CloudTrail
AWS Config
GuardDuty
Security Hub
EBS Default Encryption
Root MFA
Identity & Access10
S3 Storage10
Network34
Encryption90
Logging & Monitoring80
Findings by Category
S3 Bucket Security (26 buckets)
Security Findings (55)
| Severity | Category | Finding | Resource |
|---|---|---|---|
| HIGH | Iam | Minimum password length is 6 (should be 14+) | AccountPasswordPolicy |
| MEDIUM | Iam | Password policy does not require symbols | AccountPasswordPolicy |
| MEDIUM | Iam | Password policy does not require numbers | AccountPasswordPolicy |
| MEDIUM | Iam | Password policy does not require uppercase characters | AccountPasswordPolicy |
| MEDIUM | Iam | Passwords do not expire | AccountPasswordPolicy |
| HIGH | Iam | Access key for '<root_account>' is 1498 days old | <root_account> |
| HIGH | Iam | Access key for 'a2cuser' is 1885 days old | a2cuser |
| HIGH | Iam | Access key for 'cross-account-copy' is 1127 days old | cross-account-copy |
| HIGH | Iam | Access key for 'Former2' is 1138 days old | Former2 |
| HIGH | Iam | Access key for 'manaskatu' is 861 days old | manaskatu |
| HIGH | Iam | Access key for 'MGNUser' is 410 days old | MGNUser |
| HIGH | Iam | Access key for 'mm-ads' is 1550 days old | mm-ads |
| HIGH | Iam | Access key for 'mm-cloudendure' is 1600 days old | mm-cloudendure |
| HIGH | Iam | Access key for 'user-s3-copy-same-account' is 1109 days old | user-s3-copy-same-account |
| HIGH | Iam | Access key for 'user-s3sync-multi-target-source' is 1121 days old | user-s3sync-multi-target-source |
| HIGH | Iam | Access key for 'user-s3sync-target-source' is 1121 days old | user-s3sync-target-source |
| HIGH | Iam | Access key for 'user2-s3sync-multi-target-source' is 1120 days old | user2-s3sync-multi-target-source |
| MEDIUM | S3 | Bucket 'awstransform07122026' has no default encryption | awstransform07122026 |
| MEDIUM | S3 | Bucket 'bedrockkbtarget-02082026' has no default encryption | bedrockkbtarget-02082026 |
| MEDIUM | S3 | Bucket 'cf-templates-1l8wh3qrsl621-us-east-1' has no default encryption | cf-templates-1l8wh3qrsl621-us-east-1 |
| MEDIUM | S3 | Bucket 'cloudcost-06102025' has no default encryption | cloudcost-06102025 |
| MEDIUM | S3 | Bucket 'demobedrockagent-02082026' has no default encryption | demobedrockagent-02082026 |
| MEDIUM | S3 | Bucket 'demofiles-06182025' has no default encryption | demofiles-06182025 |
| MEDIUM | S3 | Bucket 'final-deliverables-03262026' has no default encryption | final-deliverables-03262026 |
| MEDIUM | S3 | Bucket 'finops-aws-04062026' has no default encryption | finops-aws-04062026 |
| MEDIUM | S3 | Bucket 'finops-azure-04062026' has no default encryption | finops-azure-04062026 |
| MEDIUM | S3 | Bucket 'finops-cloudcost-04062026' has no default encryption | finops-cloudcost-04062026 |
| MEDIUM | S3 | Bucket 'finops-cloudcost-others-04082026' has no default encryption | finops-cloudcost-others-04082026 |
| MEDIUM | S3 | Bucket 'finops-config-182858660547-us-east-1-1276e7f9db4b' has no default encryption | finops-config-182858660547-us-east-1-1276e7f9db4b |
| MEDIUM | S3 | Bucket 'icreatemyownbucket-03132024' has no default encryption | icreatemyownbucket-03132024 |
| MEDIUM | S3 | Bucket 'katu-06022025' has no default encryption | katu-06022025 |
| MEDIUM | S3 | Bucket 'landing-zone-security-logs-182858660547' has no default encryption | landing-zone-security-logs-182858660547 |
| HIGH | S3 | Bucket 'manasmondal.com' has no public access block | manasmondal.com |
| MEDIUM | S3 | Bucket 'manasmondal.com' has no default encryption | manasmondal.com |
| MEDIUM | S3 | Bucket 'manasrfp-06052026' has no default encryption | manasrfp-06052026 |
| MEDIUM | S3 | Bucket 'mygtdetails-02282025' has no default encryption | mygtdetails-02282025 |
| HIGH | S3 | Bucket 'myresume-04062022' has no public access block | myresume-04062022 |
| MEDIUM | S3 | Bucket 'myresume-04062022' has no default encryption | myresume-04062022 |
| MEDIUM | S3 | Bucket 'mysw-09172025' has no default encryption | mysw-09172025 |
| MEDIUM | S3 | Bucket 'mytax-02282025' has no default encryption | mytax-02282025 |
| MEDIUM | S3 | Bucket 'regeneronpharmaceuticalsinc-07132026' has no default encryption | regeneronpharmaceuticalsinc-07132026 |
| MEDIUM | S3 | Bucket 'rvt-07142026' has no default encryption | rvt-07142026 |
| MEDIUM | S3 | Bucket 's3files-04172026' has no default encryption | s3files-04172026 |
| MEDIUM | S3 | Bucket 'security-dashboard-build-182858660547' has no default encryption | security-dashboard-build-182858660547 |
| MEDIUM | S3 | Bucket 'wip-06272025' has no default encryption | wip-06272025 |
| HIGH | Ec2 Network | VPC vpc-0bf43605f8f2c6179 has no flow logs enabled | vpc-0bf43605f8f2c6179 |
| MEDIUM | Ec2 Network | Security group 'manas-sg' (sg-04f834d6014fc51b1) has port 80 open to 0.0.0.0/0 | sg-04f834d6014fc51b1 |
| CRITICAL | Ec2 Network | Security group 'manas-sg' (sg-04f834d6014fc51b1) has port ALL open to 0.0.0.0/0 | sg-04f834d6014fc51b1 |
| CRITICAL | Ec2 Network | Security group 'manas-sg' (sg-04f834d6014fc51b1) has port 22 open to 0.0.0.0/0 | sg-04f834d6014fc51b1 |
| MEDIUM | Ec2 Network | Security group 'security-dashboard-DashboardSG-jXcCOw7W7tVh' (sg-0b10cbf99c42a54c0) has port 80 open to 0.0.0.0/0 | sg-0b10cbf99c42a54c0 |
| MEDIUM | Ec2 Network | Security group 'security-dashboard-DashboardSG-jXcCOw7W7tVh' (sg-0b10cbf99c42a54c0) has port 443 open to 0.0.0.0/0 | sg-0b10cbf99c42a54c0 |
| MEDIUM | Ec2 Network | Default security group in VPC vpc-0bf43605f8f2c6179 has ingress rules (should be empty) | sg-0e6ff667bc6a51cb9 |
| HIGH | Encryption | EBS encryption by default is not enabled | Account-us-east-1 |
| HIGH | Logging Monitoring | GuardDuty is not enabled - no threat detection | GuardDuty |
| HIGH | Logging Monitoring | Security Hub is not enabled - no centralized findings | SecurityHub |