| Severity | Finding | Resource | Region |
|---|
| MEDIUM | Resources running in default VPC (vpc-04d8f9176dc741dec) in eu-west-1 | vpc-04d8f9176dc741dec | eu-west-1 |
| MEDIUM | EC2 instance 'wefoundit-prod' (i-05d2778970da12fb1) has a public IP | i-05d2778970da12fb1 | eu-west-1 |
| MEDIUM | DynamoDB table 'safekeep-vault-meta' has no point-in-time recovery | safekeep-vault-meta | us-east-1 |
| LOW | Default NACL acl-0b6bbe48cf9917d9e allows all inbound (expected default behavior) | acl-0b6bbe48cf9917d9e | eu-west-1 |
| LOW | Default NACL acl-06f17b77a709de436 allows all inbound (expected default behavior) | acl-06f17b77a709de436 | us-east-1 |
| LOW | Lambda 'cloudsentry-scanner' has zero invocations in 30+ days | cloudsentry-scanner | us-east-1 |
| LOW | Lambda 'safekeep-vault-backup' has zero invocations in 30+ days | safekeep-vault-backup | us-east-1 |
| LOW | S3 bucket 'safekeep-vaults-185542457060' has no access logging | safekeep-vaults-185542457060 | global |
| LOW | S3 bucket 'wefoundit-media-eu' is intentionally public | wefoundit-media-eu | global |