Alvaro Del Valle
3cce1fa61f
Read-only cloud discovery of the Scrivas AWS Organization (o-qfj0pvhhv7) to inform a proposal. - scripts/: boto3 org assessment, member-account assessment, fast discovery - findings/: self-contained HTML dashboards, written report, summary JSON, and the rendered Prowler benchmark report - docs/full_discovery_plan.md: phased full-discovery plan - index.html: landing page linking all reports - Pipfile/.python-version: reproducible pipenv env (Python 3.12.11) Large raw scans (OCSF JSON, CSV, compliance/) are git-ignored.
461 lines
12 KiB
JSON
461 lines
12 KiB
JSON
{
|
|
"generated": "2026-08-19T16:24:41.068499+00:00",
|
|
"payer_account": "716468089330",
|
|
"accounts": [
|
|
{
|
|
"account_id": "547868853286",
|
|
"name": "Lazka",
|
|
"active_regions": [
|
|
"us-east-1"
|
|
],
|
|
"enabled_region_count": 17,
|
|
"iam": {
|
|
"user_count": 0,
|
|
"users_without_mfa": 0,
|
|
"stale_keys_over_90d": [],
|
|
"password_policy": "none set",
|
|
"account_summary": {
|
|
"GroupPolicySizeQuota": 5120,
|
|
"InstanceProfilesQuota": 1000,
|
|
"Policies": 0,
|
|
"GroupsPerUserQuota": 10,
|
|
"InstanceProfiles": 0,
|
|
"AttachedPoliciesPerUserQuota": 10,
|
|
"Users": 0,
|
|
"PoliciesQuota": 1500,
|
|
"Providers": 0,
|
|
"AccountMFAEnabled": 0,
|
|
"AccessKeysPerUserQuota": 2,
|
|
"AssumeRolePolicySizeQuota": 2048,
|
|
"PolicyVersionsInUseQuota": 10000,
|
|
"GlobalEndpointTokenVersion": 1,
|
|
"VersionsPerPolicyQuota": 5,
|
|
"AttachedPoliciesPerGroupQuota": 10,
|
|
"PolicySizeQuota": 6144,
|
|
"Groups": 0,
|
|
"AccountSigningCertificatesPresent": 0,
|
|
"UsersQuota": 5000,
|
|
"ServerCertificatesQuota": 20,
|
|
"MFADevices": 0,
|
|
"UserPolicySizeQuota": 2048,
|
|
"PolicyVersionsInUse": 6,
|
|
"ServerCertificates": 0,
|
|
"Roles": 6,
|
|
"RolesQuota": 1000,
|
|
"SigningCertificatesPerUserQuota": 2,
|
|
"MFADevicesInUse": 0,
|
|
"RolePolicySizeQuota": 10240,
|
|
"AttachedPoliciesPerRoleQuota": 20,
|
|
"AccountAccessKeysPresent": 0,
|
|
"AccountPasswordPresent": 0,
|
|
"GroupsQuota": 300
|
|
},
|
|
"users": []
|
|
},
|
|
"census": {
|
|
"s3_buckets": 0,
|
|
"by_region": {
|
|
"us-east-1": {
|
|
"(empty)": true
|
|
}
|
|
}
|
|
},
|
|
"exposure": {
|
|
"public_buckets": [],
|
|
"open_security_groups": [],
|
|
"public_rds": []
|
|
},
|
|
"security_services": {
|
|
"cloudtrail": [
|
|
{
|
|
"name": "us-east-2",
|
|
"multi_region": true,
|
|
"org_trail": true,
|
|
