2026-10-18
| Severity | Finding | Resource | Region |
|---|---|---|---|
| CRITICAL | Root account has active access keys | root | global |
| MEDIUM | Resources running in default VPC (vpc-04d8f9176dc741dec) in eu-west-1 | vpc-04d8f9176dc741dec | eu-west-1 |
| MEDIUM | VPC 'sept26-dev' (vpc-079289cdc24ae8d7f) has no flow logs enabled | vpc-079289cdc24ae8d7f | us-east-1 |
| MEDIUM | EC2 instance 'wefoundit-prod' (i-05d2778970da12fb1) has a public IP | i-05d2778970da12fb1 | eu-west-1 |
| MEDIUM | DynamoDB table 'safekeep-vault-meta' has no point-in-time recovery | safekeep-vault-meta | us-east-1 |
| MEDIUM | KMS key 005808d5-f37e-4c6b-9886-8b57157434dd is pending deletion | 005808d5-f37e-4c6b-9886-8b57157434dd | us-east-1 |
| MEDIUM | KMS key 09d1c33b-05d5-4f00-a546-16afa7f53848 is pending deletion | 09d1c33b-05d5-4f00-a546-16afa7f53848 | us-east-1 |
| LOW | Default NACL acl-0b6bbe48cf9917d9e allows all inbound (expected default behavior) | acl-0b6bbe48cf9917d9e | eu-west-1 |
| LOW | Default NACL acl-09aedb4360e2e5714 allows all inbound (expected default behavior) | acl-09aedb4360e2e5714 | us-east-1 |
| LOW | Default NACL acl-06f17b77a709de436 allows all inbound (expected default behavior) | acl-06f17b77a709de436 | us-east-1 |
| LOW | Lambda 'safekeep-vault-backup' has zero invocations in 30+ days | safekeep-vault-backup | us-east-1 |
| LOW | S3 bucket 'safekeep-vaults-185542457060' has no access logging | safekeep-vaults-185542457060 | global |
| LOW | S3 bucket 'wefoundit-media-eu' is intentionally public | wefoundit-media-eu | global |
| LOW | Security group 'k8s-elb-a9910fff3cf8c4bd49b5234ec1a1ece1' (sg-0327fb024967154aa) created outside IaC | sg-0327fb024967154aa | us-east-1 |
| Severity | Category | Violation | Resource |
|---|---|---|---|
| MEDIUM | tag | EBS Volume 'vol-09dab7bd8b64ecfbc' missing tags: Environment, Project, Owner, CostCenter, ManagedBy | vol-09dab7bd8b64ecfbc |
| MEDIUM | tag | EBS Volume 'vol-03d8a5ff138c0c253' missing tags: Environment, Project, Owner, CostCenter, ManagedBy | vol-03d8a5ff138c0c253 |
| MEDIUM | tag | EBS Volume 'vol-095439cecb39ac1aa' missing tags: Environment, Project, Owner, CostCenter, ManagedBy | vol-095439cecb39ac1aa |
| MEDIUM | tag | EBS Volume 'vol-013efe6ff2804d47c' missing tags: Environment, Project, Owner, CostCenter, ManagedBy | vol-013efe6ff2804d47c |
| MEDIUM | tag | EBS Volume 'vol-0a12bfbbcf015cf86' missing tags: Environment, Project, Owner, CostCenter, ManagedBy | vol-0a12bfbbcf015cf86 |
| MEDIUM | tag | Security Group 'sg-0327fb024967154aa' missing tags: Environment, Project, Owner, CostCenter, ManagedBy | sg-0327fb024967154aa |
| MEDIUM | tag | Security Group 'sg-00a8fcf758d4b5e18' missing tags: Project, Owner, CostCenter, ManagedBy | sg-00a8fcf758d4b5e18 |
| MEDIUM | cost | Service 'Kiro' exceeds cost threshold: $116.13/month | Kiro |
| LOW | tag | Security Group 'sg-00a8fcf758d4b5e18' has invalid Environment tag value | sg-00a8fcf758d4b5e18 |
| Month-to-date (gross) | $138.26 |
| Forecast (end of month) | $151.30 |
| Last month (gross) | $251.46 |
| Usage | $22.13 |
| Subscriptions | $116.13 |
| Net after credits | $-0.00 |
| Service | Cost |
|---|---|
| Kiro | $116.13 |
| Amazon Elastic Compute Cloud - Compute | $9.58 |
| Amazon Elastic Container Service for Kubernetes | $4.64 |
| EC2 - Other | $3.82 |
| Amazon Virtual Private Cloud | $2.27 |
| Amazon GuardDuty | $0.62 |
| AWS Key Management Service | $0.54 |
| Amazon Elastic Load Balancing | $0.33 |
| AWS Cost Explorer | $0.24 |
| Amazon Simple Storage Service | $0.09 |
| Daily rate | $7.68/day |
| Monthly rate | $230.43/month |
| Annual rate | $2803.52/year |
| Total applied (6 months) | $1435.21 |
| Applied this month | $138.26 |
| Applied last month | $251.46 |
| Coverage | 100% covered |