2026-10-11
| Severity | Finding | Resource | Region |
|---|---|---|---|
| CRITICAL | Root account has active access keys | root | global |
| MEDIUM | Resources running in default VPC (vpc-04d8f9176dc741dec) in eu-west-1 | vpc-04d8f9176dc741dec | eu-west-1 |
| MEDIUM | VPC 'sept26-dev' (vpc-079289cdc24ae8d7f) has no flow logs enabled | vpc-079289cdc24ae8d7f | us-east-1 |
| MEDIUM | EC2 instance 'wefoundit-prod' (i-05d2778970da12fb1) has a public IP | i-05d2778970da12fb1 | eu-west-1 |
| MEDIUM | DynamoDB table 'safekeep-vault-meta' has no point-in-time recovery | safekeep-vault-meta | us-east-1 |
| MEDIUM | KMS key 005808d5-f37e-4c6b-9886-8b57157434dd is pending deletion | 005808d5-f37e-4c6b-9886-8b57157434dd | us-east-1 |
| MEDIUM | KMS key 09d1c33b-05d5-4f00-a546-16afa7f53848 is pending deletion | 09d1c33b-05d5-4f00-a546-16afa7f53848 | us-east-1 |
| LOW | Default NACL acl-0b6bbe48cf9917d9e allows all inbound (expected default behavior) | acl-0b6bbe48cf9917d9e | eu-west-1 |
| LOW | Default NACL acl-09aedb4360e2e5714 allows all inbound (expected default behavior) | acl-09aedb4360e2e5714 | us-east-1 |
| LOW | Default NACL acl-06f17b77a709de436 allows all inbound (expected default behavior) | acl-06f17b77a709de436 | us-east-1 |
| LOW | Lambda 'safekeep-vault-backup' has zero invocations in 30+ days | safekeep-vault-backup | us-east-1 |
| LOW | S3 bucket 'safekeep-vaults-185542457060' has no access logging | safekeep-vaults-185542457060 | global |
| LOW | S3 bucket 'wefoundit-media-eu' is intentionally public | wefoundit-media-eu | global |
| LOW | Security group 'k8s-elb-a9910fff3cf8c4bd49b5234ec1a1ece1' (sg-0327fb024967154aa) created outside IaC | sg-0327fb024967154aa | us-east-1 |
| Severity | Category | Violation | Resource |
|---|---|---|---|
| MEDIUM | tag | EBS Volume 'vol-09dab7bd8b64ecfbc' missing tags: Environment, Project, Owner, CostCenter, ManagedBy | vol-09dab7bd8b64ecfbc |
| MEDIUM | tag | EBS Volume 'vol-03d8a5ff138c0c253' missing tags: Environment, Project, Owner, CostCenter, ManagedBy | vol-03d8a5ff138c0c253 |
| MEDIUM | tag | EBS Volume 'vol-095439cecb39ac1aa' missing tags: Environment, Project, Owner, CostCenter, ManagedBy | vol-095439cecb39ac1aa |
| MEDIUM | tag | EBS Volume 'vol-013efe6ff2804d47c' missing tags: Environment, Project, Owner, CostCenter, ManagedBy | vol-013efe6ff2804d47c |
| MEDIUM | tag | EBS Volume 'vol-0a12bfbbcf015cf86' missing tags: Environment, Project, Owner, CostCenter, ManagedBy | vol-0a12bfbbcf015cf86 |
| MEDIUM | tag | Security Group 'sg-0327fb024967154aa' missing tags: Environment, Project, Owner, CostCenter, ManagedBy | sg-0327fb024967154aa |
| MEDIUM | tag | Security Group 'sg-00a8fcf758d4b5e18' missing tags: Project, Owner, CostCenter, ManagedBy | sg-00a8fcf758d4b5e18 |
| MEDIUM | cost | Service 'Kiro' exceeds cost threshold: $70.97/month | Kiro |
| LOW | tag | Security Group 'sg-00a8fcf758d4b5e18' has invalid Environment tag value | sg-00a8fcf758d4b5e18 |
| Month-to-date (gross) | $87.09 |
| Forecast (end of month) | $147.50 |
| Last month (gross) | $251.46 |
| Usage | $16.12 |
| Subscriptions | $70.97 |
| Net after credits | $-0.00 |
| Service | Cost |
|---|---|
| Kiro | $70.97 |
| Amazon Elastic Compute Cloud - Compute | $5.93 |
| Amazon Elastic Container Service for Kubernetes | $4.64 |
| EC2 - Other | $2.62 |
| Amazon Virtual Private Cloud | $1.47 |
| Amazon GuardDuty | $0.60 |
| Amazon Elastic Load Balancing | $0.33 |
| AWS Key Management Service | $0.33 |
| AWS Cost Explorer | $0.16 |
| Amazon Simple Storage Service | $0.05 |
| Daily rate | $7.92/day |
| Monthly rate | $237.52/month |
| Annual rate | $2889.86/year |
| Total applied (6 months) | $1384.04 |
| Applied this month | $87.09 |
| Applied last month | $251.46 |
| Coverage | 100% covered |