"log_validation": true
|
|
}
|
|
],
|
|
"guardduty_findings_by_severity": {},
|
|
"securityhub": {
|
|
"us-east-1": "not enabled"
|
|
}
|
|
}
|
|
},
|
|
{
|
|
"account_id": "716468089330",
|
|
"name": "Scrivas Admin",
|
|
"active_regions": [
|
|
"us-east-1",
|
|
"us-east-2"
|
|
],
|
|
"enabled_region_count": 17,
|
|
"iam": {
|
|
"user_count": 10,
|
|
"users_without_mfa": 2,
|
|
"stale_keys_over_90d": [
|
|
"admin:***H7XN (322d)",
|
|
"admin:***5KWA (319d)",
|
|
"igor@devteamspace.com:***6YNU (316d)",
|
|
"scrivas-storage-user:***AXMK (161d)",
|
|
"Vasilii:***DFAO (147d)"
|
|
],
|
|
"password_policy": "none set",
|
|
"account_summary": {
|
|
"GroupPolicySizeQuota": 5120,
|
|
"InstanceProfilesQuota": 1000,
|
|
"Policies": 7,
|
|
"GroupsPerUserQuota": 10,
|
|
"InstanceProfiles": 3,
|
|
"AttachedPoliciesPerUserQuota": 10,
|
|
"Users": 10,
|
|
"PoliciesQuota": 1500,
|
|
"Providers": 1,
|
|
"AccountMFAEnabled": 1,
|
|
"AccessKeysPerUserQuota": 2,
|
|
"AssumeRolePolicySizeQuota": 2048,
|
|
"PolicyVersionsInUseQuota": 10000,
|
|
"GlobalEndpointTokenVersion": 1,
|
|
"VersionsPerPolicyQuota": 5,
|
|
"AttachedPoliciesPerGroupQuota": 10,
|
|
"PolicySizeQuota": 6144,
|
|
"Groups": 6,
|
|
"AccountSigningCertificatesPresent": 0,
|
|
"UsersQuota": 5000,
|
|
"ServerCertificatesQuota": 20,
|
|
"MFADevices": 13,
|
|
"UserPolicySizeQuota": 2048,
|
|
"PolicyVersionsInUse": 61,
|
|
"ServerCertificates": 0,
|
|
"Roles": 44,
|
|
"RolesQuota": 1000,
|
|
"SigningCertificatesPerUserQuota": 2,
|
|
"MFADevicesInUse": 10,
|
|
"RolePolicySizeQuota": 10240,
|
|
"AttachedPoliciesPerRoleQuota": 20,
|
|
"AccountAccessKeysPresent": 0,
|
|
"AccountPasswordPresent": 1,
|
|
"GroupsQuota": 300
|
|
},
|
|
"users": [
|
|
{
|
|
"user": "admin",
|
|
"mfa": true,
|
|
"keys": [
|
|
{
|
|
"id": "H7XN",
|
|
"status": "Active",
|
|
"age_days": 322,
|
|
"last_used": "2025-10-29T14:59:00+00:00"
|
|
},
|
|
{
|
|
"id": "5KWA",
|
|
"status": "Active",
|
|
"age_days": 319,
|
|
"last_used": "2025-10-05T09:36:00+00:00"
|
|
}
|
|
]
|
|
},
|
|
{
|
|
"user": "aksinya",
|
|
"mfa": true,
|
|
"keys": []
|
|
},
|
|
{
|
|
"user": "Azamat",
|
|
"mfa": true,
|
|
"keys": []
|
|
},
|
|
{
|
|
"user": "Dilbag",
|
|
"mfa": true,
|
|
"keys": []
|
|
},
|
|
{
|
|
"user": "gitlab-ci-ecr-push",
|
|
"mfa": false,
|
|
"keys": [
|
|
{
|
|
"id": "5Y4W",
|
|
"status": "Active",
|
|
"age_days": 62,
|
|
"last_used": "2026-08-18T17:18:00+00:00"
|
|
}
|
|
]
