# 🔍 AWS Health Check Report

**📅 Generated:** 2026-08-12 05:46:39 UTC

**🏢 Account ID:** 508137168365

**🌍 Region:** all-regions

---

## 📊 Executive Summary

| Metric | Value |
|--------|-------|
| 💰 Monthly Cost | **$4264.95** |
| 🔒 Security Findings | **27** |
| 🚨 Critical Issues | **11** |
| 🚀 Optimization Opportunities | **8** |
| 💵 Potential Monthly Savings | **$75.96** |

## 💰 Cost Analysis

**Total Monthly Cost:** $4264.95

### Cost by Service

| Service | Cost (USD) | % |
|---------|------------|---|
| Amazon Elastic Compute Cloud - Compute | $3607.32 | 84.6% |
| AWS Business Support+ | $326.41 | 7.7% |
| Tax | $311.71 | 7.3% |
| EC2 - Other | $10.89 | 0.3% |
| Amazon Virtual Private Cloud | $6.80 | 0.2% |
| AWS Secrets Manager | $1.12 | 0.0% |
| AWS Cost Explorer | $0.61 | 0.0% |
| Amazon Relational Database Service | $0.08 | 0.0% |
| AWS Amplify | $0.00 | 0.0% |
| AWS CloudShell | $0.00 | 0.0% |

## 🔒 Security Audit

### Summary

| Severity | Count |
|----------|-------|
| 🚨 Critical | **11** |
| ⚠️ High | **4** |
| 📋 Medium | **7** |
| ℹ️ Low | **2** |

### Security Findings Detail

| Severity | Issue | Resource Name | What's Wrong | How to Fix |
|----------|-------|---------------|--------------|------------|
| 🚨 CRITICAL | SSH Port Open to Internet | `sg-008d6ce7cda58cacc` | Security group seminal-brands-bastion-2026010619124131510000000c (sg-008d6ce7cda | Restrict SSH access to specific IP addresses |
| 🚨 CRITICAL | RDP Port Open to Internet | `sg-02fb1909dd2006124` | Security group launch-wizard-3 (sg-02fb1909dd2006124) allows RDP (port 3389) fro | Restrict RDP access to specific IP addresses |
| 🚨 CRITICAL | SSH Port Open to Internet | `sg-0c01e3f8089b8b319` | Security group launch-wizard-2 (sg-0c01e3f8089b8b319) allows SSH (port 22) from  | Restrict SSH access to specific IP addresses |
| 🚨 CRITICAL | SSH Port Open to Internet | `sg-0b57710eeffe7e001` | Security group launch-wizard-1 (sg-0b57710eeffe7e001) allows SSH (port 22) from  | Restrict SSH access to specific IP addresses |
| 📋 MEDIUM | Unencrypted EBS Volume | `vol-09399b0f334ad58e9` | EBS volume vol-09399b0f334ad58e9 (200 GB) is not encrypted | Enable encryption for EBS volumes |
| ℹ️ LOW | Resources in Default VPC | `vpc-0f1d06c1fe156cc50` | 1 EC2 instances found in default VPC vpc-0f1d06c1fe156cc50 | Consider using custom VPCs for better network isolation |
| • INFO | EC2 Instance with Public IP | `i-0237da95ced8fe8e2` | Instance i-0237da95ced8fe8e2 (Bluechip) has public IP 63.176.33.172 | Review if public IP is necessary; consider using NAT Gateway |
| 🚨 CRITICAL | SSH Port Open to Internet | `sg-0db9c2c39c97531f4` | Security group launch-wizard-6 (sg-0db9c2c39c97531f4) allows SSH (port 22) from  | Restrict SSH access to specific IP addresses |
| 🚨 CRITICAL | Security Group Open to All Traffic | `sg-02e9a530d4f061ac2` | Security group launch-wizard-1 (sg-02e9a530d4f061ac2) allows ALL inbound traffic | Restrict inbound rules to specific IPs and ports |
| 🚨 CRITICAL | SSH Port Open to Internet | `sg-02e9a530d4f061ac2` | Security group launch-wizard-1 (sg-02e9a530d4f061ac2) allows SSH (port 22) from  | Restrict SSH access to specific IP addresses |
| 🚨 CRITICAL | SSH Port Open to Internet | `sg-0bc5292619620eb75` | Security group launch-wizard-2 (sg-0bc5292619620eb75) allows SSH (port 22) from  | Restrict SSH access to specific IP addresses |
| 🚨 CRITICAL | SSH Port Open to Internet | `sg-03a0b41324c87a1cf` | Security group launch-wizard-3 (sg-03a0b41324c87a1cf) allows SSH (port 22) from  | Restrict SSH access to specific IP addresses |
| 🚨 CRITICAL | SSH Port Open to Internet | `sg-09c817780f51b283f` | Security group launch-wizard-5 (sg-09c817780f51b283f) allows SSH (port 22) from  | Restrict SSH access to specific IP addresses |
| 🚨 CRITICAL | SSH Port Open to Internet | `sg-0b2f48d32d3180b76` | Security group launch-wizard-4 (sg-0b2f48d32d3180b76) allows SSH (port 22) from  | Restrict SSH access to specific IP addresses |
| 📋 MEDIUM | Unencrypted EBS Volume | `vol-0a50bd9b322513983` | EBS volume vol-0a50bd9b322513983 (8 GB) is not encrypted | Enable encryption for EBS volumes |
| 📋 MEDIUM | Unencrypted EBS Volume | `vol-0a61c05cbd5df04b4` | EBS volume vol-0a61c05cbd5df04b4 (8 GB) is not encrypted | Enable encryption for EBS volumes |
| ℹ️ LOW | Resources in Default VPC | `vpc-02d91c7ad0eb51967` | 2 EC2 instances found in default VPC vpc-02d91c7ad0eb51967 | Consider using custom VPCs for better network isolation |
| • INFO | EC2 Instance with Public IP | `i-03ac8e5680a75303e` | Instance i-03ac8e5680a75303e (GenAi) has public IP 3.7.8.27 | Review if public IP is necessary; consider using NAT Gateway |
| • INFO | EC2 Instance with Public IP | `i-0ac665868ba50db7b` | Instance i-0ac665868ba50db7b (rbi-regtech-app) has public IP 13.202.145.131 | Review if public IP is necessary; consider using NAT Gateway |
| ⚠️ HIGH | IAM User Without MFA | `darshika.sathwara@calyzatech.com` | IAM user darshika.sathwara@calyzatech.com has console access but no MFA enabled | Enable MFA for all users with console access |
| ⚠️ HIGH | IAM User Without MFA | `ramesh.prajapati@calyzatech.com` | IAM user ramesh.prajapati@calyzatech.com has console access but no MFA enabled | Enable MFA for all users with console access |
| ⚠️ HIGH | IAM User Without MFA | `shamsh.pathan@calyzatech.com` | IAM user shamsh.pathan@calyzatech.com has console access but no MFA enabled | Enable MFA for all users with console access |
| 📋 MEDIUM | Unused Access Key | `shamsh.pathan@calyzatech.com` | User shamsh.pathan@calyzatech.com access key 1 not used in over 90 days | Rotate or delete unused access keys |
| ⚠️ HIGH | No Password Policy Configured | `password-policy` | No custom password policy is configured for the account | Configure a strong password policy |
| 📋 MEDIUM | Access Key Needs Rotation | `akash.kachhadiya@calyzatech.com` | User akash.kachhadiya@calyzatech.com has access key AKIAXMT2... that is 91 days  | Rotate access keys at least every 90 days |
| 📋 MEDIUM | Access Key Needs Rotation | `bhadresh.bhadreshwara@calyzatech.com` | User bhadresh.bhadreshwara@calyzatech.com has access key AKIAXMT2... that is 278 | Rotate access keys at least every 90 days |
| 📋 MEDIUM | Access Key Needs Rotation | `shamsh.pathan@calyzatech.com` | User shamsh.pathan@calyzatech.com has access key AKIAXMT2... that is 245 days ol | Rotate access keys at least every 90 days |

