🔍 AWS Health Check Report

📅 Generated: 2026-08-12 05:46:39 UTC

đŸĸ Account: 508137168365 | 🌍 Region: all-regions

👤 Scanned by: bhadresh.bhadreshwara@calyzatech.com

📊 Executive Summary

$4264.95
💰 Monthly Cost
11
🚨 Critical Issues
27
🔒 Security Findings
$75.96
đŸ’ĩ Potential Savings/mo

💰 Cost Analysis

Total Monthly Cost: $4264.95

ServiceCost (USD)Percentage
Amazon Elastic Compute Cloud - Compute $3607.32
84.6%
AWS Business Support+ $326.41
7.7%
Tax $311.71
7.3%
EC2 - Other $10.89
0.3%
Amazon Virtual Private Cloud $6.80
0.2%
AWS Secrets Manager $1.12
0.0%
AWS Cost Explorer $0.61
0.0%
Amazon Relational Database Service $0.08
0.0%
AWS Amplify $0.00
0.0%
AWS CloudShell $0.00
0.0%

🔒 Security Audit

11
🚨 Critical
4
⚠ī¸ High
7
📋 Medium
2
ℹī¸ Low
Severity Category Issue & Description Resource & How to Fix
🚨 CRITICAL Network Security
SSH Port Open to Internet
Security group seminal-brands-bastion-2026010619124131510000000c (sg-008d6ce7cda58cacc) allows SSH (port 22) from 0.0.0.0/0
 sg-008d6ce7cda58cacc
💡 Fix: Restrict SSH access to specific IP addresses
🚨 CRITICAL Network Security
RDP Port Open to Internet
Security group launch-wizard-3 (sg-02fb1909dd2006124) allows RDP (port 3389) from 0.0.0.0/0
 sg-02fb1909dd2006124
💡 Fix: Restrict RDP access to specific IP addresses
🚨 CRITICAL Network Security
SSH Port Open to Internet
Security group launch-wizard-2 (sg-0c01e3f8089b8b319) allows SSH (port 22) from 0.0.0.0/0
 sg-0c01e3f8089b8b319
💡 Fix: Restrict SSH access to specific IP addresses
🚨 CRITICAL Network Security
SSH Port Open to Internet
Security group launch-wizard-1 (sg-0b57710eeffe7e001) allows SSH (port 22) from 0.0.0.0/0
 sg-0b57710eeffe7e001
💡 Fix: Restrict SSH access to specific IP addresses
📋 MEDIUM Data Security
Unencrypted EBS Volume
EBS volume vol-09399b0f334ad58e9 (200 GB) is not encrypted
 vol-09399b0f334ad58e9
💡 Fix: Enable encryption for EBS volumes
ℹī¸ LOW Architecture
Resources in Default VPC
1 EC2 instances found in default VPC vpc-0f1d06c1fe156cc50
 vpc-0f1d06c1fe156cc50
💡 Fix: Consider using custom VPCs for better network isolation
â€ĸ INFO Network Security
EC2 Instance with Public IP
Instance i-0237da95ced8fe8e2 (Bluechip) has public IP 63.176.33.172
 i-0237da95ced8fe8e2
💡 Fix: Review if public IP is necessary; consider using NAT Gateway
🚨 CRITICAL Network Security
SSH Port Open to Internet
Security group launch-wizard-6 (sg-0db9c2c39c97531f4) allows SSH (port 22) from 0.0.0.0/0
 sg-0db9c2c39c97531f4
💡 Fix: Restrict SSH access to specific IP addresses
🚨 CRITICAL Network Security
Security Group Open to All Traffic
Security group launch-wizard-1 (sg-02e9a530d4f061ac2) allows ALL inbound traffic from 0.0.0.0/0
 sg-02e9a530d4f061ac2
💡 Fix: Restrict inbound rules to specific IPs and ports
🚨 CRITICAL Network Security
SSH Port Open to Internet
Security group launch-wizard-1 (sg-02e9a530d4f061ac2) allows SSH (port 22) from 0.0.0.0/0
 sg-02e9a530d4f061ac2
💡 Fix: Restrict SSH access to specific IP addresses
🚨 CRITICAL Network Security
SSH Port Open to Internet
Security group launch-wizard-2 (sg-0bc5292619620eb75) allows SSH (port 22) from 0.0.0.0/0
 sg-0bc5292619620eb75
💡 Fix: Restrict SSH access to specific IP addresses
🚨 CRITICAL Network Security
SSH Port Open to Internet
Security group launch-wizard-3 (sg-03a0b41324c87a1cf) allows SSH (port 22) from 0.0.0.0/0
 sg-03a0b41324c87a1cf
💡 Fix: Restrict SSH access to specific IP addresses
🚨 CRITICAL Network Security
SSH Port Open to Internet
Security group launch-wizard-5 (sg-09c817780f51b283f) allows SSH (port 22) from 0.0.0.0/0
 sg-09c817780f51b283f
💡 Fix: Restrict SSH access to specific IP addresses
🚨 CRITICAL Network Security
SSH Port Open to Internet
Security group launch-wizard-4 (sg-0b2f48d32d3180b76) allows SSH (port 22) from 0.0.0.0/0
 sg-0b2f48d32d3180b76
💡 Fix: Restrict SSH access to specific IP addresses
📋 MEDIUM Data Security
Unencrypted EBS Volume
EBS volume vol-0a50bd9b322513983 (8 GB) is not encrypted
 vol-0a50bd9b322513983
💡 Fix: Enable encryption for EBS volumes
📋 MEDIUM Data Security
Unencrypted EBS Volume
EBS volume vol-0a61c05cbd5df04b4 (8 GB) is not encrypted
 vol-0a61c05cbd5df04b4
💡 Fix: Enable encryption for EBS volumes
ℹī¸ LOW Architecture
Resources in Default VPC
2 EC2 instances found in default VPC vpc-02d91c7ad0eb51967
 vpc-02d91c7ad0eb51967
💡 Fix: Consider using custom VPCs for better network isolation
â€ĸ INFO Network Security
EC2 Instance with Public IP
Instance i-03ac8e5680a75303e (GenAi) has public IP 3.7.8.27
 i-03ac8e5680a75303e
💡 Fix: Review if public IP is necessary; consider using NAT Gateway
â€ĸ INFO Network Security
EC2 Instance with Public IP
Instance i-0ac665868ba50db7b (rbi-regtech-app) has public IP 13.202.145.131
 i-0ac665868ba50db7b
💡 Fix: Review if public IP is necessary; consider using NAT Gateway
⚠ī¸ HIGH Identity & Access
IAM User Without MFA
IAM user darshika.sathwara@calyzatech.com has console access but no MFA enabled
 darshika.sathwara@calyzatech.com
💡 Fix: Enable MFA for all users with console access
⚠ī¸ HIGH Identity & Access
IAM User Without MFA
IAM user ramesh.prajapati@calyzatech.com has console access but no MFA enabled
 ramesh.prajapati@calyzatech.com
💡 Fix: Enable MFA for all users with console access
⚠ī¸ HIGH Identity & Access
IAM User Without MFA
IAM user shamsh.pathan@calyzatech.com has console access but no MFA enabled
 shamsh.pathan@calyzatech.com
💡 Fix: Enable MFA for all users with console access
📋 MEDIUM Identity & Access
Unused Access Key
User shamsh.pathan@calyzatech.com access key 1 not used in over 90 days
 shamsh.pathan@calyzatech.com
💡 Fix: Rotate or delete unused access keys
⚠ī¸ HIGH Identity & Access
No Password Policy Configured
No custom password policy is configured for the account
 password-policy
💡 Fix: Configure a strong password policy
📋 MEDIUM Identity & Access
Access Key Needs Rotation
User akash.kachhadiya@calyzatech.com has access key AKIAXMT2... that is 91 days old
 akash.kachhadiya@calyzatech.com
💡 Fix: Rotate access keys at least every 90 days
📋 MEDIUM Identity & Access
Access Key Needs Rotation
User bhadresh.bhadreshwara@calyzatech.com has access key AKIAXMT2... that is 278 days old
 bhadresh.bhadreshwara@calyzatech.com
💡 Fix: Rotate access keys at least every 90 days
📋 MEDIUM Identity & Access
Access Key Needs Rotation
User shamsh.pathan@calyzatech.com has access key AKIAXMT2... that is 245 days old
 shamsh.pathan@calyzatech.com
💡 Fix: Rotate access keys at least every 90 days