|
|
},
|
|
{
|
|
"user": "igor@devteamspace.com",
|
|
"mfa": true,
|
|
"keys": [
|
|
{
|
|
"id": "6YNU",
|
|
"status": "Active",
|
|
"age_days": 316,
|
|
"last_used": "2025-10-30T19:26:00+00:00"
|
|
}
|
|
]
|
|
},
|
|
{
|
|
"user": "louis",
|
|
"mfa": true,
|
|
"keys": [
|
|
{
|
|
"id": "RESB",
|
|
"status": "Active",
|
|
"age_days": 1,
|
|
"last_used": "2026-08-19T16:10:00+00:00"
|
|
}
|
|
]
|
|
},
|
|
{
|
|
"user": "scrivas-storage-user",
|
|
"mfa": false,
|
|
"keys": [
|
|
{
|
|
"id": "AXMK",
|
|
"status": "Active",
|
|
"age_days": 161,
|
|
"last_used": "2026-03-18T14:20:00+00:00"
|
|
}
|
|
]
|
|
},
|
|
{
|
|
"user": "Vasilii",
|
|
"mfa": true,
|
|
"keys": [
|
|
{
|
|
"id": "DFAO",
|
|
"status": "Active",
|
|
"age_days": 147,
|
|
"last_used": "2026-08-19T15:38:00+00:00"
|
|
}
|
|
]
|
|
},
|
|
{
|
|
"user": "Yegor",
|
|
"mfa": true,
|
|
"keys": []
|
|
}
|
|
]
|
|
},
|
|
"census": {
|
|
"s3_buckets": 9,
|
|
"by_region": {
|
|
"us-east-1": {
|
|
"(empty)": true
|
|
},
|
|
"us-east-2": {
|
|
"ec2_instances": 7,
|
|
"ebs_volumes": 9,
|
|
"ebs_unattached": 2,
|
|
"eips": 7
|
|
}
|
|
}
|
|
},
|
|
"exposure": {
|
|
"public_buckets": [],
|
|
"open_security_groups": [
|
|
{
|
|
"region": "us-east-2",
|
|
"group": "sg-0256d81b7afd54cf9",
|
|
"from_port": 80,
|
|
"to_port": 80,
|
|
"proto": "tcp"
|
|
},
|
|
{
|
|
"region": "us-east-2",
|
|
"group": "sg-0256d81b7afd54cf9",
|
|
"from_port": 443,
|
|
"to_port": 443,
|
|
"proto": "tcp"
|
|
},
|
|
{
|
|
"region": "us-east-2",
|
|
"group": "sg-09c07fdd8e013a9c0",
|
|
"from_port": 80,
|
|
"to_port": 80,
|
|
"proto": "tcp"
|
|
},
|
|
{
|
|
"region": "us-east-2",
|
|
"group": "sg-09c07fdd8e013a9c0",
|
|
"from_port": 443,
|
|
"to_port": 443,
|
|
"proto": "tcp"
|
|
},
|
|
{
|
|
"region": "us-east-2",
|
|
"group": "sg-09dff2d35b97ded21",
|
|
"from_port": 80,
|
|
"to_port": 80,
|
|
"proto": "tcp"
|
|
},
|
|
{
|
|
"region": "us-east-2",
|
|
"group": "sg-09dff2d35b97ded21",
|
|
"from_port": 443,
|
|
"to_port": 443,
|
|
"proto": "tcp"
|
|
},
|
|
{
|
|
"region": "us-east-2",
|
|
"group": "sg-00c13b6b4f05b6748",
|
|
"from_port": 3478,
|
|
"to_port": 3478,
|
|
"proto": "udp"
|
|
},
|
|
{
|
|
"region": "us-east-2",
|
|
"group": "sg-00c13b6b4f05b6748",
|
|
"from_port": 80,
|
|
"to_port": 80,
|
|
"proto": "tcp"
|
|
},
|
|
{
|
|
"region": "us-east-2",
|
|
"group": "sg-00c13b6b4f05b6748",
|
|
"from_port": 443,
|
|
"to_port": 443,
|
|
"proto": "tcp"
|
|