## 🚀 Optimization Recommendations

**💵 Potential Monthly Savings:** $75.96

**📅 Potential Annual Savings:** $911.52

### Recommendations Detail

| Category | Issue | Resource | Savings | Action Required |
|----------|-------|----------|---------|----------------|
| 🖥️ Compute | Underutilized EC2 Instance | `i-0237da95ced8fe8e2` | **$36.00/mo** | Consider downsizing instance type or using Auto Sc |
| 🖥️ Compute | Underutilized EC2 Instance | `i-0ac665868ba50db7b` | **$14.98/mo** | Consider downsizing instance type or using Auto Sc |
| 💾 Storage | S3 Bucket Without Lifecycle Policy | `cf-templates-1fe03f7mv66ex-ap-` | **$5.00/mo** | Add lifecycle policy to transition/expire old obje |
| 💾 Storage | S3 Bucket Without Lifecycle Policy | `gensc-ai-storage-508137168365` | **$5.00/mo** | Add lifecycle policy to transition/expire old obje |
| 🖥️ Compute | Underutilized EC2 Instance | `i-03ac8e5680a75303e` | **$4.18/mo** | Consider downsizing instance type or using Auto Sc |
| 🌐 Networking | Unused Elastic IP | `eipalloc-0cee5132be649296e` | **$3.60/mo** | Release EIP: aws ec2 release-address --allocation- |
| 🌐 Networking | Unused Elastic IP | `eipalloc-004936a76640b02b6` | **$3.60/mo** | Release EIP: aws ec2 release-address --allocation- |
| 🌐 Networking | Unused Elastic IP | `eipalloc-002573c93ce53b388` | **$3.60/mo** | Release EIP: aws ec2 release-address --allocation- |

## 🖥️ Resource Inventory

| Resource Type | Count |
|---------------|-------|
| EC2 Instances | 3 |
| EBS Volumes | 3 |
| RDS Instances | 0 |
| S3 Buckets | 5 |
| Lambda Functions | 3 |
| Load Balancers | 0 |
| NAT Gateways | 0 |
| Elastic IPs | 6 |