🚀 Optimization Recommendations

$75.96
đŸ’ĩ Monthly Savings
$911.52
📅 Annual Savings
8
📋 Recommendations
Category Issue & Details Resource Savings Action Required
đŸ–Ĩī¸ Compute
Underutilized EC2 Instance
Instance i-0237da95ced8fe8e2 (Bluechip) has 6.6% average CPU over 7 days. Consider rightsizing.
 i-0237da95ced8fe8e2 $36.00
/month
💡 Consider downsizing instance type or using Auto Scaling
đŸ–Ĩī¸ Compute
Underutilized EC2 Instance
Instance i-0ac665868ba50db7b (rbi-regtech-app) has 0.4% average CPU over 7 days. Consider rightsizing.
 i-0ac665868ba50db7b $14.98
/month
💡 Consider downsizing instance type or using Auto Scaling
💾 Storage
S3 Bucket Without Lifecycle Policy
Bucket cf-templates-1fe03f7mv66ex-ap-south-1 has no lifecycle policy for automatic data management
 cf-templates-1fe03f7mv66ex-ap-south-1 $5.00
/month
💡 Add lifecycle policy to transition/expire old objects
💾 Storage
S3 Bucket Without Lifecycle Policy
Bucket gensc-ai-storage-508137168365 has no lifecycle policy for automatic data management
 gensc-ai-storage-508137168365 $5.00
/month
💡 Add lifecycle policy to transition/expire old objects
đŸ–Ĩī¸ Compute
Underutilized EC2 Instance
Instance i-03ac8e5680a75303e (GenAi) has 2.3% average CPU over 7 days. Consider rightsizing.
 i-03ac8e5680a75303e $4.18
/month
💡 Consider downsizing instance type or using Auto Scaling
🌐 Networking
Unused Elastic IP
Elastic IP 3.223.79.234 is not associated with any resource
 eipalloc-0cee5132be649296e $3.60
/month
💡 Release EIP: aws ec2 release-address --allocation-id eipalloc-0cee5132be649296e
🌐 Networking
Unused Elastic IP
Elastic IP 34.238.203.244 is not associated with any resource
 eipalloc-004936a76640b02b6 $3.60
/month
💡 Release EIP: aws ec2 release-address --allocation-id eipalloc-004936a76640b02b6
🌐 Networking
Unused Elastic IP
Elastic IP 35.175.165.206 is not associated with any resource
 eipalloc-002573c93ce53b388 $3.60
/month
💡 Release EIP: aws ec2 release-address --allocation-id eipalloc-002573c93ce53b388

đŸ–Ĩī¸ Resource Inventory

3
EC2 Instances
3
EBS Volumes
5
S3 Buckets
3
Lambda Functions
0
RDS Instances
0
Load Balancers