CloudTrail
AWS Config
GuardDuty
Security Hub
EBS Default Encryption
Root MFA
Identity & Access10
S3 Storage10
Network10
Encryption86
Logging & Monitoring70
Findings by Category
S3 Bucket Security (35 buckets)
Security Findings (79)
| Severity | Category | Finding | Resource |
|---|---|---|---|
| HIGH | Iam | Minimum password length is 6 (should be 14+) | AccountPasswordPolicy |
| MEDIUM | Iam | Password policy does not require symbols | AccountPasswordPolicy |
| MEDIUM | Iam | Password policy does not require numbers | AccountPasswordPolicy |
| MEDIUM | Iam | Password policy does not require uppercase characters | AccountPasswordPolicy |
| MEDIUM | Iam | Passwords do not expire | AccountPasswordPolicy |
| HIGH | Iam | Access key for '<root_account>' is 1608 days old | <root_account> |
| HIGH | Iam | Access key for 'a2cuser' is 1995 days old | a2cuser |
| HIGH | Iam | Access key for 'cross-account-copy' is 1237 days old | cross-account-copy |
| HIGH | Iam | Access key for 'Former2' is 1248 days old | Former2 |
| HIGH | Iam | Access key for 'manaskatu' is 971 days old | manaskatu |
| HIGH | Iam | Access key for 'MGNUser' is 520 days old | MGNUser |
| HIGH | Iam | Access key for 'mm-ads' is 1660 days old | mm-ads |
| HIGH | Iam | Access key for 'mm-cloudendure' is 1710 days old | mm-cloudendure |
| HIGH | Iam | Access key for 'mmondal' is 178 days old | mmondal |
| HIGH | Iam | Access key for 'user-s3-copy-same-account' is 1220 days old | user-s3-copy-same-account |
| HIGH | Iam | Access key for 'user-s3sync-multi-target-source' is 1231 days old | user-s3sync-multi-target-source |
| HIGH | Iam | Access key for 'user-s3sync-target-source' is 1231 days old | user-s3sync-target-source |
| HIGH | Iam | Access key for 'user2-s3sync-multi-target-source' is 1230 days old | user2-s3sync-multi-target-source |
| MEDIUM | S3 | Bucket 'awstransform07122026' has no default encryption | awstransform07122026 |
| MEDIUM | S3 | Bucket 'bedrockkbtarget-02082026' has no default encryption | bedrockkbtarget-02082026 |
| MEDIUM | S3 | Bucket 'cdk-hnb659fds-assets-182858660547-us-east-1' has no default encryption | cdk-hnb659fds-assets-182858660547-us-east-1 |
| MEDIUM | S3 | Bucket 'cf-templates-1l8wh3qrsl621-us-east-1' has no default encryption | cf-templates-1l8wh3qrsl621-us-east-1 |
| MEDIUM | S3 | Bucket 'cloudcost-06102025' has no default encryption | cloudcost-06102025 |
| MEDIUM | S3 | Bucket 'cloudformation-09142026' has no default encryption | cloudformation-09142026 |
| MEDIUM | S3 | Bucket 'cost-continuum-artifacts-182858660547-us-east-1' has no default encryption | cost-continuum-artifacts-182858660547-us-east-1 |
| MEDIUM | S3 | Bucket 'cost-continuum-databucket-bm8b59amjymo' has no default encryption | cost-continuum-databucket-bm8b59amjymo |
| MEDIUM | S3 | Bucket 'cost-continuum-sitebucket-e7bz3xnon2vs' has no default encryption | cost-continuum-sitebucket-e7bz3xnon2vs |
| MEDIUM | S3 | Bucket 'demobedrockagent-02082026' has no default encryption | demobedrockagent-02082026 |
| MEDIUM | S3 | Bucket 'demofiles-06182025' has no default encryption | demofiles-06182025 |
| MEDIUM | S3 | Bucket 'final-deliverables-03262026' has no default encryption | final-deliverables-03262026 |
| MEDIUM | S3 | Bucket 'finops-ai-dashboard-build-182858660547' has no default encryption | finops-ai-dashboard-build-182858660547 |
| MEDIUM | S3 | Bucket 'finops-aws-04062026' has no default encryption | finops-aws-04062026 |
| MEDIUM | S3 | Bucket 'finops-azure-04062026' has no default encryption | finops-azure-04062026 |
| MEDIUM | S3 | Bucket 'finops-cloudcost-04062026' has no default encryption | finops-cloudcost-04062026 |
| MEDIUM | S3 | Bucket 'finops-cloudcost-others-04082026' has no default encryption | finops-cloudcost-others-04082026 |
| MEDIUM | S3 | Bucket 'finops-config-182858660547-us-east-1-1276e7f9db4b' has no default encryption | finops-config-182858660547-us-east-1-1276e7f9db4b |
| MEDIUM | S3 | Bucket 'finops-dev-artifacts-182858660547-us-east-1' has no default encryption | finops-dev-artifacts-182858660547-us-east-1 |
| MEDIUM | S3 | Bucket 'finopskb-10312026' has no default encryption | finopskb-10312026 |
| MEDIUM | S3 | Bucket 'icreatemyownbucket-03132024' has no default encryption | icreatemyownbucket-03132024 |
| MEDIUM | S3 | Bucket 'katu-06022025' has no default encryption | katu-06022025 |
| MEDIUM | S3 | Bucket 'l3-certification-09272026' has no default encryption | l3-certification-09272026 |
