |
| 🚨 CRITICAL | Security Group Open to All Traffic | `sg-02e9a530d4f061ac2` | Security group launch-wizard-1 (sg-02e9a530d4f061ac2) allows ALL inbound traffic | Restrict inbound rules to specific IPs and ports |
| 🚨 CRITICAL | SSH Port Open to Internet | `sg-02e9a530d4f061ac2` | Security group launch-wizard-1 (sg-02e9a530d4f061ac2) allows SSH (port 22) from  | Restrict SSH access to specific IP addresses |
| 🚨 CRITICAL | SSH Port Open to Internet | `sg-0bc5292619620eb75` | Security group launch-wizard-2 (sg-0bc5292619620eb75) allows SSH (port 22) from  | Restrict SSH access to specific IP addresses |
| 🚨 CRITICAL | SSH Port Open to Internet | `sg-03a0b41324c87a1cf` | Security group launch-wizard-3 (sg-03a0b41324c87a1cf) allows SSH (port 22) from  | Restrict SSH access to specific IP addresses |
| 🚨 CRITICAL | SSH Port Open to Internet | `sg-09c817780f51b283f` | Security group launch-wizard-5 (sg-09c817780f51b283f) allows SSH (port 22) from  | Restrict SSH access to specific IP addresses |
| 🚨 CRITICAL | SSH Port Open to Internet | `sg-0b2f48d32d3180b76` | Security group launch-wizard-4 (sg-0b2f48d32d3180b76) allows SSH (port 22) from  | Restrict SSH access to specific IP addresses |
| 📋 MEDIUM | Unencrypted EBS Volume | `vol-0a61c05cbd5df04b4` | EBS volume vol-0a61c05cbd5df04b4 (8 GB) is not encrypted | Enable encryption for EBS volumes |
| ℹ️ LOW | Resources in Default VPC | `vpc-02d91c7ad0eb51967` | 1 EC2 instances found in default VPC vpc-02d91c7ad0eb51967 | Consider using custom VPCs for better network isolation |
| • INFO | EC2 Instance with Public IP | `i-03ac8e5680a75303e` | Instance i-03ac8e5680a75303e (GenAi) has public IP 3.7.8.27 | Review if public IP is necessary; consider using NAT Gateway |
| ⚠️ HIGH | IAM User Without MFA | `darshika.sathwara@calyzatech.com` | IAM user darshika.sathwara@calyzatech.com has console access but no MFA enabled | Enable MFA for all users with console access |
| ⚠️ HIGH | IAM User Without MFA | `ramesh.prajapati@calyzatech.com` | IAM user ramesh.prajapati@calyzatech.com has console access but no MFA enabled | Enable MFA for all users with console access |
| ⚠️ HIGH | IAM User Without MFA | `shamsh.pathan@calyzatech.com` | IAM user shamsh.pathan@calyzatech.com has console access but no MFA enabled | Enable MFA for all users with console access |
| 📋 MEDIUM | Unused Access Key | `shamsh.pathan@calyzatech.com` | User shamsh.pathan@calyzatech.com access key 1 not used in over 90 days | Rotate or delete unused access keys |

## 🚀 Optimization Recommendations

**💵 Potential Monthly Savings:** $60.98

**📅 Potential Annual Savings:** $731.76

### Recommendations Detail

| Category | Issue | Resource | Savings | Action Required |
|----------|-------|----------|---------|----------------|
| 🖥️ Compute | Underutilized EC2 Instance | `i-0237da95ced8fe8e2` | **$36.00/mo** | Consider downsizing instance type or using Auto Sc |
| 💾 Storage | S3 Bucket Without Lifecycle Policy | `cf-templates-1fe03f7mv66ex-ap-` | **$5.00/mo** | Add lifecycle policy to transition/expire old obje |
| 💾 Storage | S3 Bucket Without Lifecycle Policy | `gensc-ai-storage-508137168365` | **$5.00/mo** | Add lifecycle policy to transition/expire old obje |
| 🖥️ Compute | Underutilized EC2 Instance | `i-03ac8e5680a75303e` | **$4.18/mo** | Consider downsizing instance type or using Auto Sc |
| 🌐 Networking | Unused Elastic IP | `eipalloc-0cee5132be649296e` | **$3.60/mo** | Release EIP: aws ec2 release-address --allocation- |
| 🌐 Networking | Unused Elastic IP | `eipalloc-004936a76640b02b6` | **$3.60/mo** | Release EIP: aws ec2 release-address --allocation- |
| 🌐 Networking | Unused Elastic IP | `eipalloc-002573c93ce53b388` | **$3.60/mo** | Release EIP: aws ec2 release-address --allocation- |

## 🖥️ Resource Inventory

| Resource Type | Count |
|---------------|-------|
| EC2 Instances | 2 |
| EBS Volumes | 2 |
| RDS Instances | 0 |
| S3 Buckets | 5 |
| Lambda Functions | 3 |
| Load Balancers | 0 |
| NAT Gateways | 0 |
| Elastic IPs | 5 |