Dasnuve · Cloud Discovery

Scrivas — AWS Discovery Reports

Read-only assessment of the Scrivas AWS Organization (o-qfj0pvhhv7) — footprint, security posture, cost, and Organizations governance — extended with an EC2 source-code recovery and production reliability triage. Prepared to inform a proposal.

2 accounts · us-east-2 primary · generated 2026-08-19, EC2 code pass 2026-08-28 · CONFIDENTIAL

CODE + RELIABILITY

Source Code & Reliability Triage time-sensitive

All 10 application repos found as full git checkouts on Scrivas-owned EC2 — recoverable despite the contractor holding the GitLab. Plus the reliability triage: 23 prod containers on one host, no memory limits, no swap.

Open dashboard → FINDINGS

Discovery Findings

Resource footprint, security posture, cost baseline, and the CIS/SOC 2 benchmark summary.

Open dashboard → GOVERNANCE

Organizations Assessment

Delegated administrators, trust policies, and trusted access services across the org.

Open dashboard → BENCHMARK

Prowler Full Report needs internet

All 632 checks with per-framework compliance (CIS, SOC 2, ISO 27001, NIST, PCI). Interactive tables load styling from a CDN, so open this one online.

Open full benchmark →

Written report & raw evidence

discovery_report.md — narrative writeup (renders on GitHub)
ec2_code_discovery_report.md — code recovery + reliability triage (renders on GitHub)
findings/ec2_code_inspect.json — SSM probe output, all 7 instances
findings/ec2_code_inspect_prod.json — prod/stage probe snapshot
findings/org_assessment_report.json — org / trust / delegated-admin raw data
findings/fast_discovery.json — footprint, security, cost raw data
findings/member_lazka_547868853286.json — member account raw data

Confidential — private repo only. These reports contain AWS account IDs, role ARNs, external IDs, and live security findings for a prospective client. The large raw Prowler scans (*.ocsf.json, *.csv) are intentionally git-ignored; regenerate them with pipenv run prowler aws … if needed.