| MEDIUM | S3 | Bucket 'landing-zone-security-logs-182858660547' has no default encryption | landing-zone-security-logs-182858660547 |
| HIGH | S3 | Bucket 'manasmondal.com' has no public access block | manasmondal.com |
| MEDIUM | S3 | Bucket 'manasmondal.com' has no default encryption | manasmondal.com |
| MEDIUM | S3 | Bucket 'manasrfp-06052026' has no default encryption | manasrfp-06052026 |
| MEDIUM | S3 | Bucket 'myazurebucket-10262026' has no default encryption | myazurebucket-10262026 |
| MEDIUM | S3 | Bucket 'mygtdetails-02282025' has no default encryption | mygtdetails-02282025 |
| HIGH | S3 | Bucket 'myresume-04062022' has no public access block | myresume-04062022 |
| MEDIUM | S3 | Bucket 'myresume-04062022' has no default encryption | myresume-04062022 |
| MEDIUM | S3 | Bucket 'mysw-09172025' has no default encryption | mysw-09172025 |
| MEDIUM | S3 | Bucket 'mytax-02282025' has no default encryption | mytax-02282025 |
| MEDIUM | S3 | Bucket 'runbooks08012026' has no default encryption | runbooks08012026 |
| MEDIUM | S3 | Bucket 's3files-04172026' has no default encryption | s3files-04172026 |
| MEDIUM | S3 | Bucket 'security-dashboard-build-182858660547' has no default encryption | security-dashboard-build-182858660547 |
| MEDIUM | S3 | Bucket 'wip-06272025' has no default encryption | wip-06272025 |
| HIGH | Ec2 Network | VPC vpc-09f46abc58347554e has no flow logs enabled | vpc-09f46abc58347554e |
| HIGH | Ec2 Network | VPC vpc-0bf43605f8f2c6179 has no flow logs enabled | vpc-0bf43605f8f2c6179 |
| MEDIUM | Ec2 Network | Security group 'cost-optimization-dashboard-DashboardSG-yCAY97d04yFg' (sg-0f20e14be4845f666) has port 80 open to 0.0.0.0/0 | sg-0f20e14be4845f666 |
| MEDIUM | Ec2 Network | Security group 'cost-optimization-dashboard-DashboardSG-yCAY97d04yFg' (sg-0f20e14be4845f666) has port 443 open to 0.0.0.0/0 | sg-0f20e14be4845f666 |
| MEDIUM | Ec2 Network | Security group 'manas-sg' (sg-04f834d6014fc51b1) has port 80 open to 0.0.0.0/0 | sg-04f834d6014fc51b1 |
| CRITICAL | Ec2 Network | Security group 'manas-sg' (sg-04f834d6014fc51b1) has port ALL open to 0.0.0.0/0 | sg-04f834d6014fc51b1 |
| CRITICAL | Ec2 Network | Security group 'manas-sg' (sg-04f834d6014fc51b1) has port 22 open to 0.0.0.0/0 | sg-04f834d6014fc51b1 |
| CRITICAL | Ec2 Network | Security group 'windowssg' (sg-0a0c417b121acdc41) has port 3389 open to 0.0.0.0/0 | sg-0a0c417b121acdc41 |
| MEDIUM | Ec2 Network | Security group 'demo-sg' (sg-0d2dbaff6f6fc3369) has port 80 open to 0.0.0.0/0 | sg-0d2dbaff6f6fc3369 |
| CRITICAL | Ec2 Network | Security group 'demo-sg' (sg-0d2dbaff6f6fc3369) has port 22 open to 0.0.0.0/0 | sg-0d2dbaff6f6fc3369 |
| MEDIUM | Ec2 Network | Security group 'demo-sg' (sg-0d2dbaff6f6fc3369) has port 443 open to 0.0.0.0/0 | sg-0d2dbaff6f6fc3369 |
| MEDIUM | Ec2 Network | Security group 'security-dashboard-DashboardSG-8tGQxICABY0u' (sg-089344bb91589b439) has port 80 open to 0.0.0.0/0 | sg-089344bb91589b439 |
| MEDIUM | Ec2 Network | Security group 'security-dashboard-DashboardSG-8tGQxICABY0u' (sg-089344bb91589b439) has port 443 open to 0.0.0.0/0 | sg-089344bb91589b439 |
| MEDIUM | Ec2 Network | Security group 'mydashboard-sg' (sg-099c98ff246343e94) has port 80 open to 0.0.0.0/0 | sg-099c98ff246343e94 |
| MEDIUM | Ec2 Network | Security group 'mydashboard-sg' (sg-099c98ff246343e94) has port 443 open to 0.0.0.0/0 | sg-099c98ff246343e94 |
| CRITICAL | Ec2 Network | Security group 'mydashboard-sg' (sg-099c98ff246343e94) has port 3389 open to 0.0.0.0/0 | sg-099c98ff246343e94 |
| CRITICAL | Ec2 Network | Security group 'dashboard' (sg-02a4d4e117f50aa8a) has port 3389 open to 0.0.0.0/0 | sg-02a4d4e117f50aa8a |
| MEDIUM | Ec2 Network | Default security group in VPC vpc-0bf43605f8f2c6179 has ingress rules (should be empty) | sg-0e6ff667bc6a51cb9 |
| MEDIUM | Ec2 Network | Default security group in VPC vpc-09f46abc58347554e has ingress rules (should be empty) | sg-01cd3f64cf555ddc0 |
| HIGH | Encryption | EBS encryption by default is not enabled | Account-us-east-1 |
| MEDIUM | Encryption | KMS key 5866a286-944... has rotation disabled | 5866a286-9445-4e90-928a-27225ba6d23e |
| HIGH | Logging Monitoring | AWS Config is not recording | Config |
| HIGH | Logging Monitoring | GuardDuty is not enabled - no threat detection | GuardDuty |
| HIGH | Logging Monitoring | Security Hub is not enabled - no centralized findings | SecurityHub |