},
|
|
{
|
|
"region": "us-east-2",
|
|
"group": "sg-0621cd7244c8006b3",
|
|
"from_port": 80,
|
|
"to_port": 80,
|
|
"proto": "tcp"
|
|
},
|
|
{
|
|
"region": "us-east-2",
|
|
"group": "sg-0621cd7244c8006b3",
|
|
"from_port": 443,
|
|
"to_port": 443,
|
|
"proto": "tcp"
|
|
},
|
|
{
|
|
"region": "us-east-2",
|
|
"group": "sg-0823502d51c886ab1",
|
|
"from_port": 80,
|
|
"to_port": 80,
|
|
"proto": "tcp"
|
|
},
|
|
{
|
|
"region": "us-east-2",
|
|
"group": "sg-0823502d51c886ab1",
|
|
"from_port": 443,
|
|
"to_port": 443,
|
|
"proto": "tcp"
|
|
}
|
|
],
|
|
"public_rds": []
|
|
},
|
|
"security_services": {
|
|
"cloudtrail": [
|
|
{
|
|
"name": "us-east-2",
|
|
"multi_region": true,
|
|
"org_trail": true,
|
|
"log_validation": true
|
|
}
|
|
],
|
|
"guardduty_findings_by_severity": {
|
|
"us-east-1": {
|
|
"2.0": 4,
|
|
"5.0": 1,
|
|
"9.0": 1
|
|
},
|
|
"us-east-2": {
|
|
"8.0": 1,
|
|
"9.0": 1,
|
|
"2.0": 3,
|
|
"5.0": 6
|
|
}
|
|
},
|
|
"securityhub": {
|
|
"us-east-1": "enabled",
|
|
"us-east-2": "enabled"
|
|
}
|
|
},
|
|
"cost": {
|
|
"monthly_total": [
|
|
{
|
|
"month": "2026-01-01",
|
|
"total": 223.29
|
|
},
|
|
{
|
|
"month": "2026-02-01",
|
|
"total": 130.76
|
|
},
|
|
{
|
|
"month": "2026-03-01",
|
|
"total": 522.3
|
|
},
|
|
{
|
|
"month": "2026-04-01",
|
|
"total": 731.93
|
|
},
|
|
{
|
|
"month": "2026-05-01",
|
|
"total": 745.58
|
|
},
|
|
{
|
|
"month": "2026-06-01",
|
|
"total": 821.01
|
|
},
|
|
{
|
|
"month": "2026-07-01",
|
|
"total": 858.16
|
|
}
|
|
],
|
|
"top_services_6mo": [
|
|
{
|
|
"service": "Amazon Elastic Compute Cloud - Compute",
|
|
"cost": 2722.15
|
|
},
|
|
{
|
|
"service": "EC2 - Other",
|
|
"cost": 374.59
|
|
},
|
|
{
|
|
"service": "AWS WAF",
|
|
"cost": 364.0
|
|
},
|
|
{
|
|
"service": "AWS Security Hub",
|
|
"cost": 152.97
|
|
},
|
|
{
|
|
"service": "Amazon Virtual Private Cloud",
|
|
"cost": 116.52
|
|
},
|
|
{
|
|
"service": "AWS Config",
|
|
"cost": 84.34
|
|
},
|
|
{
|
|
"service": "Amazon GuardDuty",
|
|
"cost": 56.2
|
|
},
|
|
{
|
|
"service": "Amazon Elastic Container Service for Kubernetes",
|
|
"cost": 46.75
|
|
},
|
|
{
|
|
"service": "AWS CloudTrail",
|
|
"cost": 41.48
|
|
},
|
|
{
|
|
"service": "AmazonCloudWatch",
|
|
"cost": 21.42
|
|
},
|
|
{
|
|
"service": "AWS Key Management Service",
|
|
"cost": 15.18
|
|
},
|
|
{
|
|
"service": "Amazon Elastic Load Balancing",
|
|
"cost": 10.56
|
|
}
|
|
]
|
|
}
|
|
}
|
|
]
|
|
} |